WO2021063147A1 - 异构网络的报文转发方法及装置 - Google Patents

异构网络的报文转发方法及装置 Download PDF

Info

Publication number
WO2021063147A1
WO2021063147A1 PCT/CN2020/112864 CN2020112864W WO2021063147A1 WO 2021063147 A1 WO2021063147 A1 WO 2021063147A1 CN 2020112864 W CN2020112864 W CN 2020112864W WO 2021063147 A1 WO2021063147 A1 WO 2021063147A1
Authority
WO
WIPO (PCT)
Prior art keywords
client
server
forwarding
message
response message
Prior art date
Application number
PCT/CN2020/112864
Other languages
English (en)
French (fr)
Inventor
金浩
屠要峰
郭斌
韩银俊
许军宁
Original Assignee
中兴通讯股份有限公司
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by 中兴通讯股份有限公司 filed Critical 中兴通讯股份有限公司
Priority to EP20871853.6A priority Critical patent/EP3979594A4/en
Publication of WO2021063147A1 publication Critical patent/WO2021063147A1/zh

Links

Images

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L67/00—Network arrangements or protocols for supporting network services or applications
    • H04L67/14—Session management
    • H04L67/141—Setup of application sessions
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L1/00—Arrangements for detecting or preventing errors in the information received
    • H04L1/12—Arrangements for detecting or preventing errors in the information received by using return channel
    • H04L1/16—Arrangements for detecting or preventing errors in the information received by using return channel in which the return channel carries supervisory signals, e.g. repetition request signals
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L67/00—Network arrangements or protocols for supporting network services or applications
    • H04L67/50—Network services
    • H04L67/56—Provisioning of proxy services
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L67/00—Network arrangements or protocols for supporting network services or applications
    • H04L67/50—Network services
    • H04L67/56—Provisioning of proxy services
    • H04L67/568—Storing data temporarily at an intermediate stage, e.g. caching
    • H04L67/5681—Pre-fetching or pre-delivering data based on network characteristics
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L67/00—Network arrangements or protocols for supporting network services or applications
    • H04L67/50—Network services
    • H04L67/56—Provisioning of proxy services
    • H04L67/568—Storing data temporarily at an intermediate stage, e.g. caching
    • H04L67/5682—Policies or rules for updating, deleting or replacing the stored data
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L69/00—Network arrangements, protocols or services independent of the application payload and not provided for in the other groups of this subclass
    • H04L69/16—Implementation or adaptation of Internet protocol [IP], of transmission control protocol [TCP] or of user datagram protocol [UDP]
    • H04L69/161—Implementation details of TCP/IP or UDP/IP stack architecture; Specification of modified or new header fields
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L69/00—Network arrangements, protocols or services independent of the application payload and not provided for in the other groups of this subclass
    • H04L69/16—Implementation or adaptation of Internet protocol [IP], of transmission control protocol [TCP] or of user datagram protocol [UDP]
    • H04L69/163—In-band adaptation of TCP data exchange; In-band control procedures
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L69/00—Network arrangements, protocols or services independent of the application payload and not provided for in the other groups of this subclass
    • H04L69/30—Definitions, standards or architectural aspects of layered protocol stacks
    • H04L69/32—Architecture of open systems interconnection [OSI] 7-layer type protocol stacks, e.g. the interfaces between the data link level and the physical level
    • H04L69/322—Intralayer communication protocols among peer entities or protocol data unit [PDU] definitions
    • H04L69/326—Intralayer communication protocols among peer entities or protocol data unit [PDU] definitions in the transport layer [OSI layer 4]
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/02—Network architectures or network communication protocols for network security for separating internal from external traffic, e.g. firewalls
    • H04L63/0272—Virtual private networks
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/02—Network architectures or network communication protocols for network security for separating internal from external traffic, e.g. firewalls
    • H04L63/0281—Proxies
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/14—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic
    • H04L63/1441—Countermeasures against malicious traffic
    • H04L63/1466—Active attacks involving interception, injection, modification, spoofing of data unit addresses, e.g. hijacking, packet injection or TCP sequence number attacks
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L67/00—Network arrangements or protocols for supporting network services or applications
    • H04L67/01—Protocols
    • H04L67/02—Protocols based on web technology, e.g. hypertext transfer protocol [HTTP]

