CN113572650A - Network regulation and control method, equipment and medium based on SDN - Google Patents
Network regulation and control method, equipment and medium based on SDN Download PDFInfo
- Publication number
- CN113572650A CN113572650A CN202110947355.1A CN202110947355A CN113572650A CN 113572650 A CN113572650 A CN 113572650A CN 202110947355 A CN202110947355 A CN 202110947355A CN 113572650 A CN113572650 A CN 113572650A
- Authority
- CN
- China
- Prior art keywords
- sdn
- network
- user
- terminal
- access
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Granted
Links
- 238000000034 method Methods 0.000 title claims abstract description 64
- 238000004891 communication Methods 0.000 claims abstract description 11
- 230000008569 process Effects 0.000 claims description 11
- 230000004044 response Effects 0.000 claims description 7
- 238000012544 monitoring process Methods 0.000 claims description 5
- 238000010586 diagram Methods 0.000 description 12
- 238000004590 computer program Methods 0.000 description 7
- 230000006870 function Effects 0.000 description 5
- 238000012423 maintenance Methods 0.000 description 5
- 230000009286 beneficial effect Effects 0.000 description 4
- 238000005516 engineering process Methods 0.000 description 4
- 239000002071 nanotube Substances 0.000 description 4
- 238000012545 processing Methods 0.000 description 4
- 230000008859 change Effects 0.000 description 3
- 230000000694 effects Effects 0.000 description 3
- 238000012986 modification Methods 0.000 description 3
- 230000004048 modification Effects 0.000 description 3
- 230000010354 integration Effects 0.000 description 2
- 230000003287 optical effect Effects 0.000 description 2
- 230000001360 synchronised effect Effects 0.000 description 2
- 238000012795 verification Methods 0.000 description 2
- 206010063385 Intellectualisation Diseases 0.000 description 1
- 230000005540 biological transmission Effects 0.000 description 1
- 238000011161 development Methods 0.000 description 1
- 230000006872 improvement Effects 0.000 description 1
- 210000001503 joint Anatomy 0.000 description 1
- 238000004519 manufacturing process Methods 0.000 description 1
- 230000000750 progressive effect Effects 0.000 description 1
- 230000003068 static effect Effects 0.000 description 1
Images
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
- H04L41/08—Configuration management of networks or network elements
- H04L41/0803—Configuration setting
- H04L41/0823—Configuration setting characterised by the purposes of a change of settings, e.g. optimising configuration for enhancing reliability
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L12/00—Data switching networks
- H04L12/28—Data switching networks characterised by path configuration, e.g. LAN [Local Area Networks] or WAN [Wide Area Networks]
- H04L12/46—Interconnection of networks
- H04L12/4641—Virtual LANs, VLANs, e.g. virtual private networks [VPN]
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
- H04L41/08—Configuration management of networks or network elements
- H04L41/0876—Aspects of the degree of configuration automation
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
- H04L41/08—Configuration management of networks or network elements
- H04L41/0896—Bandwidth or capacity management, i.e. automatically increasing or decreasing capacities
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L47/00—Traffic control in data switching networks
- H04L47/10—Flow control; Congestion control
- H04L47/12—Avoiding congestion; Recovering from congestion
- H04L47/125—Avoiding congestion; Recovering from congestion by balancing the load, e.g. traffic engineering
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L47/00—Traffic control in data switching networks
- H04L47/10—Flow control; Congestion control
- H04L47/24—Traffic characterised by specific attributes, e.g. priority or QoS
- H04L47/2425—Traffic characterised by specific attributes, e.g. priority or QoS for supporting services specification, e.g. SLA
- H04L47/2433—Allocation of priorities to traffic types
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/04—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks
- H04L63/0428—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks wherein the data content is protected, e.g. by encrypting or encapsulating the payload
Landscapes
- Engineering & Computer Science (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- Computer Security & Cryptography (AREA)
- Computer Hardware Design (AREA)
- Computing Systems (AREA)
- General Engineering & Computer Science (AREA)
- Automation & Control Theory (AREA)
- Data Exchanges In Wide-Area Networks (AREA)
Abstract
The application discloses a network regulation and control method, equipment and a medium based on an SDN (software defined network), which are used for solving the technical problems of complex operation, high cost and long time of the existing network configuration. The method comprises the following steps: recording first configuration information of access terminal equipment into an SDN access management module; performing user registration based on an SDN access management module to bind a user using access terminal equipment with a user corresponding to the user; carrying out priority marking and bandwidth configuration on each using terminal respectively, and storing the priority marking and the bandwidth configuration to an SDN memory; inputting second configuration information of the network bearing equipment into an SDN control module, and configuring a resource pool according to the scale and the number of the access terminal equipment and the network bearing equipment; based on an SDN control module, sending a corresponding communication protocol according to protocol configuration parameters in a resource pool to complete bottom network configuration; the priority of each use terminal in the SDN memory is obtained through the management network, so that the network bandwidth of each use terminal is adjusted according to the priority, and the labor cost and the technical requirement are reduced.
Description
Technical Field
The present application relates to the field of network resource regulation and control technologies, and in particular, to a network regulation and control method, device, and medium based on an SDN.
Background
Software Defined Network (SDN) is a novel Network innovation architecture, can define and control a Network in a Software programming form, is an implementation manner of Network virtualization, and realizes flexible control of Network traffic by separating a control plane and a data plane of a Network device.
With the rapid development of information technology and the rapid popularization of intellectualization, the application scale of networks is continuously enlarged. In application scenes with high crowd density such as hotels, office buildings and the like, more and more network users are provided by individuals and teams, and the users have the characteristics of frequent change, inconsistent peak time, high service confidentiality and the like, so that the network has higher and higher requirements on flexibility, safety, customizability and the like. However, the existing operation and maintenance scheme cannot meet the technical requirements of the network in the aspects of flexibility, safety, customizability and the like, and the configuration operation in the operation and maintenance process is very complicated and complex, and the operation and maintenance cost is high.
Disclosure of Invention
The embodiment of the application provides a network regulation and control method, network regulation and control equipment and a network regulation and control medium based on an SDN (software defined network), and aims to solve the technical problems that an existing network regulation and control scheme cannot meet the technical requirements of a network in the aspects of flexibility, safety, customizability and the like, the operation of network configuration is complex, the operation and maintenance cost is high, and the network response time is long.
