JP2007235813A - Network band control system, management unit, and network band control method - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a network band control system, a management unit, and a network band control method, capable of easily controlling a communication band used for a packet data. <P>SOLUTION: The network band control system includes the communication band used for the packet data flowing between a terminal 101 and a network 103, and destination information of the packet data concerned. Based on traffic information collected by network equipment 102 for collecting traffic information in regard to the packet data concerned, in a supervisory unit 104 connected to the network equipment 102, when the destination information and destination information stored in advance in the supervisory unit coincide, and when the communication band for the packet data having the destination information collected by the network equipment exceeds a communication band threshold stored in advance correspondingly to the destination information stored in advance, the communication band concerned is set to a limited communication band stored in advance correspondingly to the destination information, and QoS information based on the set communication band is set into the network equipment. <P>COPYRIGHT: (C)2007,JPO&INPIT

Description

  The present invention relates to a network bandwidth control system, a management device, and a network bandwidth control method for controlling the bandwidth of packet data flowing on a network.

  In recent years, P2P (Peer To Peer) file exchange software such as WinMX and Winny has been used for users to transfer files to each other on a network. Files that are exchanged using the P2P software often have a large capacity, which causes network bandwidth compression, which is a serious problem especially in carriers.

  Therefore, a method is conceived in which the contents of the distributed packet data are analyzed to determine that the traffic is P2P software traffic, and the packet data is blocked or band-controlled.

In addition, a method of distributing packet data to a plurality of routes according to the load on the network has been considered (for example, see Patent Document 1).
Japanese Patent Laid-Open No. 2002-247087

  However, with regard to the method of blocking or bandwidth control based on the contents of the distributed packet data, if the packet data format is changed due to a change on the P2P software side or if it is changed to a new P2P software There is a problem that it is not possible. Further, ISP (Internet Service Provider) often has ethical resistance to seeing the contents of packet data itself. Furthermore, there is a problem that even if it is attempted to control the bandwidth used for each port, it is impossible to perform bandwidth control by specifying a port number for the network device.

  In addition, in the method described in Patent Document 1, no consideration is given to bandwidth control in the case where a plurality of routes do not exist.

  The present invention has been made in view of the problems of the prior art as described above, and is a network bandwidth control system, a management device, and a network bandwidth capable of easily controlling a communication bandwidth used by packet data. An object is to provide a control method.

In order to achieve the above object, the present invention provides:
A network device that collects traffic information about the packet data including a communication band used by packet data flowing on the network, and first destination information that is information about a transmission destination and a transmission source of the packet data; and the network device A network bandwidth control system having a monitoring device for monitoring the communication bandwidth based on the traffic information collected at
The monitoring device communicates packet data having the first destination information collected by the network device, in which the first destination information matches the second destination information stored in advance in the monitoring device. If the bandwidth exceeds a communication bandwidth threshold value stored in advance associated with the second destination information, the communication bandwidth is set to a limited communication bandwidth stored in advance associated with the second destination information. The first destination information is stored as third destination information in the bandwidth control execution status storage means in association with the restricted communication band, and QoS information based on the set communication band is set in the network device. It is characterized by that.

  In addition, when the first destination information matches the fourth destination information stored in advance in the monitoring device, the monitoring device does not limit a communication band for packet data having the first destination information. It is characterized by.

  In the monitoring apparatus, the first destination information matches the third destination information, and a communication band of packet data having the first destination information is associated with the third destination information. When the stored bandwidth is lower than the stored restricted communication band, the third destination information and the restricted communication band stored in the bandwidth control implementation status storage unit are deleted from the bandwidth control implementation status storage unit, and the network device The QoS information set in (2) is canceled.

Also, collected by a network device that collects traffic information about the packet data including the communication band used by the packet data flowing on the network and the first destination information that is the destination and source information of the packet data. A monitoring device that monitors the communication band based on the traffic information that is provided,
The first destination information matches the second destination information stored in advance in the monitoring device, and the communication bandwidth of the packet data having the first destination information collected by the network device is the first destination information. When the communication bandwidth threshold value stored in advance associated with the second destination information is exceeded, the communication bandwidth is set to a limited communication bandwidth stored in advance associated with the second destination information, and the first Destination information is stored as third destination information in the bandwidth control execution status storage unit in association with the restricted communication band, and QoS information based on the set communication band is set in the network device.

