CN102571383A - Access control method and system - Google Patents

Access control method and system Download PDF

Info

Publication number
CN102571383A
CN102571383A CN2010105929092A CN201010592909A CN102571383A CN 102571383 A CN102571383 A CN 102571383A CN 2010105929092 A CN2010105929092 A CN 2010105929092A CN 201010592909 A CN201010592909 A CN 201010592909A CN 102571383 A CN102571383 A CN 102571383A
Authority
CN
China
Prior art keywords
service
routing node
node information
information table
routed path
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Granted
Application number
CN2010105929092A
Other languages
Chinese (zh)
Other versions
CN102571383B (en
Inventor
阮曙东
陈小洪
李鹏坤
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Tencent Technology Shenzhen Co Ltd
Original Assignee
Tencent Technology Shenzhen Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Tencent Technology Shenzhen Co Ltd filed Critical Tencent Technology Shenzhen Co Ltd
Priority to CN201010592909.2A priority Critical patent/CN102571383B/en
Publication of CN102571383A publication Critical patent/CN102571383A/en
Application granted granted Critical
Publication of CN102571383B publication Critical patent/CN102571383B/en
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Images

Abstract

The invention discloses a service access control method and a service access control system, which are used for solving the technical problems of disaster recovery, poor fault-tolerance performance, low speed in terminal access and visit and the like of an IDC (Internet Data Center), caused when access is realized by adopting a fixed IP (Internet Protocol) or a fixed domain name. A route node information sheet including node information and service state information is established; the service state information of existence of service nodes corresponding to a route trace, access speed and the like is acquired through simulating the service request of a terminal; and the optimal service node is selected for the terminal based on the route node information sheet. By adopting the invention, the optimal service node can be selected for the terminal according to a gateway accessed by the terminal, so that the terminal access and visit speed is improved. According to the invention, through dynamic maintenance of the route node information sheet, some IDC or a plurality of IDCs of which the service is abnormal can be automatically shielded, and the service is switched into the normal IDC, so that disaster recovery of the IDC is realized and the service quality is promoted.

