WO2017050166A1 - 业务传输速率的控制方法及装置、系统 - Google Patents

业务传输速率的控制方法及装置、系统 Download PDF

Info

Publication number
WO2017050166A1
WO2017050166A1 PCT/CN2016/098961 CN2016098961W WO2017050166A1 WO 2017050166 A1 WO2017050166 A1 WO 2017050166A1 CN 2016098961 W CN2016098961 W CN 2016098961W WO 2017050166 A1 WO2017050166 A1 WO 2017050166A1
Authority
WO
WIPO (PCT)
Prior art keywords
service
transmission rate
service gateway
gateway
threshold
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Ceased
Application number
PCT/CN2016/098961
Other languages
English (en)
French (fr)
Chinese (zh)
Inventor
肖洪亮
张大成
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Alibaba Group Holding Ltd
Original Assignee
Alibaba Group Holding Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Alibaba Group Holding Ltd filed Critical Alibaba Group Holding Ltd
Priority to JP2018515580A priority Critical patent/JP6685390B2/ja
Priority to EP16848048.1A priority patent/EP3355538B1/en
Priority to KR1020187008307A priority patent/KR20180059448A/ko
Publication of WO2017050166A1 publication Critical patent/WO2017050166A1/zh
Priority to US15/933,292 priority patent/US10484295B2/en
Anticipated expiration legal-status Critical
Ceased legal-status Critical Current

Links

Images

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L47/00—Traffic control in data switching networks
    • H04L47/10—Flow control; Congestion control
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L47/00—Traffic control in data switching networks
    • H04L47/10—Flow control; Congestion control
    • H04L47/25—Flow control; Congestion control with rate being modified by the source upon detecting a change of network conditions
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L47/00—Traffic control in data switching networks
    • H04L47/10—Flow control; Congestion control
    • H04L47/41—Flow control; Congestion control by acting on aggregated flows or links
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L12/00—Data switching networks
    • H04L12/66—Arrangements for connecting between networks having differing types of switching systems, e.g. gateways
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L43/00—Arrangements for monitoring or testing data switching networks
    • H04L43/06—Generation of reports
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L43/00—Arrangements for monitoring or testing data switching networks
    • H04L43/08—Monitoring or testing based on specific metrics, e.g. QoS, energy consumption or environmental parameters
    • H04L43/0876—Network utilisation, e.g. volume of load or congestion level
    • H04L43/0894—Packet rate
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L45/00—Routing or path finding of packets in data switching networks
    • H04L45/24—Multipath
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L45/00—Routing or path finding of packets in data switching networks
    • H04L45/74—Address processing for routing
    • H04L45/745—Address table lookup; Address filtering
    • H04L45/7453—Address table lookup; Address filtering using hashing
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L47/00—Traffic control in data switching networks
    • H04L47/10—Flow control; Congestion control
    • H04L47/12—Avoiding congestion; Recovering from congestion
    • H04L47/125—Avoiding congestion; Recovering from congestion by balancing the load, e.g. traffic engineering
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L47/00—Traffic control in data switching networks
    • H04L47/10—Flow control; Congestion control
    • H04L47/26—Flow control; Congestion control using explicit feedback to the source, e.g. choke packets
    • H04L47/263—Rate modification at the source after receiving feedback
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L47/00—Traffic control in data switching networks
    • H04L47/10—Flow control; Congestion control
    • H04L47/29—Flow control; Congestion control using a combination of thresholds
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L67/00—Network arrangements or protocols for supporting network services or applications
    • H04L67/01—Protocols
    • H04L67/10—Protocols in which an application is distributed across nodes in the network
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/40—Network security protocols
    • Y—GENERAL TAGGING OF NEW TECHNOLOGICAL DEVELOPMENTS; GENERAL TAGGING OF CROSS-SECTIONAL TECHNOLOGIES SPANNING OVER SEVERAL SECTIONS OF THE IPC; TECHNICAL SUBJECTS COVERED BY FORMER USPC CROSS-REFERENCE ART COLLECTIONS [XRACs] AND DIGESTS
    • Y02—TECHNOLOGIES OR APPLICATIONS FOR MITIGATION OR ADAPTATION AGAINST CLIMATE CHANGE
    • Y02D—CLIMATE CHANGE MITIGATION TECHNOLOGIES IN INFORMATION AND COMMUNICATION TECHNOLOGIES [ICT], I.E. INFORMATION AND COMMUNICATION TECHNOLOGIES AIMING AT THE REDUCTION OF THEIR OWN ENERGY USE
    • Y02D30/00—Reducing energy consumption in communication networks
    • Y02D30/50—Reducing energy consumption in communication networks in wire-line communication networks, e.g. low power modes or reduced link rate

