JP2003338843A - Routing apparatus and routing method - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To efficiently utilize resources by performing traffic management of an IP packet transmitted between LANs when a virtual private network (VPN) is constructed by utilizing the Internet for connecting the LANs. <P>SOLUTION: In the routing apparatus 10 for the IP packet, arbitrary connecting lines different in band velocity are bundled and a network communication is performed at the total band velocity such that the IP packet is divided into a most efficient packet size corresponding to the band velocity of each line and capsuled by a VPN protocol and at the same time, packets are parallel exchanged on a plurality of lines. Namely, the routing apparatus 10 transmits the IP packet while dividing it into data abc...xyz in proportion to the band velocity of lines 51-56. When the line 51 is cut off, the similar operation is performed on the remaining lines. <P>COPYRIGHT: (C)2004,JPO

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a virtual private network (VPN) between specific bases that uses a combination of a plurality of private lines and Internet connection lines.
k) A routing device and a routing method used for the construction device.

[0002]

2. Description of the Related Art In many cases, companies are unevenly distributed in multiple regions (bases), and when connecting them with a network,
It is generally constructed using a dedicated connection line, and multiple nodes (Personal Computer or Work S
There is a device that performs network communication such as tation, and therefore it may be referred to as a PC or WS), and communication between nodes between bases is performed according to individual schedules without interlocking with other nodes. It is common.

FIG. 1 shows a basic configuration diagram of a network using a conventional leased line connection line. In FIG. 1, a plurality of nodes (however, one node is shown as a representative in the figure) is connected to the LAN to connect to a corporate LAN or a regional LAN.
AN is formed. Now, a dedicated connection router is connected to these LANs and is connected to a dedicated line connection line via a carrier. In such a network, data is transmitted from one node to the other node via a leased line connection line. Therefore, since the dedicated line connection line is used, there is almost no problem in ensuring security, but there is a problem that running cost is high.

When a dedicated connection line is used, basically the line band (the amount of data that can be transmitted within a fixed time) can be selected from many types, but ISP (Internet Service Pr
(Ovider: Internet service provider) The current situation is that the bandwidth that can be selected is small for the Internet connection provided. Therefore, in order to secure the required line speed, there is a problem that it is necessary to contract for a line that is several times the required line speed.

Also, with the explosive spread of the Internet in recent years, many companies have started to connect to the Internet from the corporate network (intranet), and have constructed a virtual private network using the VPN protocol.
It has become possible to construct a network cheaper than a dedicated line.

FIG. 2 shows the basic configuration of the conventional Internet and virtual private network. As shown in FIG. 2, when communication is performed between nodes installed between two bases A and B, a VPN device or a VPN server is installed in each base, and the V
The PN device encrypts / decrypts the IP packet from the node. Since the line used at that time is the Internet, a temporary leased line can be constructed only by the connection fee and communication cost to the nearest ISP regardless of the distance between the bases.

However, V
When making a PN connection, a global IP address is required. Therefore, if a contract is made to lend a fixed (static) global IP address from an ISP, it will naturally be more expensive than a non-lending contract. Therefore, the more advanced and highly stable M
A method of increasing redundancy of Internet connection by using PLS (Multi Protocol Label Switching) technology has begun to be used. However, to use this technology, ISP's own M
It is difficult to spread it to general companies because a router device compatible with PLS and MPLS is required.

Variable (dynamic) global IP address (fixed (static) to the global IP address is always fixed)
Although it is possible to construct a VPN with a global IP address and a variable (dynamic) global IP address that is temporarily assigned from the ISP, etc., the global IP assigned by the ISP to the connecting base
The address may change (change) irregularly, and
Since the cycle differs depending on the ISP, there arises a problem that the connection on the Internet has to be interrupted.

Further, in the constant connection of DSL (Digital Subscriber Line) which is excellent in cost performance, there are relatively few ISPs who have contracts for a fixed global IP address, and the maintenance and equipment of the ISP are relatively small. Since services are often interrupted due to problems such as, there is a problem in using it as a line for an inter-company network.

Further, there may be a plurality of nodes at each networked base, and if there are many nodes, hundreds of nodes may exist. The nodes between the bases usually perform data transmission asynchronously with each other without being aware of the data transmission of other nodes, and as a result, various IPs are not controlled on the line connecting the bases. Packets will fly around. This is very wasteful in sharing limited resources (bandwidth).

Further, even though the VPN connection uses the IPSec (IP Security Protocol) technology, which is said to be relatively strong in security, since it is encrypted by software, as long as the data is transmitted via the Internet,
It cannot be said that it is perfect for interception and decryption. Furthermore, when connecting to the Internet using a global IP address, if a malicious third party cannot impersonate the IP address and attempt to make a connection (spoofing), it will enter the inside of the LAN. There is a fear.

[0012]

DISCLOSURE OF THE INVENTION The invention of the present application is a virtual leased line using the Internet for connecting LANs between companies.
The purpose is to eliminate the above-mentioned problems even when (VPN) is constructed. That is, an object of the present invention is to construct a VPN using a line including a private line / INS (registered trademark) network and an Internet connection line.
Even if communication is temporarily stopped due to line maintenance, accidents, equipment malfunctions, etc. by the carrier and ISP itself,
Efficient resources are ensured by ensuring that links between established nodes are not broken and by managing traffic (traffic control) of IP packets transmitted between LANs.
It is to provide usage of (bandwidth).

Further, an object of the present invention is that even if the global IP address assigned by the ISP to each connecting base may be changed (changed) irregularly, or if the cycle varies depending on the ISP, the base may be changed. The goal is not to interrupt the connection between them.

It is another object of the present invention to further secure the safety against interception / decryption of data via the Internet when a VPN connection is made by IPSec encryption.

Another object of the present invention is to make it possible to secure the required band speed even when there are few options for the band speed (line speed).

Another object of the present invention is to provide a variable global I
Even if you make a cheap connection contract with P address loan, VP
N can be constructed.

Further, an object of the present invention is to cope with the act of impersonating an IP address by a malicious third party and then attempting to make a connection when connecting to the Internet using a global IP address. It is to prevent entry into the LAN.

[0018]

The present invention provides an IP having a plurality of WAN side connection interfaces connected to arbitrary connection lines having different band speeds and line providers and one LAN side connection interface connected to a LAN. A packet routing device, wherein the routing device bundles a plurality of arbitrary connection lines having different band speeds and line providers, and performs network communication at the total band speed, so that the most efficient matching of the band speed is achieved. A routing device capable of dividing and generating into a good packet size, encapsulating with a VPN protocol, and transmitting and receiving packets in parallel on a plurality of lines.

