CN113285851A

CN113285851A - Method and system suitable for testing network connection performance of power distribution safety equipment

Info

Publication number: CN113285851A
Application number: CN202110488608.3A
Authority: CN
Inventors: 李二霞; 亢超群; 韩子龙; 何连杰; 杨红磊; 张波; 李玉凌; 樊勇华; 许保平; 孙智涛; 王利; 刘芸杉
Original assignee: China Online Shanghai Energy Internet Research Institute Co ltd
Current assignee: China Online Shanghai Energy Internet Research Institute Co ltd; Electric Power Research Institute of State Grid Shanghai Electric Power Co Ltd
Priority date: 2021-04-23
Filing date: 2021-04-23
Publication date: 2021-08-20

Abstract

The invention discloses a method and a system suitable for testing the network connection performance of power distribution safety equipment, and belongs to the technical field of network safety protection of power monitoring systems. The method comprises the following steps: aiming at a tested power distribution security access gateway and a data isolation component, a network performance test index system is established; the method comprises the steps that a tested power distribution safety access gateway and a data isolation assembly are accessed to a test platform, and different test scenes are set up; and under each test scene, testing each test item in the network connection performance test index system through the test platform, and acquiring a network connection performance test result. The invention effectively solves the problems that the current universality test system or equipment can not simulate real service data and the data forwarding time delay is inaccurate.

Description

Method and system suitable for testing network connection performance of power distribution safety equipment

Technical Field

The invention relates to the technical field of network security protection of power monitoring systems, in particular to a method and a system suitable for testing network connection performance of power distribution security equipment.

Background

In the distribution automation system safety protection system, the special safety equipment for power distribution plays a very key role, and comprises a power distribution safety access gateway for identity validity management and control of a power distribution terminal accessed to a main station, and special safety protection products such as a data isolation assembly and the like deployed on a longitudinal communication link of the power distribution main station and the power distribution terminal in a management information large area.

The performance test of the special safety equipment for power distribution at the present stage mainly uses a universal test tool developed abroad, and the test tool can only test partial basic performance aiming at messages of a network layer and a link layer in a five-layer protocol, and has little relation with the service application of the equipment.

Disclosure of Invention

In order to solve the above problems, the present invention provides a method for testing network connection performance of power distribution safety equipment, comprising:

aiming at a tested power distribution safety access gateway and a data isolation component, a network performance test index system is established;

the method comprises the steps that a tested power distribution safety access gateway and a data isolation assembly are accessed to a test platform, and different test scenes are set up;

and under each test scene, testing each test item in the network performance test index system through the test platform, and acquiring a network connection performance test result.

Optionally, the network performance test index system includes: network connection performance test indexes of the power distribution safety access gateway and network connection performance test indexes of the data isolation component;

the network connection performance test index of the power distribution safety access gateway comprises the following steps: throughput, maximum number of concurrent connections, number of newly-built connections, data forwarding delay and packet loss rate;

the network connection performance test index of the data isolation component comprises the following steps: maximum number of concurrent connections, number of newly-built connections, and data forwarding delay.

Optionally, the test scenario includes: a direct connection scenario, a via-switch connection scenario, a multi-service connection scenario, and a continuous operation stability scenario.

Optionally, before testing, the test platform simulates a power distribution master station and a power distribution terminal at the same time, and serially accesses the power distribution safety access gateway or the data isolation component into the simulated power distribution master station and the simulated power distribution terminal;

and the power distribution security access gateway acquires the analog terminal digital certificate and performs identity authentication with the analog power distribution terminal.

Optionally, the number of the power distribution terminals simulated by the test platform is not more than 60000.

Optionally, the process of testing the maximum concurrent connection number and the new connection number in the network connection performance test index includes:

the method comprises the steps that an analog power distribution master station is controlled to initiate a TCP connection request to an analog terminal, when a power distribution safety access gateway detects and intercepts the TCP connection request, an authentication request is initiated to the analog power distribution terminal, after the authentication is passed, the power distribution safety access gateway releases the TCP connection request, and the analog power distribution master station and the analog power distribution terminal establish TCP connection;

after the connection is completed, the test platform calculates the stable connection number maintained between the simulation power distribution master station and the simulation power distribution terminal as the maximum concurrent connection number;

simulating a power distribution master station to send a FIN message for disconnection;

the test platform calculates the number of TCP connections successfully determined by the simulated power distribution main station and the simulated power distribution terminal, namely the number of newly-built connections.