Definitions

  • the present invention relates to the field of network communications, and in particular to a method, device, and system for controlling a service transmission rate.
  • multiple service gateway devices are deployed in the enterprise's egress. Traffic data coming in from the Internet (Internet) is distributed to the multiple service gateways through the equal-cost routing load on the egress router (for example, the service in Figure 1). On gateways A, B, and C). Due to the requirements of the Distributed Denial of Service (DDoS) attack or the bandwidth limitation, you need to limit the service transmission rate (also called traffic) to each destination host on the service gateway to ensure access to the intranet. The service transmission rate will not exceed the bandwidth purchased by the user, so as to avoid impact on the intranet link.
  • DDoS Distributed Denial of Service
  • each service gateway independently performs traffic limiting (that is, limits the service transmission rate), it is necessary to consider how to ensure the total traffic after parallel limiting of traffic through multiple service gateways (that is, the same purpose).
  • the total service transmission rate of the address meets the expected threshold.
  • the embodiment of the invention provides a method, a device and a system for controlling a service transmission rate, so as to at least solve the technology that the total traffic after the parallel traffic limiting of multiple service gateways meets an expected threshold is not effective in a distributed environment.
  • a method for controlling a service transmission rate includes: acquiring service transmission rate information reported by each service gateway in a service gateway group in a distributed environment, where each service gateway is a gateway that transmits service data to the same destination address in parallel, and limits a service transmission rate of the service data according to a respective current limit threshold; the service transmission rate information is used to indicate that the service address is for the destination address.
  • a service transmission rate determining, for each service gateway in the service gateway group, whether a service transmission rate indicated by the service transmission rate information is greater than the traffic restriction threshold corresponding to the service gateway; at least one determination result If yes, the current-limit thresholds that are allocated to the service gateways are adjusted to a specified value, and a specified threshold is obtained, where the specified value satisfies the following condition: the sum of the specified values on the respective service gateways is not Greater than the bandwidth allocated by the operator for the destination address; the specified threshold is sent to the location Various business gateway.
  • a method for controlling a service transmission rate including: each service gateway in a service gateway group receives a specified threshold, wherein each service gateway is in parallel to the same destination address. a gateway that transmits service data and limits a service transmission rate of the service data according to a respective traffic restriction threshold, where the specified threshold is determined by: the service on any service gateway in the service gateway group And when the transmission rate is greater than the traffic limiting threshold corresponding to the service gateway, the current limiting threshold that is allocated to the service gateway is adjusted to a specified value, and the specified threshold is obtained, where the specified value meets the following The sum of the specified values on the service gateways is not greater than the bandwidth allocated by the operator for the destination address; the service gateway limits the local service data transmission rate according to the specified threshold.
  • a device for controlling a service transmission rate comprising: an obtaining module, configured to acquire service transmission rate information reported by each service gateway in a service gateway group in a distributed environment, where The service transmission gateways are gateways that transmit service data to the same destination address in parallel and limit the service transmission rate of the service data according to respective traffic limiting thresholds; the service transmission rate information is used to indicate each service gateway.
  • a determining module configured to determine, for each service gateway in the service gateway group, whether a service transmission rate indicated by the service transmission rate information is greater than a service gateway
  • the current limiting threshold is configured to adjust, when the at least one determination result output by the determining module is YES, the current limiting threshold allocated to the service gateway to a specified value, to obtain a specified threshold, The specified value satisfies the following conditions: a total of the specified values on the respective service gateways Is not greater than the destination address for the operators assigned bandwidth; sending module, configured to send the specified lower threshold value of the respective service gateway.
  • a control device for another service transmission rate is further provided, which is applied to a service gateway in a service gateway group, where each service gateway in the service gateway group is parallel to the same destination address.
  • a gateway that transmits the service data and limits the service transmission rate of the service data according to the respective traffic limiting thresholds.
  • the device includes: a receiving module, configured to receive a specified threshold, where the specified threshold is determined by: The service transmission rate on any service gateway in the service gateway group is greater than the service gateway And the current-limit threshold that is allocated to the service gateways is adjusted to a specified value, and the specified threshold is obtained, where the specified value meets the following conditions: the specified on the service gateway The sum of the values is not greater than the bandwidth allocated by the operator for the destination address; and the limiting module is configured to limit the local service data transmission rate according to the specified threshold.
  • the service transmission rate for the same destination address reported by each service gateway is greater than the traffic restriction threshold
  • the service for limiting the destination address is used on each service gateway.
  • the threshold of the transmission rate is dynamically adjusted to limit the service transmission rate of the destination address, thereby ensuring that the total traffic (that is, the total service transmission rate of the same destination address) after parallel traffic limiting by multiple service gateways is met.
  • the technical effect of the expected threshold further solves the technical problem of the technical solution that the total traffic after the parallel traffic limiting of multiple service gateways meets the expected threshold in the distributed environment.
  • FIG. 1 is a network architecture diagram of a distributed network environment according to the related art
  • FIG. 2 is a block diagram showing the hardware structure of a computer terminal for controlling a service transmission rate according to an embodiment of the present invention
  • FIG. 3 is a flowchart of a method of controlling a service transmission rate according to Embodiment 1 of the present invention.
  • FIG. 4 is a schematic flow chart of an optional method for controlling a service transmission rate based on a centralized control scheme according to an embodiment of the present invention
  • FIG. 5 is a schematic diagram of a control flow of an optional service transmission rate based on a centralized control scheme according to an embodiment of the present invention
  • SGW service gateway
  • FIG. 7 is a schematic diagram of a data plane processing process on an SGW in an optional centralized control scheme according to an embodiment of the present invention
  • FIG. 8 is a schematic diagram of a control flow of an optional service transmission rate based on a distributed control scheme according to an embodiment of the present invention
  • FIG. 9 is a schematic diagram of a control plane processing process on an SGW in an optional distributed control scheme according to an embodiment of the present invention.
  • FIG. 10 is a schematic diagram of a data plane processing process on an SGW in an optional distributed control scheme according to an embodiment of the present invention
  • FIG. 11 is a schematic structural diagram of an apparatus for controlling an optional service transmission rate according to an embodiment of the present invention.
  • FIG. 12 is another schematic structural diagram of an apparatus for controlling an optional service transmission rate according to an embodiment of the present invention.
  • FIG. 13 is a diagram of another optional method for controlling a service transmission rate according to an embodiment of the present invention. Schematic diagram of the process
  • FIG. 14 is a schematic structural diagram of another optional control device for a service transmission rate according to an embodiment of the present invention.
  • 15 is a schematic structural diagram of an optional service transmission rate control system according to an embodiment of the present invention.
  • FIG. 16 is a structural block diagram of a computer terminal according to an embodiment of the present invention.
  • the scheme relies on the load sharing algorithm that the router can support. Only after the router supports the packet-by-packet load balancing and the algorithm is configured, the traffic can be uniformly allocated to each service. However, packet-by-packet load balancing is easy to cause packet out-of-order, which occupies the processing performance of the server. In addition, if the traffic table needs to establish a flow table to monitor the connection status, packet-by-packet load balancing cannot be used. The traffic-based load balancing cannot guarantee that traffic is evenly distributed to each service gateway. Therefore, if the traffic flowing in a service gateway is less than the current-limit threshold after the equalization, the total traffic after the speed limit is smaller than expected. Current limit threshold.
  • the solution needs to allocate the traffic of the same destination IP to the same service gateway for processing. This causes the processing performance of the corresponding service gateway to be easily consumed when a certain destination IP traffic is relatively large. Traffic to other destination IPs on this service gateway.
  • the embodiment of the present invention provides a technical solution for implementing control of a service transmission rate without requiring a specific load sharing mode, which is described in detail below in conjunction with specific embodiments.
  • a method embodiment of a method for controlling a service transmission rate is provided. It is to be noted that the steps shown in the flowchart of the accompanying drawings may be executed in a computer system such as a set of computer executable instructions. And, although the logical order is shown in the flowcharts, in some cases the steps shown or described may be performed in a different order than the ones described herein.