Definitions

  • the present disclosure relates to the field of communication technology, and in particular, to a method and device for forwarding messages in a heterogeneous network.
  • the network server side network is very stable and supports high concurrency and large throughput user requests.
  • the wireless mobile network has its specific transmission characteristics, such as out-of-sequence packet forwarding, inability to accurately and timely determine packet loss, and resource shortage during busy hours.
  • out-of-sequence packet forwarding inability to accurately and timely determine packet loss, and resource shortage during busy hours.
  • the Internet access rate of users will appear. The abrupt change has affected the online experience of mobile users.
  • the traditional proxy technology is mainly based on forward proxy and reverse proxy technology.
  • the proxy service and the two ends of the communication establish TCP connections respectively. That is, the proxy service needs to establish a TCP connection with the visiting client and establish a TCP connection with the server.
  • the session layer performs interactive forwarding of data.
  • the forward proxy is opaque to the client, and the reverse proxy technology is opaque to the server.
  • the technical problem to be solved in the present disclosure is to realize the transparent proxy service between the client and the server, and to solve the problem of multiple copies between the kernel state and the user state of the data in the proxy service, which affects the forwarding performance.
  • the present disclosure provides a A method and device for message forwarding in a heterogeneous network.
  • the method includes: receiving a link establishment request sent by a client and forwarding the link establishment request to a server to establish a connection between the client and the server; Based on the user mode protocol stack, the interactive message is forwarded between the client and the server.
  • the message forwarding method of the heterogeneous network by completing the message forwarding at the transport layer, it is possible to prevent the message from being copied multiple times in the user state and the kernel state during the forwarding process, which causes the performance bottleneck of the proxy service.
  • the problem is that zero-copy forwarding of messages based on the user mode protocol stack is realized, which effectively improves system performance.
  • the message forwarding method of the present disclosure does not need to forge a man-in-the-middle, there is no risk of a man-in-the-middle attack, supports encrypted transmission such as TLS, and improves the security and reliability of message forwarding.
  • the establishing a connection between the client and the server includes: receiving a link establishment request sent by the client and forwarding it to the server, so that the server sends the link establishment request to the server based on the link establishment request.
  • the client responds to a first response message; receives the first response message and forwards it to the client, so that the client responds to the server with a second response message based on the first response message; receives the And forward the second response message to the server to establish a connection between the client and the server.
  • the receiving and forwarding the link establishment request sent by the client to the server includes: receiving the link establishment request sent by the client according to a preset default route; The link establishment request creates a session, and the address of the link establishment request is updated and then forwarded to the server.
  • the message content of the conversation includes: a link sequence number and a window size.
  • the forwarding of the interaction message between the client and the server based on the user mode protocol stack includes: receiving a request message sent by the client, and sending the message to all users based on the request message.
  • the client responds to the first response message; adds the request message to the first buffer queue and forwards it to the server, so that the server responds to the second response message based on the request message; receives the A second response message, and sending an acknowledgement message to the server based on the second response message; adding the second response message to a second buffer queue and sending it to the client.
  • the method further includes: when the data capacity of the second response message in the second buffer queue is greater than a threshold, reducing the size of the request message sent to the server Window to reduce the message sending rate of the server.
  • the method further includes: when the client does not receive the second response message within a predetermined time, re-adding the second response message to the The second buffer queue is sent to the client.
  • the method further includes: adjusting the window size of the message to a preset threshold when packet loss is detected in the process of message interaction.
  • the forwarding module is configured to forward link establishment request and response messages between the client and the server, establish a connection between the client and the server, and forward interactive messages between the client and the server based on the user mode protocol stack.
  • the forwarding module completes the forwarding of the message at the transport layer, which can prevent the message from being copied multiple times in the user state and the kernel state during the forwarding process, which may cause the proxy service performance bottleneck
  • the problem of zero-copy message forwarding based on the user mode protocol stack is realized, which effectively improves the system performance.
  • the message forwarding device of the present disclosure does not need to forge a man-in-the-middle, there is no risk of a man-in-the-middle attack, supports encrypted transmission such as TLS, and improves the security and reliability of message forwarding.
  • a program for implementing information transmission is stored on the computer-readable storage medium, and when the program is executed by a processor, the method for forwarding messages in a heterogeneous network described above is implemented. step.
  • the forwarding of the packet can be completed at the transmission layer of the proxy node, and the packet can be prevented from being in the user state and the kernel state during the forwarding process.
  • the problem of proxy service performance bottleneck caused by multiple copies realizes zero-copy forwarding of messages based on the user-mode protocol stack, and effectively improves system performance.
  • the message forwarding method of the present disclosure does not need to forge a man-in-the-middle, there is no risk of a man-in-the-middle attack, supports encrypted transmission such as TLS, and improves the security and reliability of message forwarding.
  • the proxy node device includes: a memory, a processor, and a computer program stored on the memory and capable of running on the processor.
  • the computer program is executed by the processor, the implementation is as described above.
  • the forwarding of the message can be completed at the transmission layer of the proxy node device, thereby avoiding that the message is copied multiple times in the user state and the kernel state during the forwarding process, which causes the performance bottleneck of the proxy service. problem.
  • Figure 1 is a schematic diagram of agency services in related technologies
  • FIG. 2 is a schematic diagram of a method for forwarding packets in a heterogeneous network according to an embodiment of the present disclosure
  • FIG. 3 is a schematic diagram of a packet forwarding method in a heterogeneous network according to an embodiment of the present disclosure
  • FIG. 4 is a flowchart of a method for forwarding packets in a heterogeneous network according to an embodiment of the present disclosure
  • Fig. 5 is a flowchart of establishing a connection between a client and a server according to an embodiment of the present disclosure
  • Fig. 6 is a flowchart of a method for message interaction in a heterogeneous network according to an embodiment of the present disclosure.
  • the proxy service between client A and server B is a pseudo-transparent technology, such as haproxy.
  • the proxy process is:
  • Client A initiates a link establishment request to server B, and proxy server P intercepts the link establishment request and pretends to be that server B completes a three-way handshake with client A;
  • the proxy server P pretends to establish a link between the client A and the server B, and initiates the request;
  • the server B response message is sent to the proxy server P, and the proxy service process receives the response message and finds the client A link; the proxy server P finds the corresponding link and pretends to be the server B and sends the response message to the client A.
  • the proxy server P is transparent to both client A and server B, but it still needs to establish a chain with client A and server B respectively.
  • TLS Transport Layer Security
  • Layer encryption Layer encryption
  • HTTPS HTTP security
  • other encrypted channels Secondly, the data stream needs to be received to the application layer and sent from the application layer to the destination node in the forwarding process.
  • the method for forwarding packets in a heterogeneous network includes:
  • S101 Receive the link establishment request sent by the client and forward the link establishment request to the server to establish a connection between the client and the server;
  • S102 Forward an interactive message between the client and the server based on the user mode protocol stack.
  • a proxy node is set between the client and the server, where the proxy node is set to forward interactive messages between the client and the server. Moreover, the proxy node in the present disclosure completes message forwarding through the transport layer. Therefore, the proxy node can implement transparent proxy services and realize message forwarding based on the user mode protocol stack.
  • the message forwarding method of the heterogeneous network by completing the message forwarding at the transport layer, it is possible to prevent the message from being copied multiple times in the user state and the kernel state during the forwarding process, which causes the performance bottleneck of the proxy service.
  • the problem is to realize zero-copy forwarding of messages based on the user mode protocol stack, which effectively improves system performance.
  • the message forwarding method of the present disclosure does not need to forge a man-in-the-middle, there is no risk of a man-in-the-middle attack, supports encrypted transmission such as TLS, and improves the security and reliability of message forwarding.
  • forwarding the link establishment request and response message between the client and the server includes:
  • S201 Receive a link establishment request sent by the client and forward it to the server, so that the server responds to the client with a first response message based on the link establishment request;
  • S202 Receive the first response message and forward it to the client, so that the client responds to the server with the second response message based on the first response message;
  • S203 Receive the second response message and forward the second response message to the server to establish a connection between the client and the server.
  • the "request for link establishment" mentioned here can be a SYN request
  • the "first response message” and "second response message” can be ACK messages.
  • the client can send a SYN request to the server via the proxy node.
  • the proxy node responds to the client with an ACK message.
  • the client sends an ACK message to the server via the proxy node.
  • receiving the link establishment request sent by the client and forwarding it to the server includes:
  • a session is created based on the link establishment request, and the address of the link establishment request is updated and forwarded to the server.
  • the message content of the conversation includes: a link sequence number and a window size.
  • a TCPO module is set between the transport layer and the network layer of the proxy node, which is responsible for the two-way forwarding of TCP messages. For example, when the client UE wants to establish a link with the WEB server SP, the client UE first initiates a SYN request to the WEB server.