Description

A kind of connection control method and system
Technical field
The present invention relates to the Internet access technology, relate in particular to a kind of Internet data center (Internet DataCenter, IDC) service connection control method and system.
Background technology
When the service that the terminal access the Internet provides, the terminal generally all adopts the mode of fixing IP of visit or fixed domain name to initiate to insert request, and is relatively poor based on Internet data center's flexibility that this means realize; Particularly striding calling and aspect such as IDC disaster tolerance of IDC; If a server breaks down, often need artificial treatment, response speed is slow; Handle untimelyly, be prone to the user is caused unnecessary loss.With the IDC disaster tolerance is example, and the service of cooperating a plurality of IDC at certain IDC occurs when unusual, and system can't shield automatically and unusual IDC occur, can't automatically service be switched on the normal IDC, causes service disruption.In addition; Because IDC is inserted through gateway in the terminal; The access speed of the path between different gateways and each IDC is differentiated, because the access mode of fixing IP or domain name is adopted at the terminal, system can not be according to the IAD at terminal; Return and select the fastest access point of its access speed, so access speed is slower.
Summary of the invention
In view of this, main purpose of the present invention is to provide a kind of service connection control method and system, is used for solve adopting fixedly IP or when fixedly the domain name mode inserted, IDC disaster tolerance, fault freedom were not high, terminal access and access speed wait technical problem slowly.
For achieving the above object, technical scheme of the present invention is achieved in that
A kind of access control system, this system comprises:
The routing node information module is used for the routing node information table between management gateway and the Internet data center (IDC), and said routing node information table comprises at least: routing node information and service status information; Said service status information comprises following information at least: whether the service corresponding with routed path exist, with response time of the corresponding service of routed path.
The service monitoring module is used for the services request according to said routing node information table pseudo-terminal, obtains with the corresponding service status information of routed path and with the service status information of obtaining to feed back to the routing node information module;
Configuration Manager is used for configuration and management service node, and routed path between gateway and the IDC is managed;
Routing module control is used for obtaining the service status information corresponding with routed path from said routing node information table, for selecting optimum service node in the terminal.
Further; The services request of said service monitoring module through pseudo-terminal periodically travels through the response time that service was deposited, added up to routed path is corresponding in the said routing node information table service whether; And testing result fed back to said routing node information module, said routing node information module upgrades the service status information under the routed path corresponding in the said routing node information table after receiving said testing result.
Further, said Configuration Manager regularly detects the state of service node, and instructs said routing node information module to add, delete or revise the route entry in the said routing node information table according to testing result.
Further, said routing module control also is used to obtain the load information of service node, and the service status information corresponding with routed path that combines from said routing node information table, to obtain carried out load balancing.
Based on said system, the present invention also provides a kind of connection control method, and this method comprises:
Set up the routing node information table, said routing node information table comprises at least: routing node information and service status information; Said service status information comprises following information at least: whether the service corresponding with routed path exist, with response time of the corresponding service of routed path.
The services request of pseudo-terminal is obtained and the corresponding service status information of routed path, upgrades said routing node information table;
From said routing node information table, obtain the service status information corresponding, for selecting optimum service node in the terminal with routed path.
Further, said method also comprises: regularly detect the state of service node, and add, delete or revise the route entry in the said routing node information table according to testing result.
Further; The services request of said pseudo-terminal; Upgrading said routing node information table method is specially: periodically travel through said routing node information table; Judge that whether the service corresponding with routed path exists, adds up the response time of service, refreshes the service status information under the routed path corresponding in the said routing node information table in real time according to testing result.
Further, said method also comprises: obtain the load information of service node, carry out load balancing in conjunction with the service status information of from said routing node information table, obtaining corresponding with routed path.
The present invention safeguards that through foundation the routing node information table comes the real-time state that reflects variation of the route between gateway and the service node and service node; Through the services request of pseudo-terminal, obtain whether the service node corresponding with routed path exists, service status information such as access speed; Based on the routing node information table is that optimum service node is selected at the terminal.It is that optimum service node is selected at the terminal that the present invention can realize according to the gateway that the terminal is inserted, and has improved the access and the access speed at terminal.The present invention is through safeguarding the routing node information table dynamically, occurs automatically it being shielded, and service being switched among the normal IDC, thereby realized the IDC disaster-tolerant backup when unusual in the service of certain IDC or a plurality of IDC, promoted service quality.
Description of drawings
Fig. 1 is the structural representation of system according to the invention;
Fig. 2 is the flow chart of the method for the invention.
Embodiment
For making the object of the invention, technical scheme and advantage clearer, below lift embodiment and with reference to accompanying drawing, to further explain of the present invention.
Fig. 1 serves the sketch map that access control system combines with existing network infrastructure for the present invention; The terminal is arranged in the service node of IDC through gateway access; Each IDC is deployed with one and overlaps the service node that service is provided for the terminal, and the corresponding a kind of service of each service node or business are under the terminal roaming scene; The terminal possibly initiated the request of the service of obtaining through different gateways; Basic thought of the present invention is, for obtain the access speed of service under the different route entries through the visit of pseudo-terminal, for selecting optimum access path in the terminal.System 100 according to the invention comprises: routing node information module 101, service monitoring module 102, Configuration Manager 103, routing module control 104.
Routing node information module 101; Be used for management gateway and the routing node information table between the IDC of service is provided; Said routing node information table is made up of route entry; The corresponding routed path between from the gateway to IDC of each route entry, said routing node information table mainly comprises: routing node information and service status information, said routing node information comprises: gateway information, routing iinformation, be arranged in the service node information of IDC etc.; Said service status information includes but not limited to: whether service exists, the service response speed corresponding with routed path etc.;