  In addition, when the first destination information matches the fourth destination information stored in advance in the monitoring device, a communication band is not limited for packet data having the first destination information.

  Further, the restriction in which the first destination information and the third destination information match and the communication band of the packet data having the first destination information is stored in association with the third destination information. When the bandwidth is below the communication band, the third destination information and the limited communication band stored in the bandwidth control implementation status storage unit are deleted from the bandwidth control implementation status storage unit, and the QoS set in the network device is set. It is characterized by releasing information.

A network device that collects traffic information about the packet data including a communication band used by packet data flowing on the network and first destination information that is information about a transmission destination and a transmission source of the packet data; A network bandwidth control method in a network bandwidth control system having a monitoring device that monitors the communication bandwidth based on the traffic information collected by a network device,
The monitoring device communicates packet data having the first destination information collected by the network device in which the first destination information matches the second destination information stored in advance in the monitoring device. When the bandwidth exceeds a communication bandwidth threshold value stored in advance associated with the second destination information, the communication bandwidth is set to a limited communication bandwidth stored in advance associated with the second destination information. Processing,
A process in which the monitoring device stores the first destination information as third destination information in association with the restricted communication band in a band control implementation status storage unit;
And processing for setting QoS information based on the set communication band in the network device.

  In addition, when the first destination information matches the fourth destination information stored in advance in the monitoring device, the monitoring device limits a communication band for packet data having the first destination information. It has the process which removes from.

In addition, the monitoring device matches the first destination information with the third destination information, and associates a communication band of packet data having the first destination information with the third destination information. A process of deleting the third destination information and the limited communication band stored in the band control implementation status storage unit from the band control implementation status storage unit when the stored limit communication band is below
The monitoring device stores the communication band of packet data having the first destination information in association with the third destination information, in which the first destination information and the third destination information match. And a process of releasing QoS information set in the network device when the bandwidth is below the restricted communication band.

  In the present invention configured as described above, the packet data including the communication band used by the packet data flowing on the network and the first destination information that is the transmission destination and transmission source information of the packet data Based on the traffic information collected by the network device that collects the traffic information, the first destination information and the second destination information stored in advance in the monitoring device are detected by the monitoring device connected to the network device. If the communication bandwidth of the packet data having the first destination information that is matched and collected by the network device exceeds the pre-stored communication bandwidth threshold associated with the second destination information, the communication bandwidth The limited communication bandwidth stored in advance in association with the destination information 2 is set, and QoS information based on the set communication bandwidth is It is set to work the equipment.

  Thereby, it is possible to limit the communication band used by the packet data based only on the destination information of the packet data without analyzing the user data part of the packet data.

  As described above, in the present invention, traffic information about the packet data including the communication band used by the packet data flowing on the network and the first destination information which is the transmission destination and transmission source information of the packet data. On the basis of the traffic information collected by the network device that collects the first destination information and the second destination information stored in advance in the monitoring device match in the monitoring device connected to the network device. When the communication band of the packet data having the first destination information collected by the network device exceeds the pre-stored communication band threshold value associated with the second destination information, the communication band A limited communication band stored in advance associated with the destination information is set, and QoS information based on the set communication band is set in the network. Because it is configured to be set in the device, it is possible to easily control the communication band used for packet data.

  Embodiments of the present invention will be described below with reference to the drawings.

  FIG. 1 is a diagram showing an embodiment of a network bandwidth control system of the present invention.

  As shown in FIG. 1, the present embodiment includes a terminal 101, a network device 102, a network 103, and a management device 104.