In one aspect, an embodiment of the present application provides a network regulation and control method based on an SDN, applied to a network regulation and control system based on an SDN, where the system includes an SDN access management module, an SDN control module, an access device, and a network bearer device, and includes: entering first configuration information of the access end device into the SDN access management module so that the SDN access management module manages the access end device; performing user registration based on the SDN access management module to bind a user using the access terminal equipment with a use terminal corresponding to the user; carrying out priority marking and bandwidth configuration on each using terminal respectively, and storing the priority marking and the bandwidth configuration into an SDN memory; inputting second configuration information of the network bearing equipment into the SDN control module so that the SDN control module manages the network bearing equipment, and configuring a resource pool according to the scale and the number of the access terminal equipment and the network bearing equipment; based on the SDN control module, sending a corresponding communication protocol according to the protocol configuration parameters in the resource pool to complete the bottom layer network configuration of the network bearing equipment; and acquiring the priority of each user terminal in the SDN memory through the management network so as to adjust the network bandwidth of each user terminal according to the priority.
In an implementation manner of the present application, after the user using the access end device is bound to the user terminal corresponding to the user, the method further includes: monitoring each of the user terminals using the access terminal device; and under the condition that the access terminal equipment is monitored to be used by a new using terminal, determining a user corresponding to the new using terminal, acquiring the using time, the MAC address and the Internet protocol address of the new using terminal, and adding the using time, the MAC address and the Internet protocol address of the new using terminal to a user name bound by the new using terminal.
In an implementation manner of the present application, after the user using the access end device is bound to the user terminal corresponding to the user, the method further includes: controlling the access terminal equipment to detect each user terminal at intervals of a first preset time period; if the response times of the using terminal are smaller than a preset threshold value, marking the state of the using terminal as an off-line state; the state of a user terminal using the access terminal equipment is defaulted to be an online state; synchronizing the offline state to the SDN control module to cause the SDN control module to process the user terminal.
In an implementation manner of the present application, a network range of the resource pool is a VLAN range, or a VXLAN L2 and a VXLAN L3 range, and the resource pool includes a routing protocol resource pool, a service network resource pool, an alarm configuration resource pool, an NTP resource pool, and a user information resource pool; configuring a resource pool according to the scale and the number of the access terminal device and the network bearing device, specifically comprising: configuring a routing protocol corresponding to each service through the routing protocol resource pool; configuring a service address of the network bearing equipment through the service network resource pool; configuring a reporting address of the alarm information of the access terminal equipment through the alarm configuration resource pool; configuring an NTP service address of the SDN control module through the NTP resource pool; and configuring the name, the user name and the password of the network bearing equipment, a login supporting protocol and a simple network management protocol through the user information resource pool.
In an implementation manner of the present application, based on administrator rights, the binding between the SDN access management module and the SDN control module specifically includes: generating a binding password through an open secure socket layer protocol component based on the administrator authority of the SDN access management module or the SDN control module; determining, based on the management network, that the binding password is correct, thereby binding the SDN access management module and the SDN control module by the binding password; and after the generation time of the binding password exceeds a second preset time period, the binding password is invalid.
In an implementation manner of the present application, after the SDN access management module and the SDN control module are bound, the method further includes: based on the SDN control module, acquiring different VXLAN identifications from a network range of the resource pool according to configuration parameters in the resource pool and the priority of each user terminal; and based on the network bearing equipment, establishing different VXLAN networks for each user terminal in an OpenFlow flow table or corresponding control application program interface mode.
In an implementation manner of the present application, after creating different VXLAN networks for the user terminals corresponding to the users, the method further includes: and encrypting the data sent by each using terminal by using a heterogeneous accelerator card and an advanced encryption standard encryption algorithm.
In one implementation manner of the present application, the method further includes: under the condition that a user terminal in an offline state uses the access terminal device, determining that the MAC address of the user terminal in the offline state is the same as the MAC address of a user terminal corresponding to the user, and accordingly marking the user terminal in an online state and synchronizing the user terminal to the SDN control module; acquiring a unique VXLAN identifier from a network range of the resource pool based on the SDN control module; and based on the network bearing device, a unique VXLAN network is established through an OpenFlow flow table or a corresponding control API mode.
On the other hand, an embodiment of the present application further provides a network regulation and control device based on SDN, applied to a network regulation and control system based on SDN, where the system includes an SDN access management module, an SDN control module, an access device, and a network bearer device, and the device includes: at least one processor; and a memory communicatively coupled to the at least one processor; wherein the memory stores instructions executable by the at least one processor to enable the at least one processor to: entering first configuration information of the access end device into the SDN access management module so that the SDN access management module manages the access end device; performing user registration based on the SDN access management module to bind a user using the access terminal equipment with a use terminal corresponding to the user; carrying out priority marking and bandwidth configuration on each using terminal respectively, and storing the priority marking and the bandwidth configuration into an SDN memory; inputting second configuration information of the network bearing equipment into the SDN control module so that the SDN control module manages the network bearing equipment, and configuring a resource pool according to the scale and the number of the access terminal equipment and the network bearing equipment; based on the SDN control module, sending a corresponding communication protocol according to the protocol configuration parameters in the resource pool to complete the bottom layer network configuration of the network bearing equipment; and acquiring the priority of each user terminal in the SDN memory through the management network so as to adjust the network bandwidth of each user terminal according to the priority.
On the other hand, an embodiment of the present application further provides a non-volatile computer storage medium, which stores computer-executable instructions, and is applied to a network regulation and control system based on an SDN, where the system includes an SDN access management module, an SDN control module, an access device, and a network bearer device, and the computer-executable instructions are configured to: entering first configuration information of the access end device into the SDN access management module so that the SDN access management module manages the access end device; performing user registration based on the SDN access management module to bind a user using the access terminal equipment with a use terminal corresponding to the user; carrying out priority marking and bandwidth configuration on each using terminal respectively, and storing the priority marking and the bandwidth configuration into an SDN memory; inputting second configuration information of the network bearing equipment into the SDN control module so that the SDN control module manages the network bearing equipment, and configuring a resource pool according to the scale and the number of the access terminal equipment and the network bearing equipment; based on the SDN control module, sending a corresponding communication protocol according to the protocol configuration parameters in the resource pool to complete the bottom layer network configuration of the network bearing equipment; and acquiring the priority of each user terminal in the SDN memory through the management network so as to adjust the network bandwidth of each user terminal according to the priority.