Foundation, modification and the deletion of the route entry in the said routing node information table are controlled through Configuration Manager 103; For example; As shown in the figure, the demand as if according to disaster tolerance or load balancing needs to set up, revise or delete the route between the gateway 1 to IDC3; Then Configuration Manager 103 sends and sets up, revises or delete route instruction and give routing node information module 101, and routing node information module 101 sets up, revises or delete corresponding route entry in the routing node information table.
Said routing node information module 101 also is used to receive the corresponding service status information of route entry of service monitoring module 102 feedbacks, and upgrades said routing node information table according to the service status information that receives;
Said routing node information module 101 also provides the query interface of routing node information table, supplies other module invokes;
Service monitoring module 102 is used for the services request based on the route entry pseudo-terminal of routing node information table, obtains service status information and service status information is fed back to routing node information module 101; For example; This module periodically travels through the routing node information table; Initiate services request to each routed path pseudo-terminal to the service node of correspondence; And statistics is from initiating request to the time that response spent that receives service node, if repeatedly after the initiation request service node do not have response, can assert then that this paths network breaks down or serves not exist; After detection finishes, service monitoring module 102 will the response time and the service status information that whether exists of service feed back to routing node information module 101;
Configuration Manager 103 is used for unified configuration and management service node.Configuration Manager 103 regular test sections are deployed on the state of the service node among the IDC; And according to the said routing node information table of testing result regular update; For example, when detecting situation such as service node out-of-service, the system failure, instruct corresponding route entry in the said routing node information module 101 deletion of node route information tables; When trouble shooting, instruct said routing node information module 101 to increase route entry corresponding in the node route information tables newly;
Configuration Manager 103 also is used for the route between management gateway and the IDC; For example; Whether having service status information in the said routing node information table of the regular detection of Configuration Manager is the non-existent routed path of service; If exist; Then instruct the routing node information module to delete corresponding routed path, and carry out the handover operation of service node, current services request is switched on other the routed path; If need newly-increased routed path, then newly-increased routing node information is sent to said routing node information module, instruct it in the routing node information table, to increase corresponding routed path newly.
Routing module control 104; Being used for according to the service status information from the routing node information table of routing node information module 101, obtained is that optimum route is selected at the terminal, and the route of said optimum refers to the highest route of factors such as loading condition scoring of the fastest or integrated access speed of access speed, service node;
Further; Routing module control 104 also is used to obtain the load state information of each service node; And carry out load balancing according to the load condition of each service node; For example, when the load of certain service node surpasses on the predetermined threshold value in limited time, follow-up access request is assigned on the less service node of load according to certain load-balancing algorithm;
Further; Configuration Manager 103 also is used for according to the service status information of obtaining from service monitoring module 102 and carries out disaster tolerance from the service node state information that the IDC side directly monitors and handle; For example carry out the switching of service node when perhaps the service appearance is unusual at network; For example, the corresponding route entry of service node that information module deletion of instruction routing node or modification are broken down is directed to services request on other the service node.
The flow chart of steps of Fig. 2 a kind of connection control method provided by the invention, this method realize that based on the structure of access control system provided by the invention concrete steps are explained as follows:
Step 200: set up the routing node information table, said routing node information table comprises at least: routing node information and service status information; Service status information comprises following information at least: whether the service corresponding with routed path exist, with response time of the corresponding service of routed path.
Step 202: the services request of pseudo-terminal, obtain and the corresponding service status information of routed path, upgrade said routing node information table;
Step 204: from said routing node information table, obtain the service status information corresponding, for selecting optimum service node in the terminal with routed path.
Preferably; The method of the invention also comprises the process that route entry upgrades: in order dynamically the route entry that is recorded in the routing node information table to be carried out dynamic management; Through the Configuration Manager 103 regular states that detect each service node that is arranged in IDC, the route entry in the said routing node information table is added, deletes or revise in instruction according to testing result.For example when machine is delayed in the service node power down Configuration Manager 103 through service node 1 that detect to find the to be positioned at IDC1 machine of delaying; Then instruct in the routing node information module 101 deletion routing node information tables the corresponding routed paths of service node among all relevant IDC1 1, and will be connected on the service node that is directed to other with the existing of this service node with identical function.
Preferably, the services request of said pseudo-terminal, upgrade said routing node information table method and be specially:
Service monitoring module 102 periodically travels through said routing node information table; According to the services request of pseudo-terminal one by one of the route entry in the routing node information table; And whether have response and response time of services request to judge whether the service corresponding with routed path exists and add up the response time of serving according to service end, refresh the service status information under the routed path of correspondence in the said routing node information table in real time according to testing result.
Preferably; The method of the invention also comprises the step of load balancing: the load condition that obtains each service node by routing module control 104 periodicity or with the alarm report mode in real time; If the load of certain service node has surpassed predetermined thresholding; Then when selecting service node, the terminal is directed on the lower service node with identical function of other load for the terminal.Concrete load-balancing algorithm can combine the service status information in the routing node information table; For example; In other less route entry of load, select minimum path allocation of response time to give the terminal, can take into account the demand of load balancing and the demand of response time like this.
The above is merely preferred embodiment of the present invention, is not to be used to limit protection scope of the present invention.

Claims (10)

1. an access control system is characterized in that, this system comprises:
The routing node information module is used for the routing node information table between management gateway and the Internet data center (IDC), and said routing node information table comprises at least: routing node information and service status information;
The service monitoring module is used for the services request according to said routing node information table pseudo-terminal, obtains with the corresponding service status information of routed path and with the service status information of obtaining to feed back to the routing node information module;
Configuration Manager is used for configuration and management service node, and routed path between gateway and the IDC is managed;
Routing module control is used for obtaining the service status information corresponding with routed path from said routing node information table, for selecting optimum service node in the terminal.
2. system according to claim 1 is characterized in that, said service status information comprises following information at least: whether the service corresponding with routed path exist, with response time of the corresponding service of routed path.
3. system according to claim 2; It is characterized in that; The services request of said service monitoring module through pseudo-terminal periodically travels through the response time that service was deposited, added up to routed path is corresponding in the said routing node information table service whether; And testing result fed back to said routing node information module, said routing node information module upgrades the service status information under the routed path corresponding in the said routing node information table after receiving said testing result.
4. system according to claim 2; It is characterized in that; Said Configuration Manager regularly detects the state of service node, and instructs said routing node information module to add, delete or revise the route entry in the said routing node information table according to testing result.
5. system according to claim 1 is characterized in that said routing module control also is used to obtain the load information of service node, and the service status information corresponding with routed path that combines from said routing node information table, to obtain carried out load balancing.
6. a connection control method is characterized in that, this method comprises:
Set up the routing node information table, said routing node information table comprises at least: routing node information and service status information;
The services request of pseudo-terminal is obtained and the corresponding service status information of routed path, upgrades said routing node information table;
From said routing node information table, obtain the service status information corresponding, for selecting optimum service node in the terminal with routed path.
7. method according to claim 6 is characterized in that, said service status information comprises following information at least: whether the service corresponding with routed path exist, with response time of the corresponding service of routed path.
8. method according to claim 6 is characterized in that, said method also comprises:
Regularly detect the state of service node, and add, delete or revise the route entry in the said routing node information table according to testing result.
9. method according to claim 6 is characterized in that, the services request of said pseudo-terminal is upgraded said routing node information table method and is specially:
Periodically travel through said routing node information table, judge that whether the service corresponding with routed path exists, adds up the response time of service, refreshes the service status information under the routed path corresponding in the said routing node information table in real time according to testing result.
10. method according to claim 6 is characterized in that, said method also comprises:
Obtain the load information of service node, carry out load balancing in conjunction with the service status information of from said routing node information table, obtaining corresponding with routed path.
CN201010592909.2A 2010-12-16 2010-12-16 Access control method and system Active CN102571383B (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN201010592909.2A CN102571383B (en) 2010-12-16 2010-12-16 Access control method and system

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN201010592909.2A CN102571383B (en) 2010-12-16 2010-12-16 Access control method and system

Publications (2)

Publication Number Publication Date
CN102571383A true CN102571383A (en) 2012-07-11
CN102571383B CN102571383B (en) 2015-06-17

Family

ID=46415919

Family Applications (1)

Application Number Title Priority Date Filing Date
CN201010592909.2A Active CN102571383B (en) 2010-12-16 2010-12-16 Access control method and system

Country Status (1)

Country Link
CN (1) CN102571383B (en)

Cited By (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN105721304A (en) * 2016-04-05 2016-06-29 网宿科技股份有限公司 Adaptive routing adjustment method and system and service device
CN107197502A (en) * 2017-06-19 2017-09-22 深圳市盛路物联通讯技术有限公司 A kind of control edge routing node updates the method and apparatus of route information table
CN108347465A (en) * 2017-01-23 2018-07-31 阿里巴巴集团控股有限公司 A kind of method and device of selection network data center
CN107197501B (en) * 2017-06-19 2020-03-24 深圳市盛路物联通讯技术有限公司 Method and equipment for updating routing information table based on monitored equipment
CN113630317A (en) * 2021-07-28 2021-11-09 星辰天合(北京)数据科技有限公司 Data transmission method and device, nonvolatile storage medium and electronic device

Citations (7)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20010047414A1 (en) * 2000-05-29 2001-11-29 Yoon Ki J. Dedicated private network service method having backup and loads-balancing functions
CN1489069A (en) * 2002-10-10 2004-04-14 华为技术有限公司 Content-oriented load equalizing method and apparatus
US20060271655A1 (en) * 2003-05-21 2006-11-30 Nitgen Technologies Co., Ltd. Intelligent traffic management system for networks and intelligent traffic management method using the same
CN101014046A (en) * 2007-02-02 2007-08-08 清华大学 Method for integrating service location with service quality routing in service loading network
CN101047637A (en) * 2006-06-30 2007-10-03 华为技术有限公司 Method for requiring local mobile anchor point information by access route and its application
CN101163072A (en) * 2007-08-10 2008-04-16 林明辉 Automatic selection optimized routing logon communication method of login server
CN101505234A (en) * 2009-03-17 2009-08-12 中兴通讯股份有限公司 System and method for inter-board communication

Patent Citations (7)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20010047414A1 (en) * 2000-05-29 2001-11-29 Yoon Ki J. Dedicated private network service method having backup and loads-balancing functions
CN1489069A (en) * 2002-10-10 2004-04-14 华为技术有限公司 Content-oriented load equalizing method and apparatus
US20060271655A1 (en) * 2003-05-21 2006-11-30 Nitgen Technologies Co., Ltd. Intelligent traffic management system for networks and intelligent traffic management method using the same
CN101047637A (en) * 2006-06-30 2007-10-03 华为技术有限公司 Method for requiring local mobile anchor point information by access route and its application
CN101014046A (en) * 2007-02-02 2007-08-08 清华大学 Method for integrating service location with service quality routing in service loading network
CN101163072A (en) * 2007-08-10 2008-04-16 林明辉 Automatic selection optimized routing logon communication method of login server
CN101505234A (en) * 2009-03-17 2009-08-12 中兴通讯股份有限公司 System and method for inter-board communication

Cited By (8)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN105721304A (en) * 2016-04-05 2016-06-29 网宿科技股份有限公司 Adaptive routing adjustment method and system and service device
CN108347465A (en) * 2017-01-23 2018-07-31 阿里巴巴集团控股有限公司 A kind of method and device of selection network data center
CN108347465B (en) * 2017-01-23 2021-02-02 阿里巴巴集团控股有限公司 Method and device for selecting network data center
CN107197502A (en) * 2017-06-19 2017-09-22 深圳市盛路物联通讯技术有限公司 A kind of control edge routing node updates the method and apparatus of route information table
CN107197502B (en) * 2017-06-19 2020-03-24 深圳市盛路物联通讯技术有限公司 Method and equipment for controlling edge routing node to update routing information table
CN107197501B (en) * 2017-06-19 2020-03-24 深圳市盛路物联通讯技术有限公司 Method and equipment for updating routing information table based on monitored equipment
CN113630317A (en) * 2021-07-28 2021-11-09 星辰天合(北京)数据科技有限公司 Data transmission method and device, nonvolatile storage medium and electronic device
CN113630317B (en) * 2021-07-28 2022-10-11 北京星辰天合科技股份有限公司 Data transmission method and device, nonvolatile storage medium and electronic device

Also Published As

Publication number Publication date
CN102571383B (en) 2015-06-17

Similar Documents

Publication Publication Date Title
CN103583063B (en) System and method for the fault recovery of geographic redundancy gateway
US9407498B2 (en) Mobile gateways in pool for session resilience
EP2458768B1 (en) Method for switching node main-standby controllers based on content delivery network (cdn) and cdn thereof
US9722875B2 (en) Master device, slave device, and methods thereof
CN100568854C (en) A kind of method and interface board that keeps neighborhood
CN104285459A (en) Control node and communication control method
CN102035676A (en) ARP (Address Resolution Protocol) interaction based method and equipment for detecting and recovering link fault
EP2787742B1 (en) Method and system for transmitting network video
US9419890B2 (en) Streaming service load sharing method, streaming service processing method, and corresponding device and system
CN103383689A (en) Service process fault detection method, device and service node
CN102571383A (en) Access control method and system
CN102045197A (en) Alarm data synchronization method and network management system
CN103404108A (en) Component, system and method for controlling communication of data of at least one application of communications network
CN104703165A (en) Wireless access processing method, retransmitting equipment and network controller
CN105554099A (en) Method and device for balancing load of acquisition servers
CN101984623B (en) Firewall network address translation dynamic load balancing method and device
CN104579729B (en) The notification method and device of CGN single board default
CN101192959A (en) A recovery method for multicast service connection in automatic switching optical network
US20120284274A1 (en) Method and device for service management
CN106534758B (en) Conference backup method and device
CN104348842A (en) Route method and route management server of distributed storage system, and distributed storage system
KR100947240B1 (en) Load distributed type duplex system
CN116319963A (en) Service management method, system, terminal equipment and storage medium
CN113824595B (en) Link switching control method and device and gateway equipment
CN102223241B (en) Method and equipment for informing network change

Legal Events

Date Code Title Description
C06 Publication
PB01 Publication
C10 Entry into substantive examination
SE01 Entry into force of request for substantive examination
C14 Grant of patent or utility model
GR01 Patent grant