WO2014023161A1

WO2014023161A1 - Flow rate control method and device

Info

Publication number: WO2014023161A1
Application number: PCT/CN2013/079960
Authority: WO
Inventors: 黄传冠; 范书田; 唐兵兵; 陆钱春; 元绍华; 刘万慧; 朱春晖
Original assignee: 中兴通讯股份有限公司
Priority date: 2012-08-10
Filing date: 2013-07-24
Publication date: 2014-02-13
Also published as: CN103581043A

Abstract

Disclosed are a flow rate control method and device. The method comprises: after a user comes online, a DPI device, corresponding to the user, receiving a customized flow rate control policy of the user, which is sent by an upstream device in real time; and according to the flow rate control policy, the DPI device conducting flow rate control for the user. The technical solution provided in the present invention solves the problem in the prior art that the static policy configuration of a flow rate control solution is various and complicated, achieves dynamic flow rate control policy configuration, and then reduces the pressure of a device and a network manager.

Description

Control method and device

The present invention relates to the field of communications, and in particular to a flow rate control method and apparatus. Background technique

Starting from BT (Bit Torrent), peer-to-peer (P2P, Peer to Peer) applications have sprung up, and the popularity of P2P applications has enriched the network life, and brought about a dramatic increase in network traffic and major changes in traffic patterns. Breaking the broadband service business model, in simple terms, is that incrementals do not increase efficiency and interfere with critical applications.

The advantage of P2P technology lies in its endless life, so the visibility and controllability of network applications are pushed to an important position. The granularity of flow control management needs to be fine enough to be usable.

Deep Packet Inspection (DPI) is a new technology compared to ordinary packet analysis. Normal packet detection only analyzes the contents of the IP packet below four layers, including the source address, destination address, and source port. Based on the destination port and the protocol type, DPI adds an analysis of the application layer, identifies various applications and their contents, and dynamically controls the service usage of each user through the DPI application system. The technical application of DPI is a set of solutions for the effective operation and management of IP networks.

In the existing technology, a broadband remote access server (BRAS, Broadband Remote Access Server) device can set a static or user setting after the user of the AAA, Authentication Authorization and Accounting system is online. Dynamic authorization information, but its granularity can only be fine-grained to the user level. That is to say, all applications of the user are controlled by the total flow rate. Such control granularity will inevitably lead to some key business usage of the user; DPI equipment can be used for users. Internet applications for identification and control, but the premise of identification and control must be configured in advance on the device static policies, these policies can not go online with the user With the addition or revocation, as the granularity of control is refined, the configuration of the policy will become more and more complex and more and more complicated, which is a great pressure for equipment and network administrators. In view of the above problems in the prior art, no effective solution has been proposed yet. Summary of the invention

In view of the complicated and complicated configuration of the static policy in the flow rate control scheme in the prior art, the embodiment of the present invention provides a flow rate control method and apparatus to solve at least the above problems.

According to an aspect of the embodiments of the present invention, a flow rate control method is provided, including: after a user goes online, a DPI device corresponding to the user receives a customized flow rate control policy of the user that is sent by the upstream device in real time; The above speed control strategy controls the flow rate of the user.

The above flow rate control strategy includes at least one of the following: a granularity is a user's user control policy, and an granularity is an applied application group per user control policy.

The user's flow rate control policy is a user control policy or an application group per user control policy is determined by the upstream device based on the user's dynamic policy ID.

The method may include: after the user goes offline, the DPI device corresponding to the user receives the message of the undo flow rate control sent by the upstream device in real time, and cancels the flow rate control of the user.

The upstream devices include: AAA system, DPI management system (DMS).

According to another aspect of the present invention, a flow rate control device is provided on a DPI device, including: a policy receiving module, configured to receive an upstream device in real time after the user goes online and the current DPI device corresponds to the user The customized flow rate control strategy of the user; the flow rate control module is configured to control the flow rate of the user according to the speed control strategy described above.

