WO2019041332A1 - 一种加速网络传输优化方法以及系统 - Google Patents

一种加速网络传输优化方法以及系统 Download PDF

Info

Publication number
WO2019041332A1
WO2019041332A1 PCT/CN2017/100307 CN2017100307W WO2019041332A1 WO 2019041332 A1 WO2019041332 A1 WO 2019041332A1 CN 2017100307 W CN2017100307 W CN 2017100307W WO 2019041332 A1 WO2019041332 A1 WO 2019041332A1
Authority
WO
WIPO (PCT)
Prior art keywords
acceleration
node
packet
tcp
data packet
Prior art date
Application number
PCT/CN2017/100307
Other languages
English (en)
French (fr)
Inventor
朱明辉
Original Assignee
深圳前海达闼云端智能科技有限公司
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by 深圳前海达闼云端智能科技有限公司 filed Critical 深圳前海达闼云端智能科技有限公司
Priority to PCT/CN2017/100307 priority Critical patent/WO2019041332A1/zh
Priority to CN201780002596.0A priority patent/CN108064441B/zh
Publication of WO2019041332A1 publication Critical patent/WO2019041332A1/zh

Links

Images

Classifications

    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L69/00Network arrangements, protocols or services independent of the application payload and not provided for in the other groups of this subclass
    • H04L69/16Implementation or adaptation of Internet protocol [IP], of transmission control protocol [TCP] or of user datagram protocol [UDP]
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L2212/00Encapsulation of packets

