WO2014161205A1 - 一种网络拥塞处理方法、系统及装置 - Google Patents

一种网络拥塞处理方法、系统及装置 Download PDF

Info

Publication number
WO2014161205A1
WO2014161205A1 PCT/CN2013/074069 CN2013074069W WO2014161205A1 WO 2014161205 A1 WO2014161205 A1 WO 2014161205A1 CN 2013074069 W CN2013074069 W CN 2013074069W WO 2014161205 A1 WO2014161205 A1 WO 2014161205A1
Authority
WO
WIPO (PCT)
Prior art keywords
port
traffic
ring
node device
average
Prior art date
Application number
PCT/CN2013/074069
Other languages
English (en)
French (fr)
Inventor
何英军
Original Assignee
北京东土科技股份有限公司
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by 北京东土科技股份有限公司 filed Critical 北京东土科技股份有限公司
Publication of WO2014161205A1 publication Critical patent/WO2014161205A1/zh

Links

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L12/00—Data switching networks
    • H04L12/28—Data switching networks characterised by path configuration, e.g. LAN [Local Area Networks] or WAN [Wide Area Networks]
    • H04L12/42—Loop networks
    • H04L12/427—Loop networks with decentralised control
    • H04L12/43—Loop networks with decentralised control with synchronous transmission, e.g. time division multiplex [TDM], slotted rings

Definitions

  • the invention relates to a Chinese patent application filed on April 1, 2013, the Chinese Patent Application No. 201310111521.X, the invention name is a network congestion processing method, system and device. Priority is hereby incorporated by reference in its entirety.
  • the present invention relates to the field of industrial Ethernet technologies, and in particular, to a network congestion processing method, system, and apparatus.
  • BACKGROUND OF THE INVENTION Industrial Ethernet has very high requirements on the security of a network. Therefore, in order to enhance the reliability of the network in an industrial network, a ring redundant network, that is, a ring network, is generally formed.
  • a switch in the ring network blocks a ring port to form a communication link capable of data transmission. When there is a fault or disconnection in the communication link, the switch opens the blocked ring port and enables a new sound communication link. Data transmission is performed to improve the reliability of the industrial Ethernet network through rapid switching of the ring network.
  • Network congestion is a major hidden danger affecting the reliability of industrial ring networks.
  • Network congestion refers to the phenomenon that network traffic performance declines when the amount of data to be transmitted exceeds the network processing capacity when traffic peaks or overloads occur in the network.
  • Network congestion in the industrial ring network may result in CPU downtime of switching devices such as switches in the ring network, or serious industrial accidents such as network storms caused by loops in the ring network.
  • the CPU protection mode can also be adopted.
  • the switch detects that the data traffic of a certain port reaches the set traffic threshold, the switch isolates its CPU for a short time, thereby implementing the CPU itself. Protection, in the period when the switch isolates its own CPU, the switch will forward the received packet directly, so that the service packet cannot be processed by the CPU, and the switch directly forwards the received packet.
  • a packet causes a large number of forwarding packets to impact the CPU of the neighboring switch, causing the entire ring network to falter.
  • the embodiments of the present invention provide a network congestion processing method, system, and apparatus, which are used to solve the security risks caused by the network congestion processing method in the prior art, and may cause a ring network defect problem.
  • An embodiment of the present invention provides a network congestion processing method, where the network congestion processing method is applicable to a ring network, and the method includes:
  • the first node device receives the detection packet sent by the second node device by using the first ring port;
  • the ring port When it is detected that the traffic of the port is greater than the corresponding traffic of the port, and the port is a ring port, the ring port is set to receive the blocking state, and the packet is stopped and received through the ring port.
  • the third node device sends a detection packet, and when it detects that the traffic of the port exceeds the corresponding traffic average value of the port, and the port is not a ring port, the port is closed;
  • An embodiment of the present invention provides a network congestion processing apparatus, where the apparatus includes:
  • a receiving module configured to receive, by using the first ring port, a detection packet sent by the second node device
  • the detecting module is configured to detect, according to the detection packet, whether the traffic of each of the other ports exceeds the average value of the traffic corresponding to the set port;
  • the processing module is configured to: when detecting that the traffic of the port exceeds the set traffic corresponding to the port, and the port is a ring port, setting the ring port to receive the blocking state, stopping receiving the packet through the ring port, and Sending a detection packet to the third node device through the ring port, and detecting that the traffic of the port exceeds the set traffic average value of the port, and the port is not a ring port, the port is closed;
  • a sending module configured to return a detection response message to the second node device, to notify the second node device to open the ring port that is set to receive the blocking state.
  • An embodiment of the present invention provides a network congestion processing system, where the system includes multiple node devices, and the system includes:
  • a second node device configured to send a detection packet to the first node device, receive a detection response message sent by the first node device, and open a ring port that is set to receive the blocking state according to the detection response message;
  • a first node device configured to receive, by using the first port, a detection packet sent by the second node device, and detecting, according to the detection packet, whether the traffic of each of the other ports exceeds a set average value of the traffic corresponding to the port; detected If the traffic of the port exceeds the corresponding traffic average of the port, and the port is a ring port, set the ring port to receive the blocking state, stop receiving the port through the ring port, and pass the ring port to the port.
  • the three-node device sends a detection packet, and when it detects that the traffic of its own port exceeds the corresponding traffic average value of the port, and the port is not a ring port, the port is closed; and the detection response packet is returned to the second node device. Notifying the second node device to open the ring port set to receive the blocked state;
  • the third node device is configured to receive the detection packet sent by the first node device.
  • An embodiment of the present invention provides a network congestion processing method, system, and apparatus.
  • the first node device detects whether the traffic of each of its other ports is If the port is a ring port, the port is the ring port.
  • the port is the ring port.
  • the port is configured to receive the blocking status, stop receiving the packet through the ring port, and send a detection packet to the third node device connected thereto, and then notify the second node device to open the ring port that receives the blocking status.
  • FIG. 1 is a schematic diagram of a processing procedure of network congestion according to an embodiment of the present invention
  • FIG. 2 is a schematic diagram of a detailed processing procedure of network congestion according to an embodiment of the present invention.
  • FIG. 3 is a schematic diagram of another detailed processing procedure of network congestion according to an embodiment of the present invention.
  • FIG. 4 is a schematic structural diagram of a network congestion processing apparatus according to an embodiment of the present invention.
  • FIG. 5 is a schematic structural diagram of a network congestion processing system according to an embodiment of the present invention. DETAILED DESCRIPTION OF THE INVENTION
  • embodiments of the present invention provide a method, system, and apparatus for processing network congestion in a ring network.
  • FIG. 1 is a schematic diagram of a process for processing network congestion according to an embodiment of the present invention.
  • the process includes the following steps: S101: A first node device receives a detection packet sent by a second node device by using a first ring port.
  • the second node device when the second node device detects that an abnormal condition occurs, the second node device sends a detection packet to the first node device connected thereto.
  • the second node device detects that the abnormality of the port is that the usage rate of the CPU exceeds the set threshold, or the traffic of the port exceeds the set traffic threshold of the port, where the Since the embodiment is a method for handling network congestion, the traffic of the port refers to the data traffic received through the port.
  • S102 According to the detection packet, detecting whether the traffic of each of the other ports exceeds the corresponding traffic average value of the port, and if the traffic of the port exists exceeds the corresponding traffic average of the port, perform the step.
  • the first node device detects whether congestion occurs on each port of the self according to the detection packet. Specifically, in the embodiment of the present invention, whether the port is congested may be determined according to the traffic of each port. Moreover, in order to achieve the purpose of effectively processing the network congestion, in the embodiment of the present invention, the traffic average value corresponding to the port may be separately set and saved for each port of each node device, and when the detection is performed, according to the saved port corresponding The average traffic value and the current traffic on the port determine whether the port is abnormal.
  • the average value of the traffic set for each port can be equal or unequal.
  • step S103 Determine whether the port is a ring port. When the port is a ring port, proceed to step S104. Otherwise, proceed to step S105.
  • the ring port is configured to receive the blocking state, stop receiving the packet through the ring port, and send the detection packet to the third node device through the ring port. Then, step S106 is performed.
  • the packet receiving function of the ring port may be closed, that is, the ring is closed.
  • the port is set to receive the blocking state, and stop receiving the message through the ring port.
  • the third node device connected to the ring port is likely to be a device that generates network congestion, in order to accurately determine the root cause of network congestion, the second The node device sends a detection packet to the third node device through the ring port.
  • the third node device continues the above-described steps S101 and subsequent detection.
  • step S105 The port is closed. Then, step S106 is performed.
  • the port when it is determined that the non-ring port is congested, the port may be a new port or an abnormal port that is maliciously attacked. In order to avoid further congestion of the ring network, in the embodiment of the present invention, The port is closed.
  • S106 Return a detection response message to the second node device, and notify the second node device to open the ring port set to receive the blocking state.
  • the first node device After detecting the port of each port, the first node device returns a detection response message to the second node device, and notifies the second node device to open the ring port set to receive the blocking state, so as to receive the message normally. .
  • the traffic that is set by detecting the packet and corresponding to each port of each node device in the embodiment of the present invention is The value is used to detect whether each port of each node device is faulty, and then closes the port after the fault is found, so as to effectively deal with network congestion, avoid ring network, and improve the security of the ring network.
  • the node device when the node device detects that the node is abnormal, it sends a detection packet to the other node device connected to it, and sets the ring port that sends the detection packet to receive the blocking state.
  • the node device is referred to as a second node device, and the second node device detects that an abnormality occurs, and can determine according to the utilization rate of the CPU and/or the traffic of the port.
  • the second node device detects, for each ring port, whether the traffic of the ring port exceeds the set traffic threshold of the ring port, and the traffic of the ring port exceeds the set ring.
  • the traffic threshold corresponding to the port is set, the ring port is set to receive the blocking state, and the detection packet is sent to the first node device connected to the ring port.
  • the second node device detects whether the utilization rate of the CPU is greater than the set utilization threshold.
  • the second node device may Any ring port is configured to receive a blocking condition and send a detection message to the first node device connected to the ring port.
  • the second node device may also use the combination of the foregoing two methods, that is, the second node device detects whether the utilization rate of the CPU of the second node is greater than the set utilization threshold, and the utilization rate of the CPU itself.
  • the second node device detects, for each ring port of the ring, whether the traffic of the ring port exceeds the set traffic threshold of the ring port;
  • the traffic threshold corresponding to the port is set, the ring port is set to receive the blocking state, and the detection packet is sent to the first node device connected to the ring port.
  • the threshold value of the CPU of the second node device that is set may be determined according to the utilization rate of the CPU when the node device processes the file, and the traffic threshold corresponding to each ring port of the node device may be the ring port.
  • the average value of the traffic within the set time length may also be the traffic threshold of the port determined according to the processing capability of the node device CPU.
  • the second node device determines that it is abnormal, the process of network congestion is started.
  • the second node device determines that the receiving function of the abnormal ring port is closed, that is, the ring port is set to receive the blocking state, and stops receiving the packet sent by the other node device.
  • the second node device may be the node device that is the first to be abnormal in the ring network, or the node device that first discovers the congestion of the ring network, or one of the node devices that simultaneously discover the congestion of the ring network, as long as it is a node device.
  • the congestion of the ring network is found, and the network congestion processing method provided by the embodiment of the present invention can be processed.
  • the first node device After the first node device receives the detection packet through the ring port, it determines whether the traffic of each port exceeds the set traffic average value of the port according to the detection packet and the average traffic value set for each port.
  • the second node device sends a detection packet to the first node device connected to the ring port through the ring port, and the second node device sends the detection packet through the ring port, because the packet received through the ring port is caused by the packet.
  • the second node device Abnormal.
  • the packet received by the second node device through the port is sent by the first ring port of the first node device. Therefore, the first ring port of the first node device is also abnormal.
  • the first node device may no longer detect the faulty first ring port, and only detect other ports of its own.
  • each port is abnormal according to the average value of the traffic of each port. Therefore, it is first required to set the average value of the traffic corresponding to each port of each node device and save it.
  • the specific settings for the traffic average corresponding to each port include:
  • the traffic of the port is counted in the period according to the set statistics period
  • the statistics period of each node device may be the same or different.
  • the statistics period of each port of the same node device may be the same or different. When it is implemented, it can be flexibly set as needed.
  • FIG. 2 is a schematic diagram of a detailed processing procedure of network congestion according to an embodiment of the present invention, where the process includes the following steps:
  • the second node device detects the traffic of each ring port of its own.
  • each node device in the ring network can be a second node device, and each node device detects the traffic of each ring port at a time.
  • step S202 For each ring port, check whether the traffic of the ring port exceeds the set traffic threshold of the corresponding ring port. If the detection result is yes, go to step S203; otherwise, go to step S201.
  • the second node device when detecting whether the second node device is abnormal, may detect according to the manner provided by the foregoing embodiment, or determine whether the interest rate of the CPU exceeds the set utilization threshold, or may be based on the CPU. The combination of utilization and traffic is judged. In the specific implementation, any method may be employed, and this embodiment is not intended to limit the present invention.
  • the second node device sets the ring port to receive the blocking state, and sends a detection packet to the first node device connected to the ring port through the ring port.
  • the first node device receives the detection packet sent by the second node device by using the first ring port.
  • step S206 Determine whether the port is a ring port. When the port is a ring port, proceed to step S207; otherwise, proceed to step S208.
  • step S207 Set the ring port to receive the blocking state, stop receiving packets through the ring port, and pass the ring end.
  • the port sends a detection packet to the third node device connected thereto. Then, step S209 is performed.
  • step S208 The port is closed. Then, step S209 is performed.
  • S209 Return a detection response message to the second node device, and notify the second node device to open the ring port set to receive the blocking state.
  • the first node device After receiving the detection packet by the first ring port, the first node device detects whether each port except the first ring port is abnormal according to the detection message and the average value of the traffic set for each port.
  • the average value of the traffic corresponding to each port and the set port it is determined whether the current traffic of the port exceeds the corresponding traffic average value. When the traffic of the port exceeds the corresponding traffic average value, it is required. Determine if the port is a ring port. Different processing measures are applied to the ring port and the non-ring port in the embodiment of the present invention.
  • the port If the traffic of the port exceeds the corresponding traffic average, and the port is a ring port, it is considered that the packet is received by the ring port to prevent the packet received by the ring port from being caused to the first node device. Impact: The receiving function of the ring port is disabled. That is, the ring port is set to receive the blocking state, and the receiving of the packet through the ring port is stopped.
  • the first node device sends a detection packet to the third node device through the ring port.
  • the first node device returns the detection response message to the second node device after receiving the detection result, and the second node device receives the detection.
  • the ring port that is set to receive the blocked state is opened, and the other device sends the message to the other node device through the ring port.
  • the port When the traffic of a port exceeds the corresponding traffic average, and the port is a non-ring port, the port is considered to be the source of network congestion. In this case, the port may receive the packet sent by the new access device. In the embodiment of the present invention, the port needs to be closed in order to prevent the network from being further congested. At the same time, in order to ensure the normal communication of the second node device and avoid the loss of the packet, the first node device returns the detection response message to the second node device after receiving the detection result, and the second node device receives the detection. After the response packet is received, the ring port that is set to receive the blocked state is opened, and the packets sent by other node devices to the ring port are normally received.
  • the method further includes:
  • a congestion alarm is generated according to the address information of the first node device and the identifier information of the port, and is broadcasted in the ring network.
  • the address information of the first node device and the identification information of the port are generated, and a congestion alarm is generated,
  • the address information of the first node device and the identifier information of the port may be carried in the congestion alarm.
  • the example includes:
  • the port is determined to be a new port, and a new port congestion alarm is generated. If the corresponding traffic average is non-zero, the port is abnormal and the port is abnormally congested. Alarm ⁇ ⁇ ⁇ text.
  • the non-ring port When it is determined that the traffic of the non-ring port exceeds the traffic average value set for the port, the non-ring port is determined to be a new port or is subjected to a malicious attack.
  • the average value of the traffic corresponding to each port when the average value of the traffic corresponding to each port is set and saved, the average value of the traffic is determined according to the port in each statistical period. For a new port, since the port has no previous transmission, the average traffic value of the port is zero, and the saved traffic average value of the corresponding port is also zero. If the non-ring port is a non-new port, the corresponding traffic value is non-zero. If the port traffic is abnormal, the port is maliciously attacked.
  • the average value of the traffic corresponding to the port is zero. If the average traffic value is zero, the port is determined to be new. Port, the congestion alarm generated at this time is the new port congestion alarm. If the corresponding traffic average is non-zero, the port is determined to be maliciously attacked. The congestion alarm generated at this time. The text is an abnormal congestion alarm.
  • FIG. 3 is a schematic diagram of another detailed processing procedure of network congestion according to an embodiment of the present invention, where the process includes the following steps:
  • the second node device detects the traffic of each ring port of its own.
  • step S302 For each ring port, check whether the traffic of the ring port exceeds the set traffic threshold of the corresponding ring port. If the detection result is yes, go to step S303; otherwise, go to step S301.
  • the second node device sets the ring port to receive the blocking state, and sends a detection packet to the first node device connected to the ring port through the ring port.
  • the first node device receives the detection packet sent by the second node device by using the first ring port.
  • S306 Determine whether the port is a ring port. When the port is a ring port, proceed to step S307; otherwise, proceed to step S308.
  • the ring port is configured to receive the blocking state, stop receiving the packet through the ring port, and send the detection packet to the third node device connected thereto through the ring port. Then, step S312 is performed.
  • S310 Determine that the port is a new port, and generate a new port congestion alarm.
  • S311 Determine that the port is abnormal and generate an abnormal port congestion alarm.
  • S312 Return a detection response message to the second node device, and notify the second node device to open the ring port set to receive the blocking state.
  • step S312 and the steps S309 and S311 may be performed in a non-sequential manner, and may first return a detection response message to the second node device, or may first determine a specific cause of network congestion. Flexible choice.
  • FIG. 4 is a schematic structural diagram of a network congestion processing apparatus according to an embodiment of the present invention, where the apparatus includes: a receiving module 41, configured to receive, by using a first ring port, a detection packet sent by a second node device;
  • the detecting module 42 is configured to detect, according to the detection packet, whether the traffic of each of the other ports exceeds the average traffic value corresponding to the set port;
  • the processing module 43 is configured to: when detecting that the traffic of the port exceeds the set traffic average value of the port, and the port is a ring port, setting the ring port to receive the blocking state, and stopping receiving the packet through the ring port, And sending the detection packet to the third node device through the ring port, and detecting that the traffic of the port exceeds the set traffic average value of the port, and the port is not a ring port, the port is closed;
  • the sending module 44 is configured to return a detection response message to the second node device, to notify the second node device to open the ring port that is set to receive the blocked state.
  • the device also includes:
  • the broadcast module 45 is configured to generate a congestion alarm according to the address information of the first node device and the identifier information of the port, and broadcast in the ring network.
  • the broadcast module 45 is specifically configured to determine whether the average traffic value corresponding to the set port is zero. When the corresponding traffic average value is zero, the port is determined to be a new port, and a new port congestion alarm is generated. If the corresponding traffic average is non-zero, the port is abnormal and the port abnormal congestion alarm is generated.
  • the processing module 43 is specifically configured to: for each port, collect statistics on the traffic of the port according to the set statistics period; # ⁇ according to the statistics, determine the average value of the traffic of the port in the period; The traffic average is set to the average traffic value corresponding to the port.
  • FIG. 5 is a schematic structural diagram of a network congestion processing system according to an embodiment of the present disclosure, where the system includes multiple node devices, and the system includes:
  • the second node device 51 is configured to send a detection packet to the first node device, receive a detection response message sent by the first node device, and open the ring port that is set to receive the blocking state according to the detection response message;
  • the first node device 52 is configured to receive, by using the first port, a detection packet sent by the second node device, and detect, according to the detection packet, whether the traffic of each of the other ports exceeds the set traffic average value of the port; If the traffic of the port is greater than the traffic value of the port, and the port is a ring port, set the ring port to receive the blocking state, stop receiving packets through the ring port, and use the ring port to
  • the third node device sends a detection packet, and when it detects that the traffic of the port exceeds the set traffic average value of the port, and the port is not a ring port, the port is closed; and the second node device returns a detection response report. And informing the second node device to open the ring port set to receive the blocking
  • the third node device 53 is configured to receive the detection packet sent by the first node device.
  • the second node device 51 is configured to detect whether the traffic of each ring port of the ring exceeds the traffic threshold corresponding to the ring port; when the traffic of the ring port exceeds the traffic threshold corresponding to the ring port, The ring port is set to receive the blocking state, and sends a detection message to the first node device connected thereto.
  • An embodiment of the present invention provides a network congestion processing method, system, and apparatus.
  • the first node device detects whether the traffic of each of its other ports is If the port is a ring port, the port is a ring port. If the port is a ring port, the port is the ring port. When the port is a ring port, the port is the ring port.
  • the port is configured to receive the blocking status, stop receiving the packet through the ring port, and send a detection packet to the third node device connected thereto, and then notify the second node device to open the ring port that receives the blocking status.
  • embodiments of the present invention can be provided as a method, system, or computer program product. Accordingly, the present invention may take the form of an entirely hardware embodiment, an entirely software embodiment, or a combination of software and hardware. Moreover, the present invention can be embodied in the form of a computer program product embodied on one or more computer-usable storage interfaces (including but not limited to disk storage, CD-ROM, optical storage, etc.) containing computer usable program code.
  • computer-usable storage interfaces including but not limited to disk storage, CD-ROM, optical storage, etc.
  • These computer program instructions can also be stored in a particular computer capable of booting a computer or other programmable data processing device In a computer readable memory that operates in a computer readable memory, causing instructions stored in the computer readable memory to produce an article of manufacture comprising instruction means implemented in a block or in a flow or in a flow chart and/or block diagram of the flowchart The functions specified in the boxes.
  • These computer program instructions can also be loaded onto a computer or other programmable data processing device such that a series of operational steps are performed on a computer or other programmable device to produce computer-implemented processing for execution on a computer or other programmable device.
  • the instructions provide steps for implementing the functions specified in one or more of the flow or in a block or blocks of a flow diagram.

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Data Exchanges In Wide-Area Networks (AREA)
  • Small-Scale Networks (AREA)

Abstract

本申请提供一种网络拥塞处理方法、系统及装置，解决网络拥塞造成的安全隐患、导致的环网瘫痪问题。该方法中第一节点设备接收到检测报文后，检测自身每个端口的流量是否超过设置的流量均值，当非环端口的流量超过设置的该端口对应的流量均值，将该端口关闭，当该端口为环端口时，停止通过该环端口接收报文，并向与其连接的第三节点设备发送检测报文，之后通知第二节点设备打开接收阻塞状况的环端口。由于本申请通过检测报文，及对应每个节点设备的每个端口设置的流量均值，检测每个节点设备的每个端口是否故障，直到找到存在故障的端口后将其关闭，从而有效的处理网络拥塞的问题，有效避免环网瘫痪，提高了环网的安全性。

Description

一种网络拥塞处理方法、 系统及装置 本申请要求在 2013年 4月 01日提交中国专利局、 申请号为 201310111521.X、 发明名称为一 种网络拥塞处理方法、 系统及装置的中国专利申请的优先权， 其全部内容通过引用结合在本申 请中。 技术领域 本发明涉及工业以太网技术领域， 尤其涉及一种网络拥塞处理方法、 系统及装置。 背景技术 工业以太网对网络的安全性有非常高的要求， 因此， 工业组网中为了增强网络的可靠 性， 一般都会组建环形冗余网络， 即环网。 环网中某个交换机阻塞一个环端口， 形成一条 能够进行数据传输的通讯链路， 当通讯链路中存在故障或者断路时， 交换机将阻塞的环端 口打开， 启用一个新的健全的通信链路进行数据传输， 从而通过环网的快速倒换提高工业 以太网络的可靠性。
网络拥塞是影响工业环网可靠性的重大隐患， 网络拥塞是指网络中出现流量高峰或过 载等情况时， 由于需要传送的数据量超过了网络处理能力， 网络服务性能出现下降的现象。 在工业环网中出现网络拥塞，可能会导致环网中的交换机等交换设备的 CPU宕机，或环网 形成环路引发网络风暴等较为严重的工业事故。
现有技术中针对工业环网中的网络拥塞问题釆用了多种解决方案， 其中一种是釆用端 口限速的方式， 即设置环网中交换机每个端口的数据流量阈值， 当该端口的数据流量超过 设置的阈值时， 丢弃后续接收到的数据， 从而保证交换机的 CPU不会受到冲击。但是该方 法中， 当该端口的数据流量超过设置的阈值后， 无论什么数据都会被丢弃， 即正常的业务 报文也会被丢弃， 从而导致正常的业务报文无法被及时处理， 造成严重的安全隐患。
现有技术中在解决网络拥塞时，还可以釆用 CPU保护方式， 即当交换机检测到其某一 端口的数据流量达到设置的流量阈值时，交换机将其 CPU短时隔离，从而实现对自身 CPU 的保护，在该交换机将自身的 CPU进行隔离的时间段内，该交换机将直接转发接收到的报 文， 使得业务报文无法到达 CPU被正常的处理， 另外， 由于该交换机直接转发接收到的报 文， 使得大量的转发报文冲击相邻交换机的 CPU, 从而导致整个环网的瘫痪。
因此， 上述在工业环网中当大量数据冲击端口而导致网络拥塞时， 现有的端口限速和 CPU保护等解决方案， 只能暂时对工业环网中交换机的 CPU进行保护， 无法从根本上解 决工业环网的网络拥塞问题。 另外， 当造成网络拥塞的原因是恶意攻击或增加接入设备引 起的过载时， 网络拥塞的问题将更加的严重。 发明内容 本发明实施例提供了一种网络拥塞处理方法、 系统及装置， 用于解决现有技术中网络 拥塞处理方法造成的安全隐患， 及可能导致的环网瘫痪问题。
本发明实施例提供一种网络拥塞处理方法， 其中该网络拥塞处理方法适用于环网中， 该方法包括：
第一节点设备通过第一环端口接收第二节点设备发送的检测报文；
根据所述检测报文， 检测自身的其他每个端口的流量是否超过设置的该端口的对应流 量均值；
当检测到自身端口的流量超过设置的该端口的对应流量均值， 且该端口为环端口时， 将该环端口设置为接收阻塞状态， 停止通过该环端口接收报文， 并通过该环端口向第三节 点设备发送检测报文， 当检测到自身端口的流量超过设置的该端口的对应流量均值， 且该 端口非环端口时， 将该端口关闭；
向所述第二节点设备返回检测响应报文， 通知所述第二节点设备将设置为接收阻塞状 态的环端口打开。
本发明实施例提供一种网络拥塞处理装置， 所述装置包括：
接收模块， 用于通过第一环端口接收第二节点设备发送的检测报文；
检测模块， 用于根据所述检测报文， 检测自身的其他每个端口的流量是否超过设置的 该端口对应的流量均值；
处理模块， 用于当检测到自身端口的流量超过设置的该端口对应的流量均值， 且该端 口为环端口时， 将该环端口设置为接收阻塞状态， 停止通过该环端口接收报文， 并通过该 环端口向第三节点设备发送检测报文， 当检测到自身端口的流量超过设置的该端口对应的 流量均值， 且该端口非环端口时， 将该端口关闭；
发送模块， 用于向所述第二节点设备返回检测响应报文， 通知所述第二节点设备将设 置为接收阻塞状态的环端口打开。
本发明实施例提供一种网络拥塞处理系统， 所述系统包括多个节点设备， 所述系统包 括：
第二节点设备， 用于向第一节点设备发送检测报文； 接收第一节点设备发送的检测响 应报文， 根据所述检测响应报文将设置为接收阻塞状态的环端口打开；
第一节点设备， 用于通过第一端口接收第二节点设备发送的检测报文； 根据所述检测 报文， 检测自身的其他每个端口的流量是否超过设置的该端口对应的流量均值； 当检测到 自身端口的流量超过设置的该端口的对应流量均值， 且该端口为环端口时， 将该环端口设 置为接收阻塞状态， 停止通过该环端口接收 ·ί艮文， 并通过该环端口向第三节点设备发送检 测报文， 当检测到自身端口的流量超过设置的该端口的对应流量均值， 且该端口非环端口 时， 将该端口关闭； 向所述第二节点设备返回检测响应报文， 通知所述第二节点设备将设 置为接收阻塞状态的环端口打开；
第三节点设备， 用于接收所述第一节点设备发送的检测报文。
本发明实施例提供了一种网络拥塞处理方法、 系统及装置， 该方法中第一节点设备通 过环端口接收到第二节点设备发送的检测报文后， 检测自身的其他每个端口的流量是否超 过设置的该端口的对应流量均值， 当某一端口的流量超过设置的该端口对应的流量均值， 且该端口非环端口时， 将该端口关闭， 当该端口为环端口时， 将该环端口设置为接收阻塞 状况， 停止通过该环端口接收报文， 并向与其连接的第三节点设备发送检测报文， 之后通 知第二节点设备打开接收阻塞状况的环端口。 由于在本发明实施例中通过检测报文， 及对 应每个节点设备的每个端口设置的流量均值， 检测每个节点设备的每个端口是否出现网络 拥塞问题， 直到找到存在拥塞的端口后将其关闭， 从而有效的处理网络拥塞的问题， 有效 避免环网瘫痪， 提高了环网的安全性。 附图说明 图 1为本发明实施例提供的一种网络拥塞的处理过程示意图；
图 2为本发明实施例提供的一种网络拥塞的详细处理过程示意图；
图 3为本发明实施例提供的一种网络拥塞的另一详细处理过程示意图;
图 4为本发明实施例提供的一种网络拥塞处理装置的结构示意图；
图 5为本发明实施例提供的一种网络拥塞处理系统结构示意图。 具体实施方式 为了有效的处理网络拥塞， 避免环网瘫痪， 提高环网的安全性， 本发明实施例提供了 一种适用于环网中的网络拥塞的处理方法、 系统及装置。
下面结合说明书附图， 对本发明实施例进行详细说明。
图 1为本发明实施例提供的一种网络拥塞的处理过程示意图， 该过程包括以下步骤： S101 : 第一节点设备通过第一环端口接收第二节点设备发送的检测报文。
具体的， 在本发明实施例中当第二节点设备检测到自身出现异常情况时， 向与其连接 的第一节点设备发送检测报文。 该第二节点设备检测到自身出现异常情况可以是， 自身的 CPU的使用率超过设置的阈值， 或端口的流量超过设置的该端口的流量阈值， 其中， 本发 明实施例由于是处理网络拥塞的方法， 端口的流量是指通过该端口接收到的数据流量。 S102: 根据所述检测报文， 检测自身的其他每个端口的流量是否超过设置的该端口的 对应流量均值， 当自身存在端口的流量超过设置的该端口的对应流量均值时， 进行步骤
S103 , 否则， 进行 S106。
在本发明实施例中当第一节点设备接收到检测报文后， 根据检测报文检测自身的每个 端口是否出现拥塞。 具体的， 在本发明实施例中可以根据每个端口的流量， 确定端口是否 出现拥塞。 而且， 为了达到有效处理网络拥塞的目的， 在本发明实施例中可以针对每个节 点设备的每个端口， 分别设置该端口对应的流量均值并保存， 当进行检测时， 根据保存的 该端口对应的流量均值及当前该端口的流量， 确定该端口是否异常。
针对每个端口设置的流量均值， 可以相等， 也可以不等。 在针对每个端口设置其对应 的流量均值时， 可以统计该端口在任意时间段内的流量， 从而确定流量均值， 也可以根据 经验设置每个端口对应的流量均值。
S103 : 判断该端口是否为环端口， 当该端口为环端口时， 进行步骤 S104, 否则， 进行 步骤 S105。
本发明实施例在处理网络拥塞时， 针对端口类型的不同， 釆用不同的处理方式。
S104: 将该环端口设置为接收阻塞状态， 停止通过该环端口接收报文， 并通过该环端 口向第三节点设备发送检测报文。 之后进行步骤 S106。
当确定环端口拥塞时， 可以确定产生网络拥塞的 ·ί艮文发送到该环端口， 为了避免继续 产生拥塞， 在本发明实施例中可以将该环端口的报文接收功能关闭， 即将该环端口设置为 接收阻塞状态， 停止通过该环端口接收 ·ί艮文。
另外， 由于产生网络拥塞的 ·ί艮文发送到该环端口， 而与该环端口连接的第三节点设备 很可能就是产生网络拥塞的设备， 因此为了准确的确定出网络拥塞的根源， 第二节点设备 通过该环端口向第三节点设备发送检测报文。 第三节点设备继续进行上述 S101 及之后的 检测步骤。
S105: 将该端口关闭。 之后进行步骤 S106。
在本发明实施例中当确定非环端口产生拥塞时， 则该端口可能为新增端口， 也可以是 被恶意攻击的异常端口， 为了避免环网的进一步拥塞， 在本发明实施例中需要将该端口关 闭。
S106: 向所述第二节点设备返回检测响应报文， 通知所述第二节点设备将设置为接收 阻塞状态的环端口打开。
当第一节点设备对自身的每个端口检测完毕后， 向第二节点设备返回检测响应报文， 通知第二节点设备将设置为接收阻塞状态的环端口打开， 以便于正常接收 ·ί艮文。
由于在本发明实施例中通过检测报文， 及对应每个节点设备的每个端口设置的流量均 值， 检测每个节点设备的每个端口是否故障， 直到找到存在故障的端口后将其关闭， 从而 有效的处理网络拥塞的问题， 避免环网瘫痪， 提高了环网的安全性。
在本发明实施例的环网中， 当节点设备检测到自身出现异常时， 向与其连接的其他节 点设备发送检测报文， 将自身发送检测报文的环端口设置为接收阻塞状态。 具体的， 将该 节点设备称为第二节点设备，该第二节点设备检测自身出现异常，可以根据自身 CPU的利 用率和 /或端口的流量来进行判断。
当根据端口流量来进行判断时， 该第二节点设备针对每个环端口， 时刻检测该环端口 的流量是否超过设置的该环端口对应的流量阈值， 当该环端口的流量超过设置的该环端口 对应的流量阈值时， 将该环端口设置为接收阻塞状态， 并向与该环端口连接的第一节点设 备发送检测报文。
当根据自身 CPU的利用率进行判断时， 第二节点设备检测自身 CPU的利用率是否大 于设置的利用率阈值， 当自身 CPU的利用率大于设置的利用率阈值时，该第二节点设备可 以将任一环端口设置为接收阻塞状况， 并向与该环端口连接的第一节点设备发送检测报 文。
或者， 第二节点设备在判断自身是否异常时， 也可以釆用上述两种方式的结合， 即第 二节点设备检测自身的 CPU的利用率是否大于设置的利用率阈值， 当自身 CPU的利用率 大于设置的利用率阈值时， 所述第二节点设备针对自身的每个环端口， 检测该环端口的流 量是否超过设置的该环端口对应的流量阈值； 当环端口的流量超过设置的该环端口对应的 流量阈值时， 将所述环端口设置为接收阻塞状态， 并向与该环端口连接的第一节点设备发 送检测报文。 其中，设置的该第二节点设备 CPU的利用率阈值， 可以是根据节点设备正常 处理 4艮文时 CPU的利用率确定的，该节点设备中每个环端口对应的流量阈值可以时该环端 口在设定时间长度内的流量均值，也可以是根据节点设备 CPU的处理能力，确定的端口的 流量阈值。
无论釆用上述哪种方式， 当第二节点设备确定自身异常时，开始进行网络拥塞的处理。 并且为了避免拥塞的报文进一步对自身造成损坏， 该第二节点设备将确定为异常的环端口 的接收功能关闭， 即将该环端口设置为接收阻塞状态，停止接收其他节点设备发送的报文。 该第二节点设备可以是环网中最先出现异常的节点设备， 或称为最先发现环网拥塞的节点 设备， 也可以是同时发现环网拥塞的节点设备中的一个， 只要是节点设备发现环网拥塞， 即可釆用本发明实施例提供的该网对络拥塞处理方法进行处理。
当第一节点设备通过环端口接收到该检测报文后， 根据该检测报文， 及针对每个端口 设置的流量均值， 确定其他每个端口的流量是否超过设置的该端口对应的流量均值。 由于 第二节点设备通过环端口向与该环端口连接的第一节点设备发送检测报文， 而该第二节点 设备通过该环端口发送检测报文， 就是因为通过该环端口接收的报文导致该第二节点设备 异常。 而该第二节点设备通过该端口接收的报文， 是通过第一节点设备的第一环端口发送 的， 因此此时该第一节点设备的该第一环端口也是存在异常的， 在本发明实施例中， 为了 提高网路拥塞的处理效率， 该第一节点设备可以不再检测该存在故障的第一环端口， 只检 测自身的其他端口即可。
由于本发明实施例是根据每个端口的流量均值， 判断每个端口是否异常的， 因此首先 需要设置每个节点设备的每个端口对应的流量均值并保存。 具体的设置每个端口对应的流 量均值时包括：
针对每个端口， 按照设置的统计周期， 在该周期内统计该端口的流量；
根据统计的流量， 确定该端口在该周期内的流量均值；
将该流量均值设置为该端口对应的流量均值。
在统计每个端口的流量均值时， 每个节点设备的统计周期可以相同， 也可以不同， 同 一节点设备的每个端口的统计周期可以相同， 也可以不同。 具体实施时， 可以根据需要灵 活设置。
图 2为本发明实施例提供的一种网络拥塞的详细处理过程示意图， 该过程包括以下步 骤：
S201 : 第二节点设备检测自身每个环端口的流量。
此时环网中的每个节点设备都可以是第二节点设备， 每个节点设备时刻检测自身每个 环端口的流量。
S202: 针对每个环端口， 检测该环端口的流量是否超过设置的对应该环端口的流量阈 值， 当检测结果为是时， 进行步骤 S203 , 否则， 进行步骤 S201。
在本发明实施例中该第二节点设备在检测自身是否异常时， 可以根据上述实施例提供 的方式进行检测，也可以判断自身 CPU的利率用是否超过设置的利用率阈值，或者也可以 根据 CPU利用率与流量的结合进行判断。在具体实现时， 可以釆用任意方法， 本实施例不 作为的对本发明的限制。
S203 : 第二节点设备将该环端口设置为接收阻塞状态， 并通过该环端口向与该环端口 连接的第一节点设备发送检测报文。
S204: 第一节点设备通过第一环端口接收第二节点设备发送的检测报文。
S205 : 根据所述检测报文， 检测自身的其他每个端口的流量是否超过设置的该端口对 应的流量均值， 当自身存在端口的流量超过设置的该端口对应的流量阈值时， 进行步骤 S206 , 否则， 进行 S209。
S206: 判断该端口是否为环端口， 当该端口为环端口时， 进行步骤 S207 , 否则， 进行 步骤 S208。
S207: 将该环端口设置为接收阻塞状态， 停止通过该环端口接收报文， 并通过该环端 口向与其连接的第三节点设备发送检测报文。 之后进行步骤 S209。
S208: 将该端口关闭。 之后进行步骤 S209。
S209: 向所述第二节点设备返回检测响应报文， 通知所述第二节点设备将设置为接收 阻塞状态的环端口打开。
当第一节点设备通过第一环端口接收到该检测报文后， 根据该检测报文， 及针对每个 端口设置的流量均值， 检测除该第一环端口之外的每个端口是否异常。
具体的根据每个端口， 及设置的该端口对应的流量均值， 判断该端口当前的流量是否 超过设置的其对应的流量均值， 当该端口的流量超过设置的其对应的流量均值时， 还需要 判断该端口是否为环端口。 在本发明实施例中针对环端口和非环端口釆用不同的处理措 施。
当端口的流量超过设置的其对应的流量均值， 且该端口为环端口时， 则认为通过该环 端口接收产生拥塞的报文， 为了避免该环端口接收的报文对该第一节点设备造成冲击， 将 该环端口的接收功能关闭， 即将该环端口设置为接收阻塞状态， 停止通过该环端口接收报 文。 另外， 可以同时确定造成该环端口流量大的原因， 是接收到的其他节点设备发送的拥 塞报文， 与该环端口连接的第三节点设备很可能存在引起拥塞的端口， 而为了进一步确定 到底是哪个端口引起的网络拥塞， 该第一节点设备通过该环端口向第三节点设备发送检测 报文。 同时， 为了保证第二节点设备的正常通信， 避免报文的丢失， 该第一节点设备得到 检测结果并处理后， 向第二节点设备返回检测响应报文， 当第二节点设备接收到该检测响 应报文后， 将设置为接收阻塞状态的环端口打开， 正常接收其他节点设备通过该环端口向 其发送的 4艮文。
当端口的流量超过设置的其对应的流量均值， 且该端口非环端口时， 则认为该端口为 导致网络拥塞的根源， 此时该端口可能是接收了新接入设备发送的报文或收到了恶意攻击 的报文， 因此为了防止网络的进一步拥塞， 在本发明实施例中需要将该端口关闭。 同时， 为了保证第二节点设备的正常通信， 避免报文的丢失， 该第一节点设备得到检测结果并处 理后， 向第二节点设备返回检测响应报文， 当第二节点设备接收到该检测响应报文后， 将 设置为接收阻塞状态的环端口打开， 正常接收其他节点设备通过该环端口向其发送的报 文。
在本发明实施例中当第一节点设备确定自身的某一非环端口的流量， 超过设置的该端 口对应的流量均值时， 将该端口关闭后， 为了通知其他节点设备及网管设备， 并便于后续 工作人员进行网络故障分析， 在本发明实施例中该方法还包括：
根据所述第一节点设备的地址信息， 及该端口的标识信息， 生成拥塞告警 4艮文， 并在 该环网内广播。
具体的，在才 居该第一节点设备的地址信息和端口的标识信息，生成拥塞告警 ·ί艮文时， 可以将该第一节点设备的地址信息和端口的标识信息， 携带在该拥塞告警 ·ί艮文中。
另外， 在本发明实施例中为了便于后续工作人员进行网络故障分析， 可以准确的确定 当前发生网络拥塞，是因为新增端口引起的，还是因为端口遭到恶意攻击造成异常引起的， 本发明实施例在生成拥塞告警报文时包括：
判断设置的所述端口对应的流量均值是否为零；
当其对应的流量均值为零时，则确定该端口为新增端口，生成新增端口拥塞告警 ·ί艮文； 当其对应的流量均值非零时， 则确定该端口异常， 生成端口异常拥塞告警 ·ί艮文。
当确定了非环端口的流量超过了针对该端口设置的流量均值时， 确定该非环端口为新 增端口或受到恶意攻击， 为了便于工作人员后续进行网络故障的分析， 在本发明实施例中 可以根据保存的对应每个端口的流量均值， 确定当前发生网络拥塞的原因。
由于在本发明实施例中， 在设置并保存每个端口对应的流量均值时， 根据该端口在每 个统计周期内流量均值确定。 对于新增端口， 由于之前该端口无 ·ί艮文传输， 因此该端口的 流量均值为零， 保存的对应该端口的流量均值也为零。 如果非环端口为非新增端口， 其对 应的流量均值非零， 如果该端口的流量异常， 则说明该端口受到了恶意攻击。
因此当某一非环端口的流量超过设置的该端口对应的流量均值时， 判断保存的该端口 对应的流量均值是否为零， 当其对应的流量均值为零时， 则确定该端口为新增端口， 此时 生成的拥塞告警 ·ί艮文为新增端口拥塞告警 ·ί艮文； 当其对应的流量均值非零时， 则确定该端 口受到恶意攻击， 此时生成的拥塞告警 ·ί艮文为异常拥塞告警 ·ί艮文。
图 3为本发明实施例提供的一种网络拥塞的另一详细处理过程示意图， 该过程包括以 下步骤：
S301 : 第二节点设备检测自身每个环端口的流量。
S302: 针对每个环端口， 检测该环端口的流量是否超过设置的对应该环端口的流量阈 值， 当检测结果为是时， 进行步骤 S303 , 否则， 进行步骤 S301。
S303 : 第二节点设备将该环端口设置为接收阻塞状态， 并通过该环端口向与该环端口 连接的第一节点设备发送检测报文。
S304: 第一节点设备通过第一环端口接收第二节点设备发送的检测报文。
S305 : 根据所述检测报文， 检测自身的其他每个端口的流量是否超过设置的该端口对 应的流量均值， 当自身存在端口的流量超过设置的该端口对应的流量阈值时， 进行步骤 S306 , 否则， 进行 S312。
S306: 判断该端口是否为环端口， 当该端口为环端口时， 进行步骤 S307 , 否则， 进行 步骤 S308。
S307: 将该环端口设置为接收阻塞状态， 停止通过该环端口接收报文， 并通过该环端 口向与其连接的第三节点设备发送检测报文。 之后进行步骤 S312。 S308: 将该端口关闭。
S309: 判断该端口的对应的流量均值是否为零， 当判断结果为是时， 进行步骤 S310 , 否则， 进行步骤 S311。
S310: 确定该端口为新增端口， 生成新增端口拥塞告警 ·ί艮文。
S311 : 确定该端口异常， 生成端口异常拥塞告警 ·ί艮文。
S312: 向所述第二节点设备返回检测响应报文， 通知所述第二节点设备将设置为接收 阻塞状态的环端口打开。
其中， 上述步骤 S312与步骤 S309 S311之间在执行时可以不分先后， 可以先向第二 节点设备返回检测响应报文， 也可以先判断出现网络拥塞的具体原因， 具体实施时， 可以 根据需要灵活选择。
图 4为本发明实施例提供的一种网络拥塞处理装置的结构示意图， 所述装置包括： 接收模块 41 , 用于通过第一环端口接收第二节点设备发送的检测报文；
检测模块 42 , 用于根据所述检测报文， 检测自身的其他每个端口的流量是否超过设置 的该端口对应的流量均值；
处理模块 43 , 用于当检测到自身端口的流量超过设置的该端口对应的流量均值， 且该 端口为环端口时， 将该环端口设置为接收阻塞状态， 停止通过该环端口接收报文， 并通过 该环端口向第三节点设备发送检测报文， 当检测到自身端口的流量超过设置的该端口对应 的流量均值， 且该端口非环端口时， 将该端口关闭；
发送模块 44 , 用于向所述第二节点设备返回检测响应报文， 通知所述第二节点设备将 设置为接收阻塞状态的环端口打开。
所述装置还包括：
广播模块 45 , 用于根据所述第一节点设备的地址信息， 及该端口的标识信息， 生成拥 塞告警 ·ί艮文， 并在该环网内广播。
所述广播模块 45 , 具体用于判断设置的所述端口对应的流量均值是否为零； 当其对应 的流量均值为零时， 则确定该端口为新增端口， 生成新增端口拥塞告警 ·ί艮文； 当其对应的 流量均值非零时， 则确定该端口异常， 生成端口异常拥塞告警 ·ί艮文。
所述处理模块 43 , 具体用于针对每个端口， 按照设置的统计周期， 在该周期内统计该 端口的流量； # ^据统计的流量， 确定该端口在该周期内的流量均值； 将该流量均值设置为 该端口对应的流量均值。
图 5为本发明实施例提供的一种网络拥塞处理系统结构示意图， 所述系统包括多个节 点设备， 所述系统包括：
第二节点设备 51 , 用于向第一节点设备发送检测报文； 接收第一节点设备发送的检测 响应报文， 根据所述检测响应报文将设置为接收阻塞状态的环端口打开； 第一节点设备 52, 用于通过第一端口接收第二节点设备发送的检测报文； 根据所述检 测报文， 检测自身的其他每个端口的流量是否超过设置的该端口对应的流量均值； 当检测 到自身端口的流量超过设置的该端口对应的流量均值， 且该端口为环端口时， 将该环端口 设置为接收阻塞状态， 停止通过该环端口接收报文， 并通过该环端口向第三节点设备发送 检测报文， 当检测到自身端口的流量超过设置的该端口对应的流量均值， 且该端口非环端 口时， 将该端口关闭； 向所述第二节点设备返回检测响应报文， 通知所述第二节点设备将 设置为接收阻塞状态的环端口打开；
第三节点设备 53 , 用于接收所述第一节点设备发送的检测报文。
所述第二节点设备 51 ,具体用于检测自身的每个环端口的流量是否超过设置该环端口 对应的流量阈值； 当环端口的流量超过设置的该环端口对应的流量阈值时， 将所述环端口 设置为接收阻塞状态， 并向与其连接的第一节点设备发送检测报文。
本发明实施例提供了一种网络拥塞处理方法、 系统及装置， 该方法中第一节点设备通 过环端口接收到第二节点设备发送的检测报文后， 检测自身的其他每个端口的流量是否超 过设置的对应该端口的流量均值， 当某一端口的流量超过设置的对应该端口的流量均值， 且该端口非环端口时， 将该端口关闭， 当该端口为环端口时， 将该环端口设置为接收阻塞 状况， 停止通过该环端口接收报文， 并向与其连接的第三节点设备发送检测报文， 之后通 知第二节点设备打开接收阻塞状况的环端口。 由于在本发明实施例中通过检测报文， 及对 应每个节点设备的每个端口设置的流量均值， 检测每个节点设备的每个端口是否出现网络 拥塞问题， 直到找到存在拥塞的端口后将其关闭， 从而有效的处理网络拥塞的问题， 有效 避免环网瘫痪， 提高了环网的安全性。
本领域内的技术人员应明白， 本发明的实施例可提供为方法、 系统、 或计算机程序产 品。 因此， 本发明可釆用完全硬件实施例、 完全软件实施例、 或结合软件和硬件方面的实 施例的形式。 而且， 本发明可釆用在一个或多个其中包含有计算机可用程序代码的计算机 可用存储介盾 （包括但不限于磁盘存储器、 CD-ROM、 光学存储器等）上实施的计算机程 序产品的形式。
本发明是参照根据本发明实施例的方法、 设备（系统）、 和计算机程序产品的流程图 和 /或方框图来描述的。 应理解可由计算机程序指令实现流程图和 /或方框图中的每一流 程和 /或方框、 以及流程图和 /或方框图中的流程和 /或方框的结合。 可提供这些计算机 程序指令到通用计算机、 专用计算机、 嵌入式处理机或其他可编程数据处理设备的处理器 以产生一个机器， 使得通过计算机或其他可编程数据处理设备的处理器执行的指令产生用 于实现在流程图一个流程或多个流程和 /或方框图一个方框或多个方框中指定的功能的 装置。
这些计算机程序指令也可存储在能引导计算机或其他可编程数据处理设备以特定方 式工作的计算机可读存储器中， 使得存储在该计算机可读存储器中的指令产生包括指令装 置的制造品， 该指令装置实现在流程图一个流程或多个流程和 /或方框图一个方框或多个 方框中指定的功能。
这些计算机程序指令也可装载到计算机或其他可编程数据处理设备上， 使得在计算机 或其他可编程设备上执行一系列操作步骤以产生计算机实现的处理， 从而在计算机或其他 可编程设备上执行的指令提供用于实现在流程图一个流程或多个流程和 /或方框图一个 方框或多个方框中指定的功能的步骤。
尽管已描述了本发明的优选实施例， 但本领域内的技术人员一旦得知了基本创造性概 念， 则可对这些实施例作出另外的变更和修改。 所以， 所附权利要求意欲解释为包括优选 实施例以及落入本发明范围的所有变更和修改。
显然， 本领域的技术人员可以对本发明实施例进行各种改动和变型而不脱离本发明实 施例的精神和范围。 这样， 倘若本发明实施例的这些修改和变型属于本发明权利要求及其 等同技术的范围之内， 则本发明也意图包含这些改动和变型在内。

Claims

权 利 要 求
1、 一种网络拥塞处理方法， 其中该网络拥塞处理方法适用于环网中， 其特征在于， 该方法包括：
第一节点设备通过第一环端口接收第二节点设备发送的检测报文；
根据所述检测报文， 检测自身的其他每个端口的流量是否超过设置的该端口的对应流 量均值；
当检测到自身端口的流量超过设置的该端口的对应流量均值， 且该端口为环端口时， 将该环端口设置为接收阻塞状态， 停止通过该环端口接收报文， 并通过该环端口向第三节 点设备发送检测报文， 当检测到自身端口的流量超过设置的该端口的对应流量均值， 且该 端口非环端口时， 将该端口关闭；
向所述第二节点设备返回检测响应报文， 通知所述第二节点设备将设置为接收阻塞状 态的环端口打开。
2、 如权利要求 1 所述的处理方法， 其特征在于， 所述第二节点设备发送检测报文包 括：
所述第二节点设备针对自身的每个环端口， 检测该环端口的流量是否超过设置的该环 端口对应的流量阈值；
当环端口的流量超过设置的该环端口对应的流量阈值时， 将所述环端口设置为接收阻 塞状态， 并向与该环端口连接的第一节点设备发送检测报文。
3、 如权利要求 1 所述的处理方法， 其特征在于， 所述将该端口关闭后， 所述方法还 包括：
根据所述第一节点设备的地址信息， 及该端口的标识信息， 生成拥塞告警 4艮文， 并在 该环网内广播。
4、 如权利要求 3所述的处理方法， 其特征在于， 所述生成拥塞告警报文包括： 判断设置的所述端口对应的流量均值是否为零；
当其对应的流量均值为零时，则确定该端口为新增端口，生成新增端口拥塞告警 ·ί艮文； 当其对应的流量均值非零时， 则确定该端口异常， 生成端口异常拥塞告警 ·ί艮文。
5、 如权利要求 1 所述的处理方法， 其特征在于， 设置该端口对应的所述流量均值包 括：
针对每个端口， 按照设置的统计周期， 在该周期内统计该端口的流量；
根据统计的流量， 确定该端口在该周期内的流量平均值；
将该流量平均值设置为该端口对应的流量均值。
6、 一种网络拥塞处理装置， 其中该网络拥塞处理装置适用于环网中， 其特征在于， 所述装置包括：
接收模块， 用于通过第一环端口接收第二节点设备发送的检测报文；
检测模块， 用于根据所述检测报文， 检测自身的其他每个端口的流量是否超过设置的 该端口对应的流量均值；
处理模块， 用于当检测到自身端口的流量超过设置的该端口对应的流量均值， 且该端 口为环端口时， 将该环端口设置为接收阻塞状态， 停止通过该环端口接收报文， 并通过该 环端口向第三节点设备发送检测报文， 当检测到自身端口的流量超过设置的该端口对应的 流量均值， 且该端口非环端口时， 将该端口关闭；
发送模块， 用于向所述第二节点设备返回检测响应报文， 通知所述第二节点设备将设 置为接收阻塞状态的环端口打开。
7、 如权利要求 6所述的装置， 其特征在于， 所述装置还包括：
广播模块， 用于根据所述第一节点设备的地址信息， 及该端口的标识信息， 生成拥塞 告警报文， 并在该环网内广播。
8、 如权利要求 7 所述的装置， 其特征在于， 所述广播模块， 具体用于判断设置的所 述端口对应的流量均值是否为零； 当其对应的流量均值为零时，则确定该端口为新增端口， 生成新增端口拥塞告警 ·ί艮文； 当其对应的流量均值非零时， 则确定该端口异常， 生成端口 异常拥塞告警 ·ί艮文。
9、 如权利要求 6所述的装置， 其特征在于， 所述处理模块， 具体用于针对每个端口， 按照设置的统计周期， 在该周期内统计该端口的流量； 根据统计的流量， 确定该端口在该 周期内的流量平均值； 将该流量平均值设置为该端口对应的流量均值。
10、 一种网络拥塞处理系统， 所述系统包括多个节点设备， 其特征在于， 所述系统包 括：
第二节点设备， 用于向第一节点设备发送检测报文； 接收第一节点设备发送的检测响 应报文， 根据所述检测响应报文将设置为接收阻塞状态的环端口打开；
第一节点设备， 用于通过第一端口接收第二节点设备发送的检测报文； 根据所述检测 报文， 检测自身的其他每个端口的流量是否超过设置的该端口对应的流量均值； 当检测到 自身端口的流量超过设置的该端口的对应流量均值， 且该端口为环端口时， 将该环端口设 置为接收阻塞状态， 停止通过该环端口接收 ·ί艮文， 并通过该环端口向第三节点设备发送检 测报文， 当检测到自身端口的流量超过设置的该端口的对应流量均值， 且该端口非环端口 时， 将该端口关闭； 向所述第二节点设备返回检测响应报文， 通知所述第二节点设备将设 置为接收阻塞状态的环端口打开；
第三节点设备， 用于接收所述第一节点设备发送的检测报文。
PCT/CN2013/074069 2013-04-01 2013-04-11 一种网络拥塞处理方法、系统及装置 WO2014161205A1 (zh)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
CN201310111521.X 2013-04-01
CN201310111521.XA CN103227753B (zh) 2013-04-01 2013-04-01 一种网络拥塞处理方法、系统及装置

Publications (1)

Publication Number Publication Date
WO2014161205A1 true WO2014161205A1 (zh) 2014-10-09

Family

ID=48838022

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2013/074069 WO2014161205A1 (zh) 2013-04-01 2013-04-11 一种网络拥塞处理方法、系统及装置

Country Status (2)

Country Link
CN (1) CN103227753B (zh)
WO (1) WO2014161205A1 (zh)

Cited By (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN107623685A (zh) * 2017-09-08 2018-01-23 杭州安恒信息技术有限公司 快速检测SYN Flood攻击的方法及装置

Families Citing this family (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN104702499A (zh) * 2015-02-11 2015-06-10 杭州华三通信技术有限公司 一种判断本地网络生成环路的方法和设备
CN104683204B (zh) * 2015-03-17 2017-09-29 深圳市振兴光通信股份有限公司 一种FastRing环网的控制方法和装置
CN105959253A (zh) * 2015-11-19 2016-09-21 中国银联股份有限公司 一种确定待清洗数据流的方法及装置
CN107154886A (zh) * 2016-03-03 2017-09-12 中兴通讯股份有限公司 一种节点设备及环网切换方法
CN113315652B (zh) * 2021-04-29 2022-07-19 山东英信计算机技术有限公司 一种优化交换机访问控制的方法、系统、设备及介质

Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US7065050B1 (en) * 1998-07-08 2006-06-20 Broadcom Corporation Apparatus and method for controlling data flow in a network switch
WO2009043146A1 (en) * 2007-10-03 2009-04-09 Genesis Technical Systems Corp. Dynamic, asymmetric rings
CN101483570A (zh) * 2009-02-17 2009-07-15 杭州华三通信技术有限公司 一种防止中继链路的环网临时环路的方法、系统及设备
CN102984027A (zh) * 2012-11-27 2013-03-20 华为技术有限公司 一种检测报文成环的方法和设备

Family Cites Families (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101686158B (zh) * 2008-09-22 2012-11-14 中兴通讯股份有限公司 以太网环路保护故障恢复的控制方法及以太网环路节点
CN101640644B (zh) * 2009-09-01 2011-11-16 杭州华三通信技术有限公司 基于灵活链路组的流量均衡方法和设备

Patent Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US7065050B1 (en) * 1998-07-08 2006-06-20 Broadcom Corporation Apparatus and method for controlling data flow in a network switch
WO2009043146A1 (en) * 2007-10-03 2009-04-09 Genesis Technical Systems Corp. Dynamic, asymmetric rings
CN101483570A (zh) * 2009-02-17 2009-07-15 杭州华三通信技术有限公司 一种防止中继链路的环网临时环路的方法、系统及设备
CN102984027A (zh) * 2012-11-27 2013-03-20 华为技术有限公司 一种检测报文成环的方法和设备

Cited By (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN107623685A (zh) * 2017-09-08 2018-01-23 杭州安恒信息技术有限公司 快速检测SYN Flood攻击的方法及装置
CN107623685B (zh) * 2017-09-08 2020-04-07 杭州安恒信息技术股份有限公司 快速检测SYN Flood攻击的方法及装置

Also Published As

Publication number Publication date
CN103227753B (zh) 2016-01-06
CN103227753A (zh) 2013-07-31

Similar Documents

Publication Publication Date Title
EP3577872B1 (en) Method and attack detection function for detection of a distributed attack in a wireless network
KR101977731B1 (ko) 제어 시스템의 이상 징후 탐지 장치 및 방법
WO2014161205A1 (zh) 一种网络拥塞处理方法、系统及装置
EP2352253A1 (en) Method and apparatus for protecting link aggregation group of ethernet ring
JP2010050857A (ja) 経路制御装置およびパケット廃棄方法
JP2005252808A (ja) 不正アクセス阻止方法、装置及びシステム並びにプログラム
CN110808873B (zh) 一种检测链路故障的方法及装置
CN103929334A (zh) 网络异常通知方法和装置
JP2005295209A (ja) レイヤ２ループ検知システム
JP2007006054A (ja) パケット中継装置及びパケット中継システム
JP5134141B2 (ja) 不正アクセス遮断制御方法
WO2021093797A1 (zh) 一种信息上报方法和信息处理方法及设备
CN106789982B (zh) 一种应用于工业控制系统中的安全防护方法和系统
JP6923809B2 (ja) 通信制御システム、ネットワークコントローラ及びコンピュータプログラム
CN102223269B (zh) 一种报文处理方法、mac地址漂移的检测方法及装置
KR20160112750A (ko) 패킷 감시 장치 및 통신 패킷에 대한 패킷 감시 방법
EP2466816B1 (en) Method and device for detecting validation of an access control list
JP2007180891A (ja) 通信装置及びそれに用いるパケット送信制御方法並びにそのプログラム
WO2018171745A1 (zh) 一种用于环网的保护倒换方法及装置
JP2008278357A (ja) 通信回線切断装置
WO2015180265A1 (zh) 多链路保护倒换的方法及装置
US20170237758A1 (en) Packet Transmission Method and Apparatus
CN103746856B (zh) 防止业务中断的方法和网络设备
WO2016061943A1 (zh) 实现生成树协议保护倒换的方法、装置及计算机存储介质
WO2014040470A1 (zh) 告警消息的处理方法及装置

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 13880813

Country of ref document: EP

Kind code of ref document: A1

NENP Non-entry into the national phase

Ref country code: DE

122 Ep: pct application non-entry in european phase

Ref document number: 13880813

Country of ref document: EP

Kind code of ref document: A1