CN117134932A

CN117134932A - Data stream scheduling method and electronic equipment

Info

Publication number: CN117134932A
Application number: CN202310404134.9A
Authority: CN
Inventors: 冯现忠; 李浩然
Original assignee: Honor Device Co Ltd
Current assignee: Honor Device Co Ltd
Priority date: 2023-04-06
Filing date: 2023-04-06
Publication date: 2023-11-28

Abstract

The application discloses a data stream scheduling method and electronic equipment, comprising the following steps: the routing equipment receives a first data packet in a first data stream sent by a terminal, carries out service type identification according to the first data stream where the first data packet is located, obtains an identification result of the service type of the first data stream, and if the identification result indicates that the service type of the first data stream is a first type of service with high transmission safety and high transmission rate requirements, when the routing equipment receives a second data packet, carries out scheduling marking on the second data packet received after the first data packet in the first data stream, and the routing equipment schedules the second data packet in the first data stream to a VPN channel for data transmission according to the scheduling marking of the first data stream. The VPN channel is a data transmission channel with higher transmission security and transmission rate. The routing equipment transmits the data stream through the VPN channel, so that the transmission efficiency and the transmission safety of the data stream corresponding to the first type of service can be improved.

Description

Data stream scheduling method and electronic equipment

Technical Field

The present application relates to the field of communications technologies, and in particular, to a data stream scheduling method and an electronic device.

Background

The routing device is responsible for connecting hardware devices of two or more networks, stores and forwards data streams among different networks according to destination addresses of the different data streams, and plays a role of a gateway among the networks.

For example, in a scenario that a terminal is connected to the network through a routing device, the routing device receives a data stream of a service from the terminal, and forwards the data stream to a corresponding network side device according to a destination address of the data stream; and acquiring a returned data stream from the network side equipment, forwarding the returned data stream to a corresponding terminal according to the destination address of the returned data stream, and realizing uplink transmission and downlink transmission of the data stream of the service of the terminal.

Generally, the routing device performs data stream transmission through a default data transmission channel, and the default data transmission channel is used as a public data transmission channel, so that the problem of low transmission security and transmission rate exists, and the requirements of certain scenes/services on the transmission security and the transmission rate are difficult to meet.

Disclosure of Invention

The application provides a data stream scheduling method and electronic equipment, wherein routing equipment can identify the service type of a received data stream, and when the service type of the data stream is a first type of service, a first interface and a first channel are called to transmit the data stream. The first interface is a virtual private network (virtual private network, VPN) interface, the first channel is a VPN channel, and the VPN channel is a data transmission channel with higher transmission security and transmission rate. The routing equipment transmits the data stream through the first channel, so that the transmission efficiency and the transmission safety of the data stream corresponding to the first type of service can be improved, the running quality of the service application corresponding to the first type of service is ensured, and the use experience of the service application is optimized.

In order to achieve the above object, the following technical solution is adopted in the embodiments of the present application.

In a first aspect, a data flow scheduling method is provided, applied to a routing device, where the routing device includes a first channel, and the first channel is a VPN channel, and the method includes:

the routing equipment receives a first data packet in a first data stream sent by a terminal, wherein the first data packet is one of a plurality of data packets of the first data stream.

The routing equipment acquires a first data stream where the first data packet is located, performs service type identification, and acquires an identification result of the service type of the first data stream. If the identification result indicates that the service type of the first data stream is the first type of service with high requirements on transmission safety and transmission rate, the routing equipment performs scheduling marking on the first data stream when receiving the second data packet. The second data packet is one of a plurality of data packets of the first data stream, and the second data packet is a data packet received after the first data packet in time sequence.

And the routing equipment dispatches the second data packet in the first data stream to the first channel for data transmission according to the dispatching mark of the first data stream.

After determining that the service type of the data stream where the first data packet is located is the first type of service, the first data stream is subjected to scheduling marking, and a scheduling basis is provided for a second data packet after the first data packet of the first data stream. Upon receiving the second data packet and the data packets subsequent in time sequence, the data packets may be scheduled according to the schedule flag. The scheduling flag is used to characterize that the data stream is scheduled to the first channel for data transmission. That is, if the data stream has a scheduling flag, then at least one data packet characterizing the data stream is scheduled to the first channel for data transmission. If the data stream does not have a scheduling flag, it is indicated that no data packet in the data stream is scheduled to the first channel.

The routing equipment acquires the service type of the data stream, and can determine the service of the data stream according to the quintuple information by acquiring the quintuple information of the data stream, thereby acquiring the service type of the data stream; the routing equipment can also intelligently identify the fields of the data stream, acquire the field characteristics of the data stream, and acquire the service of the data stream based on the field characteristics, thereby acquiring the service type of the data stream.

In the application, after the routing equipment receives the data stream, the service type of the data stream is identified, and the identification result of the data stream is obtained. The identification result comprises a first type of service, wherein the first type of service is used for representing the service with high requirements on transmission safety and transmission rate. After the routing device obtains the identification result of the data stream, if the service type of the data stream is the first type of service, the routing device can schedule and mark the data stream, so that when the data packet of the data stream is received next time, the data stream with the schedule mark can be transmitted through the VPN channel. The routing equipment schedules the data stream with high requirements on transmission safety and transmission rate to the VPN channel for data transmission, so that the safety, confidentiality and transmission rate of the data stream in the data transmission process can be ensured.

In a possible implementation manner of the first aspect, after the routing device receives the first data packet in the first data stream sent by the terminal, the method further includes:

the routing equipment judges whether a first data stream where a first data packet is located has a scheduling mark or not; the scheduling mark is a mark based on the data stream, and is recorded in the connection tracking information of the data stream. And if the first data stream does not have the scheduling mark, executing the step of acquiring the first data stream where the first data packet is located to identify the service type and acquiring the identification result of the service type of the first data stream.

In the present application, the absence of a scheduling flag in the first data stream where the first data packet is located means that the first data stream is not scheduled to the VPN tunnel, in this case, the routing device may acquire the first data stream where the first data packet is located to perform service type identification, and determine the service type of the first data stream, thereby providing a scheduling basis for the data packets after the first data packet of the first data stream.

In a possible implementation manner of the first aspect, after obtaining the identification result of the service type of the first data flow, the method further includes:

the routing equipment dispatches the first data packet to a second channel for data transmission; the second channel is a normal data transmission channel.

In the application, if the routing device does not have a scheduling mark in the first data stream where the first data packet is located, the routing device schedules the first data packet to the second channel for data transmission. The second channel is a non-VPN channel, and the second channel may be a default normal data transmission channel of the routing device.

In a possible implementation manner of the first aspect, the method further includes:

if the first data flow has a scheduling mark, the routing device schedules the first data packet to the first channel for data transmission.

In the application, if the first data stream has the scheduling mark, it is indicated that at least one data packet in the first data stream is scheduled to the VPN channel for data transmission, in this case, the routing device can not identify the service type of the data packet in the data stream, and directly schedule the data packet of the data stream to the VPN channel for data transmission, thereby saving the identification computing resource of the routing device.

if the identification result indicates that the service type of the first data stream is the first type of service, the routing equipment acquires and clears the connection tracking information of the first data stream; the connection tracking information includes a scheduling lane of the first data stream.

The connection tracking information of the first data stream includes information related to the first data stream being scheduled to the second channel for data transmission. The connection trace information of the data flow plays a role in providing data support in the scheduling process of the routing device processing a plurality of data packets of the data flow. When the routing device determines that the service type of the first data stream indicates that the service type of the first data stream is the first type of service, the scheduling channel information of the first data stream in the connection tracking information is still the second channel and is not consistent with the first channel which should be scheduled, in this case, the routing device can empty the connection tracking information of the first data stream, so that when other data packets of the first data stream arrive, the routing device can schedule the data packets of the first data stream again.

In a possible implementation manner of the first aspect, the routing device performs service type identification on the first data flow according to five-tuple information of the first data packet, and obtains an identification result of the service type of the first data flow, including:

the routing equipment acquires a class identifier of a service of a first data flow where a first data packet is located; and acquiring a service type identification result of the first data stream according to the corresponding relation between the preset service type and the category identification.