Definitions

  • the present application relates to the field of accelerating network transmission, and in particular to an accelerated network transmission optimization method and system.
  • acceleration networks include application delivery networks and virtual private networks.
  • ADN Application Delivery Networking leverages appropriate network optimization/acceleration devices to ensure that business applications are delivered to internal employees and external service groups quickly, securely and reliably. Improve the ability to work with branch offices, customers, suppliers, and partners by connecting people, affiliates, partners, product suppliers, and customers.
  • the virtual private network refers to the enterprise network established on the public network, and the enterprise network has the same security, management and functions as the private network, and utilizes the public network resources of the Internet as the enterprise specialization. Continuation of the network. Virtual private networks help remote users, corporate branches, business partners, and suppliers establish trusted, secure connections to the company's intranet and securely transfer data.
  • the acceleration network needs to specify the user's final access target address and corresponding port.
  • the access nodes of the acceleration network must configure the user to accelerate the policy information in the network, and the network transmission process is cumbersome.
  • the present invention provides an acceleration network transmission optimization method and system, and accelerates an access node to selectively perform packet encapsulation according to the type of the data packet, so as to ensure that the data packets transmitted by the intermediate nodes of the acceleration network can be accelerated and optimized to be transmitted.
  • the user multi-protocol transparent forwarding mechanism and after the initial configuration of the accelerated network is established, no configuration is required in the working process, and the user is automatically identified to access the source station.
  • an embodiment of the present application provides an accelerated network transmission optimization method, including the following steps:
  • the accelerated access node determines the type of the data packet
  • the intermediate node of the acceleration network optimizes transmission of the TCP packet to the acceleration egress node, and the acceleration egress node communicates with the source station according to the source address and port according to the TCP transmission protocol;
  • the accelerated access node When the data packet is a UDP packet, the accelerated access node encapsulates the UDP packet as an identifiable TCP packet, and the intermediate node of the acceleration network optimizes transmission of the Authenticated TCP packet to the acceleration egress node, and the acceleration The egress node resolves the Authenticated TCP packet to the UDP packet, and the egress node further communicates with the source station according to the UDP transport protocol according to the source station address and port.
  • an embodiment of the present application provides an accelerated network transmission optimization system, including an acceleration access node, a plurality of intermediate nodes, and an acceleration egress node, where the terminal accesses the acceleration network through the acceleration access node, and passes the acceleration egress node.
  • the acceleration access node includes a judging module and a packaging module
  • the accelerating egress node includes a parsing module
  • the accelerating access node receives the data packet, and obtains a source station address and a port of the data packet;
  • the module is configured to determine the type of the data packet.
  • the intermediate node of the acceleration network optimizes transmission of the TCP packet to the acceleration egress node, and the egress node is based on the source address and port based on the TCP.
  • the transmission protocol communicates with the source station.
  • the encapsulating module is configured to encapsulate the UDP packet as an Authenticated TCP packet, and the intermediate node of the acceleration network optimizes transmission of the Authenticated TCP packet.
  • the parsing module of the egress node is configured to parse the Authenticated TCP packet into the UDP packet, the acceleration exit According to this point and then the source station address and port of the UDP transport protocol-based communication with the source station.
  • the embodiment of the present application further provides a server cluster, including an acceleration access node and an acceleration egress node, where the terminal accesses the acceleration network by accelerating the access node, and accelerates the data communication between the egress node and the source station, where
  • the accelerated access node and the acceleration exit node each include at least one processor; and,
  • the memory stores instructions executable by the at least one processor, the instructions being executed by the at least one processor to establish a data channel through the communication component to enable the at least one processor to perform the method as described above.
  • the embodiment of the present application further provides a non-transitory computer readable storage medium, where the computer readable storage medium stores computer executable instructions for causing a computer to execute the above The method described.
  • the embodiment of the present application further provides a computer program product, where the computer program product includes a computer program stored on a non-transitory computer readable storage medium, the computer program includes program instructions, when When the program instructions are executed by the computer, the computer is caused to perform the method as described above.
  • the method and system for accelerating network transmission provided by the embodiment of the present invention accelerate the access node to selectively encapsulate the packet according to the type of the data packet, so as to implement the TCP transmission protocol in the entire acceleration network. Accelerate the transmission, accelerate the access node to implement the encapsulation of UDP to TCP data packets, and realize the transmission of UDP data packets by TCP transmission protocol during the transmission process, and accelerate the analysis of data packets sent by the egress node to TCP to UDP to ensure the acceleration of the network.
  • the data packets transmitted by the intermediate nodes can adopt the acceleration optimization measures based on the TCP transmission protocol to form a multi-user multi-protocol transparent forwarding mechanism to improve the transmission quality and speed.
  • the accelerated network transmission optimization method and the system provided by the embodiment of the present application eliminate the configuration steps in the link, and automatically identify the user to access the source station to complete the data transmission without further configuration after the initial configuration of the accelerated network setup. .
  • FIG. 1 is a system architecture diagram of an accelerated network transmission optimization system provided by an embodiment of the present application.
  • FIG. 2 is a system block diagram of an accelerated network transmission optimization system provided by an embodiment of the present application.
  • FIG. 3 is a schematic diagram of a request format of an extended Socks5 protocol of an accelerated network transmission optimization system according to an embodiment of the present application
  • FIG. 4 is a schematic diagram of a response format of an extended Socks5 protocol of an accelerated network transmission optimization system according to an embodiment of the present application
  • FIG. 5 is a flowchart of an acceleration ingress node processing of an accelerated network transmission optimization method according to an embodiment of the present application
  • FIG. 6 is a flowchart of an acceleration egress node processing method for accelerating network transmission optimization method provided by an embodiment of the present application
  • FIG. 7 is a hardware framework diagram of an optimization method for implementing accelerated network transmission provided by an embodiment of the present application.
  • FIG. 8 is a diagram showing an application example of an accelerated network transmission optimization system provided by an embodiment of the present application.
  • an accelerated network transmission optimization system provided by an embodiment of the present application includes a user requesting end 10, an acceleration network A, and a source station 70.
  • the acceleration network A may be an application delivery network, or may be a virtual private network or other networking form that requires dedicated acceleration network support, such as a content distribution network.
  • the acceleration network A is formed by networking a plurality of service nodes, and is distinguished according to the function of completing network transmission optimization, and the acceleration network A includes an acceleration access node 20, a plurality of intermediate nodes 50, and an acceleration exit node 60.
  • a node that receives a data message sent by a user can be understood as an acceleration access node 20, an intermediate node of the acceleration network A, and a node that communicates with the source station 70 can be understood as an acceleration exit node 60.
  • the acceleration access node 20 selectively performs packet encapsulation according to the type of the received data packet to implement accelerated transmission by the TCP transmission control protocol in the entire acceleration network.
  • the acceleration egress node 60 also selectively performs packet encapsulation according to the type of the fed back data packet to accelerate the feedback data in the entire acceleration network by using the TCP transmission protocol, thereby ensuring that the data packets of the intermediate node of the acceleration network can be based on The TCP transport protocol accelerates transmission and improves transmission quality and speed.
  • the transmission mode of TCP packets remains unchanged.
  • the access node accelerates the encapsulation of UDP-to-TCP data packets.
  • UDP data packets are transmitted in the TCP transmission control protocol, and the egress node implements TCP-to-UDP data packet parsing. Guarantee It is proved that the entire acceleration network A is accelerated transmission by the TCP transmission control protocol.
  • the transmission form of the data packet remains unchanged except for the acceleration network A.
  • the TCP packet is still transmitted based on the TCP transmission protocol, and the UDP packet is still transmitted based on the UDP transmission protocol.
  • the TCP transmission protocol is a TCP (Transmission Control Protocol, TCP) transmission control protocol, and provides a connection-oriented, reliable byte stream service.
  • TCP Transmission Control Protocol
  • TCP connection must be established between the two parties before data can be transferred.
  • TCP provides timeout retransmission, discards duplicate data, checks data, and controls traffic to ensure that data can be transmitted from one end to the other.
  • the UDP transport protocol is a User Datagram Protocol (UDP) User Data Protocol, which is a data-oriented transport layer protocol.
  • UDP does not provide reliability. It simply sends the data that the application passes to, but there is no guarantee that they will reach their destination. Since UDP does not need to establish a connection between the client and the server before transmitting the data message, and there is no mechanism such as timeout retransmission, the transmission speed is fast.
  • the acceleration network A performs accelerated optimization transmission by using the TCP transmission protocol.
  • TCP-accelerated optimized transmission refers to the performance of TCP acceleration and optimized transmission in transmitting data over the network through a set of optimization techniques, and does not need to modify the specific application of the upper layer.
  • TCP acceleration optimized transmission technologies include TCP transparent proxy and TCP offload engine.
  • the accelerated network transmission optimization system of this embodiment includes a user requesting end 10, an acceleration network A, and a source station 70.
  • the acceleration network A includes an acceleration access node 20, a plurality of intermediate nodes 50, and an acceleration exit node 60.
  • the terminal 10 accesses the acceleration network A through the acceleration access node 20 and communicates with the source station 70 through the acceleration exit node 60 of the acceleration network A.
  • the acceleration access node 20 and the acceleration exit node 60 are distinguished from the functions they complete.
  • the node that receives the data message sent by the user can be understood as the acceleration access node 20
  • the acceleration network A The node that the source station 70 communicates can be understood as the acceleration exit node 60.
  • the acceleration access node 20 and the acceleration exit node 60 are taken as an example for illustration.
  • the acceleration access node 20 includes a redirection module 22, a judging module 24, a packaging module 26, a parsing module 28, and a communication module 29.
  • the package module 26 is connected to the expansion module 27.
  • the acceleration exit node 60 includes a determination module 64, a packaging module 66, a parsing module 68, and a communication Module 69.
  • the package module 66 is connected to the expansion module 67.
  • the acceleration access node 20 receives the data packet sent by the user requesting terminal 10, and acquires the source station address and port of the data packet.
  • the determining module 24 of the accelerated access node 20 determines the type of the received data message.
  • the intermediate node of the acceleration network A optimizes the transmission of the TCP packet to the acceleration exit node 60.
  • the communication module 69 of the acceleration exit node 60 communicates with the source station 70 based on the source station address and port acquired at the acceleration ingress node 20 based on the TCP transmission protocol.
  • the encapsulating module 26 of the acceleration ingress node 20 encapsulates the UDP packet as an Authenticated TCP packet, and optimizes transmission of the Authenticated TCP by accelerating the network A.
  • the message is sent to the egress node 60.
  • the parsing module 68 of the egress node analyzes the Authenticated TCP packet as the UDP packet.
  • the communication module 69 of the acceleration exit node 60 then communicates with the source station 70 based on the source station address and port acquired at the acceleration ingress node 20 based on the UDP transport protocol.
  • the acceleration exit node 60 obtains the data message returned by the source station 70.
  • the determining module 64 of the acceleration exit node 60 analyzes and determines the type of the data message.
  • the intermediate node of the acceleration network A optimizes to transmit the TCP packet to the acceleration ingress node 20, and the acceleration ingress node 20 and the user requesting terminal 10 transmit according to the TCP transmission protocol.