  • the target port is 80, and the default route is configured to direct the SYN request to the intermediate proxy node.
  • the proxy node configures forwarding rules, sends the TCP message of the destination port 80 to the protocol stack, and the IP layer sends the message that needs to be processed to the TCPO module.
  • the TCPO module creates a session to record the serial number, window size and other information of the newly created TCP link.
  • the MAC address is updated according to the routing address and sent by the network card. For example, when the client sends a message to the server, the TCPO module updates the MAC of the client to the MAC of the proxy node according to the routing address and sends it to the server by the network card.
  • the source IP and port of the link establishment packet received by the server are from the client UE to send a SYN+ACK message to the client UE.
  • forwarding interactive messages between the client and the server based on the user mode protocol stack includes:
  • S401 Receive a request message sent by a client, and reply a first response message to the client based on the request message;
  • S402 Add the request message to the first buffer queue and forward it to the server, so that the server responds to the second response message based on the request message;
  • S403 Receive a second response message, and send an acknowledgement message to the server based on the second response message;
  • the client can send a request message to the server.
  • the preset default route directs the request message to the proxy node, and the TCPO module of the proxy node receives the request message, adds the request message to the buffer queue A to be forwarded to the server, and responds to the client with the ACKA message.
  • the TCPO module After receiving the second response message from the server, the TCPO module adds the second response message to queue B to forward it to the client, and responds to the server with an ACK message to confirm receipt of the data.
  • the method further includes: when the data capacity of the second response message in the second buffer queue is greater than the threshold, reducing the window of the request message sent to the server to reduce the message sending of the server rate.
  • the size of the notification window sent to the server can be reduced to notify the server to reduce the data sending speed.
  • the method further includes: when the client does not receive the second response message within a predetermined time, re-adding the second response message to the second buffer queue and sending it to the client.
  • the data in the buffer queue B is dequeued one by one in order, and the data message is forwarded to the client.
  • the proxy node receives the ACK message, it can immediately delete the corresponding message in the queue.
  • a retransmission timer can be set, and when the client does not receive a data message within a predetermined time, the response message can be retransmitted. As a result, the problem of packet loss is effectively avoided.
  • the method further includes: when packet loss is detected during the message interaction process, adjusting the window size of the message to a preset threshold.
  • a preset threshold may be the “slow start threshold”
  • the slow start threshold may be understood as the maximum value during the slow start during the message sending process.
  • the packet forwarding device of the heterogeneous network includes: a forwarding module, the forwarding module may be a TCPO module, and the forwarding module is set to forward and build a link between the client and the server Request and response messages establish a connection between the client and the server, and forward interactive messages between the client and the server based on the user mode protocol stack.
  • a forwarding module may be a TCPO module
  • the forwarding module is set to forward and build a link between the client and the server Request and response messages establish a connection between the client and the server, and forward interactive messages between the client and the server based on the user mode protocol stack.
  • the forwarding module completes the forwarding of the message at the transport layer, which can prevent the message from being copied multiple times in the user state and the kernel state during the forwarding process, which may cause the proxy service performance bottleneck
  • the problem of zero-copy message forwarding based on the user mode protocol stack is realized, which effectively improves the system performance.
  • the message forwarding device of the present disclosure does not need to forge a man-in-the-middle, there is no risk of a man-in-the-middle attack, supports encrypted transmission such as TLS, and improves the security and reliability of message forwarding.
  • a program for implementing information transmission is stored on the computer-readable storage medium, and when the program is executed by a processor, the steps of the method for forwarding messages in a heterogeneous network described above are implemented.
  • the forwarding of the packet can be completed at the transmission layer of the proxy node, and the packet can be prevented from being in the user state and the kernel state during the forwarding process.
  • the problem of proxy service performance bottleneck caused by multiple copies realizes zero-copy forwarding of messages based on the user-mode protocol stack, and effectively improves system performance.
  • the message forwarding method of the present disclosure does not need to forge a man-in-the-middle, there is no risk of a man-in-the-middle attack, supports encrypted transmission such as TLS, and improves the security and reliability of message forwarding.
  • the proxy node device includes: a memory, a processor, and a computer program stored in the memory and capable of running on the processor.
  • the computer program is executed by the processor, the report of the heterogeneous network as described above is realized. Steps of the text forwarding method.
  • the forwarding of the message can be completed at the transmission layer of the proxy node device, thereby avoiding that the message is copied multiple times in the user state and the kernel state during the forwarding process, which causes the performance bottleneck of the proxy service.
  • the problem is to realize zero-copy forwarding of messages based on the user mode protocol stack, which effectively improves system performance.
  • the message forwarding method of the present disclosure does not need to forge a man-in-the-middle, there is no risk of a man-in-the-middle attack, and supports encrypted transmission such as TLS, which improves the security and reliability of message forwarding.
  • DPDK Data Plane Development Kit
  • the DPDK transceiver framework is mainly used for network device message forwarding.
  • This disclosure uses DPDK as the message sending and receiving framework of the transparent proxy server, and uses the BSD (Berkeley Software Distribution Berkeley Software Distribution) TCP/IP open source protocol stack as the user mode protocol stack, and other user mode protocol stack frameworks can also be used.
  • a proxy node is embedded between the UE (User End) and the SP (service provider) server, based on DPDK + user-mode TCP/IP protocol stack to achieve transparent packet forwarding, and According to the characteristics of wireless network transmission, it optimizes and accelerates TCP warfare to improve the Internet experience of mobile users.
  • the specific process is as follows:
  • the client UE initiates a SYN request to the WEB server SP, the target port is 80, and configures the default route to direct the request to the intermediate proxy node;
  • the proxy node configures forwarding rules, forwards the TCP message of the destination port 80 to the protocol stack, and the IP layer sends the message that needs TCPO processing to the TCPO module;
  • TCPO creates a session to record the serial number, window size and other information of the newly created TCP link, and the MAC address is updated according to the routing address and sent by the network card;
  • the source IP and port of the link establishment packet received by the SP are from the client UE, and a SYN+ACK message is sent to the UE;
  • the proxy solution forwards the message from SP to TCPO, and TCPO forwards SYN+ACK to UE;
  • UE receives SYN+ACK, sends ACK message, SP receives ACK message, UE and SP complete the 3-way handshake;
  • the client UE sends a GET request to TCPO;
  • the TCPO module receives the data message, enters the buffer queue A, sends an ACK message to the UE, and forwards the request message to the SP;
  • the TCPO module receives the response packet sent by the SP, enters the buffer queue B, and sends an ACK to the SP to confirm the received data. If the UE side network causes a large backlog of data in queue B, reduce the size of the notification window sent to the SP , Notify SP to reduce the data sending speed;
  • Buffer queue B goes out of the queue one by one in order, forwards data messages to the client, sets a retransmission timer, retransmits the specified message after timeout, and deletes the message in the queue immediately after receiving the ACK;
  • UE actively disconnects, TCPO transparently transmits 4 waved messages, and disconnects with SP;
  • TCPO receives the SP's link disconnection request. If queue B still has a backlog of messages, TCPO pretends to be that the UE is disconnected from the SP, and the queue B will disconnect the UE after sending the data.
  • the UE initiates a request to be routed to the proxy server by default, and directly forwarded to the SP side network when passing through the TCPO module, the source and destination IP remain unchanged, and the L2 (Ethernet layer) address is filled in according to the actual route; the message sent by the SP to the UE is passed through TCPO
  • the proxy server uses TCP packets as the unit, and only forwards packets, and there is no unpacking and packet grouping operations. It does not involve message copying, reading and writing, and does not need to establish a link with UE or ISP. There is no risk of man-in-the-middle attacks. It supports encrypted transmission such as TLS.
  • the TCPO module of the transparent proxy node divides the TCP connection between the UE and the SP into two segments, and flexibly controls the size of the notification window. TCPO modifies the size of the notification window according to the length of the buffer queue to control the source data transmission rate . According to the transmission characteristics of the wireless network environment and the behavioral characteristics of mobile users, the TCPO module optimizes the forwarding performance of TCP packets through mechanisms such as caching and congestion control, reducing the phenomenon of Internet speed reduction caused by out-of-order packet loss in wireless transmission, and increasing 2G/3G /4G mobile users’ online experience.
  • Two-way data buffering after receiving the confirmation ACK, delete the data message from the buffer queue to realize data buffering.
  • the initial size of the congestion window is set to be the same as the slow start threshold, and the slow start phase is skipped and directly enters the congestion avoidance phase.
  • the proxy solution designed by the present disclosure embeds the TCPO module in the user-mode protocol stack TCP/IP protocol stack, which is responsible for the two-way forwarding of TCP messages, realizes a completely transparent proxy, adds TCP optimization logic, and improves the client network Experience.
  • This not only solves the performance bottleneck of traditional proxy servers, but also provides an open framework for TCP optimization, ensuring the stability and reliability of the native protocol stack, and facilitating business implementation of customized strategies.
  • modules or steps of the present invention can be implemented by a general computing device, and they can be concentrated on a single computing device or distributed in a network composed of multiple computing devices. Above, they can be implemented with program codes executable by a computing device, so that they can be stored in a storage device for execution by the computing device, and in some cases, they can be executed in a different order than shown here. Or the described steps, or fabricate them into individual integrated circuit modules respectively, or fabricate multiple modules or steps of them into a single integrated circuit module to achieve. In this way, the present invention is not limited to any specific combination of hardware and software.

