Method and system for realizing application differential guarantee

Abstract

The invention discloses a method and system for realizing application differential guarantee. The method comprises the following steps: an IDG client sending an L2TP (layer 2 tunneling protocol) tunnel application to an IDG gateway, wherein the L2TP tunnel application comprises an application account and password of a specific application; the IDG gateway requesting a L2TP AAA system to authenticate the application account and password; if the authentication is passed, distributing a specific address to the specific application; the IDG client transmitting uplink data traffic of the specific application to the IDG gateway through the L2TP tunnel; a core router routing the uplink data traffic to a CN2 carrier (Chinatelecom Next carrier network) based on a source address route-policy; an outlet router of the IDG routing downlink data traffic to the CN2 carrier based on a destination address route-policy; and the IDG gateway transmitting the downlink data traffic to the IDG client through the L2TP tunnel. The embodiment of the invention can meet the end-to-end differential guarantee demand of specific users and applications in the network.

Description

technical field [0001] The invention relates to communication technology, in particular to a method and system for realizing application differentiation guarantee. Background technique [0002] Currently, the smart pipe capability proposed by operators requires end-to-end differentiated guarantees in the network for specific Internet applications (eg, video calls, games, etc.). For the metropolitan area network and access network, quality of service (QoS) marking and queue scheduling are used to achieve guarantee. In the backbone network, Internet applications that need guarantee can be routed to China Telecom's next-generation bearer network (China Telecom Next Carrier Network, CNCN, referred to as CN2) bearer in the dedicated network to achieve security. At present, in order to distinguish specific applications of specific users, it is necessary to distinguish them through a two-dimensional parameter (source address, destination address), and correspondingly carry out QoS...

AI Technical Summary

Problems solved by technology

[0005] In order to realize the differentiated protection for specific users and specific applications, the existing technology can only realize the distinction of specific applications for specific users through the two-dimensional parameter routing strategy (source address, destination address), because the IP allocated for broadband users Addresses are scattered, and QoS marking or routing policies based on (source address, destination address) cannot be configured in advance in the network, and policy routing is performed based on the two-dimensional parameter (source address, destination address) to the egress router of the MAN and IDC Higher requirements are put forward, not only the network equipment of most mainstream manufacturers cannot support it, but also the complexity of dynamically configuring routing policies is very high, it cannot be deployed in the actual network, and the solution is difficult to implement, so it cannot meet the requirements for different users and applications in the network security needs

Images