CN101667940B - System and method for policing on message - Google Patents
System and method for policing on message Download PDFInfo
- Publication number
- CN101667940B CN101667940B CN2009101782397A CN200910178239A CN101667940B CN 101667940 B CN101667940 B CN 101667940B CN 2009101782397 A CN2009101782397 A CN 2009101782397A CN 200910178239 A CN200910178239 A CN 200910178239A CN 101667940 B CN101667940 B CN 101667940B
- Authority
- CN
- China
- Prior art keywords
- message
- action
- supervision
- mark
- described message
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Expired - Fee Related
Links
Images
Landscapes
- Data Exchanges In Wide-Area Networks (AREA)
Abstract
The invention provides a system for policing on message, comprising a classification policy information library which is independent of a packet processor and acquires flow label corresponding to message according to classification policy information, a measurement engine which is independent of the packet processor and measures and labels the message according to the length of the message and the flow label, a policing information library which is independent of the packet processor and provides policing policy for the packet processor and the packet processor which acquires policing action type corresponding to the message according to the policing information and measurement and labelling on the message and executes policing action corresponding to the policing action type. Compared with the prior art, the invention introduces a measurement engine to assist the packet processor to complete measurement and labelling on the message, after measurement and labelling, the packet processor also can analyze and modify the message.
Description
Technical field
The present invention relates to data communication technology, in particular, is a kind of system and method that message is carried out traffic policing.
Background technology
Because the finiteness of Internet resources, so the Internet Service Provider need supervise and control the flow in the network.Traffic policing a kind of technology that comes to this, it is the specification that supervision enters a certain flow of network that its typical case uses, it is limited within the reasonable range, and the partial discharge that exceeds is carried out " punishment ", thus protecting network resource and benefits of operators.
Traffic policing is to carry out on the basis of message classification, mainly comprises measurement, mark, steps such as supervision action.
Measurement and mark are normally realized based on token bucket, srTCM (A Single Rate Three Color Marker as the RFC2697 suggestion, the 1-rate 3-color mark) trTCM (A Two Rate Three Color Marker, the 2-rate 3-color mark) algorithm of algorithm or RFC2698 suggestion.
Supervision action is divided into three kinds: by, abandon and pass through behind the mark again.Select which kind of supervision action to depend on message is measured and the result of mark, and the monitor strategy that disposes.The message DSCP fields such as (Differentiated Services CodePoint, differentiated service code points) that relates to message of mark is again made amendment.Again the message behind the mark is subjected to treating accordingly according to SLS (Service Level Specification, service class definition).
On the present network equipment, traffic policing is mainly finished by two parts: packet handler and traffic management device.According to by which parts being finished, traffic policing mainly contains two kinds of implementations: a kind of is that traffic policing is realized on the traffic management device after finishing message classification by packet handler; Another kind is to realize traffic policing by packet handler software.
The subject matter that exists for implementation one is: it is to carry out on the basis of message classification that the traffic management device carries out traffic policing, and message classification is finished by packet handler, thereby the traffic management device is positioned at the downstream of packet handler.But the traffic management device does not possess analytic message and revises the ability of message, and this just means, in this mode, can not realize the message mark action again of traffic policing.
The subject matter that exists for implementation two is: traffic policing directly carries out on packet handler, and is carrying out message again before the mark, also needs to finish the measurement and the mark of message.Mostly the measurement of message and mark are to adopt srTCM, trTCM or its improved algorithm to realize, these algorithms all be with token bucket as survey tool, this just means need realize and safeguard a large amount of token buckets in the software of packet handler.For packet handler, realize and safeguard that token bucket has brought extra expense, and its performance and efficient also can not get guaranteeing.
Summary of the invention
At problem such as present and propose the present invention, for this reason, main purpose of the present invention is the method that provides a kind of, to address the above problem.
The present invention proposes and a kind of message is carried out the system of traffic policing, comprising: be independent of the classification policy information bank of packet handler, obtain the traffic identifier corresponding with message according to the head of classification policy information and message; Be independent of the measurement engine of packet handler, come message is measured and mark according to the length of traffic identifier and message; Be independent of the monitor strategy information bank of packet handler, provide monitor strategy to packet handler; Packet handler according to monitor strategy information and to the measurement and the mark of message, obtains the supervision type of action corresponding with message, and carries out with the corresponding supervision of supervision type of action and move.