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Computer Security & Cryptography (AREA)
  • Data Exchanges In Wide-Area Networks (AREA)
  • Computer And Data Communications (AREA)

Abstract

本公开提出了一种异构网络的报文转发方法及装置，方法包括：接收客户端发送的建链请求并将建链请求转发至服务器，以建立客户端与服务器之间的连接；基于用户态协议栈在客户端与服务器之间转发交互报文。根据本公开的异构网络的报文转发方法，通过在传输层完成报文的转发，可以避免报文在转发过程中在用户态和内核态被多次拷贝而造成代理服务性能瓶颈的问题，实现了基于用户态协议栈的报文零拷贝转发，有效提高了系统性能。而且，本公开的报文转发方法不需要伪造中间人，不存在中间人攻击的风险，支持TLS等加密传输，提高了报文转发的安全性和可靠性。

Description

异构网络的报文转发方法及装置 技术领域
本公开涉及通信技术领域，尤其涉及一种异构网络的报文转发方法及装置。
背景技术
网络服务器侧网络非常稳定，支持高并发、大吞吐量用户请求。而无线移动网络有其特定的传输特性，比如存在报文转发乱序、不能准确及时判断出丢包、忙时资源紧缺等特点，当出现上述情况时，就会导致用户访问Internet的上网速率出现陡变，影响了移动用户的上网体验。
传统代理技术主要基于正向代理和反向代理技术，代理服务与通信的两端分别建立TCP连接，即代理服务既要与访问客户端建立TCP连接，又要与服务端建立TCP连接，然后在会话层进行数据的交互转发。正向代理对客户端是不透明的，反向代理技术对服务端是不透明的。
发明内容
本公开要解决的技术问题是实现客户端与服务器之间的透明代理服务，并解决代理服务中数据存在内核态和用户态之间存在多次拷贝，影响转发性能的问题，本公开提供了一种异构网络的报文转发方法及装置。
根据本公开实施例的异构网络的报文转发方法，所述方法包括：接收客户端发送的建链请求并将所述建链请求转发至服务器，以建立客户端与服务器之间的连接；基于用户态协议栈在客户端与服务器之间转发交互报文。
根据本公开实施例的异构网络的报文转发方法，通过在传输层完成报文的转发，可以避免报文在转发过程中在用户态和内核态被多次拷贝而造成代理服务性能瓶颈的问题，实现了基于用户态协议栈的报文零拷贝转发， 有效提高了系统性能。而且，本公开的报文转发方法不需要伪造中间人，不存在中间人攻击的风险，支持TLS等加密传输，提高了报文转发的安全性和可靠性。
根据本公开的一些实施例，所述建立客户端与服务器之间的连接，包括：接收客户端发送的建链请求并转发至所述服务器，以使所述服务器基于所述建链请求向所述客户端应答第一回应消息；接收所述第一回应消息并转发至所述客户端，以使所述客户端基于所述第一回应消息向所述服务器应答第二回应消息；接收所述第二回应消息并将所述第二回应消息转发至所述服务器，以建立所述客户端与所述服务器之间的连接。
在本公开的一些实施例中，所述接收客户端发送的建链请求并转发至所述服务器，包括：根据预设的默认路由接收所述客户端发送的所述建链请求；基于所述建链请求创建会话，并对所述建链请求的地址进行更新后转发至所述服务器。
根据本公开的一些实施例，所述会话的消息内容包括：链接序列号和窗口大小。
在本公开的一些实施例中，所述基于用户态协议栈在客户端与服务器之间转发交互报文，包括：接收所述客户端发送的请求报文，并基于所述请求报文向所述客户端应答第一响应报文；将所述请求报文添加至第一缓冲队列并转发至所述服务器，以使所述服务器基于所述请求报文应答第二响应报文；接收所述第二响应报文，并基于所述第二响应报文向所述服务器发送确认报文；将所述第二响应报文添加至第二缓冲队列并发送至所述客户端。
根据本公开的一些实施例，所述方法，还包括：当所述第二缓冲队列中的所述第二响应报文的数据容量大于阈值时，减小发往所述服务器的请求报文的窗口，以降低所述服务器的报文发送速率。
在本公开的一些实施例中，所述方法，还包括：当所述客户端在预定时间内未接收到所述第二响应报文时，重新将所述第二响应报文添加至所 述第二缓冲队列并发送至所述客户端。
根据本公开的一些实施例，所述方法，还包括：在报文交互过程中检测到丢包时，将所述报文的窗口大小调整为预设阈值。
根据本公开实施例的异构网络的报文转发装置，包括：
转发模块，设置为在客户端与服务器之间转发建链请求和回应消息，建立客户端与服务器之间的连接，并基于用户态协议栈在客户端与服务器之间转发交互报文。
根据本公开实施例的异构网络的报文转发装置，转发模块在传输层完成报文的转发，可以避免报文在转发过程中在用户态和内核态被多次拷贝而造成代理服务性能瓶颈的问题，实现了基于用户态协议栈的报文零拷贝转发，有效提高了系统性能。而且，本公开的报文转发装置不需要伪造中间人，不存在中间人攻击的风险，支持TLS等加密传输，提高了报文转发的安全性和可靠性。
根据本公开实施例的计算机可读存储介质，所述计算机可读存储介质上存储有信息传递的实现程序，所述程序被处理器执行时实现上述所述的异构网络的报文转发方法的步骤。
根据本公开实施例的计算机可读存储介质，通过运行异构网络的报文转发方法，可以在代理节点的传输层完成报文的转发，可以避免报文在转发过程中在用户态和内核态被多次拷贝而造成代理服务性能瓶颈的问题，实现了基于用户态协议栈的报文零拷贝转发，有效提高了系统性能。而且，本公开的报文转发方法不需要伪造中间人，不存在中间人攻击的风险，支持TLS等加密传输，提高了报文转发的安全性和可靠性。
根据本公开实施例的代理节点设备，包括：存储器、处理器及存储在所述存储器上并可在所述处理器上运行的计算机程序，所述计算机程序被所述处理器执行时实现如上述所述的异构网络的报文转发方法的步骤。
根据本公开实施例的代理节点设备，可以在代理节点设备的传输层完成报文的转发，从而可以避免报文在转发过程中在用户态和内核态被多次 拷贝而造成代理服务性能瓶颈的问题。
附图说明
图1是相关技术中代理服务示意图；
图2是根据本公开实施例的异构网络的报文转发方法示意图；
图3是根据本公开实施例的异构网络的报文转发方法示意图；
图4是根据本公开实施例的异构网络的报文转发方法流程图；
图5是根据本公开实施例的客户端与服务器建立连接的流程图；
图6是根据本公开实施例的异构网络的报文交互方法流程图。
具体实施方式
