Communication service system
By connecting user edge devices with industrial internet access networks and combining them with public internet service networks, the problem of constructing multiple lines in existing technologies has been solved, achieving efficient integration of various network functions, shortening delivery cycles and saving costs.
Patent Information
- Authority / Receiving Office
- CN · China
- Patent Type
- Patents(China)
- Current Assignee / Owner
- CHINA UNITED NETWORK COMM GRP CO LTD
- Filing Date
- 2023-03-02
- Publication Date
- 2026-07-07
AI Technical Summary
In existing technologies, enterprise leased line customers need to lay multiple access lines to meet their networking, cloud access, and Internet access needs, resulting in high engineering costs, long cycles, and poor customer experience.
A communication service system is provided that, through the communication connection between user edge devices and industrial internet access networks, combined with public internet service networks, enables unified forwarding of industrial internet access data and public internet access data, avoiding redundant construction, and utilizing multiple virtual routing forwarding functions to realize multiple network functions on a single physical line.
It significantly shortens the business delivery cycle, saves network investment costs, and improves the user experience by flexibly adjusting bandwidth to meet various network needs.
Smart Images
Figure CN116366388B_ABST
Abstract
Description
Technical Field
[0001] This application relates to communication technology, and more particularly to a communication service system. Background Technology
[0002] The increasing demand for dedicated lines for large clients, along with information and communication needs such as networking, cloud access, and internet connectivity, has become a fundamental requirement for normal business operations. For example... Figure 1 As shown, the existing model requires two dedicated lines to achieve networking, cloud access, and internet connectivity. Enterprise dedicated line customers' equipment connects to IPRAN (IP Radio Access Network) through their customer egress equipment. IPRAN then connects to the Industrial Internet Service Network to fulfill networking and cloud access requirements. Enterprise dedicated line customers' equipment also connects to the public internet service network via a metropolitan area network to achieve internet connectivity.
[0003] However, under the existing model, the various network services provided by operators to users need to be carried on different industrial internet access networks, requiring the laying of multiple access lines and multiple constructions, which leads to problems such as high engineering costs, long engineering cycles, and poor customer experience. Summary of the Invention
[0004] This application provides a communication service system, including: a user edge device, an industrial internet access network, a public internet service network, and an industrial internet service network;
[0005] Communication connections between user edge devices and industrial internet access networks; communication connections between industrial internet access networks and public internet service networks; communication connections between industrial internet access networks and industrial internet service networks.
[0006] Among them, the user edge device includes sub-interface 1 and sub-interface 2, the industrial internet access network includes access PE, aggregation PE, core PE and forwarding PE, and both access PE and aggregation PE include sub-interface 3 and sub-interface 4. Sub-interface 1 and sub-interface 3 communicate with each other, sub-interface 2 and sub-interface 4 communicate with each other, sub-interface 3 is bound to the industrial internet VPN, and sub-interface 4 is bound to the public internet VPN.
[0007] User edge devices forward industrial internet access data to sub-interface 3 of the access PE or aggregation PE through sub-interface 1, and forward public internet access data to sub-interface 4 of the access PE or aggregation PE through sub-interface 2.
[0008] The forwarding PE forwards public Internet access data to the public Internet service network via public Internet routing, the aggregation PE forwards industrial Internet access data to the core PE, and the core PE forwards industrial Internet access data to the industrial Internet service network.
[0009] In some embodiments, the industrial internet access network includes a public network route, where the aggregation PE and the forwarding PE are the same PE, and the public network route is a public internet route.
[0010] It aggregates the communication connections between the PE and the public network router, and the communication connections between the public network router and the public Internet service network;
[0011] The PE (Public Internet Provider) forwards public internet access data to the public network router, which in turn forwards the public internet access data to the public internet service network.
[0012] In some embodiments, static routing is used to connect the aggregation PE and the public network router.
[0013] In some embodiments, the public network route used by a user edge device to access the domestic public internet is different from the public network route used to access the international public internet.