Wherein, classification policy information bank and monitor strategy information bank are positioned on the memory device.
Wherein, packet handler comprises: Executive Module, when with the corresponding supervision of supervision type of action action be when passing through, Executive Module sends message, when with the corresponding supervision of supervision type of action action be when abandoning, the Executive Module dropping packets is when being again mark with the corresponding supervision action of supervision type of action, packet handler is according to the message of the mark again strategy in monitor strategy information bank mark message again, and Executive Module sends message behind the mark message again at the measurement engine.
Wherein, measure engine and comprise: token bucket information bank, the token information of the data flow that preservation is served; The token enquiry module, utilize the traffic identifier of message from the token bucket information bank, obtain with message under a plurality of barrels current available tokens number being associated of data flow; Measurement module, a plurality of barrels the current available tokens number and the message length that will be associated with the data flow under the message compare respectively; Mark module becomes different colors according to comparative result with packet labeling; The token maintenance module upgrades the token bucket information bank according to the mark result.
Wherein, a plurality of buckets are two buckets, mark module becomes first color with the current available tokens number average of two buckets greater than the packet labeling of message length, the current available tokens number of a bucket is become second color greater than the current available tokens number of message length and another barrel less than the packet labeling of message length, the current available tokens number average of two buckets is become the 3rd color less than the packet labeling of message length, and when message is marked as first color, with the corresponding supervision of supervision type of action action be by, when message is marked as second color, moving with the corresponding supervision of supervision type of action is again mark, when message was marked as the 3rd color, moving with the corresponding supervision of supervision type of action was to abandon.
The invention allows for and a kind of message is carried out the method for traffic policing, it comprises: packet handler sends to the classification policy information bank that is independent of packet handler with the head of message; The classification policy information bank obtains the traffic identifier corresponding with message according to the head of classification policy information and message; The measurement engine that is independent of packet handler comes message is measured and mark according to the length of traffic identifier and message; Packet handler obtains the supervision type of action corresponding with message according to the monitor strategy information in the monitor strategy information bank and to the measurement and the mark of message; Packet handler is carried out and the corresponding supervision action of supervision type of action.
Wherein, classification policy information bank and monitor strategy information bank are positioned on the memory device.
Wherein, carry out in the step of moving at packet handler with the corresponding supervision of supervision type of action, specifically comprise: when with the corresponding supervision of supervision type of action action be when passing through, send message, when with the corresponding supervision of supervision type of action action be when abandoning, dropping packets, when being again mark with the corresponding supervision action of supervision type of action, packet handler is according to the message of the mark again strategy in monitor strategy information bank mark message again, and packet handler sends message behind the mark message again at the measurement engine.
Wherein, come according to the length of traffic identifier that is obtained and message message measured in the step with mark measuring engine, specifically may further comprise the steps: measure traffic identifier that engine utilizes message from the token bucket information bank of preserving token information, obtain with message under a plurality of barrels current available tokens number being associated of data flow; A plurality of barrels the current available tokens number and the message length that will be associated with the data flow under the message compare respectively; According to comparative result packet labeling is become different colors; According to the mark result token bucket information bank is upgraded.
Wherein, a plurality of buckets are two buckets, the current available tokens number average of two buckets is become first color greater than the packet labeling of message length, the current available tokens number of a bucket is become second color greater than the current available tokens number of message length and another barrel less than the packet labeling of message length, the current available tokens number average of two buckets is become the 3rd color less than the packet labeling of message length, and when message is marked as first color, with the corresponding supervision of supervision type of action action be by, when message is marked as second color, moving with the corresponding supervision of supervision type of action is again mark, when message was marked as the 3rd color, moving with the corresponding supervision of supervision type of action was to abandon.
Compared with prior art, the present invention has introduced the measurement engine, finishes the measurement and the markers work of message in order to assist packet handler, and behind measurement and the mark, packet handler can also resolve and revise message.
Use software to finish traffic policing with packet handler and compare, one aspect of the present invention has reduced packet handler and has realized that message is measured and the expense of mark; On the other hand, by measuring engine, promoted the performance of traffic policing.
Finish traffic policing with the use traffic manager and compare, the present invention can realize in the traffic management device the supervision action of irrealizable mark again.
