Method and system for associating quality of service policy with access control list

Abstract

The invention discloses a method and system for associating service quality policies and access control lists, and relates to the field of QoS. The method includes the following steps: after the configuration platform obtains all child access control lists that need to be referenced by the quality of service policy, a parent access control list is formed according to all child access control lists, and the configuration sequence of all child access control lists in the parent access control list is related to the service Quality of policy matching; associates a quality of service policy with a parent access control list. The present invention can realize the purpose of separately referencing the access control list by the quality of service policy without recreating the access control list; it can also associate the quality of service policy with multiple access control lists without being limited by hardware performance .

Description

Technical field [0001] The present invention relates to the field of QoS (Quality of Service, Service Quality), which involves an association method and system for service quality policies and access control lists. Background technique [0002] On communication devices, service quality policies (such as traffic matching policies, traffic through policies, traffic rejection policies, etc.) need to reference access control lists (content in the table including the specific matching policy required by specific matching strategies, etc. . [0003] However, when the service quality policy references the access control list: there is the following defects: [0004] (1) When the service quality policy performs performance statistics, the performance of the service quality policy corresponds to the performance of the access control list of its references; however, for the access control list, the quality policy and other services are often occurred (such as interface anti-attack business...

AI Technical Summary

Problems solved by technology

[0004] (1) When the quality of service policy is used for performance statistics, the performance of the quality of service policy corresponds to the performance of the access control list referenced; but for the access control list, it often occurs that the quality of service policy and other services (such as interface attack defense services) ) at the same time, the performance statistics of the access control list is the sum of the performance of all referenced objects, not the performance statistics of the quality of service policy

[0005] In order to solve the above problems, it is necessary to re-create an access control list that is separately referenced by the service quality policy, but the work of creating an access control list is relatively difficult, not only the work efficiency is low, but also the error rate is high during creation. The access control list with more complex content is especially obvious

[0006] (2) When the quality of service policy refers to the access control list, it is necessary to associate the quality of service policy with the access control list. However, because each access control list associated with the quality of service policy will increase the load on the hardware (such as the chip) (that is, the quality of service Policies and access control lists are "hard" associations), so the number of access control lists associated with quality of service policies is limited by hardware performance; when quality of service policies need to associate multiple access control lists, hardware performance needs to be improved, which undoubtedly increases usage cost

Images