KR101466938B1 - Apparatus and Method of Subscriber Traffic Control in The Non-Symmetric Traffic Environment - Google Patents

Abstract

The present invention relates to an asymmetric traffic control apparatus, comprising at least one traffic control engine units for processing traffic transmitted through each of network transmission lines, and a switch unit connected to the one or more traffic control engine units, The units analyze asymmetrically inputted traffic for each subscriber to generate a tag message including at least one of subscriber information and service information of the packet and transmit the tag message to another traffic control engine unit through the switch unit to request a control.

Description

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to an apparatus and method for controlling a traffic per subscriber in an asymmetric traffic environment,

The present invention relates to a traffic control apparatus and method for performing a traffic control function under an asymmetric traffic environment, and more particularly, to an apparatus and method for classifying services and subscribers of asymmetric traffic and controlling traffic for each subscriber according to a set control policy .

Today, as the use of Internet is popularized and application services requiring large bandwidth such as P2P, web hard, media streaming, VoIP, and IPTV, which are mainly used by network subscribers, become popular, It is giving burden to the carriers.

For example, before a multi-flow application such as P2P becomes popular, each user downloads a file with one flow (Src IP, Dst IP, Src Port, Dst Port, Protocol) Users share network bandwidth fairly. However, since a P2P program such as Bittorrent downloads a file from several tens or hundreds of peers in pieces, tens or hundreds of TCP flows are generated when a single file is downloaded.

Since the Internet shares the bandwidth in 1 / n of the TCP flow per property, P2P users are more likely to charge more bandwidth than users downloading files or surfing the Web with a single TCP flow, .

In order to improve the internet quality of ordinary users, telecommunication service providers may consider adding capacity of network, but it takes a lot of investment cost and because P2P applications try to use the available network capacity as much as possible, It is relatively more improved than the quality of the users, so there is a limit only by capacity expansion. Therefore, in order to control the traffic of heavy users like P2P users and to use the bandwidth fairly among the users, communication service providers recently introduced DPI (Deep Packet Inspection) equipment into the network, and P2P, file sharing, media streaming service In order to solve the problem of high traffic traffic generating services such as network bandwidth, to analyze the services and subscribers in the network in order to utilize limited network resources effectively, and to guarantee the QoS of the entire network in service type and subscriber unit Traffic control is essential.

In order to control traffic of service and subscriber unit, the equipment for this purpose should be able to distinguish services and distinguish the flows of users by analyzing packets in inbound flow and outbound flow. The method of analyzing the service and the subscriber by monitoring the line in which the inbound and outbound flows are symmetric can easily distinguish the service and the subscriber even if it is analyzed in only one direction of the bidirectional flow.

However, in the actual network environment, a technique of distributing and multiplexing the traffic load using multiple lines in preparation for extension of the inter-region line and failure recovery is applied, so that the inbound and outbound flows for the same service are different from each other symmetrically In a flow where asymmetric traffic arrives at the destination through a line and there is a signature that distinguishes the service from the subscriber in only one direction, flows in the absence of the signature can not analyze the service and the subscriber.

To classify and control services and subscribers in such an asymmetric traffic environment, it is necessary to have equipment for service and subscriber-specific queuing of asymmetric traffic in a network of a communication service provider, which collects all asymmetric traffic in one place, It shall be distributed and controlled by the subscriber classifier. However, its configuration is not easy due to physical, technical and cost constraints on devices capable of accommodating all asymmetric circuits.

The present invention analyzes service and subscriber information by analyzing traffic on a circuit in order to solve the functional and performance requirements for traffic control by subscriber in the asymmetric environment and the difficulties encountered by the conventional techniques described above, The present invention also provides an apparatus and method for controlling per-subscriber traffic in an asymmetric traffic environment in which traffic for each subscriber is controlled by redistributing traffic to subscribers in an engine.

In addition, the present invention provides a subscriber in an asymmetric traffic environment capable of improving the performance and security of network service quality by analyzing and controlling a service and a subscriber in real time by incorporating a control engine in a NIC (Network Interface Card) And a method for controlling the traffic of the network.

The present invention relates to an asymmetric traffic control apparatus, comprising at least one traffic control engine units for processing traffic transmitted through each of network transmission lines, and a switch unit connected to the one or more traffic control engine units, The units analyze asymmetrically inputted traffic for each subscriber and generate and control a tag message including at least one of subscriber information and service information of the packet or transmit a tag message to another traffic control engine unit through the switch unit Control request.

