Method and system for controlling flow rate by utilizing access control list

Abstract

The invention relates to the field of data communication and discloses a method for controlling the flow rate by utilizing an access control list by aiming at the condition that the existing interchanger can only limit the message forwarding rate and cannot limit the total flow rate. According to the technical scheme, firstly, a message matching function of the access control list is utilized, meanwhile, a message number statistical function is combined, a volume bucket is defined, when the volume of the volume bucket reaches the specified threshold value, messages are controlled, and the message passing speed can be limited or the message passing is forbidden. The access control list is utilized for controlling the total number of the flow rate entering the interchanger in a certain time period, and clients can flexibly define the flow rate entering the interchanger. The invention also discloses a system for controlling the flow rate by utilizing the access control list. The method and the system provided by the invention have the advantages that according to different matched fields, the control based on ports, VLANs (virtual local area networks) or the whole equipment flow rate total number can be realized on the interchanger, and meanwhile, the flow rate total number can also be controlled in a combined way in modes such as data types and service types.

Description

technical field

[0001] The invention relates to network communication equipment in the field of data communication, in particular to a technology for controlling the total amount of data flow in a certain period of time by an access control list (ACL). Background technique

[0002] With the development of the Internet, the types of data in the customer network are more complex, and the interaction of large-capacity data such as video and voice greatly consumes the user's bandwidth.

[0003] In some application environments, it is necessary to control the traffic of a certain port or a virtual local area network (Virtual Local Area Network, VLAN for short) or even the entire switch. For example, in the campus network environment, the school wants to limit the students' online time. In general, each student can only use a fixed amount of traffic per month (campus network monthly subscription users). In the current typical networking environment, the switch is the network devi...

Images