The embodiment of the application provides a network regulation and control method, equipment and medium based on an SDN (software defined network), which at least have the following beneficial effects: the configuration information of the access terminal equipment is input into the SDN access management module, so that the SDN access management module manages the access terminal equipment; the configuration information of the network bearing equipment is input into the SDN control module, so that the SDN control module manages the network bearing equipment, and flexible management of the network is facilitated; carrying out priority marking on the use terminals corresponding to the users through an SDN access management module, and configuring guaranteed bandwidths and suggested bandwidths for the use terminals, so that the service with guaranteed bandwidth parameters is ensured to be executed preferentially, network bandwidths of services corresponding to other use terminals are adjusted according to the priorities, and further network load is optimized; the data in the network is encrypted by an advanced encryption standard encryption algorithm, so that the requirement of a user on the safety of the network is met; the use terminal in an off-line state is timely obtained by monitoring the use terminal in real time, so that the network bandwidth is timely released, and the network quality is adjusted. According to the method and the device, automatic management of the network equipment is realized through the SDN control module according to the relevant configuration information in the resource pool, manpower resources spent on manual configuration are saved, the technical requirement of network regulation and control is reduced, and complicated configuration steps in the network regulation and control process are reduced, so that the response time of the network is shortened.
Drawings
The accompanying drawings, which are included to provide a further understanding of the application and are incorporated in and constitute a part of this application, illustrate embodiment(s) of the application and together with the description serve to explain the application and not to limit the application. In the drawings:
fig. 1 is a flowchart of a network regulation and control method based on SDN according to an embodiment of the present disclosure;
fig. 2 is an integration schematic diagram of network regulation based on SDN according to an embodiment of the present disclosure;
fig. 3 is a schematic structural diagram of a network regulation and control device based on an SDN according to an embodiment of the present application.
Detailed Description
In order to make the objects, technical solutions and advantages of the present application more apparent, the technical solutions of the present application will be described in detail and completely with reference to the following specific embodiments of the present application and the accompanying drawings. It should be apparent that the described embodiments are only some of the embodiments of the present application, and not all of the embodiments. All other embodiments, which can be derived by a person skilled in the art from the embodiments given herein without making any creative effort, shall fall within the protection scope of the present application.
The embodiment of the application provides a network regulation and control method, equipment and a medium based on an SDN (software defined network). according to the network regulation and control method, an SDN access management module is used for receiving and managing access terminal equipment, an SDN control module is used for receiving and managing network bearing equipment, an access unit is flexibly set, and flexible management of a network is facilitated; carrying out priority marking on the use terminal through an SDN access management module, ensuring that the service with the guaranteed bandwidth parameter is preferentially executed, and adjusting the network bandwidth of the service corresponding to other use terminals according to the priority; performing network automation configuration by an SDN control module according to the relevant configuration information in the resource pool; the network is encrypted by an advanced encryption standard encryption algorithm, so that the security of the network is ensured. The technical problems that the existing network regulation and control scheme cannot meet the technical requirements of the network in the aspects of flexibility, safety, customization and the like, the network configuration operation is complex, the operation and maintenance cost is high, and the network response time is long are solved.
The technical solutions proposed in the embodiments of the present application are described in detail below with reference to the accompanying drawings.
The network regulation and control method based on the SDN is applied to a network regulation and control system based on the SDN, the system comprises an SDN access management module, an SDN control module, an access end device and a network bearing device, and management Internet Protocols (IP) among all module devices of the system can reach each other.
Fig. 1 is a flowchart of a network regulation and control method based on an SDN according to an embodiment of the present application. As shown in fig. 1, a network regulation and control method based on an SDN provided in an embodiment of the present application mainly includes the following steps:
s101: and recording the first configuration information of the access terminal equipment into an SDN access management module so that the SDN access management module manages the access terminal equipment.
The server inputs a user name, a password, an IP address, a Simple Network Management Protocol (SNMP) and a Secure Shell Protocol (SSH) which are configured in advance by the access terminal equipment into the SDN access Management module, wherein the access terminal equipment refers to an access terminal switch or an access terminal wireless router. Based on the management network, the SDN access management module verifies the input IP address through the SNMP protocol and the SSH protocol, and if the access terminal equipment is successfully accessed according to the IP address, the SDN access management module successfully manages the access terminal equipment. The SDN access management module also acquires configuration information and state information of the access terminal equipment through an SNMP protocol and stores the configuration information and the state information to an SDN memory. The method and the device can manage the equipment through the module, so that flexible management of the network can be facilitated.
S102: and performing user registration based on the SDN access management module so as to bind a user using the access terminal equipment and a use terminal corresponding to the user.
The server performs user registration through a user registration function of the SDN access management module, so that registered users can acquire state information and configuration modification information of the switch in the network. The server determines a relevant interface which is in butt joint with third-party network management software or a wireless router plug-in through the SDN access management module, acquires terminal information used by a user through the relevant interface, and synchronizes user information to the SDN control module or management software used by the user through a user information interface. Meanwhile, the server binds the user using the access terminal device with the user terminal corresponding to the user, so as to perform network management on the user terminal under the user name.
In an embodiment of the present application, after the server binds the user using the access end device with the user terminal corresponding to the user, each user terminal using the access end device is monitored. The server determines a user corresponding to a new user terminal by monitoring and determining that the new user terminal uses the access terminal device, and simultaneously acquires the use time, the MAC address and the Internet protocol IP address of the new user terminal, and adds the use time, the MAC address and the Internet protocol IP address to a user name corresponding to the new user terminal so as to perform network management on the user terminal under the user name in the follow-up process.