The user's flow rate control policy is a user control policy or an application group per user control policy is determined by the upstream device according to the user's dynamic policy ID. The device may further include: a control revocation module configured to receive a message of the undo flow rate control sent by the upstream device in real time after the user goes offline, and cancel the flow rate control of the user.

The upstream devices include: AAA system, DMS.

Through the embodiment of the present invention, the scheme of dynamically controlling the flow rate control strategy to the user to control the flow rate by using the user to go online, solves the complicated and complicated problem of the static strategy configuration of the flow rate control scheme in the prior art, and realizes the dynamic flow rate. Control policy configuration, which reduces the pressure on equipment and network managers. DRAWINGS

The drawings are intended to provide a further understanding of the embodiments of the present invention, and are intended to be a part of the present invention, and the description of the present invention is not intended to limit the invention. In the drawing:

1 is a flow chart of a flow rate control method according to an embodiment of the present invention;

2 is a flow chart of a flow rate control method in accordance with a preferred embodiment of the present invention;

3 is a block diagram showing the structure of a flow rate control device according to an embodiment of the present invention. detailed description

The invention will be described in detail below with reference to the drawings in conjunction with the embodiments. It should be noted that the embodiments in the present application and the features in the embodiments may be combined with each other without conflict.

1 is a flow chart of a flow rate control method in accordance with an embodiment of the present invention. As shown in FIG. 1, the flow rate control method of the embodiment of the present invention includes:

Step S102: After the user goes online, the DPI device corresponding to the user receives the customized flow rate control policy of the user that is sent by the upstream device in real time;

Step S104: The DPI device performs flow rate control on the user according to the flow rate control policy.

The flow rate control method provided by this embodiment is directed to a static configuration strategy in an existing flow rate control method The shortcomings propose a scheme for dynamically configuring the flow rate control strategy. In the flow rate control method provided by the embodiment, when the user goes online as the flow rate control strategy configuration, the flow rate control strategy is configured for the user in real time, and the flow rate control is performed on the user by the DPI device corresponding to the user, thereby solving the static configuration in the prior art. The lack of strategy has enabled the dynamic flow rate control strategy configuration, which in turn reduced the pressure on equipment and network management personnel.

Based on the capabilities of DPI devices, the flow control strategies that can be employed are varied. Preferably, the flow rate control policy may include at least one of the following: a granularity is a user's user control policy, and an granularity is an applied application group per user control policy.

The DPI device can identify and control the user's Internet application, so it can support the application-oriented flow rate control strategy, that is, the application group per-user control policy, and the application group per-user control strategy can ensure the development of key services and achieve fine control. Chemical. Of course, the DPI device can also support the user-oriented flow rate control strategy, that is, the user control policy, and the user control policy is coarser in granularity, but it also has a suitable scenario (that is, a scenario where the control precision is not high). The combination of the above two flow rate control strategies can meet the flow rate control requirements in most scenarios, but other applicable strategies are not excluded in the embodiments of the present invention.

As for whether a user control policy or an application group per user control policy is applied to a user, the manner of determining is set according to specific needs, and a preferred mode is provided in the preferred embodiment: Preferably, the user's flow rate control policy is The user control policy or application group per user control policy is determined by the upstream device according to the user's dynamic policy ID.

According to the user's dynamic policy ID, the flow rate control strategy is directly and quickly, and the applicability is the strongest. Here, the user's dynamic policy ID can be used as an attribute of the user itself, or can be assigned by other devices to the user.

Preferably, the flow rate control method may further include: after the user goes offline, the DPI device corresponding to the user receives the message of the undo flow rate control sent by the upstream device in real time, and cancels the flow rate control on the user. Corresponding to the real-time flow rate control strategy configuration of the user online, the user can also set the flow rate control after canceling the line. In this way, the dynamic flow rate control policy configuration scheme is more complete and complete, the user goes online to deliver the flow rate control policy to the device, and the user goes offline to cancel the flow rate control strategy on the device, and the manner of the action cycle according to the user state intelligent control strategy , can greatly reduce the load pressure of the equipment and the maintenance pressure of network managers.

Preferably, the foregoing upstream device may include: an AAA system, a DMS.

In the embodiment of the present invention, the AAA system and the DMS are preferentially used as the upstream device to implement the above flow rate control method, which is the easiest to implement, but it is not excluded that other devices in the network can also be used as the upstream device.

The application of the flow rate control method proposed by the present invention will be described in detail below with reference to Fig. 2 and a specific preferred embodiment.

The preferred embodiment provides a method for applying fine flow rate control to an AAA user based on the DPI technology. In general, the remote authentication dial-in user service (RADIUS) server authenticates the AAA system user. Then, the DMS sends a message to inform the user to go online. The DMS sends a customized flow rate control policy to the DPI device. The DPI device identifies the user or the user's Internet application, and the qualified user or user application will be controlled.

The DMS in the preferred embodiment provides a third-party message interface, which can communicate with any RADIUS server that satisfies the message format, and the application is more scalable.

2 is a flow chart of a flow rate control method according to a preferred embodiment of the present invention. As shown in FIG. 2, the method includes:

Step S202: The terminal user initiates an online (or offline) message requesting access to the network (or exiting) the network;

Step S204: The BRAS device forwards the message to the RADIUS server for processing; Step S206: The RADIUS server processes the user message, and performs authentication online (or Under the line) operation;

Step S208: The RADIUS server sends a control message to the DMS, where the message includes user IP, virtual local area network (VLAN) number, user status, and dynamic policy ID. According to the parameter information, the DMS can conveniently Locating the DPI device that the user passes through and determining the content of the flow rate control policy that needs to be delivered;

Step S210: The RADIUS server returns a processing message to the BRAS device.

Step S212: The BRAS device forwards the processing message to the terminal user.

Step S214: The third-party message interface of the DMS receives and processes the control message sent by the RADIUS server, and determines whether the flow rate control policy is delivered or revoked according to the state of the user, and determines whether the user control policy or the application group is delivered according to the dynamic policy ID. Per user control strategy; Step S216: DMS delivery (or 4 sales) dynamic flow rate control strategy;

Step S218: The user goes online, and the DPI device identifies the user or the application, and performs fine flow rate control on the user or the application that meets the control requirement.

3 is a block diagram showing the structure of a flow rate control device according to an embodiment of the present invention. The flow rate control device provided in this embodiment is located on the DPI device, as shown in FIG. 3, and includes:

The policy receiving module 302 is configured to receive a customized flow rate control policy of the user that is sent by the upstream device in real time after the user goes online and the current DPI device corresponds to the user;

The flow rate control module 304, coupled to the policy receiving module 302, is configured to control the flow rate of the user in accordance with the speed control policy described above.

The flow rate control device provided by the embodiment adopts a method of dynamically allocating a flow rate control strategy, and the user is deployed on the line as a timing of the flow rate control strategy, real-time configuring the flow rate control strategy for the user, and controlling the flow rate thereof, thereby solving the existing The shortcomings of the static configuration strategy in the technology enable the dynamic flow rate control strategy configuration, which reduces the pressure on equipment and network management personnel.

Preferably, the foregoing flow rate control policy may include at least one of the following: a user control policy whose granularity is a user, and an application group per user control policy whose granularity is an application. Based on the capabilities of the DPI device, the flow rate control strategy that can be adopted by the above flow rate control device includes, but is not limited to, an application group per-user control policy with application granularity, and a user-oriented policy with user granularity.

Preferably, whether the user's flow rate control policy is a user control policy or an application group per user control policy is determined by the upstream device according to the user's dynamic policy ID.

According to the user's dynamic policy ID, the flow rate control strategy is directly and quickly, and the applicability is the strongest. Preferably, the flow rate control device may further include: a control revocation module configured to receive a message of the undo flow rate control issued by the upstream device in real time after the user goes offline, and cancel the flow rate control to the user.

The setting of the control revocation module makes the dynamic flow rate control policy configuration scheme more complete and complete. The user goes online to deliver the flow rate control policy to the device, and the user cancels the flow rate control strategy on the device. This action cycle is based on the user state intelligent control strategy. The way, the load pressure of the equipment and the maintenance pressure of the network administrator can be greatly reduced.

Preferably, the foregoing upstream device may include: an AAA system, a DMS.

In the present invention, the flow rate control is preferably implemented by using the AAA system and the DMS as the upstream device, which is the easiest to implement.

From the above description, it can be seen that the embodiment of the present invention provides a scheme for dynamically controlling the flow rate of an AAA user's Internet application based on the DPI technology, and identifies and influences the AAA user's Internet application. The specific application of the key service is to control the dynamic flow rate. The solution links the AAA system and the DMS. The user goes online to deliver the flow rate control policy to the device. The user goes offline to cancel the flow rate control policy on the device. According to the user status, the action cycle of the intelligent control strategy is applied. , reducing the maintenance pressure on equipment and management personnel. There are two types of flow control strategies: including user control policies and application group per-user control strategies. The user control policy controls the total application of the user, restricts the user's Internet bandwidth, and the granularity is slightly thicker. The application group's per-user control policy is fine to the specific application of the user's Internet access, and the application is limited to the application that meets the control conditions. It ensures the development of key businesses and achieves refined control.

Obviously, those skilled in the art should understand that the above modules or steps of the present invention can be implemented by a general-purpose computing device, which can be concentrated on a single computing device or distributed over a network composed of multiple computing devices. Alternatively, they may be implemented by program code executable by the computing device, such that they may be stored in the storage device by the computing device and, in some cases, may be different from the order herein. The steps shown or described are performed, or they are separately fabricated into individual integrated circuit modules, or a plurality of modules or steps are fabricated as a single integrated circuit module. Thus, the invention is not limited to any specific combination of hardware and software.

The above is only the preferred embodiment of the present invention, and is not intended to limit the present invention, and various modifications and changes can be made to the present invention. Any modifications, equivalent substitutions, improvements, etc. within the spirit and scope of the invention are intended to be included within the scope of the invention.

Claims

Claim

A flow rate control method comprising:

After the user goes online, the deep packet detection DPI device corresponding to the user receives the customized flow rate control policy of the user that is sent by the upstream device in real time;

The DPI device performs flow rate control on the user according to the speed control policy.

The method according to claim 1, wherein the flow rate control policy comprises at least one of the following: a user control policy whose granularity is a user, and an application group per user control policy whose granularity is an application.

3. The method of claim 2, wherein the flow rate control policy is a user control ID determination.

The method according to any one of claims 1 to 3, wherein the method further comprises: after the user goes offline, the DPI device corresponding to the user receives the undo flow rate control that is sent by the upstream device in real time. The message, and undo the flow rate control for the user.

The method according to any one of claims 1 to 3, wherein the upstream device comprises: an authentication, authorization, and accounting AAA system, and a DPI management system.

6. A flow rate control device located on the deep packet detection DPI device, including:

The policy receiving module is configured to receive a customized flow rate control policy of the user that is sent by the upstream device in real time after the user goes online and the current DPI device corresponds to the user;

The flow rate control module is configured to perform flow rate control on the user according to the speed control policy.

The device according to claim 6, wherein the flow rate control policy comprises at least one of the following: a user control policy whose granularity is a user, and an application group per user control policy whose granularity is an application.

The apparatus according to claim 7, wherein the flow rate control policy is a user control policy or an application group per user control ID is determined.

The device according to any one of claims 6 to 8, wherein the device further comprises: a control revocation module, configured to receive the undo flow rate control sent by the upstream device in real time after the user goes offline The message, and undo the flow rate control for the user.

The device according to any one of claims 6 to 8, wherein the upstream device comprises: an authentication, authorization and charging AAA system, a DPI management system.