The present invention is an IP packet routing device having a plurality of WAN side connection interfaces connected to arbitrary connection lines having different band speeds and line providers and one LAN side connection interface connected to a LAN. Then, the routing device bundles a plurality of arbitrary connection lines having different band speeds and line providers and performs network communication at the total band speed. Therefore, the protocol type (TC
(P / UDP / ICMP, etc.) is determined, IP traffic is sorted by buffering (instantaneous storage) and line distribution processing according to each protocol characteristic, and the buffered data is adjusted to the band speed of each line. The routing device is capable of dividing and generating the most efficient packet size, encapsulating the packet with the VPN protocol, and transmitting and receiving packets in parallel on a plurality of lines.

The present invention also provides a plurality of WAN side connection interfaces connected to arbitrary connection lines having different band speeds and line providers and one LAN connected to the LAN.
An IP packet routing device having a side connection interface, the routing device comprising a central processing unit, a LAN side interface, and a plurality of WAs.
LAN controller connected between N side interfaces, W
The central processing unit has an AN line connection / bandwidth monitoring control unit, a WAN line global IP address monitoring and server registration processing unit, an IP packet division / coupling processing unit, a WAN control unit, and a plurality of WAN side interfaces 17. , The LAN control unit, the WAN line connection / bandwidth monitoring control unit, the WAN line global IP address monitoring and server registration processing unit, the IP packet division / coupling processing unit,
And a routing device for controlling the WAN controller.

Furthermore, the present invention is a routing method for transmitting and receiving data using arbitrary connection lines having different band speeds, wherein a plurality of arbitrary connection lines having different band speeds are bundled and the total band speed is obtained. Is a routing method in which network communication is performed, the packet size is divided into the most efficient packet size according to the band speed of each line, the packet is encapsulated by the VPN protocol, and the packets are transmitted and received in parallel on the plurality of connection lines.

Further, the present invention is a routine method for transmitting and receiving data using arbitrary connection lines having different band speeds, wherein a plurality of arbitrary connection lines having different band speeds and line providers are bundled. In order to perform network communication at the total bandwidth speed, a plurality of protocol types of the IP packet are determined, IP traffic is sorted by buffering or line distribution processing according to the characteristics of the plurality of protocol types, and the buffering is performed. The divided data is divided into the most efficient packet size according to the bandwidth speed of the plurality of connection lines, and then the VPN
A routing method in which a protocol is encapsulated and packets are transmitted and received in parallel on the plurality of connection lines.

As a result, a plurality of ISPs (Internet Serv
By treating the Internet connection line and dedicated connection line etc. provided by the line provider such as ice provider) and carrier as one line, the remaining line can be used even if one line is physically disconnected. It is possible to maintain the connection between the two bases. In addition, by incorporating a dedicated line into one or more of the lines used, it is possible to have the same level of redundancy as a dedicated line.

At the same time, by transmitting and receiving information such as the global IP address allocated from the own ISP using the undisconnected line, the global IP address allocated by the ISP to each connecting base is irregularly changed. Even if there is (change), again, ISP
Therefore, even if the cycle is different, the connection between bases will not be interrupted.

Further, since the speed desired by the user can be created by the total band speed of the plurality of Internet connection lines and the dedicated connection line, the required band speed can be created even if the line speed options are small. it can.

Further, the protocol type (TCP / UDP / ICMP, etc.) of transmitted / received IP packets is judged, and IP traffic is sorted by buffering (instantaneous accumulation) and line distribution processing according to the respective protocol characteristics. In addition, by dividing and generating the buffered data into the most efficient packet size that matches the bandwidth speed of each line, encapsulating with the VPN protocol, and transmitting and receiving packets in parallel on multiple lines,
It is possible to organize IP traffic between bases and perform data transmission by making maximum use of the bandwidth.

Even if the user equipment does not have a fixed global IP address, an address server provided by a third-party organization (registration while constantly updating a changing global IP address, or the latest global IP of a connection partner) (A server device that responds to address inquiries)
By using the present invention, the present invention can be used only on a line contracted with the ISP with a variable global IP address, and when a leased line / frame relay connection is used together, information such as an IP address can be sent and received through the line. , Doesn't even need an address server.

Further, according to the present invention, a plurality of packet data are accumulated / divided according to the respective band speeds of all the connected lines and transmitted in parallel to all the lines and received in parallel on the receiving side. Since the packets are classified and combined again into the original packet data, even if one connection on the Internet is intercepted and decrypted, it is impossible to generate the complete original packet data.

[0029]

BEST MODE FOR CARRYING OUT THE INVENTION A first embodiment of the present invention will be described below with reference to the drawings.

The configuration of the main routing device of the present invention is shown in FIG.
Shown in. In FIG. 3, a main routing device (packet delivery) 10 according to the present invention is an IP (Internet Protocol).
It is a routing device for packets (all data used in Internet protocols are exchanged in units of data sets called packets). The main routing device 10 includes a LAN side interface 11 connected to a LAN (Local Area Network), a plurality of WAN (Wide Area Network) side interfaces 17 connected to connection lines, and these LAN side interfaces 11
And a plurality of WAN-side interfaces 17, a LAN control unit 12, a WAN line connection / bandwidth monitoring control unit 13, a WAN line global IP address monitoring and server registration processing unit 14, an IP packet division / coupling processing unit 1
5, the WAN control unit 16, and the central processing unit 18, the central processing unit 18, the LAN control unit 12, WAN line connection and bandwidth monitoring control unit 13, WAN line global IP address monitoring and server registration processing unit 14. , IP packet division / combination processing unit 15, and WAN control unit 16
It controls the entire device.

The functions of these control units will be described below.
The LAN control unit 12 performs a process regarding an IP packet sent from the LAN side and a process regarding an IP packet sent to the LAN side interface.

WAN line connection / bandwidth monitoring control unit 13
Always monitors the connection status and bandwidth of the line connected to the WAN side, passes the basic information of the packet division ratio to the IP packet division / coupling processing unit 15, and detects the disconnection of the line in use. If so, reconnection processing is performed.

The WAN line global IP address monitoring and server registration processing unit 14 monitors the global IP addresses assigned to all WAN side interfaces connected to the Internet, and divides them into the IP packet division / coupling processing unit 15. Providing destination information at the time of packet generation, and global I when using an address server
When the P address changes, registration update processing to the server is performed.

