CN113365166A

CN113365166A - Network configuration method and device

Info

Publication number: CN113365166A
Application number: CN202110709442.3A
Authority: CN
Inventors: 陈云鹏; 黄胜波; 邹青岸
Original assignee: Beijing Light Network Technology Co ltd
Current assignee: Beijing Light Network Technology Co ltd
Priority date: 2021-06-25
Filing date: 2021-06-25
Publication date: 2021-09-07
Anticipated expiration: 2041-06-25
Also published as: CN113365166B

Abstract

The disclosure relates to a network configuration method and device. The network configuration method comprises the following steps: calling a site template according to a configuration instruction to create a site and topology, and generating configuration information, wherein the template comprises the site template, the topology template and a strategy template, and the configuration information comprises site configuration information, topology configuration information and strategy configuration information; when receiving an activation request sent by physical equipment corresponding to a site, sending the site configuration information to the physical equipment to activate the physical equipment; and when a configuration request sent by physical equipment corresponding to the site is received, sending the topology configuration information and the strategy configuration information to the physical equipment to configure the site. According to the network configuration method, the sites, the topology and the strategy in the network are created in a template mode, the configuration of the network sites in batch can be realized, and the configuration efficiency and the convenience of a user are improved.

Description

Network configuration method and device

Technical Field

The present disclosure relates to the field of communications technologies, and in particular, to a network configuration method and apparatus.

Background

Traditional enterprise applications, including E-mail, file sharing, Web applications, etc., adopt a centralized deployment mode, usually an enterprise deploys a data center in the headquarters, and connects a branch mechanism to the data center by renting a dedicated line of an operator, such as SDH (Synchronous Digital Hierarchy), OTN (Optical Transport Network), Ethernet, MPLS (Multi-Protocol Label Switching), etc.

The Service Level Agreement (SLA) promised by the operator for the private line Service includes bandwidth, time delay, jitter, packet loss rate, etc., and meets the requirements of the enterprise for deploying various applications in each branch, such as storage Service, unified communication system, etc. The traditional private line network has poor acquirability, optical fibers/circuits need to be deployed independently, and the consumed period is long; when the private line spans a plurality of networks/operators, the service opening period is longer; moreover, the price of the private line is high, the service cannot be flexibly ordered, a relatively long contract period is usually required, and the service opening cost is relatively high. In order to increase the utilization rate of a private line as much as possible, various WAN (Wide Area Network) optimization and application acceleration technologies are developed, including QoS (Quality of Service) flow Control, TCP (Transmission Control Protocol) Protocol optimization, Protocol proxy, data caching technology, data compression technology, and the like.

With the popularization of Ethernet technology, operators provide Ethernet services, can provide E-Line, E-Tree and E-LAN services, and subscribe bandwidth flexibly. An SDN (Software Defined Network) technology is currently introduced by an operator, an SDN controller and a coordinator are deployed in a WAN Network, and the efficiency of private line service delivery will be significantly improved. The high reliability of the private line depends on the private network of the operator, or the operator allocates exclusive network resources for the private line, and the cost of the private line is still high.

The SDN concept is gradually fermented in the ICT (Information and Communications Technology) field and introduced into the enterprise WAN market, driving SD-WAN derivation.

The software-defined wide area network SD-WAN inherits concepts of SDN control, forwarding separation, centralized control and the like, deploys a software control system in the enterprise WAN and helps enterprises to deal with challenges brought by cloud services and office mobility.

Disclosure of Invention

In view of this, the present disclosure provides a network configuration method and apparatus, which can implement configuration of network sites in batches, and improve configuration efficiency and convenience of users.

According to an aspect of the present disclosure, there is provided a network configuration method applied to a controller in a software defined wide area network SD-WAN, the method including:

calling a template to create a site and topology according to a configuration instruction, and generating configuration information, wherein the template comprises a site template and a topology template, and the configuration information comprises site configuration information and topology configuration information;

when receiving an activation request sent by physical equipment corresponding to a site, sending the site configuration information to the physical equipment to activate the physical equipment;

and when a configuration request sent by physical equipment corresponding to the site is received, sending the topology configuration information to the physical equipment to configure the site.

In a possible implementation manner, the creating sites and topology according to the template called by the configuration instruction, and generating configuration information includes:

calling a site template according to the configuration instruction to create a site, configuring parameters of the site and generating an activation link of the site;

and calling a topology template according to the configuration instruction, setting the topology and a corresponding strategy in the topology template, and creating the topology.

In a possible implementation manner, invoking a topology template according to a configuration instruction, setting a topology and a corresponding policy in the topology template, and creating the topology includes:

calling a strategy template according to the configuration instruction to set a strategy adopted by communication between the sites;

and calling a topology template according to the configuration instruction and setting a strategy adopted by communication between the sites in the topology template according to the strategy.

In a possible implementation manner, the site template and the topology template include site tags, the site tags are used for representing attributes of the sites,

the creating of the topology comprises: and creating a topology according to the sites with the site labels in the topology template.

In one possible implementation, the method further includes:

adding a new site to the topology when the new site includes the site tag.