The present invention provides a control method in an asymmetric traffic control apparatus including one or more traffic control engine units for processing traffic transmitted through each of network transmission lines and a switch unit connected to the one or more traffic control engine units, Generating and controlling a tag message including at least one of subscriber information and service information of a packet, transmitting the tag message to another traffic control engine unit through the switch unit, .

Disclosure of Invention Technical Problem [10] The present invention solves the problems of the related art based on traffic control for ensuring stability of network and QoS for asymmetric traffic transmitted and received under an asymmetric network structure. Also, in order to quickly and efficiently control the control of the large traffic, the subscriber and the service control information of the control target packet are synchronously controlled by the clustering method using the tag switching.

In addition, the present invention applies multi-core processor-based distributed processing techniques to assure processing performance, hybridizes packet aggregation and distributed processing to provide a subscriber traffic control function, The processing capacity and performance of the traffic control apparatus can be greatly improved.

In addition, it is possible to provide additional scalability due to redundancy and traffic increase due to easy addition configuration of the unit system, thereby providing an effective solution to the burden of network capacity expansion of the service provider and the demand for guaranteeing the service quality of the subscriber have.

FIG. 1 is a schematic block diagram illustrating a traffic control structure for each subscriber in an asymmetric network environment according to an embodiment of the present invention. Referring to FIG.
2 is a configuration diagram illustrating a traffic control message format according to an embodiment of the present invention.
3 is a configuration diagram of an asymmetric traffic control apparatus according to an embodiment of the present invention.
4 is a configuration diagram of a control server unit according to an embodiment of the present invention.
5 is a configuration diagram of a traffic control engine according to an embodiment of the present invention.
6 is a flowchart illustrating a traffic control method according to an embodiment of the present invention.

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS Reference will now be made in detail to embodiments of the present invention, examples of which are illustrated in the accompanying drawings, wherein like reference numerals refer to the like elements throughout.

In the following description of the present invention, a detailed description of known functions and configurations incorporated herein will be omitted when it may make the subject matter of the present invention rather unclear.

The terms used throughout the specification are defined in consideration of the functions in the embodiments of the present invention and can be sufficiently modified according to the intentions and customs of the user or the operator. It should be based on the contents of.

FIG. 1 is a schematic block diagram illustrating a traffic control structure for each subscriber in an asymmetric network environment according to an embodiment of the present invention. Referring to FIG.

In the asymmetric traffic network environment, traffic control per subscriber is controlled in two stages: service control and subscriber control. For this purpose, it is necessary to collect or redistribute the traffic for each subscriber to the distributed collected packets.

Referring to FIG. 1, one or more traffic control engine units 100-1, 100-2, 100-3, ..., and 100-3 for processing traffic transmitted through each of the transmission lines connected between the routers 10, 100-n are connected by the switch unit 200.

Each of the traffic control engine units 100-1, 100-2, 100-3, ..., 100-n is assigned a control target subscriber or subscriber group to be controlled by the traffic control engine units 100-1, 100-2, 100-3, ..., 100-n. For example, referring to FIG. 1, the traffic control engine unit # 1 100-1 controls traffic generated by the subscriber # 1, and the traffic control engine unit # 2 100-2 generates The traffic control engine # 3 100-3 controls traffic generated by the subscriber # 3, and the traffic control engine # 4 100-n controls traffic generated by the subscriber #n . However, not only the traffic of the subscriber to be controlled by the traffic control engine units 100-1, 100-2, 100-3, ..., 100-n through the transmission lines to which they are connected, Packets generated by many other subscribers are transmitted.

That is, the traffic generated by the subscriber # 3 and the subscriber # 4 is inputted and stored in the traffic control engine unit # 1 100-1, and the traffic control engine unit 100-2 stores the traffic generated by the subscriber # 3 and the subscriber # Traffic is generated and stored. However, as traffic can be collected / specified per subscriber, asymmetric traffic control is possible, so that flows can be exchanged between the traffic control engine units 100-1, 100-2, 100-3, ..., 100-n . When traffic is exchanged between the traffic control engine units 100-1, 100-2, 100-3, ..., 100-n to collect traffic for each subscriber, the amount of data increases and traffic control performance deteriorates do.

Accordingly, the present invention is applicable to traffic control engine units 100-1, 100-2, 100-3, 100-3, and 100-3 for collecting / sorting traffic inputted asymmetrically for each subscriber for each subscriber, calculating total amount of traffic for each subscriber, 2, 100-3, ..., 100-n analyzes the traffic asymmetrically inputted for each subscriber to generate a tag message including subscriber information and service information of the packet, 100-2, 100-3, ..., 100-n through the traffic control engine units 100-1, 100-2, 100-3, ..., 100-n.

