KR20040027026A - System of distributing access load of subscribers according to LNS access capacity and method thereof - Google Patents

Abstract

PURPOSE: A system and method for balancing an access load of subscribers according an LNS(L2TP(Layer 2 Tunneling Protocol) Network Server) access capacity are provided to offer a smooth and stable Internet supplementary service by stably extending a PPP(Point-to-Point Protocol) session from an Internet access point to a service providing point. by using a non-defective LNS. CONSTITUTION: A subscriber(1) attempts an Internet access by using a PPP to request a supplementary service. An Internet access point(2) transmits an ID and a password of the subscriber(1) to an RADIUS(Remote Authentication Dial-In User Service) server(3) to request authentication, receives information on an authentication result and information on a service providing point(4), and extends a PPP session to the service providing point(4) by using an L2TP. The RADIUS server(3) analyzes the ID and the password of the subscriber(1) and transmits them together with the authentication result and the information on the service providing point(4). The service providing point(4) extends the PPP session and attempts an Internet access for receiving the Internet supplementary service. An access load balancing system(5) monitors whether a tunnel termination function of an LNS element is normally operated and if the tunnel termination function failure occurs, the access load balancing system(5) informs the RADIUS server(3) accordingly.

Description

System and distributing access load of subscribers according to LNS access capacity and method according to LNS access capacity

The present invention relates to a system and method for distributing access loads of subscribers according to LNS access capacity, and to monitor LNS from time to time, detect failure of LNS, and make Internet access using LNS without failure, and LNS The present invention relates to a system and a method for distributing access loads of subscribers according to LNS access capacity.

Conventionally, a plurality of LNS devices are operated according to a subscriber's capacity, and an L4 switch (not shown) is used to evenly distribute connection loads for each LNS device, and the access port IPs of the LNSs are virtualized by the L4 switch (not shown). It was tied to IP and connected. At this time, through the session control of the L4 switch (not shown), the connection attempt is uniformly averaged for each port of the LNS.

Since the L4 switch (not shown) does not know whether the tunnel termination function of the LNS device is normally operating, the L4 switch is continuously connected even when the LNS device is physically operated but a failure occurs in the tunnel termination function. There is a problem in that the service can not be provided to the subscriber by imposing a load.

In addition, the connection capacity of each LNS device is often different, but when the average connection capacity is applied unconditionally, the LNS device having a smaller capacity than the average is subjected to an excessive load and the stability is impaired. Many of these devices have remained capacity, resulting in very inefficient connection load balancing.

In addition, in providing the same service in multiple regions, when distributing service points into multiple regions, it is impossible to bundle the port IPs of LNS devices distributed by regions into one virtual IP, thereby providing subscribers by service points. This is accompanied by operational inconveniences that induce regional load balancing.

An object of the present invention for solving the above problems, by recognizing the failure of the LNS device, by using the LNS without a failure, by stably extending the PPP session from the Internet access point to the service provider LNS, stably To provide smooth and stable Internet supplementary services.

In addition, it is possible to distribute the connection load in accordance with the connection capacity of the LNS, thereby enabling efficient connection load distribution.

1 is a block diagram of a system for distributing subscriber access load according to the present invention.

2 is a flowchart illustrating a distributed processing of a subscriber access load for receiving an additional service according to the present invention.

According to the present invention for achieving the above object, when a subscriber requests an Internet connection to receive an additional service, the subscriber requests an authentication, an Internet access point for extending a PPI session, and receives an authentication request from the Internet access point to perform authentication verification. The user authentication server, the service providing point for providing the additional service, and the failure of the service providing point are checked, and the information on the service providing point without any obstacle is transmitted to the user authentication server, and the access capacity of the service providing point is provided. It is characterized by including a connection load distribution system for distributing the connection load according to.

The above and other objects and features and advantages of the present invention will become more apparent from the following detailed description taken in conjunction with the accompanying drawings.

Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings.

1 is a configuration diagram of an access load balancer of a subscriber according to the present invention, wherein the subscriber access load balancer includes a subscriber 1, an Internet access point 2, a RADIUS server 3, a service providing point 4, and a connection load. A distribution system 5 is disclosed.

Subscriber 1 tries to access the Internet using PPP (Point-to-Point Protocol), and applies for an additional service. Here, Point-to-Point Protocol (PPP) is a protocol required when two computers communicate using a serial interface, and is particularly used in a PC connecting to a server through a telephone line.

Internet access point (2) when the subscriber accesses through the ID (ID) and password (Password), and requests the Internet access, transmits the ID and password of the subscriber to the RADIUS server (4), and requests authentication verification, Receive the authentication result and the information on the service provider 4 from the RADIUS server 4, and use the information to extend the PPP session to the service provider 3 using the Layer 2 Tunneling Protocol (L2TP). .

Here, L2TP is an IETF protocol for establishing a virtual private network through the Internet. The L2TP tunnel extends a PPP session using a User Datagram Protocol (UDP). The Internet access point 2 performs an L2TP Access Concentrator (LAC) function, and the LAC acts as a User Datagram Protocol (UDP) client.

The Remote Authentication Dial-In User Service (hereinafter referred to as RADIUS) server 2 is a client / server that enables communication with the Internet access point 2 and the connection load balancing system 5, which is described above. The ID and password of the subscriber 1 received from (2) are analyzed, and the authentication result and the information of the service provider 4 are transmitted to the Internet access point 2 together.

