CN114050948A

CN114050948A - VPN acceleration method, device, system and storage medium thereof

Info

Publication number: CN114050948A
Application number: CN202111323220.4A
Authority: CN
Inventors: 罗梅香; 严宇; 徐奕
Original assignee: China Telecom Corp Ltd
Current assignee: China Telecom Corp Ltd
Priority date: 2021-11-09
Filing date: 2021-11-09
Publication date: 2022-02-15
Anticipated expiration: 2041-11-09
Also published as: CN114050948B

Abstract

The invention discloses a VPN acceleration method, a device, a system and a storage medium thereof, wherein the VPN acceleration method comprises the steps of receiving a VPN connection request initiated by a user; creating a VPN channel and at least one VPN acceleration channel; reading the current access IP of the user in real time, and carrying out speed measurement comparison on the VPN channel and the at least one VPN acceleration channel aiming at the current access IP; selecting the optimal acceleration channel of the current access IP according to the result of speed measurement comparison; switching the access route of the user to an optimal acceleration channel; and returning to the step to circularly read the current access IP of the user in real time. By the VPN acceleration method and device, the optimal acceleration channel can be automatically selected in the process that a user accesses and switches different overseas websites, and therefore the network experience of the user is improved.

Description

VPN acceleration method, device, system and storage medium thereof

Technical Field

The present invention relates to the field of data communications technologies, and in particular, to a VPN acceleration method, apparatus, system, and storage medium.

Background

VPN (virtual private Network) is a communication method commonly used to connect private networks between medium and large enterprises or groups. The method utilizes a Tunneling Protocol (Tunneling Protocol) to achieve private message security effects such as confidentiality, sender authentication, message accuracy and the like, and the technology can use an unsafe network to send reliable and safe messages. At present, with the development of the national 'internet +' integral strategy and the operation of global economy, international business is more and more common, a large number of students choose to receive education through cross-country web courses, and the situation that cross-country enterprise staff works at home is more and more common, so that higher requirements are provided for the access speed of VPN to overseas websites.

In the related art, a user generally selects a VPN tunnel with low delay before VPN connection is performed, and then accesses an overseas website through the VPN tunnel. However, a user often switches to browse different websites in an access process, and a VPN channel selected by the user is connected for a long time, but the VPN channel is not an optimal channel for each website, and cannot bring faster access and loading speed to the user, so that better network experience cannot be brought.

Disclosure of Invention

The invention provides a VPN acceleration method, a device and a system and a storage medium thereof, aiming at the problems that in the related technology, a user selects a fixed VPN channel when visiting an overseas website, but the VPN channel is not the optimal channel of each website and cannot bring faster access and loading speed to the user.

In order to solve the technical problems, the technical scheme provided by the invention is as follows:

in one aspect, the present invention provides a VPN acceleration method, including:

1) receiving a VPN connection request initiated by a user;

2) creating a VPN channel and at least one VPN acceleration channel; wherein the user performs initial access through the VPN tunnel;

3) reading the current access IP of the user in real time, and carrying out speed measurement comparison on the VPN channel and the at least one VPN acceleration channel aiming at the current access IP;

4) selecting the optimal acceleration channel of the current access IP according to the result of speed measurement comparison;

5) switching the access route of the user to the optimal acceleration channel; and

6) returning to the step 3) to continue reading the next access IP of the user.

In some embodiments, the number of the at least one VPN acceleration channel is 2, including a first acceleration channel and a second acceleration channel.

In some embodiments, the VPN tunnel is a 163 tunnel; the first acceleration channel is a 163Qos acceleration channel; and the second acceleration channel is a CN2 acceleration channel.

In some embodiments, before receiving the VPN connection request initiated by the user, the method further includes:

receiving a login request of a user, authenticating the user, and confirming whether the user has the right to use a VPN connection service; and if the user has the right to use the VPN connection service, generating the pass-certificate information of the user.

In some embodiments, the step of comparing the VPN tunnel and the at least one VPN acceleration tunnel for the current access IP comprises:

accessing the current access IP through the VPN channel and the at least one VPN acceleration channel respectively; and

and counting and collecting the time delay of the VPN channel and the at least one VPN acceleration channel linked to the current access IP.