The identification range of the preset service type can be set by a user; the routing device can also be determined according to the frequency or habit of using the service by the user and other personalized features. The service types include a first type of service, which is a service requiring high transmission security and transmission rate, and a second type of service, which is a service requiring low transmission security and transmission rate.

In the application, the service type of the received data stream can be determined according to the preset service type identification range, so as to obtain the service type identification result of the first data stream.

In a possible implementation manner of the first aspect, the service types include a second class of service, where the second class of service characterizes a service with low requirements for transmission security and transmission rate, and the obtaining the identification result of the service type of the first data flow includes:

if the service type of the first data stream is the second type service or the routing equipment does not acquire the service type of the first data stream, the routing equipment schedules the first data packet to a second channel for data transmission; the second channel is a normal data transmission channel.

In the present application, the result of identifying the service type of the first data flow may be null, where the case includes that the routing device cannot identify the service type of the first data flow, or the service type of the first data flow does not belong to the first type of service or the second type of service. In this case, the routing device may schedule the first data stream to the second channel for data transmission.

the routing equipment receives a first operation of a user and acquires configuration parameters of a first channel; the configuration parameters comprise addresses, user names and passwords of VPN servers of the virtual network servers corresponding to the first channel; the routing equipment sends a VPN connection establishment request carrying configuration information to a VPN server according to the address of the VPN server; the routing equipment receives a response returned by the VPN server for establishing the VPN connection request, and establishes the VPN connection with the VPN server.

In the present application, the routing device is a device having VPN characteristics, and before opening a VPN tunnel, VPN connection between the routing device and a corresponding VPN server needs to be established. The routing device may initiate a request to establish a VPN connection to a corresponding VPN server based on the received VPN configuration information, and establish a VPN connection with the corresponding VPN server upon receipt of the reply.

In a possible implementation manner of the first aspect, after establishing the VPN connection with the VPN server, the method further includes:

the routing device constructs a first channel and defines a first interface corresponding to the first channel.

The method for scheduling the second data packet in the first data stream to the first channel for data transmission comprises the following steps:

And scheduling the second data packet in the first data stream to the first channel through the first interface for data transmission.

In the application, after establishing the VPN connection between the routing equipment and the corresponding VPN server, the routing equipment also needs to define the corresponding VPN channel and the interface corresponding to the VPN channel so as to facilitate the subsequent scheduling and data transmission of the data packet.

In a second aspect, an electronic device is provided, the electronic device including a receiving module, an identifying module, a marking module, and a scheduling module; the electronic equipment comprises a first channel, wherein the first channel is a virtual private network VPN channel;

the receiving module is used for receiving a first data packet in a first data stream sent by the terminal; the first data packet is one of a plurality of data packets of the first data stream; the identification module is used for acquiring a first data stream where the first data packet is located, carrying out service type identification, and acquiring an identification result of the service type of the first data stream; the service types comprise a first type of service, wherein the first type of service characterizes the service with high requirements on transmission safety and transmission rate; the marking module is used for carrying out scheduling marking on the first data stream when the second data packet is received when the service type of the first data stream is the first type of service; the second data packet is one of a plurality of data packets of the first data stream, and the second data packet is a data packet received after the first data packet in time sequence; the scheduling module is used for scheduling the second data packet in the first data stream to the first channel for data transmission according to the scheduling mark of the first data stream; the first path is a VPN path.

In a possible implementation manner of the second aspect, the identifying module is configured to determine whether a first data flow in which the first data packet is located has a scheduling flag; the scheduling mark is a mark based on the data stream, and is recorded in the connection tracking information of the data stream. And the identification module is used for executing the step of acquiring the first data stream where the first data packet is positioned to identify the service type and acquiring the identification result of the service type of the first data stream when the first data stream does not have the scheduling mark.

In a possible implementation manner of the second aspect, the scheduling module is configured to schedule the first data packet to the second channel for data transmission; the second channel is a normal data transmission channel.

After the identification module determines that the first data stream does not have the scheduling mark to identify the service type of the first data stream, the scheduling module may schedule the first data stream to the second channel for data transmission.

In a possible implementation manner of the second aspect, the scheduling module is configured to schedule, when the first data flow has the scheduling flag, the first data packet to the first channel by the routing device for data transmission.

When the first data stream has the scheduling mark, the identification module can directly transmit the data packet of the first data stream to the scheduling module without executing the service type identification operation of the first data stream, and the scheduling module schedules the first data stream to the first channel for data transmission under the condition that the scheduling mark is determined to be present in the first data stream, so that the identification computing resource of the identification module is saved.

In a possible implementation manner of the second aspect, the scheduling module is configured to obtain and empty connection tracking information of the first data flow when the identification result indicates that the service type of the first data flow is a first type of service; the connection tracking information includes a scheduling lane of the first data stream.

In a possible implementation manner of the second aspect, the identification module is specifically configured to obtain a class identifier of a service of a first data flow where the first data packet is located; and acquiring a service type identification result of the first data flow according to the preset corresponding relation between the service type and the category identifier.

In one possible implementation manner of the second aspect, the service type includes a second type of service, where the second type of service characterizes a service with low requirements for transmission security and transmission rate, and the scheduling module is configured to schedule the first data packet to the second channel for data transmission when the service type of the first data stream is the second type of service or the routing device does not acquire the service type of the first data stream; the second channel is a normal data transmission channel.

In one possible implementation manner of the second aspect, the electronic device further includes a virtual private network VPN module,

The receiving module is used for receiving a first operation of a user and acquiring configuration parameters of a first channel; the configuration parameters comprise addresses, user names and passwords of VPN servers of the virtual network servers corresponding to the first channel;

the VPN module is used for sending a VPN connection establishment request carrying configuration information to the VPN server according to the address of the VPN server;

and the VPN module is used for receiving a response returned by the VPN server for establishing the VPN connection request and establishing the VPN connection with the VPN server.

In a possible implementation manner of the second aspect, the electronic device further includes a route configuration module;

the routing configuration module is used for constructing a first channel and defining a first interface corresponding to the first channel; the scheduling module is specifically configured to schedule the second data packet in the first data stream to the first channel through the first interface for data transmission.

In a third aspect, an electronic device is provided that includes a memory and one or more processors; the memory is coupled with the processor; the memory has stored therein computer program code comprising computer instructions which, when executed by the processor, cause the electronic device to perform the method of any of the first aspects described above.

In a fourth aspect, there is provided a computer readable storage medium having instructions stored therein which, when run on an electronic device, cause the electronic device to perform the method of any of the first aspects described above.

In a fifth aspect, there is provided a computer program product comprising instructions which, when run on an electronic device, cause the electronic device to perform the method of any of the first aspects above.

In a sixth aspect, an embodiment of the application provides a chip comprising a processor for invoking a computer program in memory to perform a method as in the first aspect.

It will be appreciated that, for the advantages achieved by the electronic device according to the second aspect and the third aspect, the computer-readable storage medium according to the fourth aspect, the computer program product according to the fifth aspect, and the chip according to the sixth aspect, reference may be made to the advantages of the first aspect and any possible design manner thereof, which are not repeated here.

Drawings

Fig. 1 is a schematic diagram of a networking topology of a routing device according to an embodiment of the present application;

fig. 2 is an interface schematic diagram of a Web client configured with VPN parameters of a routing device according to an embodiment of the present application;

Fig. 3 is an editing sub-interface schematic diagram of a Web client for configuring VPN parameters of a routing device according to an embodiment of the present application;

fig. 4 is an interaction schematic diagram for establishing VPN connection between a Web client, a routing device and a VPN server according to an embodiment of the present application;

fig. 5 is a schematic diagram of a architecture of forwarding a data stream by a routing device in a data stream scheduling method according to an embodiment of the present application;

FIG. 6 is a diagram illustrating a data processing path of a Netfilter framework of a routing device according to an embodiment of the present application;

fig. 7 is an interaction diagram between each module of a routing device and a terminal, a Web client, a VPN server, and a modem in a data flow scheduling method according to an embodiment of the present application;

fig. 8 is a flow chart of a data flow scheduling method according to an embodiment of the present application;

fig. 9 is a schematic structural diagram of an electronic device according to an embodiment of the present application;

fig. 10 is a schematic structural diagram of a chip system according to an embodiment of the present application.

