Network path exploration method, device, equipment and storage medium

Abstract

Embodiments of the present application provide a network path detection method, device, equipment and storage medium, comprising: according to the pre-recorded network topology information, finding network device and port information, issuing the pre-configured traffic detection rule to the network device, extending the IPoption field of the message based on the traffic detection rule, performing traffic path detection, obtaining the network device and port information through which the message flows, generating the traffic path topology graph corresponding to the traffic detection rule, determining the traffic path restoration result, and according to the traffic path restoration result, matching the preset alarm rule to perform fault alarm. The present application can simultaneously perform traffic path detection of different tenants in the public cloud by extending the IPoption field, generate traffic path topology information based on the traffic detection rule of multiple groups, monitor the tenant business in real time, trigger the alarm when there is a traffic interruption fault, determine the fault problem in time, and improve the user experience.

Description

Technical Field

[0001] This invention relates to the field of network communication technology, and in particular to a network path detection method, apparatus, device, and storage medium. Background Technology

[0002] With the continuous development of cloud computing technology, cloud service application scenarios are becoming increasingly diverse. As an important support for the development of cloud computing, cloud networks are crucial for timely detection and accurate location of problems through traffic probing. This also plays a key role in improving the user experience. Cloud network traffic probing refers to monitoring data flow, including the speed of outgoing and incoming data and the total traffic. Therefore, network traffic probing is essentially about managing and controlling network communication data packets.

[0003] Currently, common methods for traffic path detection include hardware probes, traffic mirroring protocol-based analysis, and SNMP-based traffic monitoring. However, given the characteristics of public cloud resource pools—multiple tenants, numerous forwarding nodes, and various underlay and overlay devices—hardware probes require dedicated network traffic hardware, increasing the cost of building new cloud resource pools and failing to provide comprehensive network traffic monitoring. Traffic mirroring protocol-based analysis only targets single links, similarly failing to meet the need for comprehensive network traffic monitoring. SNMP-based traffic monitoring can only collect traffic information from some devices and ports, and cannot meet the need for real-time monitoring of business traffic paths for different tenants on the cloud network. Consequently, cloud operators cannot proactively detect network path faults and often have to wait for customers to report problems before troubleshooting based on their business needs, impacting user experience. Summary of the Invention

[0004] The purpose of this invention is to provide a network path detection method, apparatus, device, and storage medium to solve the problem that existing technologies cannot meet the need for real-time monitoring of service traffic paths for different tenants on cloud networks, so as to achieve real-time path detection in cloud networks and quickly and accurately locate network faults of different tenants. The specific technical solution is as follows:

[0005] In a first aspect of this invention, a network path detection method is provided, the method comprising:

[0006] Based on the pre-entered network topology information, locate network devices and port information, and send the pre-configured traffic detection rules to the network devices;

[0007] Based on the traffic detection rules, the IP option field of the packet is extended to perform traffic path detection;

[0008] Obtain network device and port information through which the packet flows, generate a traffic path topology map corresponding to the traffic detection rule, and determine the traffic path reconstruction result;

[0009] Based on the traffic path reconstruction results, a fault alarm is generated by matching the preset alarm rules.

[0010] Optionally, the step of searching for network devices and port information based on pre-recorded network topology information and sending pre-configured traffic detection rules to the network devices includes:

[0011] Based on the network topology information, the network devices match the tuple information to determine the source port and destination port through which the traffic flows, wherein the tuple information includes source IP, destination IP, source port, and destination port;

[0012] Configure the traffic detection rules for each tenant in the public cloud based on the source and destination ports through which the traffic flows;

[0013] The traffic detection rules are distributed to the network devices via network configuration protocols or network security protocols.

[0014] Optionally, the step of extending the IP option field of the packet based on the traffic probing rules to perform traffic path probing includes:

[0015] Add the VIN of each tenant in the public cloud, the ID of the traffic probing rule, and the packet sequence number SN to the IP option field of the packet;

[0016] Based on the expanded message, the network device configured with traffic tagging is identified, and traffic path probing is performed on the network device configured with traffic tagging in parallel.

[0017] Optionally, the step of determining the network device configured with traffic marking based on the expanded message, and performing traffic path probing on the network device configured with traffic marking in parallel, includes:

[0018] Based on the expanded message, east-west traffic and north-south traffic are traffic-tagged to determine the network devices configured for traffic tagging;

[0019] The traffic markers for east-west traffic include the access point of the cloud packet and the customer virtual machine point, while the traffic markers for north-south traffic include the dedicated line access port and the virtual interaction software corresponding to the cloud host.

[0020] Optionally, after determining the network device configured with traffic marking based on the expanded message and performing traffic path probing on the network device configured with traffic marking in parallel, the method further includes:

[0021] Record the message sequence number (SN) to determine if packet loss has occurred;

[0022] In the absence of packet loss, the number of currently processed packets is counted based on the difference between the sequence number of the currently processed packet and the previously received packet, and stored as traffic statistics information;

[0023] If the counted message sequence number SN reaches a preset threshold, the message sequence number SN is stored as historical traffic statistics information.

[0024] Optionally, obtaining the network devices and port information through which the packet flows, generating a traffic path topology map corresponding to the traffic detection rule, and determining the traffic path reconstruction result includes:

[0025] Based on the traffic statistics information corresponding to each traffic probing rule obtained periodically, the packet traffic path is determined;

[0026] Based on the packet traffic path, determine the starting network device information through which the packet flows;

[0027] Based on the connection relationships between network devices and ports, the intermediate device information of the packet traffic path is associated to generate a traffic path topology map corresponding to each traffic detection rule.