  • the encapsulating module 66 of the egressing egress node 60 encapsulates the UDP packet as an identifiable TCP packet, and accelerates the intermediate node of the network A to optimize the transmission of the certifiable packet.
  • the TCP packet is sent to the acceleration ingress node 20, and the parsing module 28 of the acceleration ingress node 20 parses the Authenticated TCP packet as the UDP packet, and the acceleration ingress node 20 transmits the UDP packet based on the UDP through the communication module 29 and the user requesting terminal 10.
  • the protocol sends a data message fed back by the source station 70.
  • the encapsulated module of the acceleration access node 20 and the acceleration exit node 60 encapsulates the UDP packet into an identifiable TCP packet by using the Socks5 protocol.
  • the Socks5 protocol enables authenticated data transmission.
  • the accelerated access node 20 based on the TCP transport protocol wishes to establish a connection with the target node, only a TCP link port can be opened through the firewall at the appropriate SOCKS port to arrive safely.
  • the Socks5 service is normally located on TCP port 1080. If the connection request is successful, the target node negotiates the authentication mode to be used, authenticates the selected authentication mode, and then sends a forwarding request. Socks5 evaluates the forward request and decides whether to establish the connection requested for forwarding.
  • the accelerated access node 20 redirects the received data packet to the local listening port of the acceleration access node 20 to obtain the Source station address and port for data message access.
  • the package module 26 also includes an expansion module 27 that also includes an expansion module 67.
  • the expansion module 27, 67 is configured to extend the request format of the Socks5 protocol, and add the data packet type indication information.
  • the content of the request format is specifically described below.
  • FIG. 3 a schematic diagram of a request format for extending the Socks5 protocol is shown.
  • the RSV is a reserved field of the Socks5 protocol request format, and the extension module 27, 67 performs extended content in the reserved field, for example, adding a data packet type identifier. information.
  • the acceleration access node 20 or the acceleration egress node 60 can identify whether the data packet is a data packet to be decapsulated.
  • the RSV reserved field is set, and the extension is performed based on the reserved field.
  • FIG. 4 is a schematic diagram of the response format of the extended Socks5 protocol.
  • the data packet type identifier information may also be used to distinguish the data packet from the request packet or the response packet or other packet.
  • the specific RSV reserved field is as follows: if the value of the RSV reserved field is 0x01; The response request RSV reserved field has a value of 0x01. In other cases, the RSV reserved field has a value of 0x00.
  • ATYP is a type used to indicate the BND.ADDR domain
  • BND.ADDR is the CMD-related address information
  • BND.PORT is CMD-related port information, and 2-byte data of big-endian order.
  • the acceleration network A adopts a transparent forwarding mechanism.
  • the transparent forwarding mechanism does not change the source and destination IP addresses and ports, and ensures that the flow control policy for each IP address on the flow control device still takes effect.
  • the transparent forwarding mechanism means that the transmission network is transparent during transmission. Regardless of the transmitted service, the transparent transmission network is only responsible for transmitting the services to be transmitted to the destination node, and ensuring the quality of the transmission without performing the transmitted service. deal with.
  • the embodiment relates to an accelerated network transmission optimization method.
  • the following steps are included:
  • Step 101 Accelerate the access node to receive the data packet.
  • Step 102 Obtain a source station address and a port of the data packet.
  • the acceleration access node 20 redirects the received data packet to the source station address and port of the data packet. Accelerating the local listening port of the access node 20 to obtain the source station address and port accessed by the data packet;
  • Step 103 Determine the data packet type.
  • Step 105 When the data packet is a TCP packet, the intermediate node of the acceleration network optimizes the transmission of the TCP packet to the acceleration exit node 60;
  • Step 106 The acceleration exit node 60 communicates with the source station 70 according to the source address and port based on the TCP transmission protocol.
  • Step 107 When the data packet is a UDP packet, the UDP packet is encapsulated into an Authenticated TCP packet.
  • Step 108 The intermediate node of the acceleration network optimizes the transmission of the Authenticated TCP message to the acceleration exit node 60;
  • Step 109 The accelerated egress node 60 parses the Authenticated TCP packet as the UDP packet.
  • Step 110 The acceleration exit node 60 further communicates with the source station 70 based on the source station address and port based on the UDP transport protocol.
  • the accelerated network transmission optimization method in this embodiment further includes the following steps in the data response process:
  • Step 201 The acceleration exit node 60 obtains a data packet returned by the source station.
  • Step 202 The acceleration exit node 60 determines the type of the returned data packet.
  • Step 205 When the data packet is a TCP packet, the intermediate node of the acceleration network optimizes the transmission of the TCP packet to the acceleration entry node 20;
  • Step 206 The acceleration ingress node 20 and the user send the data message fed back by the source station 70 according to the TCP transmission protocol.
  • Step 207 When the data packet is a UDP packet, the acceleration egress node 60 encapsulates the UDP packet as an Authenticated TCP packet.
  • Step 208 The intermediate node of the acceleration network optimizes transmission of the Authenticated TCP message to the acceleration entry node 20;
  • Step 209 The acceleration ingress node 20 parses the Authenticated TCP packet as the UDP packet.
  • Step 210 The acceleration ingress node 20 sends the data message fed back by the source station 70 to the user based on the UDP transmission protocol.
  • the step of encapsulating the UDP packet as an Authenticated TCP packet is encapsulated by the Socks5 protocol.
  • the data packet is redirected to the local listening port of the accelerated access node 20 to obtain the source station address and port accessed by the data packet.
  • the accelerated network transmission optimization method of this embodiment further includes extending the request format of the Socks5 protocol, and adding the data packet type indication information.
  • FIG. 8 Please refer to FIG. 8 for an example of an accelerated network transmission optimization method for the multi-user multi-protocol.
  • the acceleration access node 20 and the acceleration exit node 60 adopt a transparent forwarding mechanism, and the acceleration access node 20 listens to the TCP port as 10000 and the UDP port as 10001. The acceleration exit node 60 listens for the TCP port to 20000.
  • the enterprise 10 accesses the respective source stations 70 through the acceleration network A
  • the enterprise 12 accesses the respective source stations 72 through the acceleration network A
  • the enterprise 10 and 12 access traffic is drained to the acceleration network A through the access devices.
  • Accelerate access node 20 the enterprise 10 accesses the respective source stations 70 through the acceleration network A
  • the enterprise 12 accesses the respective source stations 72 through the acceleration network A
  • the enterprise 10 and 12 access traffic is drained to the acceleration network A through the access devices.
  • Accelerate access node 20 the enterprise 10 accesses the respective source stations 70 through the acceleration network A
  • the enterprise 12 accesses the respective source stations 72 through the acceleration network A
  • the enterprise 10 and 12 access traffic is drained to the acceleration network A through the access devices. Accelerate access node 20.
  • the acceleration access node 20 redirects the access TCP packet to the 10000 port, and obtains the source station address IP_A and port of the enterprise 10, and the enterprise 12 source station IP_B and port at the 10000 port. It is encapsulated according to the standard Socks5 protocol, sent to the egress port 20000, and IP_A and IP_B are parsed from the 20,000 port.
  • the acceleration egress node 60 establishes a connection with the source station 70 and the source station 72 of the enterprise 10 and the enterprise 12, respectively.
  • the enterprise 10 sends a TCP packet to the source station 70 of the enterprise 10 through the acceleration access node 20 and the acceleration exit node 60, and the enterprise 12 sends a TCP packet through the accelerated access node 20 and the acceleration exit node 60 to reach the enterprise 12 source. Station 72.
  • the UDP packet is redirected to port 10001. On port 10001, the address and port of the source station are accessed by UDP packets.
  • the UDP packet is encapsulated according to the standard Socks5 protocol or the extended Socks5 protocol, and sent to the 20,000 port of the acceleration exit node 60.
  • the UDP message is transmitted between the acceleration access node 20 and the acceleration exit node 60 by using the TCP transmission protocol, and the source node 70 address and port are parsed at the acceleration exit node 60, and then the acceleration exit node 60 and the source station 70 establish a UDP connection. .
  • the enterprise 10 and the enterprise 12 access the respective source station 70 and source station 72 through the acceleration network A.
  • the accelerated access node and the accelerated egress node adopt a transparent forwarding mechanism, and the address and port of the user access source station are simply and quickly obtained through the redirection method, and the type of the data packet is selected according to the type of the data packet.
  • Packets are encapsulated in packets, and the encapsulated packets are encapsulated in an Authenticated Encapsulation mode.
  • the Socks5 data format is extended to accelerate the transmission of UDP packets in the network by TCP packets. This ensures that the data packets transmitted by the intermediate nodes of the network can be accelerated. Transmission, forming a multi-user multi-protocol transparent forwarding mechanism to achieve efficient and high-quality data transmission. And after accelerating the initial setup of the network, there is no need to configure it during the work process, and the user is automatically identified to access the source station.
  • FIG. 7 is a schematic diagram of a hardware structure of a device 600 for a single accelerated access node or an egress-out node in a server cluster according to an embodiment of the present disclosure. As shown in FIG. 7, the device 600 includes:
  • One or more processors 610, a memory 620, and a communication component 650 are exemplified by a processor 610 in FIG.
  • the memory 620 stores instructions executable by the at least one processor 610, the instructions being executed by the at least one processor, establishing a data channel through the communication component 650 to enable the at least one processor to perform the accelerated network transmission optimization method.
  • the processor 610, the memory 620, and the communication component 650 may be connected by a bus or other means, as exemplified by a bus connection in FIG.
  • the memory 620 is a non-volatile computer readable storage medium, and can be used for storing a non-volatile software program, a non-volatile computer executable program, and a module, as in the accelerated network transmission optimization method in the embodiment of the present application.
  • Program instructions/modules (for example, FIG. 2 accelerates the redirection module 22, the judging module 24, the encapsulation module 26, and the parsing module 28 shown by the access node 20, and the judging module 64, the encapsulating module 66, and the extension shown by the egress node Module 67, parsing module 68, and communication module 69).
  • the processor 610 executes various functional applications and data processing of the server by running non-volatile software programs, instructions, and modules stored in the memory 620, that is, implementing the accelerated network transmission optimization method in the above method embodiments.
  • the memory 620 may include a storage program area and an storage data area, wherein the storage program area may store an operating system, an application required for at least one function; the storage data area may store data created according to an use of the accelerated network transmission optimization system, and the like.
  • memory 620 can include high speed random access memory, and can also include non-volatile memory, such as at least one magnetic disk storage device, flash memory device, or other non-volatile solid state storage device.
  • the memory 620 can optionally include phases For memory remotely set by the processor 610, these remote memories can be connected to the robotic interactive electronic device via a network. Examples of such networks include, but are not limited to, the Internet, intranets, local area networks, mobile communication networks, and combinations thereof.
  • the one or more modules are stored in the memory 620, and when executed by the one or more processors 610, perform an accelerated network transmission optimization method in any of the above method embodiments, for example, performing the above described map Method step 101 to step 110 in FIG. 5, and performing method step 201 to step 210 in FIG. 6 described above; implementing the redirection module 22, the judging module 24, and the encapsulating module 26 shown in FIG. 2 to accelerate the access node 20.
  • the analysis module 28 accelerates the functions of the determination module 64, the encapsulation module 66, the extension module 67, the analysis module 68, and the communication module 69 shown by the egress node.
  • Embodiments of the present application provide a non-transitory computer readable storage medium storing computer-executable instructions that are executed by one or more processors, for example, to perform the above
  • the method steps 101 to 110 in FIG. 5 are described, and the method steps 201 to 210 in FIG. 6 described above are performed; and the redirection module 22, the judging module 24 shown in the acceleration access node 20 of FIG. 2 is implemented.
  • the encapsulation module 26 and the analysis module 28 accelerate functions of the functions such as the determination module 64, the encapsulation module 66, the extension module 67, the analysis module 68, and the communication module 69 shown by the egress node.
  • the device embodiments described above are merely illustrative, wherein the units described as separate components may or may not be physically separate, and the components displayed as units may or may not be physical units, ie may be located A place, or it can be distributed to multiple network units. Some or all of the modules may be selected according to actual needs to achieve the purpose of the solution of the embodiment.
  • the storage medium may be a magnetic disk, an optical disk, a read-only memory (ROM) or Machine memory (Random Access Memory, RAM) and so on.

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Data Exchanges In Wide-Area Networks (AREA)

Abstract

一种加速网络传输优化方法,包括以下步骤:加速接入节点接收数据报文,并获取数据报文的源站地址和端口;该加速接入节点判断该数据报文类型;当该数据报文为TCP报文时,加速网络的中间节点优化传输该TCP报文至加速出口节点,该加速出口节点根据该源站地址和端口基于TCP传输协议与源站通信;当该数据报文为UDP报文时,该加速接入节点封装该UDP报文为可认证的TCP报文,加速网络的中间节点优化传输该可认证的TCP报文至加速出口节点,该加速出口节点解析该可认证的TCP报文为该UDP报文,该加速出口节点再根据该源站地址和端口基于UDP传输协议与源站通信。

Description

一种加速网络传输优化方法以及系统 技术领域
本申请涉及加速网络传输领域,具体涉及一种加速网络传输优化方法以及系统。
背景技术
随着网络技术的发展,越来越多的商业业务实现了网络化交易。比如银行、电商平台等。这些网络化业务一般需要专用加速网络的支持。例如,加速网络包括应用交付网络和虚拟专用网络。
应用交付网络(Application Delivery Networking,ADN),利用相应的网络优化/加速设备,确保用户的业务应用能够快速、安全、可靠地交付给内部员工和外部服务群。动工作人员、分公司、合作伙伴、产品供应商、客户间的连接,提高与分公司、客户、供应商和合作伙伴开展业务的能力。该虚拟专用网络(Virtual Private Network,VPN)即是指在公众网络上所建立的企业网络,并且此企业网络拥有与专用网络相同的安全、管理及功能等特点,利用互联网公网资源作为企业专网的延续。通过虚拟专用网络可以帮助远程用户、公司分支机构、商业伙伴及供应商同公司的内部网建立可信的安全连接,并保证数据的安全传输。
目前在为用户提供网络加速服务时,用户访问流量通过域名解析服务器或为用户提供接入设备把用户访问流量引入到加速网络。不管是采用通过域名解析服务器的方式或采用为用户提供接入设备的方式,加速网络都需要明确用户最终访问目标地址和对应端口。在现有技术的加速网络中,每上线一个用户,加速网络的接入节点都要为用户配置加速网络中的策略信息,网络传输过程较为繁琐。
现有技术的传输优化中,基于TCP传输控制协议的加速优化方法和体系有很多,如何充分利用TCP传输控制的可加速优化的特点,无需频繁配置策略信息即可提高加速网络的传输速度和质量成为业界亟待解决的问题。
因此,现有的加速网络传输技术还有待于改进。
发明内容
本申请提供一种加速网络传输优化方法以及系统,加速接入节点根据数据报文的类型选择性进行报文封装,以保证加速网络的中间节点传输的数据报文可以进行加速优化传输,形成多用户多协议透明转发机制,并且在加速网络搭建初始配置以后在工作过程中无需再做配置,自动识别用户访问源站。
第一方面,本申请实施例提供了一种加速网络传输优化方法,包括以下步骤:
加速接入节点接收数据报文,并获取数据报文的源站地址和端口;
该加速接入节点判断该数据报文类型;
当该数据报文为TCP报文时,加速网络的中间节点优化传输该TCP报文至加速出口节点,该加速出口节点根据该源站地址和端口基于TCP传输协议与源站通信;
当该数据报文为UDP报文时,该加速接入节点封装该UDP报文为可认证的TCP报文,加速网络的中间节点优化传输该可认证的TCP报文至加速出口节点,该加速出口节点解析该可认证的TCP报文为该UDP报文,该加速出口节点再根据该源站地址和端口基于UDP传输协议与源站通信。
第二方面,本申请实施例提供了一种加速网络传输优化系统,包括加速接入节点、若干中间节点以及加速出口节点,终端通过该加速接入节点接入加速网络,并通过该加速出口节点与源站数据通信,该加速接入节点包括判断模块以及封装模块,该加速出口节点包括解析模块,该加速接入节点接收数据报文,并获取数据报文的源站地址和端口;该判断模块用于判断该数据报文类型;当该数据报文为TCP报文时,加速网络的中间节点优化传输该TCP报文至加速出口节点,该加速出口节点根据该源站地址和端口基于TCP传输协议与源站通信;当该数据报文为UDP报文时,该封装模块用于封装该UDP报文为可认证的TCP报文,加速网络的中间节点优化传输该可认证的TCP报文至加速出口节点,该加速出口节点的解析模块用于解析该可认证的TCP报文为该UDP报文,该加速出口节点再根据该源站地址和端口基于UDP传输协议与源站通信。
第三方面,本申请实施例还提供了一种服务器集群,包括加速接入节点以及加速出口节点,终端通过加速接入节点接入加速网络,并通过加速出口节点与源站数据通信,其中,
该加速接入节点以及加速出口节点均包括至少一个处理器;以及,
与该至少一个处理器通信连接的存储器以及通信组件;其中,
该存储器存储有可被该至少一个处理器执行的指令,该指令被该至少一个处理器执行时,通过通信组件建立数据通道,以使该至少一个处理器能够执行如上所述的方法。
第四方面,本申请实施例还提供了一种非易失性计算机可读存储介质,所述计算机可读存储介质存储有计算机可执行指令,所述计算机可执行指令用于使计算机执行如上所述的方法。
第五方面,本申请实施例还提供了一种计算机程序产品,所述计算机程序产品包括存储在非易失性计算机可读存储介质上的计算机程序,所述计算机程序包括程序指令,当所述程序指令被计算机执行时,使所述计算机执行如上所述的方法。
本申请的有益效果在于,本申请实施例提供的加速网络传输优化方法以及系统,加速接入节点根据数据报文的类型选择性进行报文封装,以实现整个加速网络中均以TCP传输协议进行加速传输,加速接入节点实现UDP转TCP数据报文的封装,在传输过程中实现UDP数据报文以TCP传输协议进行传输,加速出口节点实现TCP转UDP的数据报文解析,以保证加速网络的中间节点传输的数据报文都可以采取基于TCP传输协议的加速优化措施,形成多用户多协议透明转发机制,提高传输质量和速度。同时,本申请实施例提供的加速网络传输优化方法以及系统省去了链路中的配置步骤,在加速网络搭建初始配置以后工作过程中无需再进行配置即可自动识别用户访问源站完成数据传输。
附图说明
一个或多个实施例通过与之对应的附图中的图片进行示例性说明,这些示例性说明并不构成对实施例的限定,附图中具有相同参考数字标号的元件表示为类似的元件,除非有特别申明,附图中的图不构成比例限制。
图1是本申请实施例提供的加速网络传输优化系统的系统架构图;
图2是本申请实施例提供的加速网络传输优化系统的系统模块图;
图3是本申请实施例提供的加速网络传输优化系统的扩展Socks5协议的请求格式示意图;
图4是本申请实施例提供的加速网络传输优化系统的扩展Socks5协议的响应格式示意图;
图5是本申请实施例提供的加速网络传输优化方法的加速入口节点处理流程图;
图6是本申请实施例提供的加速网络传输优化方法的加速出口节点处理流程图;
图7是本申请实施例提供的为实现加速网络传输优化方法的硬件框架图;以及
图8是本申请实施例提供的加速网络传输优化系统的应用示例图。
具体实施方式
为了使本申请的目的、技术方案及优点更加清楚明白,以下结合附图及实施例,对本申请进行进一步详细说明。应当理解,此处所描述的具体实施例仅用以解释本申请,并不用于限定本申请。
请参考图1,本申请实施例提供的加速网络传输优化系统包括用户请求端10、加速网络A以及源站70。加速网络A可以是应用交付网络,也可以是虚拟专用网络或者其它需要专用加速网络支持的组网形式比如内容分发网络。
该加速网络A由若干服务节点组网而成,根据完成网络传输优化所起作用来区分,该加速网络A包括加速接入节点20、若干中间节点50以及加速出口节点60。凡是接收用户发送的数据报文的节点可理解为加速接入节点20,加速网络A的中间节点,凡是与源站70通信的节点可理解为加速出口节点60。