The switch unit 200 transmits the tag message input from the traffic control engine units 100-1, 100-2, 100-3, ..., 100-n to the corresponding traffic control engine units 100-1, 100-2 , 100-3, ..., 100-n. Thus, if only the tag message is exchanged instead of the entire traffic, the traffic processing capacity per subscriber is expected to be improved by about 2 to 4 times as much as the line speed.

2 is a block diagram illustrating a tag message format for traffic control according to an embodiment of the present invention.

Referring to FIG. 2, the Destination Mac represents a destination traffic control engine to which a tag message is to be transmitted, and the Source Mac represents a traffic control engine in which a tag message is generated. Buffer Offset is the packet pointer information of the flow, that is, the information of the packet memory in which the packet is stored, the User Identifier is the subscriber identification information, and the PL (Packet Length) is the packet length information. TO 0 and TO 1 represent the sequence number of the tag message, and the tag message may be 32 bytes with 16 bytes. SV, DV and SP are service identification information, which indicates a service type, terminal information, and a service provider. The PO includes subscriber control information, that is, identification information about the policy.

3 is a configuration diagram of an asymmetric traffic control apparatus according to an embodiment of the present invention.

Referring to FIG. 3, one or more traffic control engine units 100-1, 100-2, 100-3,... 100-n constituting an asymmetric traffic control apparatus are connected to measure and analyze generated flows And a server unit 300 for controlling the server unit 300. The internal configuration of the server unit 300 will be described in detail with reference to FIG.

The server unit 300 controls a predetermined number of traffic control engine units. When the number of communication lines is several hundreds or more, the server unit 300 is one of the traffic control engine units or hundreds of the traffic control engine units connected to each communication line. It is impossible to control all traffic control engine units. Accordingly, several server units can divide and manage the traffic control engine units, and input / output ports 301 and 302 for exchange of management information between the server units can be configured.

The flow storage unit 380 stores all the traffic flows flowing through the network, and the stored traffic flows are used for later reanalysis. The statistical database 395 stores information analyzing the network status.

The detailed configuration of the traffic control engine units includes a traffic control engine 110, a fail over device (FOD) 120, and a Perl Compatible Regular Expression (PCRE)

The fail over device (FOD) 120 interlocks with the in-line equipment such as IPS and QoS to automatically maintain the stability of the network by bypassing the traffic when the power, link, and application of the in- The present invention functions as a bypass unit for bypassing a packet when the performance load of the traffic control engine exceeds a threshold value.

The PCRE (Perl Compatible Regular Expression) 130 is a coprocessor for improving the service analysis performance of the service / subscriber and the control of the multicast processor of the traffic control engine 110, The load of the MCP and the transmission / reception load of the packet can be reduced.

4 is a configuration diagram of a control server unit according to an embodiment of the present invention.

4, the flow measuring unit 310 receives a traffic flow output from one or more traffic control engine units 100-1, 100-2, 100-3, ..., 100-n, / RTI > < RTI ID = 0.0 > analyzing / measuring flow information. The flow collecting and statistics unit 320 collects flow information analyzed by the flow measuring unit 310 for each subscriber or service, and calculates the statistical information.

The network status monitoring unit 330 monitors the current network status according to the flow statistics. The subscriber information management unit 340 acquires and manages information for individual subscriber identification and provides the information to the control policy management unit 350. [ The control policy management unit 350 sets up a control target service, a subscriber, a service group, and a subscriber group, sets and manages a traffic control policy for the set, and transmits the traffic control policies to the traffic control engine units 100-1, 100-2, 100-3,. ..., 100-n.

The service classification information management unit 360 acquires and manages information for classifying traffic flows by service. The control traffic statistics unit 370 calculates statistical information of the control traffic according to the network status by the network status monitoring unit 330 and outputs the calculated statistical information to the statistical database 395.

The flow output unit 380 is responsible for interworking the asymmetric traffic control apparatus according to the present invention with heterogeneous systems for network management and traffic analysis and control information. The flow output unit 380 is configured to classify a real-time network traffic flow through an asymmetric traffic control apparatus into a standardized format (NetFlow, etc.) to the heterogeneous system.

5 is a detailed configuration diagram of a traffic control engine according to an embodiment of the present invention.

According to the present invention, for traffic control in an asymmetric traffic environment, traffic distributed to different traffic control engines must be collected for each subscriber. However, in order to guarantee real-time processing performance for a large amount of traffic, it is necessary to distribute a large amount of traffic through a traffic control engine based on a multicore processor.

At this time, the aggregation for asymmetric traffic control and the distribution of multi-core processors for high-capacity traffic processing are in conflict. To this end, in the present invention, the aggregation and dispersion are mixed in a hybrid manner. For this purpose, referring to FIG. 4, a loopback interface 111 between the MCP cores is configured, and between the traffic control engines, The traffic aggregation and distributed processing is enabled by using the switch. If the internal subscriber packet is not an internal subscriber packet to be controlled by one traffic control engine, the subscriber / service control is performed by transmitting a control message to the external traffic control engine core through the switch 200.

6 is a flowchart illustrating a traffic control method according to an embodiment of the present invention.

Referring to FIG. 6, the traffic control engine detects a performance load according to a packet received (S610) (S620). That is, it is checked whether the amount of the received packet exceeds the traffic processing load maximum value (PEEK) value.

If the amount of packets received as a result of the detection of S620 exceeds the traffic processing load maximum value (PEEK) value, the traffic control engine recognizes the performance load and bypasses excess traffic for network stability (S630 ).

However, if the amount of the packet received as a result of the detection in S620 is within the maximum PEEK of the traffic processing load, the traffic control engine classifies the service and the subscriber of the packet using the flow information of the received packet and caches the control policy (S640 ).

The traffic control engine determines whether it is a control subscriber by using the flow information (S650).

As a result of the determination in step S650, the traffic control engine generates a tag message for subscriber control (S660), and requests subscriber control based on the tag message information (S670). That is, it checks whether the subscriber is a control target, accumulates the subscriber / service control policy in the subscriber control message in the case of a packet to be controlled, and transmits the policy to the internal control core or requests control to the external core.

If it is determined in step S650 that the subscriber is not a control subscriber, the traffic control engine determines whether the service is a control target service using the flow information of the traffic (S680).

As a result of the determination in S680, the traffic control engine accumulates the service control policy in the tag message for service control and transmits the service control policy to the internal control core or requests control to the external core (S690, S700).

As a result of the determination in S680, if the received packet is not a control target service, that is, if the received packet is a non-control target packet, the traffic control engine performs traffic mirroring and logging according to other control policies, and forwards the packet (S710). On the other hand, service or subscriber-specific control synchronization is performed through tag message exchange between the one or more traffic control engine units.

Claims (10)

One or more traffic control engine units for processing traffic transmitted through each of the network transmission lines,
And a switch unit coupled to the one or more traffic control engine units,
The one or more traffic control engine units
Analyzes the traffic inputted asymmetrically for each subscriber to generate a tag message including at least one of subscriber information and service information of the packet, transmits the tag message to another traffic control engine unit through the switch unit to request traffic control, And receives a tag message from the control engine units and controls traffic.
The method of claim 1,
A field for displaying destination traffic control engine information to which a tag message is to be delivered,
A field for displaying traffic control engine information in which the tag message is generated,
A field for displaying packet pointer information of a flow,
A field for displaying subscriber identification information,
A field for displaying packet length information,
A field for displaying the order number of the tag message,
A field for displaying service identification information,
And a field for displaying subscriber control information.
The method according to claim 1,
Further comprising a server unit connected to the one or more traffic control engine units and measuring and analyzing the generated flows and controlling the generated flows.
The system according to claim 3, wherein the server unit
And an input / output port for exchanging management information of another server is configured.
2. The method of claim 1, wherein the one or more traffic control engine units
Further comprising a bypass unit for bypassing packets when the performance load exceeds a threshold value.
2. The method of claim 1, wherein the one or more traffic control engine units
Further comprising a coprocessor for performing a search function of a signature at a certain position in the payload of the received packet.
2. The method of claim 1, wherein the one or more traffic control engine units
Core processor for service or per-subscriber control and synchronization,
And a loopback interface for exchanging data between the multicore processors.
A control method in an asymmetric traffic control apparatus including at least one traffic control engine units for processing traffic transmitted through each of network transmission lines and a switch unit connected to at least one traffic control engine unit,
Analyzing asymmetrically input traffic for each subscriber,
Generating a tag message including at least one of subscriber information and service information of a packet;
Transmitting a tag message between one or more traffic control engine units through the switch unit to request traffic control;
And controlling traffic according to the tag message transmitted from the other one or more traffic control engine units.
9. The method of claim 8,
Wherein control synchronization is performed for each service or subscriber through a tag message exchange between the one or more traffic control engine units.
9. The method of claim 8,
Further comprising performing traffic mirroring or logging according to another control policy and forwarding the packet when the received packet is not the controlled subscriber or the controlled service.

Images