Detailed Description

In the description of embodiments of the present application, the terminology used in the embodiments below is for the purpose of describing particular embodiments only and is not intended to be limiting of the application. As used in the specification of the present application and the appended claims, the singular forms "a," "an," "the," and "the" are intended to include, for example, "one or more" such forms of expression, unless the context clearly indicates to the contrary. It should also be understood that in the following embodiments of the present application, "at least one", "one or more" means one or more than two (including two). The term "and/or" is used to describe an association relationship of associated objects, meaning that there may be three relationships; for example, a and/or B may represent: a alone, a and B together, and B alone, wherein A, B may be singular or plural. The character "/" generally indicates that the context-dependent object is an "or" relationship.

Reference in the specification to "one embodiment" or "some embodiments" or the like means that a particular feature, structure, or characteristic described in connection with the embodiment is included in one or more embodiments of the application. Thus, appearances of the phrases "in one embodiment," "in some embodiments," "in other embodiments," and the like in the specification are not necessarily all referring to the same embodiment, but mean "one or more but not all embodiments" unless expressly specified otherwise. The terms "comprising," "including," "having," and variations thereof mean "including but not limited to," unless expressly specified otherwise. The term "coupled" includes both direct and indirect connections, unless stated otherwise. The terms "first," "second," and the like are used for descriptive purposes only and are not to be construed as indicating or implying relative importance or implicitly indicating the number of technical features indicated.

In embodiments of the application, words such as "exemplary" or "such as" are used to mean serving as an example, instance, or illustration. Any embodiment or design described herein as "exemplary" or "e.g." in an embodiment should not be taken as preferred or advantageous over other embodiments or designs. Rather, the use of words such as "exemplary" or "such as" is intended to present related concepts in a concrete fashion.

The routing equipment has the characteristic of a virtual private network (virtual private network, VPN), and under the condition that the VPN channel of the routing equipment is opened, the VPN channel is used as a transmission channel with higher security and network quality, so that the requirements of high security and network quality requirements of data stream transmission of some service applications can be met.

The VPN channel is an encrypted private network channel, and data transmission through the VPN channel is equivalent to data transmission with private traffic on a public network, so that network operation and maintenance cost can be saved. And because the VPN channel is an encrypted channel, the security, confidentiality and network efficiency of the data transmission through the VPN channel are higher.

The routing device opens a VPN service, and may provide a VPN channel for secure remote connection for data transmission between the routing device and the network side device or between the routing device and the terminal. In general, a routing device having VPN characteristics may support 40 transmission channels, and a routing device having VPN characteristics may also have VPN transparent functions and robust firewall characteristics.

The characteristics of high security, high confidentiality and high network efficiency of VPN channels make VPN channels increasingly widely used. Some operators can start VPN service of the routing equipment aiming at specific scenes or specific users, so that a VPN channel capable of guaranteeing data transmission safety and data transmission quality is provided for the terminal, the routing equipment and the network side equipment/operators for data transmission. For example, VPN tunnels of routing devices may be used for a variety of scenarios such as data transmission between multiple remote users, data transmission between branches of a company, data transmission between business partners and internal local area networks of a provider and a company.

Based on the characteristics of VPN channels, the application provides a data stream scheduling method, after the routing equipment receives the data stream, the service type of the data stream is identified, and the identification result of the data stream is obtained. The identification result comprises a first type of service and a second type of service, wherein the first type of service is used for representing the service with high requirements on transmission safety and transmission rate, and the second type of service is used for representing the service with low requirements on transmission safety and transmission rate. After the routing equipment obtains the identification result of the data stream, if the service type of the data stream is the first type of service, the routing equipment can schedule and mark the data stream, so that the data stream with the scheduling mark is transmitted through the VPN channel; if the service type of the data stream is the second type of service, the routing device can perform data transmission of the data stream through a common data transmission channel. The routing equipment schedules the data stream with high requirements on transmission safety and transmission rate to the VPN channel for data transmission, so that the safety, confidentiality and transmission rate of the data stream in the data transmission process can be ensured; the data streams with low requirements on transmission safety and transmission rate are scheduled to the common data transmission channel for data transmission, so that the scheduling and forwarding of the data through the common data transmission channel according to the service types of the data streams are realized, the data transmission load of the common data transmission channel and the data transmission load of the VPN channel are reduced to a certain extent, the transmission quality of the common data transmission channel and the VPN channel can be further ensured, and the transmission efficiency of each channel is improved.

The data flow scheduling method provided by the application can be applied to a networking topology framework containing routing equipment as shown in figure 1. As shown in fig. 1, fig. 1 includes a routing device (e.g., a router having VPN characteristics), an underhung device of the routing device (e.g., a terminal such as a cellular phone, a tablet computer, a computer, etc.), a modem, a VPN server, and a network-side device.

In the networking topology shown in fig. 1, after the routing device establishes a VPN tunnel with the VPN server, the data stream received from the terminal may be scheduled to the VPN tunnel through the VPN interface, and the data stream is forwarded to the network-side device via the VPN server. Alternatively, the routing device may schedule the data stream received from the terminal to a default data transmission channel through a common interface, and forward the data stream to the network side device through the modem. The routing equipment receives the data stream issued by the network side equipment, and determines a scheduling interface and a scheduling channel of the data stream according to the service type of the data stream, so that the data stream is received through a common interface or a VPN interface, and the data stream is issued to a corresponding terminal.

Alternatively, the routing device may obtain the service type of the data flow through five-tuple information of the data flow. Or, the routing device may perform feature recognition on the fields of the data stream based on a preset intelligent recognition algorithm to obtain the service type of the data stream. Specifically, the routing device may obtain a service identifier of the data flow based on the quintuple information, or obtain a service identifier of the data flow based on the intelligent recognition algorithm, and determine a service type of the data flow based on the service identifier of the data flow.

The user can log in the Web client of the routing equipment, and parameter configuration of VPN service is carried out through the configuration interface of the routing equipment, so that connection between the routing equipment and the VPN server is established, and a VPN channel is constructed. Types of VPN services include point-to-point tunneling protocol (PPTP) VPN, layer 2tunneling protocol,L2TP VPN, etc.

Referring to fig. 2, fig. 2 shows an interface schematic of a router configuration VPN in a Web client. The interface 100 includes a configuration option area 110 of the router, where the configuration option area 110 includes configuration options of the router such as "router information", "upgrade management", "network setting", "WiFi setting", and the like. Among the "network setting" configuration options are included setting options concerning networks such as local area networks, VPNs, and the like of routers, such as "local area networks", "Virtual Private Networks (VPNs)", "interactive network television settings (internet protocol television, IPTV)", "universal plug and play (universal plug and play, UPnP)", "networking configuration", and "internet protocol version6 (internet protocol version, IPv 6)", and the like, as shown in fig. 2. As shown in fig. 2, the interface 100 further includes a configuration sub-area 120 corresponding to the configuration option "virtual private network VPN", the configuration sub-area 120 including configuration parameters for the VPN. The user may implement parameter configuration of the VPN service based on the "edit" control 121 provided by the configuration sub-area 120. The user may enter the edit sub-interface by selecting the "edit" control 121 to populate the configuration parameters of the VPN. Illustratively, fig. 3 shows a schematic view of an editing sub-interface 200 for configuration parameters of a VPN. Among other things, the edit sub-interface 200 includes a fill control for configuration parameters of the VPN, which may include a control 201 for filling in server addresses, a control 202 for filling in user names, a control 203 for filling in passwords, and a control 204 for selecting whether to manually set domain name systems (domain name system, DNS), and so forth. The user may implement a trigger operation to construct a VPN tunnel through "connect" control 205 in editing sub-interface 200. Editing sub-interface 200 also includes a "cancel" control 206 for canceling VPN settings. The server address, the user name and the password can be obtained through an operator. The server address refers to the VPN server and refers to the internet protocol address (internet protocol address, IP address).

After the router completes the construction of the VPN tunnel, the configuration sub-area 120 may output a hint that the VPN is connected. For example, as shown in FIG. 2, when the "connection status" control 122 of the configuration sub-area 120 is updated to connected, it may be considered that a connection with the VPN server has been successfully established and a VPN tunnel has been successfully established.

Specifically, the process of establishing a connection with a VPN server to construct a VPN tunnel by a router based on the parameter configuration of the VPN may be as shown with reference to fig. 4. The method comprises a Web client, a routing device and a VPN server, wherein the Web client, the routing device and the VPN server are used for carrying out router VPN parameter configuration for users. The routing device comprises a Web module and a VPN module.