In one possible implementation manner, the site template comprises a wide area network tag, the wide area network tag is used for representing the manner of connection between sites,

the creating of the topology comprises: and establishing connection between the sites according to the wide area network tag.

In a possible implementation manner, the configuration instruction includes a policy tag, and the policy tag is carried by the policy template;

calling a strategy template according to a configuration instruction to set a strategy adopted by communication between sites, wherein the strategy comprises the following steps:

and setting the strategies adopted by the communication between the sites according to the strategy template with the strategy label in the configuration instruction.

According to another aspect of the present disclosure, there is provided a network configuration apparatus applied to a controller in a software defined wide area network SD-WAN, the apparatus including:

the generating module is used for calling a template to create a site and a topology according to a configuration instruction and generating configuration information, wherein the template comprises a site template and a topology template, and the configuration information comprises site configuration information and topology configuration information;

the activation module is used for sending the site configuration information to the physical equipment to activate the physical equipment when receiving an activation request sent by the physical equipment corresponding to the site;

and the configuration module is used for sending the topology configuration information to the physical equipment to configure the site when receiving a configuration request sent by the physical equipment corresponding to the site.

In one possible implementation, the generating module may include:

the first creating unit is used for calling the site template to create the site according to the configuration instruction, configuring the parameters of the site and generating an activation link of the site;

and the second creating unit is used for calling the topology template according to the configuration instruction, setting the topology and the corresponding strategy in the topology template and creating the topology.

Wherein the second creating unit may be configured to: calling a strategy template according to the configuration instruction to set a strategy adopted by communication between the sites; and calling a topology template according to the configuration instruction and setting a strategy adopted by communication between the sites in the topology template according to the strategy.

In one possible implementation, the apparatus further includes:

and the adding module is used for adding the new site into the topology when the new site comprises the site label.

According to another aspect of the present disclosure, there is provided a network configuration apparatus including: a processor; a memory for storing processor-executable instructions; wherein the processor is configured to perform the above method.

According to another aspect of the present disclosure, there is provided a non-transitory computer readable storage medium having computer program instructions stored thereon, wherein the computer program instructions, when executed by a processor, implement the above-described method.

The sites and the topology in the network are created in a template mode, so that the configuration of the network sites can be realized in batches, and the configuration efficiency and the convenience of a user are improved.

Other features and aspects of the present disclosure will become apparent from the following detailed description of exemplary embodiments, which proceeds with reference to the accompanying drawings.

Drawings

The accompanying drawings, which are incorporated in and constitute a part of this specification, illustrate exemplary embodiments, features, and aspects of the disclosure and, together with the description, serve to explain the principles of the disclosure.

Fig. 1 shows a schematic diagram of a network topology of an SD-WAN network according to an embodiment of the present application.

Fig. 2 shows a flow chart of a network configuration method according to an embodiment of the application.

Fig. 3 shows a block diagram of a network configuration device according to an embodiment of the present application.

Fig. 4 is a block diagram illustrating an apparatus for network configuration in accordance with an example embodiment.

Fig. 5 is a block diagram illustrating an apparatus for network configuration in accordance with an example embodiment.

Detailed Description

Various exemplary embodiments, features and aspects of the present disclosure will be described in detail below with reference to the accompanying drawings. In the drawings, like reference numbers can indicate functionally identical or similar elements. While the various aspects of the embodiments are presented in drawings, the drawings are not necessarily drawn to scale unless specifically indicated.

The word "exemplary" is used exclusively herein to mean "serving as an example, embodiment, or illustration. Any embodiment described herein as "exemplary" is not necessarily to be construed as preferred or advantageous over other embodiments.

Furthermore, in the following detailed description, numerous specific details are set forth in order to provide a better understanding of the present disclosure. It will be understood by those skilled in the art that the present disclosure may be practiced without some of these specific details. In some instances, methods, means, elements and circuits that are well known to those skilled in the art have not been described in detail so as not to obscure the present disclosure.

The application provides a network configuration method and device.

The network configuration method can be applied to a controller of the SD-WAN network and is used for configuring the SD-WAN network. In embodiments of the present application, the SD-WAN network may include multiple sites, which may be a corporate headquarters, branch office, or office device that needs access to the SD-WAN network. The prior art cannot realize batch configuration of sites and network topology in an SD-WAN network.

Fig. 1 shows a schematic diagram of a network topology of an SD-WAN network according to an embodiment of the present application. As shown in fig. 1, the network may include a controller, a headquarters hq (head quarter), and a plurality of branch offices. The headquarters HQ is CPE 11 in fig. 1, CPE represents Customer premises Equipment, and is collectively called Customer Premise Equipment, and the branch structures are CPE 21, CPE 22, CPE 23, and the like in fig. 1.

It should be noted that fig. 1 is only one example of a connection manner of an SD-WAN network, and a connection manner of stations in a network according to an embodiment of the present application is not limited to that shown in fig. 1. For example, two headquarters or more headquarters may also be included.

In the related art, the stations in the SD-WAN network are configured manually, and the SD-WAN network usually includes thousands of branch stations, and the manual configuration takes a lot of time, and easily causes configuration errors, and a lot of time is needed to debug the network.