In an embodiment of the application, after a server binds a user using an access terminal device with a user terminal corresponding to the user, the server controls the access terminal device to detect each user terminal at intervals of a first preset time period. The server enables the access terminal device to initiate ping operation to the on-line user terminal through an Interface or a corresponding device management Application Program Interface (API) or the like, so as to detect whether the user terminal is reachable. Wherein, the state of the user terminal using the access terminal device is defaulted to the online state. If the server determines that the response times of the user terminal are smaller than a preset threshold value, marking the state of the user terminal as an offline state, and synchronizing the offline state information to the SDN control module so that the SDN control module processes the user terminal. The preset threshold value can be determined according to actual conditions, and the preset threshold value is not limited in the application.
Specifically, the preset threshold value in the application is defaulted to 3 times, if the server determines that the used terminal is unreachable in a three-time period, the state of the used terminal is marked as an offline state, and the offline state information is synchronized to the SDN control module, so that the SDN control module changes the network configuration of the SDN control module. Therefore, the terminal which is not used for a long time can be offline, so that the network bandwidth corresponding to the used terminal is released, and the network load is optimized.
S103: and respectively carrying out priority marking and bandwidth configuration on each using terminal, and storing the priority marking and the bandwidth configuration into an SDN memory.
The server marks the priority of each user terminal through an SDN access management module, configures guaranteed bandwidth and suggested bandwidth for each user terminal, and stores the priority, guaranteed bandwidth and suggested bandwidth corresponding to each user terminal to an SDN memory.
For example, the priority flag ranges from 0 to 255, and the higher the number, the higher the priority of using the terminal. The default priority of the on-line using terminal is 1, the priority of the using terminal with guaranteed bandwidth is 255, the priority of the off-line using terminal is 0, and the off-line using terminal does not participate in the allocation of network bandwidth.
The guaranteed bandwidth refers to the lowest bandwidth for completing a certain service, and the server configures the guaranteed bandwidth for the terminal for performing the important service so as to ensure that the bandwidth of the important service is not affected. Meanwhile, the server also determines that the guaranteed bandwidth does not exceed the maximum bandwidth of the network, so that the rationality of the guaranteed bandwidth is ensured. On the basis of ensuring that the service of the using terminal with the guaranteed bandwidth parameter is not influenced, when the residual bandwidth is not enough to bear other services, the server can sequentially downwards adjust the network bandwidth corresponding to each using terminal according to the priority of each using terminal based on the suggested bandwidth of each using terminal.
S104: and inputting the second configuration information of the network bearing equipment into the SDN control module so that the SDN control module manages the network bearing equipment, and configuring a resource pool according to the scale and the number of the access terminal equipment and the network bearing equipment.
The server inputs a user name, a password, an IP address, an SNMP protocol and an SSH protocol which are configured in advance by the network bearing equipment into the SDN control module, wherein the network bearing equipment refers to a service network bearing exchanger or a service network bearing encryption card. Based on the management network, the SDN control module verifies the input IP address of the network bearing equipment through the SNMP protocol and the SSH protocol, and if the network bearing equipment is successfully accessed according to the IP address, the SDN control module successfully manages the network bearing equipment. And the SDN control module acquires the configuration information and the state information of the network bearing equipment through an SNMP protocol and stores the configuration information and the state information into an SDN memory. And the server also configures a resource pool according to the scale and the number of the access terminal equipment and the network bearing equipment for subsequent automatic management. According to the method and the system, the SDN control module realizes automatic network control according to the configuration information in the resource pool in a resource pool configuration mode, so that human resources are saved, and the cost of network control is reduced.
In one embodiment of the present application, the network scope of the resource pool is a VLAN scope, or VXLAN L2 and VXLAN L3 scope, and the resource pool includes a routing protocol resource pool, a service network resource pool, an alarm configuration resource pool, an NTP resource pool, and a user information resource pool.
The server configures routing protocols corresponding to the services through a routing protocol resource pool, the contents of the resource pool may be different among different routing protocols, and the routing protocol resource pool is mainly determined according to the routing protocol used by the data center; configuring a service address of network bearing equipment through a service network resource pool, and establishing a plurality of service network resource pools aiming at a multi-region management scene; configuring a reporting address of the alarm information of the access terminal equipment through an alarm configuration resource pool; the NTP service address of the SDN control module is configured through the NTP resource pool, so that the synchronous time of the switch is ensured; and configuring the name, the user name and the password of the network bearing equipment, supporting a login protocol and a simple network management protocol through the user information resource pool.
In addition, the server needs to take into account future scalability of the switch, such as increasing the device scaling. If the corresponding resource pool is configured only according to the requirements of the current equipment, the scale expansion of the switch at the later stage may exceed the range of the resource pool, so that the expansibility is considered when the resource pool is configured, and a larger resource pool is configured, so that the resource pool can have a redundant part.
S105: and based on the SDN control module, sending a corresponding communication protocol according to the protocol configuration parameters in the resource pool to complete the underlying network configuration of the nano-tube network bearing equipment.
The server automatically issues corresponding communication protocols, such as a border gateway protocol, an open shortest path first protocol and the like, according to relevant parameters of protocol configuration in the resource pool, so that the SDN control module completes the configuration of the underlying network of the nanotube network bearing equipment, and is convenient for bearing the service network of the upper layer.
In an embodiment of the application, the SDN control module and the SDN access management module both have an administrator and a user identity authority by default, and have an administrator authority account by default. The server may create an administrator or user account using an administrator authority account of the SDN control module or the SDN access management module and configure a user name and a login password for it. The server starts the binding permission of the SDN access management module by using an account with administrator authority at the SDN control module, or starts the binding permission of the SDN control module by using the account with administrator authority at the SDN access management module, and randomly generates a 16-bit access module binding password by using components such as an Open Secure Sockets Layer (OpenSSL). The server confirms the correctness of the binding password through the management network, if the verification is correct and the IP verification can be achieved, the binding is successful, the SDN access management module and the SDN control module are bound through the binding password, and the information after the binding is interacted through the management network.
In addition, after the generation time of the binding password exceeds a second preset time period, the binding password is invalid, and the server needs to regenerate the binding password corresponding to the binding module. The second preset time period in the present application is 24 hours, and the second preset time period may be determined according to an actual situation, which is not limited in the present application.
S106: and acquiring the priority of each using terminal in the SDN memory through the management network so as to adjust the network bandwidth of each using terminal according to the priority.