Description of drawings
Accompanying drawing described herein is used to provide further understanding of the present invention, constitutes the application's a part, and illustrative examples of the present invention and explanation thereof are used to explain the present invention, do not constitute improper qualification of the present invention.In the accompanying drawings:
Fig. 1 is the present invention carries out the system of traffic policing to message a structural representation;
Fig. 2 is the structural representation of packet handler of the present invention;
Fig. 3 is the structural representation of measurement engine of the present invention;
Fig. 4 is the schematic diagram that the token of measurement engine of the present invention is safeguarded;
Fig. 5 is the present invention carries out the method for traffic policing to message a flow chart.
Embodiment
The present invention comprises the system that message carries out traffic policing:
Packet handler is in order to receive, to send message; Finish the classification of message, resolve, revise, encapsulation, and visit various information banks, obtain information needed;
Measure engine, in order to measurement and the mark of finishing message;
The classification policy information bank in order to the strategy of message classification to be provided to packet handler, is positioned on the memory device;
The monitor strategy information bank in order to the strategy of supervision to be provided to packet handler, is positioned on the memory device;
Wherein, described packet handler links to each other with classification policy information bank, monitor strategy information bank and measurement engine.
Utilize message of the present invention again the method for mark may further comprise the steps:
Steps A. packet handler receives packet from the upstream device;
Step B. packet handler utilizes the relevant field inquiry classification policy information bank of message to obtain traffic identifier;
Step C. packet handler is sent to the measurement engine with message descriptors such as traffic identifier and message lengths, measures measurement and mark that engine is finished message, and the result is returned to packet handler;
Step D. packet handler is according to the result of measurement and mark, and traffic identifier inquiry monitor strategy information bank, obtains corresponding supervision type of action;
Step e. packet handler is carried out corresponding supervision action according to the supervision type of action;
Step F. will transmit and again the packet behind the mark deliver to downstream components.
The present invention is further illustrated below in conjunction with the drawings and specific embodiments.
As shown in Figure 1, the system that message is carried out traffic policing of the present invention comprises:
Packet handler 101 is used for finishing message classification, selects and execution supervision action, prepares each information bank and the inquiry key assignments of measuring engine, and the processing return results.
Classification policy information bank 103 is used for to packet handler provides classification pairing traffic identifier, and the inquiry key assignments is the message relevant field.
Monitor strategy information bank 104, with thinking that packet handler provides the user predefined supervision type of action, the inquiry key assignments is traffic identifier and the color of measuring the message of engine institute mark.
As shown in Figure 2, packet handler 101 mainly comprises following components:
Message classification module 201 in order to finish the classification of message, is obtained corresponding traffic identifier from classification policy information bank 103.
Classification policy information bank interface 202 is in order to the interface as packet handler 101 and classification policy information bank 103.
Measure pretreatment module 203, in order to finish the preparation that message is measured.
Measure engine interface 204, in order to interface as packet handler 101 and measurement engine 102.
Supervision action determination module 205 is in order to select the supervision type of action.
Monitor strategy information bank interface 206 is in order to the interface as packet handler 101 and monitor strategy information bank 104.
By 207, be the supervision action of passing through in order to carry out type.
Again mark 208, in order to carry out the supervision action that type is again a mark.
Abandoning 209, is the supervision action that abandons in order to carry out type.
As shown in Figure 3, measure engine 102 and mainly comprise following components:
Token bucket information bank 301 is in order to preserve the token information of the data flow of being served.
Measurement module 303 is in order to finish the measurement of message according to token information.
Mark module 304 is in order to finish the mark of message according to measurement result.
As shown in Figure 4, the maintenance process of token is as follows in the token bucket information bank 301:
C bucket 401: token maintenance module 305 adds token with CIR403 (Committed InformationRate, committed information rate) toward C bucket 401; The highest number of tokens that C bucket 401 can be placed is CBS402 (C Bucket Size, the C bucket degree of depth); C bucket 401 current available tokens numbers are Tc404 (Token of C Bucket).
P bucket 405: token maintenance module 305 adds token with PIR407 (Peak Information Rate, peak information rate) toward P bucket 402; The highest number of tokens that P bucket 405 can be placed is PBS406 (P Bucket Size, the P bucket degree of depth); P bucket 405 current available tokens numbers are Tp408 (Token of P Bucket).