Optionally, the process of testing throughput, data forwarding delay, and packet loss rate in the network connection performance test index includes:

the throughput testing process specifically includes:

the simulation power distribution master station sends a service message to the simulation power distribution terminal according to the set throughput with the preset service message length L and sending period, and when the simulation power distribution terminal receives the service message, the simulation power distribution master station replies the service message with the preset service message length L and sending period;

counting the number of service messages received by the analog power distribution terminal and the analog power distribution master station, and determining the length H of a message protocol header of the service messages;

determining the throughput according to L, H and the number of messages;

the test process of the data forwarding delay specifically includes:

the method comprises the steps that a preset number of concurrent connections are maintained between an analog power distribution main station and an analog power distribution terminal, for each connection, when the analog power distribution main station sends a service message for the first time, a message sending timestamp is recorded, after the analog power distribution terminal side receives the service message from a power distribution safety access gateway, a message receiving timestamp is recorded, and according to the number of the connections, the message sending timestamp and the message receiving timestamp of each connection are used for determining data forwarding time delay;

the process for testing the packet loss rate specifically comprises the following steps:

the method comprises the steps that the maximum concurrent connection number is maintained between an analog power distribution main station and an analog power distribution terminal, the analog power distribution main station sends a plurality of service messages to the analog power distribution terminal through a power distribution safety access gateway, the number of the service messages received by the analog power distribution terminal is monitored, the number of the service messages is received according to the number of the sent service messages, and the packet loss rate is calculated.

Optionally, the test process of the maximum concurrent connection number, the new connection number, and the data forwarding delay in the performance test index of the data isolation component includes:

the method comprises the steps that an analog power distribution master station is controlled to initiate a TCP connection request to an analog terminal, after a data isolation component monitors the TCP connection request, the TCP connection request is isolated, and TCP connection is established between the TCP connection request and the analog power distribution master station and between the TCP connection request and the analog power distribution terminal;

after the connection is successful, the simulation power distribution main station issues a service message, and the number of TCP connections successfully established between the simulation power distribution main station and the simulation power distribution terminal is tested to be used as the number of newly-built connections; when the number of newly-built connections is not increased, maintaining the stable number of connections as the maximum number of concurrent connections;

the simulation power distribution main station and the simulation power distribution terminal maintain the concurrent connection of the preset number, for each connection, the simulation power distribution main station records the message sending timestamp when sending the service message for the first time, and after the simulation power distribution terminal receives the service message, records the message receiving timestamp, and determines the data forwarding time delay according to the connection number, the message sending timestamp and the message receiving timestamp of each connection.

The invention also provides a system suitable for testing the network connection performance of the power distribution safety equipment, which comprises the following components:

the system establishing unit is used for establishing a network performance test index system aiming at the tested power distribution security access gateway and the data isolation component;

the connection unit is used for connecting the tested power distribution safety access gateway and the data isolation assembly into the test platform and building different test scenes;

and the test unit tests each test item in the network performance test index system through the test platform under each test scene and acquires a network performance test result.

Optionally, the network performance test index system includes: network connection performance test indexes of the power distribution safety access gateway and data isolation component performance test indexes of the data isolation component;

the network connection performance test index comprises: throughput, maximum number of concurrent connections, number of newly-built connections, data forwarding delay and packet loss rate;

the data isolation component performance test index comprises: maximum number of concurrent connections, number of newly-built connections, and data forwarding delay.

the method comprises the steps that an analog power distribution master station is controlled to initiate a TCP connection request to an analog terminal, when a power distribution safety access gateway detects and intercepts the TCP connection request, an authentication request is initiated to the analog power distribution terminal, after the authentication is passed, the power distribution safety access gateway releases the TCP connection request, and the analog power distribution master station and the analog power distribution terminal finish building TCP connection;

the throughput testing process specifically includes:

determining the throughput according to L, H and the number of messages;

the test process of the data forwarding delay specifically includes:

The invention effectively solves the problems that the current universality test system or equipment can not simulate real service data and the data forwarding time delay is inaccurate.