[0014] In some embodiments, the industrial internet access network includes an egress PE, which acts as a forwarding PE, and the core route in the public internet access network acts as a public internet route.
[0015] Communication connections between the export PE and the core router in the public Internet access network, and communication connections between the public Internet access network and the public Internet service network;
[0016] The outgoing PE forwards public internet access data to the core route in the public internet access network, while other routes in the public internet access network forward public internet access data to the public internet service network.
[0017] In some embodiments, static routing is used to connect the outgoing PE to the core router in the public Internet access network.
[0018] In some embodiments, the egress PE includes a sub-interface 5, which communicates with sub-interface 2 or sub-interface 4 to enable the egress PE to receive public Internet access data forwarded by the access PE or the aggregation PE.
[0019] In some embodiments, the industrial internet access network includes a POP PE, where the POP PE acts as a forwarding PE, and the core route in the public internet access network acts as a public internet route.
[0020] Communication between POP PE and SD WAN access point; communication connection between SD WAN access point and core router in public Internet access network; communication connection between public Internet access network and public Internet service network.
[0021] The POP PE forwards public internet access data to the SD WAN access point, which in turn forwards the public internet access data to the core router in the public internet access network. Other routers in the public internet access network then forward the public internet access data to the public internet service network.
[0022] In some embodiments, the user edge device forwards the access request to the access PE according to the issued default route. The access PE forwards the access request to the POP PE according to the default route in the access request. The POP PE forwards the access request to the SDWAN POP. The virtual gateway in the SDWAN POP performs address translation on the service address of the access request and forwards the access request to the public Internet access network according to the translated address. The DNS service in the public Internet access network resolves the translated address and forwards the access request to the public Internet service network.
[0023] In some embodiments, the access PE, aggregation PE, and forwarding PE all include a virtual routing forwarding module.
[0024] The communication service system provided in this application allows user edge devices to forward industrial internet access data to sub-interface 3 of the access PE via sub-interface 1, and to public internet access data to sub-interface 4 of the access PE via sub-interface 2. The forwarding PE then routes the public internet access data to the public internet service network via the public internet, providing public internet services to the user edge device CE. The core PE forwards the industrial internet access data to the industrial internet service network, which then provides industrial internet services to the user edge device CE. In this way, the industrial internet access network provides both industrial internet and public internet services to the user. The user edge device CE only establishes a communication connection with the industrial internet access network, avoiding redundant construction, significantly shortening the service delivery cycle, effectively utilizing the resources of the industrial internet access network, and saving the user's network investment costs. Attached Figure Description
[0025] The accompanying drawings, which are incorporated in and form part of this specification, illustrate embodiments consistent with this application and, together with the description, serve to explain the principles of this application.
[0026] Figure 1 This is an architecture diagram of the existing communication service system;
[0027] Figure 2 This is an architecture diagram of a communication service system provided in an embodiment of this application;
[0028] Figure 3 An architecture diagram of a communication service system provided in another embodiment of this application;
[0029] Figure 4 An architecture diagram of a communication service system provided in yet another embodiment of this application;
[0030] Figure 5 This is an architecture diagram of a communication service system provided in another embodiment of this application.
[0031] Figure label:
[0032] 100: Industrial Internet access network; 200: Industrial Internet service network; 300: Public Internet service network; 400: Public Internet access network.
[0033] The accompanying drawings have illustrated specific embodiments of this application, which will be described in more detail below. These drawings and descriptions are not intended to limit the scope of the concept in any way, but rather to illustrate the concept of this application to those skilled in the art through reference to specific embodiments. Detailed Implementation
[0034] Exemplary embodiments will now be described in detail, examples of which are illustrated in the accompanying drawings. When the following description relates to the drawings, unless otherwise indicated, the same numbers in different drawings denote the same or similar elements. The embodiments described in the following exemplary embodiments do not represent all embodiments consistent with this application. Rather, they are merely examples of apparatuses and methods consistent with some aspects of this application as detailed in the appended claims.
