KR20010044296A - The Network Configuration Method of automatically Network Backup and Load Balancing for Network & System Problem - Google Patents

Abstract

PURPOSE: A network construction method of automatic backup and load-balancing in disorder of network and system is provided to load-balance all parts, that is, the ends of the public network and the private network and the server for the Internet service, thereby capable of performing the non-interrupt successive service. CONSTITUTION: An international Internet network(S201) is constructed between businessmen providing the Internet service between countries. In each country, the country can divide by large size of NSP(Network Service Provider) businessmen(S205-1,S205-2,S205-3) and small size of ISP(Internet Service Provider) businessmen(S203). The NSP and ISP providing services exchanges their networks, that is, have a KIX national exchange network(S204) for processing national traffics within a country. Functions(S206-1,S206-2,S206-3) of GLB(Global Load Balancing) are adapted to the network. By the function of GLB, the traffics are connected to the server constructed within the IDC(Internet Data Center) center(S207-1,S207-2,S207-3,S207-4) sequentially or by searching the shortest path.

Description

The Network Configuration Method of automatically Network Backup and Load Balancing for Network & System Problem}

The present invention relates to a configuration method capable of network backup and load balancing using public and private networks, or to a configuration of a network capable of continuously serving by automatically bypassing a network and system failure, and more particularly, in an Internet public network. Apply Global Load Balancing (GLB) function for Load Balancing Apply technology that enables Network Backup and Load Balancing in Internet Public Network to change Public IP Address to Private IP Address when connecting to Private Network It connects between NSP and IDC center for ISP by Giga line to form a private IP network like a single network and uses the technology for network backup and load balancing. When connecting between a private network and a server for a service, check the status of a server that is composed of several devices and connect to a normal server. The present invention relates to a non-disabled service that automatically creates a bypass path in the event of a failure, and a network configuration method that enables load sharing between the network and the server.

In general, in the case of the current Internet Public Network, an Internet line is formed by each NSP or ISP provider. If a failure occurs on the line due to an internal or external problem of the subsidiary company using the line, the service cannot be used or fails. Due to the concentration of a lot of traffic even in the normal operating equipment, the speed is slowed during use. Therefore, in order to solve this problem, double circuit configuration and spare equipment should be additionally installed in preparation for failure in the construction of Internet line, so that in case of failure of the line or equipment in use, it can be replaced with spare equipment or spare circuit for continuous service. There are ways to do this, and all of this is done by hand, and there are cases where continuous line and equipment expansion is required when a lot of traffic is concentrated in service equipment installed in different computer centers. In addition, recently, a new type of technology has been created to solve the service slowdown due to traffic concentration, and this service is being provided to service providers to provide services to subscribers more quickly. One such service is a Contents Deliverly Network (CDN) service. This is a service that uses the function of caching, which requires the connection of caching server for CDN to each node in the country, so there is a problem that a lot of investment cost and maintenance cost are put into operation, and also a computer room with computer system equipment and this computer equipment and Since there is no Netwok and system distributed in case of failure of the connected line, there is a problem that the service is not available until all this is restored. In addition, even if the system is distributed in IDC centers of several NSPs or ISPs, this computer equipment is also used because of the sudden explosion of customers with computer equipment located in other IDC centers where one IDC center is operating normally in case of failure. There is a danger of continuous failure due to overload. In addition, the technology to perform Internet service by concentrating each ISP line in one center has been developed, and a method of constructing a network in which a service can be continuously provided through another ISP even in the case of a network failure of a specific ISP is emerging. The problem with this is that the service cannot be continuously performed by bypassing the failure of the centralized center and the load balancing on the ISP-specific network can not be performed. There is a problem that needs to be added. In addition, there is a problem that a separate security device must be used to solve the security problem by using a public IP address, and a network must be configured using a complicated routing protocol for interworking between networks of other providers.

In order to solve the above problems, the present invention performs three types of load balancing and backup of network and system. The first method is distributed access and backup in network, and automatically bypasses when nework failure of specific ISP occurs on the Internet. Global Load Balancing, which enables access through the ISP's network that has not failed, and connects the Private IP Network configured in each IDC Center with Giga lines to connect one Private IP Network in multiple IDC Centers. It is configured to operate like a network of. In the private IP network, it is a function to change a user connecting with a public IP address to a private IP address. Application of Switching HUB using specific socket port only It provides packet filtering and prevents external intrusion after completely configuring security. Also, it automatically operates normally even if any specific IDC center fails through a network composed of Giga lines between private IP network sections between ISPs. It is possible to access service equipment through other IDC centers, and even if there is no failure, it is configured to enable private network load balancing and network backup in case of failure. In addition, it is possible to load Balancing to all servers if there are no failures by configuring multiple servers for services configured in a specific IDC center. Therefore, the characteristic part of the present invention is to load-balance all parts from the public netwok and private network stages and the server for the Internet service and automatically bypass the failure in the event of a failure so that the network backup and the backup of the server can be continued without interruption. To configure the network to enable Also, in case of interface card failure in the system, it is composed of the software part that can be changed to the spare interface automatically by the program in case of interface card failure, so it can automatically bypass the complete network and system load balancing and system failure. It also includes the step of configuring the backup path to be possible.