Drawings

FIG. 1 is a flow chart of the method of the present invention;

FIG. 2 is a topological diagram of a direct connection test scenario of a distribution security access gateway according to an embodiment of the present invention;

FIG. 3 is a topology diagram of a scenario in which a distribution security access gateway is connected via a switch according to an embodiment of the method of the present invention;

FIG. 4 is a topology diagram of a power distribution security access gateway multi-service firewall-passing scenario in an embodiment of the method of the present invention;

FIG. 5 is a topology diagram of a multi-service firewall scenario of a distribution security access gateway according to an embodiment of the present invention;

FIG. 6 is a topology diagram of a scenario in which data isolation components are connected via a switch according to an embodiment of the present invention;

FIG. 7 is a topology diagram of a scenario in which a data isolation component connects multiple service scenarios through a firewall in an embodiment of the method of the present invention;

FIG. 8 is a topology diagram of a scenario in which a data isolation component multi-service scenario does not pass through a firewall connection in the embodiment of the method of the present invention;

fig. 9 is a block diagram of the system of the present invention.

Detailed Description

The exemplary embodiments of the present invention will now be described with reference to the accompanying drawings, however, the present invention may be embodied in many different forms and is not limited to the embodiments described herein, which are provided for complete and complete disclosure of the present invention and to fully convey the scope of the present invention to those skilled in the art. The terminology used in the exemplary embodiments illustrated in the accompanying drawings is not intended to be limiting of the invention. In the drawings, the same units/elements are denoted by the same reference numerals.

Unless otherwise defined, terms (including technical and scientific terms) used herein have the same meaning as commonly understood by one of ordinary skill in the art to which this invention belongs. Further, it will be understood that terms, such as those defined in commonly used dictionaries, should be interpreted as having a meaning that is consistent with their meaning in the context of the relevant art and will not be interpreted in an idealized or overly formal sense.

The invention provides a method suitable for testing the network connection performance of distribution safety equipment, which comprises the following steps as shown in figure 1:

and under each test scene, testing each test item in the network connection performance test index system through the test platform, and acquiring a network performance test result.

Wherein, the network connection performance test index system includes: network connection performance test indexes of the power distribution safety access gateway and data isolation component performance test indexes of the data isolation component;

Wherein, the test scenario includes: a direct connection scenario, a via-switch connection scenario, a multi-service connection scenario, and a continuous operation stability scenario.

Before testing, the test platform simultaneously simulates a power distribution master station and a power distribution terminal, and serially accesses a power distribution safety access gateway or a data isolation component into the simulated power distribution master station and the simulated power distribution terminal;

And the number of the power distribution terminals simulated by the test platform is not more than 60000.

The process for testing the maximum concurrent connection number and the newly-built connection number in the network connection performance test indexes comprises the following steps:

The process for testing throughput, data forwarding delay and packet loss rate in the network connection performance test indexes comprises the following steps:

the throughput testing process specifically includes:

determining the throughput according to L, H and the number of messages;

the test process of the data forwarding delay specifically includes:

The test process of the maximum concurrent connection number, the newly-built connection number and the data forwarding time delay in the performance test indexes of the data isolation component comprises the following steps:

The invention is further illustrated by the following examples:

the network connection performance test mainly aims at two types of equipment, namely a power distribution safety access gateway and a data isolation assembly, and is based on the transmission layer and application layer performance realized by TCP connection, and test indexes comprise 5 types, namely the number of concurrent connections, the number of newly-built connections, time delay, throughput, packet loss and the like.

The power distribution safety access gateway is connected in series at the longitudinal connection position of a data acquisition server and a power distribution terminal in a full access area, and performs two-way identity authentication with the power distribution terminal, so that the power distribution terminal accessed to a production control large area is legally controlled, link state monitoring of the terminal is realized, the influence of the forward performance of the access safety access gateway on uplink and downlink service data is evaluated, and the number of the access safety access gateways capable of bearing is 5 types in total, as shown in table 1:

TABLE 1

Serial number	Test items
			1	Throughput capacity
2	Maximum number of concurrent connections
		3	Number of new connections
4	Data forwarding delay
		5	Packet loss rate

