WO2022116850A1

WO2022116850A1 - Method and device for identifying private network user, service system, and storage medium

Info

Publication number: WO2022116850A1
Application number: PCT/CN2021/131449
Authority: WO
Inventors: 黄华桥; 曾伟
Original assignee: 武汉绿色网络信息服务有限责任公司
Priority date: 2020-12-01
Filing date: 2021-11-18
Publication date: 2022-06-09
Also published as: CN112565053A; CN112565053B

Abstract

The present invention relates to a method and device for identifying a private network user, a service system, and a storage medium. The method comprises: receiving a VXLAN message sent by a user terminal; decapsulating the VXLAN message to obtain an original message of the VXLAN message; parsing the original message to obtain a private network IP address of the user terminal; querying a preset mapping table of a VNI and the private network IP address to obtain mapping information between the private network IP address of the user terminal and the user terminal VNI; and uniquely identifying the user terminal according to the mapping information, and outputting the identified result. Thus, in the present invention, a private network user can be identified accurately, facilitating making statistics on user traffic.

Description

Method, device, service system and storage medium for identifying private network users

technical field

The present invention relates to the technical field of virtual extended local area network, in particular to a method, device, service system and storage medium for identifying private network users.

Background technique

VXLAN (Virtual eXtensible Local Area Network, virtual extended local area network) is a network virtualization technology, which can well solve the problem that the existing VLAN technology cannot meet the needs of large Layer 2 networks.

The main principle of the VXLAN technology is to introduce an outer VXLAN tunnel in UDP format as the data link layer, and the original data packet content is transmitted as the tunnel payload (Payload). Since the outer layer adopts UDP as the transmission method, the payload data can be easily transmitted in the second or third layer network. Both ends of the VXLAN tunnel are VTEP (VXLAN Tunnel Endpoints, VXLAN tunnel endpoints) devices, such as DCSW (Data Switching Center), and the related processing of VXLAN packets is performed on this device.

Referring to Figure 1, the VXLAN packet structure includes two parts: the original packet and the VXLAN encapsulation. Among them, the original packet includes payload, inner IP header (INNER IP Header) and inner Ethernet header (INNER Ethemet Header); VXLAN encapsulation includes VXLAN header (VXLAN Header), outer UDP header (Outer UDP Header), outer IP header Header (Outer IP Header) and outer Ethernet header (Outer Ethernet Header), and VXLAN header has VNI (VXLAN Network Identifier, VXLAN network identifier). The outer IP header and outer UDP header are the basis for mutual communication between VTEP devices, enabling VXALN packets to be transmitted on the underlying network. After the VTEP device receives the VXLAN message, it removes the outer IP header and outer UDP header, and then processes the VXLAN logic according to the VXLAN header, which is mainly sent to the final virtual machine (Virtual Machine, also known as VM) according to the VNI, The virtual machine reads the original message.

A virtual machine can act as a user terminal or a server. Taking the source terminal as the user terminal and the destination terminal as the server as an example, the server receives the original packet without VNI. Although the private network IP address of the user terminal can be obtained by parsing the original packet, due to different private networks. The user terminals can use the same private network IP address, that is, the private network IP addresses are not unique, so the server cannot determine a unique user terminal.

Since a unique user terminal cannot be determined, it is also impossible to accurately count the source of user traffic, and thus cannot provide sufficient technical support for the currently rapidly developing traffic economy. Therefore, it is necessary to propose a technical solution capable of identifying user terminals based on the VXLAN technology.

SUMMARY OF THE INVENTION

The purpose of the present invention is to disclose a method capable of accurately identifying private network users.

Specifically, a method for identifying private network users disclosed in the present invention includes the following steps:

Receive the VXLAN packet sent by the user terminal;

performing VXLAN decapsulation on the VXLAN message to obtain the original message of the VXLAN message;

Parse out the private network IP address of the user terminal from the original message;

query the preset VNI and private network IP address mapping table to obtain the mapping information between the private network IP address of the user terminal and the user terminal VNI;

The user terminal is uniquely identified according to the mapping information, and an identification result is output.

Further, the step of receiving the VXLAN message sent by the user terminal is specifically: receiving the VXLAN message sent by the user terminal from the public network, and the step further includes:

Preset VNI and private network IP address mapping table;

Allocate the corresponding VNI to each user terminal accessing the public network according to the preset VNI and private network IP address mapping table;

The original packet sent by the user terminal from the private network is encapsulated by VXLAN according to its VNI to form a VXLAN packet and forwarded to the public network.

Further, each user terminal accessing the public network includes a user terminal accessing the network in the home broadband service.