As shown in Figure 5, the present invention is as follows to the method that message carries out traffic policing:
Step 1: receive and data cached bag 501.The flow interface 210 of packet handler 101 receives and data cached bag from the upstream, and descriptors such as header and message length are sent to the message classification module.
Step 2: obtain the affiliated traffic identifier 502 of message.Message classification module 201 extracts source MAC from header, purpose MAC, VLAN, IPP, DSCP, source IP address, purpose IP address, source port number, the destination slogan, protocol type is formed the inquiry key assignments of classification policy information bank 103, and will inquire about key assignments and deliver to classification policy information bank 103 by classification policy information bank interface 202, the traffic identifier that classification policy information bank 103 will mate this key assignments returns to message classification module 201 by classification policy information bank interface 202, and message classification module 201 is sent to measurement pretreatment module 203 with traffic identifier and message length.
Step 3: obtain the token information 503 that flows under the message.Measure pretreatment module 203 message length and the traffic identifier of message classification module 201 are formed measurement engine queries key assignments by measuring the token enquiry module 302 that engine interface 204 is sent to measurement engine 102, token enquiry module 302 utilizes traffic identifier to obtain the current token number Tc404 of C bucket 401 and the current token number Tp408 of P bucket 402 from token bucket information bank 301, and with Tp408, Tc404, message length measurement module 303.
Step 4: compare token and message length and mark message 504, the mark message.Measurement module 303 is judged the relation of message length and Tp408 and Tc404, and mark module carries out mark according to measurement result: message length then is red with packet labeling greater than Tp408; Message length is greater than Tc404, but less than Tp408, then is yellow with packet labeling; Message length then is green with packet labeling less than Tc404.After measurement and mark are finished, message color, message length, Tp408, Tc404 are delivered to token bucket maintenance module 305, and the message color returned to and measure pretreatment module 203 by measuring engine interface 204, measure pretreatment module 203 message color and traffic identifier are delivered to supervision action determination module 205.
Step 5: upgrade token bucket 505.In the token bucket maintenance module, upgrade token in the token bucket according to the message color:, Tp408 and Tc404 are deducted message length for green packet; To with yellow packet, Tp408 is deducted message length; For red packet, do not revise Tp408 and Tc404.Revise Tp408, after Tc404 finishes, amended value is updated in the token bucket information bank 301.
Step 6: the supervision action judges 506.Supervision action determination module 205 is according to receiving message color and traffic identifier, the inquiry key assignments of forming monitor strategy information bank 104, by monitor strategy information bank interface 206 visit monitor strategy information banks 104, monitor strategy information bank 104 returns the supervision type of action of coupling according to this key assignments, comprising: by, again behind the mark by, abandon.Supervision action determination module is selected step 7, step 8, step 9 according to the supervision type of action that obtains.As need mark again, also return again the strategy of mark.
Step 7: by 508.Message is not made any modification, jump to step 10.
Step 8: mark 507 again.According to the message of the mark again strategy that returns in the step 6, revise the corresponding field of message, after finishing, modification jumps to step 7.
Step 9: abandon 509.With packet loss, flow process finishes.
Step 10: send packet 510.Message is mail to the downstream from flow interface 211, and flow process finishes.
The technical staff in field should be understood that, above-mentioned each module of the present invention or each step can realize with the general calculation device, they can concentrate on the single calculation element, perhaps be distributed on the network that a plurality of calculation element forms, alternatively, they can be realized with the executable program code of calculation element, thereby, they can be stored in the storage device and carry out by calculation element, perhaps they are made into each integrated circuit modules respectively, perhaps a plurality of modules in them or step are made into the single integrated circuit module and realize.Like this, the present invention is not restricted to any specific hardware and software combination.
The above is the preferred embodiments of the present invention only, is not limited to the present invention, and for a person skilled in the art, the present invention can have various changes and variation.Within the spirit and principles in the present invention all, any modification of being done, be equal to replacement, improvement etc., all should be included within protection scope of the present invention.