The server obtains the priority of each use terminal in the SDN memory through the management network, and enables the SDN control module to sequentially and downwards adjust the network bandwidth of each use terminal according to the priority according to the suggested bandwidth of each use terminal on the basis of ensuring that the service with guaranteed bandwidth parameters is not influenced, so that the network load is optimized.
In an embodiment of the application, after the SDN access management module and the SDN control module are bound by the server, in the SDN control module, the server acquires the configuration parameters in the resource pool and the attributes such as the priority of each user terminal through the management network, so as to randomly acquire different VXLAN identifiers from the network range of the resource pool according to the acquired information, and then creates different VXLAN networks for each user terminal on the network bearing device through an OpenFlow table or a corresponding control application program interface API manner, so that each user terminal accesses a specified service network, and the VXLAN networks used by each user terminal are ensured not to be repeated. The application ensures the independence of the terminal network through the VXLAN network.
In an embodiment of the present application, when the server creates a related service network on the network bearer device according to information of each user terminal, data sent by each user terminal is encrypted through a heterogeneous accelerator card deployed on the service network and a preset Advanced Encryption Standard (AES) Encryption algorithm, so as to ensure security of the service network.
In an embodiment of the present application, after the server marks the state of the user terminal as an offline state, in a case that it is detected that the user terminal in the offline state uses the access terminal device again, the server needs to verify that the MAC address of the user terminal in the current offline state is the MAC address of the user terminal corresponding to the user. And in the case of determining that the MAC addresses of the two are the same, marking the using terminal as an online state, and updating the access time of the using terminal. And meanwhile, the server synchronizes the information to the SDN control module so that the SDN control module randomly acquires a unique VXLAN identifier from the network range of the resource pool through a management network, and then creates a new VXLAN network for the user terminal on the network bearing equipment in an OpenFlow flow table or corresponding control Application Program Interface (API) mode, thereby ensuring that the networks used when the user terminal is accessed each time are different as much as possible.
Fig. 2 is an integration schematic diagram of network regulation based on SDN according to an embodiment of the present application.
As shown in fig. 2, the present application provides a network regulation and control method based on SDN, which is applied to a network regulation and control system based on SDN, and the system includes an SDN access management module, an SDN control module, an access device, and a network bearer device. The user terminal, the access terminal switch or the wireless router, the network bearing switch or the encryption card and the service terminal device in fig. 2 communicate with each other through the service network. The server manages an access terminal switch or a wireless router through the SDN access management module, and manages a network loading switch or an encryption card through the SDN control module. The server stores the device information managed by the SDN access management module and the SDN control module into an SDN memory through a management network, and then acquires configuration information of network regulation and control from the SDN memory through the management network based on the SDN control module, so that automatic management is carried out on a network bearing switch or an encryption card. According to the method and the system, the network can flexibly respond to the use requirement and the change of the use terminal in an automatic mode, the labor cost is saved, and the technical requirement is reduced.
The embodiment of the application provides a network regulation and control method, equipment and a medium based on an SDN (software defined network). A server enables an SDN access management module to receive and manage access terminal equipment by inputting configuration information of the access terminal equipment into the SDN access management module; the configuration information of the network bearing equipment is input into the SDN control module, so that the SDN control module manages the network bearing equipment, and flexible management of the network is facilitated; carrying out priority marking on the use terminals corresponding to the users through an SDN access management module, and configuring guaranteed bandwidths and suggested bandwidths for the use terminals, so that the service with guaranteed bandwidth parameters is ensured to be executed preferentially, network bandwidths of services corresponding to other use terminals are adjusted according to the priorities, and further network load is optimized; the data in the network is encrypted through the heterogeneous accelerator card and the advanced encryption standard encryption algorithm, so that the requirement of a user on the safety of the network is met; the use terminal in an off-line state is timely obtained by monitoring the use terminal in real time, so that the network bandwidth is timely released, and the network quality is adjusted. According to the method and the device, automatic management of the network equipment is realized through the SDN control module according to the relevant configuration information in the resource pool, manpower resources spent on manual configuration are saved, the technical requirement of network regulation and control is reduced, and complicated configuration steps in the network regulation and control process are reduced, so that the response time of the network is shortened.
The above is the method embodiment proposed by the present application. Based on the same inventive concept, the embodiment of the present application further provides a network regulation and control device based on an SDN, and the structure of the network regulation and control device is shown in fig. 3.
Fig. 3 is a schematic structural diagram of a network regulation and control device based on an SDN according to an embodiment of the present application. As shown in fig. 3, the system is applied to a network regulation and control system based on SDN, and the system includes an SDN access management module, an SDN control module, an access device, and a network bearer device, where the device includes at least one processor; and a memory communicatively coupled to the at least one processor; wherein the memory stores instructions executable by the at least one processor to cause the at least one processor to: recording first configuration information of the access terminal equipment into an SDN access management module so that the SDN access management module manages the access terminal equipment; performing user registration based on an SDN access management module to bind a user using access terminal equipment with a user corresponding to the user; carrying out priority marking and bandwidth configuration on each using terminal respectively, and storing the priority marking and the bandwidth configuration to an SDN memory; inputting second configuration information of the network bearing equipment into the SDN control module so that the SDN control module can manage the network bearing equipment, and configuring a resource pool according to the scale and the number of the access terminal equipment and the network bearing equipment; based on the SDN control module, sending a corresponding communication protocol according to the protocol configuration parameters in the resource pool to complete the bottom network configuration of the nano-tube network bearing equipment; and acquiring the priority of each using terminal in the SDN memory through the management network so as to adjust the network bandwidth of each using terminal according to the priority.
The embodiment of the present application further provides a non-volatile computer storage medium, which stores computer executable instructions, and is applied to a network regulation and control system based on a network regulation and control method of an SDN, where the system includes an SDN access management module, an SDN control module, an access end device, and a network bearer device, and the computer executable instructions are set to: recording first configuration information of the access terminal equipment into an SDN access management module so that the SDN access management module manages the access terminal equipment; performing user registration based on an SDN access management module to bind a user using access terminal equipment with a user corresponding to the user; carrying out priority marking and bandwidth configuration on each using terminal respectively, and storing the priority marking and the bandwidth configuration to an SDN memory; inputting second configuration information of the network bearing equipment into the SDN control module so that the SDN control module can manage the network bearing equipment, and configuring a resource pool according to the scale and the number of the access terminal equipment and the network bearing equipment; based on the SDN control module, sending a corresponding communication protocol according to the protocol configuration parameters in the resource pool to complete the bottom network configuration of the nano-tube network bearing equipment; and acquiring the priority of each using terminal in the SDN memory through the management network so as to adjust the network bandwidth of each using terminal according to the priority.