The data isolation component is deployed at the boundary between an information intranet of a management information large area and a third-party wireless network, and is used for realizing the safety isolation of a distribution automation terminal and a service system, identifying and filtering illegal messages, preventing illegal links from penetrating through the intranet to access, and considering the functions of identifying and discarding illegal data, the throughput and the packet loss rate of the distribution automation terminal are not tested, but the access number of the supportable terminal and the time delay performance of service data forwarding are still evaluated, so that the performance test comprises the following 3 types, as shown in table 2:

TABLE 2

Serial number	Test items
			1	Maximum number of concurrent connections
2	Number of new connections
		3	Data forwarding delay

The test platform simulates a power distribution master station and a power distribution terminal at the same time, tested equipment (a power distribution safety access gateway and a data isolation component) is serially accessed into the simulation master station and the simulation terminal, the power distribution safety access gateway needs to acquire a digital certificate of the simulation terminal and performs identity authentication with the simulation terminal, and a test topology is shown in figure 2.

The principle of testing the network performance of the power distribution security access gateway is as follows:

(a) gateway new and concurrent connection number

When a gateway is tested, only one connection is allowed to be established by one IP, generally, the number of terminals below the gateway is considered to be at most 16-bit mask (255.255.0.0) in scale, 65534 IPs are available, and in order to ensure that the simulated terminals have enough IPs, the test platform simulates 6 ten thousand terminals at most. The platform adopts a DPDK network IO engine + user mode protocol stack as a bottom layer supporting technology, completely bypasses a kernel mode, and realizes the quick line receiving and sending of the packets under the condition of massive concurrency.

When the number of newly-built connections is tested, a test platform simulates a master station to initiate a TCP connection request (SYN message) to a simulation terminal, a gateway detects and intercepts the TCP connection and then initiates an authentication request to the simulation terminal, after the authentication is passed, the gateway releases the intercepted TCP SYN message, and the simulation master station and the simulation terminal complete the subsequent TCP connection establishment process. And after the authentication and the connection establishment are finished, the master station immediately starts to send the FIN message for disconnection. The test platform calculates the number of newly-built connections of the gateway per second by calculating the number of TCP connections successfully established by the simulation master station/terminal. From the beginning of the flow stabilization, if the number of the newly-built connections in the first second is a0, and the newly-built connection An-1 in the second, a1 … and the nth second are newly built, the final newly-built connection rate index is: (A0+ A1+ … + An-1)/n.

The test of the number of the concurrent connections is also based on the new connection process, only the concurrent connections of the gateway are not removed (generally, after the gateway is authenticated, the connections are not frequently removed, so the gateway is not set to establish the concurrent connections while removing the connections), in the process of establishing the number of the concurrent connections, in order to shorten the time for reaching the maximum number of the concurrent connections, the number of the new connections is set to be the stable number of the new connections obtained by the test, and after the identity authentication of the gateway and the terminal, the test platform starts to calculate the stable number of the connections maintained between the master station and the terminal as the maximum number of the concurrent connections of the gateway.

In addition, the specific authentication modes of the security access gateway include two modes, one mode is to intercept a TCP connection request (SYN message) initiated by the main station, and the gateway pretends to be that the main station continues to establish connection with the terminal and starts authentication. The testing method is simple and does not need additional configuration. The other is an out-of-band authentication mode, namely, the gateway additionally establishes a connection for authentication after intercepting the SYN message of the master station, and releases the original connection after the authentication is passed. This approach requires the configuration of an IP address that is different from the IP address of the analog master station and that is not within the IP network segment of the terminal. Otherwise, the testing platform can directly regard the gateway IP as a main station or a terminal, so that ARP interaction cannot be triggered to cause communication errors. Under the out-of-band authentication mode, the MAC address of the gateway can be configured to be fixed as the MAC of the main station, so that the intercommunication can be completed.