Claims (10)
1. one kind is carried out the system of traffic policing to message, it is characterized in that, comprising:
Be independent of the classification policy information bank of packet handler, obtain the traffic identifier corresponding with described message according to the head of classification policy information and message;
Be independent of the measurement engine of described packet handler, come described message is measured and mark according to the length of described traffic identifier and described message;
Be independent of the monitor strategy information bank of described packet handler, provide monitor strategy to described packet handler;
Described packet handler according to monitor strategy information and to the measurement and the mark of described message, obtains the supervision type of action corresponding with described message, and execution and the corresponding supervision action of described supervision type of action.
2. system according to claim 1 is characterized in that, described classification policy information bank and described monitor strategy information bank are positioned on the memory device.
3. system according to claim 1 is characterized in that, described packet handler comprises: Executive Module,
When with the corresponding supervision of described supervision type of action action be by the time, described Executive Module sends described message,
When with the corresponding supervision of described supervision type of action action be when abandoning, described Executive Module abandons described message,
When being again mark with the corresponding supervision action of described supervision type of action,
Described packet handler is according to the message of the mark again strategy in the described monitor strategy information bank described message of mark again, and described Executive Module sends described message behind the described measurement engine described message of mark again.
4. system according to claim 1 is characterized in that, described measurement engine comprises:
The token bucket information bank, the token information of the data flow that preservation is served;
The token enquiry module, utilize the traffic identifier of described message from described token bucket information bank, obtain with described message under a plurality of barrels current available tokens number being associated of data flow;
Measurement module, a plurality of barrels the current available tokens number and the described message length that will be associated with the data flow under the described message compare respectively;
Mark module becomes different colors according to comparative result with described packet labeling;
The token maintenance module upgrades described token bucket information bank according to the mark result.
5. system according to claim 4, it is characterized in that, described a plurality of bucket is two buckets, described mark module becomes first color with the current available tokens number average of two buckets greater than the described packet labeling of described message length, the current available tokens number of a bucket is become second color greater than the current available tokens number of described message length and another barrel less than the described packet labeling of described message length, the current available tokens number average of two buckets is become the 3rd color less than the described packet labeling of described message length, and when described message is marked as described first color, with the corresponding supervision of described supervision type of action action be by, when described message is marked as described second color, moving with the corresponding supervision of described supervision type of action is again mark, when described message is marked as described the 3rd color, with the corresponding supervision action of described supervision type of action be to abandon.
6. one kind is carried out the method for traffic policing to message, it is characterized in that described method comprises:
Packet handler sends to the classification policy information bank that is independent of described packet handler with the head of message;
Described classification policy information bank obtains the traffic identifier corresponding with described message according to the head of classification policy information and described message;
The measurement engine that is independent of described packet handler comes described message is measured and mark according to the length of described traffic identifier and described message;
Described packet handler obtains the supervision type of action corresponding with described message according to the monitor strategy information in the monitor strategy information bank and to the measurement and the mark of described message;
Described packet handler is carried out and the corresponding supervision action of described supervision type of action.
7. method according to claim 6 is characterized in that, described classification policy information bank and described monitor strategy information bank are positioned on the memory device.
8. method according to claim 6 is characterized in that, carries out in the step of moving with the corresponding supervision of described supervision type of action at described packet handler, specifically comprises:
When with the corresponding supervision of described supervision type of action action be by the time, send described message,
When with the corresponding supervision of described supervision type of action action be when abandoning, abandon described message,
When being again mark with the corresponding supervision action of described supervision type of action, described packet handler is according to the message of the mark again strategy in the described monitor strategy information bank described message of mark again, and described packet handler sends described message behind the described measurement engine described message of mark again.
9. method according to claim 6 is characterized in that, in described measurement engine comes described message measured step with mark according to the length of traffic identifier that is obtained and described message, specifically may further comprise the steps:
The traffic identifier that described measurement engine utilizes described message from the token bucket information bank of preserving token information, obtain with described message under a plurality of barrels current available tokens number being associated of data flow;
A plurality of barrels the current available tokens number and the described message length that will be associated with the data flow under the described message compare respectively;
According to comparative result described packet labeling is become different colors;
According to the mark result described token bucket information bank is upgraded.
