WO2021083269A1 - Network traffic rate limiting method and device, central control equipment and gateways - Google Patents

Abstract

The present application provides a network traffic rate limiting method and device, a central control equipment and gateways. The method comprises: the central control equipment receiving a traffic warning sent by a first gateway in a rate limiting gateway cluster, acquiring the real-time bandwidth of a target service on various gateways of the rate limiting gateway cluster, and according to the current bandwidth quota of the target service on the first gateway and the real-time bandwidth on the various gateways as well as a pre-stored total bandwidth quota of the target service, updating the bandwidth quota of the target service on the various gateways of the rate limiting gateway cluster. In the method, upon the real-time bandwidth of a target service on any gateway of the rate limiting gateway cluster exceeds a specified bandwidth, a traffic warning is sent to the central control equipment in time, and the central control equipment re-allocates the bandwidth quota of each gateway according to the real-time bandwidth of the target service on the various gateways and the total bandwidth quota of the target service, so that the bandwidth quota of the various gateways matches the real-time bandwidth of the target service on the various gateways; thus, the method is more accurate in rate limiting of the target service.

Description

Speed limiting method, device, central control equipment and gateway of network traffic

This application claims the priority of a Chinese patent application filed with the Chinese Patent Office on October 29, 2019, the application number is 201911048394.7, and the invention title is "Network Traffic Rate Limiting Methods, Devices, Central Control Equipment, and Gateways". The entire contents of the Chinese patent application Incorporated in this application by reference.

Technical field

This application relates to the field of information technology, and in particular to a method, device, central control device, and gateway for limiting network traffic.

Background technique

In related technologies, the central control program uniformly allocates quota bandwidth to the speed-limiting gateways in the speed-limiting gateway cluster, and within a certain period of time, the speed-limiting gateway performs speed limit according to the allocated quota bandwidth. During the speed limit process, the speed limit gateway cluster usually also performs speed limit based on the tenant business granularity, so that the bandwidth occupied by the tenant business matches the bandwidth purchased by the tenant. The network traffic generated by the tenant business is usually hashed to one or more speed-limiting gateways for speed-limiting. The one or more speed-limiting gateways will be allocated a quota bandwidth for the tenant business, and the quota bandwidth will be used for speed limitation. The sum of the quota bandwidth of the tenant service in the one or more rate limiting gateways is the bandwidth purchased by the tenant.

However, if a tenant’s business generates a burst of network traffic at a certain moment, if the quota bandwidth of a certain rate-limiting gateway is quite different from the traffic hashed to the gateway, it is difficult for the rate-limiting gateway to adjust the quota bandwidth in time to respond to the bursty network traffic. As a result, the rate limiting bandwidth of the rate limiting gateway cluster for tenant services does not match the bandwidth purchased by the tenant, and the accuracy of the bandwidth rate limiting is poor.

Summary of the invention

The purpose of this application is to provide a method, device, central control device, and gateway for network traffic rate limiting. When a burst of network traffic occurs, the rate limiting gateway can adjust the quota bandwidth in time so that the quota bandwidth of each gateway is consistent with the target service. The real-time bandwidth of each gateway is matched, so that the traffic speed limit of the target business is more accurate.

In the first aspect, a method for speed limiting network traffic provided by this application is applied to a central control device. The method includes: receiving a traffic alarm sent by a first gateway in a speed limiting gateway cluster; wherein, the traffic alarm is used for Indication: the preset real-time bandwidth of the target service at the first gateway exceeds a predetermined ratio of the current quota bandwidth; obtain the real-time bandwidth of the target service at each gateway in the rate-limiting gateway cluster based on the traffic alarm; according to the target service The current quota bandwidth of the first gateway, the real-time bandwidth of the target service in the respective gateways, and the pre-stored total bandwidth of the quota of the target service, update each of the target service in the rate-limiting gateway cluster The quota bandwidth of the gateway.

In the second aspect, the method for limiting the rate of network traffic provided by the present application is applied to a gateway, and the gateway is configured to be able to receive a request message for a target service and/or send a response message sent by the target service, The gateway limits the rate of traffic of the target service based on the stored quota bandwidth, and the method includes: generating a traffic alarm when detecting that the real-time bandwidth of the target service exceeds a predetermined proportion of the current quota bandwidth; and alarming the traffic Send to the central control device that is in communication with the gateway; receive the updated quota bandwidth returned by the central control device, and limit the rate of the target service traffic according to the updated quota bandwidth.

In a third aspect, a network traffic rate limiting device provided by the present application is applied to a central control device, and the device includes: a first receiving module configured to receive traffic alarms sent by the first gateway in the rate limiting gateway cluster; wherein The traffic alarm is used to indicate: the real-time bandwidth of the preset target service at the first gateway exceeds a predetermined ratio of the current quota bandwidth; the first obtaining module is configured to obtain the target service at the rate limit based on the traffic alarm. The real-time bandwidth of each gateway in the gateway cluster; the update module is set to be based on the current quota bandwidth of the target service at the first gateway, the real-time bandwidth of the target service at the respective gateways, and the pre-stored target service To update the quota bandwidth of each gateway of the target service in the rate-limiting gateway cluster.

In a fourth aspect, a network traffic rate limiting device provided by the present application is set in a gateway, and the gateway is configured to be able to receive request messages for target services and/or send response messages sent by the target services, The gateway limits the rate of traffic of the target service based on the stored quota bandwidth, and the device includes: a generating module configured to generate a traffic alarm when detecting that the real-time bandwidth of the target service exceeds a predetermined proportion of the current quota bandwidth; The sending module is set to send the traffic alarm to the central control device that is in communication with the gateway; the second receiving module is set to receive the updated quota bandwidth returned by the central control device and follow the updated quota The bandwidth limits the rate of the traffic of the target service.

In a fifth aspect, a central control device provided by the present application includes a processor and a memory, and the memory stores machine-executable instructions that can be executed by the processor, and the processor executes the machine-executable instructions to The method for limiting the rate of network traffic described in the first aspect above is implemented.

In a sixth aspect, a gateway provided by the present application includes a processor and a memory, the memory stores machine-executable instructions that can be executed by the processor, and the processor executes the machine-executable instructions to implement the foregoing The method for limiting the rate of network traffic described in the second aspect.

In a seventh aspect, the present application provides a computer-readable storage medium that stores a computer program in the computer-readable storage medium, and when the computer program is executed by a processor, it implements any one of the foregoing network traffic rate limiting methods.

In an eighth aspect, the present application provides a computer program product containing instructions, which when running on a computer, causes the computer to execute any of the above-mentioned methods for limiting the rate of network traffic.

In a ninth aspect, the present application provides an executable program code, the executable program code is set to be executed to execute any one of the foregoing network traffic rate limiting methods.

The network traffic rate limiting method, device, central control device and gateway provided in this application firstly receive a traffic alarm sent by the first gateway in the rate limiting gateway cluster, and the traffic alarm indicates the real-time bandwidth of the preset target service at the first gateway Exceeding the predetermined ratio of the current quota bandwidth, then, based on the traffic alarm, obtain the real-time bandwidth of each gateway of the target service in the rate-limiting gateway cluster; finally, according to the current quota bandwidth of the target service in the first gateway, the target service The real-time bandwidth of each gateway and the pre-stored total bandwidth of the target service quota, update the quota bandwidth of each gateway of the target service in the rate-limiting gateway cluster, so that the traffic of the target service can be adjusted by each gateway according to the adjusted quota bandwidth Carry out speed limit. In this method, after the real-time bandwidth of the target service of any gateway in the speed-limiting gateway cluster exceeds the specified bandwidth, it sends traffic alarms to the central control device in time, and the central control device sends traffic alarms to the central control device according to the real-time bandwidth of each gateway to the target business and the target business’s real-time bandwidth. Quota total bandwidth, redistribute the quota bandwidth of each gateway, so that the quota bandwidth of each gateway matches the real-time bandwidth of the target service at each gateway, so as to limit the traffic rate of the target service more accurately.

Description of the drawings

In order to more clearly describe the technical solutions of the embodiments of the present application and related technologies, the following briefly introduces the drawings that need to be used in the embodiments and related technologies. Obviously, the drawings in the following description are only of the present application. For some embodiments, those of ordinary skill in the art can obtain other drawings based on these drawings without creative work.

FIG. 1 is a schematic diagram of a speed-limiting gateway cluster topology structure provided by an embodiment of the application;

2 is a flowchart of a method for limiting network traffic rate according to an embodiment of this application;

FIG. 3 is a schematic diagram of the overall architecture of a speed-limiting gateway cluster provided by an embodiment of this application;

4 is a flowchart of another method for limiting network traffic rate according to an embodiment of this application;

FIG. 5 is a flowchart of another method for limiting network traffic rate according to an embodiment of this application;

FIG. 6 is a schematic diagram of interaction between a first gateway, a central control device, and other gateways according to an embodiment of the application;

FIG. 7 is a schematic diagram of traffic in a rate-limiting gateway cluster provided by an embodiment of the application;

FIG. 8 is a flowchart of another method for limiting network traffic rate according to an embodiment of this application;

FIG. 9 is a flowchart of another method for limiting network traffic rate according to an embodiment of this application;

FIG. 10 is a flowchart of another method for limiting network traffic rate according to an embodiment of this application;

FIG. 11 is a schematic structural diagram of a device for limiting network traffic according to an embodiment of this application;

FIG. 12 is a schematic structural diagram of another device for limiting network traffic according to an embodiment of this application;

FIG. 13 is a schematic diagram of a central control device or gateway provided by an embodiment of this application.

Detailed ways

In order to make the purpose, technical solutions, and advantages of the present application clearer, the following further describes the present application in detail with reference to the accompanying drawings and embodiments. Obviously, the described embodiments are only a part of the embodiments of the present application, rather than all the embodiments. Based on the embodiments in this application, all other embodiments obtained by a person of ordinary skill in the art without creative work shall fall within the protection scope of this application.

The technical solutions of the present application will be clearly and completely described below in conjunction with the embodiments. Obviously, the described embodiments are a part of the embodiments of the present application, not all of the embodiments. Based on the embodiments in this application, all other embodiments obtained by those of ordinary skill in the art without creative work shall fall within the protection scope of this application.

In the current cloud computing network architecture, rate limiting is a general function. While ensuring the quality of service (QoS), it also charges tenants' network traffic. The speed limit function is usually deployed on the gateway in the form of software, and works in a cluster through centralized deployment.