1 is a conceptual diagram of a current Internet Network;

Figure 2 is a network configuration when applying GLB in accordance with the present invention,

3 is a block diagram of a network during load balancing in a private stage according to the present invention;

4 is a block diagram of the network equipment when applied in accordance with the present invention,

5 is a configuration diagram of a network for changing to a private IP address and applying an SLB according to the present invention;

6 is a GLB flow chart in accordance with the present invention;

7 is a flowchart illustrating load distribution for a private network;

8 is a flow chart for recovery in the event of a network failure in a system.

* Explanation of symbols for main parts of the drawings

S103: Exchange network S204: KIX domestic interworking network

S206-1, S206-2, S206-3: Functions of GLB

S301-1, S301-2, S301-3: Change to Private IP Address

S303-1, S303-2, S303-3: SLB function of L4 device

S304-1, S304-2, S304-3: Nicguard Network Check Program

S501-1, S501-2, S501-3: GBE Module

S811: Ping Check Gateway

In order to achieve the above object, the method of the present invention provides a GLB (Global Load Balancing) service on the public Internet, when the subscriber accesses the IDC center and service server through the Internet through the subscriber network. Connecting to a GLB capable device; Converting the IP transmitted by DNS Query to an IP capable of balancing and transmitting the IP; Changing public IP address sent to IDC center to private IP address for security, Balancing subscribers connected to each IDC center in private stage connected to private network and automatically bypassing when network failure occurs Possible step; Load-balancing traffic for a server providing the same service by using a SLB (Server Load Balance) function, which is a load balance function applied to a network when a system is connected; Automatically changing to a reserved interface by the software in the event of a network interface failure in the system; consisting of a complete Netwok and a load path of the system and a backup path that can be automatically bypassed in the event of a system failure It includes.

Since the service servers of the enterprise are directly connected in the private network of the present invention, it is possible to construct a stable network without limiting the connection speed, and to accommodate a large amount of traffic even when a large number of subscribers are connected. Load Balancing is possible, so it does not leave backups of all systems in the form of standby, but actually provides services, but in the case of failure of a specific IDC center, traffic is concentrated in one IDC center and distributed in multiple regions to eliminate the failure of the entire server. Each NSP and ISP IDC center is composed of Giga lines, and IDC centers of different operators are linked to one private IP network so that the entire server is continuously loaded with load balancing. Failures direct traffic to specific IDC centers elsewhere with service servers Even if it can reliably access the service.

Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings.

1 is a conceptual diagram of a current Internet network.

Today, the Internet is connected to a global network around the US, like a spider's web, and a network of NSPs or ISPs interoperate with many countries. It is organized in the form of providing them. In addition, the network is composed of international networks linked to each country (S101), and in each country, there is also an Exchange network (S103) for accepting only domestic traffic or interworking with NSPs or ISP providers. Is composed of NSPs interlocking with the international Internet network (S102), and each of these operators, such as these large NSPs (S104, S106, S108) and ISP, has its own IDC (Internet Data Center) center. Co-Loaction service is provided to operators.

However, each NSP service provider can access the service system installed in the company by the subscribers of other NSP service providers and access the service system through overseas NSP service providers. Due to the difficulty in providing services and the need to continuously increase expensive international Internet lines because domestic Internet traffic is provided through overseas, each NSP providing services is connected to each other's networks. It has a domestic Exchange network so that traffic can be handled in Korea, and it is possible to communicate between operators by constructing a domestic Exchange network to send Internet traffic generated from its network to service servers connected to other NSP networks. Failure due to overload of domestic exchange network Although there are delays in speed and speed, it is difficult to continue to expand due to traffic increase due to interests among operators.

In addition, IDC centers provide services to IDC centers in case of failure of IDC centers (S105, S107, S109, S110) operated by NSPs and ISPs, where each NSP and ISP operator outsources the computer center based on their infrastructure. Receiving service providers have a problem that can not continue to service until the failure recovery. In addition, the service provider is configured to distribute the system to multiple IDC centers in case of such a failure, but in case of failure of a specific IDC center, traffic is concentrated on the network of the normally operated IDC center, and the service equipments serviced there are also overloaded. As a result, the entire service may be paralyzed.

