CN108965127A - A kind of method and device identifying inter-domain routing system key node - Google Patents

A kind of method and device identifying inter-domain routing system key node Download PDF

Info

Publication number
CN108965127A
CN108965127A CN201810797038.4A CN201810797038A CN108965127A CN 108965127 A CN108965127 A CN 108965127A CN 201810797038 A CN201810797038 A CN 201810797038A CN 108965127 A CN108965127 A CN 108965127A
Authority
CN
China
Prior art keywords
node
inter
routing system
domain routing
failure
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Granted
Application number
CN201810797038.4A
Other languages
Chinese (zh)
Other versions
CN108965127B (en
Inventor
邱菡
朱会虎
朱俊虎
周天阳
李睿
曾子懿
郭伟
臧艺超
赵世斌
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Information Engineering University of PLA Strategic Support Force
Original Assignee
Information Engineering University of PLA Strategic Support Force
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Information Engineering University of PLA Strategic Support Force filed Critical Information Engineering University of PLA Strategic Support Force
Priority to CN201810797038.4A priority Critical patent/CN108965127B/en
Publication of CN108965127A publication Critical patent/CN108965127A/en
Application granted granted Critical
Publication of CN108965127B publication Critical patent/CN108965127B/en
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Classifications

    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L45/00Routing or path finding of packets in data switching networks
    • H04L45/02Topology update or discovery
    • H04L45/04Interdomain routing, e.g. hierarchical routing

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Data Exchanges In Wide-Area Networks (AREA)

Abstract

The present invention proposes a kind of method for identifying inter-domain routing system key node, comprising: obtains in inter-domain routing system operational process respectively, the side load change information and update message after each node failure propagate information;It according to the side load change information after each node failure and updates message and propagates information, calculate separately to obtain the influences size of opposite side and the general impacts range for updating message generated after each node failure;According to the general impacts range of the influence size of opposite side after each node failure and the update message generated, calculate separately to obtain the influence size for generating the inter-domain routing system after each node failure;According to the influence size generated after each node failure to the inter-domain routing system, the key node in the inter-domain routing system is identified.It can recognize that the key node in inter-domain routing system by adopting the above technical scheme.