See Figure 1 for a schematic diagram of a speed-limiting gateway cluster topology. The topology structure includes a traffic control node (Traffic Transaction, TC), an Internet Data Center (Internet Data Center, IDC), and a public network. The devices in multiple computer rooms in the same region are all connected to the public network through the traffic control node in the region. A flow control node includes a speed-limited service gateway (Serving GateWay, sgw for short) cluster, multiple uplink switches and multiple downlink switches. When a speed-limiting service gateway cluster is used for speed-limiting, it can also be called a speed-limiting gateway cluster. The speed-limiting gateway cluster can be represented by sgw cluster, and a single gateway can be represented by sgw. Each gateway is connected to the uplink switch and Between the downstream switches, all data packets (that is, traffic) entering and leaving the Internet data center computer room must pass through the rate-limiting gateway cluster. The uplink switch and the downlink switch will hash the traffic to the speed-limiting gateway cluster according to the five-tuple in the received data message, so as to ensure the load balance of the overall traffic of the cluster. Among them, the above five-tuple usually refers to the source IP address, source port, destination IP address, destination port, and transport layer protocol of the data message.

Tenants who have purchased cloud computing services can create services through the console of the cloud computing service provider and configure an elastic internet protocol (eip) or an elastic network address group (eip group) for their services. In the network address group, multiple flexible network addresses share a total network bandwidth. For the elastic network address or elastic network address group of a certain business, in order to ensure load balance, the outbound and inbound traffic of the business will be hashed to multiple speed-limiting gateways for speed-limiting processing, so each speed-limiting gateway in the cluster is required The speed limit is coordinated to ensure that the total speed limit of each speed limit gateway in the cluster does not exceed the bandwidth purchased by the tenant.

The related rate-limiting gateway cluster uses a central control (cctl) program to coordinate the bandwidth quota allocation strategy. Among them, the central control program is deployed on the central control device in a manner that every certain time T (for example, T is 5 seconds), the central control device collects data from each speed-limiting gateway in the speed-limiting gateway cluster through the central control program , Redistribute and push all bandwidth packages. The program mainly has the following problems:

Problem 1: There is a problem with the bandwidth allocation strategy of the central control program, which causes the tenant's traffic to exceed the purchased limit, which causes disadvantages and disputes for both parties (referring to the tenant and the cloud service provider). Specifically, the premise that the rate-limiting gateway discards the packet is that the current available token is 0 or the current allocated bandwidth is 0. If the bandwidth allocated by the rate-limiting gateway is 0, then within the period T, all incoming packets of the bandwidth group are discarded, which will cause a short period of time that will greatly damage the transmission efficiency of the tenant network. Therefore, in order to avoid the speed-limiting gateway's allocated bandwidth of 0 when the central control device is cold-started, the central control program adopts the strategy: set a single speed-limiting gateway to allocate bandwidth threshold lower limit as: the total bandwidth of the service/the number of speed-limiting gateways in the cluster (Denoted as N). Although this strategy guarantees the lower limit of the minimum bandwidth of a single rate-limiting gateway to avoid damaging the tenant’s network transmission efficiency, it easily causes the overall allocated bandwidth to exceed the total bandwidth of the service, causing the tenant’s traffic to exceed the purchased limit, and the excess fee will be harmful to both parties And disputes.

Problem 2: During the update cycle of the central control program, the bandwidth quota of each rate-limiting gateway is a fixed value. When sudden traffic occurs, the rate-limiting gateway cannot dynamically adjust the bandwidth quota according to the real-time traffic situation, which is not flexible. Specifically, the central control program updates the bandwidth quota of each rate-limiting gateway every time T. Therefore, during the period T, each rate-limiting gateway performs a fixed rate limit based on the allocated bandwidth. If a tenant has a sudden change in the period, Spontaneous network traffic will result in a large discrepancy between the traffic hashed to the cluster in this period and the bandwidth allocated by the current cluster, resulting in inaccurate speed limits.

Problem 3: As the network bandwidth increases, the speed-limiting gateway cluster will expand horizontally and increase the number of servers; at the same time, as the number of tenants increases and the bandwidth group configuration increases, the overall configuration of the cluster will also increase. The related central control program periodically refreshes the bandwidth quota method, which will face the increase of single processing delay, the increase of the delay of each pull of the full configuration, and the increase of out-of-band resources occupied by the control traffic. Therefore, This cluster speed limiting method is not applicable in future-oriented expansion.

Based on the foregoing, the embodiments of the present application first provide a method, device, central control device, and gateway for network traffic rate limiting. This technology can be applied to the network traffic rate limiting of central control devices and can also be applied to the network traffic limiting of gateway devices. Speed in.

First, refer to the flow chart of a method for speed limiting network traffic shown in Figure 2. This method can be applied to a central control device; the central control device can be a certain gateway in a speed limiting gateway cluster, or it can be an independent gateway. For a device other than the gateway in the rate-limiting gateway cluster, the above-mentioned Figure 1 takes the central control device as an example of a device other than the gateway in the rate-limiting gateway cluster for illustration; the method includes the following steps:

Step S202: Receive a traffic alarm sent by a first gateway in the rate-limiting gateway cluster; where the traffic alarm is used to indicate that the real-time bandwidth of the preset target service at the first gateway exceeds a predetermined ratio of the current quota bandwidth.

The above-mentioned target business can be understood as a collection of one or more programs running in the IDC computer room server cluster designated by the target tenant. For example: Company A purchases the services of cloud computing provider Company B, and deploys an application C developed by it in the server cluster of Company B. Among them, application C includes 3 sub-programs C1, C2, and C3. The total bandwidth purchased by the application C is M. In this case, the target tenant is A and the target business is C.

Tenants can create target services through the console, and the device corresponding to the console can communicate with the central control device; the tenant applies for an elastic network address or an elastic network address group for each target business, and purchases a certain amount of bandwidth for the target business ; Then, the data of the target business can realize the interaction with the public network. In the speed-limiting gateway cluster, the target business of the tenant will be used as the granularity for speed limiting. Between different target businesses, the speed limit logic is relatively independent and does not affect each other.

For any target business, in order to ensure maximum traffic load balance, the traffic of the target business is usually hashed into a rate-limiting gateway cluster. Multiple gateways in the rate-limiting gateway cluster will be allocated quotas for the target business. Bandwidth, and the quota bandwidth is used to limit the rate. The sum of the quota bandwidth of the target service in multiple gateways is the total bandwidth of the target service purchased; each gateway will also set the real-time bandwidth for the target service The bandwidth exceeds the preset ratio of the current quota bandwidth, and the preset ratio can be set according to tenant needs, such as 90%. It can be understood that when the quota bandwidth for the target service in the corresponding gateway is zero, the designated bandwidth is zero.

The foregoing first gateway may be any rate-limiting gateway in the rate-limiting gateway cluster. When the real-time bandwidth for the target service hashed to the first gateway in the cluster exceeds a predetermined ratio of the current quota bandwidth, the first gateway generates the foregoing The traffic alarm is sent to the central control device, where the traffic alarm can include at least the number of the first gateway, the number of the target service, the quota bandwidth of the target service at the first gateway, and the target service at the time when the traffic alarm is generated. The real-time bandwidth of a gateway; the number of the above-mentioned first gateway can be understood as that the speed-limiting gateway cluster usually includes multiple gateways. For the convenience of distinguishing management, a different number is set for each gateway; the number of the above-mentioned target service can be understood In order to differentiate and manage different target services, different numbers are set for different target services; the above-mentioned target service’s quota bandwidth at the first gateway can be understood as the bandwidth purchased by the tenant for the target service is hashed to the speed limit For multiple gateways in the gateway cluster, the bandwidth allocated at the first gateway is the quota bandwidth of the target service at the first gateway; the real-time bandwidth of the target service at the first gateway can be understood as the target service at the first gateway. A bandwidth corresponding to the actual traffic in the gateway.

Step S204: Obtain the real-time bandwidth of each gateway of the above-mentioned target service in the above-mentioned speed-limiting gateway cluster based on the above-mentioned traffic alarm.

After the central control device receives the traffic alarm information sent by the first gateway, in order to realize the re-quota of each gateway in the rate-limiting gateway cluster for the target service, the central control device sends an instruction to obtain the target service in the rate-limiting gateway cluster. Real-time bandwidth of other gateways in the

Step S206: According to the current quota bandwidth of the target service at the first gateway, the real-time bandwidth of the target service at each gateway, and the pre-stored total bandwidth of the target service quota, update the target service in the rate-limiting gateway cluster Quota bandwidth of each gateway.

Wherein, whether the first gateway is cold-started can be determined by judging the current quota bandwidth of the target service in the first gateway. Specifically, when the current quota bandwidth of the target service in the first gateway is greater than zero, the first gateway is in a non-cold start state; when the current quota bandwidth of the target service in the first gateway is equal to zero, the first gateway is in a cold start state . The above judgment result usually affects the subsequent target service quota bandwidth at each gateway. The real-time bandwidth of the aforementioned target service at each gateway can be used to calculate the total real-time bandwidth for the target service, and at the same time, it will also affect the subsequent quota bandwidth of the target service at each gateway.

The total quota bandwidth of the target service mentioned above is the bandwidth purchased by the tenant for the target service. The total quota bandwidth of the target service is compared with the total real-time bandwidth to determine whether the total real-time bandwidth of the target service exceeds the limit. This judgment result is also possible Affect the subsequent target service quota bandwidth at each gateway. According to the received real-time bandwidth of each gateway in the speed-limiting gateway cluster, the central control device can adjust the quota bandwidth of each gateway in the speed-limiting gateway cluster according to certain calculation rules, and feed it back to each gateway, and each gateway adjusts according to the received The latter quota bandwidth limits the rate of target service traffic.

According to an embodiment of this application, a method for limiting network traffic is first received a traffic alarm sent by a first gateway in a rate-limiting gateway cluster. The traffic alarm indicates that the real-time bandwidth of the preset target service at the first gateway exceeds the current quota bandwidth. Then, obtain the real-time bandwidth of each gateway of the target service in the rate-limiting gateway cluster based on the traffic alarm; finally, according to the current quota bandwidth of the target service in the first gateway, and the real-time bandwidth of the target service in each gateway Bandwidth, and the pre-stored total bandwidth of the target service quota, update the quota bandwidth of each gateway of the target service in the rate-limiting gateway cluster, so as to limit the target service traffic through each gateway according to the adjusted quota bandwidth. In this method, after the real-time bandwidth of the target service of any gateway in the speed-limiting gateway cluster exceeds the specified bandwidth, it sends traffic alarms to the central control device in time, and the central control device sends traffic alarms to the central control device according to the real-time bandwidth of each gateway to the target business and the target business’s real-time bandwidth. Quota total bandwidth, redistribute the quota bandwidth of each gateway, so that the quota bandwidth of each gateway matches the real-time bandwidth of the target service at each gateway, so as to limit the traffic rate of the target service more accurately.