The embodiments in the present application are described in a progressive manner, and the same and similar parts among the embodiments can be referred to each other, and each embodiment focuses on the differences from the other embodiments. In particular, for the device and media embodiments, the description is relatively simple as it is substantially similar to the method embodiments, and reference may be made to some descriptions of the method embodiments for relevant points.
The device and the medium provided by the embodiment of the application correspond to the method one to one, so the device and the medium also have the similar beneficial technical effects as the corresponding method, and the beneficial technical effects of the method are explained in detail above, so the beneficial technical effects of the device and the medium are not repeated herein.
As will be appreciated by one skilled in the art, embodiments of the present application may be provided as a method, system, or computer program product. Accordingly, the present application may take the form of an entirely hardware embodiment, an entirely software embodiment or an embodiment combining software and hardware aspects. Furthermore, the present application may take the form of a computer program product embodied on one or more computer-usable storage media (including, but not limited to, disk storage, CD-ROM, optical storage, and the like) having computer-usable program code embodied therein.
The present application is described with reference to flowchart illustrations and/or block diagrams of methods, apparatus (systems), and computer program products according to embodiments of the application. It will be understood that each flow and/or block of the flow diagrams and/or block diagrams, and combinations of flows and/or blocks in the flow diagrams and/or block diagrams, can be implemented by computer program instructions. These computer program instructions may be provided to a processor of a general purpose computer, special purpose computer, embedded processor, or other programmable data processing apparatus to produce a machine, such that the instructions, which execute via the processor of the computer or other programmable data processing apparatus, create means for implementing the functions specified in the flowchart flow or flows and/or block diagram block or blocks.
These computer program instructions may also be stored in a computer-readable memory that can direct a computer or other programmable data processing apparatus to function in a particular manner, such that the instructions stored in the computer-readable memory produce an article of manufacture including instruction means which implement the function specified in the flowchart flow or flows and/or block diagram block or blocks.
These computer program instructions may also be loaded onto a computer or other programmable data processing apparatus to cause a series of operational steps to be performed on the computer or other programmable apparatus to produce a computer implemented process such that the instructions which execute on the computer or other programmable apparatus provide steps for implementing the functions specified in the flowchart flow or flows and/or block diagram block or blocks.
In a typical configuration, a computing device includes one or more processors (CPUs), input/output interfaces, network interfaces, and memory.
The memory may include forms of volatile memory in a computer readable medium, Random Access Memory (RAM) and/or non-volatile memory, such as Read Only Memory (ROM) or flash memory (flash RAM). Memory is an example of a computer-readable medium.
Computer-readable media, including both non-transitory and non-transitory, removable and non-removable media, may implement information storage by any method or technology. The information may be computer readable instructions, data structures, modules of a program, or other data. Examples of computer storage media include, but are not limited to, phase change memory (PRAM), Static Random Access Memory (SRAM), Dynamic Random Access Memory (DRAM), other types of Random Access Memory (RAM), Read Only Memory (ROM), Electrically Erasable Programmable Read Only Memory (EEPROM), flash memory or other memory technology, compact disc read only memory (CD-ROM), Digital Versatile Discs (DVD) or other optical storage, magnetic cassettes, magnetic tape magnetic disk storage or other magnetic storage devices, or any other non-transmission medium that can be used to store information that can be accessed by a computing device. As defined herein, a computer readable medium does not include a transitory computer readable medium such as a modulated data signal and a carrier wave.
It should also be noted that the terms "comprises," "comprising," or any other variation thereof, are intended to cover a non-exclusive inclusion, such that a process, method, article, or apparatus that comprises a list of elements does not include only those elements but may include other elements not expressly listed or inherent to such process, method, article, or apparatus. Without further limitation, an element defined by the phrase "comprising an … …" does not exclude the presence of other like elements in a process, method, article, or apparatus that comprises the element.
The above description is only an example of the present application and is not intended to limit the present application. Various modifications and changes may occur to those skilled in the art. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of the present application should be included in the scope of the claims of the present application.
Claims (10)
1. A network regulation method based on SDN is characterized in that the method is applied to a network regulation system based on SDN, the system comprises an SDN access management module, an SDN control module, an access end device and a network bearing device, and the method comprises the following steps:
entering first configuration information of the access end device into the SDN access management module so that the SDN access management module manages the access end device;
performing user registration based on the SDN access management module to bind a user using the access terminal equipment with a use terminal corresponding to the user;
carrying out priority marking and bandwidth configuration on each using terminal respectively, and storing the priority marking and the bandwidth configuration into an SDN memory;
inputting second configuration information of the network bearing equipment into the SDN control module so that the SDN control module manages the network bearing equipment, and configuring a resource pool according to the scale and the number of the access terminal equipment and the network bearing equipment;
based on the SDN control module, sending a corresponding communication protocol according to the protocol configuration parameters in the resource pool to complete the bottom layer network configuration of the network bearing equipment;
and acquiring the priority of each user terminal in the SDN memory through the management network so as to adjust the network bandwidth of each user terminal according to the priority.
2. The SDN-based network regulation method of claim 1, wherein after the user using the access end device is bound to the user terminal corresponding to the user, the method further comprises:
monitoring each of the user terminals using the access terminal device;
and under the condition that the access terminal equipment is monitored to be used by a new using terminal, determining a user corresponding to the new using terminal, acquiring the using time, the MAC address and the Internet protocol address of the new using terminal, and adding the using time, the MAC address and the Internet protocol address of the new using terminal to a user name bound by the new using terminal.
3. The SDN-based network regulation method of claim 1, wherein after the user using the access end device is bound to the user terminal corresponding to the user, the method further comprises:
controlling the access terminal equipment to detect each user terminal at intervals of a first preset time period;
if the response times of the using terminal are smaller than a preset threshold value, marking the state of the using terminal as an off-line state; the state of a user terminal using the access terminal equipment is defaulted to be an online state;
synchronizing the offline state to the SDN control module to cause the SDN control module to process the user terminal.