In some embodiments, according to the result of speed measurement comparison, the specific method for selecting the optimal acceleration channel of the current access IP is as follows:

if the time delay of the VPN channel linked to the current access IP is less than the time delay of the at least one VPN acceleration channel linked to the current access IP, selecting the VPN channel as an optimal acceleration channel;

if the time delay of the VPN channel linking to the current access IP is longer than the time delay of the at least one VPN acceleration channel linking to the current access IP, and when the number of the at least one VPN acceleration channel is 1, selecting the at least one VPN acceleration channel as an optimal acceleration channel; and when the number of the at least one VPN acceleration channel is more than 1, selecting the VPN acceleration channel with the minimum time delay from the at least one VPN acceleration channel as an optimal acceleration channel.

In some embodiments, the VPN acceleration method further comprises:

and receiving a VPN disconnection request initiated by the user, and ending the VPN acceleration method.

In some embodiments, the VPN acceleration method further comprises:

the VPN acceleration method further comprises:

counting the time of connecting the user with the VPN; and counting is started when the VPN connection request initiated by the user is received, and counting is ended when the VPN disconnection request initiated by the user is received.

In one aspect, the present invention further provides a VPN accelerating apparatus, including:

the user management module is used for receiving a VPN connection request initiated by a user;

the data interaction module is used for creating a VPN channel and at least one VPN acceleration channel; wherein the user performs initial access through the VPN tunnel;

the speed measurement comparison module is used for reading the current access IP of the user in real time and carrying out speed measurement comparison on the VPN channel and the at least one VPN acceleration channel aiming at the current access IP;

the acceleration module is used for selecting the optimal acceleration channel of the current access IP according to the result of speed measurement comparison; and

and the intelligent drainage module is used for switching the access route of the user to the optimal acceleration channel.

In some embodiments, the user management module is further configured to receive a login request of a user, authenticate the user, and determine whether the user has the right to use a VPN connection service; and if the user has the right to use the VPN connection service, generating pass information of the user.

In some embodiments, the VPN acceleration apparatus further comprises:

the timing management module is used for counting the time of the user connecting the VPN; and counting is started when the VPN connection request initiated by the user is received, and counting is ended when the VPN disconnection request initiated by the user is received.

In one aspect, the present invention further provides a VPN acceleration system, including:

a memory for storing a computer program;

a processor for implementing the steps of the VPN acceleration method as described above when executing said computer program.

In one aspect, the present invention further provides a computer-readable storage medium, wherein the computer-readable storage medium stores thereon a computer program, and when executed by a processor, the computer program implements the steps of the VPN acceleration method as described above.

The technical scheme provided by the embodiment of the invention can have the following beneficial effects:

in the VPN acceleration method and device provided by the invention, the time delay from the time when a plurality of VPN channels access the IP respectively is tested and compared in real time by relying on an intelligent acceleration capability opening platform, then network intelligent optimization is carried out, an optimal acceleration channel is selected, the situation that the effect after acceleration is not as good as that before acceleration is avoided, and the acceleration is more intelligent and reliable. The user does not need configuration, selection, little access and full network coverage, and the user can always access the network under the optimal acceleration channels of different overseas websites under the condition of balanced cost, so that the best acceleration experience is brought to the user.

It is to be understood that both the foregoing general description and the following detailed description are exemplary and explanatory only and are not restrictive of the disclosure.

Drawings

The accompanying drawings, which are incorporated in and constitute a part of this specification, illustrate embodiments consistent with the present disclosure and together with the description, serve to explain the principles of the disclosure.

Fig. 1 is a flowchart illustrating a VPN acceleration method according to an embodiment of the present invention.

Fig. 2 is a schematic service flow diagram of a VPN acceleration method in an embodiment of the present invention.

Fig. 3 is a schematic diagram of a VPN acceleration device according to an embodiment of the present invention.

Fig. 4 is a schematic network architecture diagram of a VPN acceleration device according to an embodiment of the present invention.

Fig. 5 is a schematic diagram of a VPN acceleration system according to an embodiment of the present invention.

Detailed Description

In order to make the aforementioned objects, features and advantages of the present invention comprehensible, embodiments accompanied with figures are described in detail below. In the following description, numerous specific details are set forth in order to provide a thorough understanding of the present invention. This invention can be embodied in many different forms than those herein described and one skilled in the art can make similar modifications without departing from the spirit of the invention and it is therefore not limited to the specific embodiments disclosed below.