[0035] It should be noted that the user information (including but not limited to user device information, user personal information, etc.) and data (including but not limited to data used for analysis, data stored, data displayed, etc.) involved in this application are all information and data authorized by the user or fully authorized by all parties. Furthermore, the collection, use and processing of the relevant data must comply with the relevant laws, regulations and standards of the relevant countries and regions, and corresponding operation portals are provided for users to choose to authorize or refuse.
[0036] The terms "first," "second," "third," "fourth," etc., used in the specification, claims, and accompanying drawings of this application are used to distinguish similar objects and are not necessarily used to describe a specific order or sequence. It should be understood that such data can be used interchangeably where appropriate. For example, without departing from the scope of this document, first information can also be referred to as second information, and similarly, second information can also be referred to as first information.
[0037] Depending on the context, the word “if” as used herein can be interpreted as “when…”, “when…”, or “in response to determination.” Furthermore, as used herein, the singular forms “a,” “one,” and “the” are intended to also include the plural forms unless the context indicates otherwise.
[0038] It should be further understood that the terms “comprising” or “including” indicate the presence of features, steps, operations, elements, components, types, and / or groups, but do not exclude the presence, occurrence, or addition of one or more other features, steps, operations, elements, components, types, and / or groups.
[0039] like Figure 1 As shown, under the existing model, networking and cloud access requirements are typically achieved through Multi-Protocol Label Switching-Virtual Private Network (MPLS-VPN) technology. Therefore, to meet these requirements, enterprise leased line customers' equipment connects to the IPRAN (IP Radio Access Network) via the customer's egress device, and the IPRAN then connects to the industrial internet network. Internet access is usually achieved through a dedicated internet leased line to the metropolitan area network (MAN), or through a Software Defined Wide Area Network (SD-WAN) to access the public internet.
[0040] In the existing model, networking, cloud access, and internet access require two access networks: IPRAN and metropolitan area network. Due to high network construction and maintenance costs, this application provides a communication service system that integrates networking, cloud access, internet access, voice, and other services.
[0041] like Figures 2 to 4 As shown, one embodiment of this application provides a communication service system, which includes: a customer edge device (CE), an industrial internet access network 100, an industrial internet service network 200, and a public internet service network 300. The customer edge device CE and the industrial internet access network 100 are connected, the industrial internet access network 100 and the industrial internet service network 200 are connected, and the industrial internet access network 100 and the public internet service network 300 are connected.
[0042] The user edge device (CE) includes sub-interface 1 and sub-interface 2. The industrial internet access network 100 includes access PE (Provider Edge), core PE, and forwarding PE. The access PE includes sub-interface 3 and sub-interface 4. Sub-interface 1 and sub-interface 3 communicate with each other, sub-interface 2 and sub-interface 4 communicate with each other, sub-interface 3 is bound to the industrial internet VPN, and sub-interface 4 is bound to the public internet VPN.
[0043] The User Equipment (UE) sends Industrial Internet access data or Public Internet access data to the User Edge Equipment (CE). The CE forwards the Industrial Internet access data to the PE via sub-interface 1 through sub-interface 1, and to the PE via sub-interface 2 through sub-interface 4. The PE then forwards the Public Internet access data to the Public Internet Service Network 300 via public Internet routing, providing Public Internet services to the CE. These services include, but are not limited to, Internet access, voice communication, terminal services, and application services. The Core PE forwards the Industrial Internet access data to the Industrial Internet Service Network 200. The Industrial Internet Service Network 200 then provides Industrial Internet services to the CE, including but not limited to networking and cloud access services.
[0044] With this setup, the Industrial Internet Access Network 100 provides users with both Industrial Internet services and public Internet services. The user's edge device (CE) only establishes a communication connection with the Industrial Internet Access Network 100, avoiding redundant construction and greatly shortening the service delivery cycle. It also effectively utilizes the resources of the Industrial Internet Access Network 100, saving users' network investment costs.