For example, as shown in fig. 1, for each station in fig. 1, it is necessary to manually configure the network parameters of the station, such as the headquarters IP address 10.10.0.0/16. After each station is manually configured, the topology structure needs to be selected, then the created station is added to the topology structure, the WAN used by the station to connect with other stations, the Policy (Policy) used by the station to communicate with other stations, and the like are set. If a user has a new network policy requirement, the creation process needs to be repeated, and if a configuration error exists, the parameters of the configuration error also need to be modified one by one, which is very time-consuming, costly and error-prone.

In order to solve the above technical problem, in a possible implementation manner, in order to implement a batch and automatic creation, management, and configuration issuing process, the controller of the present disclosure provides a manner that can implement a fast configuration for a user. The controller of the present disclosure provides configured templates, labels, and tags, wherein a Template may include Site templates, Policy templates, Topology templates, labels may include Site labels, and tags may include Site tags, WAN tags, LAN tags, Policy tags, Flow tags, and the like.

For the network shown in fig. 1, the controller may obtain configuration information of the network according to an operation of an administrator (user), that is, the controller according to the embodiment of the present application may have a human-computer interaction interface, for example, the controller may be a terminal device such as a server, a computer, a notebook computer, and a mobile phone having a human-computer interaction function. The administrator can operate through the man-machine interface of the terminal device to set the information and Topology of the sites in the network, so that the controller creates the sites and Topology of the network. That is, the controller may generate a configuration instruction according to an operation of an administrator on the human-computer interaction interface, create a site, Topology, and the like of the network according to the configuration instruction, and generate configuration information, which may include site configuration information and Topology configuration information.

When a site of a network is created, the controller can create the site and configure parameters of the site according to the configuration instruction, and when the site is created according to the configuration instruction, the controller can generate an activation link of the site, where the activation link is used to activate and configure a physical device corresponding to the site. When creating the Topology, the connection mode between the site and the site, the connection (WAN used for connection and network quality), and the Policy Template used for communication between the site and the site can be defined according to the operation of the administrator. That is, the controller may generate the configuration instruction according to the operation of the administrator, and define the connection mode between the site and the site, define the connection, and select Policy Template used for communication between the site and the site according to the configuration instruction.

After configuring the network on the controller according to the above process, the physical device corresponding to the site may be connected to the internet, the physical device may be connected to the controller by triggering the activation link, and send an activation request to the controller, after receiving the activation request sent by the physical device corresponding to the site, the controller may send corresponding activation configuration information (including site configuration information of the device) to the physical device, and the activation configuration information is used to activate the physical device corresponding to the site. The site may use a BGP protocol to interface with devices such as a Local router/core switch, and report, to the controller, Local Subnet information of the site learned by the BGP protocol. After the site is activated, a configuration request can be sent to the controller, and the controller can send topology configuration information and subnet information of the site and other sites connected with the site to the site according to the configuration request.

Specifically, in order to implement batch configuration, when creating configuration information such as sites and topologies, the configuration information may be configured using templates and tags provided by the controller.

The Site Template represents a Template for manually or automatically creating the Site, when the Site is created, an administrator can call the Site Template through a human-computer interaction interface of the controller, configuration operation is carried out on attributes in the Site Template, the controller generates a configuration instruction according to the configuration operation, the controller can create one or a batch of sites according to the configuration instruction, the sites can be bound with corresponding CPE, the CPE is configured, and the Site creation process is completed. And after the CPE corresponding to the site is on line, the connection controller is activated, the Local Subnet information (Local Subnet) information of the site learned through the BGP protocol is reported to the controller after activation, and topology configuration information and Subnet information of other sites connected with the site are downloaded from the controller.

The relevant attributes of the Site may be defined in the Site Template, such as the examples of attributes included in the Site Template shown in table 1:

TABLE 1

It should be noted that the above table is only for clarity of description of the relevant attributes included in the Site Template, and is not necessarily an expression form of the Site Template.

The user-definable Site is composed of one or more of the above attributes, and when actually defining the Site, the user should be allowed to add and combine the attribute items contained in the defined Site by himself, and all configuration items are contained by default.

The batch configuration of the sites can be realized through the site template, and the labels (WAN labels, LAN labels and the like) arranged in the site template can realize the batch configuration of subsequent topological connection and strategies.

The Site Tag represents a Site label, and may represent an attribute of a Site, and when a Site is created, one or more Site tags may be printed on a Site to implement the following functions: the sites are managed in groups, the sites belonging to the same group have the same Site Tag, one or more sites can be assigned to corresponding Site managers for management, and the sites can be obtained in batches through the Site tags when topology is created or report forms are displayed.

The WAN Tag represents a wide area network Tag, and one or more WAN tags can be printed on the site to realize the following functions: when creating Topology (Topology), creating Connectivity according to the WAN Tag to which the site belongs, or issuing in batch according to the WAN Tag to which the site belongs when issuing Policy.

The LAN Tag represents a local area network Tag, and one or more LAN tags can be marked on the site to realize batch delivery.

Policy Tag denotes the Tag of Policy Template, which can be used to distinguish between different Policy templates. The following functions may be implemented by typing one or more Policy tags for Policy Template: when creating Site Label or Topolarity, the corresponding Policy Template is referenced by Policy Tag.