(b) Gateway throughput, delay and packet loss

The gateway throughput, time delay and packet loss test objects are the service message bidirectional throughput, service data forwarding time delay and packet loss rate of the main station and the terminal passing through the gateway after the gateway and the terminal identity authentication is passed:

a) the throughput is calculated as follows:

the simulation master station of the platform starts to send the service message with a certain service message length L and sending period according to the set throughput, and the terminal immediately replies with the service message with the same length after receiving the service message. Setting the length of a message protocol header (TCP + IP + MAC) as H, after data is stable, the number of service messages received by the terminal in the first second is T0, and the number received by the master station is M0, so that the total byte number of the receiving and sending packets in the first second is: (T0+ M0) × (L + H), and so on, the nth second packet: (Tn-1+ Mn-1) × (L + H), the final throughput is: (T0+ M0+ … + Tn-1+ Mn-1) ((L + H)/n).

b) The calculation process of the data forwarding delay is as follows:

before testing the forwarding delay, a certain number of concurrent connections should be established, which are usually standard index values. For each connection, when the platform simulation master station first sends a service message, the terminal side receives the message from the network card at the time of recording the timestamp T1, and records the timestamp T2, so that the time delay of the first message is D0, which is T2-T1. Similarly, the time delay is calculated for the message platform from the terminal to the master station. Assuming that before the test is finished, the platform reads and calculates n messages which are totally transmitted in two directions by the master station and the terminal, the final time delay is as follows: (D0+ … + D1+ … + Dn-1)/n.

c) The packet loss rate is calculated as follows:

firstly, establishing service connection between a test platform and a gateway, and achieving a large concurrent connection number of the gateway, then sending A service messages to an analog terminal by an analog master station through the gateway, and assuming that the analog terminal receives B service messages, the packet loss rate is as follows: (A-B)/A100%.

The network performance testing principle of the data isolation component is as follows:

(a) new and concurrent connection number of isolation component

When the isolation component is tested, a plurality of connections can be established by using the same IP and different port numbers, when the number of new connections is tested, a test platform simulation master station initiates a TCP connection request to a simulation terminal, after the isolation component detects the TCP connection, connection isolation is carried out from the TCP connection request, TCP connection is respectively established with the simulation terminal and the simulation master station, after the connection is successfully established, the simulation master station issues a service message, and the test platform calculates the number of the new connections of the component per second by calculating the number of the TCP connections successfully established by the simulation master station and the simulation terminal. From the beginning of the flow stabilization, if the number of the newly-built connections in the first second is a0, and the newly-built connection An-1 in the second, a1 … and the nth second are newly built, the final newly-built connection rate index is: (A0+ A1+ … + An-1)/n.

During the process of testing the number of newly established connections of the data isolation component, the system will establish and tear down the connection, and the rate of establishing the connection by the system will be tried from small to large. And typically reaches a set number of new connections per second (e.g., 5000/second) after 10 seconds, but whether the results reach the predetermined value depends on the performance of the device under test. Looking at the resulting data, the device under test is considered to be able to achieve this performance if the data can be maintained over a small fluctuation range for at least one minute.

The testing of the number of the concurrent connections is based on the testing result of the number of the new connections, that is, in the process of establishing the number of the concurrent connections, in order to shorten the time for reaching the maximum number of the concurrent connections, the number of the new connections is set to be the stable number of the new connections obtained by the testing, and when the number of the connections is not increased any more, the testing platform starts to calculate the stable number of the connections maintained between the component and the terminal, and the stable number of the connections is used as the maximum number of the concurrent connections of the component.

(b) Isolating component delays

The power distribution safety access gateway is connected in series at the longitudinal connection position of a data acquisition server and a power distribution terminal in a full access area (a production control area), and legality management and control are carried out on the power distribution terminal accessed to the production control area through bidirectional identity authentication with the power distribution terminal, and meanwhile link state monitoring of the terminal is achieved.

In order to test the performance index difference of the distribution security access gateway under different network environments and application conditions, 5 types of test scenarios of continuous operation stability are set, wherein a test platform is directly connected with a tested device as shown in fig. 2, the test platform is connected with the tested device through a switch as shown in fig. 3, a multi-service scenario is connected with a firewall as shown in fig. 4, a multi-service scenario is not connected with the firewall as shown in fig. 5, the data forwarding time delay is a detection result under the condition that 100000 terminals are connected concurrently, the test duration of the packet loss rate is 2 minutes, and the test result of the distribution security access gateway of a certain brand is shown in table 3:

TABLE 3

As can be seen from table 3, the distribution security access gateway has good overall operation status, and the addition of the firewall has a large negative impact on throughput.

The data isolation component is deployed at the boundary between the management information large-area information intranet and the third-party wireless network, and is used for realizing the safety isolation of the distribution automation terminal and the service system, identifying and filtering illegal messages and preventing illegal links from penetrating the intranet to access.