10. method according to claim 9, it is characterized in that, described a plurality of bucket is two buckets, the current available tokens number average of two buckets is become first color greater than the described packet labeling of described message length, the current available tokens number of a bucket is become second color greater than the current available tokens number of described message length and another barrel less than the described packet labeling of described message length, the current available tokens number average of two buckets is become the 3rd color less than the described packet labeling of described message length, and when described message is marked as described first color, with the corresponding supervision of described supervision type of action action be by, when described message is marked as described second color, moving with the corresponding supervision of described supervision type of action is again mark, when described message is marked as described the 3rd color, with the corresponding supervision action of described supervision type of action be to abandon.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN2009101782397A CN101667940B (en) | 2009-09-25 | 2009-09-25 | System and method for policing on message |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN2009101782397A CN101667940B (en) | 2009-09-25 | 2009-09-25 | System and method for policing on message |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN101667940A CN101667940A (en) | 2010-03-10 |
| CN101667940B true CN101667940B (en) | 2011-11-30 |
Family
ID=41804392
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN2009101782397A Expired - Fee Related CN101667940B (en) | 2009-09-25 | 2009-09-25 | System and method for policing on message |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN101667940B (en) |
Families Citing this family (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101984608A (en) * | 2010-11-18 | 2011-03-09 | 中兴通讯股份有限公司 | Method and system for preventing message congestion |
| CN102271088B (en) * | 2011-08-16 | 2014-02-12 | 大唐移动通信设备有限公司 | Data packet processing method and equipment |
| US10050892B2 (en) * | 2014-01-14 | 2018-08-14 | Marvell International Ltd. | Method and apparatus for packet classification |
| CN105763475B (en) * | 2014-12-15 | 2019-10-25 | 南京中兴新软件有限责任公司 | Connection control method and device |
| CN116319578B (en) * | 2023-05-22 | 2023-09-26 | 麒麟软件有限公司 | Network storm defense method based on DPAA |
-
2009
- 2009-09-25 CN CN2009101782397A patent/CN101667940B/en not_active Expired - Fee Related
Also Published As
| Publication number | Publication date |
|---|---|
| CN101667940A (en) | 2010-03-10 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN109743340B (en) | The method and network equipment of Message processing | |
| US7644157B2 (en) | Statistical information collecting system and apparatus thereof | |
| CN116800682A (en) | Message processing method, device and system for realizing QoS guarantee | |
| CN103765839B (en) | Variable-based forwarding path construction for packet processing within a network device | |
| CN101667940B (en) | System and method for policing on message | |
| EP1764951B1 (en) | Statistical trace-based method, apparatus, node and system for real-time traffic classification | |
| CN106105115B (en) | Method, medium and the device of service chaining for being originated by service node | |
| CN104348716B (en) | A kind of message processing method and equipment | |
| CN104580027B (en) | A kind of OpenFlow message forwarding methods and equipment | |
| CN100559775C (en) | The parallel data link layer controllers of the network switching equipment | |
| CN106961387B (en) | Link type DDoS defense method and system based on forwarding path self-migration | |
| CN107342926A (en) | A kind of method of multi-service Rapid matching distribution | |
| CN102098740B (en) | Link aggregation routing method and device | |
| CN1710888A (en) | Method of generating a monitoring datagram | |
| CN101960782B (en) | In-bound mechanism that verifies end-to-end service configuration with application awareness | |
| CN101789949B (en) | Method and router equipment for realizing load sharing | |
| CN101127691A (en) | A method for implementing stream-based policy routing on network processor | |
| CN104660582A (en) | Network architecture of software definition of DDoS identification, protection and path optimization | |
| CN101340374A (en) | Method, system, apparatus for control transmission priority and network edge equipment | |
| CN109005126B (en) | Data stream processing method, device and computer readable storage medium | |
| CN101626323A (en) | Method and device for monitoring network data flow | |
| CN110351286A (en) | Link flood attack detects response mechanism in a kind of software defined network | |
| Luo et al. | SDN/NFV-based security service function tree for cloud | |
| CN101820385A (en) | Method for controlling flow of IP data stream | |
| CN105847179A (en) | Method and device for concurrently reporting data in DPI system |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| C06 | Publication | ||
| PB01 | Publication | ||
| C10 | Entry into substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| C14 | Grant of patent or utility model | ||
| GR01 | Patent grant | ||
| CF01 | Termination of patent right due to non-payment of annual fee | ||
| CF01 | Termination of patent right due to non-payment of annual fee |
Granted publication date: 20111130 Termination date: 20190925 |