The embodiment of the present application also provides another method for limiting the rate of network traffic, which is implemented on the basis of the method described in the above embodiment; this method focuses on the real-time acquisition of target services in the rate limiting gateway cluster based on traffic alarms. The specific implementation process of bandwidth.

In order to facilitate the understanding of the overall speed-limiting gateway cluster speed-limiting logic, an overall structure of the speed-limiting gateway cluster as shown in Figure 3 is provided; the overall structure is C/S (Client/Server, client/server) mode, running The client program (also called sgwagent program) on each gateway in the cluster communicates with the server program in the central control program running in the central control device, and is set to receive control plane messages; the client program is also deployed in The sgw data plane program on each gateway (including the monitoring program, configuration program and processing program in Figure 3) communicates to configure it. The central control program (including server program and calculation program) in Figure 3 can also be deployed on a certain gateway in the rate-limiting gateway cluster, or deployed on a server other than the gateway of the rate-limiting gateway cluster. The above-mentioned sgw data plane program deployed on the gateway contains four parts (for example, four threads), namely: a processing program for processing business speed limit logic (which can be in the form of multi-thread concurrency), and a periodic update quota for the processing program The configuration program monitors all business real-time threshold monitoring programs that exceed the limit and the client program that communicates with the central control program out-of-band management and control; among them, the processing program can be represented by handler, the configuration program can be represented by alloctor, and the monitoring program can be represented by monitor. The client program can be represented by client. The above-mentioned central control device and the running central control program usually consist of two parts: the server program that communicates with the gateway out-of-band management and control and the calculation program responsible for calculating quotas. Among them, the server program can be represented by server, and the calculation program can be represented by calculator. .

Based on the above-mentioned speed-limiting gateway cluster, as shown in Figure 4, the method for speed-limiting network traffic includes the following steps:

Step S402: Receive a traffic alarm sent by the first gateway in the rate-limiting gateway cluster; where the traffic alarm is used to indicate that the real-time bandwidth of the preset target service at the first gateway exceeds a predetermined ratio of the current quota bandwidth.

For the convenience of description, the target business is represented by the letter X. When a tenant creates a target business X through the console and purchases a total bandwidth of Mbps for the target business, the console corresponding to the server and the central control program installed The central control device communicates and sends the target service and its bandwidth information to the central control device and stores it. When the tenant changes the total bandwidth, the bandwidth information stored in the central control device can also be updated through the console. The control device communicates with each gateway in the speed-limiting gateway cluster through the installed central control program, and each gateway is provided with the sgwagent program, which is set to receive commands sent by the control terminal or central control program to achieve one-to-one Configure the corresponding sgw gateway data plane program; for the convenience of description, the total number of gateways in the speed-limiting gateway cluster is represented by N, and the quota bandwidth on each gateway can be represented as Qix, where i∈{1..N}, Represents the numbers of different gateways, and each gateway limits the rate of the elastic network address data packets in the target service X according to Qix.

In order to prevent the gateway from losing packets immediately when the actual bandwidth reaches the quota bandwidth Qix, feedback processing needs to be performed in advance, so a predetermined ratio threshold% needs to be initialized. The predetermined ratio can be set based on experience, such as 90%. If the quota bandwidth of the target service in the first gateway is greater than zero, a predetermined ratio needs to be set to ensure that when the real-time bandwidth of the target service at the first gateway exceeds the predetermined ratio of the current quota bandwidth, the first gateway can issue a traffic alarm; if The quota bandwidth of the target service in the first gateway is equal to zero, and no matter what the predetermined ratio is set to, as long as the real-time bandwidth of the target service in the first gateway is greater than zero, the first gateway will issue a traffic alarm.

At a certain time T1, the monitor of the first gateway sgw(i) monitors that the real-time bandwidth Rix value corresponding to X exceeds Qix*threshold%, that is, a traffic alarm is generated and reported to the central control device through the C/S end. The alarm can also be called report information, including the gateway number i(i∈{1..N}), target service X, target service X’s quota bandwidth at the gateway, and target service X’s real-time bandwidth at the gateway, namely [i,X,Qix,Rix], can also be represented by [sgw_id,eip_group_id,alloc_quota,real_bandwidth], where sgw_id represents the number of the gateway, eip_group_id represents the number of the flexible network address group, which is the number of the target business, alloc_quota Indicates the quota bandwidth in the configuration program, that is, the quota bandwidth of the target service at the gateway, and real_bandwidth indicates the real-time bandwidth of the target service at the gateway.

Step S404, after receiving the above-mentioned traffic alarm, extract the number of the above-mentioned target service from the traffic alarm.

Since the above-mentioned traffic alarm already contains the number of the target service, the central control device can extract the number X of the target service from the received above-mentioned traffic alarm through the central control program.

In step S406, based on the serial number of the target service, the request information for the real-time bandwidth of the target service is sent to gateways other than the first gateway in the rate-limiting gateway cluster.

After receiving the above traffic alarm, the central control device sends the target service corresponding to the number of the target service to other gateways sgw(j) (j∈N&j≠i) in the speed-limiting gateway cluster except the first gateway through the central control program The request information of the real-time bandwidth, which may also be called request information, includes the target service identifier X (X represents the number of the aforementioned target service) to collect the real-time bandwidth of the target service X.

Step S408: Receive real-time bandwidth for the target service returned by gateways other than the first gateway.

After each gateway except the first gateway receives the above request information, the monitoring program in the gateway reads the real-time bandwidth Rx of X, and through the communication between the client program in the gateway and the server program in the central control device Communication, the package response information (reply information) is sent back to the central control device, and the information includes X's real-time bandwidth Rx.

Step S410: According to the current quota bandwidth of the target service at the first gateway, the real-time bandwidth of the target service at each gateway, and the pre-stored total bandwidth of the target service quota, update the target service in each of the above-mentioned rate-limiting gateway clusters. The quota bandwidth of the gateway.

Another method for limiting the rate of network traffic provided by the embodiment of the present application describes in detail the process of obtaining the real-time bandwidth of each gateway of the target service in the rate limiting gateway cluster based on the traffic alarm, including extracting from the traffic alarm sent by the first gateway The number of the target service; based on the number, send request information for the real-time bandwidth of the target service to gateways other than the first gateway in the rate-limiting gateway cluster; receive the real-time bandwidth of the target service returned by the gateways other than the first gateway, Finally, according to the current quota bandwidth of the target service at the first gateway, the real-time bandwidth of the target service at each gateway, and the pre-stored total bandwidth of the target service quota, update the quota of the target service at each gateway in the rate-limiting gateway cluster Bandwidth, to limit the target service traffic through each gateway according to the adjusted quota bandwidth. In this method, after the real-time bandwidth of the target service of any gateway in the speed-limiting gateway cluster exceeds the specified bandwidth, it sends traffic alarms to the central control device in time, and the central control device sends traffic alarms to the central control device according to the real-time bandwidth of each gateway to the target business and the target business’s real-time bandwidth. Quota total bandwidth, redistribute the quota bandwidth of each gateway, so that the quota bandwidth of each gateway matches the real-time bandwidth of the target service at each gateway, so as to limit the traffic rate of the target service more accurately.

The embodiment of the present application also provides another method for limiting the rate of network traffic, which is implemented on the basis of the method described in the above embodiment; the method focuses on describing the current quota bandwidth of the target service at the first gateway, and the target service at each The real-time bandwidth of the gateway, as well as the total bandwidth of the pre-stored target service quota, and the specific implementation process of updating the quota bandwidth of each gateway of the target service in the rate-limiting gateway cluster, as shown in Figure 5, the method includes the following steps:

Step S502: Receive a traffic alarm sent by the first gateway in the rate-limiting gateway cluster; where the traffic alarm is used to indicate that the real-time bandwidth of the preset target service at the first gateway exceeds a predetermined ratio of the current quota bandwidth.

Step S504: Obtain the quota bandwidth of each gateway of the above-mentioned target service in the above-mentioned rate-limiting gateway cluster based on the above-mentioned traffic alarm.

With reference to the above-mentioned embodiment, the above-mentioned traffic alarm may include the quota bandwidth of each gateway of the target service in the above-mentioned speed-limiting gateway cluster. In S504, the quota bandwidth of each gateway of the above-mentioned target service in the above-mentioned speed-limiting gateway cluster can be obtained from the above-mentioned traffic alarm. .

After the central control device receives the traffic alarm information sent by the first gateway, in order to realize the re-quota of each gateway in the rate-limiting gateway cluster for the target service, the central control device sends an instruction to obtain the target service in the rate-limiting gateway cluster. The bandwidth of other gateways in the quota.

Step S506: Acquire the real-time bandwidth of each gateway of the above-mentioned target service in the above-mentioned speed-limiting gateway cluster based on the above-mentioned traffic alarm.

With reference to the foregoing embodiment, the foregoing traffic alarm may include the serial number of the foregoing target service, and the central control device may extract the serial number X of the target service from the received foregoing traffic alert through the central control program. The central control device sends the request information for the real-time bandwidth of the target service corresponding to the number of the target service to other gateways in the rate-limiting gateway cluster except the first gateway through the central control program.

After each gateway except the first gateway receives the above request information, the monitoring program in the gateway reads the real-time bandwidth Rx of X, and through the communication between the client program in the gateway and the server program in the central control device Communication, the package response information (reply information) is sent back to the central control device, and the information includes X's real-time bandwidth Rx. In this way, the central control device obtains the real-time bandwidth of each gateway in the above-mentioned speed-limiting gateway cluster.

Step S508: Extract the quota bandwidth of the target service at the first gateway from the traffic alarm sent by the first gateway.

Since the traffic alarm already includes the quota bandwidth of the target service at the first gateway, the central control device can extract the quota bandwidth Qix of the target service X at the first gateway sgw(i) from the received traffic alarm through the central control program.

Step S510: Determine whether the extracted quota bandwidth is greater than zero; then adjust the quota bandwidth of each gateway for the target service according to the result of the quota bandwidth judgment, the real-time bandwidth of the target service at each gateway, and the total quota bandwidth of the target service; If the extracted quota bandwidth is greater than zero, step S512 is executed; if the extracted quota bandwidth of the first gateway for the target service is equal to zero, step S524 is executed.