[0028] Optionally, obtaining the network devices and port information through which the packet flows, generating a traffic path topology map corresponding to the traffic detection rule, and determining the traffic path reconstruction result includes:

[0029] Obtain traffic statistics information of the network devices and ports through which the packets flow, wherein the traffic statistics information includes the number of packets received by the network devices and ports;

[0030] Based on the traffic statistics, the packet forwarding status of network devices and ports within a preset time period is generated, and the traffic path reconstruction result is determined.

[0031] Optionally, the step of matching preset alarm rules to generate a fault alarm based on the traffic path reconstruction result includes:

[0032] Based on the traffic path reconstruction results, query the traffic statistics information of the traffic path;

[0033] Based on the traffic statistics information of the traffic path, match the preset alarm rules;

[0034] When matching the preset alarm rules, the alarm type is determined, wherein the alarm type includes generating an alarm and recovering an alarm;

[0035] If the alarm type is determined to be the alarm generated, an alarm report is triggered to generate a fault alarm;

[0036] If the alarm type is determined to be the recovery alarm, query the alarm reporting list and send alarm information to report the fault.

[0037] In a second aspect of the invention, a network path detection device is also provided, the device comprising:

[0038] The network topology information module is used to locate network devices and port information based on pre-entered network topology information, and to send pre-configured traffic detection rules to the network devices.

[0039] The traffic path detection module is used to expand the IP option field of the packet based on the traffic detection rules to perform traffic path detection;

[0040] The traffic path restoration module is used to obtain network devices and port information through which the packet flows, generate a traffic path topology map corresponding to the traffic detection rule, and determine the traffic path restoration result.

[0041] The fault alarm module is used to perform fault alarms by matching preset alarm rules with the traffic path reconstruction results.

[0042] Optionally, the network topology information module includes:

[0043] The matching information submodule is used to match tuple information based on the network devices in the network topology information to determine the source port and destination port through which the traffic flows, wherein the tuple information includes source IP, destination IP, source port, and destination port;

[0044] The configuration rules submodule is used to configure the traffic detection rules for each tenant in the public cloud based on the source port and destination port through which the traffic flows.

[0045] The sending rules submodule is used to send the traffic probing rules to the network device via a network configuration protocol or a network security protocol.

[0046] Optionally, the traffic path detection module includes:

[0047] The message processing submodule is used to add the VIN of each tenant in the public cloud, the ID of the traffic probing rule, and the message sequence number SN to the IP option field of the message;

[0048] The path detection submodule is used to determine the network devices configured with traffic tags based on the expanded message, and to perform traffic path detection on the network devices configured with traffic tags in parallel.

[0049] Optionally, the detection path submodule includes:

[0050] A traffic labeling unit is used to label east-west traffic and north-south traffic based on the expanded message, and to determine the network device configured with traffic labeling.

[0051] The traffic markers for east-west traffic include the access point of the cloud packet and the customer virtual machine point, while the traffic markers for north-south traffic include the dedicated line access port and the virtual interaction software corresponding to the cloud host.

[0052] Optionally, the traffic path detection module further includes:

[0053] The message recording submodule is used to record the message sequence number (SN) of the message to determine whether packet loss has occurred.

[0054] The first storage submodule is used to count the currently processed packets based on the difference between the sequence number of the currently processed packet and the previously received packet, and store the count as traffic statistics information, in the absence of packet loss.

[0055] The second storage submodule is used to store the message sequence number SN as historical traffic statistics information if the statistically counted message sequence number SN reaches a preset threshold.

[0056] Optionally, the traffic path restoration module includes:

[0057] The path determination submodule is used to determine the packet traffic path based on the traffic statistics information corresponding to each traffic probe rule obtained periodically.

[0058] The information determination submodule is used to determine the starting network device information through which the packet flows, based on the packet traffic path.

[0059] The generation submodule is used to generate a traffic path topology map corresponding to each traffic detection rule by associating intermediate device information with the connection relationship between network devices and ports and the traffic path of the packet.

[0060] Optionally, the traffic path restoration module includes:

[0061] The information acquisition submodule is used to acquire traffic statistics information of the network devices and ports through which the packets flow, wherein the traffic statistics information includes the number of packets received by the network devices and ports;

[0062] The result determination submodule is used to generate the packet forwarding status of network devices and ports within a preset time period based on the traffic statistics information, and to determine the traffic path reconstruction result.

[0063] Optionally, the fault alarm module includes:

[0064] The query information submodule is used to query traffic statistics information of the traffic path based on the traffic path reconstruction result;

[0065] The matching alarm submodule is used to match preset alarm rules based on the traffic statistics information of the traffic path;

[0066] An alarm determination submodule is used to determine the alarm type when matching the preset alarm rules, wherein the alarm type includes generating an alarm and recovering an alarm;

[0067] The first alarm submodule is used to trigger alarm reporting and issue a fault alarm if the alarm type is determined to be the alarm type mentioned above.

[0068] The second alarm submodule is used to query the alarm reporting list and send alarm information to issue a fault alarm if the alarm type is determined to be the recovery alarm.

[0069] In a third aspect of the present invention, a communication device is also provided, comprising: a transceiver, a memory, a processor, and a program stored in the memory and executable on the processor;

[0070] The processor is configured to read a program from the memory and execute the network path detection method described in any of the first aspects above.

[0071] In a fourth aspect of the invention, a computer-readable storage medium is also provided, wherein instructions are stored therein, which, when executed on a computer, cause the computer to perform any of the network path detection methods described in the first aspect.