After the user triggers the connection operation based on the editing sub-interface 200 provided by the Web client, the Web client obtains VPN configuration parameters such as the server address, the user name, the password and the like filled by the user, and sends a VPN establishment request carrying the VPN configuration parameters to the router. The Web module of the router performs message authentication and authentication on the received VPN establishment request, and after determining that the VPN establishment request is legal, the Web module of the router distributes and converts the message module of the router, and transmits the converted VPN establishment request to the VPN module of the router. And the VPN module analyzes the message of the VPN establishment request to obtain VPN configuration parameters such as VPN server address, user name, password and the like. And the VPN module sends a VPN channel establishment request to a VPN server corresponding to the VPN server address according to VPN configuration parameters such as the server address, the user name, the password and the like. And after the router receives the request response returned by the VPN server, returning the request response to the Web client. After receiving the request response, the Web client updates the "connection state" of the configuration sub-area 120 to "connected".

It should be noted that, after the routing device establishes the VPN tunnel, the data transmission tunnels that the routing device can schedule include a normal data transmission tunnel and a VPN tunnel. Correspondingly, the routing device includes a normal interface (exemplarily, the normal interface may be nas1_1) and a VPN interface (exemplarily, the VPN interface may be ppp 300), the normal interface corresponds to the normal data transmission channel, and the VPN interface corresponds to the VPN channel. The common interface and the VPN interface are software network equipment interfaces of the routing equipment, and the routing equipment calls different data transmission channels through different interfaces to transmit data.

It should be noted that, the VPN interface is an interface defined by the routing device from a plurality of ordinary interfaces; a VPN tunnel is a tunnel defined by a routing device from among a plurality of ordinary data transmission tunnels.

After the routing equipment establishes connection with the VPN server and builds a VPN channel, the routing equipment dispatches the data stream to the corresponding data transmission channel through different interfaces for data transmission according to the data stream identification result after receiving the data stream.

Fig. 5 shows a schematic diagram of an architecture of a routing device forwarding a data stream. The routing device includes a transmission control protocol (transmission control protocol, TCP)/IP layer and a driver layer. The TCP/IP layer includes a bridge module, a route forwarding module, and a network device interface. The drive layer comprises a WiFi drive and a network port drive, and the WiFi drive corresponds to the WiFi interface.

Taking the uplink data stream sent by the routing equipment receiving terminal as an example, the routing equipment receives the uplink data stream from the terminal through the WiFi interface corresponding to the WiFi drive, and the uplink data stream is forwarded to the routing forwarding module through the bridge module. The route forwarding module (the marking module below) obtains the identification result of the service type of the uplink data stream, and if the identification result indicates that the service type of the uplink data stream is the first service type, the data stream is subjected to scheduling marking. The uplink data stream after the scheduling mark is scheduled to a VPN interface, the data of a VPN channel is encapsulated, the uplink data stream after the VPN encapsulation is forwarded to the VPN channel through a common interface, and the uplink data stream is sent to network side equipment through the VPN channel; if the identification result indicates that the service type of the uplink data stream is the second type of service, the common data transmission channel is directly called through a common interface (for example, a common WAN interface) to send the uplink data stream to the network side device.

That is, in the process of forwarding the uplink data stream, the data stream with the service type of the first type service needs to be subjected to data encapsulation of the VPN channel at the VPN interface, and then is scheduled to the VPN channel for data transmission through the common interface; the service type is the second type of service or the data flow which cannot identify the service type does not need to carry out data encapsulation of a VPN channel, and is directly scheduled to a common data transmission channel through a common interface (such as a common WAN interface) for data transmission.

Taking the example that the routing equipment receives the downlink data stream sent by the network side equipment as an illustration, the routing equipment receives the downlink data stream through the common interface, analyzes the downlink data stream, and obtains the service type of the downlink data stream. If the service type of the downlink data stream is the first type of service, forwarding the downlink data stream to a VPN interface for VPN analysis of the downlink data stream, forwarding the data stream after VPN analysis to a driving layer through a bridge module, and sending the data stream to a corresponding terminal through a WiFi interface corresponding to WiFi driving; if the service type of the downlink data stream is the second type of service, the downlink data stream is received through a common interface (for example, a common WAN interface), is forwarded to the driving layer through the bridge module, and is sent to the corresponding terminal through a WiFi interface corresponding to the WiFi driving.

In the forwarding process of the data stream, the routing device needs to identify the data stream and acquire an identification result of the service type of the data stream. The traffic types of the data stream include a first type of traffic and a second type of traffic. The first type of service may be understood as data requiring high transmission security and transmission rate, for example, a service of a terminal is taken as an example, and the service includes a game service, a video service, a live service, a payment service, a social service, a life service, a news reading service, and the like. The first type of service may be a data stream of a game service, a data stream of a video service, a data stream of a live service, etc.; the second category of services may be understood as data requiring low transmission security and transmission rate, such as social services, life services, news reading, etc.

The routing device may obtain the service type of the data flow according to the five-tuple information of the received data flow. The quintuple information includes source IP, destination IP, source port, destination port, transmission control protocol TCP/user datagram protocol (user datagram protocol, UDP) of the data stream. The routing equipment can acquire the class identifier of the service corresponding to the data flow according to the quintuple information of the data flow, and the routing equipment determines the service type of the data flow according to the class identifier of the service.

By way of example, table 1 below gives an illustration of several traffic types.

TABLE 1

Traffic classification	Category identification	/	/	/	/
						Application market	2	Application market 1	Application market 2	Application market 3	Application market 4
Game machine	4	Game application 1	Game application 2	Game application 3	Game application 4
						Short video	8	Short video application 1	Short video application 2	Short video application 3	Short video application 4
Video frequency	16	Video application 1	Video application 2	Video application 3	Video application 4
						Live broadcast	32	Live broadcast application 1	Live application 2	Live application 3	Live application 4
News	64	News application 1	News application 2	News application 3	News application 4
						Social chat	128	Social application 1	Social application 2	Social application 3
Visual talking, meeting	256	Conversation application 1
						Shopping	512	Shopping application 1	Shopping application 2
Payment	1024	Payment application 1	Payment application 2
						Comprehensive living	2048	Life application 1
Net class	4096	Net class application 1	Net class application 2
						Downloading	8192	Downloading application 1	Downloading application 2

The above table provides an example illustration that, for example, services with high requirements for data transmission security and transmission rate, such as games, short videos, live broadcast, etc., may be first-class services, that is, services with class identifiers of 4, 8, 16, and 32 are first-class services, and data flows corresponding to the services are first-class services. For example, services with low requirements for data transmission security and transmission rate, such as application markets, social chat, living synthesis, etc., may be second-class services, that is, services with class identifiers of 2, 128, 2048 are second-class services, and data flows corresponding to the services are second-class services.

Wherein, alternatively, the service type may be defined by the end user, for example, the user sets, through the Web client of the routing device, which types of services corresponding to the identifiers of the categories belong to the first type of service, and which types of services corresponding to the identifiers of the categories belong to the second type of service. Optionally, the service type may also be set by the routing device according to the service usage frequency of the terminal, for example, the routing device obtains the corresponding service according to the data flow, counts the service with higher usage frequency of the terminal user, determines the service with higher usage frequency of the user as the first type service, and determines the service with higher usage frequency of the user as the second type service.

The routing device performs service type identification of the data stream based on quintuple information of the data stream. In the process of processing the received data stream by the routing equipment, the routing equipment can perform address conversion according to the original source IP and the destination IP in the quintuple information of the data stream, so that the forwarding of the data stream is realized. Referring to fig. 6, a Netfilter framework employed by a routing device kernel IP protocol stack is shown in fig. 6, where a data processing path schematic of the routing device Netfilter framework is shown. The data processing path includes five key listening points (hook points) of pre-routing, forwarding (forward), post-routing, input (input) and output (output).