为更进一步阐述本公开为达成预定目的所采取的技术手段及功效，以下结合附图及较佳实施例，对本公开进行详细说明如后。
如图1所示，相关技术中，在客户端A和服务器B之间的代理服务是一种伪透明技术，例如haproxy，代理流程为：
客户端A向服务端B发起建链请求，代理服务器P截获该建链请求，并伪装成服务端B与客户端A完成3次握手；
客户端A发起业务请求时，代理服务器P再伪装成客户端A与服务端B建链，并发起请求；
服务端B响应消息发送到代理服务器P，代理服务进程接收响应消息，查找客户端A链路；代理服务器P找到相应的链路，伪装成服务器B将响应消息发送到客户端A。
上述技术方案中代理服务器P对客户端A、服务端B都是透明的，但仍然需要分别与客户端A、服务端B建链，存在中间人攻击的风险，因而无法支持TLS(Transport Layer Security传输层加密)、HTTPS(HTTP  security)等加密通道；其次，转发过程需要将数据流接收到应用层、由应用层发送到目的节点，内核态、用户态之间多次拷贝，存在性能瓶颈。
结合图2和图4所示，根据本公开实施例的异构网络的报文转发方法，方法包括：
S101：接收客户端发送的建链请求并将建链请求转发至服务器，以建立客户端与服务器之间的连接；
S102：基于用户态协议栈在客户端与服务器之间转发交互报文。
需要说明的是，本公开中，如图2所示，在客户端和服务器之间设置有代理节点，其中，代理节点设置为在客户端和服务器之间转发交互报文。而且，本公开中的代理节点是通过传输层完成报文的转发。因此，代理节点可以实现透明代理服务，实现基于用户态协议栈的报文转发。
根据本公开实施例的异构网络的报文转发方法，通过在传输层完成报文的转发，可以避免报文在转发过程中在用户态和内核态被多次拷贝而造成代理服务性能瓶颈的问题，实现了基于用户态协议栈的报文零拷贝转发，有效提高了系统性能。而且，本公开的报文转发方法不需要伪造中间人，不存在中间人攻击的风险，支持TLS等加密传输，提高了报文转发的安全性和可靠性。
如图5所示，根据本公开的一些实施例在客户端与服务器之间转发建链请求和回应消息，包括：
S201：接收客户端发送的建链请求并转发至服务器，以使服务器基于建链请求向客户端应答第一回应消息；
S202：接收第一回应消息并转发至客户端，以使客户端基于第一回应消息向服务器应答第二回应消息；
S203：接收第二回应消息并将第二回应消息转发至服务器，以建立客户端与服务器之间的连接。
需要说明的是，这里所述的“建链请求”可以为SYN请求，“第一回 应消息”和“第二回应消息”可以为ACK报文。例如，客户端可以经代理节点向服务器发送SYN请求，服务器接收SYN请求后，经代理节点向客户端应答ACK报文，客户端接收ACK报文后，经代理节点向服务器发送ACK报文，从而完成客户端与服务器之间的三次握手，以在客户端与服务器之间建立TCP连接。
在本公开的一些实施例中，接收客户端发送的建链请求并转发至服务器，包括：
根据预设的默认路由接收客户端发送的建链请求；
基于建链请求创建会话，并对建链请求的地址进行更新后转发至服务器。
根据本公开的一些实施例，会话的消息内容包括：链接序列号和窗口大小。
需要说明的是，代理节点的传输层与网络层之间设置有TCPO模块，负责TCP报文的双向转发。例如，当客户端UE要与WEB服务器SP建链时，客户端UE首先向WEB服务器发起SYN请求，如目标端口为80，配置默认路由将SYN请求指向中间代理节点。代理节点配置转发规则，将目的80端口的TCP报文发送到协议栈，IP层将需要处理的报文发送到TCPO模块。TCPO模块创建会话记录新建TCP链接的序列号、窗口大小等信息，根据路由地址更新MAC地址后并由网卡发出。例如，当客户端向服务器发送报文时，TCPO模块根据路由地址将客户端的MAC更新为代理节点的MAC并由网卡发送至服务器。服务器收到的建链包的源IP、端口都来自客户端UE，以向客户端UE发送SYN+ACK报文。
结合图3和如图6所示，在本公开的一些实施例中，基于用户态协议栈在客户端与服务器之间转发交互报文，包括：
S401：接收客户端发送的请求报文，并基于请求报文向客户端应答第一响应报文；
S402：将请求报文添加至第一缓冲队列并转发至服务器，以使服务器 基于请求报文应答第二响应报文；
S403：接收第二响应报文，并基于第二响应报文向服务器发送确认报文；
S404：将第二响应报文添加至第二缓冲队列并发送至客户端。
需要说明的是，如图3所示，当客户端与服务器之间完成三次握手建立连接后，客户端换可以向服务器发送请求报文。预设的默认路由将请求报文指向代理节点，代理节点的TCPO模块接收请求报文，并将请求报文添加至缓冲队列A以转发至服务器，并向客户端回应ACKA报文。TCPO模块收到服务器的第二响应报文后，将第二响应报文添加至队列B以向客户端转发，并向服务器应答ACK报文确认接收到数据。
根据本公开的一些实施例，方法还包括：当第二缓冲队列中的第二响应报文的数据容量大于阈值时，减小发往服务器的请求报文的窗口，以降低服务器的报文发送速率。如图3所示，当客户端测网络导致缓冲队列B中积压数据过多时，可以减小发往服务器的通告窗口的大小，以通知服务器降低数据发送速度。由此，实现了报文交互过程中的优化，有效避免了拥塞、丢包等问题。
在本公开的一些实施例中，方法还包括：当客户端在预定时间内未接收到第二响应报文时，重新将第二响应报文添加至第二缓冲队列并发送至客户端。如图3所示，缓冲队列B中的数据按照顺序逐一出队，向客户端转发数据报文，代理节点收到ACK报文时，可以立即删除队列中相应的报文。可以设置重传定时器，当客户端在预定时间内未接收到数据报文时，可以重传响应报文。由此，有效避免了丢包的问题。
根据本公开的一些实施例，方法还包括：在报文交互过程中检测到丢包时，将报文的窗口大小调整为预设阈值。需要说明的是，这里所述的“预设阈值”可以为“慢启动阈值”，慢启动阈值可以理解为报文发送过程中，慢启动过程中的最大值。通过将窗口大小调整为与慢启动阈值相同，可以跳过慢启动阶段直接进入拥塞避免阶段，使客户端与服务器之间的报文交 互过程得到了优化加速。
如图2和图3所示，根据本公开实施例的异构网络的报文转发装置，包括：转发模块，转发模块可以为TCPO模块，转发模块设置为在客户端与服务器之间转发建链请求和回应消息，建立客户端与服务器之间的连接，并基于用户态协议栈在客户端与服务器之间转发交互报文。