  • FIG. 2 is a hardware structural block diagram of a computer terminal for controlling a service transmission rate according to an embodiment of the present invention.
  • computer terminal 20 may include one or more (only one shown) processor 202 (processor 202 may include, but is not limited to, a processing device such as a microprocessor MCU or a programmable logic device FPGA).
  • FIG. 2 is merely illustrative and does not limit the structure of the above electronic device.
  • computer terminal 20 may also include more or fewer components than those shown in FIG. 2, or have a different configuration than that shown in FIG. 2.
  • the memory 204 can be used to store software programs and modules of the application software, such as program instructions/modules corresponding to the control method of the service transmission rate in the embodiment of the present invention, and the processor 202 runs the software program and the module stored in the memory 204, thereby Perform various functional applications and data processing, that is, implement the vulnerability detection method of the above application.
  • Memory 204 can include high
  • the fast random access memory may also include non-volatile memory such as one or more magnetic storage devices, flash memory, or other non-volatile solid state memory.
  • memory 204 can further include memory remotely located relative to processor 202, which can be connected to computer terminal 20 over a network. Examples of such networks include, but are not limited to, the Internet, intranets, local area networks, mobile communication networks, and combinations thereof.
  • the transmission module 206 is configured to receive or transmit data via a network.
  • the network specific examples described above may include a wireless network provided by a communication provider of the computer terminal 20.
  • the transmission module 206 includes a Network Interface Controller (NIC) that can be connected to other network devices through a base station to communicate with the Internet.
  • the transmission module 206 can be a Radio Frequency (RF) module for communicating with the Internet wirelessly.
  • NIC Network Interface Controller
  • RF Radio Frequency
  • the present application provides a method for controlling the service transmission rate as shown in FIG. 3 is a flow chart showing a method of controlling a service transmission rate according to Embodiment 1 of the present invention. As shown in FIG. 3, the method includes steps S302-S308:
  • Step S302 Obtain service transmission rate information reported by each service gateway in the service gateway group in the distributed environment, where each service gateway transmits service data in parallel to the same destination address, and performs service data according to respective current limit thresholds. a gateway whose service transmission rate is limited; the service transmission rate information is used to indicate a service transmission rate for a destination address on each service gateway;
  • the service transmission rate for the same destination address may be expressed as: a rate on each service gateway used for offloading the service data of the destination address.
  • the number of service gateways for the service data of the same destination address in the gateway group is 5, and the service transmission rates for the destination addresses on the five service gateways are: 10 k/s, 20 k/s, 40 k/ s, 50k/s, 70k/s, for the destination address, the service transmission rate of the destination address should be: (10+20+40+50+70) k/s, ie 190k/s.
  • the step of obtaining the service transmission rate information in the service gateway group may be performed by using a centralized control device (ie, a control center) to receive the foregoing information reported by each service gateway in the service gateway group.
  • the service transmission rate information may be received by a service gateway selected by the foregoing service gateway group according to a preset rule (for example, using a hash algorithm).
  • each service gateway in the service gateway group can receive the service data from multiple destination addresses at the same time.
  • the embodiment of the present invention is convenient for description, and only the service data for the same destination address can be considered.
  • the service transmission rate is not limited to the implementation shown in the embodiment of the present invention.
  • the service transmission rate information may be expressed as a value indicating a size of the service transmission rate, and may also be expressed as an indication information, where the indication information is used to indicate the foregoing service transmission rate, for example, using a locally stored mapping.
  • the relationship table (the mapping relationship table stores the correspondence between the indication information and the service transmission rate) to obtain the foregoing service transmission rate.
  • the service gateway group is composed of a service gateway in a distributed environment, and may be a service gateway that performs traffic distribution on the same destination IP address, that is, traffic used to share the same destination address (here, it may be represented as a service). Data) of the service gateway.
  • Step S304 determining, for each service gateway in the service gateway group, whether the service transmission rate indicated by the service transmission rate information is greater than a traffic limiting threshold corresponding to the service gateway;
  • the foregoing traffic limiting threshold may be preset or may be pre-allocated by the foregoing service gateways.
  • the following implementation manner may be implemented: the service transmission reported by the service gateway group in the acquired distributed environment. Before the rate information, the traffic limiting threshold is allocated to each service gateway in the service gateway group, where the traffic limiting thresholds allocated for each service gateway are the same.
  • step S306 when the at least one determination result is YES, the current-limit threshold allocated to each service gateway is adjusted to a specified value, and a specified threshold is obtained, where the specified value satisfies the following condition: the sum of the specified values on each service gateway is not greater than the operation.
  • the quotient is the bandwidth allocated by the destination address; thus, since the sum of the specified thresholds is not greater than the bandwidth allocated by the operator for the destination address, it can be ensured that the service transmission rate of the destination address does not exceed the above bandwidth.
  • the sum of the current-limit thresholds assigned to the respective gateways is generally determined according to the bandwidth allocated by the operator for the destination address, that is, the sum of the traffic-limit thresholds is not greater than the foregoing bandwidth.
  • the specified threshold may be determined according to the following process: obtaining the proportion of the service transmission rate on each service gateway in the total service transmission rate, where the total service transmission rate is all in the service gateway group.
  • the service gateway performs a summation operation on the transmission rate of the destination address; the specified threshold is reassigned to each service gateway in the service gateway group according to the ratio and the bandwidth.
  • the principle of the above implementation process can be expressed by the following formula:
  • Th (x/S)*B, where Th is the specified threshold, x is the service transmission rate on each service gateway in the service gateway group, S is the total service transmission rate, B is a constant, and the operator is the above purpose.
  • the bandwidth allocated by the address is equal, and can also be expressed as each service gateway in the service gateway group. The sum of the current-limit thresholds for the above destination addresses.
  • the traffic limiting threshold and the specified threshold are not for one device, but for all service gateways corresponding to the destination address in the service gateway group, that is, the traffic limiting threshold and A given threshold can be understood as a set of thresholds or a type of threshold.
  • step S308 the specified threshold is sent to each service gateway in the service gateway group, so that the service gateway can limit the service transmission rate for the destination address according to the specified threshold, thereby implementing traffic limiting.
  • the service gateway may be a real service gateway device, or a service unit in the distributed device that can perform independent operations, and for the latter, it may be represented as a device with multiple independent CPUs, or Line card plug-in device for line cards.
  • the service gateway can simultaneously limit the service transmission rate of multiple destination addresses.
  • the destination address in the embodiment of the present invention may be represented by an IP address, or an identifier for indicating an IP address, and the like, but is not limited thereto.
  • step S302 can be implemented by a centralized control scheme and a distributed control scheme.
  • the control method of the service transmission rate provided in the embodiment of the present invention is also applicable to a centralized control device or service in a distributed environment.
  • the centralized control device is a device other than the service gateway in the service gateway group in the distributed environment.
  • a centralized control device it may be a newly added type of device in a distributed environment, or may be another device that can implement centralized control, which is not limited herein.
  • the gateway determines, by performing a hash operation on the destination address, obtaining a hash value corresponding to the destination address, and selecting, from the service gateway group, a service gateway corresponding to the hash value as the specified Service gateway.
  • the hash algorithm converts an input of arbitrary length (also called pre-map) into a fixed-length output through a hashing algorithm, and the output is a hash value.
  • This conversion is a compression map, that is, the space of the hash value is usually much smaller than the input space, and different inputs may be hashed to the same output.
  • the above selection process can be implemented in the following manner:
  • the traffic of different destination IPs (that is, the service transmission rate) is allocated to the service gateways through a certain hash algorithm f(key).
  • the key in the algorithm function is the destination IP address here.
  • the hash algorithm can be used to convert the 32-bit destination IP address into a 2-bit hash value.
  • the destination IP address with the hash value of 0 sends its traffic data to service gateway A.
  • the hash value is The destination IP of 1 sends its traffic data to service gateway B.
  • the destination IP with hash value of 2 sends its traffic data to service gateway C.
  • the destination IP with hash value of 3 sends its traffic data to service gateway D. .
  • the above two control schemes are only different control logics, that is, one is centralized control and the other is distributed control.