  The terminal 101 is a terminal used by the user. The network device 102 passes through the packet data transmitted from the terminal 101 to the network 103 and the packet data that flows between the terminal 101 and the network 103 via the packet data received from the network 103 by the terminal 101. Collect information. The management device 104 monitors the traffic of the packet data passed through the network device 102, and limits the communication band used by the packet data according to the monitored traffic.

  FIG. 2 is a diagram illustrating a configuration example of the management apparatus 104 illustrated in FIG.

  As shown in FIG. 2, the management device 104 shown in FIG. 1 includes a traffic information input unit 201, a traffic information recording unit 202, a traffic information storage unit 203, a bandwidth control policy storage unit 204, and a bandwidth control implementation status storage. Unit 205, bandwidth control unit 206, and bandwidth control execution unit 207.

The traffic information input unit 201 periodically obtains traffic information from the network device 102 shown in FIG. The traffic information recording unit 202 records the traffic information obtained by the traffic information input unit 201 in the traffic information storage unit 203.
The traffic information storage unit 203 stores the traffic information recorded by the traffic information recording unit 202. The bandwidth control policy storage unit 204 stores in advance traffic information to be subjected to bandwidth limitation. The bandwidth control implementation status storage unit 205 stores the status of bandwidth control currently being performed. Based on the information stored in the traffic information storage unit 203, the information stored in the bandwidth control policy storage unit 204, and the information stored in the bandwidth control implementation status storage unit 205, the bandwidth control unit 206 Issue control or bandwidth control release command. The bandwidth control execution unit 207 sets or cancels QoS (Quality of Service) information for the network device 102 based on the command issued by the bandwidth control unit 206.

  A network bandwidth control method in the network bandwidth control system configured as described above will be described below.

  FIG. 3 is a flowchart for explaining a network bandwidth control method in the network bandwidth control system shown in FIG. 1 including the management apparatus 104 having the configuration shown in FIG.

  The traffic information collected by the network device 102 is periodically obtained from the network device 102 by the traffic information input unit 201 (step S1). As the means for obtaining the traffic information here, there are conventionally used obtaining means such as RMON (Remote network MONITORING) using SNMP (Simple Network Management Protocol), sFlow (described in RFC 3176), and NetFlow of Cisco Corporation. Conceivable.

  When the traffic information is obtained by the traffic information input unit 201, the obtained traffic information is stored in the traffic information storage unit 203 by the traffic information recording unit 202 (step S2).

  FIG. 4 is a diagram illustrating an example of traffic information stored in the traffic information storage unit 203.

  The traffic information stored in the traffic information storage unit 203 shown in FIG. 4 includes a type indicating whether the communication protocol of the packet data is TCP or UDP, a source IP address, and a source port number. The first destination information of the destination IP address, the destination port number, and the currently used communication band are associated with each other, and a traffic number is sequentially assigned to each.

  When the obtained traffic information is stored in the traffic information storage unit 203 by the traffic information recording unit 202, is there any information pre-stored in the bandwidth control policy storage unit 204 that matches the traffic information? The bandwidth control unit 206 searches for whether or not (step S3).

  FIG. 5 is a diagram illustrating an example of information on packet data for bandwidth limitation stored in the bandwidth control policy storage unit 204.

  The information stored in the bandwidth control policy storage unit 204 shown in FIG. 5 includes the type indicating whether the communication protocol of the packet data to be controlled is TCP or UDP, the IP address of the transmission source, the transmission source IP address, When the second destination information of the port number, the destination IP address, and the destination port number, the communication bandwidth threshold that is the bandwidth threshold for starting bandwidth limitation, and the communication bandwidth threshold are exceeded A limited communication band, which is a band set as a communication band, is associated with each other, and a traffic number is sequentially assigned to each. For example, for the information of traffic number “1”, the communication bandwidth is limited to 5 Mbps when the communication bandwidth of packet data whose communication protocol is TCP and the transmission source port number is “7743” exceeds 10 Mbps. It is. As for the information of traffic number “2”, the communication bandwidth is limited to 5 Mbps when the communication bandwidth of packet data whose communication protocol is TCP and whose destination port number is “7743” exceeds 10 Mbps. It is. For the traffic number “3”, when the communication bandwidth of packet data whose communication protocol is UDP exceeds 30 Mbps, the communication bandwidth is limited to 15 Mbps. For the traffic number “4”, when the communication bandwidth of packet data whose communication protocol is TCP exceeds 30 Mbps, the communication bandwidth is limited to 10 Mbps.