[0072] The network path detection method provided in this invention locates network devices and port information based on pre-recorded network topology information, distributes pre-configured traffic detection rules to network devices, extends the IP option field of packets based on the traffic detection rules, performs traffic path detection, obtains network device and port information through which packets flow, generates a traffic path topology map corresponding to the traffic detection rules, determines the traffic path reconstruction result, and matches preset alarm rules to trigger fault alarms based on the traffic path reconstruction result. This invention, by extending the IP option field, can simultaneously perform traffic path detection for different tenants within a public cloud. Based on tuple-based traffic detection rules, it generates traffic path topology information for real-time monitoring of tenant services, without requiring additional hardware probe devices, reducing costs. When a traffic interruption fault occurs, an alarm is triggered, promptly identifying the fault and improving user experience. Attached Figure Description

[0073] To more clearly illustrate the technical solutions in the embodiments of the present invention or the prior art, the accompanying drawings used in the description of the embodiments or the prior art will be briefly introduced below.

[0074] Figure 1A flowchart illustrating the steps of a network path detection method provided in an embodiment of the present invention;

[0075] Figure 2 yes Figure 1 The flowchart of step 101 of the network path detection method provided in this embodiment of the invention is shown below;

[0076] Figure 3 yes Figure 1 The flowchart of step 102 of the network path detection method provided in this embodiment of the invention is shown below;

[0077] Figure 4 yes Figure 1 The flowchart of step 103 of the network path detection method provided in this embodiment of the invention is shown below;

[0078] Figure 5 yes Figure 1 The flowchart of step 104 of the network path detection method provided in this embodiment of the invention is shown below;

[0079] Figure 6 This is a schematic diagram illustrating an application scenario of a network path detection method provided in an embodiment of the present invention;

[0080] Figure 7 yes Figure 1 The diagram shown is a schematic representation of the packets in the network path probing method provided in this embodiment of the application.

[0081] Figure 8 This is a schematic diagram of the structure of a network path detection device provided in an embodiment of the present invention;

[0082] Figure 9 This is a schematic diagram of the structure of a communication device provided in an embodiment of the present invention. Detailed Implementation

[0083] To make the objectives, technical solutions, and advantages of the embodiments of the present invention clearer, the various embodiments of the present invention will be described in detail below with reference to the accompanying drawings. However, those skilled in the art will understand that many technical details are presented in the various embodiments of the present invention to facilitate a better understanding of this application. However, the technical solutions claimed in this application can be implemented even without these technical details and various changes and modifications based on the following embodiments. The division of the various embodiments below is for ease of description and should not constitute any limitation on the specific implementation of the present invention. The various embodiments can be combined with and referenced by each other without contradiction.

[0084] Reference Figure 1 The diagram illustrates a flowchart of a network path detection method provided by an embodiment of the present invention. The method may include:

[0085] Step 101: Based on the pre-entered network topology information, locate network devices and port information, and send the pre-configured traffic detection rules to the network devices.

[0086] In this embodiment, based on the characteristics of cloud networks such as multi-tenancy, overlay and underlay collaboration, and separation of control plane and service plane, in order to realize traffic path detection of all tenants in the cloud network resource pool and quickly locate cloud network faults, users can add pre-configured traffic detection rules through the management platform according to business requirements. The management platform searches for network device and port information based on the pre-entered network topology information corresponding to each network device and sends the pre-configured traffic detection rules to the network devices.

[0087] It should be noted that in this embodiment, the management platform establishes a communication connection with the SDN control system. The management platform is a comprehensive software suite with integrated tools used to monitor and control cloud computing resources. The management platform is deployed as a virtual machine (VM) consisting of a database and servers in the existing cloud environment. The servers communicate with the application programming interface (API) to connect to the database and the virtual resources stored in the cloud. The database collects information about how the virtual infrastructure is operating and sends the analysis results to a display interface where operators can analyze cloud performance. The SDN controller, in Software Defined Network (SDN), is the primary centralized controller that centrally controls the applications in the overlay network, responsible for traffic control to ensure an intelligent network.

[0088] For example: Figure 6 The diagram illustrates a traffic probing scenario. In a cloud computing network with numerous tenants, the management platform performs public cloud network probing by tagging traffic on various network devices and ports, collecting traffic statistics, and analyzing the data. Specifically, the management platform locates the corresponding computing nodes based on cloud host information, identifies the physical devices and ports through which the traffic flows based on the recorded network topology information, and generates corresponding traffic probing rules which are then sent to the appropriate devices.

[0089] In this embodiment, the management platform automatically configures traffic detection rules based on the entered network topology and distributes the pre-configured traffic detection rules to network devices. The operation is simple and the configuration process is simplified.

[0090] Step 102: Based on the traffic probing rules, extend the IP option field of the packet to perform traffic path probing.

[0091] It should be noted that some commonly used link detection methods in existing technologies, such as ping and trace, are generally manually triggered by operations and maintenance personnel, and cannot achieve real-time detection of tenant traffic paths. Therefore, this invention, based on traffic detection rules, extends the IP option field to achieve real-time detection of the path through which business traffic flows without changing the existing resource pool network topology.

[0092] Specifically, refer to Figure 7 The packet information shown includes: Type (used to copy to all fragments), Length (representing the total length of the IP option in bytes, with the IP option field length set to 0-31), Rule ID (representing the ID of the configured traffic probe rule), VNI (VxLAN ID corresponding to the tenant, unique for each tenant within the same public cloud resource pool, used to distinguish traffic statistics for different tenants, with a maximum of 65536 traffic probe rules per tenant), and Sequence number (SN). For packets marked with different Rule IDs, the sequence number SN is incremented by 1. When the counted sequence number SN reaches the preset threshold of 0xFFFFFFFF, it rolls back to the initial value of 0x00000000 and restarts the count.

[0093] In this embodiment, based on traffic probing rules, the IP option field of the packet is extended. By adding the tenant's VNI to the packet, the configuration of traffic statistics rules can be greatly simplified. Adding the ID of the traffic probing rule can support the concurrent traffic path probing needs of multiple services of different tenants. Adding the packet sequence number SN can be used to support the statistical analysis of packet loss.