  • the main design ideas of the two control modes are the same, that is, according to each The traffic size on the service gateway (that is, the service transmission rate) dynamically adjusts its corresponding traffic limiting threshold (that is, the threshold for limiting the traffic transmission rate).
  • the following two control schemes are described in detail in conjunction with specific embodiments.
  • control scheme data collection, real-time calculation of thresholds, and delivery thereof are implemented on a centralized control center (ie, centralized control device).
  • Each service gateway periodically reports the traffic size of each destination IP (that is, the size of the service transmission rate) to the control device.
  • the specific implementation process of the control scheme is as follows:
  • S402 Initially, the control center sets an actual current limit threshold of each destination IP according to the number of service gateways (SGWs) (corresponding to the sum B of the current limiting thresholds in the foregoing embodiments, generally with the operator for the above purpose)
  • SGWs service gateways
  • the bandwidth of the address allocation is equal, and is divided into Limit_Threshold/N, and then the traffic limiting threshold after the destination IP address is evenly distributed (that is, the current limiting threshold in the embodiment shown in FIG. 3) is sent to each SGW, where N represents the SGW.
  • the number is a positive integer;
  • Each SGW performs real-time statistics on the service transmission rate (or the traffic) of the destination IP address, and periodically reports the service transmission rate to the destination IP address to the centralized control device (for example, 5s);
  • the centralized control device analyzes and summarizes the traffic information in real time. After discovering that the service transmission rate of a destination IP address on a certain SGW exceeds the traffic limiting threshold, the data is reported for each SGW according to the data reported by each SGW.
  • the new current limit threshold (that is, the specified threshold).
  • the calculation method is as follows: the service transmission rate of each destination IP address reported by each SGW is DIP_SGW1_Rate, DIP_SGW2_Rate, DIP_SGWN_Rate, and the total transmission rate (DIP_Total_Rate) of the destination IP address is superimposed, and then according to the rate carried on each SGW.
  • the proportional size calculates the specified threshold.
  • the specified threshold on SGW1 will be (DIP_SGW1_Rate/DIP_Total_Rate)*Limit_Threshold and will be on each SGW.
  • the corresponding specified threshold is sent to the corresponding SGW, where the Limit_Threshold is the total threshold of the destination IP address, and may be the bandwidth allocated by the operator for the destination IP address, for example, the user-defined bandwidth corresponding to the destination IP address. 10M/S, at this time, the total threshold Limit_Threshold is 10M/S, and the sum of DIP_SGW1_Rate, DIP_SGW2_Rate ⁇ DIP_SGWN_Rate does not exceed 10M/S;
  • the specified threshold (DIP_SGWN_Rate/DIP_Total_Rate)*Limit_Threshold is sent to enable the SGW to perform traffic limiting according to the specified threshold (that is, limit the service transmission rate of the destination IP address on the SGW)
  • Steps S402-S408 are repeated, and the threshold is adjusted once every period until the service transmission rate on all SGWs is smaller than the traffic limiting threshold (that is, the total service transmission rate for the destination IP address output on the SGW is smaller than the traffic limiting threshold).
  • the SGW in FIG. 4 represents a service unit in a service gateway or a distributed device, and the ICS represents a centralized control system, that is, a control device.
  • the control flow for the centralized control device is as shown in FIG. 5, and includes the following processing steps:
  • Step S502 The initial traffic limiting threshold (ie, the traffic limiting threshold) is sent to all service gateways (SGWs) in the service gateway group.
  • SGWs service gateways
  • Step S504 receiving a service transmission rate reported by each SGW
  • Step S506 summarizing service transmission rates of the same destination IP address
  • Step S508 determining whether the service transmission rate on a certain SGW is greater than a corresponding current limiting threshold. Value, if yes, go to step S510, otherwise go to step S504;
  • Step S510 calculating a specified threshold for each SGW for the destination IP address according to a ratio of the current service transmission rate in the total service transmission rate (ie, the customized bandwidth);
  • Step S512 the updated specified threshold is sent to each SGW.
  • control plane processing flow on each SGW is as shown in FIG. 6, and includes the following processing steps:
  • Step S602 determining whether there is a message input, and if yes, proceeding to step S604, otherwise waiting;
  • Step S604 receiving a specified threshold delivered by the centralized control device
  • Step S606 updating the current limit threshold for the destination IP address to a specified threshold.
  • the data plane processing flow on each SGW is as shown in FIG. 7, and includes the following processing steps:
  • Step S702 receiving a message
  • Step S704 the service transmission rate (ie, the traffic) of the destination IP address is counted
  • Step S706 it is determined whether the service transmission rate exceeds the current limit threshold, if yes, then go to step S708, otherwise go to step S702;
  • Step S708 performing a current limiting process, that is, limiting a service transmission rate
  • Step S710 sending a traffic log.
  • Step S712 the service gateway performs other processing, and proceeds to step S704, where other
  • the processing may be performed as data forwarding, for example, when the service gateway is a firewall device, the other processing may be represented by Network Address Translation (NAT) or Virtual Private Network (VPN) access.
  • NAT Network Address Translation
  • VPN Virtual Private Network
  • Step S802 Initially, the administrator configures each SGW to configure the same traffic limiting threshold (ie, the traffic limiting threshold) for the destination IP, and creates the same SGW group on each SGW, and adds all SGWs to the SGW. group;
  • the traffic limiting threshold ie, the traffic limiting threshold
  • Step S804 Each SGW performs real-time statistics on the service transmission rate of the destination IP, performs hash operation based on the destination IP address, selects an SGW from the SGW group to process the threshold calculation of the destination IP address according to the operation result, and periodically reports to the SGW.
  • the service transmission rate of the destination IP address is reported.
  • each SGW sends the service transmission rate of the destination IP address to the IP-A to the SGW2 (the following steps are exemplified by IP-A and SGW2);
  • Step S806 SGW2 analyzes and summarizes the service transmission rate of the IP-A. After discovering that the service transmission rate of the IP-A on a certain SGW exceeds the traffic limiting threshold, the SGW calculates the data reported by each SGW for each SGW.
  • the new current limit threshold (that is, the specified threshold).
  • the calculation method is as follows: it is assumed that the service transmission rate of each IP-A reported by each SGW is DIP_SGW1_Rate, DIP_SGW2_Rate, DIP_SGWN_Rate, superimposed to get the total traffic value of IP-A (represented by DIP_Total_Rate), and then calculate the new limit according to the proportion of the traffic carried on each SGW (that is, the proportion of the service transmission rate in the total traffic value) Flow threshold.
  • the traffic limiting threshold on SGW1 will be (DIP_SGW1_Rate/DIP_Total_Rate)*Limit_Threshold, and the corresponding new traffic limiting threshold on each SGW is sent to the corresponding SGW;
  • Step S808 Steps S804-S808 are repeated, that is, the threshold is adjusted once every period until the service transmission rate on all SGWs is smaller than the current limit threshold (specified threshold).
  • control plane processing flow on each SGW is as shown in FIG. 9 and includes the following steps:
  • Step S902 receiving service transmission rate information reported by each SGW
  • Step S904 summarizing service transmission rates of the same destination IP address
  • Step S906 it is determined whether the service transmission rate on a certain SGW is greater than the corresponding current limit threshold (ie, the current limit threshold), if yes, go to step S908, otherwise, go to step S902;
  • Step S908 Calculate a specified threshold for each SGW for the destination IP address according to a ratio of the current service transmission rate in the total service transmission rate.
  • Step S910 the updated specified threshold is sent to each SGW.
  • the data plane processing flow on each SGW is as shown in FIG. 10, and includes the following steps:
  • Step S1002 receiving a message
  • Step S1004 the service transmission rate (ie, traffic) of the destination IP address is counted
  • step S1006 it is determined whether the service transmission rate exceeds the current limit threshold, and if so, the step is changed. Step S1008, otherwise step S1010;
  • Step S1008 performing a current limiting process, that is, limiting a service transmission rate
  • Step S1010 Perform a hash operation on the destination IP address to obtain a hash value.
  • Step S1012 selecting a corresponding SGW from the SGW group according to the hash value
  • Step S1014 sending a service transmission rate to the selected SGW
  • step S1016 the service gateway performs other processing.
  • the method according to the above embodiment can be implemented by means of software plus a necessary general hardware platform, and of course, by hardware, but in many cases, the former is A better implementation.
  • the technical solution of the present invention which is essential or contributes to the prior art, may be embodied in the form of a software product stored in a storage medium (such as ROM/RAM, disk,
  • the optical disc includes a number of instructions for causing a terminal device (which may be a cell phone, a computer, a server, or a network device, etc.) to perform the methods of various embodiments of the present invention.
  • an apparatus for implementing a control method of a service transmission rate which may be applied to a computer terminal, but the function or structure completed by the computer terminal is not limited to the computer in Embodiment 1.
  • the computer terminal in this embodiment may be represented by the centralized control device in the first embodiment or the designated service gateway in the SGW group.
  • the device includes:
  • the obtaining module 110 is configured to obtain the service transmission rate information reported by each service gateway in the service gateway group in the distributed environment, where each service gateway transmits the service data in parallel to the same destination address, and performs the service according to the respective traffic limiting thresholds.
  • a gateway for limiting the service transmission rate of data the service transmission rate information is used to indicate a service transmission rate for the destination address on each service gateway;