When creating a Topology, the connection, and the corresponding Policy Template may be defined in the Topology Template.

The process of defining Topology may include selecting a Topology type and a corresponding site, and in an embodiment of the present application, the Topology type may include three types, namely, Spoke-Hub, Fullmesh, and Point to Point. The controller may determine the type of topology (selected by the user) and the sites in the topology from the configuration instructions.

The controller of the embodiment of the application can provide three modes for selecting the sites for the user: (1) directly selecting sites, (2) selecting a batch of sites according to the Site Tag, wherein the batch of sites all have the same Site Tag, the batch of sites can comprise one or more sites, and (3) selecting a batch of sites by adopting a filtering (filter) mode, wherein the filtering condition can be one or more of the attributes of the sites, and the batch of sites can comprise one or more sites with the same attribute. The controller can determine the site corresponding to the topology type according to the operation of the user.

As shown in fig. 1, the controller may determine that the topology type is Spoke-Hub according to the configuration instruction, and the user may select a batch of sites as branch sites in the SD-WAN network shown in fig. 1 through Site Tag, so that batch configuration may be implemented.

Defining the connection may include determining connected networks and network qualities for stations in the topology, and the controller may determine a plurality of available networks for the topology according to the configuration instruction, and may also determine priorities of the plurality of available networks and network qualities corresponding to the networks according to the configuration instruction.

Policy Template is used to coordinate with Site Label (Site Template) or Topolarity to generate batch Policy. Policy's associated attributes may be defined in Policy templates, as Table 2 shows an example of Policy's associated attributes:

TABLE 2

Attributes of policies	Description of the invention
		Description	Brief description of the strategies
Policy Tag	A Policy may include one or more Policy tags
		Filter	Representing flow filtration conditions, may include: quintuple, Access List, Flow Tag
Rate Limiting	Direct configuration/reference Rate Limiting object
		WAN selection mode	Available/Load Balancing/Prefer

It should be noted that the above table is only for clarity of describing the relevant attributes included in Policy Template, and is not necessarily a representation of Policy Template.

Wherein, Filter represents the matching condition of the filtering flow. The five-tuple may refer to a source address, a destination address, a source port, a destination port, a protocol, etc. of the traffic. Flow Tag represents a Flow label that can be used to rank flows. For example, one or more Flow tags may be tagged for a class of specified traffic to reference the Flow Tag as a Filter condition in subsequent polices.

In a possible implementation manner, the Policy Template may further include a Type (Type) attribute, which is used to distinguish different types of Policy templates according to different usage manners, or may be classified into different types of Policy templates according to different topology manners. For example, Policy Template for Site Template (Point to Point Topology), Policy Template for Spoke-Hub Topology, and Policy Template for Fullmesh Topology may be used.

For Policy Template for Site Template, when generating Policy, the Site generated by Site Template is used as Origin Site by default.

For Policy Template for Spoke-Hub Topology, when generating Policy, Spoke is Origin, and Hub or Internet is used as Peer (opposite end) site.

For Policy Template for Fullmesh Topology, both Origin and Peer do not need to be configured when generating Policy, and sites at both ends of a connection are automatically selected as Origin and Peer when generating Policy. In one possible implementation, when the Topology Template is validated, the generated Site-Site connection is called a connection, and the Site with the smaller ID in the generated connection is used as Origin.

Policy Template is determined in a similar manner as the site, and may be preset. The controller can determine the Policy Template corresponding to the Topology according to the operation of the user. For example, the user may select one or more Policy templates directly or via Policy Tag.

In one possible implementation, the Site Label is used to associate the Site Template and Policy Template so that the reference to the Site Template and Policy Template is implemented simultaneously by referencing the Site Label when the Site is created automatically or manually.

The Site Label may have the following attributes:

description (briefly described), 1 Site Template, 1 or more Policy templates, or 1 or more Policy tags.

It should be noted that, as described above, when the controller creates a site, the controller may generate an active link of the site, where the active link is used to activate the site, and a physical device corresponding to the site connects to the controller by accessing the active link, and reports the intranet segment (Local Subnet) information of the site learned by the BGP protocol to the controller, and downloads the configuration information of the site and Subnet information of the site and other sites connected to the site from the controller. Of course, the above activating and configuring the website by activating the link is only one embodiment of the present application, and the present application is not limited thereto.

Fig. 2 shows a flow chart of a network configuration method according to an embodiment of the present application, which is applied to a controller in an SD-WAN network, as shown in fig. 2, the method includes:

step S21, according to the configuration instruction, calling a template to create a site and a topology, and generating configuration information, wherein the template comprises a site template and a topology template, and the configuration information comprises site configuration information and topology configuration information;

step S22, when receiving an activation request sent by a physical device corresponding to a site, sending the site configuration information to the physical device to activate the physical device;

step S23, when receiving a configuration request sent by a physical device corresponding to a site, sending the topology configuration information to the physical device to configure the site.

As shown in the application scenario of fig. 1, the controller may receive a configuration instruction through the human-computer interface, create a site in the network, create a topology according to the received configuration instruction and a template, and generate configuration information, where the template may include a site template, a topology template, and a policy template as described above.