In order to test the performance index difference of the data isolation component under different network environments and application conditions, a test platform is directly connected with the tested equipment, and a protocol filtering function is started or not started, as shown in fig. 2, the test platform is directly connected with the tested equipment and is connected with the tested equipment through a switch as shown in fig. 6, a multi-service scene passes through a firewall as shown in fig. 7, a multi-service scene does not pass through the firewall as shown in fig. 8, and 6 types of test scenes of stability of continuous operation are set, wherein the data forwarding time delay is a detection result under concurrent connection of 100000 terminals. The test results for a certain brand of data isolation component are shown in table 4:

TABLE 4

As can be seen from table 4, the performance of this data isolation assembly is reduced after a long time operation.

The invention simultaneously adopts DPDK network IO engine and user mode protocol stack as bottom layer support technology, completely bypasses kernel mode, realizes line speed transceiving packets under the condition of massive concurrency, greatly improves data processing performance and throughput and improves working efficiency.

Different test environments are built in the test process to simulate different practical application scenes: for 5 types of test scenes that a gateway test platform is directly connected with tested equipment, connected through a switch, a multi-service scene passes through a firewall, the multi-service scene does not pass through the firewall and the stability is continuously operated; for the data isolation component, a test platform is directly connected with the tested equipment, the test platform is connected with the tested equipment through a switch, a multi-service scene passes through a firewall, the multi-service scene does not pass through the firewall, and 6 types of test scenes of continuous operation stability are provided. Aiming at the time delay test, the performance test platform carries out clock synchronization on the test server and the safety equipment so as to obtain correct time difference, meanwhile, the time delay caused by the server is calculated according to a large number of samples, and the test result is corrected so as to obtain a more accurate time delay test result.

The present invention further provides a system 200 for testing the network connection performance of the power distribution safety device, as shown in fig. 9, including:

the system establishing unit 201 is used for establishing a network connection performance test index system aiming at the tested power distribution security access gateway and the data isolation component;

the connection unit 202 is used for connecting the tested power distribution security access gateway and the data isolation assembly into the test platform and building different test scenes;

the test unit 203 tests each test item in the network connection performance test index system through the test platform in each test scenario, and obtains a network connection performance test result.

Wherein, the network connection performance test index system includes: network connection performance test indexes of the power distribution safety access gateway and network connection performance test indexes of the data isolation component;

the throughput testing process specifically includes:

determining the throughput according to L, H and the number of messages;

the test process of the data forwarding delay specifically includes:

The test process of the maximum concurrent connection number, the newly-built connection number and the data forwarding time delay in the network connection performance test indexes of the data isolation component comprises the following steps:

As will be appreciated by one skilled in the art, embodiments of the present invention may be provided as a method, system, or computer program product. Accordingly, the present invention may take the form of an entirely hardware embodiment, an entirely software embodiment or an embodiment combining software and hardware aspects. Furthermore, the present invention may take the form of a computer program product embodied on one or more computer-usable storage media (including, but not limited to, disk storage, CD-ROM, optical storage, and the like) having computer-usable program code embodied therein. The scheme in the embodiment of the invention can be realized by adopting various computer languages, such as object-oriented programming language Java and transliterated scripting language JavaScript.

The present invention is described with reference to flowchart illustrations and/or block diagrams of methods, apparatus (systems), and computer program products according to embodiments of the invention. It will be understood that each flow and/or block of the flow diagrams and/or block diagrams, and combinations of flows and/or blocks in the flow diagrams and/or block diagrams, can be implemented by computer program instructions. These computer program instructions may be provided to a processor of a general purpose computer, special purpose computer, embedded processor, or other programmable data processing apparatus to produce a machine, such that the instructions, which execute via the processor of the computer or other programmable data processing apparatus, create means for implementing the functions specified in the flowchart flow or flows and/or block diagram block or blocks.

These computer program instructions may also be stored in a computer-readable memory that can direct a computer or other programmable data processing apparatus to function in a particular manner, such that the instructions stored in the computer-readable memory produce an article of manufacture including instruction means which implement the function specified in the flowchart flow or flows and/or block diagram block or blocks.