  • the determining module 112 is connected to the obtaining module 110, and is configured to determine, for each service gateway in the service gateway group, whether the service transmission rate indicated by the service transmission rate information is greater than a traffic limiting threshold corresponding to the service gateway;
  • the adjustment module 114 is connected to the determining module 112, and is configured to adjust the current limiting threshold allocated to each service gateway to a specified value when the at least one determination result output by the determining module 112 is YES, to obtain a specified threshold, wherein the specified value is satisfied.
  • the sending module 116 is connected to the adjusting module 114, and is configured to send the specified threshold to each of the foregoing service gateways.
  • the functions implemented by the above modules can also limit the service transmission rate of the destination address, so as to ensure that the total traffic after the parallel restriction of multiple service gateways (that is, the total service transmission rate of the same destination address) is in line with expectations. Threshold.
  • the adjustment module 114 may include the following processing unit:
  • the obtaining unit 1140 is configured to obtain a proportion of the service transmission rate of each service gateway in the total service transmission rate, where the total service transmission rate is used for the service transmission rate of the destination address on all service gateways in the service gateway group.
  • the operation unit 1142 is connected to the obtaining unit 1140, and is configured to determine, according to the ratio and the bandwidth, a specified threshold that is reassigned to each service gateway in the service gateway group.
  • each module involved in this embodiment may be implemented by software or hardware.
  • each of the above modules is located in the same processor, or each module is located in a different processor.
  • each of the above modules is located in a plurality of processors in any combination, but is not limited to the above expressions.
  • a service transmission rate control method is provided on the service gateway side. As shown in FIG. 13, the method includes:
  • Step S1302 Each service gateway in the service gateway group receives a specified threshold, where each service gateway transmits service data in parallel to the same destination address, and according to respective current limit thresholds.
  • the specified threshold is determined by:
  • the traffic limiting threshold assigned to each service gateway is adjusted to a specified value, and the specified threshold is obtained.
  • the sum of the specified values on each service gateway is not greater than the bandwidth allocated by the carrier for the destination address;
  • Step S1304 The service gateway limits the local service data transmission rate according to the specified threshold.
  • the method for controlling the service transmission rate provided by the embodiment of the present invention may be implemented by using a designated service gateway in a control center or a service gateway group, for example, before the service gateway in the service gateway group receives the specified threshold, the service gateway The localized control device in the distributed environment or the specified service gateway in the service gateway group reports the local service transmission rate for the destination address.
  • the above process of the present embodiment embodies two control schemes: a centralized control scheme and a distributed control scheme. For a specific implementation manner of the two control schemes, refer to the description in Embodiment 1, and details are not described herein again.
  • the service gateway obtains the traffic limiting threshold, and configures the traffic limiting threshold for the service gateway, where the service gateway receives the limit.
  • the flow threshold is equal to the traffic limiting threshold configured by other service gateways in the service gateway group.
  • the embodiment provides a control device for the service transmission rate, which is used to implement the method for controlling the service transmission rate in the embodiment 3.
  • the device can be applied to the service gateway in the service gateway group, where each of the service gateway groups
  • the service gateway is a gateway that performs parallel offload transmission for service data of the same destination address; the service transmission rate information is used to indicate a service transmission rate for the destination address on the service gateway.
  • the device includes:
  • the receiving module 140 is configured to receive a specified threshold; wherein the specified threshold is determined by:
  • the traffic limiting threshold assigned to each service gateway is adjusted to a specified value, and the specified threshold is obtained.
  • the sum of the specified values on each service gateway is not greater than the bandwidth allocated by the carrier for the destination address;
  • the limiting module 142 is coupled to the receiving module 140 for limiting the local service data transmission rate according to the specified threshold.
  • the total service transmission rate is obtained by summing the transmission rate of the destination address on all service gateways in the service gateway group.
  • each module involved in this embodiment may be implemented by software or hardware.
  • the following forms may be adopted: the receiving module 140 and the limiting module 142 are located in the same processor; or, the receiving module 140 and the limiting module 142 are located in the first processor and the second processor, respectively.
  • This embodiment is a centralized control scheme, that is, data collection and aggregation, and threshold calculation and delivery are implemented on a centralized control device.
  • This embodiment provides a control system for service transmission rate, as shown in FIG.
  • the control system includes: a centralized control device 150 and a service gateway group 152, wherein
  • the centralized control device 150 is configured to receive the service transmission rate information reported by each service gateway in the service gateway group, and when there is a service transmission rate greater than the traffic restriction threshold in the service transmission rate of each service gateway, the service will be used for each service.
  • the traffic limiting threshold of the gateway is adjusted to a specified value to obtain a specified threshold; and the specified threshold is sent to each service gateway; wherein each service gateway transmits the service data in parallel to the same destination address, and the service is performed according to the respective traffic limiting thresholds.
  • the gateway for limiting the service transmission rate of the data is used to indicate the service transmission rate for the destination address on each service gateway; the specified value satisfies the following conditions: each service network The sum of the specified values is not greater than the bandwidth allocated by the carrier for the destination address;
  • Each service gateway in the service gateway group 152 is configured to report service transmission rate information and limit the service transmission rate for the destination IP address on each service gateway according to the received specified threshold.
  • the solution provided in this embodiment is a distributed control solution, that is, the data collection, the real-time calculation, and the threshold issuance of different destination addresses are distributed on different service gateways by using a preset rule (for example, a hash operation rule). To ensure that the threshold of the same destination address is calculated on a service gateway, and the service transmission rate information of the destination address is reported to the service gateway.
  • An embodiment of the present invention provides a control system for a service transmission rate, where the system includes: a service gateway group, where
  • the specified service gateway in the service gateway group is configured to receive service transmission rate information reported by other service gateways in the service gateway group except the designated service gateway; and the service transmission rate on any service gateway in the service gateway group is greater than
  • the traffic threshold corresponding to the service gateway is adjusted to a specified value for each service gateway, and the specified threshold is obtained; and the specified threshold is sent to other service gateways;
  • Each service gateway is a gateway that transmits service data in parallel to the same destination address, and limits the service transmission rate of the service data according to the respective traffic limiting thresholds; the service transmission rate
  • the information is used to indicate the service transmission rate for the destination address on the service gateway; the specified value satisfies the following condition: the sum of the specified values on each service gateway is not greater than the bandwidth allocated by the operator for the destination address.
  • the service gateway is configured as a service gateway that is determined by: hashing data of the destination address, and selecting a specified service gateway from the service gateway group according to the operation result.
  • Embodiments of the present invention may provide a computer terminal, which may be any one of computer terminal groups.
  • the foregoing computer terminal may also be replaced with a terminal device such as a mobile terminal.
  • the computer terminal may be located in at least one network device of the plurality of network devices of the computer network.
  • the computer terminal may execute the program code of the following steps in the method for controlling the service transmission rate: acquiring the service transmission rate information reported by each service gateway in the service gateway group in the distributed environment, where each service gateway is a gateway that transmits service data in parallel to the same destination address and limits the service transmission rate of the service data according to the respective traffic restriction thresholds; the service transmission rate information is used to indicate the service transmission rate for the destination address on each service gateway; Each service gateway in the gateway group determines whether the service transmission rate indicated by the service transmission rate information is greater than a traffic restriction threshold corresponding to the service gateway; at least one judgment When the result is YES, the current-limit thresholds assigned to the service gateways are adjusted to the specified values, and the specified thresholds are obtained.
  • the specified values meet the following conditions: the sum of the specified values on each service gateway is not greater than the bandwidth allocated by the carrier for the destination address.
  • the specified threshold is sent to each service gateway.
  • FIG. 16 is a structural block diagram of a computer terminal according to an embodiment of the present invention.
  • the computer terminal A may include one or more (only one shown in the figure) processor 161, memory 163, and transmission device 165.
  • the memory 163 can be used to store software programs and modules, such as the security vulnerability detection method and the program instruction/module corresponding to the device in the embodiment of the present invention, and the processor 161 executes by executing the software program and the module stored in the memory 163.
  • Software programs and modules such as the security vulnerability detection method and the program instruction/module corresponding to the device in the embodiment of the present invention
  • the processor 161 executes by executing the software program and the module stored in the memory 163.
  • Various functional applications and data processing that is, detection methods for implementing the aforementioned system vulnerability attacks.
  • Memory 163 may include high speed random access memory, and may also include non-volatile memory such as one or more magnetic storage devices, flash memory, or other non-volatile solid state memory.
  • memory 163 can further include memory remotely located relative to processor 161, which can be connected to terminal A over a network. Examples of such networks include, but are not limited to, the Internet, intranets, local area networks, mobile communication networks, and combinations thereof.
  • the transmission device 165 described above is for receiving or transmitting data via a network.
  • Specific examples of the above network may include a wired network and a wireless network.
  • the transmission device 165 includes a Network Interface Controller (NIC) that can be connected to other network devices and routers via a network cable to communicate with the Internet or a local area network.
  • the transmission device 165 is a Radio Frequency (RF) module for communicating with the Internet wirelessly.
  • NIC Network Interface Controller
  • RF Radio Frequency
  • the memory 163 is configured to store preset action conditions and information of the preset rights user, and an application.
  • the processor 161 can call the information and the application stored by the memory 163 through the transmission device to perform the following steps: obtaining the proportion of the service transmission rate on each service gateway in the total service transmission rate, where the total service transmission rate is All the service gateways in the service gateway group are summed with the transmission rate of the destination address; the specified threshold is re-allocated for each service gateway in the service gateway group according to the ratio and bandwidth.
  • the processor 161 may further execute the following program code: select a service gateway from the service gateway group as the designated service gateway according to the hash algorithm.
  • FIG. 16 is only an illustration, and the computer terminal can also be a smart phone (such as an Android mobile phone, an iOS mobile phone, etc.), a tablet computer, an applause computer, and a mobile Internet device (MID). Terminal equipment such as PAD.
  • Fig. 16 does not limit the structure of the above electronic device.
  • computer terminal A may also include more or fewer components (such as a network interface, display device, etc.) than shown in FIG. 16, or have a different configuration than that shown in FIG.
  • Embodiments of the present invention also provide a storage medium.
  • the foregoing storage medium may be used to save the program code executed by the control method of the service transmission rate provided in Embodiment 1 above.
  • the foregoing storage medium may be located in any one of the computer terminal groups in the computer network, or in any one of the mobile terminal groups.
  • the storage medium is configured to store program code for performing the following steps: acquiring service transmission rate information reported by each service gateway in the service gateway group in the distributed environment, where each service gateway a gateway for transmitting service data in parallel to the same destination address, and limiting the service transmission rate of the service data according to the respective current limit thresholds; the service transmission rate information is used to indicate the service transmission rate for the destination address on each service gateway; Each service gateway in the service gateway group determines whether the service transmission rate indicated by the service transmission rate information is greater than a traffic restriction threshold corresponding to the service gateway; and when at least one of the determination results is yes, the traffic restriction is allocated for each service gateway.
  • the threshold is adjusted to the specified value, and the specified threshold is obtained.
  • the specified value meets the following conditions: the sum of the specified values on each service gateway is not greater than the bandwidth allocated by the operator for the destination address; the specified threshold is sent to each service gateway.
  • any one of the above computer terminal groups can be associated with a website service.
  • the scanner establishes a communication relationship with the scanner, and the scanner can scan the value command of the web application executed by php on the computer terminal.
  • the embodiment of the present invention may provide a computer terminal, which may be the same terminal as the computer terminal described in Embodiment 7, but the function is different from that implemented by the computer terminal in Embodiment 7.
  • a computer terminal which may be the same terminal as the computer terminal described in Embodiment 7, but the function is different from that implemented by the computer terminal in Embodiment 7.
  • FIG. 16 For the specific structure, refer to FIG. 16 , and details are not described herein again.
  • the computer terminal may execute the program code of the following steps in the control method of the service transmission rate: each service gateway in the service gateway group receives the specified threshold, where each service gateway transmits the service data in parallel to the same destination address. And the gateway that limits the service transmission rate of the service data according to the respective traffic limiting thresholds, and the specified threshold is determined by: the service transmission rate on any service gateway in the service gateway group is greater than the traffic limiting threshold corresponding to the service gateway.
  • the traffic-limit thresholds that are assigned to the service gateways are adjusted to the specified values, and the specified thresholds are obtained.
  • the specified value meets the following conditions: the sum of the specified values on the service gateways is not greater than the bandwidth allocated by the carrier for the destination address; Limits the local service data transmission rate based on the specified threshold.
  • the memory 163 in the computer terminal shown in FIG. 16 can be used to store a software program and a module, such as a method for controlling a service transmission rate and a program instruction/module corresponding to the device in the embodiment of the present invention.
  • the processor 161 can call the information and the application stored in the memory 163 through the transmission device. To perform the following steps: the service gateway reports the local service transmission rate to the destination address to the designated service gateway in the centralized control device or the service gateway group in the distributed environment.
  • the processor 161 may further execute the following program code: the service gateway obtains a traffic limiting threshold and configures a traffic limiting threshold for the service gateway, where the traffic limiting threshold configured by the service gateway and other service gateways in the service gateway group are configured. The configured current limit thresholds are equal.
  • Embodiments of the present invention also provide a storage medium.
  • the foregoing storage medium may be used to save the program code executed by the control method of the service transmission rate provided in Embodiment 1 above.
  • the foregoing storage medium may be located in any one of the computer terminal groups in the computer network, or in any one of the mobile terminal groups.
  • the storage medium is configured to store program code for performing the following steps: each service gateway in the service gateway group receives a specified threshold, wherein each service gateway transmits the service in parallel to the same destination address.
  • the data, and the gateway that limits the service transmission rate of the service data according to the respective traffic limiting thresholds, the specified threshold is determined by: the service transmission rate on any service gateway in the service gateway group is greater than the traffic restriction corresponding to the service gateway.
  • the traffic-limit thresholds that are assigned to the service gateways are adjusted to the specified values, and the specified thresholds are obtained.
  • the specified value meets the following conditions: the sum of the specified values on the service gateways is not greater than the bandwidth allocated by the carrier for the destination address; The gateway limits the local service data transmission rate according to the specified threshold.
  • any one of the above computer terminal groups can establish a communication relationship with the website server and the scanner, and the scanner can scan the value command of the web application executed by php on the computer terminal.
  • the disclosed service gateway can be implemented in other manners.
  • the device embodiments described above are merely illustrative.
  • the division of a unit is only a logical function division.
  • multiple units or components may be combined or may be integrated into Another system, or some features can be ignored or not executed.
  • the mutual coupling or direct coupling or communication connection shown or discussed may be an indirect coupling or communication connection through some interface, unit or module, and may be electrical or otherwise.
  • the units described as separate components may or may not be physically separate, and the components displayed as units may or may not be physical units, that is, may be located in one place, or may be distributed to multiple network units. You can choose some of them according to your actual needs. Or all units to achieve the purpose of the solution of the embodiment.
  • each functional unit in each embodiment of the present invention may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit.
  • the above integrated unit can be implemented in the form of hardware or in the form of a software functional unit.
  • An integrated unit if implemented in the form of a software functional unit and sold or used as a standalone product, can be stored in a computer readable storage medium.
  • the technical solution of the present invention which is essential or contributes to the prior art, or all or part of the technical solution, may be embodied in the form of a software product stored in a storage medium.
  • a number of instructions are included to cause a computer device (which may be a personal computer, server or network device, etc.) to perform all or part of the steps of the various embodiments of the present invention.
  • the foregoing storage medium includes: a U disk, a Read-Only Memory (ROM), a Random Access Memory (RAM), a removable hard disk, a magnetic disk, or an optical disk, and the like. .