Figure 2 is a network configuration when applying GLB in accordance with the present invention.

Referring to FIG. 2, when the subscribers access the service system in FIG. 1, the GLB function, which is one of the parts for applying the present invention, is applied to the network on the public Internet. It is to configure the connection path for the large-scale NSP and ISP located in several places to the nearest place so that the fastest path can be accessed. In addition, the international Internet network (S201) is composed of operators that provide Internet services between countries, and in each country, internally large NSP providers (S205-1, S205-2, S205-3) and small ISPs connected to the NSP providers. It can be divided into a business operator (S203). In addition, each NSP and ISP service provider installs the service system of the service provider that wants to provide the service in its IDC center and accesses the service system of the other IDC center to provide the service. Since it was possible to access the system, it was difficult to provide a high-speed service, and since domestic Internet traffic was provided through a foreign country, there was a problem of continuously increasing expensive Internet lines. Therefore, NSPs and ISPs that provide services interoperate with each other's networks to enable domestic communication between NSPs and ISP operators by setting up a domestic exchange network, KIX Domestic Interworking Network (S204). GLB (Global Load Ballancing) functions (S206-1, S206-2, S206-3) are applied to the same network, and this GLB function is applied to each IDC center (S207-1, S207-2, S207-3, S207-4) It distributes to the configured server and connects them sequentially or checks the internet traffic to find the shortest path and enables the service access. And if the network of NSP and ISP service provider fails, it can be automatically connected to the path normally operated by GLB.

Figure 3 is a network configuration when applying private in accordance with the present invention.

Referring to FIG. 3, when accessing each IDC center network through the international Internet and NSP in the TCP / IP network, the network is configured using a public IP address commonly used by all Internet operators internationally. The service is connected to the system, but due to security problems, when the public IP address is changed to a private IP address, the service can be provided more securely. In the present invention, a subscriber connected to the public IP address accesses the service system. By making the procedure of changing to the address (S301-1, S301-2, S301-3) by providing a technology that provides a service provider can safely provide services, and also the network configuration of the present invention and the existing public Internet Likewise, AS number applied between each operator or router network among operators using router equipment between network operators. There is a difference that the subscriber can be configured even with its own private IP address system, not based on Routing Protocol (BGP, OSPF, etc.) for interworking. By configuring the network of different communication providers in the form of one and the same network (S302, S302-1) and also configures the network using the switch equipment, such as the network configuration without using the router equipment. In the private network applied in the present invention, when there is no failure of the private network, load balancing is provided so that traffic can be distributed to each IDC center by a Giga line interlocked between IDC centers, and in the form of a ring in case of failure. Multiple IDC centers operate as one identical network via the detour route by the private network of the configured Giga line.

Load-balancing traffic using a private network interlocked with Giga lines between IDC centers is connected to this equipment using SLB functions (S303-1, S303-2, S303-3) of SLB (Server Load Balance) equipment. When connected to the server, this device first detects the server's status, and then selects a device that normally operates and load balances the server to distribute traffic for subscribers to use the service. Check program (S304-1, S304-2, S304-3) detects the status of the network connected to the system, and if a failure occurs, it automatically switches to the reserved network and provides the service continuously.

Figure 4 is a block diagram for the network equipment when applied in accordance with the present invention.

Referring to FIG. 4, the IDC service provider has a router (S401-1, S401-2, S401-3) held by each NSP or ISP and a router held by the IDC center (S402-) to secure an Internet line. 1, S402-2, S402-3) to configure Giga-class internet line, and inside each IDC center, configure internal network as Giga network by using Switching HUB and provide Giga Port to subscriber's Switching HUB. Configure a network of stages. The switching of the provided Public Port from the Switching HUB to which the present invention is applied to a Private IP Address is performed (S404-1, S404-2, S404-3), and the network connected to the service server is a private IP address network. Enable communication.

5 is a diagram illustrating a network configuration for changing to a private IP address and applying an SLB according to the present invention.

Referring to FIG. 5, in this case, the Giga-class line provided by the Public Network stage is applied to each IDC center through the Switch HUB provided by the present invention. GBE Module (S501-1, S501-2, S501-3) installed in Switching HUB connects several IDC centers by Giga line to form the same network (S502, S502-1) Even though connecting via L4, it is possible to load balance the network through this Giga line, and to automatically back up the network in case of any trouble that may occur during operation, and also to apply SLB through the interface module that provides various speeds. It is connected to the switch equipment (S503-1, S503-2, S503-3) and configures the network to provide services by connecting to the service server of the subscriber. In addition, a program is installed to check the network problems in the system so that the operating interface card can be automatically changed to a spare interface card in the event of a failure and the system can be operated continuously. (S507-1, S507-2, S507-3)

6 is a flow chart for a GLB in accordance with the present invention.