The IP packet division / combination processing unit 15 uses L
A packet is generated by dividing an IP packet sent from the AN to the WAN side, and the IP packet sent from the WAN to the LAN side is combined.

The WAN control unit 16 performs processing regarding IP packets sent from the WAN side and processing regarding IP packets sent to the WAN side interface.

The function of the entire routing device of the present invention will be described.

By connecting the routing devices according to the present invention installed in remote locations to each other through a network, a plurality of arbitrary connection lines having different band speeds provided by a plurality of line carriers (carriers, ISPs, CATV carriers, etc.) are bundled. , Network communication at the speed of the total bandwidth (the amount of data that can be sent and received within a certain period of time), and divide it into the most efficient packet size according to the bandwidth speed of each line, and then encapsulate with the VPN protocol (by VPN) Encapsulation means that the IP header (IP
The entire IP packet consisting of a data part in which the actual data is placed, and an IP header that describes the destination and return destination of the packet) is encrypted, and an IP packet with that data part is generated, and the destination is used as the IP header. Partner's VPN
By setting the device and the return destination to its own device, the actual I
Security is applied to P packets. ),
Packets are sent and received in parallel on multiple connection lines.

By transmitting and receiving packets in parallel on a plurality of connection lines having different band speeds in this way, it is possible to complicate the decoding work when intercepted as compared with the case where a single line is used, so that the Internet line It is possible to connect users' networks with each other safely, easily and at low cost even when using. If some of the multiple connection lines are disconnected, the remaining normal lines will be used to reconnect and check the connection.
Redundancy and reliability can be improved more than when a single line is used.

Further, by using a plurality of connection lines, even if one line is disconnected, another line being connected is used to make a global IP address (an IP address that can be connected to the Internet is a global IP address. It is possible to send and receive connection confirmation, etc., and it is possible to restore connection faster than using other servers on the Internet.

FIG. 4 is an overall configuration diagram in which two bases A and B are connected by a plurality of lines having different band speeds using the main routing device according to the present invention.

In FIG. 4, the LAN side interface 1 of the main routing apparatus 10 on the site A side according to the present invention.
1 is connected to the LAN on the site A side, and the WAN interface 17 is connected to the routing device, access router device, modem devices 31 to 36, and the like. Further, a routing device / access router device / modem device 31 to 3
6 and the like are connected to a dedicated line, an INS network, the Internet or the like via carriers 41 and 42, ISPs 43, 44 and 46, CATV 45 and the like. These leased lines,
Carriers 41, 42, ISPs 43, 44, 46 and CATs on the base B side are connected to the INS network or the Internet.
The WAN side interface 17 of the main routing apparatus 10 is connected via the V45, the routing apparatus / access router apparatus / modem apparatuses 31 to 36, and the LAN side interface 11 of the main routing apparatus 10 is connected to the LAN of the site B. . In this way, location A
And the base B are connected to each other for communication or data transmission.

When the main routing device on the site A side and the main routing device on the site B side shown in FIG. 4 are connected and a VPN link is established on each line,
The lines imagined from the main routing device 10 in the present invention are the six virtual leased lines (VPN lines) 51 to 56 shown in FIG.

However, the nodes (PC (Personal Computer) and WS (Work Statio) existing in the LANs of the bases A and B, respectively.
n), etc.), the lines that are imaged from the network connection devices are all connected by the routing device according to the present invention, although the VPN lines 51 to 56 are actually independently established (see FIG. 5). Since the above lines are bundled and processed, there is only one virtual leased line from the node as shown in FIG.

The case of performing division parallel transmission of IP packets according to the present invention will be described with reference to FIGS. 7, 10 and 11.

In FIG. 7, the PC of the node 21 at the site A
When data is transmitted from 1 to the PC 2 of the node 22 at the location B, the data abc .... xyz sent is the location B.
In the RT1 of the main routing device 10 on the side, the packet is divided into 6 IP packets according to the number of 6 connection lines,
It is transmitted to the RT2 side of the main routing device 10 on the base B side. In this case, six connection lines having different band speeds are bundled, and the packet is divided into the most efficient packet size according to the band speed of each line so that the network communication can be performed at the total band speed. Encapsulates by protocol and transmits / receives packets in parallel on multiple lines. At that time, as the header, the sender, the recipient,
The division position, the total number of divisions, the actual transmission source and the actual reception destination are generated and given to each data.

Now, it is assumed that the data abc ... xyz is transmitted from the PC1 of the node 21 of the base A to the PC2 of the node 22 of the base B. The main routing device at site A is connection line 5
1 to 56 are bundled and the data abc ... xyz is divided according to the amount proportional to the band speed of the connection line. That is, data abc ... hi on line 51, data jklmn on line 52, data opqr on line 53, data stu on line 54, data vwx on line 55, and line 56 on line 56. Is the data yz
Are proportionally distributed. Then, the headers of the transmission source, the reception destination, the division position, the total division number, the actual transmission source, and the actual reception destination are added to each data. For example, on the line 51, RT1 is the transmission source, RT2 is the reception destination, 1 is the division position, 6 is the total division number, and PC is the actual transmission source.
1, and PC2 is added as the actual receiving destination. The same applies to the connection lines 52 to 56.

By transmitting in this way, all the data abc ... xyz can reach the base A almost at the same time. Therefore, in the main routing device of the base A,
Based on these headers, the divided data are combined and sent to the PC 2 as data abc ... xyz. Therefore, network communication can be performed with the highest transmission efficiency.

In order to facilitate understanding, a case where the number of connection lines is 3 lines a, b, c will be described. Of course, the number of connection lines is not limited to three, and in the case of more lines, data division is performed in the same manner.

Line Definition Line a: Upstream 1.0 Mbps / downstream 8.0 for both site A and site B
ADSL line via Mbps internet b: Base A FTTH via 30 Mbps internet both upstream and downstream FTTH line B via 10 Mbps internet both upstream and downstream c: 5.0 Mbps upstream / downstream at both A and B .
CATV via 0 Mbps Internet VPN connection that bundles the above 3 lines a, b and c at points A and B
Suppose it is done between.

Originally, since all the lines go through the Internet, TCP /
Although bandwidth recognition is dynamically changed by referring to IP RTT (Round Trip Time), it is assumed in this example that the bandwidth is fixed at the following line speed for convenience.