[0094] Furthermore, based on the expanded messages, east-west traffic and north-south traffic are tagged to determine the network devices configured for traffic tagging; among them, the traffic tagging points for east-west traffic include the access point of the cloud message and the customer virtual machine point, and the traffic tagging points for north-south traffic include the leased line access port and the virtual interaction software corresponding to the cloud host.

[0095] In this embodiment, the packets primarily probe east-west and north-south traffic. East-west traffic refers to traffic exchanged between servers within the data center, while north-south traffic refers to traffic exchanged between external users and internal servers. East-west traffic is marked at the access point of the inbound packet and the customer's virtual machine point; north-south traffic is marked at the Bleff inbound port, the leased line access POP inbound port, and the virtual interaction software corresponding to the cloud host, etc. Since the cloud network uses VXLAN encapsulation, VXLAN encapsulation can be enabled, copying the inner IP OPTION value to the outer VXLAN packet header, greatly simplifying traffic statistics and improving packet forwarding efficiency.

[0096] Step 103: Obtain network device and port information through which the packet flows, generate a traffic path topology map corresponding to the traffic probing rules, and determine the traffic path reconstruction result.

[0097] It should be noted that, in this embodiment of the application, the management platform obtains the network devices and port information through which the packet flows, outputs the topology information of the packet from the probe node to the target IP according to the traffic probing rules, completes the traffic probing from the probe node to the target IP, generates the traffic path topology map corresponding to the traffic probing rules, and can determine the traffic path reconstruction result based on the traffic path topology map.

[0098] Specifically, the management platform analyzes the traffic forwarding path based on the traffic statistics information corresponding to each detection rule, extracts the network devices and port information through which the packets flow, finds the starting device information, and finally associates the intermediate device information according to the connection relationship between different ports of the device, and completes it if it is incomplete; it generates a traffic path topology map corresponding to each traffic detection rule, aggregates traffic statistics for the cluster or primary and backup forwarding nodes, and displays the number of packets received by each forwarding node through the traffic path topology map, which can reconstruct the traffic forwarding situation in recent times and determine the traffic path reconstruction result.

[0099] Step 104: Based on the traffic path reconstruction results, match the preset alarm rules to generate a fault alarm.

[0100] It should be noted that in this embodiment, based on the traffic path reconstruction results, the traffic statistics information of the traffic path is queried, and based on the traffic statistics information of the traffic path, preset alarm rules are matched. These preset alarm rules are set by the user to define monitoring targets and notification policies for cloud hosts, so as to promptly understand the cloud network operation status and thus serve as an early warning. This embodiment does not specifically limit the method for determining the preset alarm rules.

[0101] Specifically, based on the preset alarm rules, the alarm type is determined. Alarm types include generating alarms and recovery alarms. If the alarm type is determined to be generating an alarm, an alarm report is triggered to issue a fault alarm. If the alarm type is determined to be recovering an alarm, the alarm reporting list is queried, and an alarm message is sent to issue a fault alarm. It should be noted that an alarm is generated when traffic statistics show packet data interruption or loss; a recovery alarm is reported when traffic path detection is successful. The management platform matches alarm rules based on the traffic path reconstruction results, determines whether to issue an alarm or a recovery alarm based on the matching results, queries the corresponding alarm notification group, and sends notifications to relevant parties. For critical alarms, notifications will continue until the alarm is recovered.

[0102] In this embodiment, by analyzing the actual flow path through the traffic statistics information of all devices in the resource pool network, network faults can be quickly located. Operation and maintenance personnel can intuitively discover problems through the traffic path displayed graphically on the management platform.

[0103] The network path detection method provided in this invention locates network devices and port information based on pre-recorded network topology information, distributes pre-configured traffic detection rules to network devices, extends the IP option field of packets based on the traffic detection rules, performs traffic path detection, obtains network device and port information through which packets flow, generates a traffic path topology map corresponding to the traffic detection rules, determines the traffic path reconstruction result, and matches preset alarm rules to trigger fault alarms based on the traffic path reconstruction result. This invention, by extending the IP option field, can simultaneously perform traffic path detection for different tenants within a public cloud. Based on tuple-based traffic detection rules, it generates traffic path topology information for real-time monitoring of tenant services, without requiring additional hardware probe devices, reducing costs. When a traffic interruption fault occurs, an alarm is triggered, promptly identifying the fault and improving user experience.

[0104] Furthermore, referring to Figure 2 , Figure 2 yes Figure 1 The flowchart of step 101 of the network path detection method provided in this embodiment of the invention includes:

[0105] Step 1011: Based on the network devices in the network topology information, match the tuple information to determine the source port and destination port through which the traffic flows. The tuple information includes the source IP, destination IP, source port, and destination port.

[0106] Step 1012: Configure traffic detection rules for each tenant in the public cloud based on the source and destination ports through which the traffic flows.

[0107] Step 1013: Distribute traffic probing rules to network devices via network configuration protocols or network security protocols.

[0108] It should be noted that in steps 1011-1013 above, when a network device and a server establish a TCP connection, a unique TCP connection is determined by a four-tuple. Based on the network topology information, the network device matches the tuple information to determine the source port and destination port through which the traffic flows. This embodiment uses a four-tuple as an example for explanation. The four-tuple information includes the source IP, destination IP, source port, and destination port. Based on the source port and destination port through which the traffic flows, traffic detection rules are configured for each tenant in the public cloud. The traffic detection rules are then distributed to the network device through a network configuration protocol or a network security protocol.