本实施例加速网络传输优化方法和系统中,加速接入节点20根据收到的数据报文的类型选择性地进行报文封装以实现整个加速网络中均以TCP传输控制协议进行加速传输,同时加速出口节点60也根据反馈的数据报文的类型选择性地进行报文封装以实现整个加速网络中均以TCP传输协议加速反馈数据,从而保证加速网络的中间节点往来的数据报文都可以基于TCP传输协议加速传输,提高传输质量和速度。
在加速网络A之中,TCP报文的传输方式保持不变。对于UDP报文,加速接入节点实现UDP转TCP数据报文的封装,在传输过程中实现UDP数据报文以TCP传输控制协议进行传输,加速出口节点实现TCP转UDP的数据报文解析,以保 证整个加速网络A中均以TCP传输控制协议进行加速传输。其中,在加速网络A之外,数据报文的传输形式保持不变,TCP报文仍基于TCP传输协议进行传输,UDP报文仍基于UDP传输协议进行传输。
该TCP传输协议为TCP(Transmission Control Protocol,TCP)传输控制协议,提供的是面向连接、可靠的字节流服务。当客户和服务器彼此交换数据前,必须先在双方之间建立一个TCP连接,之后才能传输数据。TCP提供超时重发,丢弃重复数据,检验数据,流量控制等功能,保证数据能从一端传到另一端。
该UDP传输协议为UDP(User Datagram Protocol,UDP)用户数据协议,是一个面向数据的运输层协议。UDP不提供可靠性,它只是把应用程序传给的数据发送出去,但是并不能保证它们能到达目的地。由于UDP在传输数据报文前不用在客户和服务器之间建立一个连接,且没有超时重发等机制,故而传输速度很快。
本申请中,加速网络A以TCP传输协议进行加速优化传输。TCP加速优化传输是指通过一组优化技术,与标准TCP相比使TCP加速优化传输在通过网络传输数据的性能更高,同时不需要修改上层的具体应用。TCP加速优化传输技术包括TCP透明代理及TCP卸载引擎等。
实施例1
本实施例的加速网络传输优化系统,包括用户请求端10、加速网络A以及源站70。
请参考图2,该加速网络A包括加速接入节点20、若干中间节点50以及加速出口节点60。该终端10通过该加速接入节点20接入加速网络A,并通过加速网络A的加速出口节点60与源站70数据通信。
该加速接入节点20以及加速出口节点60是从其完成的功能加以区分的,实际上接收用户发送的数据报文的节点即可理解为加速接入节点20,在加速网络A中,凡是与源站70通信的节点即可理解为加速出口节点60。为了简化说明本实施例中,以该加速接入节点20以及加速出口节点60为例加以阐述。
该加速接入节点20包括重定向模块22、判断模块24、封装模块26、解析模块28以及通信模块29。该封装模块26连接扩展模块27。
该加速出口节点60包括判断模块64、封装模块66、解析模块68以及通信 模块69。该封装模块66连接扩展模块67。
该加速接入节点20接收用户请求端10发送的数据报文,并获取数据报文的源站地址和端口。加速接入节点20的判断模块24判断接收的数据报文的类型。
在数据请求过程中,当数据报文为TCP报文时,加速网络A的中间节点优化传输该TCP报文至加速出口节点60。该加速出口节点60的通信模块69根据在加速入口节点20获取的源站地址和端口基于TCP传输协议与源站70通信。
在数据请求过程中,当数据报文为UDP报文时,该加速入口节点20的封装模块26封装该UDP报文为可认证的TCP报文,并通过加速网络A优化传输该可认证的TCP报文至加速出口节点60。该加速出口节点的解析模块68解析该可认证的TCP报文为该UDP报文。该加速出口节点60的通信模块69再根据在加速入口节点20获取的源站地址和端口基于UDP传输协议与源站70通信。
在数据响应过程中,该加速出口节点60获取源站70返回的数据报文。该加速出口节点60的判断模块64分析判断该数据报文的类型。
在数据响应过程中,当该数据报文为TCP报文时,加速网络A的中间节点优化传输该TCP报文至加速入口节点20,该加速入口节点20与用户请求端10基于TCP传输协议发送该源站70反馈的数据报文。
在数据响应过程中,当该数据报文为UDP报文时,该加速出口节点60的封装模块66封装该UDP报文为可认证的TCP报文,加速网络A的中间节点优化传输该可认证的TCP报文至加速入口节点20,该加速入口节点20的解析模块28解析该可认证的TCP报文为该UDP报文,该加速入口节点20通过通信模块29与用户请求端10基于UDP传输协议发送该源站70反馈的数据报文。
其中,该加速接入节点20以及加速出口节点60的封装模块采用Socks5协议封装该UDP报文为可认证的TCP报文。
该Socks5协议可实现认证式数据传输。当基于TCP传输协议的该加速接入节点20希望和目标节点建立连接时,只有在适当的SOCKS端口打开一个TCP连结端口穿过防火墙才能安全到达。Socks5服务按常例来说定位于TCP端口1080。如果连接请求成功,目标节点为即将使用的认证方式进行协商,并对所选的认证方式进行认证,然后发送一个转发请求。Socks5对转发请求进行评估,并且决定是否建立所请求转发的连接。
本申请实施例中,为了简单快速地获取数据报文的源站地址和端口,该加速接入节点20将收到的数据报文重定向至加速接入节点20的本地监听端口,以获取该数据报文访问的源站地址和端口。
该封装模块26还包括扩展模块27,该封装模块66还包括扩展模块67。该扩展模块27、67用于扩展该Socks5协议的请求格式,增加该数据报文类型标示信息。以下具体介绍该请求格式内容。
请参考图3,所示为扩展Socks5协议的请求格式示意图,其中,该RSV为Socks5协议请求格式的保留字段,该扩展模块27、67在该保留字段进行扩展内容,比如增加数据报文类型标示信息。在本实施例中,通过在保留字段写入内容,使得加速接入节点20或者加速出口节点60可以识别该数据报文是否为需解封装的数据报文。
具体实施时,设置RSV保留字段,基于该保留字段进行扩展。
当RSV保留字段的值为0x00:作为保留字段使用;
当RSV保留字段的值为0x01:表示UDP报文转TCP报文,其中,DST.ADDR和DST.PORT为源站70的UDP地址和端口。
请参考图4,所示为扩展Socks5协议的响应格式示意图。
其中,数据报文类型标示信息也可用于区分数据报文为请求报文或者为响应报文或者其它报文,具体实施时RSV保留字段介绍如下:如果发送请求RSV保留字段的值为0x01;如果响应请求RSV保留字段的值为0x01,其他情况时RSV保留字段的值为0x00。
ATYP为用于指明BND.ADDR域的类型;
BND.ADDR为CMD相关的地址信息;
BND.PORT为CMD相关的端口信息,big-endian序的2字节数据。
该加速网络A采用透明转发机制。该透明转发机制不改变源和目的IP地址、端口等信息,保证流控设备上针对各个IP地址的流控策略依然生效。该透明转发机制是指在传输过程中,传输网络透明,不管传输的业务如何,透明传输网络只负责将需要传送的业务传送到目的节点,同时保证传输的质量即可,而不对传输的业务进行处理。
实施例2
请参考图5,本实施例涉及加速网络传输优化方法,在数据请求过程中,包括以下步骤:
步骤101:加速接入节点接收数据报文;
步骤102:获取数据报文的源站地址和端口,本实施例中,为了简单快速地获取数据报文的源站地址和端口,该加速接入节点20将收到的数据报文重定向至加速接入节点20的本地监听端口,以获取该数据报文访问的源站地址和端口;
步骤103:判断该数据报文类型;
步骤105:当该数据报文为TCP报文时,加速网络的中间节点优化传输该TCP报文至加速出口节点60;
步骤106:该加速出口节点60根据该源站地址和端口基于TCP传输协议与源站70通信;
步骤107:当该数据报文为UDP报文时,封装该UDP报文为可认证的TCP报文;
步骤108:加速网络的中间节点优化传输该可认证的TCP报文至加速出口节点60;
步骤109:该加速出口节点60解析该可认证的TCP报文为该UDP报文;