It should be noted that the terms "first," "second," and the like in the description and claims of the present invention and in the drawings described above are used for distinguishing between similar elements and not necessarily for describing a particular sequential or chronological order. It should be understood that the data so used may be interchanged under appropriate circumstances for purposes of describing the embodiments of the invention herein. Furthermore, the terms "comprises," "comprising," and "having," and any variations thereof, are intended to cover a non-exclusive inclusion, such that a process, method, system, article, or apparatus that comprises a list of steps or elements is not necessarily limited to those steps or elements expressly listed, but may include other steps or elements not expressly listed or inherent to such process, method, article, or apparatus.

Fig. 1 is a flowchart illustrating a VPN acceleration method according to an embodiment of the present invention. As shown in fig. 1, an embodiment of the present invention provides a VPN acceleration method, which specifically includes the following steps:

s101) receiving a VPN connection request initiated by a user. Specifically, a login request of the user is received, and the user is authenticated to confirm whether the user has the right to use a VPN connection service; and if the user has the right to use the VPN connection service, generating pass information of the user. The user initiates a service use request through a VPN client, and the VPN client can be operated on an intelligent device such as a mobile phone, a computer, a workstation, and the like, which are not listed one by one.

Further, the client side sends the pass information of the corresponding user to an LNS (L2TP Network Server, L2TP Server) device to initiate an L2TP (Layer 2Tunneling Protocol, second Layer Tunneling Protocol) establishment request, and the LNS sends the received user authentication request to the management platform for authentication and authorization; and the management platform authenticates the user and sends the authentication result back to the LNS equipment. And if the user has the right to use the VPN connection service, carrying out the next VPN connection step.

The authentication and certification steps can not only carry out certification on whether the user has the VPN connection, thereby meeting the supervision requirement and the management requirement of a supervision department; and aiming at different user authorities, differentiated services are provided for users by using the existing network excellent resources, the flexible scheduling of the resources is realized, and the service capability and intelligence of the operator network are greatly improved.

S102) creating a VPN tunnel and at least one VPN acceleration tunnel. Wherein the user makes an initial access through the VPN tunnel. Specifically, a VPN connection is created by the L2TP protocol, and each VPN tunnel is correspondingly assigned a corresponding IP address. The VPN channel is a route initially accessed by a user, a VPN connection function is added on the basis of accessing a domestic website, and the at least one VPN acceleration channel establishes a VPN access route based on a multi-service bearer network with stronger function.

Specifically, the number of the at least one VPN acceleration channel is 2, and the at least one VPN acceleration channel includes a first acceleration channel and a second acceleration channel. Of course, the number of the at least one VPN acceleration channel may also be 3, 4, 5, etc. based on the continuous construction and perfection of network resources, which is not limited herein.

S103) reading the current access IP of the user in real time, and carrying out speed measurement comparison on the VPN channel and the at least one VPN acceleration channel according to the current access IP. Specifically, the step of comparing the speed measurement of the VPN channel with the speed measurement of the at least one VPN acceleration channel for the current access IP includes: accessing the current access IP through the VPN channel and the at least one VPN acceleration channel respectively; and counting and collecting the time delay of the VPN channel and the at least one VPN acceleration channel linked to the current access IP.

Further, the time delay of linking to the current access IP through the VPN channel is also called PING time delay, and specifically, the time for the user local IP to send a data packet to the current access IP address and then immediately return to the user local IP from the current access IP address is measured. In some embodiments, the parameters for performing the test comparison may further include service indicators such as a packet loss rate, a loading delay, and a downloading rate, which is not limited herein.

S104) selecting the optimal accelerating channel of the current access IP according to the result of speed measurement and comparison. Specifically, selecting the optimal acceleration channel of the currently accessed IP according to the result of the speed measurement comparison includes the following steps. If the time delay of the VPN channel linked to the current access IP is less than the time delay of the at least one VPN acceleration channel linked to the current access IP, selecting the VPN channel as an optimal acceleration channel; if the time delay of the VPN channel linking to the current access IP is longer than the time delay of the at least one VPN acceleration channel linking to the current access IP, and if the time delay of the VPN channel linking to the current access IP is shorter than the time delay of the at least one VPN acceleration channel linking to the current access IP, selecting the VPN channel as an optimal acceleration channel; if the time delay of the VPN channel linking to the current access IP is longer than the time delay of the at least one VPN acceleration channel linking to the current access IP, when the number of the at least one VPN acceleration channel is 1, selecting the at least one VPN acceleration channel as an optimal acceleration channel; and when the number of the at least one VPN acceleration channel is more than 1, selecting the VPN acceleration channel with the minimum time delay in the at least one VPN acceleration channel as an optimal acceleration channel.

