Universal traffic control method and system

Abstract

The invention relates to a universal automatic control method of network application traffic and a system thereof. The system comprises a network application feature base, a network application identifier, a policy rule base, an information extractor and a traffic control policy implementation device. Operation of the system comprises the following steps: a network application identification step, a related information extraction step and a traffic control policy implementation step. The system solves a problem that a traditional product is short of flexibility for network application traffic control, realizes real-time implementation of corresponding traffic control policy according to different rules in an actual network environment, can establish and implement proper traffic management policies according to actual requirements of user network condition, and has the characteristics of high speed, high accuracy and the like.

Description

technical field [0001] The invention relates to a method and a system for flow control in a network application process, which can be used in network management products and audit products, and belongs to the field of network technology. Background technique [0002] The network management system is widely used as an important means of network security protection. It is usually configured on the gateway to achieve optimal network efficiency through the configuration of the overall network internal architecture and applications. It realizes the monitoring and policy adjustment of the current network operation status, enables the smooth and normal operation of network services, avoids the abuse and waste of network resources, and ensures the normal operation of the network system. It is an effective method for enterprises to realize IT management and control. With the development of the network, more and more new applications appear in the current network environment, and thes...

AI Technical Summary

Problems solved by technology

However, the current network management products adopt a very single strategy for network application traffic control, such as using a single connection limit, allocating fixed bandwidth to each user, or using protocol analysis and feature matching to control specific applications in the network environment. Take hard blocking etc.

Although this single management strategy is simple to implement, it also faces many problems

First of all, single blocking is not conducive to the development of the network, and with the development of encryption and other technologies, single blocking technology becomes more and more unfeasible

In addition, a single connection number or bandwidth limitation will sometimes affect the normal use of the network, resulting in unreasonable utilization of network resources.

These shortcomings are mainly due to the fact that the control strategy is too single and cannot distinguish between normal use and abnormal use traffic.

Images