In addition, by using the LNS failure information transmitted from the connection load distribution system 5, to configure the L2TP tunnel using the LNS device without a failure, the weight according to the connection capacity of the LNS from the connection load distribution system 5 In this case, the connection load is distributed according to the connection capacity of each LNS, and when the service providing point 4 is distributed to various regions, the connection is possible to the LNS of the region.

The service provider 4 performs an L2TP Network Server (LNS) function for terminating the L2TP tunnel, extends a PPP session with the LNS, and attempts to access the Internet to receive an internet supplementary service. At this time, LNS operates as a UDP (User Datagram Protocol) server.

The connection load distribution system 5 includes an LNS information database 6, a subscriber area information database 7, an LNS fail information database 8, an LNS monitoring unit 9, and an LNS management unit 10. It monitors whether the tunnel termination function is operating normally and notifies the RADIUS server 3 of the failure of the tunnel termination function of the LNS device.

The LNS information database 6 stores information on whether there is a failure of the LNS, the status of the LNS (1 is OK / 0 is Fail), and the fail information of the LNS which has no response when checking each LNS. The subscriber area information database 7 stores subscriber area information.

The LNS connection capacity weight information database 8 stores information to which the weight according to the connection capacity of each LNS is applied, and stores the information of the LNS in use and the LNS in use. At this time, LNS IP management, for example, if the LNS is distributed in five areas, the area (AREA) (1, 2 / Seoul 1 / Busan 2), ID (Seoul 1, 2 / Busan 1, 2) , 3), LNS IP information (Seoul xxx2,3 / Busan xxx2,3 4,), each assignment_ID (Seoul cleani_1-1, 1-2 / Busan cleani_2-1,2-2, Divide 2-3), and distribute the LNS device selection load according to the area.

The LNS monitoring unit 9 compares the LNS information received while monitoring the status of the LNS, such as whether there is a failure and the state information of the LNS stored in the LNS information database 6, and recognizes that a failure has occurred if there is any change. The RADIUS server 3 is notified of the failure.

The LNS management unit 10 uses the fail information stored in the LNS fail information database 8 to prevent the establishment of a PPP session with an unresponsive LNS, and is a rounded-robin based on the connection capacity of each LNS. (Weighted Round-Robin) method can be implemented in each region by inducing LNS allocation allocation to PPP calls.

2 is a flowchart illustrating a distributed processing of a subscriber access load for receiving an additional service according to the present invention.

First, the subscriber 1 requests Internet access to the Internet access point 2 through the subscriber ID and password in order to receive the additional service.

The Internet access point 2 requests the RADIUS server 4 to confirm the authentication of the ID and password received from the subscriber 1, ②, and confirms the authentication at the RADIUS server 4 ③. On the other hand, the connection load distribution system 5 determines the optimal LNS without a failure, and transmits and receives between the connection load distribution system 5 and the RADIUS server 4.

The RADIUS server 4 transmits the authentication result requested in step ② and the IP information of the optimal LNS received from the connection load distribution system 5 to the Internet access point 2. Thereafter, the Internet access point 2 extends the PPP session using L2TP to the optimum LNS, and connects to the Internet.

As described above, the system and method for distributing access loads of subscribers according to the LNS connection capacity according to the present invention, the LNS device by distributing the load evenly according to the difference in the capacity of each LNS device, By stably and efficiently managing the local information of the subscriber, it is effective to facilitate the distribution of the same service by region.

In addition, by recognizing the failure of the LNS device, by using the LNS without a failure, the PPP session can be stably extended from the Internet access point to the service provider LNS, thereby allowing the subscribers to smoothly and stably receive additional Internet services. It has an effect.

In addition, a preferred embodiment of the present invention is for the purpose of illustration, those skilled in the art will be able to various modifications, changes, substitutions and additions through the spirit and scope of the appended claims, such modifications and changes are the following claims It should be seen as belonging to a range.

Claims (3)

An Internet access point for requesting authentication and extending a Phi Phi session when the subscriber requests an Internet connection to receive an additional service; A user authentication server receiving an authentication request from the Internet access point and verifying an authentication; A service provider for providing an additional service; And Checking whether there is a failure of the service providing point, and transmits the information of the service providing point without a failure to the user authentication server, Eln including a connection load distribution system for distributing the connection load according to the connection capacity of the service provider A system for distributing subscriber's access load according to S access capacity. The method of claim 1, wherein the connection load distribution system, A service providing point state information database for storing state information of the service providing point; A subscriber location information database for storing location information of the subscriber; A service providing point connection capacity weight information database for weighting according to the connection capacity of the service providing point and storing the weight information; A service providing point monitoring unit configured to monitor the service providing point and determine whether there is a failure; And Distributing the access load of the subscriber according to the LS access capacity, characterized in that it comprises a service provider point management unit for managing the service provider point state information database, the subscriber area information database, service provider point access capacity weight information database System. An access request step of requesting an internet access for a subscriber to receive an additional service; An authentication request step of requesting authentication through an ID and a password; An extraction step of extracting information of an optimal service providing point; An extension step of extending the PPI session using the result of the authentication request and the extracted information; Method for distributing the access load of the subscriber according to the LS access capacity, characterized in that the connection step of receiving an additional service by accessing the Internet through the extension.