Line a: 1.0 Mbps Line b: 10.0 Mbps Line c: 5.0 Mbps When the data is divided, the division ratio is 1 / line.
(1 + 10 + 5) = 1/16 = 0.06 (6%). Similarly, 63% for line b and 31% for line C,
The priority of the line use is line b (first place), line c (second place), and line a (third place).

As described above, 6% of the data amount is used for the line a.
Then, if 63% is divided into the line b and 31% is divided into the line c for transmission and reception, the transmission and reception efficiency is the best.

Next, the IP packet transmission process will be described with reference to the block diagram of the routing device of FIG. 3 and the flowchart of FIG.

First, the data sent to the LAN interface 11 is taken out by the LAN control unit 12. next,
It is determined whether or not the destination is the WAN-side connection destination IP address. If it is not the IP address of the connection destination, it is checked whether it is addressed to its own device, and if it is addressed to its own device, appropriate processing is carried out. If it is the connection destination IP address, the packet is passed to the IP packet division / combination processing unit 15.

In the IP packet division / combination processing unit 15,
First, the IP packet division processing is performed on the basis of the connected WAN lines and the respective band information from the WAN line connection / bandwidth monitoring control unit 13. Next, from the WAN line global IP address monitoring processing unit 14, each WAN is
Obtain the source and destination IP addresses of the connection, and then WAN
WAN controller 1 generates an IP packet after connection is divided.
Pass to 6.

The WAN control unit 16 sends out the divided IP packets from the respective WAN interfaces 17, and waits for a packet reception completion notification from the main routing device 11 of the connection partner. It is judged whether or not the packet reception completion notification is received, and if it is received, the processing is terminated and the next packet processing is performed. If not received, it is determined whether a packet retransmission request has been received. If so, the WAN interface that received the packet retransmission request is used to retransmit the data sent to the missing WAN interface. The process returns to the step of determining whether the packet reception completion notification has been received. If it has not been received, it is determined whether or not the reception of the packet reception completion notification has timed out. If not, the process returns to the step of determining whether the packet reception completion notification is received again.

Next, the fragmented packet arriving at the RT2 side is regenerated in the original packet state and sent to the PC2. The IP packet receiving process will be described with reference to the flowchart of FIG.

First, the WAN control section 16 takes out the data sent to the WAN interface 17. Next, it is determined whether or not all the divisions have been received. If the reception is completed, a packet reception completion notification is transmitted to the main routing device 10 of the connection partner, and all the received fragmented IP packets are passed to the WAN control unit 16. The WAN control unit 16 combines the packets based on the division position / total division number of the divided packets to generate a packet before the division and sends it to the LAN control unit 12. The LAN control unit 12 sends the received packet from the LAN interface 11 to the LAN, ends the process, and moves to the next packet process.

If reception of all divisions has not been completed, it is determined whether or not division data reception has timed out. If not, the procedure returns to the determination of whether reception of all divisions has been completed. If it has timed out, it is judged whether or not the retransmission request transmission count has been exceeded. If not, a packet retransmission request for the missing portion is sent from the WAN interface with a wide bandwidth, which has already received the packet, and the main routing of the connection partner. The data is transmitted to the device 11, and the process returns to the determination as to whether or not all the divisions have been received. If it is over, the process is terminated and the next process is performed.

Next, variable global address management using the address server will be described with reference to FIG.

This is not necessary when the WAN side line includes a line that is difficult to disconnect such as a dedicated connection line,
When all the lines are composed of variable global IP addresses, the address server 60 becomes valid. This is because by registering the global IP address in the address server 60 each time the global IP address of the own line is changed, when the line is disconnected, the global IP address of the connection partner of the own line is set to the address server 60.
This is because it is possible to automatically perform the reconnection process by inquiring of.

The address server 60 stores the site name, line name,
The CGI (Common Gateway Interf) is used to register a record consisting of three global IP addresses and to reply the global IP address of the connection destination from the site name and line name.
ACE) program or the like, and the routing device 10 in the present invention uses HTTPS (Hyper Text Transfer Protocol).
col Secure) (Web access protocol HTTP encryption protocol) Access is made by communication encrypted by a protocol or the like.

Further, the function of preventing unauthorized connection (spoofing) to the main routing device of the present invention will be described.

When the Internet is used, it is impossible to trust whether or not the other party who can connect can be really connected only by the IP address of the other party. It rewrites the source IP address in the header of the IP packet,
This is because there are also IP packets that connect as if they were the same person. In the routing device according to the present invention, when the line is reconnected, an unauthorized connection is made by determining whether or not the connection is actually from the other party's main routing device 10 through the line that maintains the connection after the VPN link is established. It becomes possible to prevent it.

Next, with reference to FIG. 9 and FIG. 12, the illegal connection preventing operation at the time of line restoration will be described.

In FIGS. 9 and 12, the main routing device 10 on the site A side generates a password for temporary use, and sends the password to the main routing device 10 on the site B side via the VPN line 57 which is maintaining the connection. Send to. Upon receiving this password, the main routing device 10 on the site B side returns this password using the restored VPN line 58. Main routing device 1 on site A side
0 compares and collates the generated and transmitted password with the returned password. As a result of comparison and verification, if the passwords match, the recovered line 57 is used to transmit the authentication success, and the line 58 is also used thereafter. As a result of comparison and collation, if the passwords do not match, it is regarded as an unauthorized connection, the authentication failure is notified using the VPN line 56 in the connection position, and the connection of the line 58 is disconnected.

Next, the main routing device according to the second embodiment of the present invention, in which the use efficiency of the transmission line is improved, will be described.

Characteristics of Protocols IP protocols often used in companies are roughly classified as follows.
It is mainly composed of three protocols, TCP / IP, UDP / IP, and ICMP / IP.

TCP / IP is based on the IP protocol.
ransmission Control Protocol
This is a protocol with improved reliability by confirming transmission / reception, and is used for communication such as file transfer, mail transmission / reception, and Web access, which requires low reliability in real time but requires certainty.

Although UDP / IP is based on the IP protocol, it is a low reliability protocol called User Datagram Protocol (user datagram protocol) because transmission / reception confirmation is not performed. Used for real-time communication such as video distribution.

The last ICMP / IP is based on the IP protocol, but Internet Control Message Proto
It is a protocol for controlling the IP protocol called col (Internet Control Message Protocol), and is used for error-related notification, connection confirmation of the other party by echo inspection, and the like.

The main routing device according to the present invention is an IP
The above three protocols (TCP / IP, UDP / IP, ICMP / IP) depending on the protocol type described in the header.
Are classified and controlled independently of each other, so that the characteristics of each protocol are maximized.

Arrangement of IP traffic Various types of IP packets are transmitted and received between the bases A and B, from those having the maximum length to the packets whose data itself is short and most of which are occupied by IP headers or TCP headers. Up to.

When network communication is performed between the sites A and B using the main routing device according to the present invention, an acknowledgment (ACK: Acknowledgment) corresponding to data transmission is returned. In particular, when the main routing device according to the present invention is used to divide a packet and send it to each line, if an IP packet with a short data size is also divided and sent, an IP packet with a short data part is sent to a long header part. It will be sent and received. In the case of TCP / IP, no matter how short the data part is, since a header part of at least 40 bytes is required, the efficiency becomes worse as it is. However, since this header part is indispensable for using the Internet protocol, this header part cannot be omitted.

In order to avoid such inefficiency, the routing device of the present invention accumulates data until it reaches a certain fixed amount of data in accordance with the total band speed of VPNs, and divides the data into a plurality of parts. It is possible to improve by reducing the number of packets that collectively transmit and receive IP packets.

However, in the method of always accumulating until a fixed amount of data is filled, there is a possibility that the data is not transmitted forever, so it is necessary to include the function of the timing of the transmission start depending on the time.

Since many data sent and received using UDP / IP require real-time property,
If the data is once stored and then transmitted, inconvenience occurs such as fluctuations in the video and audio of the TV conference. Therefore, only TCP / IP is stored, and other IP packets are transmitted in real time so that no inconvenience occurs. As a result, UDP / IP packets are transmitted and received even while accumulating TCP / IP. Moreover, by adjusting the transmission start timing depending on the amount of data to be accumulated and the time according to the user's environment and the application that the user wants to prioritize, it is easier to construct the communication environment required by the user compared to the case of using only a normal router. Become. This is because a general router or modem device connected to the Internet performs the requested IP packet transmission processing in the order of reception.

The operation of TCP / IP packet processing of the main routing device according to the second embodiment of the present invention will be described with reference to FIG.

Now, data ABC ... XYZ is sent from the PC1 of the node 21 of the base A to the PC3 of the node 22 of the base B.
Similarly, it is assumed that data abc ... lmn of different data amounts are transmitted from PC2 to PC4. When the main routing device 10 reaches a predetermined amount of data or when a predetermined time elapses, the main routing device 10 operates on each data in the same manner as described in the first embodiment of the present invention. According to the band speed of the bundled lines, the packet size is divided into the most efficient packet size, that is, the data amount proportional to the band speed of the line.

In the case of the second embodiment shown in FIG. 13,
The data ABC ... XYZ from the PC1 of the node 21 is divided according to the amount proportional to the band speed of the connection line. That is, the data ABC ... HI on the line 51 and the data JKLMN on the line 52.
However, the data OPQR is connected to the line 53 and the data STQ is connected to the line 54.
U, the data VWX is proportionally distributed to the line 55, and the data YZ is proportionally distributed to the line 56. Further, the data abc ... lmn from the PC 2 of the node 21 is transmitted to the line 51 as data a.
bcd, data on line 52, efg, data on line 53
hij, data kl on line 54, data m on line 55
, And the data n are proportionally distributed to the line 56. Then, on the line 51, the data ABC ... HI from the PC2 of the node 21 and the data ab from the PC2 of the node 21 are transmitted.
cd are combined to form combined data ABC ... Hiabcd,
Further, RT1 and RT2 and a header portion of the combined information are added to the combined data and transmitted. Lines 52-56
Is also the same. Information such as the division position, the total number of divisions, the actual transmission source and the actual reception destination of each data before being combined is added to the combination information.

In this way, the data sent by the respective lines can be returned to the original data and sent to the PC 3 and the PC 4 in the main routing device 10 at the site B based on the information in the header section. .

When the amount of data exceeds a predetermined amount, the same operation is performed twice.

Next, the operation of UDP / IP packet processing of the main routing device according to the second embodiment of the present invention will be described with reference to FIG.

Now, data A1A1A1 is sent from PC1 of the node 21 of the base A to PC3 of the node 22 of the base B.
A1, then A2A2A2A2, A3A3A3A3, A
4A4A4A4 continuously, and similarly data B1B1B1B1 from PC2 of node 21 of base A to PC4 of node 22 and subsequently B2B2B2B2, B3B3.
B3B3 and B4B4B4B4 shall be transmitted. ,
Of the bands of the lines 51 to 56, the band 51 has the largest band, the highest priority, and then the lines 52, 53, 54, and 5.
It is assumed that the band becomes narrower and the priority becomes lower in the order of 5, 56.

The main routing device 10 uses the open line to transmit these data to the open side of the base b at a certain time. In the case of the second embodiment of FIG. 15, data A1A1A1A1 from the PC1 of the node 21
Is sent to the other party using a free line with high priority. Also, the data B1B from the PC2 of the node 21
Since 1B1B1 is in use by the line 51, the line 1B1B1 is transmitted to the other party using the line 52. Similarly, data A2A2A2A
2 is transmitted to the other party using the line 53, and the data B2B2B2B2 is transmitted to the other side. Next, data A3A3
When A3A3 is transmitted, the line 51 having a higher priority completes the transmission of the data A1A1A1A1 and if there is an empty line, the data A3A3A3A3 is transmitted to the other side using the line 51. Similarly, the line 52 is used for the data B3B3B3B3. Next, data A4A4A4A4
Is transmitted using the line 55 because the lines 51 to 54 are in use, and similarly, the data B4B4B4B4 is transmitted using the line 56.

In this way, the data sent by each line is sent to the PC 3 and the PC 4 in the main routing device 10 at the site B, respectively. ICMP / IP is the same as UDP / IP.

Next, the IP packet transmission process will be described with reference to the block diagram of the routing device of FIG. 3 and the flowchart of FIG. First, the LAN control unit 12 takes out the data sent to the LAN interface 11. Next, it is determined whether or not the destination is the WAN side connection destination IP address. If it is not the IP address of the connection destination, it is checked whether it is addressed to its own device, and if it is addressed to its own device, appropriate processing is performed. If it is different, the packet is discarded and the processing is terminated, and the next packet processing is performed. If the connection destination IP address, it is determined whether the protocol is TCP / IP. As a result of the judgment, if it is not TCP / IP, the packet is transmitted using the open WAN interface, and the process proceeds to the next packet processing. If TCP / IP
If so, the packet is divided into IP packet division / connection processing units 1
Pass to 5.

In the IP packet division / combination processing unit 15,
First, the IP packet division processing is performed on the basis of the connected WAN lines and the respective band information from the WAN line connection / bandwidth monitoring control unit 13. Next, from the WAN line global IP address monitoring processing unit 14, each WAN is
Obtain the source and destination IP addresses of the connection, and then WAN
WAN controller 1 generates an IP packet after connection is divided.
Pass to 6.

The WAN controller 16 sends the divided IP packets from the respective WAN interfaces 17 and waits for a packet reception completion notification from the main routing device 11 of the connection partner. It is judged whether or not the packet reception completion notification is received, and if it is received, the processing is terminated and the next packet processing is performed. If not received, it is determined whether a packet retransmission request has been received. If so, the WAN interface that received the packet retransmission request is used to retransmit the data sent to the missing WAN interface. The process returns to the step of determining whether the packet reception completion notification has been received. If it has not been received, it is determined whether or not the reception of the packet reception completion notification has timed out. If it has timed out, a transmission error is returned from the LAN interface 11 to the IP packet transmission source device, the processing is terminated, and the processing proceeds to the next packet processing. If not, the process returns to the step of determining whether the packet reception completion notification is received again.

Next, the fragmented packet arriving at the RT2 side is regenerated to the original packet state and transmitted to the PC2.
As for the IP packet receiving process, the reverse of the transmitting process may be performed, and thus the description thereof will be omitted.

To facilitate understanding, three lines a,
The case where b and c are used will be described below, but the number of lines is not limited to three.

Line definition line a: 1.0 Mbps upstream / downstream 8.0 for both site A and site B
ADSL line via Mbps internet b: Base A has 30 Mbps internet for both up and down FTTH: Base B has FTTH line for 10 Mbps internet for both up and down c: Base A, up to 5 0.0 Mbps / downlink 10.
CATV via 0 Mbps Internet

It is assumed that the VPN connection in which the above three lines a, b and c are bundled is performed between the bases A and B. Also, since all lines originally go through the Internet, the bandwidth speed always changes, so the bandwidth recognition is dynamically changed by referring to TCP / IP RTT (confirmation response time), etc. For the sake of convenience, the following description will be given assuming that the line speed is fixed.

Line a: 1.0 Mbps line b: 10.0 Mbps line c: 5.0 Mbps Therefore, if calculation is performed in the same manner as in the first embodiment,
The division ratio at the time of data division is line a (6%): line b (63
%): Line c (31%), and the priority of line use is line b (first place): line c (second place): line a (third place).

Definition of Nodes Base A Base B PCA1 PCB1 PCA1 to PCB1 data transmission (TCP / IP) PCA2 PCB2 PCA2 to PCB2 data transmission (TCP / IP) PCA3 PCB3 PCA3, PCB3 video conference (UDP / IP)

Setting of Main Routing Device At the base A, the main routing device according to the present invention is
From each of PCA1, A2, A3 to PCB1, B2,
Receives the IP packet sent to B3, TC
UDP packet or IP packet of P / IP protocol
The type of protocol such as whether it is a packet of protocol,
Judge by referring to the IP header, TCP / IP
If so, it is accumulated in the temporary buffer area. In the case of this example, the IP packets from the nodes 1 and 2 correspond to this.

The amount of data to be buffered at one time and the buffering time (interval before transmission even if the amount of data does not reach) can be set in the main routing device each time according to the band speed of the line and the number of nodes. Then, the main routing device transmits the data to the main routing device on the partner side when the data amount becomes full or time elapses.

In the case of this example, it is assumed that this set value is as follows. Data buffering amount: 2500 bytes Maximum buffering time: 0.1 seconds

Normal operation All lines are link-established and a total of 16 Mbps VPN
When a line is set up between the base A and the base B, the above P
An example in which CA1, A2, A3, B1, B2, B3 perform data communication will be described.

Data of 1100 bytes from PCA1, P
1300 bytes of data from CA2, 1 from PCA3
If 400 bytes of data are sent almost simultaneously,
Data from PCA1 to PCB1 is buffered and collected in the main routing device until the buffer is full or the maximum buffering time is reached. In the meantime, since the data from the PCA 3 is UDP / IP, the data transmission is performed via the line b which has a high priority and is vacant. And in the meantime, PCA one after another
When the same data is received from 3, the UDP / IP packet is transmitted at any time via a vacant line such as the line c if the line b is in the process of transmitting and the line a if the line c is also in the process of transmitting. Being done.

In the meantime, when 0.1 second, which is the maximum buffering time for the packets of PCA1 and A2, has elapsed, the line that is vacant at that time is checked and data division is performed according to the line width.

For example, the line b is U from the immediately preceding PCA3.
When the DP / IP packet is being transmitted, two lines, line a and line c, are used. In this case, the division ratio is changed to line a (17%): line c (83%). According to this division ratio, the data of PCA1 is divided into line a (187 bytes): line c (913 bytes), and the data of PCA2 is line a (221 bytes): line c (1079 bytes).
And an IP packet for each line is generated. In this case, the data for line c is 913 + 1079
= 1992, 1500 which can be transmitted by IP packet
Since it exceeds the byte, it is transmitted in two times. (Even if divided into two, it is divided according to the band speed of the line,
(It can be assumed that the data transmission on the line A and the data transmission on the line C are completed at substantially the same timing.) When creating an IP packet, “combined information” that allows the site B to reassemble the IP packet is also added. Since the combined information includes the IP address of the node that actually issued the IP packet, the IP address of the node to which the IP packet is actually delivered, the division information, etc., the data size of the IP packet that can be actually sent at one time Is 1500 bytes-IP header (2
0 byte) -TCP header (20 bytes) -connection information = transmittable data size.

If all the lines are available in the above case, line a (6%): line b (63%):
It becomes the division ratio of line c (31%), and the data of PCA1 is line a (66 bytes): line b (693 bytes): line c
(341 bytes), the data of PCA2 is line a
(78 bytes): Line b (819 bytes): Line c (403
Will be divided into bytes).

In the above example, the data transmission is performed when the maximum buffering time is reached. However, even if the maximum buffering time is not reached, the same transmission processing is performed when the data buffering amount is reached. I do.

At the time of disconnection of line When the operating line b is disconnected, this apparatus continues to operate by using the lines a and c until it is reconnected. The packet division ratio at that time was changed to line a: line b: line c = 17%: line 0%: line 83%, while continuing operation,
This apparatus performs the reconnection process of the line b.

When the global IP address of the line b changes, the changed global IP address of the line b is notified to each other through the line a or the line c. In the case of line disconnection due to a change in the global IP address, reconnection is possible in most cases by connecting using this new global IP address. But I
In case of SP reason, it is not possible to reconnect unless the failure is recovered, but during that time, the line b is not used,
The network between bases is operational.

When the line b can be reconnected, the line b is not used immediately, but data transmission / reception is started after confirming the connection partner by the password as shown in FIG.

TCP / IP (Division Method) TCP / IP is basically an individual TCP / I.
Upon transmitting / receiving the P packet, a reception completion notification called ACK is performed.

When continuously transmitting TCP / IP packets, the next packet is repeatedly transmitted after receiving the ACK corresponding to the first packet transmission. (However, there is also a protocol such as the window size control in the FTP protocol, in which the window size is continuously transmitted, and then one ACK is received.) In that case, the number of ACKs and the number of routings on the Internet are reduced. As a result, the actual data transfer rate is expected to improve.

Especially when a LAN is connected to another LAN in a company or the like, various PCs in the LAN are connected to each other.
Since the (node) arbitrarily sends data, it sends detailed data and receives ACK. Is frequently done.

The main routing device according to the second embodiment of the present invention buffers TCP / IP packets whose destinations are the same segment (network demarcation) regardless of the source node, and the total value Is a fixed size (TCP / IP protocol maximum data amount 1460
Bytes x number of lines (to be exact, the maximum bandwidth is always predicted by TCP's Round Trip Time (RTT) for each line, and a fixed size is dynamically changed), or a fixed value is reached. Select the earliest time (optimum waiting time derived from the bandwidth of the line), join, split into lines, and send all at once.

At this time, the data for a plurality of nodes divided into a plurality of lines is stored in the divided packet.

According to this method, packet transmission / reception can be seen as “fluctuating” when viewed over a short time axis, but overall network communication that maximizes the line bandwidth is possible. (Specific example) Line a: Dedicated line (uplink and downlink is 128 Kbps) Connection line b: ADSL (uplink maximum 1 Mbps: downlink maximum 8 Mbps)
Connection line between them c: CATV (upstream maximum 2 Mbps: downstream maximum 5 Mbps
s) (base A) and SDSL (uplink maximum 1.6 Mbps: downlink maximum 1.6 Mbps) (base B), if line 3 is used,
Has a minimum bandwidth guarantee at a fixed line speed.

Since the lines B and C pass through the Internet, there is no minimum bandwidth guarantee, and the variable global IP address is used. Since the line a has a fixed band, the line b is 128 Kbps, the band b is indefinite, and communication is possible at a maximum of 1 Mbps (102 Kbps). The actual band speed is predicted from the confirmation response time RTT for TCP data and updated at any time. In the case of this example, 8
Assume 00 Kbps. Band c also has indefinite bandwidth, and the maximum is 1.6.
Communication is possible at Mbps (16384 Kbps), and the bandwidth is predicted by RTT as with line b. In the case of this example, 1333K
Assume bps.

When transmission / reception by TCP / IP is performed from the node of the base A (three nodes of node A, node B, and node C). The division ratios of line a: line b: line c are about 6%: 35%: 59%, respectively.

[0116] From the node A of the base A to the base B in the band
When data of 1300 bytes is sent to the node of, 78Byte: 455Byte: 7 for each line
When the data is divided into 67 bytes and the data of 540 bytes is sent from the node B of the base A to the node of the base B almost at the same time, 32 bytes for each line: 189
Byte: Divided into 319 bytes, and at the same time as that, data 620By from the node B of the base A to the node of the base B
If te data is sent, 3 for each line
It is divided into 7 Bytes: 217 Bytes: 366 Bytes, and each is generated as an independent IP packet (total data size is 147 Bytes: 861 Bytes: 1452 Bytes), and V
It is encapsulated by the PN protocol and is routed to the base B via each line.

The router device on the site B side combines the data received from the respective lines in order, and returns the original 1300
Byte data packet and route to LAN.

If the line b during operation is disconnected, this apparatus continues to operate using the lines a and c until it is reconnected. The packet division ratio at that time is changed to 9%: 0%: 91%.

UDP / IP (Transmission Method) UDP / IP is basically an individual UDP / I.
The P packet sends the next packet in a so-called "slave-down" manner without checking whether or not it has reached the other party. In this case, it is possible to provide the maximum performance for UDP / IP by utilizing a plurality of WAN interfaces and performing routing at any time using the vacant interfaces. (Specific example) The conditions of the line and the node are the same as in the case of TCP / IP. In that case, the priority of the lines used for the UDP / IP protocol is as follows: line a: line b: line c
It becomes the order.

When data of the UDP / IP protocol is transmitted from the nodes A, B, and C to the segment of the site B almost at the same time, the WAN interface uses the line a having the higher priority first ( == Transmitting), and if it is available, the transmission process is performed on that line. If it is not available, the next priority line is checked and the same processing is performed sequentially.

However, if the packet becomes larger than the specified size of the IP packet by performing the encapsulation by the VPN protocol, the packet is divided into two packets and the coupling process is performed on the site B side.

ICMP / IP (Transmission Method) In ICMP / IP, there are many relatively small data packets and there are also communications that require prompt response.
It is possible to provide maximum performance for ICMP / IP by utilizing a plurality of WAN interfaces like the DP / IP protocol and by using the vacant interfaces to perform routing at any time. (Specific example) Same as UDP / IP.

[0123]

As described above, according to the present invention, one line is physically disconnected by treating the Internet connection lines provided by a plurality of ISPs (Internet Service Providers) like one line. Even in the case, it is possible to use the remaining lines to maintain the connection between the two bases, and by incorporating a dedicated line into one or more of the lines used, it is possible to have the same level of redundancy as a dedicated line. Become.

At the same time, by transmitting and receiving information such as the global IP address assigned from the own side ISP using the undisconnected line, the global IP address assigned by the ISP to each connecting base is irregularly changed. Even if there is (change), I
Even if the cycle differs depending on the SP, the connection on the Internet will not be interrupted.

Further, since the line speed desired by the user can be created by the total speed of a plurality of Internet connection lines, the necessary line speed can be secured even when there are few choices of line speed.

Even if the user equipment does not have a fixed global IP address, an address server provided by a third party (registration while constantly updating a changing global address, or the latest global IP address of a connection partner) Server device that responds to
The present invention can be used only with a line contracted with P. When a dedicated line / frame relay connection is used together, information such as an IP address can be transmitted and received through the line, so an address server is not required.

Further, according to the present invention, one packet data is divided and transmitted in parallel to all lines according to the band speeds of all connected lines, and received in parallel on the receiving side. Since the packet is recombined with the original packet data, it is impossible to generate the complete original packet data even if one connection on the Internet is intercepted and decrypted. It is possible to build a robust two-point connection with low running cost even for users who do not have expertise in network technology. In addition, it becomes possible to flexibly realize the line speed desired by the user.

[Brief description of drawings]

[Figure 1] Schematic diagram of conventional inter-site connections using dedicated lines

[Fig. 2] Schematic diagram of conventional inter-site connection by VPN connection by Internet line

FIG. 3 is a block diagram of a main routing device according to the present invention.

FIG. 4 is a block diagram of a network using a main routing device according to the present invention.

FIG. 5 is an explanatory diagram of a VPN connection between two bases A and B viewed from the main routing device according to the present invention.

FIG. 6 is an explanatory diagram of a VPN connection between two bases as seen from a network device in a LAN between the two bases A and B.

FIG. 7 is an explanatory diagram of IP packet division transmission and post-reception combination according to the first embodiment of the present invention.

FIG. 8 is an explanatory diagram of access to an address server.

FIG. 9 is an explanatory diagram of preventing unauthorized connection when the line is restored.

FIG. 10 is a flowchart of an IP packet transmission process by the routing device according to the first embodiment of this invention.

FIG. 11 is a flowchart of IP packet reception processing by the routing device according to the first embodiment of this invention.

FIG. 12 is a flowchart for explaining illegal connection prevention at the time of line restoration.

FIG. 13 is an explanatory diagram of an operation of TCP / IP packet processing of the main routing device according to the second embodiment of this invention.

FIG. 14 is an explanatory diagram of an operation of UDP / IP and ICMP / IP packet processing of the main routing device according to the second embodiment of this invention.

FIG. 15 is a flowchart of IP packet transmission processing by the routing device according to the second embodiment of the present invention.

[Explanation of symbols]

10 main routing device 11 LAN interface 12 LAN control unit 13 WAN line connection / bandwidth monitoring control unit 14 WAN line global IP address monitoring and server registration processing unit 15 IP packet division / coupling processing unit 16 WAN control unit 17 WAN interface 18 central Arithmetic processing devices 21, 22 Nodes 31-36 Routing devices 51-56 Connection lines

   ─────────────────────────────────────────────────── ─── Continued front page    F-term (reference) 5K030 HA08 HB28 HC01 HD03 HD07                       JA05 JA07 KA01 LB05 MB09                 5K033 AA09 CC02 DA05 DA06 DB16                       DB18 DB19 EB06

Claims (9)

[Claims] 1. A plurality of WAN-side connection interfaces connected to a plurality of connection lines having different band speeds, and a LAN.
A routing device for IP packets having one LAN-side connection interface connected to the above, wherein the routing device bundles a plurality of arbitrary connection lines having different band speeds and performs network communication at the total band speed. Therefore, the routing device is characterized by dividing the packet size into the most efficient packet size according to the band speed of each line, encapsulating it by the VPN protocol, and transmitting and receiving packets in parallel on the plurality of connection lines. 2. A plurality of WAN side connection interfaces connected to a plurality of connection lines having different band speeds, and a LAN.
A routing device for an IP packet having one LAN-side connection interface connected to, wherein the routing device bundles a plurality of arbitrary connection lines having different band speeds and line providers, and a total band speed thereof. In order to perform network communication in the above, the plurality of protocol types of the IP packet are determined, the IP traffic is sorted by buffering or line distribution processing according to the characteristics of the plurality of protocol types, and the buffered data is stored in the plurality of types. The routing device is characterized by dividing the packet size into the most efficient packet size according to the bandwidth speed of the connection line, encapsulating with the VPN protocol, and transmitting and receiving the packet in parallel with the plurality of connection lines. 3. The plurality of connection lines are dedicated lines, frame relay lines or cable TVs, DSL connection lines, I
The routing device according to claim 1 or 2, which includes an SDN connection line or a combination connection line thereof. 4. The method according to claim 1, wherein when at least one of the plurality of lines is disconnected, the connection is continued in a state where the bandwidth is narrowed by the remaining lines.
Alternatively, the routing device according to claim 2. 5. When the at least one line is disconnected, and when the at least one line is recovered, another line being connected is used to send and receive a connection confirmation of the global IP address. The routing device according to claim 3. 6. The authenticity of a connection partner is determined via a line being connected when the at least one line is disconnected and the at least one line is recovered. 3. The routing device according to item 3. 7. An IP packet routing device having a plurality of WAN-side connection interfaces connected to arbitrary connection lines having different band speeds and one LAN-side connection interface connected to a LAN, wherein the routing device is , Central processing unit, LAN control unit connected between LAN side interface and multiple WAN side interfaces, WAN line connection / bandwidth monitoring control unit, WAN line global IP address monitoring and server registration processing unit, IP packet division / coupling Processing unit,
A WAN control unit and a plurality of WAN side interfaces 17 are provided, and the central processing unit has the LAN control unit and the W
A routing device for controlling an AN line connection / bandwidth monitoring control unit, the WAN line global IP address monitoring and server registration processing unit, the IP packet division / coupling processing unit, and the WAN control unit. 8. A routine method for transmitting and receiving data using arbitrary connection lines having different band speeds, wherein a plurality of arbitrary connection lines having different band speeds are bundled and network communication is performed at the total band speed. A routing method comprising: performing the packet division, dividing the packet size into the most efficient packet size according to the band speed of each line, encapsulating the packet size by the VPN protocol, and transmitting / receiving the packet in parallel on the plurality of connection lines. 9. A routine method for transmitting and receiving data using arbitrary connection lines having different band speeds, wherein a plurality of arbitrary connection lines having different band speeds and line providers are bundled, and the total bandwidth is obtained. In order to perform network communication at high speed, a plurality of protocol types of the IP packet are determined, IP traffic is sorted by buffering or line distribution processing according to the characteristics of the plurality of protocol types, and the buffered data is stored as A routing method characterized by dividing the packet into the most efficient packet size according to the bandwidth speed of a plurality of connection lines, encapsulating the packet with a VPN protocol, and transmitting and receiving packets in parallel on the plurality of connection lines.