[0109] Users can add traffic probing rules through the management platform according to business requirements, match four-tuples to select cloud hosts and services to be probed, and set the probing time period, number of probe packets, etc. The management platform communicates with the SDN control system, and finds the corresponding computing nodes in real time based on VPCID and cloud host information; based on the recorded network topology information, it finds the physical devices and ports through which the corresponding traffic flows, generates the corresponding traffic probing rules and traffic statistics rules, and distributes them to the corresponding devices via netconf or SSH.

[0110] It should be noted that the Network Configuration Protocol (NMP) provides a set of protocols for communication between the management platform and network devices, enabling operations such as distributing and modifying configurations for remote devices. SSH (Secure Shell) is a network security protocol that uses encryption and authentication mechanisms to achieve secure access and file transfer. In this embodiment, the management platform distributes traffic probing rules to network devices through the NMP or network security protocols.

[0111] The network path detection method provided in this invention, compared to existing technologies, eliminates the need for additional hardware probe devices and separate probe packets, reducing costs and improving public network bandwidth utilization. Furthermore, the management platform generates and configures traffic detection rules based on the entered network topology information, simplifying the configuration process.

[0112] Furthermore, referring to Figure 3 , Figure 3 yes Figure 1 The flowchart of step 102 of the network path detection method provided in this embodiment of the invention includes:

[0113] Step 1021: Add the VIN of each tenant in the public cloud, the ID of the traffic probing rule, and the packet sequence number SN to the IP option field of the packet.

[0114] It should be noted that, in this embodiment of the application, by extending the IP option field to SN+VNI+ID, traffic path detection for different tenant services can be performed simultaneously without interference, thus achieving coordinated traffic detection between overlay and underlay.

[0115] Step 1022: Based on the expanded message, determine the network device configured with traffic tagging, and perform traffic path probing on the network device configured with traffic tagging in parallel.

[0116] Further, step 1022 may include: performing traffic labeling on east-west traffic and north-south traffic based on the expanded message, and determining the network device configured for traffic labeling;

[0117] The traffic markers for east-west traffic include the access point of the incoming cloud message and the customer virtual machine point, while the traffic markers for north-south traffic include the dedicated line access port and the virtual interactive software corresponding to the cloud host.

[0118] In this embodiment, the traffic markers for east-west traffic are placed at the access point of the inbound cloud packet and the customer virtual machine point; the traffic markers for north-south traffic are the Bleff inbound port, the leased line access POP inbound port, and the virtual interactive software corresponding to the cloud host, etc. Since the cloud network has VXLAN encapsulation, VXLAN encapsulation can be enabled, copying the inner IP OPTION value to the outer VXLAN packet header, greatly simplifying traffic statistics and improving packet forwarding efficiency.

[0119] Furthermore, referring to Figure 4 , Figure 4 yes Figure 1 The flowchart of step 103 of the network path detection method provided in this embodiment of the invention includes:

[0120] Step 1031: Determine the packet traffic path based on the traffic statistics information corresponding to each traffic detection rule obtained periodically.

[0121] Step 1032: Determine the starting network device information through which the packet flows based on the packet traffic path.

[0122] Step 1033: Based on the connection relationship between network devices and ports, associate the intermediate device information of the packet traffic path and generate a traffic path topology map corresponding to each traffic detection rule.

[0123] It should be noted that the management platform analyzes the traffic forwarding path based on the traffic statistics information corresponding to each probe rule obtained periodically. First, it extracts the device and port information through which the corresponding packets flow, then finds the starting device information, and finally associates the intermediate device information based on the connection relationships between network devices and ports. If incomplete, it completes the information to generate a traffic path topology map corresponding to each traffic probe rule. It aggregates traffic statistics for the cluster or primary / backup forwarding nodes and displays the number of packets received by each forwarding node. Based on historical statistics, it can reconstruct the traffic forwarding situation over a recent period.

[0124] In some embodiments, after determining the network device configured with traffic tags based on the expanded message and performing traffic path probing on the network device configured with traffic tags in parallel, the method further includes:

[0125] Record the message sequence number (SN) to determine if packet loss has occurred;

[0126] In the absence of packet loss, the number of currently processed packets is counted based on the difference between the sequence number of the currently processed packet and the previously received packet, and stored as traffic statistics information;

[0127] If the counted message sequence number (SN) reaches a preset threshold, the message sequence number (SN) will be stored as historical traffic statistics.

[0128] It should be noted that all network devices and virtual forwarding devices on the public cloud resource pool have IP option-based traffic statistics enabled by default. During traffic statistics, a mask can be used to record the sequence number (SN) of the counted packets to determine if packet loss has occurred. When the SN is 0xffffffff, it indicates that the count needs to be restarted. To address the issue of packets being dropped after the SN = 0xffffffff, the difference between the SN of the currently processed packet and the previously received packet is used to determine whether the packet belongs to a new sequence, thus avoiding errors in traffic statistics. If the counted SN reaches a preset threshold, the SN is stored as historical traffic statistics information. In this embodiment, the preset threshold can be determined based on the SN length in the IP option field, which will not be elaborated further here.

[0129] Furthermore, referring to Figure 5 , Figure 5 yes Figure 1 The flowchart of step 104 of the network path detection method provided in this embodiment of the invention includes:

[0130] Step 1041: Based on the traffic path reconstruction results, query the traffic statistics information of the traffic path;

[0131] Step 1042: Match preset alarm rules based on traffic statistics information of traffic paths;

[0132] Step 1043: Under the condition of matching the preset alarm rules, determine the alarm type, wherein the alarm type includes generating alarm and recovering alarm;

[0133] Step 1044: If the alarm type is determined to be alarm generation, trigger alarm reporting to generate a fault alarm;

[0134] Step 1045: If the alarm type is determined to be a recovery alarm, query the alarm reporting list and send alarm information to report the fault.

[0135] It should be noted that in steps 1041-1045, the management platform matches alarm rules based on the results of traffic path reconstruction, determines whether to issue an alarm or restore the alarm based on the matching results, queries the corresponding alarm notification group, and sends a notification to the relevant parties.

[0136] Specifically, in this embodiment, based on the traffic path reconstruction results, the traffic statistics information of the traffic path is queried, and a preset alarm rule is matched. If the preset alarm rule is matched, the alarm type is determined. The alarm type includes generating an alarm and recovering an alarm. If the alarm type is determined to be generating an alarm, an alarm report is triggered to issue a fault alarm. If the alarm type is determined to be recovering an alarm, the alarm report list is queried, and an alarm message is sent to issue a fault alarm. That is, an alarm is generated when the traffic statistics information shows that the packet data is interrupted or lost; when the traffic path is successfully detected, a recovery alarm is reported. The management platform matches the alarm rule based on the traffic path reconstruction results, determines whether to issue an alarm or a recovery alarm based on the matching results, queries the corresponding alarm notification group, and sends a notification to the relevant parties. For critical alarms, notifications will continue until the alarm is recovered.

[0137] In this embodiment of the invention, the actual flow path is analyzed by using the traffic statistics information of all devices in the resource pool to quickly locate network faults. Operation and maintenance personnel can intuitively discover problems through the traffic path displayed graphically on the management platform. When there is a traffic interruption fault, an alarm is triggered to promptly identify the fault and improve the user experience.

[0138] Reference Figure 8 The diagram illustrates the structure of a network path detection device provided in an embodiment of the present invention. The device may include:

[0139] The network topology information module 201 is used to find network device and port information based on the pre-entered network topology information and send the pre-configured traffic detection rules to the network devices.

[0140] The traffic path detection module 202 is used to expand the IP option field of the packet based on the traffic detection rules to perform traffic path detection;

[0141] The traffic path restoration module 203 is used to obtain network devices and port information through which the packet flows, generate a traffic path topology map corresponding to the traffic detection rule, and determine the traffic path restoration result.

[0142] The fault alarm module 204 is used to perform fault alarms by matching preset alarm rules based on the traffic path restoration results.

[0143] Furthermore, the network topology information module 201 includes:

[0144] The matching information submodule is used to match tuple information based on the network devices in the network topology information to determine the source port and destination port through which the traffic flows, wherein the tuple information includes source IP, destination IP, source port, and destination port;

[0145] The configuration rules submodule is used to configure the traffic detection rules for each tenant in the public cloud based on the source port and destination port through which the traffic flows.

[0146] The sending rules submodule is used to send the traffic probing rules to the network device via a network configuration protocol or a network security protocol.

[0147] Furthermore, the traffic path detection module 202 includes:

[0148] The message processing submodule is used to add the VIN of each tenant in the public cloud, the ID of the traffic probing rule, and the message sequence number SN to the IP option field of the message;

[0149] The path detection submodule is used to determine the network devices configured with traffic tags based on the expanded message, and to perform traffic path detection on the network devices configured with traffic tags in parallel.

[0150] Furthermore, the detection path submodule includes:

[0151] A traffic labeling unit is used to label east-west traffic and north-south traffic based on the expanded message, and to determine the network device configured with traffic labeling.

[0152] The traffic markers for east-west traffic include the access point of the cloud packet and the customer virtual machine point, while the traffic markers for north-south traffic include the dedicated line access port and the virtual interaction software corresponding to the cloud host.

[0153] Furthermore, the traffic path detection module 202 also includes:

[0154] The message recording submodule is used to record the message sequence number (SN) of the message to determine whether packet loss has occurred.

[0155] The first storage submodule is used to count the currently processed packets based on the difference between the sequence number of the currently processed packet and the previously received packet, and store the count as traffic statistics information, in the absence of packet loss.

[0156] The second storage submodule is used to store the message sequence number SN as historical traffic statistics information if the statistically counted message sequence number SN reaches a preset threshold.

[0157] Furthermore, the traffic path restoration module 203 includes:

[0158] The path determination submodule is used to determine the packet traffic path based on the traffic statistics information corresponding to each traffic probe rule obtained periodically.

[0159] The information determination submodule is used to determine the starting network device information through which the packet flows, based on the packet traffic path.

[0160] The generation submodule is used to generate a traffic path topology map corresponding to each traffic detection rule by associating intermediate device information with the connection relationship between network devices and ports and the traffic path of the packet.

[0161] Furthermore, the traffic path restoration module 203 includes:

[0162] The information acquisition submodule is used to acquire traffic statistics information of the network devices and ports through which the packets flow, wherein the traffic statistics information includes the number of packets received by the network devices and ports;

[0163] The result determination submodule is used to generate the packet forwarding status of network devices and ports within a preset time period based on the traffic statistics information, and to determine the traffic path reconstruction result.

[0164] Furthermore, the fault alarm module 204 includes:

[0165] The query information submodule is used to query traffic statistics information of the traffic path based on the traffic path reconstruction result;

[0166] The matching alarm submodule is used to match preset alarm rules based on the traffic statistics information of the traffic path;

[0167] An alarm determination submodule is used to determine the alarm type when matching the preset alarm rules, wherein the alarm type includes generating an alarm and recovering an alarm;

[0168] The first alarm submodule is used to trigger alarm reporting and issue a fault alarm if the alarm type is determined to be the alarm type mentioned above.

[0169] The second alarm submodule is used to query the alarm reporting list and send alarm information to issue a fault alarm if the alarm type is determined to be the recovery alarm.

[0170] The network path detection device provided in this invention locates network devices and port information based on pre-recorded network topology information, distributes pre-configured traffic detection rules to the network devices, extends the IP option field of the packet based on the traffic detection rules, performs traffic path detection, obtains the network devices and port information through which the packet flows, generates a traffic path topology map corresponding to the traffic detection rules, determines the traffic path reconstruction result, and matches preset alarm rules to trigger fault alarms based on the traffic path reconstruction result. This invention, by extending the IP option field, can simultaneously perform traffic path detection for different tenants within the public cloud. Based on tuple-based traffic detection rules, it generates traffic path topology information for real-time monitoring of tenant services, without requiring additional hardware probe devices, reducing costs. When a traffic interruption fault occurs, an alarm is triggered, promptly identifying the fault and improving user experience.

[0171] This invention also provides a communication device, such as... Figure 9 As shown, it includes a processor 301, a communication interface 302, a memory 303, and a communication bus 304, wherein the processor 301, the communication interface 302, and the memory 303 communicate with each other through the communication bus 304.

[0172] Memory 303 is used to store computer programs;

[0173] When processor 301 executes the program stored in memory 303, it can perform the following steps:

[0174] Based on the pre-entered network topology information, the system locates network devices and port information, distributes pre-configured traffic probing rules to network devices, expands the IP option field of the packet based on the traffic probing rules, performs traffic path probing, obtains the network devices and port information through which the packet flows, generates a traffic path topology map corresponding to the traffic probing rules, determines the traffic path restoration result, and matches the preset alarm rules to perform fault alarms based on the traffic path restoration result.

[0175] The communication bus mentioned above can be a Peripheral Component Interconnect (PCI) bus or an Extended Industry Standard Architecture (EISA) bus, etc. This communication bus can be divided into address bus, data bus, control bus, etc. For ease of illustration, only one thick line is used to represent it in the diagram, but this does not mean that there is only one bus or one type of bus.

[0176] The communication interface is used for communication between the aforementioned terminal and other devices.

[0177] The memory may include random access memory (RAM) or non-volatile memory, such as at least one disk storage device. Optionally, the memory may also be at least one storage device located remotely from the aforementioned processor.

[0178] The processors mentioned above can be general-purpose processors, including central processing units (CPUs), network processors (NPs), etc.; they can also be digital signal processors (DSPs), application-specific integrated circuits (ASICs), field-programmable gate arrays (FPGAs), or other programmable logic devices, discrete gate or transistor logic devices, or discrete hardware components.

[0179] In another embodiment of the present invention, a computer-readable storage medium is also provided, which stores instructions that, when executed on a computer, cause the computer to perform any of the network path detection methods described in the above embodiments.

[0180] In another embodiment of the present invention, a computer program product containing instructions is also provided, which, when run on a computer, causes the computer to execute any of the network path detection methods described in the above embodiments.

[0181] In the above embodiments, implementation can be achieved entirely or partially through software, hardware, firmware, or any combination thereof. When implemented using software, it can be implemented entirely or partially in the form of a computer program product. The computer program product includes one or more computer instructions. When the computer program instructions are loaded and executed on a computer, all or part of the processes or functions described in the embodiments of the present invention are generated. The computer can be a general-purpose computer, a special-purpose computer, a computer network, or other programmable device. The computer instructions can be stored in a computer-readable storage medium or transmitted from one computer-readable storage medium to another. For example, the computer instructions can be transmitted from one website, computer, server, or data center to another website, computer, server, or data center via wired (e.g., coaxial cable, fiber optic, digital subscriber line (DSL)) or wireless (e.g., infrared, wireless, microwave, etc.) means. The computer-readable storage medium can be any available medium that a computer can access or a data storage device such as a server or data center that integrates one or more available media. The available medium can be a magnetic medium (e.g., floppy disk, hard disk, magnetic tape), an optical medium (e.g., DVD), or a semiconductor medium (e.g., solid state disk (SSD)).

[0182] It should be noted that, in this document, relational terms such as "first" and "second" are used only to distinguish one entity or operation from another, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Furthermore, the terms "comprising," "including," or any other variations thereof are intended to cover non-exclusive inclusion, such that a process, method, article, or apparatus that comprises a list of elements includes not only those elements but also other elements not expressly listed, or elements inherent to such a process, method, article, or apparatus. Without further limitations, an element defined by the phrase "comprising one..." does not exclude the presence of other identical elements in the process, method, article, or apparatus that includes said element.

[0183] The various embodiments in this specification are described in a related manner. Similar or identical parts between embodiments can be referred to mutually. Each embodiment focuses on describing the differences from other embodiments. In particular, the system embodiments are basically similar to the method embodiments, so the description is relatively simple; relevant parts can be referred to the descriptions of the method embodiments.

[0184] The above description is merely a preferred embodiment of the present invention and is not intended to limit the scope of protection of the present invention. Any modifications, equivalent substitutions, improvements, etc., made within the spirit and principles of the present invention are included within the scope of protection of the present invention.

Claims

1. A network path detection method, characterized in that, The method includes: Based on the pre-entered network topology information, locate network devices and port information, and send the pre-configured traffic detection rules to the network devices; Based on the traffic detection rules, the IP option field of the packet is extended to perform traffic path detection; Obtain network device and port information through which the packet flows, generate a traffic path topology map corresponding to the traffic detection rule, and determine the traffic path reconstruction result; Based on the traffic path reconstruction results, a fault alarm is generated by matching the preset alarm rules. The step of extending the IP option field of the packet based on the traffic probing rules to perform traffic path probing includes: Add the VIN of each tenant in the public cloud, the ID of the traffic probing rule, and the packet sequence number SN to the IP option field of the packet; Based on the expanded message, the network device configured with traffic tagging is identified, and traffic path probing is performed on the network device configured with traffic tagging in parallel.

2. The network path detection method according to claim 1, characterized in that, The step of searching for network devices and port information based on pre-recorded network topology information and sending pre-configured traffic detection rules to the network devices includes: Based on the network topology information, the network devices match the tuple information to determine the source port and destination port through which the traffic flows, wherein the tuple information includes source IP, destination IP, source port, and destination port; Configure the traffic detection rules for each tenant in the public cloud based on the source and destination ports through which the traffic flows; The traffic detection rules are distributed to the network devices via network configuration protocols or network security protocols.

3. The network path detection method according to claim 1, characterized in that, The step of determining the network device configured with traffic marking based on the expanded message, and performing traffic path probing on the network device configured with traffic marking in parallel, includes: Based on the expanded message, east-west traffic and north-south traffic are traffic-tagged to determine the network devices configured for traffic tagging; The traffic markers for east-west traffic include the access point of the cloud packet and the customer virtual machine point, while the traffic markers for north-south traffic include the dedicated line access port and the virtual interaction software corresponding to the cloud host.

4. The network path detection method according to claim 3, characterized in that, After determining the network device configured with traffic marking based on the expanded message, and performing traffic path probing on the network device configured with traffic marking in parallel, the process further includes: Record the message sequence number (SN) to determine if packet loss has occurred; In the absence of packet loss, the number of currently processed packets is counted based on the difference between the sequence number of the currently processed packet and the previously received packet, and stored as traffic statistics information; If the counted message sequence number SN reaches a preset threshold, the message sequence number SN is stored as historical traffic statistics information.

5. The network path detection method according to claim 1, characterized in that, The steps of obtaining network device and port information through which the packet flows, generating a traffic path topology map corresponding to the traffic detection rule, and determining the traffic path reconstruction result include: Based on the traffic statistics information corresponding to each traffic probing rule obtained periodically, the packet traffic path is determined; Based on the packet traffic path, determine the starting network device information through which the packet flows; Based on the connection relationships between network devices and ports, the intermediate device information of the packet traffic path is associated to generate a traffic path topology map corresponding to each traffic detection rule.

6. The network path detection method according to claim 5, characterized in that, The steps of obtaining network device and port information through which the packet flows, generating a traffic path topology map corresponding to the traffic detection rule, and determining the traffic path reconstruction result include: Obtain traffic statistics information of the network devices and ports through which the packets flow, wherein the traffic statistics information includes the number of packets received by the network devices and ports; Based on the traffic statistics, the packet forwarding status of network devices and ports within a preset time period is generated, and the traffic path reconstruction result is determined.

7. The network path detection method according to claim 1, characterized in that, The step of matching the traffic path reconstruction result with preset alarm rules to generate a fault alarm includes: Based on the traffic path reconstruction results, query the traffic statistics information of the traffic path; Based on the traffic statistics information of the traffic path, match the preset alarm rules; When matching the preset alarm rules, the alarm type is determined, wherein the alarm type includes generating an alarm and recovering an alarm; If the alarm type is determined to be the alarm generated, an alarm report is triggered to generate a fault alarm; If the alarm type is determined to be the recovery alarm, query the alarm reporting list and send alarm information to report the fault.

8. A network path detection device, characterized in that, The device includes: The network topology information module is used to locate network devices and port information based on pre-entered network topology information, and to send pre-configured traffic detection rules to the network devices. The traffic path detection module is used to expand the IP option field of the packet based on the traffic detection rules to perform traffic path detection; The traffic path restoration module is used to obtain network devices and port information through which the packet flows, generate a traffic path topology map corresponding to the traffic detection rule, and determine the traffic path restoration result. The fault alarm module is used to match the preset alarm rules and issue fault alarms based on the traffic path reconstruction results. The traffic path detection module includes: The message processing submodule is used to add the VIN of each tenant in the public cloud, the ID of the traffic probing rule, and the message sequence number SN to the IP option field of the message; The path detection submodule is used to determine the network devices configured with traffic tags based on the expanded message, and to perform traffic path detection on the network devices configured with traffic tags in parallel.

9. The network path detection device according to claim 8, characterized in that, The network topology information module includes: The matching information submodule is used to match tuple information based on the network devices in the network topology information to determine the source port and destination port through which the traffic flows, wherein the tuple information includes source IP, destination IP, source port, and destination port; The configuration rules submodule is used to configure the traffic detection rules for each tenant in the public cloud based on the source port and destination port through which the traffic flows. The sending rules submodule is used to send the traffic probing rules to the network device via a network configuration protocol or a network security protocol.

10. The network path detection device according to claim 8, characterized in that, The detection path submodule includes: A traffic labeling unit is used to label east-west traffic and north-south traffic based on the expanded message, and to determine the network device configured with traffic labeling. The traffic markers for east-west traffic include the access point of the cloud packet and the customer virtual machine point, while the traffic markers for north-south traffic include the dedicated line access port and the virtual interaction software corresponding to the cloud host.

11. The network path detection device according to claim 8, characterized in that, The traffic path detection module also includes: The message recording submodule is used to record the message sequence number (SN) of the message to determine whether packet loss has occurred. The first storage submodule is used to count the currently processed packets based on the difference between the sequence number of the currently processed packet and the previously received packet, and store the count as traffic statistics information, in the absence of packet loss. The second storage submodule is used to store the message sequence number SN as historical traffic statistics information if the statistically counted message sequence number SN reaches a preset threshold.

12. A communication device, characterized in that, include: A transceiver, a memory, a processor, and a program stored in the memory and executable on the processor; The processor is used to read the program in the memory to implement the steps in the network path detection method as described in any one of claims 1-7.

13. A readable storage medium for storing a program, characterized in that, When the program is executed by the processor, it implements the steps in the network path detection method as described in any one of claims 1-7.

Images