In some embodiments, the speed measurement comparison index may not only be a time delay, but also include service indexes such as a packet loss rate, a loading time delay, a downloading rate, and the like, and one or more service index parameters to be compared may be selected through user-defined settings, or the system may select one or more service index parameters required by the user according to different scenes of the user accessing the internet, and select an optimal acceleration channel based on a preset comparison policy, which is not repeated herein.

S105) switching the access route of the user to an optimal acceleration channel; specifically, the current access IP of the user is intelligently distributed to the optimal acceleration channel through the intelligent distribution module, so that the optimal acceleration channel of the current access IP is automatically selected for the user.

It is worth mentioning that when the user starts to perform initial access through the VPN channel, the management platform starts to analyze the target IP of the traffic in the background, so as to select the optimal acceleration channel according to the speed measurement result through speed measurement comparison, and then switch the user access route to the optimal acceleration channel. The process of speed measurement analysis and comparison in the background is far faster than the process of accessing the current target IP by the user, so that the access route of the user accessing the current target IP can be switched to the optimal acceleration channel every time.

S106) returns to step 103) to be executed circularly. Specifically, returning to step 103) to continue monitoring and reading the current IP accessed by the user, and when the user needs to access a new target IP, the speed measurement comparison step of the VPN acceleration method of the embodiment continues to run cyclically, so that an optimal acceleration channel of the new target IP is selected, and thus an optimal acceleration channel is selected for each target IP accessed by the user, and the experience of the user in accessing an overseas website is improved.

In some embodiments, the VPN acceleration method provided in this embodiment further includes receiving a VPN disconnection request initiated by the user, and ending the VPN acceleration method. Specifically, after a user requests VPN connection, the VPN acceleration method is always in a loop operation, and after the user initiates a VPN disconnection request through a client, the step skipping of the VPN acceleration method is ended, thereby completing all executed steps.

In the VPN acceleration method disclosed in this embodiment, by relying on an intelligent acceleration capability open platform, delay from a plurality of VPN channels to a user to access an IP is respectively compared through real-time testing, then network intelligent optimization is performed, an optimal acceleration channel is selected, the situation that effects after acceleration are inferior to those before acceleration is avoided, and acceleration is more intelligent and reliable. The user does not need to configure, select a region, access a little and cover the whole network, and under the condition of balancing cost, the user can always access the optimum acceleration channels of different overseas websites, so that the best acceleration experience is brought to the user.

Fig. 2 is a schematic service flow diagram of a VPN acceleration method in an embodiment of the present invention. As shown in fig. 2, a specific embodiment of the VPN acceleration method of the present invention is disclosed, which specifically includes the following steps.

S201) the user inputs an account number, a password and an authentication code to log in. Specifically, a user may perform a login operation on a client terminal, and the client terminal may be an intelligent device such as a mobile phone and a computer. The account can be an account related to the mobile phone number bound by the user.

S202) the management platform authenticates the user and judges whether the user has the right to use the service. Specifically, whether the user registers and applies for the VPN connection service is confirmed through a background database of the management platform, and an authentication result is returned. And if the user is confirmed to be authorized to use the service, returning a result of successful login.

S203) the user initiates an acceleration request. Specifically, a user sends a VPN connection request through a client operation, at this time, the management platform submits user information, generates a temporary account number, a password and other pass information of the user, and sends the pass information to the user client.

S204) the user client initiates an L2TP setup request to the LNS device through the pass information.

S205) after the LNS equipment passes the authentication of the pass information sent by the client, 163Qos guarantee address and CN2 address are distributed to the user, and 163Qos acceleration channel and CN2 acceleration channel are established. Specifically, the user may access the overseas website through a 163VPN channel, a 163Qos acceleration channel, and a CN2 acceleration channel.