After the data flow is routed through the device, IP verification is performed, and data processing is performed before the data flow is routed through the first hook point (pre-routing). The data flow then enters a routing decision which determines whether the data flow needs to be forwarded or sent to the host. If the data stream is sent to the local machine, the data stream is transmitted to an upper protocol after being processed by a hook point input (input); if the data stream should be forwarded, the data stream is processed through hook point forwarding (forward). The forwarded data stream is forwarded to the network after being processed by hook point routing (post-routing). The locally generated data stream is routed through a routing decision process and then sent to the network through an output (output) process.

The data flows related to the embodiment are all data flows needing to be forwarded to the network side equipment and are not sent to the local machine. Therefore, the routing device performs service type identification on the data stream at a forwarding (forward) point, and obtains an identification result of the service type of the data stream.

For example, after the routing device obtains the identification result of the first data packet of the first data flow, when the identification result is used to characterize that the service type of the first data flow is the first type of service, and when the routing device receives the second data packet of the first data flow, the first data flow may be subjected to a scheduling flag before the service type identification is performed, that is, before hook point routing (pre-routing), where the scheduling flag is used to indicate that the first data flow should be scheduled to the VPN tunnel for data transmission. Optionally, the data stream subjected to the scheduling mark may not perform service type identification when passing through the forwarding (forward) hook point, and is scheduled to the VPN channel for data transmission according to the scheduling mark when passing through the post-routing (post-routing) hook point. The second data packet belongs to the first data stream and is received after the first data packet in time sequence.

Referring to fig. 7, fig. 7 shows an interaction schematic of each module of the routing device. The routing equipment comprises a receiving and transmitting module, an identification module, a scheduling module, a marking module, a routing configuration module and a VPN module.

The VPN module is used for establishing VPN connection with the VPN server. The route configuration module is used for establishing a VPN channel and determining a VPN interface corresponding to the VPN channel after determining that the route equipment establishes VPN connection with the VPN server so as to carry out data transmission of data streams corresponding to the first type of service.

The routing device is described by taking as an example the processing of an upstream data stream received from the terminal.

The transceiver module is used for receiving a first data packet of a first data stream sent by the terminal from the driving layer.

The marking module is used for acquiring the identification information of the first data stream where the first data packet is located from the database of the routing equipment, and if the first data packet is the first data packet of the first data stream in time sequence, the first data stream does not have the identification information, and in this case, the marking module does not carry out scheduling marking processing on the first data stream. The first data stream flows to the identification module.

The identification module is used for carrying out service type identification on the first data stream where the first data packet is located under the condition that the first data stream is identified to be free of the scheduling mark, acquiring an identification result of the first data stream and generating identification information of the first data stream. The identification information includes quintuple information of the first data stream and an identification result. Optionally, the identification module may further store the identification information of the first data stream in a database of the routing device.

The scheduling module is used for determining a scheduling interface and a scheduling channel of the first data packet according to the scheduling mark of the first data stream where the first data packet is located, and transmitting the first data packet through the corresponding interface and channel. For example, when the first data stream has a scheduling mark, the scheduling module encapsulates the data of the VPN channel through the VPN interface, schedules the data to the VPN channel through the normal interface, and forwards the first data stream to the VPN server for transmission of the first data stream. When the first data stream does not have the scheduling mark, the scheduling module schedules the first data stream to a common data transmission channel through a common interface, and forwards the first data stream to a modem to transmit the first data stream.

Optionally, when the identification result of the first data stream indicates that the service type of the first data stream is a first type of service, and the scheduling interface and the scheduling channel of the first data stream are a common interface and a common data transmission channel, the scheduling module is further configured to empty connection tracking information of the first data stream.

The marking module is used for acquiring identification information of the first data stream where the second data packet is located from the database when the second data packet of the first data stream is received, and performing scheduling marking on the data stream when the identification result in the identification information represents that the service type of the first data stream is the first type of service. The scheduling mark is a mark based on the data stream and is recorded in the connection tracking information of the data stream.

Optionally, the identifying module may not identify the service type of the first data flow when identifying that the first data flow where the second data packet is located has the scheduling flag, and the first data flow directly flows to the scheduling module.

And the scheduling module is used for packaging the data of the VPN channel through the VPN interface when the first data flow has the scheduling mark, scheduling the data to the VPN channel through the common interface, forwarding the first data flow to the VPN server, and transmitting the first data flow.

Specifically, fig. 8 shows a process schematic of each module of a routing device to execute a data flow scheduling method, and in combination with the Netfilter framework provided in fig. 6 and each module of the routing device shown in fig. 7, the data flow scheduling method provided in the embodiment of the present application is described, including:

s201, a transceiver module of the routing device receives a first data packet of a first data stream.

The first data flow is a data flow of a certain service, each data flow of the service comprises a plurality of data packets, and the first data packet is one of the plurality of data packets.

Based on Netfilter framework of the routing device, the transceiver module receives the first data packet and reaches forward through pre-routing.

S202, an identification module of the routing device judges whether a first data flow of a first data packet is scheduled.

In this embodiment, the identification module acquires the first data packet at the forward hook point, and determines whether the first data stream of the first data packet has other data packets already scheduled. For example, the transceiver module may obtain the scheduling flag of the first data packet, and if the first data packet has the scheduling flag, or the scheduling flag is a first value, it indicates that at least one data packet in the first data flow has been scheduled to the VPN tunnel for data transmission. Illustratively, the first value may be N, N being a positive integer greater than 0.

If the first data packet has no scheduling flag or the scheduling flag is a second value, it is determined that all data packets in the first data stream have not been scheduled. Illustratively, the second value may be NULL.

S203, if yes (the first data stream is scheduled), the identification module forwards the first data packet to the scheduling module.

In this embodiment, the identification module confirms that the first data stream has been scheduled, and that the first data stream has a scheduling flag or a scheduling flag that is a first value, and the identification module determines that at least one data packet in the first data stream has been scheduled to the VPN tunnel for data transmission. In this case, the identification module may not perform service type identification on other data packets (first data packets) in the first data stream, and may directly forward the first data packets to the scheduling module, so as to reduce the computing resource consumption of the identification module.

S204, if not (the first data stream is not scheduled), the identification module identifies the service type of the first data packet, and obtains the identification result of the first data stream to which the first data packet belongs.

If the first data flow is not scheduled, the identification module analyzes quintuple information of the first data packet, and obtains a service type corresponding to the first data flow to which the first data packet belongs according to the quintuple information of the first data packet. For example, the class identifier of the service a corresponding to the first data packet is determined according to the information such as the source IP, the destination IP, the source port, the destination port, and the like in the quintuple information of the first data packet. And determining the type of the service A according to the type identification of the service A, thereby obtaining the service type of the first data packet (the service type of the first data flow). If the class identifier of the service A belongs to the identifier included in the first class of service, determining that the service A is the first class of service, and the service type of the data flow corresponding to the service A is the first class of service, and correspondingly, the identification result of the first data packet represents that the service type of the first data flow is the first class of service. If the class identifier of the service A belongs to the identifier included in the second class service, determining that the service A is the second class service, and correspondingly, the identification result of the first data packet indicates that the service type of the first data flow is the second class service.

Optionally, the identification module may encapsulate the identification result of the first data packet and the quintuple information of the first data packet according to a preset data structure, to obtain identification information for the first data packet.

Optionally, in the case that the identification module fails to identify the traffic type of the first data stream, the identification result is a null value. Illustratively, the NULL value may be NULL.

S205, the identification module forwards the first data packet to the scheduling module.

In this embodiment, if the identification module does not acquire the identification result of the first data packet, the first data packet is directly forwarded to the scheduling module. If the identification module obtains the identification result of the first data packet, the identification module can correlate the identification result of the first data packet with five-tuple information of the first data packet to obtain identification information of the first data stream, and store the identification information into the database.

S206, the scheduling module judges whether the first data flow of the first data packet is scheduled.

In the whole data processing process of the first data packet, the identification module needs to judge whether the first data flow of the first data packet is scheduled or not so as to determine whether the identification module needs to carry out service type identification on the first data packet or not, so that the computing resource consumption of the identification module is reduced.

And under the condition that the scheduling module acquires the first data packet and determines that the first data packet has an identification result, the scheduling module can also judge whether the first data flow of the first data packet is scheduled or not so as to determine a scheduling interface and a scheduling channel corresponding to the first data packet.

S207, if yes (the first data flow is scheduled), the scheduling module schedules the first data packet to the VPN channel through the VPN interface for data transmission.