4. The SDN-based network regulation method of claim 1, wherein the network scope of the resource pool is VLAN scope, or VXLAN L2 and VXLAN L3 scope, and the resource pool comprises a routing protocol resource pool, a service network resource pool, an alarm configuration resource pool, an NTP resource pool, and a user information resource pool;
configuring a resource pool according to the scale and the number of the access terminal device and the network bearing device, specifically comprising:
configuring a routing protocol corresponding to each service through the routing protocol resource pool; configuring a service address of the network bearing equipment through the service network resource pool; configuring a reporting address of the alarm information of the access terminal equipment through the alarm configuration resource pool; configuring an NTP service address of the SDN control module through the NTP resource pool; and configuring the name, the user name and the password of the network bearing equipment, a login supporting protocol and a simple network management protocol through the user information resource pool.
5. The SDN-based network regulation method of claim 1, wherein the binding the SDN access management module and the SDN control module based on administrator privileges specifically comprises:
generating a binding password through an open secure socket layer protocol component based on the administrator authority of the SDN access management module or the SDN control module;
determining, based on the management network, that the binding password is correct, thereby binding the SDN access management module and the SDN control module by the binding password; and after the generation time of the binding password exceeds a second preset time period, the binding password is invalid.
6. The SDN-based network regulation method of claim 5, wherein after binding the SDN access management module and the SDN control module, the method further comprises:
based on the SDN control module, acquiring different VXLAN identifications from a network range of the resource pool according to configuration parameters in the resource pool and the priority of each user terminal;
and based on the network bearing equipment, establishing different VXLAN networks for each user terminal in an OpenFlow flow table or corresponding control application program interface mode.
7. The SDN-based network regulation method of claim 6, wherein after creating a different VXLAN network for each of the user terminals, the method further comprises:
and encrypting the data sent by each using terminal by using a heterogeneous accelerator card and an advanced encryption standard encryption algorithm.
8. The SDN-based network regulation method of claim 3, further comprising:
under the condition that a user terminal in an offline state uses the access terminal device, determining that the MAC address of the user terminal in the offline state is the same as the MAC address of a user terminal corresponding to the user, and accordingly marking the user terminal in an online state and synchronizing the user terminal to the SDN control module;
acquiring a unique VXLAN identifier from a network range of the resource pool based on the SDN control module; and based on the network bearing device, a unique VXLAN network is established through an OpenFlow flow table or a corresponding control API mode.
9. An SDN-based network regulation device is applied to an SDN-based network regulation system, the system comprises an SDN access management module, an SDN control module, an access end device and a network bearing device, and the device comprises:
at least one processor; and the number of the first and second groups,
a memory communicatively coupled to the at least one processor; wherein,
the memory stores instructions executable by the at least one processor to enable the at least one processor to:
entering first configuration information of the access end device into the SDN access management module so that the SDN access management module manages the access end device;
performing user registration based on the SDN access management module to bind a user using the access terminal equipment with a use terminal corresponding to the user;
carrying out priority marking and bandwidth configuration on each using terminal respectively, and storing the priority marking and the bandwidth configuration into an SDN memory;
inputting second configuration information of the network bearing equipment into the SDN control module so that the SDN control module manages the network bearing equipment, and configuring a resource pool according to the scale and the number of the access terminal equipment and the network bearing equipment;
based on the SDN control module, sending a corresponding communication protocol according to the protocol configuration parameters in the resource pool to complete the bottom layer network configuration of the network bearing equipment;
and acquiring the priority of each user terminal in the SDN memory through the management network so as to adjust the network bandwidth of each user terminal according to the priority.
10. A non-transitory computer storage medium storing computer-executable instructions for use in an SDN-based network regulation system, the system comprising an SDN access management module, an SDN control module, an access device, and a network bearer device, the computer-executable instructions configured to:
entering first configuration information of the access end device into the SDN access management module so that the SDN access management module manages the access end device;
performing user registration based on the SDN access management module to bind a user using the access terminal equipment with a use terminal corresponding to the user;
carrying out priority marking and bandwidth configuration on each using terminal respectively, and storing the priority marking and the bandwidth configuration into an SDN memory;
inputting second configuration information of the network bearing equipment into the SDN control module so that the SDN control module manages the network bearing equipment, and configuring a resource pool according to the scale and the number of the access terminal equipment and the network bearing equipment;
based on the SDN control module, sending a corresponding communication protocol according to the protocol configuration parameters in the resource pool to complete the bottom layer network configuration of the network bearing equipment;
and acquiring the priority of each user terminal in the SDN memory through the management network so as to adjust the network bandwidth of each user terminal according to the priority.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202110947355.1A CN113572650B (en) | 2021-08-18 | 2021-08-18 | Network regulation and control method, device and medium based on SDN |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202110947355.1A CN113572650B (en) | 2021-08-18 | 2021-08-18 | Network regulation and control method, device and medium based on SDN |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN113572650A true CN113572650A (en) | 2021-10-29 |
| CN113572650B CN113572650B (en) | 2024-10-01 |