S206) the user accesses the overseas website through the 163VPN channel, at the moment, the management platform obtains and analyzes a target IP of the access flow, and sends a speed measurement request to the speed measurement comparison platform.

S207) the speed measuring platform executes speed measurement and returns a speed measurement result to the management platform. Specifically, the current access IP is accessed through the 163VPN channel, the 163Qos acceleration channel, and the CN2 acceleration channel, respectively, and the time delays linked to the current access IP through the 163VPN channel, the 163Qos acceleration channel, and the CN2 acceleration channel, respectively, are counted and collected.

S208) selecting the optimal accelerating channel of the current access IP according to the result of speed measurement and comparison. Specifically, referring to the result of speed measurement comparison, the time delays of the 163VPN channel, the 163Qos acceleration channel, and the CN2 acceleration channel, which are respectively linked to the current access IP, are compared, and a route with the shortest link time delay is found as an optimal acceleration channel.

S209) the acceleration platform leads the user access flow into an optimal acceleration channel.

As shown in fig. 2, in this embodiment, service indexes such as time delay, packet loss, loading time delay, and download rate from the china telecommunication 163 network, the 163Qos guarantee network, and the CN2 network to the user access target are respectively tested and compared in real time to perform network intelligent optimization, and an optimal path is taken, so that the situation that the effect after acceleration is not as good as that before acceleration is avoided, and the acceleration is more intelligent and reliable. The user does not need configuration, does not need to select a region, has little access, is covered by the whole network, and brings the best acceleration experience to the user under the condition of balancing the cost.

Fig. 3 is a schematic diagram of a VPN acceleration device according to an embodiment of the present invention. As shown in fig. 3, the embodiment of the present invention further provides a VPN acceleration apparatus 30, which specifically includes the following modules.

The user management module 301 is configured to receive a VPN connection request initiated by a user.

A data interaction module 302, configured to create a VPN tunnel and at least one VPN acceleration tunnel; wherein the user makes an initial access through the VPN tunnel.

A speed measurement comparison module 303, configured to read a current access IP of the user in real time, and perform speed measurement comparison on the VPN channel and the at least one VPN acceleration channel according to the current access IP.

And the acceleration module 304 is configured to select the optimal acceleration channel of the currently-accessed IP according to the result of speed measurement comparison.

And the intelligent diversion module 305 is used for switching the access route of the user to an optimal acceleration channel.

In some embodiments, the user management module 301 is further configured to receive a login request of a user, authenticate the user, and determine whether the user has the right to use a VPN connection service; and if the user has the right to use the VPN connection service, generating pass information of the user.

In some embodiments, the VPN accelerating apparatus 30 of this embodiment further includes a timing management module, configured to count a time for the user to connect to the VPN; and counting is started when the VPN connection request initiated by the user is received, and counting is ended when the VPN disconnection request initiated by the user is received.

In the VPN acceleration device 30 disclosed in this embodiment, by relying on an intelligent acceleration capability open platform, delay from a plurality of VPN channels to a user to access an IP is compared through real-time testing, then network intelligent optimization is performed, an optimal acceleration channel is selected, the situation that effects after acceleration are not as good as before acceleration is avoided, and acceleration is more intelligent and reliable. The user does not need configuration, selection, little access and full network coverage, and the user can always access the network under the optimal acceleration channels of different overseas websites under the condition of balanced cost, so that the best acceleration experience is brought to the user.

Fig. 4 is a schematic diagram of a network architecture of a VPN acceleration device in an embodiment of the present invention, and as shown in fig. 4, the VPN acceleration device in the embodiment of the present invention is integrated and built in an isp ed platform, and becomes a channel for connecting a client to an overseas website by using a chinese telecom premium resource 163 network, a 163Qos security network, and a CN2 network. Specifically, the user management module is arranged on the management platform, and the data interaction module is arranged on the LNS device. The intelligent shunting module and the intelligent accelerating module are integrated on the accelerating platform. In addition, the ISPEED platform further includes other functional modules, such as a timing management module (not shown), which are not described herein.

Fig. 5 is a schematic diagram of a VPN acceleration system according to an embodiment of the present invention. As shown in fig. 5, an embodiment of the present invention further provides a VPN acceleration system 50, including:

a memory 501 for storing a computer program;

a processor 502 for implementing the steps of the VPN acceleration method according to the above embodiments when executing said computer program.