These computer program instructions may also be loaded onto a computer or other programmable data processing apparatus to cause a series of operational steps to be performed on the computer or other programmable apparatus to produce a computer implemented process such that the instructions which execute on the computer or other programmable apparatus provide steps for implementing the functions specified in the flowchart flow or flows and/or block diagram block or blocks.

While preferred embodiments of the present invention have been described, additional variations and modifications in those embodiments may occur to those skilled in the art once they learn of the basic inventive concepts. Therefore, it is intended that the appended claims be interpreted as including preferred embodiments and all such alterations and modifications as fall within the scope of the invention.

It will be apparent to those skilled in the art that various changes and modifications may be made in the present invention without departing from the spirit and scope of the invention. Thus, if such modifications and variations of the present invention fall within the scope of the claims of the present invention and their equivalents, the present invention is also intended to include such modifications and variations.

Claims

1. A method for power distribution safety equipment network connection performance testing, the method comprising:

and under each test scene, testing each test item in the network performance test index system through the test platform, and acquiring a network performance test result.

2. The method of claim 1, the network performance test indicator architecture, comprising: network connection performance test indexes of the power distribution safety access gateway and network connection performance test indexes of the data isolation component;

the network connectivity performance test index of the data isolation component comprises: maximum number of concurrent connections, number of newly-built connections, and data forwarding delay.

3. The method of claim 1, the test scenario comprising: a direct connection scenario, a via-switch connection scenario, a multi-service connection scenario, and a continuous operation stability scenario.

4. The method of claim 1, wherein the test platform simulates a power distribution master station and a power distribution terminal simultaneously before testing, and serially accesses a power distribution security access gateway or a data isolation component into the simulated power distribution master station and the simulated power distribution terminal;

5. The method of claim 1, the number of power distribution terminals simulated by the test platform being no greater than 60000.

6. The method of claim 2, wherein the testing process of the maximum number of concurrent connections and the number of newly-established connections in the network connection performance test index includes:

7. The method according to claim 2, wherein the process of testing throughput, data forwarding delay and packet loss rate in the network connection performance test index comprises:

the throughput testing process specifically includes:

determining the throughput according to L, H and the number of messages;

the test process of the data forwarding delay specifically includes:

the method comprises the steps that the maximum concurrent connection number is maintained between an analog power distribution main station and an analog power distribution terminal, the analog power distribution main station sends a plurality of service messages to the analog power distribution terminal through a power distribution safety access gateway, the number of the service messages received by the analog power distribution terminal is monitored, and the packet loss rate is calculated according to the number of the sent service messages and the number of the received service messages.

8. The method of claim 2, wherein the testing process of the maximum concurrent connection number, the new connection number, and the data forwarding delay in the data isolation component network connection performance testing index comprises:

9. A system adapted for distribution safety equipment network connection performance testing, the system comprising:

the system establishing unit is used for establishing a network performance test index system aiming at the tested power distribution security access gateway or the data isolation component;

the connection unit is used for connecting the tested power distribution safety access gateway or the data isolation assembly into the test platform and building different test scenes;

10. The system of claim 9, the network performance test indicator architecture, comprising: network connection performance test indexes of the power distribution safety access gateway and network connection performance test indexes of the data isolation components;

the data isolation component network connection performance test index comprises: maximum number of concurrent connections, number of newly-built connections, and data forwarding delay.

11. The system of claim 9, the test scenario comprising: a direct connection scenario, a via-switch connection scenario, a multi-service connection scenario, and a continuous operation stability scenario.

12. The system of claim 9, wherein the test platform simulates a power distribution master station and a power distribution terminal simultaneously before testing, and serially accesses a power distribution security access gateway or a data isolation component into the simulated power distribution master station and the simulated power distribution terminal;

13. The system of claim 9, the number of power distribution terminals simulated by the test platform being no greater than 60000.

14. The system of claim 10, wherein the procedure for testing the maximum number of concurrent connections and the number of newly-established connections in the network connection performance test index comprises:

15. The system of claim 10, wherein the process of testing throughput, data forwarding delay, and packet loss rate in the network connection performance test indicator comprises:

the throughput testing process specifically includes:

determining the throughput according to L, H and the number of messages;

the test process of the data forwarding delay specifically includes:

16. The system of claim 10, wherein the testing process of the maximum number of concurrent connections, the number of newly-established connections, and the data forwarding delay in the data isolation component performance testing index comprises: