Method and system for realizing multi-data center interconnection optimization based on SD-WAN

Abstract

The invention provides a method and system for realizing multi-data center interconnection optimization based on SD-WAN, and relates to the field of communication, and the method comprises the steps:1, enabling a cloud box of a branch mechanism and a cloud box of a data center to be connected to the Internet; 2, establishing two interconnections between the cloud box of the branch mechanism and the cloud box of the data center through the Internet and the backbone network; 3, establishing two BGP neighbors between the cloud box of the branch mechanism and the cloud box of the data center; 4,enabling the cloud box of the branch mechanism to monitor the quality of the interconnected network in real time and report the quality, and enabling a monitoring center of the backbone network to determine the priority of the interconnection according to the difference of the network quality and sets priority parameters to each BGP neighbor through the cloud box of the branch mechanism; and 5, interconnecting and accessing the application server of the data center by the host of the branch mechanism according to the priority. Compared with the special line interconnection, cost is lower, andthe interconnection optimization decision and the corresponding routing processing can be made in real time according to the quality of the interconnected network, so that the service experience is ensured.

Description

technical field [0001] The present invention relates to the field of communications, and in particular to an optimal implementation method and system for interconnecting multiple data centers based on SD-WAN. Background technique [0002] At present, the interconnection between branch offices and data centers is mainly based on IPsec (IP Security, IP security protocol) and private line interconnection; among them, IPsec is a three-way protocol developed by IETF (The Internet Engineering Task Force, Internet Engineering Task Force). Layer interconnection encryption protocol, providing high-quality, interoperable, cryptography-based security guarantees for data transmission on the Internet. IPsec-specific communication parties provide the following security services by adopting methods such as data encryption and data source authentication at the IP layer: [0003] 1. Data confidentiality: IPsec sender encrypts data packets before network transmission; [0004] 2. Data integ...

AI Technical Summary

Problems solved by technology

[0011] 1. The IP address of the branch office may not be fixed, so IPsec needs to be artificially established from time to time;

[0012] 2. IPsec is greatly affected by the quality of the Internet, especially in scenarios where it is deployed across network operators, which seriously affects service experience;

[0013] 3. The performance of IPSec equipment depends on the equipment itself, and vertical expansion cannot be achieved. When there are many equipment in branch offices, IPSec equipment will become a single point of danger;

[0014] 4. When multiple data centers and branches are interconnected, the GRE over IPsec solution cannot achieve fast routing switching, and can only be processed based on artificial routing;

[0016] 1. Private lines are expensive. If branches need private lines for backup at the same time, the price is higher, which is often unaffordable for enterprises;

[0017] 2. The construction and acquisition of private lines are based on the existing system of network operators, and the implementation period is relatively long, so capacity cannot be expanded on demand;

[0018] 3. In the private line interconnection scenario, network equipment is required for access, and the rapid switching of routes requires manual processing

Images