Service quality strategy and access control list association method and system

Abstract

The invention discloses a service quality strategy and access control list association method and system, and relates to the field of QoS. The method comprises the following steps that after a configuration platform obtains all sub-access control lists needing to be quoted by a service quality strategy, a mother access control list is formed according to all the sub-access control lists, and the configuration sequence of all the sub-access control lists in the mother access control list is matched with the service quality strategy; and associating the quality of service policy with the motheraccess control list. According to the invention, on the basis that the access control list does not need to be recreated, the purpose of separately quoting the access control list by the service quality strategy is realized; and the service quality strategy can be associated with a plurality of access control lists on the basis that the service quality strategy is not limited by hardware performance.

Description

technical field [0001] The present invention relates to the field of QoS (Quality of Service, quality of service), in particular to a method and system for associating a quality of service policy with an access control list. Background technique [0002] On the communication device, the quality of service policy (such as traffic matching policy, traffic passing policy, traffic denying policy, etc.) needs to refer to the access control list (the content in the table includes certain fields of the packets required by the specific matching policy, etc.) ). [0003] However, when the quality of service policy refers to the access control list, there are the following defects: [0004] (1) When the quality of service policy is used for performance statistics, the performance of the quality of service policy corresponds to the performance of the access control list referenced; but for the access control list, it often occurs that the quality of service policy and other services (...

AI Technical Summary

Problems solved by technology

[0004] (1) When the quality of service policy is used for performance statistics, the performance of the quality of service policy corresponds to the performance of the access control list referenced; but for the access control list, it often occurs that the quality of service policy and other services (such as interface attack defense services) ) at the same time, the performance statistics of the access control list is the sum of the performance of all referenced objects, not the performance statistics of the quality of service policy

[0005] In order to solve the above problems, it is necessary to re-create an access control list that is separately referenced by the service quality policy, but the work of creating an access control list is relatively difficult, not only the work efficiency is low, but also the error rate is high during creation. The access control list with more complex content is especially obvious

[0006] (2) When the quality of service policy refers to the access control list, it is necessary to associate the quality of service policy with the access control list. However, because each access control list associated with the quality of service policy will increase the load on the hardware (such as the chip) (that is, the quality of service Policies and access control lists are "hard" associations), so the number of access control lists associated with quality of service policies is limited by hardware performance; when quality of service policies need to associate multiple access control lists, hardware performance needs to be improved, which undoubtedly increases usage cost

Images