Wherein, the step S21 may include: calling a site template according to the configuration instruction to create a site, configuring parameters of the site and generating an activation link of the site; and calling a topology template according to the configuration instruction, setting the topology and a corresponding strategy in the topology template, and creating the topology.

In a possible implementation manner, invoking a topology template according to the configuration instruction, setting a topology and a corresponding policy in the topology template, and creating the topology may include: calling a strategy template according to the configuration instruction to set a strategy adopted by communication between the sites; and calling a topology template according to the configuration instruction and setting strategies adopted by communication between the sites in the topology template according to the strategy template.

That is, when the controller creates a site, the controller may configure parameters of the site according to the site template, generate the site, and generate an activation link of the site; when the controller creates the topology, the controller may define a connection mode between the site and the site, define a connection (WAN and network quality used), determine a Policy Template (Policy Template) used for communication between the site and the site, and the like according to the configuration instruction and the topology Template received through the human-computer interaction interface.

The sites, the topology and the strategy in the network are created in a template mode, so that the configuration of the network sites can be realized in batches, and the configuration efficiency and the convenience of a user are improved.

In a possible implementation manner, the site template and the topology template include site tags, where the site tags are used to represent attributes of a site, and the creating a topology includes: and creating a topology according to the sites with the site labels in the topology template.

In an embodiment of the present application, when creating a Topology, Topology may be defined in the Topology Template, and the process of defining Topology may include selecting a Topology type and a corresponding site. The configuration instruction may include a site tag and a topology type, and the controller may determine the topology type according to the configuration instruction and determine a corresponding site according to the site tag. For example, when creating a Topology, a user may call a Topology Template through a human-computer interaction interface, define Topology in the Topology Template, select a Topology type when defining the Topology, and may also select a batch of sites directly through a site tag. The controller may generate a configuration instruction according to an operation of a user, where the configuration instruction may include a site tag and a topology type, and thus, the topology type may be determined according to the configuration instruction, and a corresponding site may be determined according to the site tag in the configuration instruction (a site template may include a site tag, and when the site tag of a site is the same as the site tag in the configuration instruction, the site is a site of a currently created topology), and a topology may be created according to the site with the site tag in the topology template.

By the method, the sites can be selected in batch to create the topology, the configuration of the network sites can be realized in batch, and the configuration efficiency and convenience of users are improved.

In one possible implementation, the method further includes: adding a new site to the topology when the new site includes the site tag. For example, after the topology is created, if a new site is created, the site includes the above-mentioned site tag, and after the site is online, the controller determines that the site tag of the site is the same as the site tag of the established topology, and may automatically add the newly online site to the networking.

In a possible implementation manner, the site template includes a wide area network tag, where the wide area network tag is used to indicate a manner of connection between sites, and the creating a topology includes: and establishing Connectivity between the sites according to the wide area network tags. Through WAN labels in the site templates, rapid configuration of topological connections can be achieved.

In a possible implementation manner, the configuration instruction includes a policy tag, and the policy tag is carried by the policy template. Policy Tag denotes the Tag of Policy Template, which can be used to distinguish between different Policy templates. When creating Topology, the corresponding Policy Template may be referenced by Policy Tag.

According to the embodiment of the application, the service strategy configuration can be completed through policyTemplate setting, and the strategy configuration can be quickly completed through a template for tunnel configuration.

For example, as shown in FIG. 1, the controller may create a headquarters site and a branch site according to the received configuration instructions. After configuring the network on the controller according to the above-described procedure, the physical device corresponding to the site may be connected to the internet, and the physical device may access the activation link through the browser. It should be noted that the physical device may also have a human-computer interaction interface, for example, the physical device corresponding to the site may be a terminal device such as a server, a computer, a notebook computer, and a mobile phone that has a human-computer interaction function. In this way, the site may receive various instructions of the user through the human-computer interaction interface, for example, the user may input an activation link in a browser of the site and click and access the activation link, so that the site may detect the activation instruction and send an activation request to the controller according to the activation instruction.

When the station accesses the activation link, the station can be connected to the controller, a message channel is formed between the controller and the station, and an activation request is sent to the controller. The CPE corresponding to a Site (headquarters or branch) uses a BGP protocol to interface with devices such as a Local router/core switch, learns Local Subnet information (Local Subnet) of the Site through the BGP protocol, and reports the learned Local Subnet information to the controller through the message channel.

The controller may also send station configuration information to the station to activate the station in response to the activation request. For example, as shown in fig. 1, when the controller receives the activation request sent by the CPE 11, the controller may send the Site configuration information of the CPE 11 to the CPE 11, and after receiving the Site configuration information of the local Site, the CPE 11 may activate the CPE 11 according to the configuration information, for example, configure the physical device according to the parameters configured in the Site Template, so as to activate the Site.

After the physical device corresponding to the site is activated, the physical device corresponding to the site may send a configuration request to the controller, and the controller may send topology configuration information to the physical device corresponding to the site after receiving the configuration request. The physical device corresponding to the site may perform configuration (topology, connection, policy, and the like) according to the topology configuration information to perform subsequent traffic forwarding.