[0045] The network implementation scheme of the communication service system is determined according to the network deployment situation in each region. These regions can be divided by administrative provinces or by geographical areas. This application provides three network implementation schemes. The first scheme uses a communication connection between the aggregation PE in the industrial internet access network 100 and the public network router GR in the industrial internet access network 100 as a public internet access method. The second scheme uses a communication connection between the egress PE in the industrial internet access network 100 and the core router (CR) in the public internet access network 400 as a public internet access method. The third scheme uses a connection between the PE in the industrial internet access network 100 and the virtual router (VR) as a public internet access method.
[0046] The following describes three implementation methods in detail, such as Figure 2As shown, the industrial internet access network 100 in each region includes multiple access PEs, multiple core PEs (only one is shown in the figure), multiple aggregation PEs (only one is shown in the figure), and a public network router GR. The public network router GR is physically connected to the public internet service network 300, serving as the public internet route for that region and acting as the exit point for public internet traffic. Each access PE communicates with the user edge device CE in each region, each aggregation PE communicates with the user edge device CE in each region, each access PE is connected to its corresponding aggregation PE, each aggregation PE is connected to its corresponding core PE, and each aggregation PE communicates with its corresponding public network router GR.
[0047] Each aggregation PE includes sub-interface 3 and sub-interface 4. Sub-interface 3 is bound to the Industrial Internet VPN, and sub-interface 4 is bound to the Public Internet VPN. Both the access PE and aggregation PE include a Virtual Routing Forwarding (VRF) module to forward public Internet access data and / or Industrial Internet access data. Both the aggregation PE and access PE receive public Internet access data and / or Industrial Internet access data from user edge devices (CEs). The aggregation PE forwards the public Internet access data received by the access PE to the public network router GR, or forwards its own received public Internet access data to the public network router GR, enabling the Industrial Internet access network 100 to carry user traffic accessing the public Internet. The aggregation PE forwards the Industrial Internet access data received by the access PE to the core PE, or forwards its own received Industrial Internet access data to the core PE. The core PE then forwards the Industrial Internet access data to the Industrial Internet service network 200.
[0048] In some embodiments, the public network route GR acts as a user edge device CE, therefore, static routing is used for the connection between the public network route GR and the aggregation PE. The VPN configuration on the PE accessed by the user edge device CE is pre-distributed by the controller.
[0049] In some embodiments, public internet services in each region select the local public network route GR as the public internet service exit point. The public internet IP address is assigned by the public network route GR. Users accessing the domestic internet and users accessing the international internet can choose different routes as the public network route GR. For example, users accessing the domestic public internet can choose route S as the public network route GR. Users accessing the international public internet can choose route I as the public network route GR.
[0050] like Figure 3As shown, each region's industrial internet access network 100 includes multiple access PEs (only one is shown in the figure), multiple aggregation PEs (not shown in the figure), multiple core PEs (only one is shown in the figure), and egress PEs. The egress PE acts as a forwarding PE, and the core router CR in the public internet access network 400 acts as a public internet router. Each access PE communicates with the user edge device CE, each access PE communicates with its corresponding aggregation PE, each aggregation PE communicates with its corresponding core PE, each access PE communicates with its corresponding egress PE, the egress PE communicates with the core router CR in the public internet access network 400, and the public internet access network 400 communicates with the public internet service network 300.
[0051] Each access PE includes sub-interface 3 and sub-interface 4. Sub-interface 3 is bound to the Industrial Internet VPN, and sub-interface 4 is bound to the Public Internet VPN. The access PE, aggregation PE, and egress PE all include a virtual routing forwarding module to forward public Internet access data and / or Industrial Internet access data. The access PE receives public Internet access data and / or Industrial Internet access data from user edge devices (CEs). The egress PE forwards the public Internet access data received by the access PE to the core router (CR), enabling the Industrial Internet access network 100 to carry user traffic accessing the public Internet. The aggregation PE forwards the Industrial Internet access data received by the access PE to the core PE, or forwards its own received Industrial Internet access data to the core PE. The core PE then forwards the Industrial Internet access data to the Industrial Internet service network 200.
[0052] In some embodiments, the public internet access network is a provincial capital metropolitan area network, and the outgoing PE is connected to the core router CR in the provincial capital metropolitan area network. The provincial capital metropolitan area network is also connected to the public internet service network 300, so that the industrial internet access network 100 carries the traffic of users accessing the public internet.
[0053] In some embodiments, the core router CR in the provincial capital metropolitan area network serves as the exit point from the industrial internet access network 100 to the public internet service network. The core router CR in the provincial capital metropolitan area network acts as a user edge device CE, and is connected to the exit PE of the industrial internet access network 100 via static routing. BFD (Bidirectional Forwarding Detection) is deployed to detect the static routing.
[0054] In some embodiments, public internet services in each region select the core route (CR) in the provincial capital metropolitan area network of that region as the public internet service exit point. Users can select the core route (CR) in the provincial capital metropolitan area network as the exit point for both domestic internet access and international internet access.
[0055] like Figure 4 As shown, each region's industrial internet access network 100 includes multiple access PEs (only one is shown in the figure), multiple aggregation PEs (not shown in the figure), multiple core PEs (only one is shown in the figure), and POP PEs. Each PE in the industrial internet access network 100 communicates with the user edge device CE, each access PE communicates with its corresponding POP PE, each POP PE communicates with the access point of the Software Defined Wide Area Network (SDWAN), the access point of the SDWAN communicates with the public internet access network 400, and the provincial capital metropolitan area network in the industrial internet access network 100 communicates with the public internet service network 300.
[0056] Each access PE includes sub-interface 3 and sub-interface 4. Sub-interface 3 is bound to the Industrial Internet VPN, and sub-interface 4 is bound to the Public Internet VPN. Access PEs, aggregation PEs, and POP PEs all include virtual routing forwarding modules to forward public Internet access data and / or Industrial Internet access data. Access PEs receive public Internet access data and / or Industrial Internet access data from user edge devices (CEs). Egress PEs forward the public Internet access data received by the access PEs to the POP PEs. The POP PEs have sub-interface 5, which communicates with sub-interface 2 or sub-interface 4, enabling the egress PEs to receive public Internet access data forwarded by the access PEs or aggregation PEs. The POP PEs forward public Internet access data to the SD WAN access point. The SD WAN access point forwards the public Internet access data to the core router (CR) of the public Internet access network. The public Internet access network then forwards the public Internet access data to the public Internet service network, enabling the Industrial Internet access network 100 to carry user traffic accessing the public Internet. Aggregation PEs forward the Industrial Internet access data received by the access PEs to the core PEs, or forward the Industrial Internet access data they receive to the core PEs. The core PE forwards the industrial internet access data to the industrial internet service network 200.
[0057] In some embodiments, the user edge device (CE) forwards the access request to the access PE according to the issued default route. The access PE forwards the access request to the POP PE according to the default route in the access request. The POP PE forwards the access request to the SD WAN POP. The virtual gateway in the SD WAN POP performs address translation on the service address of the access request and forwards the access request to the public Internet access network according to the translated address. The DNS service in the public Internet access network resolves the translated address and forwards the access request to the public Internet network.
[0058] In the network implementation schemes of the three communication service networks mentioned above, VPN deployment is carried out in the following manner: the VPN configuration on the PE accessed by the user edge device (CE) is automatically distributed in advance by the private network system controller. When configuring the VPN, PE VPN instances in any two regions take different RD / RT values, while the RD / RT of PE VPNs within each region takes the same value.
[0059] Among them, RD (Route Distinguisher) is used to identify different VPN implementations on PE, and RT (Route Tagert) is an extension feature of BGP, which is divided into ImportRT and ExportRT, which are used for import and export policies of routes respectively.