  Further, the bandwidth control policy storage unit 204 also stores information on packet data for which bandwidth limitation is not performed, that is, bandwidth limitation exclusion.

  FIG. 6 is a diagram illustrating an example of information on bandwidth limit exclusion packet data stored in the bandwidth control policy storage unit 204.

  The information stored in the bandwidth control policy storage unit 204 shown in FIG. 6 includes a type indicating whether the communication protocol of packet data without bandwidth limitation is TCP or UDP, the IP address of the transmission source, and the transmission The fourth destination information of the original port number, the destination IP address, and the destination port number is associated with each other, and a control exclusion number is assigned sequentially to each. For example, for the information of the control exclusion number “1”, the bandwidth restriction is applied to packet data whose communication protocol is TCP, the source port number is “7743”, and the destination port number is “20”. It indicates not to do. The information of the control exclusion number “2” indicates that the bandwidth is not limited for packet data whose communication protocol is TCP and whose transmission destination port number is “80”. The information of the control exclusion number “3” indicates that the bandwidth is not limited for packet data whose communication protocol is TCP and whose transmission source port number is “80”.

  If the information stored in advance in the bandwidth control policy storage unit 204 matches the traffic information stored in the traffic information storage unit 203 by the traffic information recording unit 202 as a result of the search in step S3, the traffic information It is determined whether the communication bandwidth of the traffic information stored in the storage unit 203 exceeds the communication bandwidth threshold of the information stored in advance in the bandwidth control policy storage unit 204 (step S4).

  If it is determined that the communication bandwidth of the traffic information stored in the traffic information storage unit 203 exceeds the communication bandwidth threshold of the information stored in advance in the bandwidth control policy storage unit 204, the packet data is the bandwidth restriction exclusion data. Is determined by the bandwidth controller 206 (step S5).

  When it is determined that the packet data is not bandwidth limitation exclusion data, a bandwidth limitation command for setting the limited communication bandwidth of information stored in advance in the bandwidth control policy storage unit 204 is issued by the bandwidth control unit 206, The issued bandwidth limitation command is output to the bandwidth control execution unit 207 (step S6).

  Then, the band-limited information is stored in the band control implementation status storage unit 205 (step S7).

  FIG. 7 is a diagram illustrating an example of information stored in the bandwidth control implementation status storage unit 205.

  The information stored in the bandwidth control implementation status storage unit 205 shown in FIG. 7 includes the type indicating whether the communication protocol of the bandwidth-limited packet data is TCP or UDP, the IP address of the transmission source, and the transmission The third destination information of the original port number, the destination IP address, and the destination port number is associated with the communication band that is currently limited and used, and traffic is sequentially transmitted to each. A number is assigned.

  Thereafter, based on the bandwidth limitation command output from the bandwidth control unit 206 to the bandwidth control execution unit 207, the bandwidth control execution unit 207 sets QoS information for the network device 102 (step S8).

  On the other hand, if it is determined in step S4 that the communication bandwidth of the traffic information stored in the traffic information storage unit 203 does not exceed the communication bandwidth threshold of the information stored in advance in the bandwidth control policy storage unit 204, The bandwidth control unit 206 determines whether or not the communication bandwidth is below the limited communication bandwidth of the information stored in advance in the bandwidth control policy storage unit 204 (step S9).

  If it is determined that the communication band is below the limited communication band of information stored in advance in the bandwidth control policy storage unit 204, whether or not the information of the packet data is already stored in the bandwidth control implementation status storage unit 205 Is determined by the bandwidth control unit 206 (step S10).

  When it is determined that the information of the packet data is already stored in the bandwidth control implementation status storage unit 205, a bandwidth limitation release command for releasing the implemented limitation is issued by the bandwidth control unit 206 and issued. The band limitation release command thus output is output to the band control execution unit 207 (step S11).

  Then, the packet data information for which the bandwidth restriction is released is deleted from the bandwidth control implementation status storage unit 205 (step S12).

  Thereafter, based on the bandwidth limitation release command output from the bandwidth control unit 206 to the bandwidth control execution unit 207, the bandwidth control execution unit 207 releases the QoS information to the network device 102 (step S13).

  On the other hand, if the information stored in advance in the bandwidth control policy storage unit 204 does not match the traffic information stored in the traffic information storage unit 203 by the traffic information recording unit 202 as a result of the search in step S3. The process ends.

  If it is determined in step S5 that the packet data is band limitation exclusion data, the process ends.

  If it is determined in step S9 that the communication band is not lower than the limited communication band of the information stored in advance in the band control policy storage unit 204, the process ends.

  If it is determined in step S10 that the information of the packet data is not yet stored in the bandwidth control implementation status storage unit 205, the process ends.

  Regarding the setting of the QoS information for the network device 102 in step S8 and the method for releasing the QoS information for the network device 102 in step S13, a method of rewriting the configuration of the network device 102, a conventional setting by SNMP, or the like can be considered.

  Hereinafter, the processing from step S3 to step S8 will be described with further specific examples. Here, a case where the traffic information obtained from the network device 102 by the traffic information input unit 201 and stored in the traffic information storage unit 203 is the traffic number “1” shown in FIG. 4 is taken as an example.

  The information of the packet data having the traffic number “1” shown in FIG. 4 is compared with the information stored in the bandwidth control policy storage unit 204 shown in FIG. The comparison order is compared from the lowest traffic number shown in FIG.

  First, when compared with the information of the traffic number “1”, it is determined that they do not match because the source port number is different. Next, when compared with the information of the traffic number “2”, it is determined that the information matches because all the information is the same.

  Since the current communication band is 12 Mbps and the communication band threshold is 10 Mbps, the band is a candidate for band limitation.

  After that, it is determined that the packet data is not the bandwidth limitation exclusion data shown in FIG. 6, and a bandwidth limitation command for limiting the communication bandwidth from 12 Mbps to 5 Mbps is issued.

  Then, the traffic information of the packet data is added to the traffic number “1” in the bandwidth control implementation status storage unit 205 shown in FIG.

  Needless to say, the same processing as described above is performed for traffic information of other traffic numbers.

  Further, in the above-described example, based on the traffic information obtained from the network device 102, it is determined whether or not the communication band is limited when the traffic information is obtained. It may be determined whether or not to limit the communication band in terms of the number of times and time. That is, for example, when it is determined that the communication band has exceeded the communication band threshold for one minute, the communication band is limited. It may be a thing.

It is a figure which shows one Embodiment of the network band control system of this invention. It is a figure which shows the example of 1 structure of the management apparatus shown in FIG. 3 is a flowchart for explaining a network bandwidth control method in the network bandwidth control system shown in FIG. 1 including a management apparatus having the configuration shown in FIG. It is a figure which shows an example of the traffic information memorize | stored in the traffic information storage part. It is a figure which shows an example of the information of the packet data which performs the bandwidth limitation memorize | stored in the bandwidth control policy memory | storage part. It is a figure which shows an example of the information of the packet data of the band limitation exclusion memorize | stored in the band control policy memory | storage part. It is a figure which shows an example of the information memorize | stored in the band control implementation status memory | storage part.