The VPN acceleration system 50 may have a relatively large difference due to different configurations or performances, and may include one or more memories 501 and one or more processors (CPUs) 502, where at least one instruction is stored in the memory 501, and the at least one instruction is loaded and executed by the processor 502 to implement the steps of the VPN acceleration method provided by the above method embodiment. Certainly, the VPN acceleration system 50 may further include components such as a wired or wireless network interface, a keyboard, and an input/output interface, so as to perform input and output, and the VPN acceleration system 50 may further include other components for implementing device functions, which are not described herein again.

In an exemplary embodiment, an embodiment of the present invention also provides a computer-readable storage medium, such as a memory, including instructions executable by a processor in a terminal to perform the steps of the VPN acceleration method in the above-described embodiment. For example, the computer readable storage medium may be a ROM, a Random Access Memory (RAM), a CD-ROM, a magnetic tape, a floppy disk, an optical data storage device, and the like.

It will be understood by those skilled in the art that all or part of the steps for implementing the above embodiments may be implemented by hardware, or may be implemented by a program instructing relevant hardware, and the program may be stored in a computer-readable storage medium, and the above-mentioned storage medium may be a read-only memory, a magnetic disk, an optical disk, or the like.

It should be understood that various features of the above-described embodiments may be combined in any combination, and for the sake of brevity, all possible combinations of features of the above-described embodiments may not be described in detail, but rather, the combination of features which are not inconsistent with each other should be considered as being within the scope of the present disclosure.

The above description is only for the purpose of illustrating the preferred embodiments of the present disclosure and is not to be construed as limiting the scope of the present disclosure, but rather is intended to cover all equivalent structural changes made by applying the teachings of the present disclosure to the accompanying drawings.

Claims

1. A VPN acceleration method, comprising:

1) receiving a VPN connection request initiated by a user;

6) and returning to the step 3) for cyclic execution.

2. The VPN acceleration method according to claim 1, characterized in that the number of said at least one VPN acceleration channel is 2, comprising a first acceleration channel and a second acceleration channel.

3. The VPN acceleration method according to claim 2, characterized in that said VPN tunnel is 163 tunnel; the first acceleration channel is a 163Qos acceleration channel; and the second acceleration channel is a CN2 acceleration channel.

4. The VPN acceleration method according to claim 1, characterized in that before receiving the user initiated VPN connection request, it further comprises:

receiving a login request of the user, and authenticating the user to confirm whether the user has the right to use a VPN connection service; and if the user has the right to use the VPN connection service, generating pass information of the user.

5. The VPN acceleration method according to claim 1, characterized in that said step of comparing said VPN tunnel and said at least one VPN acceleration channel for said current access IP comprises:

6. The VPN acceleration method according to claim 5, characterized in that, according to the result of the speed comparison, selecting the optimal acceleration channel for the current access IP specifically is:

if the time delay of the VPN channel linking to the current access IP is longer than the time delay of the at least one VPN acceleration channel linking to the current access IP, and when the number of the at least one VPN acceleration channel is 1, selecting the at least one VPN acceleration channel as an optimal acceleration channel; and when the number of the at least one VPN acceleration channel is more than 1, selecting the VPN acceleration channel with the minimum time delay in the at least one VPN acceleration channel as an optimal acceleration channel.

7. The VPN acceleration method according to claim 1, characterized in that the VPN acceleration method further comprises:

8. The VPN acceleration method according to claim 1, characterized in that the VPN acceleration method further comprises:

9. A VPN acceleration apparatus, comprising:

10. The VPN accelerator apparatus according to claim 9, wherein said subscriber management module is further configured to receive a login request from a subscriber, authenticate said subscriber, and determine whether said subscriber has access to a VPN connection service; and if the user has the right to use the VPN connection service, generating pass information of the user.

11. The VPN acceleration device according to claim 9, characterized in that the VPN acceleration device further comprises:

12. A VPN acceleration system, comprising:

a memory for storing a computer program;

a processor for implementing the steps of the VPN acceleration method according to any of the claims 1 to 8 when executing said computer program.

13. A computer-readable storage medium, characterized in that a computer program is stored thereon, which computer program, when being executed by a processor, realizes the steps of the VPN acceleration method according to any one of claims 1 to 8.