根据本公开实施例的异构网络的报文转发装置，转发模块在传输层完成报文的转发，可以避免报文在转发过程中在用户态和内核态被多次拷贝而造成代理服务性能瓶颈的问题，实现了基于用户态协议栈的报文零拷贝转发，有效提高了系统性能。而且，本公开的报文转发装置不需要伪造中间人，不存在中间人攻击的风险，支持TLS等加密传输，提高了报文转发的安全性和可靠性。
根据本公开实施例的计算机可读存储介质，计算机可读存储介质上存储有信息传递的实现程序，程序被处理器执行时实现上述所述的异构网络的报文转发方法的步骤。
根据本公开实施例的计算机可读存储介质，通过运行异构网络的报文转发方法，可以在代理节点的传输层完成报文的转发，可以避免报文在转发过程中在用户态和内核态被多次拷贝而造成代理服务性能瓶颈的问题，实现了基于用户态协议栈的报文零拷贝转发，有效提高了系统性能。而且，本公开的报文转发方法不需要伪造中间人，不存在中间人攻击的风险，支持TLS等加密传输，提高了报文转发的安全性和可靠性。
根据本公开实施例的代理节点设备，包括：存储器、处理器及存储在存储器上并可在处理器上运行的计算机程序，计算机程序被处理器执行时实现如上述所述的异构网络的报文转发方法的步骤。
根据本公开实施例的代理节点设备，可以在代理节点设备的传输层完成报文的转发，从而可以避免报文在转发过程中在用户态和内核态被多次拷贝而造成代理服务性能瓶颈的问题，实现了基于用户态协议栈的报文零拷贝转发，有效提高了系统性能。而且，本公开的报文转发方法不需要伪 造中间人，不存在中间人攻击的风险，支持TLS等加密传输，提高了报文转发的安全性和可靠性。
需要说明的是，Intel推出DPDK(Data Plane Development Kit)项目，支持用户态网络报文收发，目前DPDK收发框架主要用于网络设备报文转发。本公开采用DPDK做透明代理服务器的报文收发框架，采用BSD(Berkeley Software DistributionBerkeley Software Distribution)的TCP/IP开源协议栈做用户态协议栈，也可以使用其他用户态协议栈框架。
下面以手机用户通过浏览器访问网页为例，介绍本根据本公开的异构网络的报文转发方法和装置。如图2和图3所示，在UE(User End用户端)与SP(service provider服务提供方)服务器之间嵌入一个代理节点，基于DPDK+用户态TCP/IP协议栈实现报文透明转发，并且根据无线网络传输特性对TCP战优化加速，提升移动用户上网体验。如图2和图3所示，具体过程如下：
客户端UE向WEB服务器SP发起SYN请求，目标端口80，配置默认路将请求指向中间代理节点；
代理节点配置转发规则，将目的80端口的TCP报文转发到协议栈，IP层将需要TCPO处理的报文送到TCPO模块；
TCPO创建会话记录新建TCP链接的序列号、窗口大小等信息，根据路由地址更新MAC地址后并由网卡发出；
SP收到的建链包的源IP、端口都来自客户端UE，向UE发送SYN+ACK报文；
代理解决将来自SP的报文转发到TCPO，由TCPO将SYN+ACK转发都UE；
UE收到SYN+ACK，发送ACK报文，SP收到ACK报文，UE与SP完成3次握手；
客户端UE发送GET请求到TCPO；
TCPO模块接收数据报文，入队缓冲队列A，向UE发送ACK报文，向SP转发请求报文；
TCPO模块收到SP发回的响应包报文，入队缓冲队列B，向SP发送ACK确认接收到数据，若UE侧网络导致队列B积压数据较多，则减小发往SP的通告窗口大小，通知SP降低数据发送速度；
缓冲队列B中按顺序逐一出队，向客户端转数据报文，设置重传定时器，超时重传指定报文，收到ACK立即删除队列中报文；
UE主动断链，TCPO透传4次挥手报文，与SP断链；
TCPO收到SP的断链请求，若队列B仍然存在积压消息，则TCPO伪装成UE与SP断链，队列B数据发送完后再与UE断链。
通过上述代理节点实现客户端和服务器之间的报文转发具有如下优点：
(1)完全透明代理：如图2所示，代理节点在TCP层转发报文，由IP层修改物理地址。透传三次握手过程，较传统代理过程可以节省一个完整握手过程。用户态TCP/IP协议栈的L3(网络层)、L4(传输层)之间插入TCPO(TCP Optimizer传输层优化)模块，实现透明代理功能。UE发起请求默认路由到代理服务器，经过TCPO模块时直接转发到SP侧网络，源、目标IP保持不变，L2(以太网层)地址根据实际路由填写；SP发往UE的报文，经过TCPO转向UE侧，代理服务器以TCP报文为单位，只做报文转发，不存在拆包、组包操作。不涉及报文拷贝、读写，与UE、ISP都不需要建链，不存在中间人攻击风险，支持TLS等加密传输。
(2)TCP加速优化：透明代理节点的TCPO模块把UE、SP之间的TCP连接分割成两段，灵活控制通告窗口大小，TCPO根据缓冲队列长度修改通告窗口大小，以控制源端数据发送速率。TCPO模块根据无线网络环境的传输特性以及移动用户的行为特性，通过缓存、拥塞控制等机制优化TCP报文转发性能，减少无线传输乱序丢包等情况导致的上网速率降低现象，提升2G/3G/4G移动用户的上网体验。
(3)支持分段拆链，主动断链节点立即断链，另一侧等待数据发送完再断链。
(4)双向数据缓冲，收到确认ACK后从缓冲队列删除数据报文，以实现数据缓冲。
(5)支持超时重传，从缓冲队列重传数据报文，不需要原发送方重传数据。
(6)灵活的拥塞控制，检测到丢包后将拥塞窗口初始大小的值设置成与慢启动阈值相同，跳过慢启动阶段直接进入拥塞避免阶段。
(7)支持报文排序，乱序报文不会影响代理节点的报文转发。
综上所述，本公开设计的代理方案，通过在用户态协议栈TCP/IP协议栈嵌入TCPO模块，负责TCP报文的双向转发，实现完全透明代理，增加TCP优化逻辑，改善了客户端网络体验。由此，不仅解决了传统代理服务器的性能瓶颈，而且为TCP优化提供了一个开放框架，保证原生协议栈稳定可靠的同时，方便业务实现定制化策略。
显然，本领域的技术人员应该明白，上述的本发明的各模块或各步骤可以用通用的计算装置来实现，它们可以集中在单个的计算装置上，或者分布在多个计算装置所组成的网络上，它们可以用计算装置可执行的程序代码来实现，从而，可以将它们存储在存储装置中由计算装置来执行，并且在某些情况下，可以以不同于此处的顺序执行所示出或描述的步骤，或者将它们分别制作成各个集成电路模块，或者将它们中的多个模块或步骤制作成单个集成电路模块来实现。这样，本发明不限制于任何特定的硬件和软件结合。
通过具体实施方式的说明，应当可对本公开为达成预定目的所采取的技术手段及功效得以更加深入且具体的了解，然而所附图示仅是提供参考与说明之用，并非用来对本公开加以限制。