If the extracted quota bandwidth Qix of the target service X at the first gateway is equal to zero, it means that the first gateway is in a cold start state. The cold start state means that the current quota bandwidth of the target service X at the first gateway is zero. In the related method, even if the real-time bandwidth of the target service X in the cluster is less than the total bandwidth of the quota, the gateway will adopt a strategy of discarding all incoming traffic, which will cause the loss of tenant business data. In order to avoid the problem of tenant business data loss during cold start, in this embodiment, when the business traffic of the target task X arrives, a traffic alarm is sent to the central control device immediately, and the packet loss strategy is not adopted at the same time.

Step S512: Calculate the sum of the quota bandwidth of the target service in each gateway to obtain the total bandwidth of the quota of the target service by the rate-limiting gateway cluster.

After each gateway except the first gateway receives the request information sent by the central control device, the monitoring program in each gateway reads the quota bandwidth Qxi of the target service X, and the client program in the gateway communicates with the central control device. In the communication between the server programs in the device, the package response information (reply information) is sent back to the central control device, and the information includes the quota bandwidth Qxi of the target service X. The central control device can extract the quota bandwidth Qxi of each gateway for the target service from the response information. Then, calculate the sum of the quota bandwidth of the target service X at each gateway to obtain the total quota bandwidth of the rate-limiting gateway cluster for the target service X. In actual implementation, it can be expressed by ΣQxi, where i∈{1..N }.

Step S514: Determine whether the calculated total quota bandwidth is greater than the total quota bandwidth of the target service pre-stored in the central control device; and then adjust the quota of the target service in each gateway in the rate-limiting gateway cluster according to the judgment result of the total quota bandwidth Bandwidth; if the calculated total quota bandwidth is equal to or less than the stored quota total bandwidth, step S516 is executed; if the calculated total quota bandwidth is greater than the stored quota total bandwidth, step S520 is executed.

The total bandwidth of the target business quota pre-stored in the central control device is the total bandwidth Mbps purchased by the tenant for the target business X. For the convenience of description, it can be expressed by Mx, and the ΣQxi calculated in the above step is calculated as Mx. In comparison, if ΣQxi is equal to Mx, it means that the quota adjustment process after receiving the traffic alarm in the last round is adjusted and the rate is limited according to Mx; if ΣQxi is less than Mx, it means the quota adjustment process after receiving the traffic alarm in the previous round The total bandwidth of the quota is reduced. Therefore, this round of adjustment needs to be allocated according to the normal Mx; if ΣQxi is greater than Mx, it means that the quota adjustment process after the previous round of traffic alarms has overdrawn the quota bandwidth. This round of adjustment needs to reduce the total quota Bandwidth is used as compensation.

It should be noted that after receiving the traffic alarm in the last round, if the calculated real-time bandwidth does not exceed the total bandwidth of the quota, the quota adjustment process in the previous round is to limit the rate according to Mx; if the first gateway is judged to be non-cold Started state, and the real-time bandwidth exceeds the total quota bandwidth, the last round of quota adjustment process will reduce the total quota bandwidth; if it is judged that the first gateway is in the cold start state, and the real-time bandwidth exceeds the total quota bandwidth, the last round of quota adjustment The quota bandwidth will be overdrawn during the process.

Step S516: Calculate the sum of the real-time bandwidth of the aforementioned target service at each gateway, and obtain the real-time total bandwidth of the target service at the rate-limiting gateway cluster.

Calculate the sum of the real-time bandwidth of each gateway to the target service to obtain the real-time total bandwidth of the rate-limiting gateway cluster to the target service X. In actual implementation, the real-time total bandwidth can be expressed by Tx, then Tx=ΣRix,i∈{1 ..N}, where Rix is the real-time bandwidth of the gateway numbered i in the rate-limiting gateway cluster to the target service.

Step S518: For each gateway in the rate-limiting gateway cluster, adjust the quota bandwidth of the target service at the current gateway to: the ratio of the real-time bandwidth of the target service at the current gateway to the total real-time bandwidth of the target service, multiplied by The total bandwidth of the storage quota. Step S530 is executed.

After the central control device receives the response information of all the gateways, the calculation program in the central control program recalculates the rate-limiting gateway cluster quota, and the communication between the server program in the central control device and the client program in the gateway will encapsulate Response information (response information), that is, the corresponding calculation results of each gateway are sent back to each gateway one by one. The information includes the gateway number i (i∈{1..N}), the target service X, and the gateway's response to the target service X The recalculated quota bandwidth, namely [i,X,Qix(new)].

The specific adjustment method is as follows: For each gateway in the rate-limiting gateway cluster, the quota bandwidth of the target service X in the current gateway is adjusted to Qix(new)=Mx*(Rix/Tx), i∈{1..N}, Among them, Qix (new) represents the new bandwidth quota of the gateway numbered i, Rix is the real-time bandwidth of the target service X in the gateway numbered i in the rate-limiting gateway cluster, and Tx is the real-time total bandwidth of the target service. Mx is the quota total bandwidth of the target service.

The above formula Qix(new)=Mx*(Rix/Tx) can also be understood as the quota bandwidth of each gateway is allocated according to the real-time bandwidth ratio. For example: for target service X, the total bandwidth of the quota stored in the central control device is Mx=300Mbps, and the speed-limiting gateway cluster includes three gateways, numbered 1, 2, and 3 respectively, and the quota bandwidth of the three gateways is 100Mbps. , The threshold% is set to 90%. At a certain time T, the real-time bandwidth of the gateway numbered 1 for the target service is R1x=100Mbps, which exceeds the specified bandwidth of the gateway for the target service, that is, 100*90%=90Mbps , The traffic alarm is generated at this time, the real-time bandwidth of the gateways numbered 2 and 3 for the target service are both R2x=R3x=50Mbps, then the total real-time bandwidth is Tx=100+50+50=200Mbps, the total real-time bandwidth is less than Mx, This round of adjustment needs to be allocated according to the normal Mx. According to the above calculation method, after the central control program recalculates, adjust the quota bandwidth of the gateway number 1 to the target service X to Q1x(new)=300*(100/200 )=150Mbps; adjust the quota bandwidth of the gateways numbered 2 and 3 to the target service X to Q2x(new)=Q3x(new)=300*(50/200)=75Mbps, the adjusted total bandwidth of the quota=150 +75+75=300Mbps, which is the same as Mx.

After each gateway receives the response message, the configuration program in each gateway is updated to each processing program in the corresponding gateway. After a period of time, if the Rix of X does not reach the threshold Qix(new)*threshold%, the configuration program will periodically limit the quota rate according to Qix(new).

The above steps S516 and S518 illustrate the method of adjusting the quota bandwidth when the calculated total quota bandwidth is equal to or less than the total bandwidth of the stored quota; the following continues to describe when the calculated total bandwidth of the quota is greater than the pre-stored in the central control The adjustment method of the quota bandwidth when the total bandwidth of the target service quota in the device is used.

Step S520: Calculate the sum of the real-time bandwidth of the above-mentioned target service at each gateway, and obtain the real-time total bandwidth of the target service at the rate-limiting gateway cluster.

Calculate the sum of the real-time bandwidth of the target service at each gateway to obtain the real-time total bandwidth of the rate-limiting gateway cluster to the target service X. The total real-time bandwidth can be expressed by Tx, then Tx=ΣRix,i∈{1..N}, Among them, Rix is the real-time bandwidth of the gateway numbered i in the rate-limiting gateway cluster to the target service.

Step S522: For each gateway in the rate-limiting gateway cluster, adjust the quota bandwidth of the target service at the current gateway to: the difference between twice the stored quota total bandwidth and the real-time total bandwidth of the target service, multiplied by, The ratio of the real-time bandwidth of the target service at the current gateway to the total real-time bandwidth of the target service. Step S530 is executed.

For each gateway in the rate-limiting gateway cluster, adjust the quota bandwidth of the target service X in the current gateway to: Qix(new)=(2Mx-Tx)*(Rix/Tx), where Qix(new) represents the number Is the new bandwidth quota of the gateway of i; Rix is the real-time bandwidth of the target service in the gateway numbered i in the rate-limiting gateway cluster, and Tx is the real-time total bandwidth of the target service. Mx is the quota total bandwidth of the target service.

The total bandwidth obtained by adding up the new quotas of each gateway calculated according to the above formula will be less than Mx. The reduced amount is the same as the excess amount in the previous period, which is equivalent to using the bandwidth amount of the period to compensate The amount of bandwidth exceeded in the previous period.

As an example, for the target service X, the total bandwidth of the quota stored in the central control device is Mx=300Mbps, and the speed-limiting gateway cluster includes three gateways, numbered 1, 2, 3, and the quota bandwidths of the three gateways are respectively 0Mbps, 150Mbps and 150Mbps, the threshold% are all set to 90%. At time T, the real-time bandwidth of the three gateways are 50Mbps, 130Mbps and 130Mbps respectively. At this time, the real-time bandwidth of the gateway numbered 1 for the target service exceeds the gateway. For the designated bandwidth of the target service, that is, 0Mbps, a traffic alarm is generated at this time. The total real-time bandwidth at time T is Tx=50+130+130=310Mbps, the total real-time bandwidth is greater than Mx, and the excess is 10Mbps. This round of adjustment It is necessary to reduce the total bandwidth of the quota as compensation. According to the above calculation method, after the central control program recalculates, adjust the quota bandwidth of the gateway number 1 to the target service X to Q1x(new)=(2*300-310)*( 50/310)=46.77Mbps; adjust the quota bandwidth of the gateways numbered 2 and 3 to target service X to Q2x(new)=Q3x(new)=(2*300-310)*(130/310)= 121.61Mbps; the adjusted total bandwidth of the quota = 289.99Mbps≈290Mbps, which is less than Mx, and the reduced amount is 10Mbps, which is the same as the excess amount in the previous cycle, that is, the bandwidth amount of this cycle is used to compensate the previous The amount of bandwidth exceeded by the period.

After each gateway receives the response message, the configuration program in each gateway is updated to each processing program in the corresponding gateway. After a period of time, if the Rix of X does not reach the threshold Qix(new)*threshold%, the configuration program will periodically limit the quota rate according to Qix(new).

The above steps S512 to S522 illustrate that when the quota bandwidth of the target service for the first gateway extracted from the traffic alarm sent by the first gateway is greater than zero, the quota bandwidth adjustment method; The adjustment method of the quota bandwidth of the target service extracted from the sent traffic alarm when the quota bandwidth of the first gateway is equal to zero.

Step S524: Calculate the sum of the real-time bandwidth of the above-mentioned target service at each gateway, and obtain the real-time total bandwidth of the speed-limiting gateway cluster for the target service.

Calculate the sum of the real-time bandwidth of the target service at each gateway to obtain the real-time total bandwidth of the rate-limiting gateway cluster to the target service X. The total real-time bandwidth can be expressed by Tx, then Tx=ΣRix,i∈{1..N} , Where Rix is the real-time bandwidth of the gateway numbered i in the rate-limiting gateway cluster for the target service.

Step S526: It is judged whether the total real-time bandwidth is greater than the total quota bandwidth of the target service pre-stored in the central control device; if it is greater, step S528 is executed; if it is not greater, step S516 is executed.

In step S528, for each gateway in the rate-limiting gateway cluster, the quota bandwidth of the target service at the current gateway is adjusted to: the real-time bandwidth of the target service at the current gateway.

When Tx>Mx, adjust the quota bandwidth of each gateway according to the real-time bandwidth of each gateway. During the adjustment period corresponding to this traffic alarm, the total quota bandwidth of each gateway is excessive; however, it can ensure that the tenant's burst traffic can be successfully passed.

However, in the adjustment period corresponding to the next traffic alarm, when comparing Tx and Mx, the total quota bandwidth of each gateway will exceed the quota. At this time, the quota bandwidth of the gateway will be adjusted according to the formula in step S522, that is, the total quota bandwidth will be reduced. Bandwidth is used to compensate for the excess bandwidth in the previous period. Through this overdraft method, the real-time total bandwidth of the system for the target business X is always maintained at Mx; the cold start processing of quota 0 adopts the method of overdrafting the quota for the next period to ensure The rate-limiting bandwidth remains Mx in the overall time distribution. Considering that the overall positive feedback process is completed quickly (for example, it can be completed within a second), the instantaneous cold processing excess probability is extremely low and the impact is small.

In step S530, the rate of the target service traffic is limited by each gateway according to the adjusted quota bandwidth.

The following describes the response time when the above-mentioned network traffic rate limiting method is adopted, as shown in Figure 6 for the interaction diagram of the first gateway, the central control device and other gateways; the interaction process includes the following steps 1-4:

Step 1: At a certain time T1, in the rate-limiting gateway cluster, when the real-time bandwidth of the target service in the first gateway exceeds the specified bandwidth, the first gateway sends a traffic alarm (also called report information) to the central control device ；

Step 2: After receiving the above traffic alarm, the central control device sends request information for the real-time bandwidth and quota bandwidth of the target service X to other gateways in the rate-limiting gateway cluster except the first gateway through the central control program. For request information).

Step 3: After other gateways receive the request information sent by the central control device, the monitoring program in each gateway reads the quota bandwidth Qx of X, and passes between the client program in the gateway and the server program in the central control device In the communication, the package response message (also called reply message) is sent back to the central control device.

Step 4: After the central control device receives the response information of all the gateways, the calculation program in the central control program recalculates the rate-limiting gateway cluster quota, through the communication between the server program in the central control device and the client program in the gateway , The encapsulated response information (also called response information), that is, the corresponding calculation result of each gateway is sent back to each gateway one by one.

Among them, the sum of the time delays of each step marked in FIG. 6 is the single positive feedback response time delay. Among them, calculation delay and update delay are several steps of computer instructions, and the delay can be ignored; processing delay 1 and processing delay 2 all include remote communication delay. Figure 7 shows a schematic diagram of the traffic in the rate-limiting gateway cluster; among them, the business traffic of the tenant passes between each gateway in the rate-limiting gateway cluster and the uplink switch and the downlink switch; the gateway, the management switch and the central control equipment The communication is carried out through the out-of-band management network port. The communication method of the out-of-band management network port uses a physical channel different from the business data information to transmit management control information. The two are independent of each other and do not affect each other. Therefore, the communication between the gateway and the central control device The communication delay can also be ignored.

In contrast, the following provides a method for limiting network traffic in related technologies. In order to cope with a cold start, during the periodical quota allocation process of the central control device, the minimum quota for each gateway is guaranteed to be M*(1/N). Taking the cluster containing 5 gateways as an example, if Ri is [M,0,0,0,0] at a certain moment, the allocation result is [M,M/5,M/5,M/5,M/5], The total bandwidth reaches M*(9/5), which is over-provisioned to 180%. This means that in its next cycle, the rate will be limited by 180% of the quota, which will directly cause adverse consequences. As the network bandwidth increases, the speed-limiting gateway cluster will expand horizontally and increase the number of servers; at the same time, as the number of tenants and bandwidth group configurations increase, the overall configuration of the cluster will also increase. The original method of periodically refreshing quotas for central control equipment will face an increase in single processing delay, each time the full configuration is pulled, the delay will increase, and the out-of-band resources occupied by the control traffic will increase. This cluster speed limiting method is not applicable in future-oriented expansion.

The method in the above embodiment proposes three different adjustment methods according to different conditions: In the case of non-cold start, if the real-time bandwidth exceeds the total bandwidth of the quota, the total bandwidth of the quota will be reduced in this period to compensate for the increase. Excess bandwidth in one period; if the real-time bandwidth does not exceed the total quota bandwidth, the total quota bandwidth is allocated according to the proportion of the real-time bandwidth to ensure that the adjusted quota bandwidth matches the real-time bandwidth. In the case of cold start, if the real-time bandwidth exceeds the total bandwidth of the quota, the bandwidth quota for the next period will be overdrawn to ensure that the traffic can pass through; in the next traffic alarm period, the bandwidth quota will be reduced to compensate for the excess bandwidth in the previous period ; If the real-time bandwidth is not greater than the total quota bandwidth, the total quota bandwidth is allocated according to the proportion of the real-time bandwidth to ensure that the adjusted quota bandwidth matches the real-time bandwidth.

As an example, for the target service X, the total bandwidth of the quota stored in the central control device is Mx=300Mbps, and the speed-limiting gateway cluster includes three gateways, numbered 1, 2, 3, and the quota bandwidths of the three gateways are respectively 0Mbps, 150Mbps and 150Mbps, the threshold% is set to 90%. At time T, the real-time bandwidth of the three gateways are 0Mbps, 135Mbps and 135Mbps respectively. At this time, the real-time bandwidth of the target service X in the gateways numbered 2 and 3 reaches The designated bandwidth of the gateway for the target service is 150*90%=135Mbps. At this time, a traffic alarm is generated. The total real-time bandwidth at time T is Tx=0+135+135=270Mbps, and the total real-time bandwidth is less than Mx. The round adjustment needs to be allocated according to the normal Mx. According to the calculation method of the above step S516, after the central control program recalculates, the quota bandwidth of the target service X at the gateway number 1 is adjusted to Q1x(new)=300*(0 /270) = 0Mbps; adjust the quota bandwidth of the target service X at the gateways numbered 2 and 3 to Q2x(new)=Q3x(new)=300*(135/270)=150Mbps, the adjusted total bandwidth of the quota =0+150+150=300Mbps, which is the same as Mx.

Another method for limiting the rate of network traffic provided by the embodiment of this application describes in detail the steps of adjusting the quota bandwidth of the target service in each gateway according to the bandwidth of the target service in each gateway in the rate limiting gateway cluster. According to different conditions, Provides the corresponding calculation method for adjusting the quota bandwidth. This method can match the quota bandwidth of each gateway with the real-time bandwidth of the target service at each gateway, so that the flow rate limit of the target service is more accurate.

The embodiment of the present application also provides another method for limiting the rate of network traffic. The method focuses on the initial allocation process of the quota bandwidth for the target service after the target service is created; as shown in FIG. 8, the method includes the following steps:

Step S802: Set an initial quota bandwidth for the target service for each gateway in the rate-limiting gateway cluster according to the total quota bandwidth of the target service; where the initial quota bandwidth is equal to the total quota bandwidth of the target service and the rate-limiting gateway cluster. The ratio of the total number of gateways.

For the convenience of description, the total number of gateways in the speed-limiting gateway cluster is denoted by N. Through the sgwagent program deployed on each gateway, the quota of the target service X on the corresponding gateway is initialized. The initial quota is It is the average score M/N bps.

Step S804: Receive a traffic alarm sent by the first gateway in the rate-limiting gateway cluster; where the traffic alarm is used to indicate that the real-time bandwidth of the preset target service at the first gateway exceeds a predetermined ratio of the current quota bandwidth.

Step S806: Obtain the real-time bandwidth of each gateway of the above-mentioned target service in the rate-limiting gateway cluster based on the above-mentioned traffic alarm.

Step S808, according to the current quota bandwidth of the target service at the first gateway, the real-time bandwidth of the target service at each gateway, and the pre-stored total quota bandwidth of the target service, update each gateway of the target service in the rate-limiting gateway cluster The quota bandwidth is used to limit the traffic of the target service through each gateway according to the adjusted quota bandwidth.

According to the method for limiting the network traffic rate provided by the embodiment of this application, when a tenant creates a new target service and purchases bandwidth for the target service, firstly, according to the purchased bandwidth and the number of gateways in the rate limiting gateway cluster, The gateway sets the initial bandwidth quota so that each gateway can limit the rate of elastic network address data packets in the target service according to the initial bandwidth quota. After receiving the traffic alarm sent by the first gateway in the cluster, according to the bandwidth information of each gateway , Adjust the quota bandwidth of each gateway for the target service, so that the traffic of the target service is limited by each gateway according to the adjusted quota bandwidth. In this method, after the real-time bandwidth of the target service of any gateway in the rate-limiting gateway cluster exceeds the specified bandwidth, it is reported back in time, and each gateway pair is adjusted according to the feedback information of the gateway and the relevant information of the target service of the other gateways. The quota bandwidth of the target service. When there is a sudden network traffic, the quota bandwidth can be adjusted in time through this process, thereby improving the accuracy of the bandwidth speed limit of the rate limiting gateway.

The embodiment of the present application also provides another method for limiting the rate of network traffic, which can be applied to a gateway configured to receive a request message for a target service and/or send a response message sent by the target service, The gateway limits the target service traffic based on the stored quota bandwidth; as shown in Figure 9; the method includes the following steps:

Step S902: When it is detected that the real-time bandwidth of the target service exceeds a predetermined proportion of the current quota bandwidth, a traffic alarm is generated.

The traffic of the target business can be outbound traffic, that is, sent from the Internet data center computer room to the public network, or inbound traffic, that is, sent from the public network to the Internet data center computer room; specifically, when it is outbound traffic, the target business traffic Hash from the Internet data center computer room through the downstream switch to the speed-limiting gateway cluster. After the cluster rate is limited, it is sent to the public network through the upstream switch; when it is inbound traffic, the target business traffic is scattered from the public network through the upstream switch Listed to the speed limit gateway cluster, after the cluster speed limit, and then sent to the Internet data center computer room through the downstream switch.

When the real-time bandwidth corresponding to the traffic of the detected target service exceeds the predetermined ratio of the current quota bandwidth, a traffic alarm is generated.

Step S904: Send the above-mentioned traffic alarm to the central control device in communication connection with the above-mentioned gateway.

Step S906: Receive the updated quota bandwidth returned by the above-mentioned central control device, and limit the rate of the traffic of the above-mentioned target service according to the updated quota bandwidth.

Among them, for the process that the gateway limits the rate of the target service traffic based on the stored quota bandwidth, the following steps 90-91 can be used to implement:

Step 90: If the quota bandwidth is not zero, discard the received message within a time period after the real-time bandwidth of the target service exceeds the current quota bandwidth.

If the quota bandwidth of the target service in the designated gateway is not zero, when the real-time bandwidth of the target service exceeds the quota bandwidth of the target service in the designated gateway, the designated gateway will discard the received report during the period. In order to limit the speed of the target business and control the efficiency of network transmission.

Step 91: If the quota bandwidth is zero, the received message is not discarded in the time period after the real-time bandwidth of the target service exceeds the current quota bandwidth.

If the quota bandwidth of the target service in the designated gateway is zero, when the real-time bandwidth of the target service exceeds the quota bandwidth of the target service in the designated gateway, the designated gateway will not discard the received report during the period. It allows all packets corresponding to the real-time bandwidth of the target service to pass, and compensates for the excess bandwidth during the next round of quota adjustment.

An embodiment of the present application provides a method for limiting the rate of network traffic. When it is detected whether the real-time bandwidth corresponding to the traffic of the target service exceeds a predetermined ratio of the current quota bandwidth, a traffic alarm is generated, and the traffic alarm is sent to the communication connection with the gateway The central control device; receives the updated quota bandwidth returned by the central control device, and limits the traffic of the target service according to the updated quota bandwidth. In this method, after the real-time bandwidth of the target service of any gateway in the speed-limiting gateway cluster exceeds the specified bandwidth, it sends traffic alarms to the central control device in time, and the central control device sends traffic alarms to the central control device according to the real-time bandwidth of each gateway to the target business and the target business’s real-time bandwidth. Quota total bandwidth, redistribute the quota bandwidth of each gateway, so that the quota bandwidth of each gateway matches the real-time bandwidth of the target service at each gateway, so as to limit the traffic rate of the target service more accurately.

The embodiment of the present application also provides another method for limiting the rate of network traffic. The method focuses on the process of obtaining the real-time bandwidth of the target service by the central control device. As shown in FIG. 10, the method includes the following steps:

In step S1002, when it is detected that the real-time bandwidth of the target service exceeds a predetermined proportion of the current quota bandwidth, a traffic alarm is generated.

In actual implementation, a predetermined ratio threshold% can be initialized. The predetermined ratio can be set based on experience, such as 90%. If the quota bandwidth of the target service in the gateway is greater than zero, a predetermined ratio needs to be set. In order to ensure that the real-time bandwidth of the target service at the gateway exceeds the preset ratio of the current quota bandwidth, the gateway can issue a traffic alarm; if the quota bandwidth of the target service in the gateway is equal to zero, no matter what the preset ratio is set, as long as the target service is in the gateway If the real-time bandwidth is greater than zero, the gateway will issue a traffic alarm. .

Step S1004: Send the above-mentioned traffic alarm to the central control device in communication connection with the above-mentioned gateway. Step S1006: Receive the updated quota bandwidth returned by the above-mentioned central control device, and limit the rate of the target service traffic according to the updated quota bandwidth.

Step S1008: If the request information for the real-time bandwidth of the target service sent by the central control device is received, the real-time bandwidth of the target service is returned to the central control device.

After the central control device receives the traffic alarm information of the gateway, it usually needs the real-time bandwidth information of other gateways in the speed-limiting gateway cluster for the target service. Therefore, the central control device will remove the first one from the speed-limiting gateway cluster through the central control program. Gateways other than the gateway send request information for the real-time bandwidth of the target service X, and the information includes the target service identifier X to collect the real-time bandwidth of the target service X.

When the other gateways in the speed-limiting gateway cluster receive the above request information, the monitoring program in the gateway reads the real-time bandwidth Rx of X, and through the communication between the client program in the gateway and the server program in the central control device , Send the package response information back to the central control device, the information includes Rx.

An embodiment of the present application provides a method for limiting the rate of network traffic. When it is detected whether the real-time bandwidth corresponding to the traffic of the target service exceeds a predetermined ratio of the current quota bandwidth, a traffic alarm is generated, and the traffic alarm is sent to the communication connection with the gateway The central control device; when receiving the request information for the real-time bandwidth of the target service sent by the central control device, the real-time bandwidth of the target service is returned to the central control device to adjust the gateway’s quota bandwidth for the target service through the central control device ; And according to the adjusted quota bandwidth to limit the target business traffic. In this method, after the real-time bandwidth of the target service of any gateway in the speed-limiting gateway cluster exceeds the specified bandwidth, it sends traffic alarms to the central control device in time, and the central control device sends traffic alarms to the central control device according to the real-time bandwidth of each gateway to the target business and the target business’s real-time bandwidth. Quota total bandwidth, redistribute the quota bandwidth of each gateway, so that the quota bandwidth of each gateway matches the real-time bandwidth of the target service at each gateway, so as to limit the traffic rate of the target service more accurately.

Corresponding to the above method embodiment, refer to the schematic structural diagram of a network traffic rate limiting device shown in FIG. 11. The device is set in the central control device, and the device includes: a first receiving module 110 configured to receive the rate limiting gateway cluster The traffic alarm sent by the first gateway in the first gateway; where the traffic alarm is used to indicate: the real-time bandwidth of the preset target service at the first gateway exceeds a predetermined ratio of the current quota bandwidth; the first obtaining module 111 is set to obtain the target service based on the traffic alarm The real-time bandwidth of each gateway in the rate-limiting gateway cluster; the update module 112 is set to update according to the current quota bandwidth of the target service at the first gateway, the real-time bandwidth of the target service at each gateway, and the pre-stored total bandwidth of the target service quota The target service is the quota bandwidth of each gateway in the rate-limiting gateway cluster.

The above-mentioned network traffic rate limiting device first receives a traffic alarm sent by the first gateway in the rate limiting gateway cluster. The traffic alarm indicates that the real-time bandwidth of the preset target service at the first gateway exceeds a predetermined proportion of the current quota bandwidth, and then, based on the Traffic alarms obtain the real-time bandwidth of each gateway of the target service in the rate-limiting gateway cluster; finally, according to the current quota bandwidth of the target service in the first gateway, the real-time bandwidth of the target service in each gateway, and the pre-stored target The total quota bandwidth of the service is updated to update the quota bandwidth of each gateway of the target service in the rate-limiting gateway cluster, so as to limit the traffic of the target service through each gateway according to the adjusted quota bandwidth. In this method, after the real-time bandwidth of the target service of any gateway in the rate-limiting gateway cluster exceeds the specified bandwidth, it sends traffic alarms to the central control device in time. The central control device sends traffic alarms to the central control device according to the real-time bandwidth of each gateway to the target business and the target business’s real-time bandwidth. Quota total bandwidth, redistribute the quota bandwidth of each gateway, so that the quota bandwidth of each gateway matches the real-time bandwidth of the target service at each gateway, so as to limit the traffic rate of the target service more accurately.

Further, the traffic alarm includes at least: the number of the first gateway, the number of the target service, the quota bandwidth of the target service at the first gateway, and the real-time bandwidth of the target service at the first gateway when the traffic alarm is generated.

Further, the first obtaining module 111 is further configured to: after receiving the traffic alarm, extract the target service number from the traffic alarm; based on the target service number, send the pair to the rate-limiting gateway cluster, except for the first gateway. Real-time bandwidth request information of the target service; receiving the real-time bandwidth of the target service returned by gateways other than the first gateway.

Further, the update module 112 is further configured to: extract the quota bandwidth of the target service at the first gateway from the traffic alarm sent by the first gateway; determine whether the extracted quota bandwidth is greater than zero; according to the result of the quota bandwidth judgment, the target service is The real-time bandwidth of each gateway and the total bandwidth of the quota of the target service are adjusted to adjust the bandwidth of each gateway's quota of the target service.

Further, the device further includes: a second obtaining module (not shown in the figure), configured to obtain the quota bandwidth of each gateway of the target service in the rate-limiting gateway cluster based on the traffic alarm;

The above-mentioned update module 112 is also set to: if the quota bandwidth of the target service at the first gateway is greater than zero, calculate the sum of the quota bandwidth of the target service at each gateway to obtain the total quota bandwidth of the target service by the rate-limiting gateway cluster; Whether the total quota bandwidth is greater than the total quota bandwidth of the target service pre-stored in the central control device; according to the judgment result of the total quota bandwidth, adjust the quota bandwidth of each gateway of the target service in the rate-limiting gateway cluster.

Further, the above-mentioned update module 112 is further configured to: if the calculated total quota bandwidth is equal to or less than the stored quota total bandwidth, calculate the total real-time bandwidth of the target service at each gateway to obtain the real-time total bandwidth of the target service at the rate-limiting gateway cluster. Bandwidth; For each gateway in the rate-limiting gateway cluster, adjust the quota bandwidth of the target service at the current gateway to: the ratio of the real-time bandwidth of the target service at the current gateway to the total real-time bandwidth of the target service, multiplied by the total bandwidth of the storage quota .

Further, the above-mentioned update module 112 is further configured to: if the calculated total bandwidth of the quota is greater than the total bandwidth of the stored quota, calculate the sum of the real-time bandwidth of the target service at each gateway to obtain the real-time total bandwidth of the target service at the rate-limiting gateway cluster; For each gateway in the rate-limiting gateway cluster, adjust the quota bandwidth of the target service at the current gateway to: the difference between twice the total bandwidth of the stored quota and the real-time total bandwidth of the target service, multiplied by the target service at the current gateway The ratio of the real-time bandwidth of the target service to the total real-time bandwidth of the target service.

Further, the above-mentioned update module 112 is also set to: if the quota bandwidth of the target service at the first gateway is equal to zero, calculate the sum of the real-time bandwidth of the target service at each gateway to obtain the real-time total bandwidth of the speed-limiting gateway cluster for the target service; Whether the total bandwidth is greater than the total quota bandwidth of the target service pre-stored in the central control device; if it is greater, for each gateway in the rate-limiting gateway cluster, adjust the quota bandwidth of the target service at the current gateway to: the target service at the current gateway Real-time bandwidth.

Further, the above-mentioned device further includes: a setting module (not shown in the figure), which is set to set the initial quota bandwidth for the target service for each gateway in the rate-limiting gateway cluster according to the total quota bandwidth of the target service; The quota bandwidth of is equal to the ratio of the total quota bandwidth of the target service to the total number of gateways in the rate-limiting gateway cluster.

Refer to the schematic structural diagram of another network traffic rate limiting device shown in FIG. 12. The device is set in a gateway, and the gateway is configured to receive request messages for target services and/or send response messages from target services. The gateway limits the traffic of the target service based on the stored quota bandwidth. The device includes: a generating module 120 configured to generate a traffic alarm when it detects that the real-time bandwidth of the target service exceeds a predetermined ratio of the current quota bandwidth; a sending module 121. Set to send traffic alarms to the central control device in communication with the gateway; the second receiving module 122 is set to receive the updated quota bandwidth returned by the central control device, and the traffic of the target service according to the updated quota bandwidth Carry out speed limit.

The above-mentioned network traffic rate limiting device, when detecting whether the real-time bandwidth corresponding to the target service traffic exceeds a predetermined proportion of the current quota bandwidth, generates a traffic alarm, and sends the traffic alarm to the central control device communicating with the gateway; receiving Control the updated quota bandwidth returned by the device, and limit the target service traffic according to the updated quota bandwidth. In this device, after the real-time bandwidth of the target service of any gateway in the speed-limiting gateway cluster exceeds the specified bandwidth, it sends traffic alarms to the central control device in time. The central control device sends traffic alarms to the central control device according to the real-time bandwidth of each gateway to the target business and the target business’s real-time bandwidth. Quota total bandwidth, redistribute the quota bandwidth of each gateway, so that the quota bandwidth of each gateway matches the real-time bandwidth of the target service at each gateway, so as to limit the traffic rate of the target service more accurately.

Further, the gateway is also set to: if the quota bandwidth is not zero, the received message will be discarded within the time period after the real-time bandwidth of the target service exceeds the current quota bandwidth; if the quota bandwidth is zero, the target In the time period after the real-time bandwidth of the service exceeds the current quota bandwidth, the received packets are not discarded.

Further, the above-mentioned device further includes: a return module (not shown in the figure), configured to return the real-time bandwidth of the target service to the central control device if it receives request information for the real-time bandwidth of the target service sent by the central control device.

The embodiment of the present application also provides a central control device and a gateway. As shown in FIG. 13, the central control device or gateway includes a processor 130 and a memory 131. The memory 131 stores a machine executable that can be executed by the processor 130. Instruction, the processor 130 executes machine-executable instructions to implement the above-mentioned network traffic rate limiting method.

Further, the central control device or gateway shown in FIG. 13 further includes a bus 132 and a communication interface 133, and the processor 130, the communication interface 133 and the memory 131 are connected through the bus 132.

The memory 131 may include a high-speed random access memory (RAM, Random Access Memory), and may also include a non-volatile memory (non-volatile memory), such as at least one disk memory. The communication connection between the system network element and at least one other network element is realized through at least one communication interface 133 (which may be wired or wireless), and the Internet, a wide area network, a local network, a metropolitan area network, etc. may be used. The bus 132 may be an ISA bus, a PCI bus, an EISA bus, or the like. The bus can be divided into an address bus, a data bus, a control bus, and so on. For ease of presentation, only one bidirectional arrow is used in FIG. 13, but it does not mean that there is only one bus or one type of bus.

The processor 130 may be an integrated circuit chip with signal processing capability. In the implementation process, the steps of the foregoing method may be completed by an integrated logic circuit of hardware in the processor 130 or instructions in the form of software. The aforementioned processor 130 may be a general-purpose processor, including a central processing unit (Central Processing Unit, CPU for short), a network processor (Network Processor, NP for short), etc.; it may also be a Digital Signal Processor (DSP for short). ), Application Specific Integrated Circuit (ASIC), Field-Programmable Gate Array (FPGA) or other programmable logic devices, discrete gates or transistor logic devices, discrete hardware components. The methods, steps, and logical block diagrams disclosed in the embodiments of the present application can be implemented or executed. The general-purpose processor may be a microprocessor or the processor may also be any conventional processor or the like. The steps of the method disclosed in the embodiments of the present application can be directly embodied as being executed and completed by a hardware decoding processor, or executed and completed by a combination of hardware and software modules in the decoding processor. The software module can be located in a mature storage medium in the field, such as random access memory, flash memory, read-only memory, programmable read-only memory, or electrically erasable programmable memory, registers. The storage medium is located in the memory 131, and the processor 130 reads the information in the memory 131, and completes the steps of the method of the foregoing embodiment in combination with its hardware.

In yet another embodiment provided by the present application, a computer-readable storage medium is also provided. The computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, it realizes any of the above-mentioned network traffic. The speed limit method.

In another embodiment provided by the present application, a computer program product containing instructions is also provided, which when running on a computer, causes the computer to execute any one of the network traffic rate limiting methods in the foregoing embodiments.

In another embodiment provided in this application, an executable program code is also provided, and the executable program code is configured to be executed to execute any one of the network traffic rate limiting methods in the foregoing embodiments.

In the above-mentioned embodiments, it may be implemented in whole or in part by software, hardware, firmware, or any combination thereof. When implemented by software, it can be implemented in the form of a computer program product in whole or in part. The computer program product includes one or more computer instructions. When the computer program instructions are loaded and executed on the computer, the processes or functions described in the embodiments of the present application are generated in whole or in part. The computer may be a general-purpose computer, a special-purpose computer, a computer network, or other programmable devices. The computer instructions may be stored in a computer-readable storage medium, or transmitted from one computer-readable storage medium to another computer-readable storage medium. For example, the computer instructions may be transmitted from a website, computer, server, or data center. Transmission to another website site, computer, server or data center via wired (such as coaxial cable, optical fiber, digital subscriber line (DSL)) or wireless (such as infrared, wireless, microwave, etc.). The computer-readable storage medium may be any available medium that can be accessed by a computer or a data storage device such as a server or a data center integrated with one or more available media. The usable medium may be a magnetic medium (for example, a floppy disk, a hard disk, and a magnetic tape), an optical medium (for example, a DVD), or a semiconductor medium (for example, a solid state disk (SSD)).

It should be noted that in this article, relational terms such as first and second are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply one of these entities or operations. There is any such actual relationship or order between. Moreover, the terms "include", "include" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article or device including a series of elements not only includes those elements, but also includes those that are not explicitly listed Other elements of, or also include elements inherent to this process, method, article or equipment. If there are no more restrictions, the element defined by the sentence "including a..." does not exclude the existence of other identical elements in the process, method, article, or equipment that includes the element.

The various embodiments in this specification are described in a related manner, and the same or similar parts between the various embodiments can be referred to each other, and each embodiment focuses on the differences from other embodiments. In particular, for the device embodiments, device embodiments, computer readable storage medium embodiments, and computer program product embodiments, since they are basically similar to the method embodiments, the descriptions are relatively simple, and for relevant details, please refer to the method embodiments. Part of the instructions can be.

The foregoing descriptions are only preferred embodiments of the present application, and are not used to limit the protection scope of the present application. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of this application are all included in the protection scope of this application.

Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the application, not to limit them; although the application has been described in detail with reference to the foregoing embodiments, those of ordinary skill in the art should understand that: It is still possible to modify the technical solutions described in the foregoing embodiments, or equivalently replace some or all of the technical features; and these modifications or replacements do not make the essence of the corresponding technical solutions deviate from the technical solutions of the embodiments of the present application. range.

Claims (28)