In this embodiment, the first data stream is already scheduled, that is, the first data packet has a scheduling flag, or the scheduling flag is a first value, and at least one data packet in the first data stream is already scheduled to the VPN tunnel for data transmission. In this case, the scheduling module encapsulates the first data packet through the VPN interface to the data of the VPN channel, and schedules the first data packet to the VPN channel through the normal interface to perform data transmission.

S208, if not (the first data stream is not scheduled), the scheduling module schedules the first data packet to the common data transmission channel through the common interface for data transmission.

In this embodiment, if the first data packet has no scheduling flag or the scheduling flag is the second value, it is determined that all the data packets in the first data stream are not scheduled. In this case, the scheduling module schedules the first data packet to the normal data transmission channel through the normal interface for data transmission.

Optionally, after the first data packet is scheduled to the normal data transmission channel through the normal interface for data transmission, the scheduling module of the routing device generates connection tracking information about the first data flow to which the first data packet belongs. In the forwarding process of each data packet, the routing device generates connection tracking information (conntrack) for the data stream to which the data packet belongs, and for each data stream, the conntrack corresponds to the data stream. The conntrack includes a scheduling interface and a scheduling channel for the first data stream.

S209, if the identification result of the first data packet indicates that the service type of the first data stream is the first type of service, the scheduling module acquires and clears the connection tracking information of the first data stream.

In this embodiment, if the identification result of the first data packet indicates that the service type of the first data flow is the first type of service, it is indicated that the first data flow needs to be scheduled to the VPN tunnel for data transmission. However, since the first data packet has not yet arrived for scheduling marking, the scheduling module schedules the first data packet which should be scheduled to the VPN channel for data transmission to the normal data transmission channel for data transmission. In this case, the scheduling interfaces and the scheduling channels in the conntrack corresponding to the first data stream are a normal interface and a normal data transmission channel, and are not VPN interfaces and VPN channels. In order to enable other data packets in the first data stream to be schedulable into the VPN tunnel, the scheduling module may acquire conntrack of the first data stream and empty information in the conntrack of the first data stream.

And S210, when receiving a second data packet which belongs to the first data flow and belongs to the first data flow with the first data packet, the marking module performs scheduling marking on the second data packet.

The receiving and transmitting module of the routing device receives the second data packet, and at the pre-routing hook point, the receiving and transmitting module confirms that the second data packet and the first data packet belong to the same first data stream according to five-tuple information of the second data packet. And when the identification result of the first data packet indicates that the service type of the first data stream is the first type of service, the receiving-transmitting module performs scheduling marking on the second data packet belonging to the same first data stream. For example, a scheduling flag field may be added to the second data packet, or a flag position for characterizing the scheduling flag may be a first value, where the first value may be N, and N is a positive integer greater than 0.

S211, the identification module acquires the second data packet.

In this embodiment, the transceiver module receives the second data packet and confirms that the second data packet belongs to the first data flow, and forwards the second data packet to the identification module after performing scheduling marking on the second data packet. The identification module acquires the second data packet, and performs the step S202 described above.

For example, table 2 below shows a schematic result of type identification and scheduling performed by the routing device on the data flow corresponding to each service.

TABLE 2

Service	Application identification	Category identification	Quintuple information	Scheduling indicia	Whether to schedule to VPN tunnels
						Game application 1	100	4	Is known to be	First value of	Is that
Game application 2	101	4	Is known to be	First value of	Is that
						Game application 3	116	4	Is known to be	First value of	Is that
Application market 1	2	2	Is known to be	Second value	Whether or not
						Application market 2	4	2	Is known to be	Second value	Whether or not
Payment application 1	502	1024	Is known to be	Second value	Whether or not
						Payment application 2	504	1024	Is known to be	Second value	Whether or not

In the present embodiment, the class identifier of the game application is 4, including a game application 1 with application identifier 100, a game application 2 with application identifier 101, and a game application 3 with application identifier 116; the category identification of the application market is 2, and the category identification comprises an application market 1 with the application identification of 2 and an application market 2 with the application identification of 4; the category identification of payment applications is 1024, including payment application 1 with application identification 502, and payment application 2 with application identification 504.

The game application with the category identification of 4 is a first-type service, and the service type of the corresponding data stream is the first-type service. The application market with the category identification of 2 and the payment application with the category identification of 1024 are both second-class services, and the service types of the corresponding data streams are both second-class services. The data flow is identified by the routing equipment, the scheduling marks of the first type of service are all first values, the first type of service is scheduled to the VPN channel for data transmission, the scheduling marks of the second type of service are all second values, and the data transmission is carried out through the common data transmission channel.

According to the data flow scheduling method provided by the embodiment of the application, after the routing equipment receives the first data packet of the first data flow, the service type of the first data flow is identified, and the identification result of the first data flow is obtained. The identification result comprises a first type of service and a second type of service, wherein the first type of service is used for representing the service with high requirements on transmission safety and transmission rate, and the second type of service is used for representing the service with low requirements on transmission safety and transmission rate. After the routing device obtains the identification result of the first data stream, the routing device may schedule and mark the received second data packet in the first data stream according to the identification result of the first data stream, so as to schedule the VPN tunnel for the second data packet of the first data stream. The second data packet is a data packet after the first data packet in time sequence. In the application, the routing equipment carries out service type identification on the data stream, carries out corresponding scheduling marking on the data stream according to the identification result, and schedules the data stream of the first type of service with high requirements on transmission safety and transmission rate to the VPN channel for data transmission, thereby ensuring the safety, confidentiality and transmission rate of the data stream in the data transmission process; the data streams of the second type of service with low transmission safety and low transmission rate requirements are scheduled to the common data transmission channel for data transmission, so that the data scheduling and forwarding of the common data transmission channel and the VPN channel according to the service types of the data streams are realized, the data transmission load of the common data transmission channel and the data transmission load of the VPN channel are reduced to a certain extent, the transmission quality of the common data transmission channel and the VPN channel can be further ensured, and the transmission efficiency of each channel is improved.

Optionally, in some embodiments, taking an example that the transceiver module of the routing device receives the data stream sent by the network side device as an illustration, the scheduling module of the routing device may parse the five-tuple information of the received data stream first to obtain the destination address of the data stream, and obtain the service type of the data stream according to the destination address. If the service type of the data stream is the first type of service, the data stream is received through the VPN interface, the data stream is forwarded to a receiving and transmitting module of the routing equipment, and the receiving and transmitting module drives a corresponding WiFi interface through WiFi and transmits the corresponding WiFi interface to a corresponding terminal; if the service type of the data stream is the second type of service, the data stream is received through a common interface (such as a common WAN interface), the data stream is forwarded to a transceiver module of the routing device, and the transceiver module transmits the data stream to a corresponding terminal through a WiFi interface corresponding to the WiFi drive, so that uplink transmission and downlink transmission of the data stream of the terminal service are realized.

According to the data flow scheduling method provided by the embodiment of the application, the identification module of the routing equipment can identify the service type of the data flow, and the identification result of the data flow is obtained. And correspondingly scheduling and marking the data streams according to the identification result, so that the data streams with different service types can be scheduled into corresponding data transmission channels for data forwarding transmission. For example, the data flow corresponding to the first type of service is scheduled to the VPN network, the data flow of the first type of service is forwarded through the VPN channel, and the VPN network is a virtual private line and has the function of guaranteeing the service quality of the network, so that the data flow of the first type of service can be scheduled to the VPN channel with high quality guarantee, and the use experience of a user for using the first type of service is improved.

The data stream scheduling method provided by the embodiment of the application can be applied to the electronic equipment shown in fig. 9. A block diagram illustrating a structure of an electronic device (e.g., electronic device 100) is provided in accordance with an embodiment of the present application. The electronic device 100 may include, among other things, a processor 310, an external memory interface 320, an internal memory 321, a universal serial bus (universal serial bus, USB) interface 330, a charge management module 340, a power management module 341, a battery 342, an antenna 1, a communication module 360, a sensor module 380, keys 390, an indicator 392, and the like.

The illustrated structure of the embodiment of the present application does not constitute a limitation of the electronic apparatus 100. More or fewer components than shown may be included, or certain components may be combined, or certain components may be split, or different arrangements of components. The illustrated components may be implemented in hardware, software, or a combination of software and hardware.

Processor 310 may include one or more processing units. For example, the processor 310 may include an application processor (application processor, AP), a modem processor, a graphics processor (graphics processing unit, GPU), an image signal processor (image signal processor, ISP), a controller, a memory, a video codec, a digital signal processor (digital signal processor, DSP), a baseband processor, and/or a neural network processor (neural-network processing unit, NPU), etc. Wherein the different processing units may be separate devices or may be integrated in one or more processors.

In an embodiment of the present application, the processor 310 may include an identification module, a scheduling module, a route configuration module, and a VPN module as shown in fig. 7.

The controller may be a decision maker that directs the various components of the electronic device 100 to coordinate their operations in accordance with instructions. Is the neural and command center of the electronic device 100. The controller generates an operation control signal according to the instruction operation code and the time sequence signal to finish the control of instruction fetching and instruction execution.

A memory may also be provided in the processor 310 for storing instructions and data. In some embodiments, memory in the processor 310 is a cache memory that holds instructions or data that the processor 310 has just used or recycled. If the processor 310 needs to reuse the instruction or data, it may be called directly from the memory. Repeated accesses are avoided and the latency of the processor 310 is reduced, thereby improving the efficiency of the system.

In some embodiments, the processor 310 may include an interface. The interfaces may include an integrated circuit (inter-integrated circuit, I2C) interface, an integrated circuit built-in audio (inter-integrated circuit sound, I2S) interface, a pulse code modulation (pulse code modulation, PCM) interface, a universal asynchronous receiver transmitter (universal asynchronous receiver/transmitter, UART) interface, a mobile industry processor interface (mobile industry processor interface, MIPI), a general-purpose input/output (GPIO) interface, a SIM interface, and/or a USB interface, among others.

The interface connection relationship between the modules illustrated in the embodiment of the present invention is only schematically illustrated, and does not limit the structure of the electronic device 100. The electronic device 100 may employ different interfacing means, or a combination of interfacing means, in embodiments of the present invention.

The charge management module 340 is configured to receive a charge input from a charger. The charger can be a wireless charger or a wired charger. In some wired charging embodiments, the charge management module 340 may receive a charging input of a wired charger through the USB interface 330. In some wireless charging embodiments, the charge management module 340 may receive wireless charging input through a wireless charging coil of the electronic device 100. The battery 342 is charged by the charge management module 340, and the electronic device 100 can be powered by the power management module 341.

The power management module 341 is configured to connect the battery 342, the charge management module 340 and the processor 310. The power management module 341 receives input from the battery 342 and/or the charge management module 340 to power the processor 310, the internal memory 321, the external memory interface 320, the display screen 394, the camera 393, the communication module 360, and the like. The power management module 341 may also be configured to monitor battery capacity, battery cycle number, battery health (leakage, impedance), and other parameters. In some embodiments, the power management module 341 may also be disposed in the processor 310. In some embodiments, the power management module 341 and the charge management module 340 may also be provided in the same device.

The wireless communication function of the electronic device 100 can be implemented by the antenna 1, the communication module 360, a modem, a baseband processor, and the like.

The antenna 1 is used for transmitting and receiving electromagnetic wave signals. Each antenna in the electronic device 100 may be used to cover a single or multiple communication bands. Different antennas may also be multiplexed to improve the utilization of the antennas. For example: the cellular network antennas may be multiplexed into wireless local area network diversity antennas. In some embodiments, the antenna may be used in conjunction with a tuning switch.

The communication module 360 may provide a communication processing module that is applied to the electronic device 100 and includes solutions for wireless communication such as wireless local area network (wireless local area networks, WLAN) (e.g., wireless fidelity (wireless fidelity, wi-Fi) network), bluetooth (BT), global navigation satellite system (global navigation satellite system, GNSS), frequency modulation (frequency modulation, FM), near field wireless communication technology (near field communication, NFC), infrared technology (IR), and the like. The communication module 360 may be one or more devices integrating at least one communication processing module. The communication module 360 receives electromagnetic waves via the antenna 1, modulates the electromagnetic wave signals and filters the signals, and transmits the processed signals to the processor 310. The communication module 360 may also receive a signal to be transmitted from the processor 310, frequency modulate it, amplify it, and convert it to electromagnetic waves for radiation via the antenna 1.

In this embodiment, the communication module 360 may include a transceiver module shown in fig. 7.

In some embodiments, the antenna 1 and the communication module 360 of the electronic device 100 are coupled such that the electronic device 100 may communicate with a network and other devices through wireless communication techniques. The wireless communication techniques may include the Global System for Mobile communications (global system for mobile communications, GSM), general packet radio service (general packetradio service, GPRS), code division multiple access (code division multiple access, CDMA), wideband code division multiple access (wideband code division multiple access, WCDMA), time division code division multiple access (time-division code division multiple access, TD-SCDMA), long term evolution (long term evolution, LTE), BT, GNSS, WLAN, NFC, FM, and/or IR techniques, among others. The GNSS may include a global satellite positioning system (satellite based augmentation systems, SBAS), a global navigation satellite system (global navigation satellite system, GLONASS), a beidou satellite navigation system (BeiDou navigation satellite system, BDS), a Quasi zenith satellite system (Quasi-Zenith satellite system, QZSS) and/or a satellite based augmentation system (satellite based augmentation systems, SBAS).

The external memory interface 320 may be used to connect an external memory card, such as a Micro SD card, to enable expansion of the memory capabilities of the electronic device 100. The external memory card communicates with the processor 310 through an external memory interface 320 to implement data storage functions. For example, files such as music, video, etc. are stored in an external memory card.

The internal memory 321 may be used to store computer executable program code comprising instructions. The processor 310 executes various functional applications of the electronic device 100 and data processing by executing instructions stored in the internal memory 321. The memory 121 may include a stored program area and a stored data area. The storage program area may store an application program (such as a sound playing function, an image playing function, etc.) required for at least one function of the operating system, etc. The storage data area may store data created during use of the electronic device 100 (e.g., audio data, phonebook, etc.), and so on. In addition, the memory 121 may include high-speed random access memory, and may also include non-volatile memory, such as at least one magnetic disk storage device, flash memory device, other volatile solid-state storage device, universal flash memory (universal flash storage, UFS), and the like.

The keys 390 include a power on key, a volume key, etc. Key 390 may be a mechanical key. Or may be a touch key. The electronic device 100 receives key 390 inputs, generating key signal inputs related to user settings and function controls of the electronic device 100.

The indicator 392 may be an indicator light, which may be used to indicate a state of charge, a change in charge, a message indicating a missed call, a notification, etc.

Embodiments of the present application also provide a system-on-a-chip (SoC) including at least one processor 801 and at least one interface circuit 802, as shown in fig. 10. The processor 801 and the interface circuit 802 may be interconnected by wires. For example, interface circuit 802 may be used to receive signals from other devices (e.g., a memory of electronic apparatus 100). As another example, interface circuit 802 may be used to send signals to other devices (e.g., processor 310 of electronic device 100). The interface circuit 802 may, for example, read instructions stored in a memory and send the instructions to the processor 801. The processor 801 may be the processor 310 of the electronic device 100. The instructions, when executed by the processor 801, may cause the electronic device to perform the various steps of the embodiments described above. Of course, the system-on-chip may also include other discrete devices, which are not particularly limited in accordance with embodiments of the present application.

Embodiments of the present application also provide a computer-readable storage medium including computer instructions that, when executed on an electronic device described above, cause the electronic device to perform the functions or steps performed by the electronic device 100 in the method embodiments described above.

Embodiments of the present application also provide a computer program product which, when run on a computer, causes the computer to perform the functions or steps performed by the electronic device 100 in the method embodiments described above. For example, the computer may be the electronic device 100 described above.

It will be apparent to those skilled in the art from this description that, for convenience and brevity of description, only the above-described division of the functional modules is illustrated, and in practical application, the above-described functional allocation may be performed by different functional modules according to needs, i.e. the internal structure of the apparatus is divided into different functional modules to perform all or part of the functions described above.

In the several embodiments provided by the present application, it should be understood that the disclosed apparatus and method may be implemented in other manners. For example, the apparatus embodiments described above are merely illustrative, e.g., the division of the modules or units is merely a logical functional division, and there may be additional divisions when actually implemented, e.g., multiple units or components may be combined or integrated into another apparatus, or some features may be omitted, or not performed. Alternatively, the coupling or direct coupling or communication connection shown or discussed with each other may be an indirect coupling or communication connection via some interfaces, devices or units, which may be in electrical, mechanical or other form.

The units described as separate parts may or may not be physically separate, and the parts displayed as units may be one physical unit or a plurality of physical units, may be located in one place, or may be distributed in a plurality of different places. Some or all of the units may be selected according to actual needs to achieve the purpose of the solution of this embodiment.

In addition, each functional unit in the embodiments of the present application may be integrated in one processing unit, or each unit may exist alone physically, or two or more units may be integrated in one unit. The integrated units may be implemented in hardware or in software functional units.

The integrated units, if implemented in the form of software functional units and sold or used as stand-alone products, may be stored in a readable storage medium. Based on such understanding, the technical solution of the embodiments of the present application may be essentially or a part contributing to the prior art or all or part of the technical solution may be embodied in the form of a software product stored in a storage medium, including several instructions for causing a device (may be a single-chip microcomputer, a chip or the like) or a processor (processor) to perform all or part of the steps of the method described in the embodiments of the present application. And the aforementioned storage medium includes: a U-disk, a removable hard disk, a Read Only Memory (ROM), a random access memory (random access memory, RAM), a magnetic disk, or an optical disk, or other various media capable of storing program codes.

The foregoing is merely illustrative of specific embodiments of the present application, but the scope of the present application is not limited thereto, and any changes or substitutions within the technical scope of the present application should be covered by the scope of the present application. Therefore, the protection scope of the present application shall be subject to the protection scope of the claims.

Claims

1. A data flow scheduling method, applied to a routing device, where the routing device includes a first channel, and the first channel is a virtual private network VPN channel, the method includes:

the routing equipment receives a first data packet in a first data stream sent by a terminal; the first data packet is one of a plurality of data packets of the first data stream;

the routing equipment acquires the service type of a first data stream where the first data packet is located; the service types comprise a first type of service, wherein the first type of service represents a service with high requirements on transmission safety and transmission rate;

if the service type of the first data flow is the first type of service, when the routing equipment receives a second data packet, the routing equipment performs scheduling marking on the first data flow; the second data packet is one of a plurality of data packets of the first data stream, and the second data packet is a data packet received after the first data packet in time sequence;

2. The method of claim 1, wherein after the routing device receives the first packet in the first data stream sent by the terminal, the method further comprises:

the routing equipment judges whether a first data stream where the first data packet is located has a scheduling mark or not; the scheduling mark is a mark based on the data stream, and the scheduling mark is recorded in connection tracking information of the data stream;

and if the first data flow does not have the scheduling mark, the routing equipment acquires the service type of the first data flow where the first data packet is located.

3. The method of claim 2, wherein after the acquiring the traffic type of the first data stream, the method further comprises:

the routing equipment dispatches the first data packet to a second channel for data transmission; the second channel is a common data transmission channel.

4. The method according to claim 2, wherein the method further comprises:

and if the first data flow has the scheduling mark, the routing equipment schedules the first data packet to the first channel for data transmission.

5. The method of claim 1, wherein after the acquiring the traffic type of the first data stream, the method further comprises:

if the service type of the first data stream is the first type of service, the routing equipment acquires and clears the connection tracking information of the first data stream; the connection tracking information includes a scheduling lane of the first data stream.

6. The method according to any one of claims 1-5, wherein the routing device obtaining the traffic type of the first data flow according to the quintuple information of the first data packet comprises:

the routing equipment obtains the class identifier of the service of the first data flow where the first data packet is located;

and the routing equipment acquires the service type of the first data flow according to the corresponding relation between the preset service type and the category identifier.

7. The method according to any of claims 1-6, wherein the traffic types comprise a second type of traffic, the second type of traffic characterizing traffic with low demands on transmission security and transmission rate; the obtaining the service type of the first data stream includes:

if the service type of the first data stream is the second type service or the routing equipment does not acquire the service type of the first data stream, the routing equipment schedules the first data packet to a second channel for data transmission; the second channel is a common data transmission channel.

8. The method according to any one of claims 1-6, further comprising:

the routing equipment receives a first operation of a user and acquires configuration parameters of the first channel; the configuration parameters comprise addresses of virtual network server VPN servers corresponding to the first channel;

the routing equipment sends a VPN connection establishment request carrying the configuration information to the VPN server according to the address of the VPN server;

and the routing equipment receives a response returned by the VPN server for the request for establishing the VPN connection, and establishes the VPN connection with the VPN server.

9. The method of claim 8, wherein after establishing a VPN connection with the VPN server, the method further comprises:

the routing equipment constructs the first channel and defines a first interface corresponding to the first channel;

the scheduling the second data packet in the first data stream to the first channel for data transmission includes:

and scheduling a second data packet in the first data stream to the first channel through the first interface for data transmission.

10. An electronic device is characterized by comprising a receiving module, an identification module, a marking module and a scheduling module; the electronic equipment comprises a first channel, wherein the first channel is a virtual private network VPN channel;

the receiving module is used for receiving a first data packet in a first data stream sent by the terminal; the first data packet is one of a plurality of data packets of the first data stream;

the identification module is used for acquiring the service type of a first data stream where the first data packet is located; the service types comprise a first type of service, wherein the first type of service represents a service with high requirements on transmission safety and transmission rate;

the marking module is used for carrying out scheduling marking on the first data flow when receiving a second data packet when the service type of the first data flow is the first type of service; the second data packet is one of a plurality of data packets of the first data stream, and the second data packet is a data packet received after the first data packet in time sequence;

and the scheduling module is used for scheduling the second data packet in the first data stream to the first channel for data transmission according to the scheduling mark of the first data stream.

11. The electronic device of claim 10, wherein the electronic device comprises a memory device,

the identification module is used for judging whether a first data stream where the first data packet is located has a scheduling mark or not; the scheduling mark is a mark based on the data stream, and the scheduling mark is recorded in connection tracking information of the data stream;

and the identification module is used for executing the step of acquiring the service type of the first data flow where the first data packet is located when the first data flow does not have the scheduling mark.

12. The electronic device of claim 11, wherein the electronic device comprises a memory device,

the scheduling module is used for scheduling the first data packet to a second channel for data transmission; the second channel is a common data transmission channel.

13. The electronic device of claim 11, wherein the electronic device comprises a memory device,

and the scheduling module is used for scheduling the first data packet to the first channel for data transmission when the first data stream has the scheduling mark.

14. The electronic device of claim 10, wherein the electronic device comprises a memory device,

the scheduling module is used for acquiring and clearing connection tracking information of the first data stream when the service type of the first data stream is the first type of service; the connection tracking information includes a scheduling lane of the first data stream.

15. The electronic device of any one of claims 10-14, wherein the electronic device comprises a memory device,

the identification module is specifically configured to obtain a class identifier of a service of a first data flow where the first data packet is located; and acquiring the service type of the first data stream according to the corresponding relation between the preset service type and the category identifier.

16. The electronic device of any of claims 10-15, wherein the traffic type comprises a second type of traffic that characterizes traffic with low requirements for transmission security and transmission rate

The scheduling module is configured to schedule the first data packet to a second channel for data transmission when the service type of the first data stream is the second type service or when the identification module does not acquire the service type of the first data stream; the second channel is a common data transmission channel.

17. The electronic device of any of claims 10-16, further comprising a virtual private network, VPN, module,

the receiving module is used for receiving a first operation of a user and acquiring configuration parameters of the first channel; the configuration parameters comprise addresses of virtual network server VPN servers corresponding to the first channel;

The VPN module is used for sending a VPN connection establishment request carrying the configuration information to the VPN server according to the address of the VPN server;

and the VPN module is used for receiving the response to the VPN connection establishment request returned by the VPN server and establishing VPN connection with the VPN server.

18. The electronic device of claim 17, wherein the electronic device further comprises a routing configuration module;

the route configuration module is used for constructing the first channel and defining a first interface corresponding to the first channel;

the scheduling module is specifically configured to schedule the second data packet in the first data stream to the first channel through the first interface for data transmission.

19. A computer readable storage medium comprising computer instructions which, when run on an electronic device, cause the electronic device to perform the method of any of claims 1-9.