According to the implementation method for carrying out batch configuration on the sites, the user configuration efficiency can be improved. In the customer network, the services carried by the similar Wan lines of the similar sites are common. Based on this feature, the embodiments of the present application perform templated abstraction of the user's services. First, the Site may Tag, for example, a branch office, and the Site tagged with the Site Tag may be selected in bulk at the time of topology configuration, for example, configuring a topology to the headquarters for all branch offices. Second, site's WAN (Wide area network Exit) can be Tag-marked, which is to create tunnel connections in the topology template and select out the interface usage in the policy template. For example: if a connection is desired to be established with the WAN of the operator, the WAN establishing connection of the source site connected with the Tag and the WAN establishing connection of the destination site connected with the Tag can be configured in the topology template. Thirdly, policies can be abstracted into templates, and the templates can also be tagged with tags, so that if the same policies are needed from the same batch site to the headquarter site, all the policies can be generated in a topology through a configuration batch by applying Policy Tag/Policy Template. Fourthly, the configuration in the strategy has commonality for the traffic with similar characteristics, for example, the ordinary service of a site goes through the Internet exit, the important service goes through the special line exit, for the convenience of configuration, a plurality of ordinary services can be marked with Flow tags through a plurality of Continue policies, and then the Flow of the Tag is designated in the strategy to be sent out from the Internet exit. The core of simplifying user configuration and improving efficiency is achieved through Template and Tag. If configured properly, thousands of original user configurations can be abstractly configured into several templates.

An embodiment of the present application further provides a network configuration apparatus, and fig. 3 shows a block diagram of the network configuration apparatus according to an embodiment of the present application. As shown in fig. 3, the network configuration apparatus of the present application may include:

the generating module 61 is configured to invoke a template to create a site and a topology according to a configuration instruction, and generate configuration information, where the template includes a site template and a topology template, and the configuration information includes site configuration information and topology configuration information;

an activation module 62, configured to send the site configuration information to a physical device to activate the physical device when receiving an activation request sent by the physical device corresponding to the site;

the configuration module 63 is configured to send the topology configuration information to a physical device to configure a site when receiving a configuration request sent by the physical device corresponding to the site.

In one possible implementation, the generating module 61 may include:

the second creating unit is further configured to create a topology according to the site with the site label in the topology template.

In one possible implementation, the apparatus further includes:

and the networking module is used for adding the new site into the topology when the new site comprises the site label.

the second creating unit is further configured to establish a connection between sites according to the wide area network tag.

In a possible implementation manner, the configuration instruction includes a policy tag, and the policy tag is carried by the policy template; calling a strategy template according to a configuration instruction to set a strategy adopted by communication between sites, wherein the strategy comprises the following steps:

Fig. 4 is a block diagram illustrating an apparatus 800 for network configuration according to an example embodiment. For example, the apparatus 800 may be a mobile phone, a computer, a digital broadcast terminal, a messaging device, a game console, a tablet device, a medical device, an exercise device, a personal digital assistant, and the like.

Referring to fig. 4, the apparatus 800 may include one or more of the following components: processing component 802, memory 804, power component 806, multimedia component 808, audio component 810, input/output (I/O) interface 812, sensor component 814, and communication component 816.

The processing component 802 generally controls overall operation of the device 800, such as operations associated with display, telephone calls, data communications, camera operations, and recording operations. The processing components 802 may include one or more processors 820 to execute instructions to perform all or a portion of the steps of the methods described above. Further, the processing component 802 can include one or more modules that facilitate interaction between the processing component 802 and other components. For example, the processing component 802 can include a multimedia module to facilitate interaction between the multimedia component 808 and the processing component 802.

The memory 804 is configured to store various types of data to support operations at the apparatus 800. Examples of such data include instructions for any application or method operating on device 800, contact data, phonebook data, messages, pictures, videos, and so forth. The memory 804 may be implemented by any type or combination of volatile or non-volatile memory devices such as Static Random Access Memory (SRAM), electrically erasable programmable read-only memory (EEPROM), erasable programmable read-only memory (EPROM), programmable read-only memory (PROM), read-only memory (ROM), magnetic memory, flash memory, magnetic or optical disks.

Power components 806 provide power to the various components of device 800. The power components 806 may include a power management system, one or more power supplies, and other components associated with generating, managing, and distributing power for the apparatus 800.

The multimedia component 808 includes a screen that provides an output interface between the device 800 and a user. In some embodiments, the screen may include a Liquid Crystal Display (LCD) and a Touch Panel (TP). If the screen includes a touch panel, the screen may be implemented as a touch screen to receive an input signal from a user. The touch panel includes one or more touch sensors to sense touch, slide, and gestures on the touch panel. The touch sensor may not only sense the boundary of a touch or slide action, but also detect the duration and pressure associated with the touch or slide operation. In some embodiments, the multimedia component 808 includes a front facing camera and/or a rear facing camera. The front camera and/or the rear camera may receive external multimedia data when the device 800 is in an operating mode, such as a shooting mode or a video mode. Each front camera and rear camera may be a fixed optical lens system or have a focal length and optical zoom capability.