Claims (11)

  1. 一种异构网络的报文转发方法，所述方法包括：
    接收客户端发送的建链请求并将所述建链请求转发至服务器，以建立客户端与服务器之间的连接；
    基于用户态协议栈在客户端与服务器之间转发交互报文。
  2. 根据权利要求1所述的异构网络的报文转发方法，其中，所述建立客户端与服务器之间的连接，包括：
    接收客户端发送的建链请求并转发至所述服务器，以使所述服务器基于所述建链请求向所述客户端应答第一回应消息；
    接收所述第一回应消息并转发至所述客户端，以使所述客户端基于所述第一回应消息向所述服务器应答第二回应消息；
    接收所述第二回应消息并将所述第二回应消息转发至所述服务器，以建立所述客户端与所述服务器之间的连接。
  3. 根据权利要求2所述的异构网络的报文转发方法，其中，所述接收客户端发送的建链请求并转发至所述服务器，包括：
    根据预设的默认路由接收所述客户端发送的所述建链请求；
    基于所述建链请求创建会话，并对所述建链请求的地址进行更新后转发至所述服务器。
  4. 根据权利要求3所述的异构网络的报文转发方法，其中，所述会话的消息内容包括：链接序列号和窗口大小。
  5. 根据权利要求1所述的异构网络的报文转发方法，其中，所述基于用户态协议栈在客户端与服务器之间转发交互报文，包括：
    接收所述客户端发送的请求报文，并基于所述请求报文向所述客户端应答第一响应报文；
    将所述请求报文添加至第一缓冲队列并转发至所述服务器，以使所述服务器基于所述请求报文应答第二响应报文；
    接收所述第二响应报文，并基于所述第二响应报文向所述服务器发送确认报文；
    将所述第二响应报文添加至第二缓冲队列并发送至所述客户端。
  6. 根据权利要求5所述的异构网络的报文转发方法，其中，所述方法，还包括：
    当所述第二缓冲队列中的所述第二响应报文的数据容量大于阈值时，减小发往所述服务器的请求报文的窗口，以降低所述服务器的报文发送速率。
  7. 根据权利要求5所述的异构网络的报文转发方法，其中，所述方法，还包括：
    当所述客户端在预定时间内未接收到所述第二响应报文时，重新将所述第二响应报文添加至所述第二缓冲队列并发送至所述客户端。
  8. 根据权利要求1所述的异构网络的报文转发方法，其中，所述方法，还包括：
    在报文交互过程中检测到丢包时，将所述报文的窗口大小调整为预设阈值。
  9. 一种异构网络的报文转发装置，包括：
    转发模块，设置为在客户端与服务器之间转发建链请求和回应消息， 建立客户端与服务器之间的连接，并基于用户态协议栈在客户端与服务器之间转发交互报文。
  10. 一种计算机可读存储介质，所述计算机可读存储介质上存储有信息传递的实现程序，所述程序被处理器执行时实现如权利要求1至8中任一项所述的异构网络的报文转发方法的步骤。
  11. 一种代理节点设备，包括：存储器、处理器及存储在所述存储器上并可在所述处理器上运行的计算机程序，所述计算机程序被所述处理器执行时实现如权利要求1至8中任一项所述的异构网络的报文转发方法的步骤。
PCT/CN2020/112864 2019-09-30 2020-09-01 异构网络的报文转发方法及装置 WO2021063147A1 (zh)

Priority Applications (1)

Application Number Priority Date Filing Date Title
EP20871853.6A EP3979594A4 (en) 2019-09-30 2020-09-01 PACKET FORWARDING METHOD AND APPARATUS FOR HETEROGENEOUS NETWORK

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
CN201910942239.3 2019-09-30
CN201910942239.3A CN112583874B (zh) 2019-09-30 2019-09-30 异构网络的报文转发方法及装置

Publications (1)

Publication Number Publication Date
WO2021063147A1 true WO2021063147A1 (zh) 2021-04-08