步骤110:该加速出口节点60再根据该源站地址和端口基于UDP传输协议与源站70通信。
请参考图6,本实施例的加速网络传输优化方法,在数据响应过程中,还包括以下步骤:
步骤201:该加速出口节点60获取源站返回的数据报文;
步骤202:该加速出口节点60判断返回的数据报文类型;
步骤205:当该数据报文为TCP报文时,加速网络的中间节点优化传输该TCP报文至加速入口节点20;
步骤206:该加速入口节点20与用户基于TCP传输协议发送该源站70反馈的数据报文;
步骤207:当该数据报文为UDP报文时,该加速出口节点60封装该UDP报文为可认证的TCP报文;
步骤208:加速网络的中间节点优化传输该可认证的TCP报文至加速入口节点20;
步骤209:该加速入口节点20解析该可认证的TCP报文为该UDP报文;
步骤210:该加速入口节点20再与用户基于UDP传输协议发送该源站70反馈的数据报文。
本实施例的加速网络传输优化方法,该封装该UDP报文为可认证的TCP报文的步骤采用Socks5协议封装。
本实施例的加速网络传输优化方法,将该数据报文重定向至该加速接入节点20的本地监听端口,以获取该数据报文访问的源站地址和端口。
本实施例的加速网络传输优化方法还包括扩展该Socks5协议的请求格式,增加该数据报文类型标示信息。
请参考图8以下举例介绍该多用户多协议的加速网络传输优化方法。
加速接入节点20和加速出口节点60采用透明转发机制,加速接入节点20监听TCP端口为10000,UDP端口为10001。加速出口节点60监听TCP端口为20000。
两个不同企业10和12,企业10通过加速网络A访问各自的源站70,企业12通过加速网络A访问各自的源站72,企业10和12访问流量通过接入设备引流到加速网络A的加速接入节点20。
加速接入节点20把访问TCP报文重定向到10000端口,在10000端口,获取企业10的源站地址IP_A和端口,企业12源站IP_B和端口。按标准Socks5协议封装,发送到出口20000端口,从20000端口解析出IP_A和IP_B,加速出口节点60分别与企业10和企业12的源站70和源站72建立连接。企业10发送TCP报文包经过该加速接入节点20、加速出口节点60达到企业10的源站70,企业12发送TCP报文包经过该加速接入节点20、加速出口节点60达到企业12源站72。
其中,UDP报文重定向到10001端口,在10001端口,获取UDP报文访问源站的地址和端口。按标准Socks5协议或者扩展Socks5协议封装UDP报文,发送到加速出口节点60的20000端口。UDP报文在加速接入节点20和加速出口节点60之间,使用TCP传输协议传输,在加速出口节点60解析出源站70地址和端口,然后该加速出口节点60和源站70建立UDP连接。
由以上过程,企业10和企业12,通过加速网络A访问各自源站70和源站72。
本申请实施例提供的加速网络传输优化方法以及系统,加速接入节点和加速出口节点采用透明转发机制,通过重定向方式简单快捷获取用户访问源站的地址和端口,根据数据报文的类型选择性进行报文封装,报文封装采用可认证的封装方式,扩展Socks5数据格式,加速网络中UDP报文以TCP报文进行传输,从而保证加速网络的中间节点传输的数据报文可以进行加速优化传输,形成多用户多协议透明转发机制,实现数据高效高质量的传输。并且在加速网络搭建初始配置以后在工作过程中无需再做配置,自动识别用户访问源站。
实施例3
图7是本申请实施例提供的服务器集群中单个加速接入节点或者加速出口节点的设备600的硬件结构示意图,如图7所示,该设备600包括:
一个或多个处理器610、存储器620以及通信组件650,图7中以一个处理器610为例。该存储器620存储有可被该至少一个处理器610执行的指令,该指令被该至少一个处理器执行时,通过通信组件650建立数据通道,以使该至少一个处理器能够执行该加速网络传输优化方法。
处理器610、存储器620以及通信组件650可以通过总线或者其他方式连接,图7中以通过总线连接为例。
存储器620作为一种非易失性计算机可读存储介质,可用于存储非易失性软件程序、非易失性计算机可执行程序以及模块,如本申请实施例中的加速网络传输优化方法对应的程序指令/模块(例如,附图2加速接入节点20所示的重定向模块22、判断模块24、封装模块26以及解析模块28,加速出口节点所示的判断模块64、封装模块66、扩展模块67、解析模块68以及通信模块69)。处理器610通过运行存储在存储器620中的非易失性软件程序、指令以及模块,从而执行服务器的各种功能应用以及数据处理,即实现上述方法实施例中的加速网络传输优化方法。
存储器620可以包括存储程序区和存储数据区,其中,存储程序区可存储操作系统、至少一个功能所需要的应用程序;存储数据区可存储根据加速网络传输优化系统的使用所创建的数据等。此外,存储器620可以包括高速随机存取存储器,还可以包括非易失性存储器,例如至少一个磁盘存储器件、闪存器件、或其他非易失性固态存储器件。在一些实施例中,存储器620可选包括相 对于处理器610远程设置的存储器,这些远程存储器可以通过网络连接至机器人交互电子设备。上述网络的实例包括但不限于互联网、企业内部网、局域网、移动通信网及其组合。
所述一个或者多个模块存储在所述存储器620中,当被所述一个或者多个处理器610执行时,执行上述任意方法实施例中的加速网络传输优化方法,例如,执行以上描述的图5中的方法步骤101至步骤110,以及执行以上描述的图6中的方法步骤201至步骤210;实现附图2加速接入节点20所示的重定向模块22、判断模块24、封装模块26以及解析模块28,加速出口节点所示的判断模块64、封装模块66、扩展模块67、解析模块68以及通信模块69等的功能。
上述产品可执行本申请实施例所提供的方法,具备执行方法相应的功能模块和有益效果。未在本实施例中详尽描述的技术细节,可参见本申请实施例所提供的方法。
本申请实施例提供了一种非易失性计算机可读存储介质,所述计算机可读存储介质存储有计算机可执行指令,该计算机可执行指令被一个或多个处理器执行,例如,执行以上描述的图5中的方法步骤101至步骤110,以及执行以上描述的图6中的方法步骤201至步骤210;实现附图2加速接入节点20所示的重定向模块22、判断模块24、封装模块26以及解析模块28,加速出口节点所示的判断模块64、封装模块66、扩展模块67、解析模块68以及通信模块69等的功能等的功能。
以上所描述的装置实施例仅仅是示意性的,其中所述作为分离部件说明的单元可以是或者也可以不是物理上分开的,作为单元显示的部件可以是或者也可以不是物理单元,即可以位于一个地方,或者也可以分布到多个网络单元上。可以根据实际的需要选择其中的部分或者全部模块来实现本实施例方案的目的。
通过以上的实施方式的描述,本领域普通技术人员可以清楚地了解到各实施方式可借助软件加通用硬件平台的方式来实现,当然也可以通过硬件。本领域普通技术人员可以理解实现上述实施例方法中的全部或部分流程是可以通过计算机程序来指令相关的硬件来完成,所述的程序可存储于一计算机可读取存储介质中,该程序在执行时,可包括如上述各方法的实施例的流程。其中,所述的存储介质可为磁碟、光盘、只读存储记忆体(Read-Only Memory,ROM)或随 机存储记忆体(Random Access Memory,RAM)等。
最后应说明的是:以上实施例仅用以说明本申请的技术方案,而非对其限制;在本申请的思路下,以上实施例或者不同实施例中的技术特征之间也可以进行组合,步骤可以以任意顺序实现,并存在如上所述的本申请的不同方面的许多其它变化,为了简明,它们没有在细节中提供;尽管参照前述实施例对本申请进行了详细的说明,本领域的普通技术人员应当理解:其依然可以对前述各实施例所记载的技术方案进行修改,或者对其中部分技术特征进行等同替换;而这些修改或者替换,并不使相应技术方案的本质脱离本申请各实施例技术方案的范围。

Claims (15)

  1. 一种加速网络传输优化方法,其特征在于,包括以下步骤:
    加速接入节点接收数据报文,并获取数据报文的源站地址和端口;
    所述加速接入节点判断所述数据报文类型;
    当所述数据报文为TCP报文时,加速网络的中间节点优化传输所述TCP报文至加速出口节点,所述加速出口节点根据所述源站地址和端口基于TCP传输协议与源站通信;以及
    当所述数据报文为UDP报文时,所述加速接入节点封装所述UDP报文为可认证的TCP报文,加速网络的中间节点优化传输所述可认证的TCP报文至加速出口节点,所述加速出口节点解析所述可认证的TCP报文为所述UDP报文,所述加速出口节点再根据所述源站地址和端口基于UDP传输协议与源站通信。
  2. 根据权利要求1所述的加速网络传输优化方法,其特征在于,还包括:
    所述加速出口节点获取源站返回的数据报文,判断返回的数据报文类型;
    当所述数据报文为TCP报文时,加速网络的中间节点优化传输所述TCP报文至加速入口节点,所述加速入口节点与用户基于TCP传输协议发送所述源站反馈的数据报文;以及
    当所述数据报文为UDP报文时,所述加速出口节点封装所述UDP报文为可认证的TCP报文,加速网络的中间节点优化传输所述可认证的TCP报文至加速入口节点,所述加速入口节点解析所述可认证的TCP报文为所述UDP报文,所述加速入口节点再与用户基于UDP传输协议发送所述源站反馈的数据报文。
  3. 根据权利要求2所述的加速网络传输优化方法,其特征在于,所述加速接入节点封装所述UDP报文为可认证的TCP报文的步骤包括采用Socks5协议封装所述UDP报文为可认证的TCP报文。
  4. 根据权利要求1所述的加速网络传输优化方法,其特征在于,所述获取数据报文的源站地址和端口的步骤包括:
    将所述数据报文重定向至所述加速接入节点的本地监听端口,以获取所述数据报文访问的源站地址和端口。
  5. 根据权利要求3所述的加速网络传输优化方法,其特征在于,还包括:
    扩展所述Socks5协议的请求格式,增加所述数据报文类型标示信息。
  6. 根据权利要求1-5任一项所述的加速网络传输优化方法,其特征在于, 所述加速网络采用透明转发机制。
  7. 一种加速网络传输优化系统,包括加速接入节点、若干中间节点以及加速出口节点,终端通过所述加速接入节点接入加速网络,并通过所述加速出口节点与源站数据通信,其特征在于,所述加速接入节点包括判断模块以及封装模块,所述加速出口节点包括解析模块,
    所述加速接入节点接收数据报文,并获取数据报文的源站地址和端口;
    所述判断模块用于判断所述数据报文类型;
    当所述数据报文为TCP报文时,加速网络的中间节点优化传输所述TCP报文至加速出口节点,所述加速出口节点根据所述源站地址和端口基于TCP传输协议与源站通信;
    当所述数据报文为UDP报文时,所述封装模块用于封装所述UDP报文为可认证的TCP报文,加速网络的中间节点优化传输所述可认证的TCP报文至加速出口节点,所述加速出口节点的解析模块用于解析所述可认证的TCP报文为UDP报文,所述加速出口节点再根据所述源站地址和端口基于UDP传输协议与源站通信。
  8. 根据权利要求7所述的加速网络传输优化系统,其特征在于,还包括:
    所述加速出口节点还用于获取源站返回的数据报文,所述加速出口节点还包括用于判断数据报文类型的判断模块以及封装模块,所述加速入口节点还包括解析模块;
    当所述数据报文为TCP报文时,加速网络的中间节点优化传输所述TCP报文至加速入口节点,所述加速入口节点与用户基于TCP传输协议发送所述源站反馈的数据报文;以及
    当所述数据报文为UDP报文时,所述加速出口节点的封装模块用于封装所述UDP报文为可认证的TCP报文,加速网络的中间节点优化传输所述可认证的TCP报文至加速入口节点,所述加速入口节点的解析模块用于解析所述可认证的TCP报文为UDP报文,所述加速入口节点再与用户基于UDP传输协议发送所述源站反馈的数据报文。
  9. 根据权利要求8所述的加速网络传输优化系统,其特征在于,所述封装模块采用Socks5协议封装所述UDP报文为可认证的TCP报文。
  10. 根据权利要求7所述的加速网络传输优化系统,其特征在于,所述加速 接入节点还包括重定向模块,所述重定向模块用于将所述数据报文重定向至所述加速接入节点的本地监听端口,以获取所述数据报文访问的源站地址和端口。
  11. 根据权利要求9所述的加速网络传输优化系统,其特征在于,所述封装模块还包括扩展模块,所述扩展模块用于扩展所述Socks5协议的请求格式,增加所述数据报文类型标示信息。
  12. 根据权利要求7-11任一项所述的加速网络传输优化系统,其特征在于,所述加速网络采用透明转发机制。
  13. 一种服务器集群,包括加速接入节点以及加速出口节点,终端通过所述加速接入节点接入加速网络,并通过所述加速出口节点与源站数据通信,其中,
    所述加速接入节点以及加速出口节点均包括至少一个处理器;以及,
    与所述至少一个处理器通信连接的存储器以及通信组件;其中,
    所述存储器存储有可被所述至少一个处理器执行的指令,所述指令被所述至少一个处理器执行时,通过通信组件建立数据通道,以使所述至少一个处理器能够执行权利要求1-6任一项所述的方法。
  14. 一种非易失性计算机可读存储介质,其中,所述计算机可读存储介质存储有计算机可执行指令,所述计算机可执行指令用于使计算机执行权利要求1-6任一项所述的方法。
  15. 一种计算机程序产品,其特征在于,所述计算机程序产品包括存储在非易失性计算机可读存储介质上的计算机程序,所述计算机程序包括程序指令,当所述程序指令被计算机执行时,使所述计算机执行权利要求1-6任一项所述的方法。
PCT/CN2017/100307 2017-09-04 2017-09-04 一种加速网络传输优化方法以及系统 WO2019041332A1 (zh)