A method for limiting the rate of network traffic, which is applied to a central control device, and the method includes: Receiving a traffic alarm sent by the first gateway in the rate-limiting gateway cluster; wherein the traffic alarm is used to indicate that the real-time bandwidth of the preset target service at the first gateway exceeds a predetermined ratio of the current quota bandwidth; Acquiring the real-time bandwidth of each gateway of the target service in the rate-limiting gateway cluster based on the traffic alarm; According to the current quota bandwidth of the target service at the first gateway, the real-time bandwidth of the target service at the respective gateways, and the pre-stored total quota bandwidth of the target service, update the target service at the limit The quota bandwidth of each gateway in the fast gateway cluster. The method according to claim 1, wherein the traffic alarm includes at least: the number of the first gateway, the number of the target service, the quota bandwidth of the target service at the first gateway, and the The real-time bandwidth of the target service at the first gateway when the traffic alarm is generated. The method according to claim 1, wherein the obtaining the real-time bandwidth of each gateway of the target service in the rate-limiting gateway cluster based on the traffic alarm comprises: After receiving the traffic alarm, extract the number of the target service from the traffic alarm; Sending, based on the serial number of the target service, request information for the real-time bandwidth of the target service to gateways other than the first gateway in the rate-limiting gateway cluster; Receiving the real-time bandwidth for the target service returned by a gateway other than the first gateway. The method according to claim 1, wherein according to the current quota bandwidth of the target service at the first gateway, the real-time bandwidth of the target service at the respective gateways, and the total quota of the target service pre-stored Bandwidth, the step of updating the quota bandwidth of each gateway of the target service in the rate-limiting gateway cluster includes: Extracting the quota bandwidth of the target service at the first gateway from the traffic alarm sent by the first gateway; Judging whether the extracted quota bandwidth is greater than zero; Adjust the quota bandwidth of each gateway for the target service according to the judgment result of the quota bandwidth, the real-time bandwidth of the target service at the respective gateways, and the total quota bandwidth of the target service. The method according to claim 4, wherein after the step of receiving the traffic alarm sent by the first gateway in the rate-limiting gateway cluster, the method further comprises: acquiring the target service in the rate-limiting gateway based on the traffic alarm Quota bandwidth of each gateway in the cluster; According to the current quota bandwidth of the target service at the first gateway, the real-time bandwidth of the target service at the respective gateways, and the pre-stored total quota bandwidth of the target service, update the target service at all The steps to describe the quota bandwidth of each gateway in the rate-limiting gateway cluster include: If the quota bandwidth of the target service at the first gateway is greater than zero, calculate the sum of the quota bandwidth of the target service at the respective gateways to obtain the total quota bandwidth of the target service by the rate-limiting gateway cluster; Judging whether the calculated total quota bandwidth is greater than the total quota bandwidth of the target service pre-stored in the central control device; According to the judgment result of the total quota bandwidth, adjust the quota bandwidth of each gateway of the target service in the rate-limiting gateway cluster. The method according to claim 5, wherein the step of adjusting the quota bandwidth of each gateway of the target service in the rate limiting gateway cluster according to the judgment result of the total bandwidth of the quota comprises: If the calculated total bandwidth of the quota is equal to or less than the total bandwidth of the stored quota, calculate the total real-time bandwidth of the target service at the respective gateways to obtain the total real-time bandwidth of the target service at the rate-limiting gateway cluster; For each gateway in the rate-limiting gateway cluster, adjust the quota bandwidth of the target service at the current gateway to: the ratio of the real-time bandwidth of the target service at the current gateway to the total real-time bandwidth of the target service , Multiplied by the total bandwidth of the storage quota. The method according to claim 5, wherein the step of adjusting the quota bandwidth of each gateway of the target service in the rate limiting gateway cluster according to the judgment result of the total bandwidth of the quota comprises: If the calculated total bandwidth of the quota is greater than the total bandwidth of the stored quota, calculate the sum of the real-time bandwidth of the target service at the respective gateways to obtain the real-time total bandwidth of the target service at the rate-limiting gateway cluster; For each gateway in the rate-limiting gateway cluster, adjust the quota bandwidth of the target service at the current gateway to: the difference between twice the stored quota total bandwidth and the real-time total bandwidth of the target service, Multiplied by the ratio of the real-time bandwidth of the target service at the current gateway to the total real-time bandwidth of the target service. The method according to claim 4, wherein according to the current quota bandwidth of the target service at the first gateway, the real-time bandwidth of the target service at the respective gateways, and the total quota of the target service pre-stored Bandwidth, the step of updating the quota bandwidth of each gateway of the target service in the rate-limiting gateway cluster includes: If the quota bandwidth of the target service at the first gateway is equal to zero, calculate the sum of the real-time bandwidth of the target service at the respective gateways to obtain the total real-time bandwidth of the rate-limiting gateway cluster for the target service; Judging whether the total real-time bandwidth is greater than the total quota bandwidth of the target service pre-stored in the central control device; If it is greater than, for each gateway in the rate-limiting gateway cluster, adjust the quota bandwidth of the target service at the current gateway to: the real-time bandwidth of the target service at the current gateway. The method according to claim 1, wherein before receiving the traffic alarm sent by the first gateway in the rate-limiting gateway cluster, the method comprises: According to the total quota bandwidth of the target service, an initial quota bandwidth for the target service is set for each gateway in the rate-limiting gateway cluster; wherein the initial quota bandwidth is equal to the total quota bandwidth of the target service The ratio to the total number of gateways in the rate-limiting gateway cluster. A method for limiting the rate of network traffic, wherein, applied to a gateway, the gateway is configured to be able to receive a request message for a target service and/or send a response message sent by the target service, and the gateway is based on stored The quota bandwidth limits the rate of the target service traffic, and the method includes: When it is detected that the real-time bandwidth of the target service exceeds the predetermined ratio of the current quota bandwidth, a traffic alarm is generated; Sending the traffic alarm to a central control device communicatively connected with the gateway; Receive the updated quota bandwidth returned by the central control device, and limit the rate of the target service traffic according to the updated quota bandwidth. The method according to claim 10, wherein the gateway restricting the rate of the target service traffic based on the stored quota bandwidth comprises: If the quota bandwidth is not zero, discard the received message within a time period after the real-time bandwidth of the target service exceeds the current quota bandwidth; If the quota bandwidth is zero, the received message is not discarded in the time period after the real-time bandwidth of the target service exceeds the current quota bandwidth. The method according to claim 10, wherein the method further comprises: If the request information for the real-time bandwidth of the target service sent by the central control device is received, the real-time bandwidth of the target service is returned to the central control device. A device for limiting the rate of network traffic, which is applied to a central control device, and the device includes: The first receiving module is configured to receive the traffic alarm sent by the first gateway in the rate-limiting gateway cluster; wherein the traffic alarm is used to indicate that the real-time bandwidth of the preset target service at the first gateway exceeds a predetermined ratio of the current quota bandwidth; The first obtaining module is configured to obtain the real-time bandwidth of each gateway of the target service in the rate-limiting gateway cluster based on the traffic alarm; An update module, configured to update the target according to the current quota bandwidth of the target service at the first gateway, the real-time bandwidth of the target service at the respective gateways, and the pre-stored total quota bandwidth of the target service The quota bandwidth of each gateway of the service in the rate-limiting gateway cluster. The apparatus according to claim 13, wherein the traffic alarm includes at least: the number of the first gateway, the number of the target service, the quota bandwidth of the target service at the first gateway, and the The real-time bandwidth of the target service at the first gateway when the traffic alarm is generated. The device according to claim 13, wherein the first acquiring module is further configured to: After receiving the traffic alarm, extract the number of the target service from the traffic alarm; Sending, based on the serial number of the target service, request information for the real-time bandwidth of the target service to gateways other than the first gateway in the rate-limiting gateway cluster; Receiving the real-time bandwidth for the target service returned by a gateway other than the first gateway. The device according to claim 13, wherein the update module is further configured to: Extracting the quota bandwidth of the target service at the first gateway from the traffic alarm sent by the first gateway; Judging whether the extracted quota bandwidth is greater than zero; Adjust the quota bandwidth of each gateway for the target service according to the judgment result of the quota bandwidth, the real-time bandwidth of the target service at the respective gateways, and the total quota bandwidth of the target service. The device according to claim 16, wherein the device further comprises: a second obtaining module configured to obtain the quota bandwidth of each gateway of the target service in the rate-limiting gateway cluster based on the traffic alarm; The update module is also set to: If the quota bandwidth of the target service at the first gateway is greater than zero, calculate the sum of the quota bandwidth of the target service at the respective gateways to obtain the total quota bandwidth of the target service by the rate-limiting gateway cluster; Judging whether the calculated total quota bandwidth is greater than the total quota bandwidth of the target service pre-stored in the central control device; According to the judgment result of the total quota bandwidth, adjust the quota bandwidth of each gateway of the target service in the rate-limiting gateway cluster. The device according to claim 17, wherein the update module is further configured to: If the calculated total bandwidth of the quota is equal to or less than the total bandwidth of the stored quota, Calculating the sum of the real-time bandwidth of the target service in the respective gateways to obtain the total real-time bandwidth of the target service in the rate-limiting gateway cluster; For each gateway in the rate-limiting gateway cluster, adjust the quota bandwidth of the target service at the current gateway to: the ratio of the real-time bandwidth of the target service at the current gateway to the total real-time bandwidth of the target service , Multiplied by the total bandwidth of the storage quota. The device according to claim 17, wherein the update module is further configured to: If the calculated total bandwidth of the quota is greater than the total bandwidth of the stored quota, calculate the sum of the real-time bandwidth of the target service at the respective gateways to obtain the real-time total bandwidth of the target service at the rate-limiting gateway cluster; For each gateway in the rate-limiting gateway cluster, adjust the quota bandwidth of the target service at the current gateway to: the difference between twice the stored quota total bandwidth and the real-time total bandwidth of the target service, Multiplied by the ratio of the real-time bandwidth of the target service at the current gateway to the total real-time bandwidth of the target service. The device according to claim 16, wherein the update module is further configured to: If the quota bandwidth of the target service at the first gateway is equal to zero, calculate the sum of the real-time bandwidth of the target service at the respective gateways to obtain the total real-time bandwidth of the rate-limiting gateway cluster for the target service; Judging whether the total real-time bandwidth is greater than the total quota bandwidth of the target service pre-stored in the central control device; If it is greater than, for each gateway in the rate-limiting gateway cluster, adjust the quota bandwidth of the target service at the current gateway to: the real-time bandwidth of the target service at the current gateway. The device according to claim 13, wherein the device further comprises: The setting module is configured to set the initial quota bandwidth for the target service for each gateway in the rate-limiting gateway cluster according to the total quota bandwidth of the target service; wherein, the initial quota bandwidth is equal to the target The ratio of the total bandwidth of the business quota to the total number of gateways in the rate-limiting gateway cluster. A device for limiting network traffic, wherein the gateway is set at a gateway, the gateway is configured to be able to receive a request message for a target service and/or send a response message sent by the target service, and the gateway is based on stored The quota bandwidth limits the rate of the target service traffic, and the device includes: The generating module is set to generate a traffic alarm when it is detected that the real-time bandwidth of the target service exceeds a predetermined proportion of the current quota bandwidth; A sending module, configured to send the traffic alarm to a central control device that is in communication with the gateway; The second receiving module is configured to receive the updated quota bandwidth returned by the central control device, and limit the rate of the target service traffic according to the updated quota bandwidth. The device according to claim 22, wherein the gateway is further configured to: If the quota bandwidth is not zero, discard the received message within a time period after the real-time bandwidth of the target service exceeds the current quota bandwidth; If the quota bandwidth is zero, the received message is not discarded in the time period after the real-time bandwidth of the target service exceeds the current quota bandwidth. The device according to claim 22, wherein the device further comprises: a return module configured to send the request information for the real-time bandwidth of the target service to the central control device if it receives the request information for the real-time bandwidth of the target service sent by the central control device Returns the real-time bandwidth of the target service. A central control device, comprising a processor and a memory, the memory stores machine executable instructions that can be executed by the processor, and the processor executes the machine executable instructions to implement claims 1 to 9 Any one of the methods for limiting the rate of network traffic. A gateway, comprising a processor and a memory, the memory stores machine executable instructions that can be executed by the processor, and the processor executes the machine executable instructions to implement any one of claims 10 to 12 The method of limiting the rate of network traffic described in the item. A computer-readable storage medium, wherein a computer program is stored in the computer-readable storage medium, and when the computer program is executed by a processor, the method steps according to any one of claims 1-12 are realized. An executable program code, the executable program code being set to be executed to execute the method steps of any one of claims 1-12.

Images