The audio component 810 is configured to output and/or input audio signals. For example, the audio component 810 includes a Microphone (MIC) configured to receive external audio signals when the apparatus 800 is in an operational mode, such as a call mode, a recording mode, and a voice recognition mode. The received audio signals may further be stored in the memory 804 or transmitted via the communication component 816. In some embodiments, audio component 810 also includes a speaker for outputting audio signals.

The I/O interface 812 provides an interface between the processing component 802 and peripheral interface modules, which may be keyboards, click wheels, buttons, etc. These buttons may include, but are not limited to: a home button, a volume button, a start button, and a lock button.

The sensor assembly 814 includes one or more sensors for providing various aspects of state assessment for the device 800. For example, the sensor assembly 814 may detect the open/closed status of the device 800, the relative positioning of components, such as a display and keypad of the device 800, the sensor assembly 814 may also detect a change in the position of the device 800 or a component of the device 800, the presence or absence of user contact with the device 800, the orientation or acceleration/deceleration of the device 800, and a change in the temperature of the device 800. Sensor assembly 814 may include a proximity sensor configured to detect the presence of a nearby object without any physical contact. The sensor assembly 814 may also include a light sensor, such as a CMOS or CCD image sensor, for use in imaging applications. In some embodiments, the sensor assembly 814 may also include an acceleration sensor, a gyroscope sensor, a magnetic sensor, a pressure sensor, or a temperature sensor.

The communication component 816 is configured to facilitate communications between the apparatus 800 and other devices in a wired or wireless manner. The device 800 may access a wireless network based on a communication standard, such as WiFi, 2G or 3G, or a combination thereof. In an exemplary embodiment, the communication component 816 receives a broadcast signal or broadcast related information from an external broadcast management system via a broadcast channel. In an exemplary embodiment, the communication component 816 further includes a Near Field Communication (NFC) module to facilitate short-range communications. For example, the NFC module may be implemented based on Radio Frequency Identification (RFID) technology, infrared data association (IrDA) technology, Ultra Wideband (UWB) technology, Bluetooth (BT) technology, and other technologies.

In an exemplary embodiment, the apparatus 800 may be implemented by one or more Application Specific Integrated Circuits (ASICs), Digital Signal Processors (DSPs), Digital Signal Processing Devices (DSPDs), Programmable Logic Devices (PLDs), Field Programmable Gate Arrays (FPGAs), controllers, micro-controllers, microprocessors or other electronic components for performing the above-described methods.

In an exemplary embodiment, a non-transitory computer-readable storage medium, such as the memory 804, is also provided that includes computer program instructions executable by the processor 820 of the device 800 to perform the above-described methods.

Fig. 5 is a block diagram illustrating an apparatus 1900 for network configuration according to an example embodiment. For example, the apparatus 1900 may be provided as a server. Referring to FIG. 5, the device 1900 includes a processing component 1922 further including one or more processors and memory resources, represented by memory 1932, for storing instructions, e.g., applications, executable by the processing component 1922. The application programs stored in memory 1932 may include one or more modules that each correspond to a set of instructions. Further, the processing component 1922 is configured to execute instructions to perform the above-described method.

The device 1900 may also include a power component 1926 configured to perform power management of the device 1900, a wired or wireless network interface 1950 configured to connect the device 1900 to a network, and an input/output (I/O) interface 1958. The device 1900 may operate based on an operating system stored in memory 1932, such as Windows Server, Mac OS XTM, UnixTM, LinuxTM, FreeBSDTM, or the like.

In an exemplary embodiment, a non-transitory computer readable storage medium, such as the memory 1932, is also provided that includes computer program instructions executable by the processing component 1922 of the apparatus 1900 to perform the above-described methods.

The present disclosure may be systems, methods, and/or computer program products. The computer program product may include a computer-readable storage medium having computer-readable program instructions embodied thereon for causing a processor to implement various aspects of the present disclosure.

The computer readable storage medium may be a tangible device that can hold and store the instructions for use by the instruction execution device. The computer readable storage medium may be, for example, but not limited to, an electronic memory device, a magnetic memory device, an optical memory device, an electromagnetic memory device, a semiconductor memory device, or any suitable combination of the foregoing. More specific examples (a non-exhaustive list) of the computer readable storage medium would include the following: a portable computer diskette, a hard disk, a Random Access Memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), a Static Random Access Memory (SRAM), a portable compact disc read-only memory (CD-ROM), a Digital Versatile Disc (DVD), a memory stick, a floppy disk, a mechanical coding device, such as punch cards or in-groove projection structures having instructions stored thereon, and any suitable combination of the foregoing. Computer-readable storage media as used herein is not to be construed as transitory signals per se, such as radio waves or other freely propagating electromagnetic waves, electromagnetic waves propagating through a waveguide or other transmission medium (e.g., optical pulses through a fiber optic cable), or electrical signals transmitted through electrical wires.