Description

A kind of method and device identifying inter-domain routing system key node
Technical field
The present invention relates to Internet technical field more particularly to it is a kind of identify inter-domain routing system key node method and Device.
Background technique
Internet can formulate independent routing in each autonomous system from multiple autonomous systems are macroscopically divided into The network of strategy, all autonomous system compositions is inter-domain routing system, and inter-domain routing system passes through BGP (Border Gateway Protocol, Border Gateway Protocol) it realizes the control of data and forwards work.
After inter-domain routing system cascading failure refers to that one or more nodes or side are failed in inter-domain routing system, due to section The relationship that intercouples between point and side, the process for causing failure phenomenon constantly to be propagated.It is one or more in inter-domain routing system After node or side failure, the routing node being attached thereto floods a large amount of UPDATE messages, and by the failure node (or side) Flow reselects optimal path, causes flow and is re-assigned to new chain road.A large amount of UPDATE message reaches certain simultaneously One node may cause the resource exhaustions such as the node cpu, memory and fail;Flow reassignment may result in new chain and pass by It carries, new side is caused to be failed.This process is repeated, and may finally lead to the failure of entire inter-domain routing system.It is such to attack It hits and why can result in so damage on a large scale, main cause is that inter-domain routing node is had by topology and inter-domain routing protocol Machine is organized, and key node or side in core status will generate chain reaction, multiple key nodes or side once failing While failure will aggravate chain reaction, eventually lead to the paralysis of inter-domain routing system.
It identifies the key node in inter-domain routing system, and it is implemented targetedly to protect, be to avoid the road Yu Jian The important means of above-mentioned failure paralysis occurs by system.Therefore, a kind of pass that can be identified in inter-domain routing system is needed The method of key node provides support for the key node in protection inter-domain routing system.
Summary of the invention
Based on the demand of the above-mentioned prior art, the present invention propose it is a kind of identify inter-domain routing system key node method and Device can identify the key node in inter-domain routing system.
A method of identification inter-domain routing system key node, comprising:
It obtains in inter-domain routing system operational process respectively, side load change information and update report after each node failure Text propagates information;
According to the side load change information after each node failure and message propagation information is updated, calculates separately to obtain The general impacts range of the influence size of opposite side and the update message generated after each node failure;
According to the general impacts range of the influence size of opposite side after each node failure and the update message generated, divide The influence size generated after each node failure to the inter-domain routing system is not calculated;
According to the influence size generated after each node failure to the inter-domain routing system, the road Yu Jian is identified By the key node in system.
Optionally, described to obtain in inter-domain routing system operational process respectively, the side after each node failure loads variation Information and update message propagate information, comprising:
Determine the timing node of identification inter-domain routing system key node;
The inter-domain routing system is acquired in the basic network data of the timing node, and utilizes the basic network number According to establishing basic network environment;
Using preset inter-domain routing system cascading failure model, simulation is obtained every in the inter-domain routing system respectively Side load change information after a node fails in the basic network environment propagates information with message is updated.
Optionally, the side load change information and update message according to after each node failure propagates information, Calculate separately to obtain the influence size of opposite side and the general impacts range of the update message generated after each node failure, packet It includes:
For each node, following operation is executed respectively:
Change information is loaded according to the side after the node failure, is calculated each on what is influenced after the node failure The influence size on side;
It calculates after the node failure on the sum of the influence size on each side influenced, it is right after the node failure to obtain The influence size on side;
And
Information is propagated according to the update message after the node failure, determines each node adjacent with the node respectively All node sets that the update message of generation is propagated;
According to all node sets that the update message that each node adjacent with the node generates is propagated, institute is determined State the general impacts range of the update message generated after node failure.
Optionally, the totality of the influence size according to opposite side after each node failure and the update message generated Coverage calculates separately to obtain the influence size for generating the inter-domain routing system after each node failure, comprising:
The general impacts range difference of influence size and the update message generated to opposite side after each node failure It is weighted summation process, respectively obtains the influence size generated after each node failure to the inter-domain routing system.
Optionally, described according to the influence size generated after each node failure to the inter-domain routing system, know Key node in the not described inter-domain routing system, comprising:
According to the influence size generated after each node failure to the inter-domain routing system, from the inter-domain routing It is greater than the node of given threshold in all nodes of system after selection failure to the influence that the inter-domain routing system generates, as Key node in the inter-domain routing system.
A kind of device identifying inter-domain routing system key node, comprising:
Information acquisition unit, for obtaining in inter-domain routing system operational process respectively, the side after each node failure is negative It carries change information and updates message and propagate information;
First computing unit, for being propagated according to the side load change information after each node failure with message is updated Information calculates separately to obtain the influence size of opposite side and the general impacts model of the update message generated after each node failure It encloses;
Second computing unit, for according to the influence size of opposite side after each node failure and the update message of generation General impacts range, it is big to calculate separately to obtain the influence generated to the inter-domain routing system after each node failure It is small;
Identifying processing unit, for big according to the influence after each node failure to inter-domain routing system generation It is small, identify the key node in the inter-domain routing system.
Optionally, the information acquisition unit, comprising:
Timing node determination unit, for determining the timing node of identification inter-domain routing system key node;
Network environment establishes unit, acquires the inter-domain routing system in the basic network data of the timing node, and Basic network environment is established using the basic network data;
Analog processing unit, for utilizing preset inter-domain routing system cascading failure model, simulation obtains described respectively Side after each node in inter-domain routing system fails in the basic network environment loads change information and updates message Propagate information.
Optionally, first computing unit according to the side load change information after each node failure and updates report Text propagates information, calculates separately to obtain the influences size of opposite side and the totality for updating message generated after each node failure When coverage, it is specifically used for:
For each node, following operation is executed respectively:
Change information is loaded according to the side after the node failure, is calculated each on what is influenced after the node failure The influence size on side;
It calculates after the node failure on the sum of the influence size on each side influenced, it is right after the node failure to obtain The influence size on side;
And
Information is propagated according to the update message after the node failure, determines each node adjacent with the node respectively All node sets that the update message of generation is propagated;
According to all node sets that the update message that each node adjacent with the node generates is propagated, institute is determined State the general impacts range of the update message generated after node failure.
Optionally, second computing unit according to the influence size of opposite side after each node failure and generates more The general impacts range of new message calculates separately to obtain the shadow for generating the inter-domain routing system after each node failure When ringing size, it is specifically used for:
The general impacts range difference of influence size and the update message generated to opposite side after each node failure It is weighted summation process, respectively obtains the influence size generated after each node failure to the inter-domain routing system.
Optionally, the identifying processing unit according to after each node failure to the inter-domain routing system generate Size is influenced to be specifically used for when identifying the key node in the inter-domain routing system:
According to the influence size generated after each node failure to the inter-domain routing system, from the inter-domain routing It is greater than the node of given threshold in all nodes of system after selection failure to the influence that the inter-domain routing system generates, as Key node in the inter-domain routing system.
Side load variation letter of the present invention by obtaining in inter-domain routing system operational process respectively, after each node failure Breath and update message propagate information, and the influence size of opposite side and the update message of generation after each node failure is calculated General impacts range;It further calculates separately to obtain and the inter-domain routing system be generated after each node failure Influence size, thus realize node importance is quantified, finally according to after each node failure to the road Yu Jian The influence size generated by system, identifies the key node in the inter-domain routing system.Above-mentioned technical proposal passes through to node The influence size caused by inter-domain routing system calculates after failure, to realize the quantization to node importance, Jin Erke To efficiently identify the key node in inter-domain routing system.
Detailed description of the invention
In order to more clearly explain the embodiment of the invention or the technical proposal in the existing technology, to embodiment or will show below There is attached drawing needed in technical description to be briefly described, it should be apparent that, the accompanying drawings in the following description is only this The embodiment of invention for those of ordinary skill in the art without creative efforts, can also basis The attached drawing of offer obtains other attached drawings.
Fig. 1 is a kind of process signal of method for identifying inter-domain routing system key node provided in an embodiment of the present invention Figure;
Fig. 2 is the process signal of the method for another identification inter-domain routing system key node provided in an embodiment of the present invention Figure;
Fig. 3 is inter-domain routing system cascading failure model reduction cascading failure provided in an embodiment of the present invention in inter-domain routing The flow diagram of transmission dynamics process in system;
Fig. 4 is inter-domain routing system partial structural diagram provided in an embodiment of the present invention;
Fig. 5 is a kind of structural representation of device for identifying inter-domain routing system key node provided in an embodiment of the present invention Figure;
Fig. 6 is the structural representation of the device of another identification inter-domain routing system key node provided in an embodiment of the present invention Figure.
Specific embodiment
Following will be combined with the drawings in the embodiments of the present invention, and technical solution in the embodiment of the present invention carries out clear, complete Site preparation description, it is clear that described embodiments are only a part of the embodiments of the present invention, instead of all the embodiments.It is based on Embodiment in the present invention, it is obtained by those of ordinary skill in the art without making creative efforts every other Embodiment shall fall within the protection scope of the present invention.
The embodiment of the invention discloses a kind of method for identifying inter-domain routing system key node, shown in Figure 1, the party Method includes:
S101, obtain in inter-domain routing system operational process respectively, side after each node failure load change information and It updates message and propagates information;
Specifically, Internet can be used as individually from multiple autonomous systems, each autonomous system is macroscopically divided into Entity.Independent routing policy can be formulated in autonomous system, the Routing Protocol in autonomous system is typically include RIP (Open Shortest Path First, is opened by (Routing Information Protocol, routing information protocol) and OSPF Put formula shortest path first) agreement.As a whole by each autonomous system, the network of all autonomous system compositions is domain Between route system, inter-domain routing system by BGP (Border Gateway Protocol, Border Gateway Protocol) realize data Control and forwarding work.
The control message of bgp protocol mainly includes four seed types: OPEN (opening) message, KEEPALIVE (survival) message, The specific effect of UPDATE (update) message and NOTIFICATION (notice) message, every kind of message is as follows:
OPEN message: establishing after TCP connection between inter-domain routing node, and OPEN message is first message sent, uses In establishing BGP connection;
KEEPALIVE message: inter-domain routing node periodically can send KEEPALIVE report to the node for establishing connection therewith Text, to determine the validity of connection;
UPDATE message: being mainly responsible between two nodes and exchange routing iinformation, can inform the reachable information of routing, can also To recall the unreachable information of routing;
NOTIFICATION message: it when errors are detected, sends NOTIFICATION message and closes BGP connection.
These four control messages of BGP, the connection relationship being mainly responsible between maintenance node, by the control plane of routing node Reason, needs to consume CPU, memory source.Other are known as service traffics mainly by the number of constructed in hardware by the flow of routing node It is different from control message flow consumption resource type according to forwarding engine processing.The routing road of bgp protocol selection inter-node communication Diameter, merely by the shortest distance between node, it is also necessary to consider commercial relations between Autonomous Domain, local first grade, source The factors such as location type and address learning source, therefore often shortest path is not the routed path of selection.
Inter-domain routing system cascading failure refers to the failure on one or more nodes or side in inter-domain routing system, due to section The relationship that intercouples between point and side, the process for causing failure phenomenon constantly to be propagated.The reason of node or side can be caused to fail Have very much, the failure of hardware and the Bug of software may cause the failure of node, and the disconnection of physical link can cause side to be lost Effect.
For the side that attack the selected section key node or mulitpath first of node/edge pass through, then it is implemented The attacks such as low rate refusal service, cause these key nodes and key side to fail, the routing node flooding being then attached thereto A large amount of UPDATE messages, and optimal path is reselected by the flow of the node (or side), cause flow and is re-assigned to newly Chain road.A large amount of UPDATE message reaches a certain node simultaneously, may cause node resource and exhausts and fail;Flow divides again With may result in new link Overload, new side is caused to be failed.This process is repeated, and may finally cause between entire domain The failure of route system.
It is influenced of both mainly being generated after inter-domain routing node failure on the network of surrounding, is UPDATE message respectively Propagation cause the influence of the resource consumptions such as CPU and memory and load to reassign node other sides is caused to load increased shadow It rings.Therefore importance of assessment inter-domain routing system node during cascading failure needs to generate from assessment UPDATE message Influence and load reassign generate two angles of influence set out, comprehensive assessment its influence size.
Based on above-mentioned theory, the embodiment of the present invention is by way of simulation, between the domain for obtaining key node to be identified respectively In the process of running, the side load change information and update message of whole system propagate letter to route system after each node failure Breath.
Above-mentioned side loads change information, i.e., by the flow rerouting of the node after node failure, causes flow It is re-assigned to new chain road, causes the changed information of the flow load on side.
Above-mentioned update message propagates information, i.e., after node failure, the node adjacent with the node generates UPDATE message simultaneously It disseminates transmission and causes the changed information of the resource consumption of more nodes.
S102, change information is loaded according to the side after each node failure and updates message and propagates information, count respectively The general impacts range for updating message calculating the influence size of opposite side after obtaining each node failure and generating;
Specifically, directly the load on the side in system is had an impact after node failure in inter-domain routing system, and UPDATE message and wide-scale distribution are generated, and the propagation of UPDATE message influences the resource consumption of node.Therefore, it calculates separately The general impacts model of update message for obtaining the influence size of opposite side after each node failure in inter-domain routing system and generating It encloses, so that it may size be influenced on inter-domain routing system bring after quantifying node failure on this basis, to quantify node Significance level.
Change information is loaded according to the side after node failure, is calculated after node failure to each side influenced Influence size, summation process then is carried out to the influence size on each side influenced, obtains opposite side after node failure Influence size.
And according to the propagation information for updating message generated after node failure, each of generation is calculated more The set for the node that new message is propagated through, then updates the set for the node that message is propagated through to each of generation Summation process is carried out, the general impacts range of update message generated after node failure is obtained.
According to the method described above, right according to the side load change information and update message propagation information after each node failure Each node carries out above-mentioned calculation processing respectively, can calculate separately to obtain the influence size and production of opposite side after each node failure The general impacts range of raw update message.
S103, according to the general impacts model of the influence size of opposite side after each node failure and the update message of generation It encloses, calculates separately to obtain the influence size for generating the inter-domain routing system after each node failure;
Specifically, by the influence size of opposite side after above-mentioned each node failure and being generated more in the embodiment of the present invention The general impacts range of new message carries out corresponding weighted sum processing respectively, obtains after each node failure to inter-domain routing system The influence size that system generates.
The failure of node will generate two different influences to inter-domain routing system, need that both sides is combined to influence to this Node failure carries out comprehensive assessment to the influence that inter-domain routing system generates.Assuming that being by the influence accounting that load reassigns generation α, then the influence size generated after node failure to inter-domain routing system, that is, the different degree of node can be defined as follows:
Individual node k failure is the different degree of node to the influence size that entire inter-domain routing system generates, and is denoted as Dk, then DkIt may be expressed as: Dk=aRk+(1-a)Ik.Wherein, 0 < α < 1, RkIndicate the influence size of opposite side after node k fails, IkIt indicates The general impacts range of the update message generated after node k failure.
Calculating DkBefore the size of value, first to IkAnd RkIt is normalized, DkValue range be 0 < Dk< 1.
S104, according to the influence size generated after each node failure to the inter-domain routing system, described in identification Key node in inter-domain routing system.
Specifically, calculating separately to obtain the road each node failure Hou Duiyujian in inter-domain routing system in step s 103 After the influence size generated by system, the embodiment of the present invention further sets key node selection threshold value, according to each of above-mentioned The influence size that inter-domain routing system is generated after node failure, from all nodes of above-mentioned inter-domain routing system, selection It is greater than the node of above-mentioned key node selection threshold value after failing out to the influence that inter-domain routing system generates, as the above-mentioned road Yu Jian By the key node in system.
It, can be first to all nodes in above-mentioned inter-domain routing system, according to right after failure in above-mentioned selection course The descending sequence sequence of the influence that inter-domain routing system generates, then right after selecting failure in the node after sequence The influence that inter-domain routing system generates is greater than the node of above-mentioned key node selection threshold value, that is, determines in above-mentioned inter-domain routing system Key node.
By above-mentioned introduction as it can be seen that the embodiment of the present invention by obtaining in inter-domain routing system operational process respectively, each It side load change information after node failure and updates message and propagates information, opposite side after each node failure is calculated The general impacts range for updating message for influencing size and generating;It further calculates separately after obtaining each node failure To the influence size that the inter-domain routing system generates, node importance is quantified to realize, finally according to described every The influence size generated after a node failure to the inter-domain routing system identifies the crucial section in the inter-domain routing system Point.Above-mentioned technical proposal is by calculating the influence size caused by inter-domain routing system after node failure, to realize Quantization to node importance, and then the key node in inter-domain routing system can be efficiently identified.
Optionally, in another embodiment of the present invention, shown in Figure 2, it is described to obtain inter-domain routing system respectively In operational process, side load change information and update message after each node failure propagate information, comprising:
S201, the timing node for determining identification inter-domain routing system key node;
S202, the inter-domain routing system is acquired in the basic network data of the timing node, and utilize the basis Network data establishes basic network environment;
Specifically, the node action in inter-domain routing system is different, node importance in different times under node Also different, therefore the key node of the inter-domain routing system under different time nodes is also different.That is, identification inter-domain routing The key node of system has temporal correlation, and the key node of the inter-domain routing system under different time nodes is different, therefore When identifying inter-domain routing system key node, need to determine the timing node of identification first.
Then, under the timing node for acquiring above-mentioned determination, the basic network data of inter-domain routing system, and utilize acquisition Basic network data, establish basic network environment.The network environment is for running preset inter-domain routing system cascading failure Model, so as to the modeling inter-domain routing system node working environment and simulation system node in above-mentioned network environment The process that inter-domain routing system is had an impact after lower failure.
S203, using preset inter-domain routing system cascading failure model, simulation obtains the inter-domain routing system respectively In each node fail in the basic network environment after side load change information and update message propagate information.
Specifically, above-mentioned preset inter-domain routing system cascading failure model, refers to that is pre-established is used between analog domain Load after route system node failure reassigns and model of the UPDATE message in the communication process of inter-domain routing system, the mould Type features the failure procedure on node and side, reduces transmission dynamics process of the cascading failure in inter-domain routing system, ginseng As shown in Figure 3, main working process is as follows:
Step 1: by extracing part of nodes (or side), triggering cascade failure procedure;
Step 2: failure node (or side) is judged whether there is, is not present, just terminates;In the presence of then in next step;
Step 3: it finds out with failure node (or side) adjacent all nodes, the initial section propagated as UPDATE message Routing forwarding collection S is added in these start nodes by point;
Step 4: judge that the node that routing forwarding is concentrated is sent out or forwards UPDATE message with the presence or absence of node needs Information needs, and in next step, do not need, carry out step 7;
The node for receiving UPDATE message information: being added new routing forwarding collection S1 by step 5, and surroundings nodes receive To after UPDATE message information, dissection process is carried out to it, updates oneself route information table and route forwarding table;
Step 6: judging whether there is new node because UPDATE message is excessive, the resource exhaustions such as CPU, memory caused to be failed, If so, node adjacent thereto to be added to new routing forwarding collection S1, step 4 is repeated to six;No, then in next step;
Step 7: finding out the affected node of optimal path and side, according to optimal route selection method find out it is new most Original load is added on new optimal path by shortest path;
Step 8: after judgement load reassigns, whether each side overloads, and overload then fails, and failure set is added in failure side In, return to step 2.
Using above-mentioned inter-domain routing system cascading failure model, each node in above-mentioned inter-domain routing system is simulated respectively Side load change information and update message after failure propagate information.
Step S204~S206 in the present embodiment respectively correspond the step S102 in embodiment of the method shown in FIG. 1~ S104, the content of particular content embodiment of the method shown in Figure 1, details are not described herein again.
Optionally, in another embodiment of the present invention, also disclose it is described according to each node failure after Side, which loads change information and updates message, propagates information, calculates separately to obtain the influence size of opposite side after each node failure With the general impacts range of the update message of generation, comprising:
Side load change information and update after each node failure in above-mentioned inter-domain routing system has been determined respectively After message propagates information, for each node, the shadow that opposite side after the node failure is calculated in following operation is executed respectively The general impacts range for updating message ringing size and generating.
Wherein, the influence size of opposite side after the node failure is calculated according to the side load change information after node failure Treatment process are as follows:
Change information is loaded according to the side after the node failure, is calculated each on what is influenced after the node failure The influence size on side;
It calculates after the node failure on the sum of the influence size on each side influenced, it is right after the node failure to obtain The influence size on side;
Specifically, in inter-domain routing system, while initial load and the number of optimal path when passing through this it is related, use Adjacency matrix AN×NIndicate the set on side, Aij=1 indicates that there are a connection sides.D (t) indicates t moment by the optimal road on side The number of diameter, the load on side change with the variation by optimal path number thereon, therefore when a certain moment t, side eijLoad Lij(t) it may be expressed as: Lij(t)=α * d (t), wherein α is coefficient, then side eijInitial load Lij(0) it can indicate Are as follows: Lij(0)=α * d (0).
For side, the nominal load on side is often related to initial load, therefore defines the nominal load on sideWith it is first Begin load Lij(0) related, it may be expressed as:Wherein r is coefficient, and stipulated that when full Sufficient conditionWhen side fail.
The nominal load on side is related to initial load, and each edge is according to itself material, present position and adjacent node Difference, initial load are very different, therefore there is also bigger differences between the nominal load on side.For different two Side increases same load, caused by influence size, often difference is larger.Therefore, evaluate a node failure to determine certain The influence degree of a line single cannot have a net increase of dosage according to side load, it is also necessary to which comprehensively considering the side can bear Nominal load.
Setting of the embodiment of the present invention leads to side e by node k failureijIncreased load is relative to the ratio of nominal load Evaluation node k failure opposite side eijThe index of influence size increase negative ratio, be denoted as rij(k).Remember node k failure so that side eijIncrease Uninterrupted be Δ Lij(k), then rij(k) it may be expressed as:
According to above-mentioned calculation formula, change information can be loaded according to the side after the node failure, be calculated described On the influence size on each side influenced after node failure.
By analysis it is found that influence caused by measurement load reassigns can be from two angles: first is that coverage, Second is that increasing loaded relative scale to single side.After node failure, can mulitpath be failed, cause the weight of mulitpath New routing.Therefore after evaluating a node failure, the influence of reassignment is loaded, the load for needing to comprehensively consider multiple summits increases, I.e. to its whole relative effect summation.The influence size of opposite side after node k failure is denoted as Rk, then can pass through following formula meter It calculates:
Wherein M indicates node collection, Aij=1 indicates there is connection side between i-node and j node.
According to above-mentioned calculation formula, calculates after the node failure on the sum of the influence size on each side influenced, obtain The influence size of opposite side after to the node failure.
And information is propagated according to the update message after node failure, the update report generated after node failure is calculated The treatment process of the general impacts range of text are as follows:
Information is propagated according to the update message after the node failure, determines each node adjacent with the node respectively All node sets that the update message of generation is propagated;
According to all node sets that the update message that each node adjacent with the node generates is propagated, institute is determined State the general impacts range of the update message generated after node failure.
Specifically, the node adjacent with the node can send UPDATE message to surrounding node when node failure Information is notified to node failure situation.After other nodes receive message information, message information can be parsed, modification is certainly Oneself route information table and route forwarding table simultaneously decide whether to forward the message, need, forward, and otherwise no longer forward and are somebody's turn to do Message.One UPDATE message is disconnected by nodal test to session and is generated, and is stopped to there is no node forwarding.The biography of message Process is broadcast, the entire influence process generated after node failure can be regarded as.The influence size that UPDATE message generates mainly passes through Its coverage is measured to assess, this coverage is main related to two factors, be respectively adjacent node number and The coverage for the UPDATE message that each adjacent node generates.
It is inter-domain routing system partial structural diagram as shown in Figure 4, the nodes such as figure interior joint k and i, j, l, m are adjacent, and There are the commercial relations of information forwarding.A certain moment k node failure causes the bgp session of itself and adjacent node to disconnect.When i, j, L, when the nodal tests session such as m disconnects, UPDATE message information will be sent to surroundings nodes, inform link disconnection.Therefore Single branch road UPDATE message information spread scope is calculated first;The UPDATE that around all nodes generate is comprehensively considered later The coverage of message, the general impacts range of the UPDATE message as generated after node failure, is denoted as Ik
Specifically, it is first determined after the node failure, the update message of each node generation adjacent with the node The node being propagated through respectively obtains all node sets that the update message that each node generates is propagated.It then will be upper The corresponding all node sets progress aggregation process for updating message and propagating of each node is stated, is generated after obtaining the node failure Update message general impacts range.
After node k failure, by all node set U for the UPDATE message propagation that the node i adjacent with node k generatesi For the coverage of i branch, the size of coverage is indicated with the number of set interior joint, is denoted as Fi, then the shadow of node i entirety Ring range IkIt may be expressed as: Ik=∑iFi, wherein i belongs to the adjacent segments point set of k node.
Another embodiment of the present invention also discloses a kind of device for identifying inter-domain routing system key node, referring to Fig. 5 institute Show, which includes:
Information acquisition unit 100, for obtaining in inter-domain routing system operational process respectively, the side after each node failure It loads change information and updates message and propagate information;
First computing unit 110, for according to the side load change information and update message after each node failure Information is propagated, calculates separately to obtain the influences size of opposite side and the overall shadow for updating message generated after each node failure Ring range;
Second computing unit 120, for according to the influence size of opposite side and the update of generation after each node failure The general impacts range of message calculates separately to obtain the influence for generating the inter-domain routing system after each node failure Size;
Identifying processing unit 130, for according to the shadow generated after each node failure to the inter-domain routing system Size is rung, identifies the key node in the inter-domain routing system.
Optionally, in another embodiment of the present invention, shown in Figure 6, the information acquisition unit 100, comprising:
Timing node determination unit 1001, for determining the timing node of identification inter-domain routing system key node;
Network environment establishes unit 1002, acquires the inter-domain routing system in the basic network number of the timing node According to, and basic network environment is established using the basic network data;
Analog processing unit 1003, for utilizing preset inter-domain routing system cascading failure model, simulation is obtained respectively Side after each node in the inter-domain routing system fails in the basic network environment loads change information and update Message propagates information.
Wherein, first computing unit 110 loads change information and update according to the side after each node failure Message propagates information, calculates separately to obtain after each node failure the influences size of opposite side and what is generated update the total of message When body coverage, it is specifically used for:
For each node, following operation is executed respectively:
Change information is loaded according to the side after the node failure, is calculated each on what is influenced after the node failure The influence size on side;
It calculates after the node failure on the sum of the influence size on each side influenced, it is right after the node failure to obtain The influence size on side;
And
Information is propagated according to the update message after the node failure, determines each node adjacent with the node respectively All node sets that the update message of generation is propagated;
According to all node sets that the update message that each node adjacent with the node generates is propagated, institute is determined State the general impacts range of the update message generated after node failure.
Second computing unit 120 is according to the influence size of opposite side after each node failure and the update report of generation It is big to calculate separately to obtain the influence generated to the inter-domain routing system after each node failure for the general impacts range of text Hour, it is specifically used for:
The general impacts range difference of influence size and the update message generated to opposite side after each node failure It is weighted summation process, respectively obtains the influence size generated after each node failure to the inter-domain routing system.
The identifying processing unit 130 is according to the influence generated after each node failure to the inter-domain routing system Size is specifically used for when identifying the key node in the inter-domain routing system:
According to the influence size generated after each node failure to the inter-domain routing system, from the inter-domain routing It is greater than the node of given threshold in all nodes of system after selection failure to the influence that the inter-domain routing system generates, as Key node in the inter-domain routing system.
Specifically, the specific works content of each unit in the various embodiments described above, refers to above method embodiment Content, details are not described herein again.
It should be noted that all the embodiments in this specification are described in a progressive manner, each embodiment weight Point explanation is the difference from other embodiments, and the same or similar parts between the embodiments can be referred to each other. For device class embodiment, since it is basically similar to the method embodiment, so being described relatively simple, related place ginseng See the part explanation of embodiment of the method.
Finally, it is to be noted that, herein, relational terms such as first and second and the like be used merely to by One entity or operation are distinguished with another entity or operation, without necessarily requiring or implying these entities or operation Between there are any actual relationship or orders.Moreover, the terms "include", "comprise" or its any other variant meaning Covering non-exclusive inclusion, so that the process, method, article or equipment for including a series of elements not only includes that A little elements, but also including other elements that are not explicitly listed, or further include for this process, method, article or The intrinsic element of equipment.In the absence of more restrictions, the element limited by sentence "including a ...", is not arranged Except there is also other identical elements in the process, method, article or apparatus that includes the element.
Each embodiment in this specification is described in a progressive manner, the highlights of each of the examples are with other The difference of embodiment, the same or similar parts in each embodiment may refer to each other.
The foregoing description of the disclosed embodiments enables those skilled in the art to implement or use the present invention. Various modifications to these embodiments will be readily apparent to those skilled in the art, as defined herein General Principle can be realized in other embodiments without departing from the spirit or scope of the present invention.Therefore, of the invention It is not intended to be limited to the embodiments shown herein, and is to fit to and the principles and novel features disclosed herein phase one The widest scope of cause.

Claims (10)

1. a kind of method for identifying inter-domain routing system key node characterized by comprising
It obtains in inter-domain routing system operational process respectively, the side load change information and update message after each node failure pass Broadcast information;
According to the side load change information after each node failure and message propagation information is updated, calculates separately to obtain described The general impacts range of the influence size of opposite side and the update message generated after each node failure;
According to the general impacts range of the influence size of opposite side after each node failure and the update message generated, count respectively Calculate the influence size generated after obtaining each node failure to the inter-domain routing system;
According to the influence size generated after each node failure to the inter-domain routing system, the inter-domain routing system is identified Key node in system.
2. the method according to claim 1, wherein it is described respectively obtain inter-domain routing system operational process in, Side load change information and update message after each node failure propagate information, comprising:
Determine the timing node of identification inter-domain routing system key node;
The inter-domain routing system is acquired in the basic network data of the timing node, and build using the basic network data Vertical basic network environment;
Using preset inter-domain routing system cascading failure model, simulation obtains each section in the inter-domain routing system respectively Side load change information after point fails in the basic network environment propagates information with message is updated.
3. the method according to claim 1, wherein the side according to after each node failure loads and becomes Change information and update message and propagate information, calculates separately to obtain the influences size of opposite side and generation after each node failure Update the general impacts range of message, comprising:
For each node, following operation is executed respectively:
Change information is loaded according to the side after the node failure, is calculated after the node failure on each side influenced Influence size;
It calculates after the node failure on the sum of the influence size on each side influenced, obtains opposite side after the node failure Influence size;
And
Information is propagated according to the update message after the node failure, determines that each node adjacent with the node generates respectively All node sets for being propagated of update message;
According to all node sets that the update message that each node adjacent with the node generates is propagated, the section is determined The general impacts range of the update message generated after point failure.
4. the method according to claim 1, wherein the influence according to opposite side after each node failure The general impacts range of size and the update message generated calculates separately to obtain after each node failure to the road Yu Jian The influence size generated by system, comprising:
The general impacts range of influence size and the update message generated to opposite side after each node failure carries out respectively Weighted sum processing respectively obtains the influence size generated after each node failure to the inter-domain routing system.
5. the method according to claim 1, wherein it is described according to after each node failure between the domain The influence size that route system generates, identifies the key node in the inter-domain routing system, comprising:
According to the influence size generated after each node failure to the inter-domain routing system, from the inter-domain routing system All nodes in selection failure after to the inter-domain routing system generate influence be greater than given threshold node, as described Key node in inter-domain routing system.
6. a kind of device for identifying inter-domain routing system key node characterized by comprising
Information acquisition unit, for obtaining in inter-domain routing system operational process respectively, the side after each node failure, which loads, to be become Change information and update message and propagates information;
First computing unit, for according to the side load change information and update message propagation letter after each node failure Breath calculates separately to obtain the influences size of opposite side and the general impacts model for updating message generated after each node failure It encloses;
Second computing unit, for updating the total of message with what is generated according to the influence size of opposite side after each node failure Body coverage calculates separately to obtain the influence size for generating the inter-domain routing system after each node failure;
Identifying processing unit, for according to after each node failure to the inter-domain routing system generate influence size, Identify the key node in the inter-domain routing system.
7. device according to claim 6, which is characterized in that the information acquisition unit, comprising:
Timing node determination unit, for determining the timing node of identification inter-domain routing system key node;
Network environment establishes unit, acquires the inter-domain routing system in the basic network data of the timing node, and utilize The basic network data establish basic network environment;
Analog processing unit is simulated between obtaining the domain respectively for utilizing preset inter-domain routing system cascading failure model Side load change information after each node in route system fails in the basic network environment is propagated with message is updated Information.
8. device according to claim 6, which is characterized in that first computing unit is according to each node failure It rear side load change information and updates message and propagates information, calculate separately to obtain the influence of opposite side after each node failure When size and the general impacts range of the update message generated, it is specifically used for:
For each node, following operation is executed respectively:
Change information is loaded according to the side after the node failure, is calculated after the node failure on each side influenced Influence size;
It calculates after the node failure on the sum of the influence size on each side influenced, obtains opposite side after the node failure Influence size;
And
Information is propagated according to the update message after the node failure, determines that each node adjacent with the node generates respectively All node sets for being propagated of update message;
According to all node sets that the update message that each node adjacent with the node generates is propagated, the section is determined The general impacts range of the update message generated after point failure.
9. device according to claim 6, which is characterized in that second computing unit is according to each node failure The general impacts range of the influence size of opposite side and the update message generated afterwards, calculates separately after obtaining each node failure To the inter-domain routing system generate influence size when, be specifically used for:
The general impacts range of influence size and the update message generated to opposite side after each node failure carries out respectively Weighted sum processing respectively obtains the influence size generated after each node failure to the inter-domain routing system.
10. device according to claim 6, which is characterized in that the identifying processing unit loses according to each node The influence size that the inter-domain routing system is generated after effect, when identifying the key node in the inter-domain routing system, specifically For:
According to the influence size generated after each node failure to the inter-domain routing system, from the inter-domain routing system All nodes in selection failure after to the inter-domain routing system generate influence be greater than given threshold node, as described Key node in inter-domain routing system.
CN201810797038.4A 2018-07-19 2018-07-19 Method and device for identifying key nodes of inter-domain routing system Active CN108965127B (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN201810797038.4A CN108965127B (en) 2018-07-19 2018-07-19 Method and device for identifying key nodes of inter-domain routing system

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN201810797038.4A CN108965127B (en) 2018-07-19 2018-07-19 Method and device for identifying key nodes of inter-domain routing system

Publications (2)

Publication Number Publication Date
CN108965127A true CN108965127A (en) 2018-12-07
CN108965127B CN108965127B (en) 2021-10-15

Family

ID=64482070

Family Applications (1)

Application Number Title Priority Date Filing Date
CN201810797038.4A Active CN108965127B (en) 2018-07-19 2018-07-19 Method and device for identifying key nodes of inter-domain routing system

Country Status (1)

Country Link
CN (1) CN108965127B (en)

Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20100302947A1 (en) * 2009-05-29 2010-12-02 Nokia Corporation Method and apparatus for providing awareness information over an ad-hoc mesh network
CN102270388A (en) * 2011-06-03 2011-12-07 王正武 Method for measuring and calculating importance of traffic network nodes with consideration of cascading failure
CN107438027A (en) * 2016-05-27 2017-12-05 任子行网络技术股份有限公司 Inter-domain routing node importance appraisal procedure and device
CN107453919A (en) * 2017-08-31 2017-12-08 中国人民解放军国防科技大学 Complex network node importance evaluation method and system
US20180197128A1 (en) * 2016-12-06 2018-07-12 Thomson Reuters Global Resources Unlimited Company Risk identification engine and supply chain graph generator

Patent Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20100302947A1 (en) * 2009-05-29 2010-12-02 Nokia Corporation Method and apparatus for providing awareness information over an ad-hoc mesh network
CN102270388A (en) * 2011-06-03 2011-12-07 王正武 Method for measuring and calculating importance of traffic network nodes with consideration of cascading failure
CN107438027A (en) * 2016-05-27 2017-12-05 任子行网络技术股份有限公司 Inter-domain routing node importance appraisal procedure and device
US20180197128A1 (en) * 2016-12-06 2018-07-12 Thomson Reuters Global Resources Unlimited Company Risk identification engine and supply chain graph generator
CN107453919A (en) * 2017-08-31 2017-12-08 中国人民解放军国防科技大学 Complex network node importance evaluation method and system

Non-Patent Citations (3)

* Cited by examiner, † Cited by third party
Title
无: "基于双毁伤因素的域间路由系统级联失效模型", 《HTTP://WWW.DOC88.COM/P-6833897017162.HTML》 *
邱菡 等: "域间路由系统的级联失效攻击及检测研究", 《中国科学(信息科学)》 *
陆余良 等: "域间路由系统级联失效分析与建模", 《系统工程与电子技术》 *

Also Published As

Publication number Publication date
CN108965127B (en) 2021-10-15

Similar Documents

Publication Publication Date Title
Gill et al. Let the market drive deployment: A strategy for transitioning to BGP security
Oliveira et al. Quantifying path exploration in the Internet
Zhu et al. Feedback based routing
CN101682518B (en) Distributed connection establishment and restoration
CN104168193B (en) A kind of method and routing device of Virtual Router Redundancy Protocol fault detect
CA2572980A1 (en) Dynamic forwarding adjacency
CN103155485A (en) Fast flooding based fast convergence to recover from network failures
JP2013243663A (en) Processing method and device of member link in multilink group
AU2003223609A1 (en) System and method for selecting reliable links between nodes in an ad-hoc communication network
JP5283192B2 (en) Method, node device, and program for detecting faulty link in real time based on routing protocol
US9313090B2 (en) Tunnel fault detection method and traffic engineering node
CN102823194A (en) Operations, administrations and management proxy and a method for handling operations, administrations and management messages
CN101094119A (en) Method for detecting and recovering faults in covered network based on fast switch over
JP2004159146A (en) Communication network and packet transfer device
Babbitt et al. Self-selecting reliable paths for wireless sensor network routing
JP2006174451A (en) Method for tracing route in wireless network including multiple nodes and wireless network of nodes configured to trace route
JP5042095B2 (en) Communication apparatus and fault monitoring method
CN108965127A (en) A kind of method and device identifying inter-domain routing system key node
US20060031445A1 (en) Method and apparatus for determination of network topology
Mai et al. BGP performance analysis for large scale VPN
WO2007033592A1 (en) System for passive alarm propagation and suppression for packet based networks
Basu et al. A Global Reputation Estimation and Analysis Technique for detection of malicious nodes in a Post-Disaster Communication environment
Hu et al. A measurement study on potential inter-domain routing diversity
JP2011055334A (en) Bgp failure location estimating method and apparatus
CN107454069A (en) Inter-domain routing system mimicry means of defence based on AS Security Associations

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination
GR01 Patent grant
GR01 Patent grant