Family

ID=75116377

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2020/112864 WO2021063147A1 (zh) 2019-09-30 2020-09-01 异构网络的报文转发方法及装置

Country Status (3)

Country Link
EP (1) EP3979594A4 (zh)
CN (1) CN112583874B (zh)
WO (1) WO2021063147A1 (zh)

Cited By (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN113269590A (zh) * 2021-05-31 2021-08-17 五八到家有限公司 一种用于资源补贴的数据处理方法、装置和系统
CN113472875A (zh) * 2021-06-28 2021-10-01 深信服科技股份有限公司 一种连接复用方法、装置、电子设备及存储介质

Families Citing this family (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN113596171B (zh) * 2021-08-04 2024-02-20 杭州网易数之帆科技有限公司 云计算数据交互方法、系统、电子设备及存储介质
CN114172976B (zh) * 2021-11-11 2024-02-02 北京天融信网络安全技术有限公司 上下游连接关联方法、装置、网络转发设备、系统及介质
CN114301996B (zh) * 2021-12-10 2024-06-28 山石网科通信技术股份有限公司 传输数据处理方法及装置
CN114301978A (zh) * 2021-12-23 2022-04-08 阿里巴巴（中国）有限公司 一种云桌面实现方法、系统、设备及存储介质
CN115150361B (zh) * 2022-06-06 2023-08-29 北京交通大学 一种分布式异构网络设备地址管理方法
CN115426317B (zh) * 2022-11-03 2023-03-24 新华三信息技术有限公司 数据传输速率控制方法、装置及电子设备

Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20090296685A1 (en) * 2008-05-29 2009-12-03 Microsoft Corporation User-Mode Prototypes in Kernel-Mode Protocol Stacks
CN103840994A (zh) * 2012-11-23 2014-06-04 华耀(中国)科技有限公司 一种用户端通过 vpn 访问内网的系统及方法
CN105245271A (zh) * 2015-10-27 2016-01-13 航天恒星科技有限公司 卫星通信网络加速装置以及方法
EP2991409A1 (en) * 2013-04-24 2016-03-02 Kyocera Corporation Wireless communication device, processor, and communication control method
CN109547519A (zh) * 2017-09-22 2019-03-29 中兴通讯股份有限公司 反向代理方法、装置及计算机可读存储介质

Family Cites Families (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN108737413B (zh) * 2018-05-15 2021-08-24 奇安信科技集团股份有限公司 传输层的数据处理方法、装置及计算机可读存储介质

Patent Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20090296685A1 (en) * 2008-05-29 2009-12-03 Microsoft Corporation User-Mode Prototypes in Kernel-Mode Protocol Stacks
CN103840994A (zh) * 2012-11-23 2014-06-04 华耀(中国)科技有限公司 一种用户端通过 vpn 访问内网的系统及方法
EP2991409A1 (en) * 2013-04-24 2016-03-02 Kyocera Corporation Wireless communication device, processor, and communication control method
CN105245271A (zh) * 2015-10-27 2016-01-13 航天恒星科技有限公司 卫星通信网络加速装置以及方法
CN109547519A (zh) * 2017-09-22 2019-03-29 中兴通讯股份有限公司 反向代理方法、装置及计算机可读存储介质

Non-Patent Citations (3)

* Cited by examiner, † Cited by third party
Title
DENG, GENGSHENG ET AL.: "Application Research on Dual Stack Reverse Proxy Technology in IPv6 Transition Phase)", CHINA EDUCATION NETWORK, 31 January 2018 (2018-01-31), pages 39 - 42, XP055798099 *
MU, RUICHUAO: ""Research and Implementation of High Performance VPN Gateway Based on DPDK"", MASTER'S THESIS OF HARBIN ENGINEERING UNIVERSITY, 15 February 2018 (2018-02-15), pages 1 - 82, XP055798095 *
See also references of EP3979594A4 *

Cited By (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN113269590A (zh) * 2021-05-31 2021-08-17 五八到家有限公司 一种用于资源补贴的数据处理方法、装置和系统
CN113269590B (zh) * 2021-05-31 2023-06-06 五八到家有限公司 一种用于资源补贴的数据处理方法、装置和系统
CN113472875A (zh) * 2021-06-28 2021-10-01 深信服科技股份有限公司 一种连接复用方法、装置、电子设备及存储介质

Also Published As

Publication number Publication date
CN112583874A (zh) 2021-03-30
EP3979594A4 (en) 2022-08-17
CN112583874B (zh) 2024-02-20
EP3979594A1 (en) 2022-04-06

Similar Documents

Publication Publication Date Title
WO2021063147A1 (zh) 异构网络的报文转发方法及装置
US7826487B1 (en) Coalescing acknowledgement responses to improve network communications
US10511684B2 (en) Anycast aware transport for content distribution networks
US9118717B2 (en) Delayed network protocol proxy for packet inspection in a network
US10681188B2 (en) Reducing transmission pathway lengths within a distributed network
US10361921B2 (en) Method and apparatus for managing connections in a communication network
US11088957B2 (en) Handling of data packet transfer via a proxy
US20090254667A1 (en) Method for eliminating redundant connections
EP1393497B1 (en) Dual mode service platform within network communication system
US20150373135A1 (en) Wide area network optimization
US20150189010A1 (en) Communication network with load balancing functionality
WO2019242638A1 (zh) 一种负载均衡方法和装置
WO2017219813A1 (zh) 一种流量处理方法及透明缓存系统
US11863655B2 (en) Method and system for reliable application layer data transmission through unreliable transport layer connections in a network
WO2016165524A1 (zh) 内容访问方法、无线接入网内容分发网络基站和核心内容分发网络装置
WO2017107148A1 (zh) 一种数据传输方法及网络侧设备
US11700321B2 (en) Transparent proxy conversion of transmission control protocol (TCP) fast open connection
US10958625B1 (en) Methods for secure access to services behind a firewall and devices thereof
US11349934B2 (en) Opportunistic transmission control protocol (TCP) connection establishment
WO2019243890A2 (en) Multi-port data transmission via udp
WO2013152614A1 (zh) 一种基于应用层数据的网络接入系统和方法
CN111314447B (zh) 代理服务器及其处理访问请求的方法
RU2822609C1 (ru) Способ и устройство пересылки пакетов для гетерогенной сети
WO2024060915A1 (zh) 核心网数据传输方法、电子设备及计算机可读存储介质
EP3525419A1 (en) Connectionless protocol with bandwidth and congestion control

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 20871853

Country of ref document: EP

Kind code of ref document: A1

ENP Entry into the national phase

Ref document number: 2020871853

Country of ref document: EP

Effective date: 20211229

NENP Non-entry into the national phase

Ref country code: DE