Referring to FIG. 6, a subscriber attempts to connect (S601), accesses the Internet (S602), enters a URL and checks whether it is a registered URL or an unregistered URL (S603). Alternatively, after registering with KRNIC (S612) and confirming the registration, try to connect to the Internet again. If the URL is registered, if you connect to the ISP's DNS (S604), the Domain Query (S605) is performed on this DNS. (S606) At this time, the GLB server decides whether to set the IP Forwarding status to Static or Dynamic (S607). In the case of Static, check whether the registered network is normal (S608) to the network registered to the GLB server. Resolving the IP address for the IP address (S610) and allowing distributed access to multiple IDC center networks (S611).

The dynamic method is to install and run a separate agent server (S614) and check the shortest path by checking the HOP count and delay time for the network (S615) and then resolving the IP address for the relevant network (S616). S617) to be distributed to multiple IDC center networks (S611).

7 is a flowchart illustrating load distribution for a private network.

Referring to FIG. 7, in order to prevent system intrusion by an unauthorized subscriber, a subscriber connected through a public network is connected to a private IP network provided by the present invention (S701) and changed to a private IP address (S702). Network is configured to operate as a private network, and between IDC centers configured as a private IP network by a Giga line as a ring-type network and interlocked with each other, multiple IDC centers operate as the same network. Check if there is a failure (S703) and automatically check the bypass path when some network failure occurs (S710). If the bypass path is normal, load balance traffic to multiple IDC centers (S704) or if abnormal, IDC center In case of normal operation (S711), and if there is no obstacle in the private network and normal, Load Balancing the traffic to the private IP network through the interlocked Giga line (S704) and connect it to the SLB equipment in each IDC center. (S705) At this time, the SLB equipment in each IDC center manages the status of each server. (S706) If some servers have a failure, check the normal server (S612) to prevent access to the abnormal server, server load balancing only for the normal server (S707), if all the operational server is normal for all servers Load Balancing (S707) to connect to the server (S708) to drive the service application (S709).

8 is a flowchart illustrating recovery in the event of a network failure in a system.

Referring to FIG. 8, after starting a system that operates a service (S801), a process related to failback is driven (S802), and whether the process is normally driven (S803) is normally driven. If not, run the related process once again. (S807) If it is normally operated, this program pings the currently running Network Gateway (S804) and checks whether the Operation Gateway gives a normal response (S805). In case of giving normal response, it can be judged that there is no problem in the network, so continue the operation (S806), and in case of abnormality, the error recovery program automatically shuts down the operation network interface card of the system in which the failure occurred ( S808) Turn on the spare Network Interface Card that is configured as spare in the system (S809) Setting the IP address related to the network switch (S810), ping check the gateway for the corresponding network with the interface card up (S811), and check whether the gateway for the reserved network interface card is normally operated (S812). Normal service is executed by the driven Static Routing Table (S814), and if abnormal, the service is performed after checking the gateway equipment (S813).

As described above, according to the present invention, a GLB technology that can be implemented on an Internet Public Network and an IP address of a subscriber connected with a public IP address to access a service server are configured to be changed to a private IP address. It is possible to prevent access to external intruders and network ID can be bypassed automatically in case of failure by configuring all IDC centers to operate as the same network by interlocking IDC centers of NSP and ISP operators with Giga lines. If there is no failure, it is possible to configure the load balancing service for each network and server, and to solve the security problem by using the functions implemented on the network equipment. Network part by applying software that can be changed to Interface Card It is possible to service and operate without faults by automatically handling all parts up to the system, so it is possible to expand the system for the service without continual cost and investment to secure additional backup line and system in case of failure. .

Claims (5)

How to implement program for automatic network backup and system failure recovery in case of failure and load balancing for public IP network, private IP network and system without using complicated routing protocol for interworking between operators' networks How to change the public IP address sent when accessing the service server through the Internet to a private IP address with security How to provide service by normal load balance of network and automatically bypass in case of failure by using connected private network connected to multiple IDC centers and Giga lines when connected to private network How to load balance a system using SLB (Server Load Balance), a load balancing function applied on a private network when connecting to a system in a private network How to automatically change to a reserved network interface card by software in the event of a network interface card failure in the service system