Further, the step of uniquely identifying the user terminal according to the mapping information and outputting the identification result includes: counting user traffic sources according to the uniquely identified user terminal.

Further, the structure of the VXLAN message sequentially includes VXLAN encapsulation and the original message from outside to inside; the structure of the VXLAN encapsulation includes, from outside to inside, an outer Ethernet header, an outer IP header, an outer UDP header, and an outer UDP header. VXLAN header; the structure of the original packet includes an inner Ethernet header, an inner IP header and a payload in sequence from the outside to the inside; the inner IP header has the private network IP address of the user terminal.

The present invention also discloses a device for identifying private network users, which includes a VXLAN message receiving module, a VXLAN decapsulation module, a private network IP address parsing module, a mapping table query module, and a result output module; wherein:

VXLAN packet receiving module: receives VXLAN packets sent by the user terminal;

VXLAN decapsulation module: perform VXLAN decapsulation on the VXLAN packet to obtain the original packet of the VXLAN packet;

Private network IP address parsing module: parses the private network IP address of the user terminal from the original message;

Mapping information query module: query the preset VNI and private network IP address mapping table to obtain the mapping information between the private network IP address of the user terminal and the user terminal VNI;

Result output module: uniquely identify the user terminal according to the mapping information, and output the identification result.

Further, it also includes a mapping table module, a VNI management module, and a VXLAN encapsulation module; wherein:

Mapping table module: preset VNI and private network IP address mapping table;

VNI management module: According to the preset VNI and private network IP address mapping table, assign the corresponding VNI to each user terminal accessing the public network;

VXLAN encapsulation module: Perform VXLAN encapsulation according to the VNI of the original packets sent by the user terminal from the private network to form VXLAN packets and forward them to the public network.

Further, the apparatus is located on an access service system of a communication operator.

The present invention also discloses a service system correspondingly, characterized in that, the service system includes:

one or more processors;

memory; and

One or more application programs, wherein the one or more application programs are stored in the memory and configured to be executed by the processor to implement the method for identifying a private network user of any of the above solutions.

The present invention also discloses a computer-readable storage medium correspondingly, on which a computer program is stored, and the computer program is loaded by a processor to execute the method for identifying a private network user according to any one of claims 1 to 5. A step of.

The present invention at least has the following beneficial effects:

(1) The present invention uniquely identifies the user terminal according to the mapping information by sequentially performing VXLAN decapsulation, private network IP address resolution, and querying the preset VNI and private network IP address mapping table for the VXLAN message sent by the user terminal, That is, a unique user terminal can be determined, thereby realizing accurate identification of the user terminal;

(2) Since the present invention can accurately identify the user terminal, the user traffic source can be accurately counted, the traffic economy can be promoted, and the economic benefit can be improved.

Description of drawings

In order to illustrate the technical solutions in the embodiments of the present invention more clearly, the following briefly introduces the accompanying drawings used in the description of the embodiments. Obviously, the accompanying drawings in the following description are only some embodiments of the present invention. For those skilled in the art, other drawings can also be obtained from these drawings without creative effort.

Figure 1 is a schematic structural diagram of a VXLAN packet;

2 is a schematic flowchart of a method for identifying a private network user disclosed in Embodiment 1;

3 is a schematic flowchart of a method for identifying a private network user disclosed in Embodiment 2;

4 is a structural block diagram of an apparatus for identifying private network users disclosed in Embodiment 3;

FIG. 5 is a structural block diagram of an apparatus for identifying private network users disclosed in the fourth embodiment.

Detailed ways

The technical solutions in the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings in the embodiments of the present invention. Obviously, the described embodiments are only a part of the embodiments of the present invention, rather than all the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative efforts shall fall within the protection scope of the present invention.

Example 1

Referring to FIG. 2, a method for identifying a private network user disclosed in this embodiment mainly includes the following steps R10-R50 (only the destination execution method is introduced):

R10: The VXLAN packet sent by the user terminal is received.

Step R10 receives the VXLAN message sent by the user terminal from the public network, wherein the structure of the VXLAN message can refer to FIG. 1, that is, it sequentially includes VXLAN encapsulation and original message from outside to inside; the structure of VXLAN encapsulation is from outside to inside The inside includes the outer Ethernet header, the outer IP header, the outer UDP header and the VXLAN header in turn; the structure of the original packet includes the inner Ethernet header, the inner IP header and the payload in sequence from the outside to the inside; the inner IP header has the Private IP address.

R20: Perform VXLAN decapsulation on the VXLAN packet to obtain the original packet of the VXLAN packet.

Among them, according to the structure of the VXLAN packet shown in Figure 1, VXLAN decapsulation refers to removing the outer Ethernet header, outer IP header, outer UDP header and VXLAN header, and only retains the inner Ethernet header, inner IP header and net header. The original message including the load.

R30: Parse out the private network IP address of the user terminal from the original message.

Wherein, since the user terminals in different private networks can use the same private network IP address, the user terminal cannot be uniquely determined only by the private network IP address obtained by parsing.

R40: Query a preset VNI and private network IP address mapping table to obtain mapping information between the private network IP address of the user terminal and the VNI of the user terminal.

The form of the VNI and private network IP address mapping table may refer to the existing MAC address and private network IP address mapping table. The difference is that the MAC address and private network IP address mapping table stores the mapping information between physical addresses and private network IP addresses, while the VNI and private network IP address mapping table stores the mapping information between VNI and private network IP addresses.

R50: Uniquely identify the user terminal according to the mapping information, and output an identification result.

Among them, because the VNI of the user terminal is unique on the public network it accesses, and the private network IP address of the user terminal is unique on the private network it accesses, the user terminal can be uniquely identified according to the mapping information, and Output the mapping information.

In addition, according to the uniquely identified user terminal, the source of user traffic can be further counted.

Thus, this embodiment at least has the following beneficial effects:

(1) By sequentially performing VXLAN decapsulation, private network IP address resolution, and querying the preset VNI and private network IP address mapping table for the VXLAN packets sent by the user terminal, the user terminal is uniquely identified according to the mapping information, that is, A unique user terminal can be determined, thereby realizing accurate identification of the user terminal;

(2) The user terminal can be accurately identified, so that the source of user traffic can be accurately counted, which can promote the traffic economy and help improve economic benefits.

Embodiment 2

Referring to FIG. 3, a method for identifying a private network user disclosed in this embodiment, in addition to including steps R10-R50 (destination terminal execution method) in Embodiment 1, further includes the following steps S10-S30 ( source execution method):

S10: Preset a VNI and private network IP address mapping table.

The method of presetting the mapping table between the VNI and the private network IP address may refer to the existing method of setting the mapping table between the MAC address and the private network IP address.

S20: Allocate a corresponding VNI to each user terminal accessing the public network according to the preset VNI and private network IP address mapping table.

The user terminals accessing the public network include user terminals accessing the network in the home broadband service.

S30: Perform VXLAN encapsulation according to the VNI of the original message sent by the user terminal from the private network to form a VXLAN message and forward it to the public network.

Embodiment 3

Referring to FIG. 4 , this embodiment discloses a device for identifying private network users. The device may be specifically located on an access service system of a communication operator, and includes a VXLAN message receiving module 21 , a VXLAN decapsulation module 22 , and a private network IP address parsing module 23, mapping table query module 24, and result output module 25; wherein:

VXLAN packet receiving module 21: Receive a VXLAN packet sent by a user terminal.

VXLAN decapsulation module 22: Perform VXLAN decapsulation on the VXLAN packet to obtain the original packet of the VXLAN packet.

Private network IP address parsing module 23: parses out the private network IP address of the user terminal from the original message;

Mapping information query module 24: query a preset VNI and private network IP address mapping table to obtain the mapping information between the private network IP address of the user terminal and the VNI of the user terminal.

Result output module 25: uniquely identify the user terminal according to the mapping information, and output the identification result.

Each functional module of the third embodiment corresponds to each step of the first embodiment, and the third embodiment can be understood with reference to the embodiment, and the third embodiment has the beneficial effects of the first embodiment.

Embodiment 4

Referring to FIG. 5, this embodiment discloses a device for identifying private network users, which includes each functional module of the third embodiment, and also includes a mapping table module 11, a VNI management module 12, and a VXLAN encapsulation module 13; wherein:

Mapping table module 11: preset VNI and private network IP address mapping table.

VNI management module 12: According to a preset VNI and private network IP address mapping table, allocate a corresponding VNI to each user terminal accessing the public network.

VXLAN encapsulation module 13: Perform VXLAN encapsulation according to the VNI of the original message sent by the user terminal from the private network to form a VXLAN message and forward it to the public network.

Each functional module of the fourth embodiment corresponds to each step of the second embodiment, and the fourth embodiment can be understood with reference to the second embodiment, and the fourth embodiment has the beneficial effects of the second embodiment.

Based on the detailed introduction of the method for identifying a private network user above, it can be understood that the above-mentioned method for identifying a private network user can be embodied as a service system as an execution carrier. The service system includes one or more processors, memory, and one or more application programs, wherein the one or more application programs are stored in the memory and configured to be executed by the processor to achieve the above A method for identifying private network users in any scheme. Also, the processor may be a single-core processor, a multi-core processor, or any processor that implements multi-node and/or multi-threading; memory includes but is not limited to: electrical connections with one or more wires, portable computer disks, hard disks , Random Access Memory (RAM), Read Only Memory (ROM), Erasable Programmable Read Only Memory (EPROM or Flash), Optical Fiber, Portable Compact Disc Read Only Memory (CD-ROM), Optical Storage Devices, Magnetic Memory components, or any suitable combination of the above.

In another embodiment, the above-mentioned method for identifying a private network user may only use a computer-readable storage medium as a carrier. A specific solution is: a computer-readable storage medium on which a computer program is stored, and the computer program is loaded by a processor to execute the steps in the above-mentioned method for identifying a private network user. Also, the computer-readable storage medium includes, but is not limited to, an electrical connection having one or more wires, a portable computer disk, a hard disk, random access memory (RAM), read only memory (ROM), erasable programmable Read-only memory (EPROM or flash memory), fiber optics, portable compact disk read only memory (CD-ROM), optical storage devices, magnetic storage devices, or any suitable combination of the above.

Only a part of the present invention has been described in detail above, and the purpose is to help understand the method of the present invention and its core idea; meanwhile, for those skilled in the art, according to the idea of the present invention, there will be For changes, in summary, the contents of this specification should not be construed as limiting the present invention.

Claims

A method for identifying private network users, comprising the following steps:

Receive the VXLAN packet sent by the user terminal;

Decapsulate the VXLAN message to obtain the original message of the VXLAN message;

Parse out the private network IP address of the user terminal from the original message;

query the preset VNI and private network IP address mapping table to obtain the mapping information between the private network IP address of the user terminal and the VNI of the user terminal;

The user terminal is uniquely identified according to the mapping information, and an identification result is output.
The method for identifying a private network user according to claim 1, wherein the step of receiving the VXLAN packet sent by the user terminal is specifically: receiving the VXLAN packet sent by the user terminal from the public network, and This step also includes:

Preset VNI and private network IP address mapping table;

Allocate the corresponding VNI to each user terminal accessing the public network according to the preset VNI and private network IP address mapping table;

The original packet sent by the user terminal from the private network is encapsulated by VXLAN according to its VNI to form a VXLAN packet and forwarded to the public network.
The method for identifying private network users according to claim 2, wherein each user terminal accessing the public network includes a user terminal accessing the network in a home broadband service.
The method for identifying private network users according to claim 3, wherein the step of uniquely identifying the user terminal according to the mapping information and outputting the identification result comprises: counting user traffic sources according to the uniquely identified user terminal.
The method for identifying a private network user according to any one of claims 1 to 4, wherein the structure of the VXLAN packet includes VXLAN encapsulation and an original packet in sequence from the outside to the inside; the structure of the VXLAN encapsulation starts from From outside to inside, it includes an outer Ethernet header, an outer IP header, an outer UDP header, and a VXLAN header in turn; the structure of the original message includes an inner Ethernet header, an inner IP header, and a payload sequentially from the outside to the inside; the inner The IP header has the private network IP address of the user terminal.
A device for identifying private network users, comprising a VXLAN message receiving module, a VXLAN decapsulation module, a private network IP address parsing module, a mapping table query module, and a result output module; wherein:

VXLAN packet receiving module: receives VXLAN packets sent by the user terminal;

VXLAN decapsulation module: decapsulates the VXLAN packet to obtain the original packet of the VXLAN packet;

Private network IP address parsing module: parses the private network IP address of the user terminal from the original message;

Mapping information query module: query the preset VNI and private network IP address mapping table to obtain the mapping information between the private network IP address of the user terminal and the user terminal VNI;

Result output module: uniquely identify the user terminal according to the mapping information, and output the identification result.
The device for identifying private network users according to claim 6, further comprising a mapping table module, a VNI management module, and a VXLAN encapsulation module; wherein:

Mapping table module: preset VNI and private network IP address mapping table;

VNI management module: According to the preset VNI and private network IP address mapping table, assign the corresponding VNI to each user terminal accessing the public network;

VXLAN encapsulation module: performs VXLAN encapsulation on the original packets sent by the user terminal from the private network according to its VNI to form VXLAN packets and forward them to the public network.
The device for identifying private network users according to claim 6 or 7, wherein the device is located on an access service system of a communication operator.
A service system, characterized in that the service system includes:

one or more processors;

memory; and

one or more application programs, wherein the one or more application programs are stored in the memory and configured to be executed by the processor to implement the identifying private network of any one of claims 1 to 5 user's method.
A computer-readable storage medium, characterized in that a computer program is stored thereon, and the computer program is loaded by a processor to execute the method for identifying a private network user according to any one of claims 1 to 5. step.