The computer-readable program instructions described herein may be downloaded from a computer-readable storage medium to a respective computing/processing device, or to an external computer or external storage device via a network, such as the internet, a local area network, a wide area network, and/or a wireless network. The network may include copper transmission cables, fiber optic transmission, wireless transmission, routers, firewalls, switches, gateway computers and/or edge servers. The network adapter card or network interface in each computing/processing device receives computer-readable program instructions from the network and forwards the computer-readable program instructions for storage in a computer-readable storage medium in the respective computing/processing device.

The computer program instructions for carrying out operations of the present disclosure may be assembler instructions, Instruction Set Architecture (ISA) instructions, machine-related instructions, microcode, firmware instructions, state setting data, or source or object code written in any combination of one or more programming languages, including an object oriented programming language such as Smalltalk, C + + or the like and conventional procedural programming languages, such as the "C" programming language or similar programming languages. The computer-readable program instructions may execute entirely on the user's computer, partly on the user's computer, as a stand-alone software package, partly on the user's computer and partly on a remote computer or entirely on the remote computer or server. In the case of a remote computer, the remote computer may be connected to the user's computer through any type of network, including a Local Area Network (LAN) or a Wide Area Network (WAN), or the connection may be made to an external computer (for example, through the Internet using an Internet service provider). In some embodiments, the electronic circuitry that can execute the computer-readable program instructions implements aspects of the present disclosure by utilizing the state information of the computer-readable program instructions to personalize the electronic circuitry, such as a programmable logic circuit, a Field Programmable Gate Array (FPGA), or a Programmable Logic Array (PLA).

Various aspects of the present disclosure are described herein with reference to flowchart illustrations and/or block diagrams of methods, apparatus (systems) and computer program products according to embodiments of the disclosure. It will be understood that each block of the flowchart illustrations and/or block diagrams, and combinations of blocks in the flowchart illustrations and/or block diagrams, can be implemented by computer-readable program instructions.

These computer-readable program instructions may be provided to a processor of a general purpose computer, special purpose computer, or other programmable data processing apparatus to produce a machine, such that the instructions, which execute via the processor of the computer or other programmable data processing apparatus, create means for implementing the functions/acts specified in the flowchart and/or block diagram block or blocks. These computer-readable program instructions may also be stored in a computer-readable storage medium that can direct a computer, programmable data processing apparatus, and/or other devices to function in a particular manner, such that the computer-readable medium storing the instructions comprises an article of manufacture including instructions which implement the function/act specified in the flowchart and/or block diagram block or blocks.

The computer readable program instructions may also be loaded onto a computer, other programmable data processing apparatus, or other devices to cause a series of operational steps to be performed on the computer, other programmable apparatus or other devices to produce a computer implemented process such that the instructions which execute on the computer, other programmable apparatus or other devices implement the functions/acts specified in the flowchart and/or block diagram block or blocks.

The flowchart and block diagrams in the figures illustrate the architecture, functionality, and operation of possible implementations of systems, methods and computer program products according to various embodiments of the present disclosure. In this regard, each block in the flowchart or block diagrams may represent a module, segment, or portion of instructions, which comprises one or more executable instructions for implementing the specified logical function(s). In some alternative implementations, the functions noted in the block may occur out of the order noted in the figures. For example, two blocks shown in succession may, in fact, be executed substantially concurrently, or the blocks may sometimes be executed in the reverse order, depending upon the functionality involved. It will also be noted that each block of the block diagrams and/or flowchart illustration, and combinations of blocks in the block diagrams and/or flowchart illustration, can be implemented by special purpose hardware-based systems which perform the specified functions or acts, or combinations of special purpose hardware and computer instructions.

Having described embodiments of the present disclosure, the foregoing description is intended to be exemplary, not exhaustive, and not limited to the disclosed embodiments. Many modifications and variations will be apparent to those of ordinary skill in the art without departing from the scope and spirit of the described embodiments. The terms used herein were chosen in order to best explain the principles of the embodiments, the practical application, or technical improvements to the techniques in the marketplace, or to enable others of ordinary skill in the art to understand the embodiments disclosed herein.

Claims

1. A network configuration method applied to a controller in a software defined wide area network SD-WAN, the method comprising:

2. The method of claim 1, wherein invoking templates to create sites and topologies according to configuration instructions and generating configuration information comprises:

3. The method of claim 2, wherein invoking a topology template according to the configuration instruction, setting the topology and the corresponding policy in the topology template, and creating the topology comprises:

4. The method according to claim 2 or 3, wherein the site template and the topology template comprise site tags, and the site tags are used for representing attributes of sites,

5. The method of claim 4, further comprising:

adding a new site to the topology when the new site includes the site tag.

6. The method of claim 2 or 3, wherein the site template includes a wide area network tag, the wide area network tag is used to indicate the connection mode between sites,

7. The method according to claim 3, wherein the configuration instruction includes a policy tag, and the policy tag is carried by the policy template;

8. A network configuration apparatus, the apparatus being applied to a controller in a software defined wide area network SD-WAN, the apparatus comprising:

9. A network configuration apparatus, comprising:

a processor;

a memory for storing processor-executable instructions;

wherein the processor is configured to implement the method of any one of claims 1-7 when executing the instructions.

10. A non-transitory computer readable storage medium having computer program instructions stored thereon, wherein the computer program instructions, when executed by a processor, implement the method of any of claims 1 to 7.