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Environmental & Geological Engineering (AREA)
  • Data Exchanges In Wide-Area Networks (AREA)
  • Communication Control (AREA)
PCT/CN2016/098961 2015-09-24 2016-09-14 业务传输速率的控制方法及装置、系统 Ceased WO2017050166A1 (zh)

Priority Applications (4)

Application Number Priority Date Filing Date Title
JP2018515580A JP6685390B2 (ja) 2015-09-24 2016-09-14 サービス伝送速度を制御するための方法、装置及びシステム
EP16848048.1A EP3355538B1 (en) 2015-09-24 2016-09-14 Method, apparatus and system for controlling service transmission rate
KR1020187008307A KR20180059448A (ko) 2015-09-24 2016-09-14 서비스 전송 레이트를 제어하기 위한 방법, 장치 및 시스템
US15/933,292 US10484295B2 (en) 2015-09-24 2018-03-22 Method, apparatus and system for controlling service transmission rate

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
CN201510617906.2A CN106559349B (zh) 2015-09-24 2015-09-24 业务传输速率的控制方法及装置、系统
CN201510617906.2 2015-09-24

Related Child Applications (1)

Application Number Title Priority Date Filing Date
US15/933,292 Continuation US10484295B2 (en) 2015-09-24 2018-03-22 Method, apparatus and system for controlling service transmission rate

Publications (1)

Publication Number Publication Date
WO2017050166A1 true WO2017050166A1 (zh) 2017-03-30

Family

ID=58385635

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2016/098961 Ceased WO2017050166A1 (zh) 2015-09-24 2016-09-14 业务传输速率的控制方法及装置、系统

Country Status (6)

Country Link
US (1) US10484295B2 (enExample)
EP (1) EP3355538B1 (enExample)
JP (1) JP6685390B2 (enExample)
KR (1) KR20180059448A (enExample)
CN (1) CN106559349B (enExample)
WO (1) WO2017050166A1 (enExample)

Cited By (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN110061930A (zh) * 2019-02-01 2019-07-26 阿里巴巴集团控股有限公司 一种数据流量的限制、限流值的确定方法和装置
WO2021083269A1 (zh) * 2019-10-29 2021-05-06 北京金山云网络技术有限公司 网络流量的限速方法、装置、中控设备和网关
CN113438142A (zh) * 2021-06-21 2021-09-24 京东方科技集团股份有限公司 一种通信方法、通信系统及储物系统
CN115242722A (zh) * 2022-06-14 2022-10-25 中盈优创资讯科技有限公司 一种基于api网关的高级流控实现方法
CN115348208A (zh) * 2021-04-27 2022-11-15 中移(苏州)软件技术有限公司 一种流量控制方法、装置、电子设备和存储介质

Families Citing this family (18)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN107612839B (zh) * 2017-11-02 2021-03-02 广东天网安全信息科技有限公司 一种基于防火墙设备的流量分配方法
CN108092915A (zh) * 2017-12-01 2018-05-29 顺丰科技有限公司 一种用户服务质量流量控制方法及装置
CN108063764B (zh) * 2017-12-13 2021-03-23 北京搜狐新媒体信息技术有限公司 一种网络流量处理方法和装置
CN107948084B (zh) * 2017-12-15 2021-07-13 中国银联股份有限公司 一种限流方法和装置
CN110858808A (zh) * 2018-08-23 2020-03-03 阿里巴巴集团控股有限公司 一种实现限速的方法、系统及装置
CN111478857B (zh) * 2019-01-24 2023-06-13 北京嘀嘀无限科技发展有限公司 一种接口限流控制方法、装置以及电子设备
CN110011892B (zh) * 2019-03-15 2022-04-05 平安科技（深圳）有限公司 一种虚拟专用网络的通信方法及相关装置
CN112039686B (zh) * 2019-06-03 2023-08-04 杭州海康威视系统技术有限公司 一种数据流传输控制方法、装置、监控设备及存储介质
CN112751765A (zh) * 2019-10-30 2021-05-04 华为技术有限公司 一种用于调整传输速率的方法和装置
CN111224886B (zh) * 2020-01-17 2023-10-20 中国平安人寿保险股份有限公司 一种网络流量的管控方法及系统
CN112866128A (zh) * 2021-01-20 2021-05-28 华云数据控股集团有限公司 分布式网络的限速方法、装置及电子设备
JP7675734B2 (ja) 2021-05-27 2025-05-13 ヴェーエムイー ホーランド ベー． ヴェー． ストックリールからタイヤ部品を巻き戻し、前記タイヤ部品を搬送方向に出力するための巻き戻しシステムおよび方法
CN114189448B (zh) * 2021-12-14 2024-11-19 中国建设银行股份有限公司 数据处理方法、装置和设备
CN115174408B (zh) * 2022-06-20 2024-01-09 北京达佳互联信息技术有限公司 数据传输方法、装置及系统、电子设备及存储介质
CN115225393B (zh) * 2022-07-20 2023-09-26 北京天融信网络安全技术有限公司 一种源限速方法及装置、电子设备
CN115348075B (zh) * 2022-08-11 2025-03-07 湖北天融信网络安全技术有限公司 一种基于分布式ddos系统检测阈值自适应的方法、装置
WO2024038579A1 (ja) * 2022-08-19 2024-02-22 日本電信電話株式会社 パケット転送制御装置、パケット転送制御方法、振分シミュレーション装置、および、プログラム
CN115514649B (zh) * 2022-08-24 2024-11-29 中国电信股份有限公司 一种企业SDWAN hub-spoke组网中智能隧道调度的方法与系统

Citations (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN1826773A (zh) * 2003-07-31 2006-08-30 思科技术公司 在虚拟网关中分发和平衡流量流
CN101697528A (zh) * 2009-10-30 2010-04-21 杭州华三通信技术有限公司 一种nat网关设备之间的负载分担方法和设备
CN101911596A (zh) * 2008-01-02 2010-12-08 汤姆森许可贸易公司 共享接入线路带宽的系统和方法
CN102196513A (zh) * 2010-03-11 2011-09-21 阿尔卡特朗讯 用于确定业务网关接入的业务速率的方法和设备
CN102223677A (zh) * 2011-07-04 2011-10-19 重庆邮电大学 一种基于iasa负载均衡装置的切换方法及切换系统
CN104821922A (zh) * 2015-02-12 2015-08-05 杭州华三通信技术有限公司 一种流量分担方法和设备

Family Cites Families (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US8929360B2 (en) * 2006-12-07 2015-01-06 Cisco Technology, Inc. Systems, methods, media, and means for hiding network topology
US9013995B2 (en) * 2012-05-04 2015-04-21 Telefonaktiebolaget L M Ericsson (Publ) Congestion control in packet data networking
JP5917305B2 (ja) * 2012-06-08 2016-05-11 株式会社東芝 負荷分散制御装置、通信装置、通信システム、及び負荷分散制御方法
US10104574B2 (en) * 2013-09-22 2018-10-16 Lg Electronics Inc. Method and apparatus for controlling wireless access congestion
WO2015070088A1 (en) * 2013-11-07 2015-05-14 Huawei Technologies Co., Ltd. System and method for traffic splitting
US10812398B2 (en) * 2016-02-16 2020-10-20 Belden, Inc. Systems and methods for retransmission rate selection to support fast moving devices

Patent Citations (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN1826773A (zh) * 2003-07-31 2006-08-30 思科技术公司 在虚拟网关中分发和平衡流量流
CN101911596A (zh) * 2008-01-02 2010-12-08 汤姆森许可贸易公司 共享接入线路带宽的系统和方法
CN101697528A (zh) * 2009-10-30 2010-04-21 杭州华三通信技术有限公司 一种nat网关设备之间的负载分担方法和设备
CN102196513A (zh) * 2010-03-11 2011-09-21 阿尔卡特朗讯 用于确定业务网关接入的业务速率的方法和设备
CN102223677A (zh) * 2011-07-04 2011-10-19 重庆邮电大学 一种基于iasa负载均衡装置的切换方法及切换系统
CN104821922A (zh) * 2015-02-12 2015-08-05 杭州华三通信技术有限公司 一种流量分担方法和设备

Non-Patent Citations (1)

* Cited by examiner, † Cited by third party
Title
See also references of EP3355538A4 *

Cited By (7)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN110061930A (zh) * 2019-02-01 2019-07-26 阿里巴巴集团控股有限公司 一种数据流量的限制、限流值的确定方法和装置
WO2021083269A1 (zh) * 2019-10-29 2021-05-06 北京金山云网络技术有限公司 网络流量的限速方法、装置、中控设备和网关
CN115348208A (zh) * 2021-04-27 2022-11-15 中移(苏州)软件技术有限公司 一种流量控制方法、装置、电子设备和存储介质
CN115348208B (zh) * 2021-04-27 2024-04-09 中移(苏州)软件技术有限公司 一种流量控制方法、装置、电子设备和存储介质
CN113438142A (zh) * 2021-06-21 2021-09-24 京东方科技集团股份有限公司 一种通信方法、通信系统及储物系统
CN115242722A (zh) * 2022-06-14 2022-10-25 中盈优创资讯科技有限公司 一种基于api网关的高级流控实现方法
CN115242722B (zh) * 2022-06-14 2024-04-16 中盈优创资讯科技有限公司 一种基于api网关的高级流控实现方法

Also Published As

Publication number Publication date
JP6685390B2 (ja) 2020-04-22
US10484295B2 (en) 2019-11-19
JP2018534830A (ja) 2018-11-22
EP3355538A4 (en) 2019-07-24
EP3355538B1 (en) 2021-07-21
CN106559349B (zh) 2019-03-19
US20180212892A1 (en) 2018-07-26
EP3355538A1 (en) 2018-08-01
CN106559349A (zh) 2017-04-05
KR20180059448A (ko) 2018-06-04

Similar Documents

Publication Publication Date Title
WO2017050166A1 (zh) 业务传输速率的控制方法及装置、系统
US12407754B2 (en) Control apparatus for gateway in mobile communication system
US9736278B1 (en) Method and apparatus for connecting a gateway router to a set of scalable virtual IP network appliances in overlay networks
US8958294B2 (en) Assigning identifiers to mobile devices according to their data service requirements
EP3119047B1 (en) Load balancing method, apparatus and system
JP6481909B2 (ja) サービス経路生成方法および装置
US20240179027A1 (en) Link configuration method and controller
CN106534376A (zh) 用户上线的负载均衡方法、装置和设备
US20170005907A1 (en) Apparatus and method of adaptively connecting devices in a network with gateways coupled to external networks
CN103369616A (zh) 一种双模组网下的数据传输方法及装置
WO2023185804A1 (zh) 用于vpn的多流负载均衡方法、装置、系统及存储介质
Zhao et al. SDWLAN: A flexible architecture of enterprise WLAN for client-unaware fast AP handoff
CN114503531A (zh) 分布式端点的管理
CN106332129B (zh) 无线网络功能的配置方法、无线网络节点及核心网设备
CN102917429A (zh) 报文传输方法及装置
CN105704167A (zh) 一种业务链处理方法、设备及系统
TWI713332B (zh) 業務傳輸速率的控制方法及裝置、系統
CN117223261A (zh) 用于增加的吞吐量和可扩展性的系统和方法
ANUPAMA Load Balancing the Network Traffic in the Nth Mode of IPtables
Netshikweta et al. Comparative study of load balancing routing algorithms in hybrid networks

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 16848048

Country of ref document: EP

Kind code of ref document: A1

ENP Entry into the national phase

Ref document number: 20187008307

Country of ref document: KR

Kind code of ref document: A

WWE Wipo information: entry into national phase

Ref document number: 2018515580

Country of ref document: JP

NENP Non-entry into the national phase

Ref country code: DE

WWE Wipo information: entry into national phase

Ref document number: 2016848048

Country of ref document: EP