Explanation of symbols

DESCRIPTION OF SYMBOLS 101 Terminal 102 Network apparatus 103 Network 104 Management apparatus 201 Traffic information input part 202 Traffic information recording part 203 Traffic information storage part 204 Band control policy storage part 205 Band control implementation status storage part 206 Band control part 207 Band control execution part

Claims (9)

A network device that collects traffic information about the packet data including a communication band used by packet data flowing on the network, and first destination information that is information about a transmission destination and a transmission source of the packet data; and the network device A network bandwidth control system having a monitoring device for monitoring the communication bandwidth based on the traffic information collected at
The monitoring device communicates packet data having the first destination information collected by the network device, in which the first destination information matches the second destination information stored in advance in the monitoring device. If the bandwidth exceeds a communication bandwidth threshold value stored in advance associated with the second destination information, the communication bandwidth is set to a limited communication bandwidth stored in advance associated with the second destination information. The first destination information is stored as third destination information in the bandwidth control execution status storage means in association with the restricted communication band, and QoS information based on the set communication band is set in the network device. A network bandwidth control system characterized by that. The network bandwidth control system according to claim 1,
The monitoring device does not limit a communication band for packet data having the first destination information when the first destination information matches the fourth destination information stored in advance in the monitoring device. Network bandwidth control system. The network bandwidth control system according to claim 1,
In the monitoring device, the first destination information and the third destination information match, and a communication band of packet data having the first destination information is stored in association with the third destination information. When the bandwidth is lower than the restricted communication band, the third destination information and the restricted communication band stored in the bandwidth control implementation status storage means are deleted from the bandwidth control implementation status storage means and set in the network device. Network bandwidth control system, wherein the QoS information is released. Collected by a network device that collects traffic information about the packet data including the communication bandwidth used by the packet data flowing on the network and the first destination information that is the destination and source information of the packet data A monitoring device that monitors the communication band based on the traffic information,
The first destination information matches the second destination information stored in advance in the monitoring device, and the communication bandwidth of the packet data having the first destination information collected by the network device is the first destination information. When the communication bandwidth threshold value stored in advance associated with the second destination information is exceeded, the communication bandwidth is set to a limited communication bandwidth stored in advance associated with the second destination information, and the first A monitoring device that stores destination information as third destination information in association with the restricted communication band in a band control execution status storage unit, and sets QoS information based on the set communication band in the network device. The management device according to claim 4,
The monitoring device, wherein when the first destination information matches the fourth destination information stored in advance in the monitoring device, a communication band is not limited for packet data having the first destination information. The monitoring device according to claim 4,
The limited communication band in which the first destination information and the third destination information match and the communication band of the packet data having the first destination information is stored in association with the third destination information The third destination information and the restricted communication band stored in the bandwidth control implementation status storage means are deleted from the bandwidth control implementation status storage means, and the QoS information set in the network device is deleted. A monitoring device characterized by being released. A network device that collects traffic information about the packet data including a communication band used by packet data flowing on the network, and first destination information that is information about a transmission destination and a transmission source of the packet data; and the network device A network bandwidth control method in a network bandwidth control system having a monitoring device for monitoring the communication bandwidth based on the traffic information collected at
The monitoring device communicates packet data having the first destination information collected by the network device in which the first destination information matches the second destination information stored in advance in the monitoring device. When the bandwidth exceeds a communication bandwidth threshold value stored in advance associated with the second destination information, the communication bandwidth is set to a limited communication bandwidth stored in advance associated with the second destination information. Processing,
A process in which the monitoring device stores the first destination information as third destination information in association with the restricted communication band in a band control implementation status storage unit;
A network bandwidth control method comprising: setting QoS information based on the set communication bandwidth in the network device. The network bandwidth control method according to claim 7, wherein
When the first destination information matches the fourth destination information stored in advance in the monitoring device, the monitoring device excludes the packet data having the first destination information from the target for limiting the communication band. A network bandwidth control method comprising: processing. The network bandwidth control method according to claim 7, wherein
The monitoring device stores the communication band of packet data having the first destination information in association with the third destination information, in which the first destination information and the third destination information match. A process of deleting the third destination information and the restricted communication band stored in the bandwidth control implementation status storage means from the bandwidth control implementation status storage means when the bandwidth is less than the restricted communication bandwidth;
The monitoring device stores the communication band of packet data having the first destination information in association with the third destination information, in which the first destination information and the third destination information match. A network bandwidth control method comprising: canceling QoS information set in the network device when the bandwidth is below the restricted communication bandwidth.

Images