Family
ID=78171996
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN202110947355.1A Active CN113572650B (en) | 2021-08-18 | 2021-08-18 | Network regulation and control method, device and medium based on SDN |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN113572650B (en) |
Cited By (2)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN115277347A (en) * | 2022-07-19 | 2022-11-01 | 浪潮思科网络科技有限公司 | Laboratory equipment management method and equipment based on SDN |
| CN115277422A (en) * | 2022-07-21 | 2022-11-01 | 浪潮思科网络科技有限公司 | SDN networking generation method, device, equipment and medium |
Citations (10)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US20160337896A1 (en) * | 2015-05-13 | 2016-11-17 | Oracle International Corporation | Methods, systems, and computer readable media for session based software defined networking (sdn) management |
| CN109743261A (en) * | 2019-01-07 | 2019-05-10 | 中国人民解放军国防科技大学 | SDN-based container network resource scheduling method |
| KR20190066743A (en) * | 2017-12-06 | 2019-06-14 | 포항공과대학교 산학협력단 | Software defined networking based network virtualization system, apparatus, and method supporting multiple protocols |
| CN111314196A (en) * | 2020-01-21 | 2020-06-19 | 山东汇贸电子口岸有限公司 | Data center network hybrid overlay communication method |
| CN111918314A (en) * | 2020-08-20 | 2020-11-10 | 浪潮思科网络科技有限公司 | Mobile network optimization method and system based on distributed SDN |
| CN112448831A (en) * | 2019-08-30 | 2021-03-05 | 华为技术有限公司 | Network management method and equipment |
| CN112688814A (en) * | 2020-12-24 | 2021-04-20 | 新华三技术有限公司 | Equipment access method, device, equipment and machine readable storage medium |
| CN112953739A (en) * | 2019-12-10 | 2021-06-11 | 中国电信股份有限公司 | K8S platform-based method, system and storage medium for nanotube SDN |
| CN112994942A (en) * | 2021-02-24 | 2021-06-18 | 中国联合网络通信集团有限公司 | SDN control method and device |
| CN113055232A (en) * | 2021-03-11 | 2021-06-29 | 浪潮思科网络科技有限公司 | Network configuration deployment method, device and equipment |
-
2021
- 2021-08-18 CN CN202110947355.1A patent/CN113572650B/en active Active
Patent Citations (10)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US20160337896A1 (en) * | 2015-05-13 | 2016-11-17 | Oracle International Corporation | Methods, systems, and computer readable media for session based software defined networking (sdn) management |
| KR20190066743A (en) * | 2017-12-06 | 2019-06-14 | 포항공과대학교 산학협력단 | Software defined networking based network virtualization system, apparatus, and method supporting multiple protocols |
| CN109743261A (en) * | 2019-01-07 | 2019-05-10 | 中国人民解放军国防科技大学 | SDN-based container network resource scheduling method |
| CN112448831A (en) * | 2019-08-30 | 2021-03-05 | 华为技术有限公司 | Network management method and equipment |
| CN112953739A (en) * | 2019-12-10 | 2021-06-11 | 中国电信股份有限公司 | K8S platform-based method, system and storage medium for nanotube SDN |
| CN111314196A (en) * | 2020-01-21 | 2020-06-19 | 山东汇贸电子口岸有限公司 | Data center network hybrid overlay communication method |
| CN111918314A (en) * | 2020-08-20 | 2020-11-10 | 浪潮思科网络科技有限公司 | Mobile network optimization method and system based on distributed SDN |
| CN112688814A (en) * | 2020-12-24 | 2021-04-20 | 新华三技术有限公司 | Equipment access method, device, equipment and machine readable storage medium |
| CN112994942A (en) * | 2021-02-24 | 2021-06-18 | 中国联合网络通信集团有限公司 | SDN control method and device |
| CN113055232A (en) * | 2021-03-11 | 2021-06-29 | 浪潮思科网络科技有限公司 | Network configuration deployment method, device and equipment |
Cited By (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN115277347A (en) * | 2022-07-19 | 2022-11-01 | 浪潮思科网络科技有限公司 | Laboratory equipment management method and equipment based on SDN |
| CN115277347B (en) * | 2022-07-19 | 2024-05-14 | 浪潮思科网络科技有限公司 | Laboratory equipment management method and equipment based on SDN |
| CN115277422A (en) * | 2022-07-21 | 2022-11-01 | 浪潮思科网络科技有限公司 | SDN networking generation method, device, equipment and medium |
| CN115277422B (en) * | 2022-07-21 | 2024-04-16 | 浪潮思科网络科技有限公司 | SDN networking generation method, device, equipment and medium |
Also Published As
| Publication number | Publication date |
|---|---|
| CN113572650B (en) | 2024-10-01 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| WO2018095416A1 (en) | Information processing method, device and system | |
| CN107409089B (en) | Method implemented in network engine and virtual network function controller | |
| US11418955B2 (en) | System and methods for transit path security assured network slices | |
| US11178062B2 (en) | Orchestrating physical and virtual resources for delivering digital contents | |
| JP2021093762A (en) | Systems and methods for application-friendly Protocol Data Unit (PDU) session management | |
| CN113572650B (en) | Network regulation and control method, device and medium based on SDN | |
| US10659441B2 (en) | Dynamically managing, from a centralized service, valid cipher suites allowed for secured sessions | |
| CN110519404B (en) | SDN-based policy management method and device and electronic equipment | |
| CN104429028B (en) | Network collocating method, apparatus and system based on SDN | |
| CN103580980A (en) | Automatic searching and automatic configuration method and device of VN | |
| CN112688814B (en) | Equipment access method, device, equipment and machine readable storage medium | |
| CN111371664B (en) | Virtual private network access method and equipment | |
| US11343676B1 (en) | Configuring devices to connect to a network | |
| CN114500120B (en) | Public cloud expansion method, device, system and storage medium | |
| CN113595782A (en) | Network equipment management method based on SDN | |
| US11907253B2 (en) | Secure cluster pairing for business continuity and disaster recovery | |
| WO2021134562A1 (en) | Configuration device replacement method and apparatus, device, and storage medium | |
| WO2023179450A1 (en) | Multi-blockchain collaborative service methods, and systems | |
| WO2020029793A1 (en) | Internet access behavior management system, device and method | |
| US11863382B2 (en) | Software defined network device exposure to third parties | |
| CN114097261B (en) | Dynamic allocation of network slice specific credentials | |
| CN114884771A (en) | Identity network construction method, device and system based on zero trust concept | |
| JP2024505147A (en) | Fabric availability and synchronization | |
| CN109962831B (en) | Virtual client terminal device, router, storage medium, and communication method | |
| CN114422160A (en) | Method and device for setting virtual firewall, electronic equipment and storage medium |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| CB02 | Change of applicant information |
Country or region after: China Address after: 250101 s01-6 / F, No. 1036, Langchao Road, high tech Zone, Jinan City, Shandong Province Applicant after: Inspur Network Technology (Shandong) Co.,Ltd. Address before: 250101 s01-6 / F, No. 1036, Langchao Road, high tech Zone, Jinan City, Shandong Province Applicant before: INSPUR CISCO NETWORK TECHNOLOGY Co.,Ltd. Country or region before: China |
|
| CB02 | Change of applicant information | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant |