WO2014187406A1

WO2014187406A1 - Parallel-mode p2p scrambling method, device and system

Info

Publication number: WO2014187406A1
Application number: PCT/CN2014/079616
Authority: WO
Inventors: 朱玉石; 李冰; 吴丽梅
Original assignee: 中兴通讯股份有限公司
Priority date: 2013-10-16
Filing date: 2014-06-10
Publication date: 2014-11-27
Also published as: CN104580003A; CN104580003B

Abstract

Disclosed are a parallel-mode P2P scrambling method, device and system. The method comprises: acquiring a data stream of a backbone network, conducting protocol identification on a message corresponding to a data stream of the backbone network, determining a P2P data stream of a peer-to-peer (P2P) type protocol, and sending an interference package to a P2P link corresponding to the P2P data stream to scramble the P2P data stream, wherein a sender, which sends the interference package, is connected to the backbone network in parallel. The present invention solves the problem of network congestion caused by the peer-to-peer technology, and improves the utilization rate of a network bandwidth resource.

Description

TECHNICAL FIELD The present invention relates to the field of communications, and in particular to a parallel mode P2P scrambling method, apparatus and system. BACKGROUND With the continuous development of peer-to-peer (P2P) technology, the main traffic on the Internet is not only the traditional Hypertext Transfer Protocol (HTTP) traffic, but also the P2P traffic. It occupies a large part of the total traffic and occupies a large amount of network bandwidth resources, causing network congestion and affecting the normal operation of other network services. In view of the problem of network congestion caused by peer-to-peer technology in related technologies, no effective solution has been proposed yet. SUMMARY OF THE INVENTION Embodiments of the present invention provide a parallel mode P2P scrambling code method, apparatus, and system to solve at least the above problems. According to an aspect of the present invention, a parallel mode P2P scrambling method is provided. The method includes: acquiring a data flow of a backbone network, performing protocol identification on a packet corresponding to the data flow of the backbone network, and determining a point to Pointing a P2P data stream of the P2P type protocol; transmitting an interference packet to the P2P link corresponding to the P2P data stream, and scrambling the P2P data stream; wherein the sender of the interference packet is sent and the backbone network Connected in parallel. Preferably, scrambling the P2P data stream includes at least one of: performing flow control on the P2P data stream by using a TCP window misalignment method, where the TCP window misalignment method is used to control the interference packet by sending the interference packet Transmitting and transmitting packet speed of the P2P link; blocking the P2P data stream. Preferably, the TCP window misalignment method includes: a client masquerading as the P2P link, sending a plurality of acknowledgement ACK packets to the server of the P2P link in a unit time, so that the client discards the sent by the server a client masquerading as the P2P link, requesting, from the server, a plurality of data packets discarded by the client according to a preset packet sending speed, and pretending that the server sends the server to the client The multiple packets discarded by the client. Preferably, the number of the multiple ACK packets is greater than a first threshold, so that the server responds to the multiple

The ACK packet sends a plurality of data packets to the client, causing the plurality of data packets to exceed the window of the client The plurality of data packets are discarded by the client, and the receiving window of the client and the sending window of the server are misplaced, and the server sends an ACK packet to the client that processes the data packet in the cache. Respond. Preferably, sending the interference packet to the P2P link corresponding to the P2P data stream includes: detecting a bandwidth of a user where the P2P data stream is located; and if the bandwidth exceeds a maximum allowed bandwidth, The P2P link sends the interference packet. According to another aspect of the present invention, a parallel mode P2P scrambling device is provided, which is connected in parallel with a backbone network, the device comprising: an identification module configured to acquire a data stream of the backbone network, to the backbone The packet corresponding to the data flow of the network is subjected to protocol identification, and the P2P data stream of the P2P type protocol is determined. The scrambling code module is configured to send an interference packet to the P2P link corresponding to the P2P data flow, and the P2P is sent to the P2P. The data stream is scrambled. Preferably, the scrambling code module is configured to perform scrambling on the P2P data stream, including at least one of: performing flow control on the P2P data stream by using a TCP window misalignment method, where the TCP window misalignment method is used to pass Transmitting the interference packet to control a packet transmission speed of the P2P link; blocking the P2P data stream. Preferably, the TCP window misalignment method includes: a client masquerading as the P2P link, sending a plurality of acknowledgement ACK packets to the server of the P2P link in a unit time, so that the client discards the sent by the server a client masquerading as the P2P link, requesting, from the server, a plurality of data packets discarded by the client according to a preset packet sending speed, and pretending that the server sends the server to the client The multiple packets discarded by the client. Advantageously, the number of the plurality of ACK packets is greater than a first threshold, such that the server sends a plurality of data packets to the client in response to the plurality of ACK packets, thereby causing the plurality of data packets to exceed the client a window of the end, the plurality of data packets are discarded by the client, the receiving window of the client is misplaced with the sending window of the server, and the server sends an ACK packet to the client in processing the data packet in the cache. Not responding. Preferably, the scrambling code module is further configured to detect a bandwidth of a user where the P2P data stream is located, and send the interference packet to the P2P link if the bandwidth exceeds a maximum allowed bandwidth. According to still another aspect of the present invention, there is provided a parallel mode P2P scrambling system, comprising a backbone network, configured to transmit a data stream; the apparatus according to any one of the sixth to tenth aspects, The backbone networks are connected in parallel, configured to identify P2P data streams in the data stream, and to scramble the P2P data streams by transmitting interference packets to the backbone network. The embodiment of the present invention obtains a data flow of a backbone network, performs protocol identification on a packet corresponding to the data flow of the backbone network, and determines a P2P data flow of a point-to-point P2P type protocol, corresponding to the P2P data flow. The P2P link sends an interference packet, and the P2P data stream is scrambled. The sender that sends the interference packet is connected in parallel with the backbone network, which solves the problem of network congestion caused by the peer-to-peer technology and improves network bandwidth. Resource utilization. BRIEF DESCRIPTION OF THE DRAWINGS The accompanying drawings, which are set to illustrate,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, In the drawings: FIG. 1 is a flow chart of a parallel mode P2P scrambling method according to an embodiment of the present invention; FIG. 2 is a structural diagram of a parallel mode P2P scrambling apparatus according to an embodiment of the present invention; Figure 4 is a block diagram of a parallel mode P2P scrambling system of an embodiment; Figure 4 is a flow diagram of a method for P2P scrambling in a parallel mode P2P scrambling system in accordance with a preferred embodiment of the present invention; and Figure 5 is a preferred embodiment in accordance with the present invention. Schematic diagram of the TCP window misalignment method. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS It should be noted that the embodiments in the present application and the features in the embodiments may be combined with each other without conflict. The invention will be described in detail below with reference to the drawings in conjunction with the embodiments. The present embodiment provides a parallel mode P2P scrambling code method. FIG. 1 is a flowchart of a parallel mode P2P scrambling code method according to an embodiment of the present invention. As shown in FIG. 1, the method includes the following steps: Step S102, acquiring a trunk a data flow of the network, performing protocol identification on the packet corresponding to the data flow of the backbone network, and determining a P2P data flow of the P2P-type protocol from the point-to-point; and sending an interference packet to the P2P link corresponding to the P2P data flow, in step S104, The P2P data stream is scrambled. The sender that sends the interference packet is connected in parallel with the backbone network. Through the foregoing steps, the network data stream is obtained, the protocol corresponding to the network data stream is protocol-recoordinated, the P2P data stream of the P2P-type protocol is determined, the interference packet is sent to the P2P data stream, and the P2P data stream is interfered. The code solves the problem of network congestion caused by peer-to-peer technology and improves the utilization of network bandwidth resources. In a preferred embodiment of the present embodiment, scrambling the P2P data stream may include at least one of the following: performing flow control on the P2P data stream by using a TCP window misalignment method, where the TCP window misalignment method is used to transmit interference The packet controls the packet transmission speed of the P2P link to block the P2P data stream. Through the above steps, the flow control and blocking of the P2P flow are achieved. In a preferred embodiment of the present embodiment, the TCP window misalignment method may include: a client masquerading as a P2P link, sending multiple ACK packets to a P2P link server in a unit time, so that the client discards the server sending a plurality of data packets; a client masquerading as a P2P link requests a plurality of data packets discarded by the client according to a preset packet sending speed, and pretends that the server sends the data discarded by the client to the client. Packet, such a parallel mode P2P scrambling system controls the packet transmission and reception speed of the P2P link without causing fast retransmission. The multiple ACK packets are preset ACK packets, and the multiple data packets are preset number of data packets corresponding to the multiple ACK packets. In a preferred embodiment of the present embodiment, the TCP window misalignment method may further include: a client masquerading as a P2P link, sending a plurality of ACK packets to a server of the P2P link in a unit time, wherein the multiple ACKs The number of packets is greater than the first threshold, so that the server sends multiple data packets to the client in response to multiple ACK packets, thereby causing the multiple data packets to exceed the client window, multiple data packets are discarded by the client, and the client receiving window and The server's send window is misplaced, and the server does not respond to the ACK packet sent by the client in the processing buffer. This achieves a TCP window misalignment. In a preferred embodiment of the present embodiment, when the P2P data stream does not affect the normal operation of the network service, the P2P data stream may not be controlled by sending an interference packet to the P2P data stream. When the bandwidth occupied by the P2P data stream exceeds the maximum allowed bandwidth, the interference packet is sent to the P2P data stream to control the P2P data stream, thereby improving bandwidth utilization. In the embodiment, a parallel mode P2P scrambling device is also provided, and the device is configured to implement the foregoing method, which has been described in the above embodiments, and details are not described herein again. It should be noted that the name of the module in the following device does not constitute a practical limitation of the module. For example, the identification module can be expressed as "acquiring a network data stream, and performing protocol identification on the packet corresponding to the network data stream. Point-to-point P2P-type protocol P2P data stream", the following modules can be implemented in the processor, for example, the identification module can be expressed as "a processor, obtain a network data stream, and correspond to the network data stream" Perform protocol identification to determine the P2P data stream of the point-to-point P2P class protocol, or "a processor, including the identification module". 2 is a structural diagram of a parallel mode P2P scrambling apparatus according to an embodiment of the present invention. The apparatus is connected in parallel with a backbone network. As shown in FIG. 2, the apparatus 20 includes: an identification module 22 and a scrambling code module 24, The device is described in detail. The identification module 22 is configured to acquire a data flow of the backbone network, perform protocol identification on a packet corresponding to the data flow of the backbone network, and determine a P2P data flow of a point-to-point P2P type protocol; the scrambling code module 24 is set to Transmitting an interference packet to a P2P link corresponding to the P2P data stream, and scrambling the P2P data stream; and the foregoing device solves the problem of network congestion caused by the peer-to-peer technology, and improves network bandwidth resource utilization. In a preferred embodiment of the present embodiment, the scrambling code module 24 is configured to scramble the P2P data stream, including at least one of the following: performing flow control on the P2P data stream by using a TCP window misalignment method, where the TCP window misalignment method is used. The packet transmission speed of the P2P link is controlled by sending an interference packet; the P2P data stream is blocked. Specifically, the TCP window misalignment method may include: a client masquerading as the P2P link, sending a plurality of acknowledgement ACK packets to the server of the P2P link in a unit time, so that the client discards the sending by the server a plurality of data packets; a client masquerading as the P2P link, requesting, by the server, a plurality of data packets discarded by the client according to a preset packet sending speed, and pretending that the server sends the data packet to the client Multiple data packets discarded by the client. The number of the multiple ACK packets is greater than a first threshold, so that the server sends multiple data packets to the client in response to the multiple ACK packets, thereby causing the multiple data packets to exceed the client. a window, the plurality of data packets are discarded by the client, the receiving window of the client and the sending window of the server are misaligned, and the server sends an ACK packet to the client in a data packet processed by the cache. Respond. In a preferred embodiment of the present embodiment, the scrambling code module 24 is further configured to detect the bandwidth of the user where the P2P data stream is located; and to transmit the interference packet to the P2P data stream if the bandwidth exceeds the maximum allowed bandwidth. The invention will now be described in connection with preferred embodiments and preferred embodiments. Preferred Embodiment 1 The preferred embodiment is implemented in an integrated service gateway system. FIG. 3 is a block diagram of a parallel mode P2P scrambling system according to a preferred embodiment of the present invention. As shown in FIG. 3, the parallel mode P2P scrambling code is shown. The system includes a parallel mode P2P scrambling device 30 and a backbone network 38. Parallel mode P2P scrambling device 30 includes deep traffic awareness (Deep) Packet Inspection (referred to as DPI) protocol parsing module 32, P2P flow state analysis and flow rate detecting module 34 and P2P interference packet sending module 36, wherein DPI protocol parsing module 32 and P2P flow state analysis and flow rate detecting module 34 are equivalent to FIG. The identification module 22 and the P2P interference packet transmission module 36 are equivalent to the scrambling code module 24 in FIG. The parallel mode P2P scrambling device 30 is connected in parallel with the backbone network 38, and the specific connection manner is as follows: The DPI protocol parsing module 32 is connected in parallel with the backbone network 38 to acquire data streams from the backbone network 38; P2P flow state analysis and flow rate detecting module 34 is connected to the DPI protocol parsing module 32, according to the data stream obtained by the DPI protocol parsing module 32, identifying the P2P data stream, and determining whether an interference packet needs to be sent; the P2P interference packet sending module 36-end and P2P flow state analysis and flow rate detecting module 34 is connected, and the other end is connected in parallel with the backbone network 38, and is arranged to transmit an interference packet to the backbone network 38 according to the notification of the P2P flow state analysis and the flow rate detection module 34. The device is described in detail below:

The DPI protocol parsing module 32 is configured to perform protocol identification on all the packets in the backbone network 38, and send the data stream identified as the P2P class protocol to the P2P flow state analysis and flow rate detecting module 34.

The P2P flow state analysis and flow rate detecting module 34 is configured to analyze the state of the current P2P data stream, detect the P2P bandwidth of the user where the current P2P data stream is located, and notify the P2P interference packet sending module 36 to perform packet interference if the maximum allowed bandwidth is exceeded.

The P2P interference packet transmitting module 36 is configured to send an interference packet to the backbone network 38. Specifically, the TCP packet misplacement method may be used to send the interference packet: the client masquerading as the P2P link sends a plurality of acknowledgement ACK packets to the server of the P2P link in a unit time, so that the client discards the server. Sending a plurality of data packets; the client masquerading as the P2P link requests the server for a plurality of data packets discarded by the client according to a preset packet sending speed, and pretending to be the server to the client The terminal sends multiple data packets discarded by the client. The number of the multiple ACK packets is greater than a first threshold, so that the server sends multiple data packets to the client in response to the multiple ACK packets, thereby causing the multiple data packets to exceed the client. a window, the plurality of data packets are discarded by the client, the receiving window of the client and the sending window of the server are misaligned, and the server sends an ACK packet to the client in a data packet processed by the cache. Respond. Through the above system, the proportion of P2P data traffic in the total traffic can be effectively reduced, the P2P application can be occupied by the network bandwidth resources, and the network congestion caused by the excessive P2P data traffic can be solved. Preferred Embodiment 2 FIG. 4 is a flowchart of a method for performing P2P scrambling in a parallel mode P2P scrambling system according to a preferred embodiment of the present invention. As shown in FIG. 4 and FIG. 3, the method includes the following steps: Step S402, the DPI protocol parsing module 32 acquires all network data traffic through the optical splitting device. Step S404, the DPI protocol parsing module 32 performs protocol identification on all the packets, and sends the data stream identified as the P2P class protocol to the P2P flow state analysis and flow rate detecting module 34. Step S406, the P2P flow state analysis and flow rate detecting module 34 analyzes the state of the current P2P data stream, detects the P2P bandwidth of the user where the current P2P data stream is located, and notifies the P2P interference packet sending module 36 to perform packet interference if the maximum allowed bandwidth is exceeded. Step S408, the P2P interference packet sending module 36 sends an interference packet to the corresponding P2P link of the P2P data stream through the control channel, so as to achieve the purpose of flow control or blocking the P2P data stream. Through the above steps, the parallel mode P2P scrambling device adopts a mode in parallel with the backbone network, and the entire device does not belong to the network element of the backbone network, so there is no risk of failure of the entire backbone network due to possible failure of the parallel mode P2P scrambling device. . The parallel mode P2P scrambling device can effectively reduce the proportion of P2P data traffic in the total traffic, control the occupation of network bandwidth resources by P2P applications, and solve the problem of network congestion caused by excessive P2P data traffic.

Preferred Embodiment 3 This preferred embodiment is a block and flow control of a P2P data stream based on a TCP protocol. The following describes the blocking method and the flow control method:

(1) Blocking method. The blocking of the P2P data stream may be a combination of the following three methods. The parallel mode P2P scrambling device switches to another method to block again if it finds that one method is invalid. The first method: Send the RST packet method in one direction. That is, the parallel mode P2P scrambling device masquerades as a client (Client) to send a RST packet to the server (Server), or pretends that the Client sends a RST packet to the server, so that the link is broken, and the blocking effect on the controlled flow has been achieved. The second method: Send the RST packet method in both directions. That is, the parallel mode P2P scrambling device pretends that the client sends a packet RST packet to the server, and the Internet Service Group (ISG) masquerades the server to send a packet to the client. By breaking the link, the blocking effect on the controlled flow has been achieved. The third method: Send the SYN packet method. That is, the parallel mode P2P scrambling device is disguised as a client, and the link is broken by sending a SYN packet located in the window to the server to achieve a blocking effect on the controlled flow.

(2) Flow control method The flow control of the P2P data stream can be a combination of the following two methods. The parallel mode P2P scrambling code system switches to another method to perform flow control again when it finds that one method is invalid. The first method: Modifying the Transmission Control Protocol (TCP) sliding window method This method uses the data sender to advertise the receiving window size of the data receiver to control the speed of data transmission. The second method: TCP window misalignment method FIG. 5 is a schematic diagram of a TCP window misalignment method according to a preferred embodiment of the present invention. As shown in FIG. 5, the specific content of the TCP window misalignment method is as follows: Parallel mode P2P scrambling system is disguised as The client sends a valid ACK packet to the server (Server), so that the server sends a data packet to the client as soon as possible. When the packet exceeds the client window, the packet is discarded by the client. When the number of discarded packets is sufficient, the client's receiving window and the server's sending window are completely misaligned. When the client processes the data packet in the cache, the ACK packet sent to the server will be regarded as a duplicate ACK packet by the server (the parallel mode P2P scrambling device has spoofed the client to send the ACK packet), so the server will ignore the ACK packet of the client. . When the window is misplaced enough, the ACK packet sent by the client after processing all the packets in the cache is regarded as a duplicate ACK packet by the server, so the server does not repeatedly send the packet discarded by the client to the client. At this time, the ISG masquerades as a server to send the client the packet discarded by the client, and pretends that the client sends an ACK to the server to request a new data packet. Such a parallel mode P2P scrambling device controls the packet transmission speed of the entire link. In the parallel mode P2P scrambling system control link, for each data packet Server will receive two identical ACK packets at different times, so it will not cause fast retransmission. The preferred embodiment is based on the P2P blocking and flow control of the User Datagram Protocol (UDP) protocol, and the content is as follows: Obtain a network data stream, and report the network data stream corresponding to the network data stream. The UDP protocol is identified, the P2P data stream of the UDP protocol is determined, the icmp interference packet is sent to the P2P data stream, and the P2P data stream is scrambled. The port is unreachable by sending an icmp interference packet to achieve the blocking and flow control effect on the controlled flow. The above preferred embodiment is a parallel mode P2P scrambling device attached to a high performance ISG system, which implements flow control and blocking of the P2P data stream by performing packet interference on the P2P data stream, thereby achieving proper control of P2P data traffic. Not only can you save bandwidth resources, solve network congestion problems, but also enable other network services to work normally. Obviously, those skilled in the art should understand that the above modules or steps of the present invention can be implemented by a general-purpose computing device, which can be concentrated on a single computing device or distributed over a network composed of multiple computing devices. Alternatively, they may be implemented by program code executable by the computing device, such that they may be stored in the storage device by the computing device, or they may be separately fabricated into individual integrated circuit modules, or they may be Multiple modules or steps are made into a single integrated circuit module. Thus, the invention is not limited to any specific combination of hardware and software. The above are only the preferred embodiments of the present invention, and are not intended to limit the present invention, and various modifications and changes can be made to the present invention. Any modifications, equivalent substitutions, improvements, etc. made within the spirit and scope of the present invention are intended to be included within the scope of the present invention. INDUSTRIAL APPLICABILITY As described above, a parallel mode P2P scrambling code method, apparatus, and system provided by an embodiment of the present invention have the following beneficial effects: Flow control and blocking of a P2P data stream by performing packet interference on a P2P data stream The proper control of P2P data traffic is achieved, which not only saves bandwidth resources, solves network congestion problems, but also enables other network services to operate normally.

Claims

Claim

A parallel mode P2P scrambling method includes: acquiring a data flow of a backbone network, performing protocol identification on a packet corresponding to the data flow of the backbone network, and determining a P2P data flow of a point-to-point P2P type protocol;

Transmitting an interference packet to a P2P link corresponding to the P2P data stream, and scrambling the P2P data stream;

The sender that sends the interference packet is connected in parallel with the backbone network.

2. The method according to claim 1, wherein scrambling the P2P data stream comprises at least one of the following:

And controlling, by the TCP window misalignment method, the P2P data stream, where the TCP window misalignment method is used to control a packet transmission speed of the P2P link by sending the interference packet;

Blocking the P2P data stream.

3. The method according to claim 2, wherein the TCP window misalignment method comprises:

The client masquerading as the P2P link sends a plurality of acknowledgment ACK packets to the server of the P2P link in a unit time, so that the client discards multiple data packets sent by the server; disguising as the P2P The client of the link requests the server for multiple data packets discarded by the client according to a preset sending speed, and pretends that the server sends the multiple data packets discarded by the client to the client. .

4. The method according to claim 3, wherein the number of the plurality of ACK packets is greater than a first threshold, such that the server sends a plurality of data packets to the client in response to the plurality of ACK packets, thereby causing The plurality of data packets are beyond the window of the client, the plurality of data packets are discarded by the client, the receiving window of the client is misplaced with the sending window of the server, and the server is in the client The ACK packet sent by the processing packet in the buffer does not respond.

5. The method of claim 1, wherein transmitting the interference packet to the P2P link corresponding to the P2P data stream comprises:

Detecting a bandwidth of a user where the P2P data stream is located; The interference packet is sent to the P2P link if the bandwidth exceeds the maximum allowed bandwidth.

6. A parallel mode P2P scrambling device, the device being in parallel with a backbone network, the device comprising:

An identification module, configured to acquire a data flow of the backbone network, perform protocol identification on a packet corresponding to the data flow of the backbone network, and determine a P2P data flow of a point-to-point P2P type protocol;

The scrambling module is configured to send an interference packet to a P2P link corresponding to the P2P data stream, and scramble the P2P data stream.

7. The apparatus according to claim 6, wherein the scrambling code module is configured to scramble the P2P data stream to include at least one of the following:

The P2P data stream is streamed by using a TCP window misalignment method, where the TCP window misalignment method is used to control a packet transmission speed of the P2P link by sending the interference packet;

Blocking the P2P data stream.

8. The apparatus according to claim 7, wherein the TCP window misalignment method comprises:

9. The apparatus according to claim 8, wherein the number of the plurality of ACK packets is greater than a first threshold, such that the server sends a plurality of data packets to the client in response to the plurality of ACK packets, thereby causing The plurality of data packets are beyond the window of the client, the plurality of data packets are discarded by the client, the receiving window of the client is misplaced with the sending window of the server, and the server is in the client The ACK packet sent by the processing packet in the buffer does not respond.

10. The apparatus according to claim 6, wherein the scrambling code module is further configured to detect a bandwidth of a user where the P2P data stream is located, and if the bandwidth exceeds a maximum allowed bandwidth, to the P2P The link transmits the interference packet.

11. A parallel mode P2P scrambling system, comprising:

The backbone network, set to transmit data streams; Apparatus according to any one of claims 6 to 10, in parallel with said backbone network, arranged to identify a P2P data stream in said data stream, and to transmit said P2P data by transmitting an interference packet to said backbone network The stream is scrambled.