Priority Applications (2)

Application Number Priority Date Filing Date Title
PCT/CN2017/100307 WO2019041332A1 (zh) 2017-09-04 2017-09-04 一种加速网络传输优化方法以及系统
CN201780002596.0A CN108064441B (zh) 2017-09-04 2017-09-04 一种加速网络传输优化方法以及系统

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
PCT/CN2017/100307 WO2019041332A1 (zh) 2017-09-04 2017-09-04 一种加速网络传输优化方法以及系统

Publications (1)

Publication Number Publication Date
WO2019041332A1 true WO2019041332A1 (zh) 2019-03-07

Family

ID=62142066

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2017/100307 WO2019041332A1 (zh) 2017-09-04 2017-09-04 一种加速网络传输优化方法以及系统

Country Status (2)

Country Link
CN (1) CN108064441B (zh)
WO (1) WO2019041332A1 (zh)

Cited By (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN114584582A (zh) * 2022-02-24 2022-06-03 中汽创智科技有限公司 一种车内报文处理方法、装置、车载终端及存储介质

Families Citing this family (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN111614792B (zh) * 2020-03-31 2023-04-18 视联动力信息技术股份有限公司 透传方法、系统、服务器、电子设备及存储介质
CN112615738B (zh) * 2020-12-09 2023-02-28 四川迅游网络科技股份有限公司 一种基于流量特征的网络加速方法

Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20120317211A1 (en) * 2011-06-08 2012-12-13 Institute For Information Industry Message conversion apparatus, message transmission system, message transmission method and computer program product thereof
CN104967613A (zh) * 2015-05-27 2015-10-07 王春 一种移动网络环境下数据传输的系统和方法
CN105554065A (zh) * 2015-12-03 2016-05-04 华为技术有限公司 处理报文的方法、转换单元和应用单元
CN105991712A (zh) * 2015-02-12 2016-10-05 林琳 一种网络加速装置
CN107360205A (zh) * 2016-05-09 2017-11-17 阿里巴巴集团控股有限公司 数据报文的传输方法及装置、系统

Family Cites Families (9)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20030097481A1 (en) * 2001-03-01 2003-05-22 Richter Roger K. Method and system for performing packet integrity operations using a data movement engine
US20030212735A1 (en) * 2002-05-13 2003-11-13 Nvidia Corporation Method and apparatus for providing an integrated network of processors
US7188250B1 (en) * 2002-12-13 2007-03-06 Nvidia Corporation Method and apparatus for performing network processing functions
CN101222443B (zh) * 2008-01-30 2012-04-25 杭州华三通信技术有限公司 一种处理报文的方法和网络设备
CN102244645A (zh) * 2010-05-14 2011-11-16 北京快网科技有限公司 一种基于udp协议的可靠,透明,通用加速网关系统
CN104618237B (zh) * 2015-01-21 2017-12-12 网宿科技股份有限公司 一种基于tcp/udp的广域网加速系统及方法
CN105227896B (zh) * 2015-08-27 2020-10-16 北京华夏创新科技有限公司 一种在透明模式下视频会议优化技术方法和系统
CN105721491B (zh) * 2016-03-22 2018-10-26 同济大学 一种用于面向高速磁浮交通仿真的通信方法
CN105847363A (zh) * 2016-03-28 2016-08-10 乐视控股(北京)有限公司 进行跨区域的文件分享的方法及系统

Patent Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20120317211A1 (en) * 2011-06-08 2012-12-13 Institute For Information Industry Message conversion apparatus, message transmission system, message transmission method and computer program product thereof
CN105991712A (zh) * 2015-02-12 2016-10-05 林琳 一种网络加速装置
CN104967613A (zh) * 2015-05-27 2015-10-07 王春 一种移动网络环境下数据传输的系统和方法
CN105554065A (zh) * 2015-12-03 2016-05-04 华为技术有限公司 处理报文的方法、转换单元和应用单元
CN107360205A (zh) * 2016-05-09 2017-11-17 阿里巴巴集团控股有限公司 数据报文的传输方法及装置、系统

Cited By (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN114584582A (zh) * 2022-02-24 2022-06-03 中汽创智科技有限公司 一种车内报文处理方法、装置、车载终端及存储介质
CN114584582B (zh) * 2022-02-24 2024-03-08 中汽创智科技有限公司 一种车内报文处理方法、装置、车载终端及存储介质

Also Published As

Publication number Publication date
CN108064441A (zh) 2018-05-22
CN108064441B (zh) 2021-08-13

Similar Documents

Publication Publication Date Title
US10122574B2 (en) Methods and apparatus for a common control protocol for wired and wireless nodes
US10085253B2 (en) Methods and apparatus for controlling wireless access points
US8825829B2 (en) Routing and service performance management in an application acceleration environment
US10057167B2 (en) Identifying end-stations on private networks
US7653075B2 (en) Processing communication flows in asymmetrically routed networks
US10050870B2 (en) Handling multipath flows in service function chaining
WO2021073565A1 (zh) 业务服务提供方法及系统
WO2013086869A1 (zh) 一种互联方法、装置和系统
CN110290093A (zh) Sd-wan网络架构及组网方法、报文转发方法
WO2017185719A1 (zh) 一种udp协议加速方法和系统
WO2021073555A1 (zh) 业务服务提供方法及系统、远端加速网关
US11902047B2 (en) Virtual intranet acceleration method and system, configuration method, storage medium, and computer apparatus
US20150373135A1 (en) Wide area network optimization
CN111865940B (zh) 一种传输优化的方法及装置
WO2019041332A1 (zh) 一种加速网络传输优化方法以及系统
CN108989342B (zh) 一种数据传输的方法及装置
US20120300776A1 (en) Method for creating virtual link, communication network element, and ethernet network system
CN104168302B (zh) 设备操控实现方法、系统和代理网关
WO2019196853A1 (zh) Tcp加速方法及装置
WO2016074354A1 (zh) 共享wifi的方法及系统、家庭网关和无线局域网关
US11968237B2 (en) IPsec load balancing in a session-aware load balanced cluster (SLBC) network device
CN112910791B (zh) 导流系统及其方法
WO2022142905A1 (zh) 报文转发的方法、装置和网络系统
US20240007435A1 (en) Chassis system management through data paths
WO2024027419A1 (zh) 报文发送方法、装置及系统

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 17923609

Country of ref document: EP

Kind code of ref document: A1

NENP Non-entry into the national phase

Ref country code: DE

32PN Ep: public notification in the ep bulletin as address of the adressee cannot be established

Free format text: NOTING OF LOSS OF RIGHTS PURSUANT TO RULE 112(1) EPC (EPO FORM 1205A DATED 07.09.2020)

122 Ep: pct application non-entry in european phase

Ref document number: 17923609

Country of ref document: EP

Kind code of ref document: A1