[0060] It should be noted that if public internet service is provided through a virtual gateway, an independent VPN needs to be established for each user. Depending on user needs, this can be designed with both isolated and non-isolated options for public internet traffic and industrial internet traffic. The public internet exit point can be set as a centralized unified exit point or a provincially located exit point, depending on user requirements.
[0061] The above technical solution, based on a multi-virtual routing forwarding system, supports multiple networking methods including aggregation PE to public network route GR, egress PE to core route CR, and POP PE to virtual route VR. It eliminates the need for separate cabling for the public internet, enabling a single physical line to carry multiple network functions, replacing traditional MPLS-VPN access and public internet access (or SD-WAN). The difference between the three methods lies in whether the routing address translation is performed by the user or the operator, and whether the public internet VPN is shared across provinces or created only at the user level. Regardless of the method, it achieves isolation between public internet traffic and industrial internet traffic, flexible bandwidth adjustment, and traffic rate limiting. Users can choose one of the implementation methods according to their actual needs.
[0062] In some embodiments, when a user edge device (CE) spans multiple regions, the CE can select the nearest public internet exit point in its region, and its internet IP address can be assigned by the public network route GR, core route CR, or the province where the metropolitan area network is located. This is achieved by matching the VPN RT values of the access PEs, meaning that the RT values of each site PE connected to the CE are consistent with those of the PEs connected to the public network route GR or core route CR.
[0063] User edge devices (CEs) can flexibly adjust public internet service network bandwidth and industrial internet bandwidth according to actual usage. When adjusting the industrial internet leased line bandwidth, the public internet bandwidth will be adjusted accordingly. If the local transmission bandwidth is insufficient to meet user needs, the user can initiate a line bandwidth change, with the business system issuing instructions to downstream device systems.
[0064] The system architecture of the service network system provided in this application is as follows: Figure 5 As shown, the top layer is a unified portal for users, where they can perform self-service order placement, service changes, network management services, self-service speed adjustment, billing inquiries, and other related operations. The lower-level business console handles business order processing, business logic processing, approval, billing, and other functions. The collaboration and control layer is responsible for collaborative orchestration, configuration distribution, and network resource management. The bottom-level network layer includes local access networks such as CE, PE, IPRAN, OTN, and intelligent metropolitan area networks close to users, as well as private network systems and internet systems. The collaboration and control layer shields the differences in the underlying networks, enabling rapid configuration distribution across multiple networks triggered from a single point, effectively improving customer service capabilities.
[0065] This application utilizes the Multi-Vrf (Multi-Virtual Router Forwarding) function of MPLS-VPN to create two sub-interfaces on the leased line main sub-interface of the user edge device (CE), used for forwarding industrial internet traffic and public internet traffic respectively. Through a single physical line, it simultaneously achieves internal networking, cloud access, and internet access, isolating internet traffic and network traffic and implementing separate rate limiting. This provides customers with a one-stop integrated service encompassing "networking + cloud access + internet access + voice + terminal + application," simplifying the application process. One-stop delivery enhances user experience and structurally reduces engineering costs and timelines. Using a single physical line avoids redundant construction, significantly shortening the service delivery cycle and effectively saving industrial internet access network resources and customer network investment costs. Leveraging network SDN capabilities allows for flexible adjustment of leased line bandwidth and internet bandwidth, enabling bandwidth sharing and isolating user industrial internet traffic from public internet traffic for separate rate limiting.
[0066] In the several embodiments provided in this application, it should be understood that the disclosed apparatus and methods can be implemented in other ways. For example, the apparatus embodiments described above are merely illustrative; for instance, the division of modules is only a logical functional division, and in actual implementation, there may be other division methods. For example, multiple modules may be combined or integrated into another system, or some features may be ignored or not executed. Furthermore, the coupling or direct coupling or communication connection shown or discussed may be through some sub-interfaces, or indirect coupling or communication connection between apparatuses or modules, and may be electrical, mechanical, or other forms.
[0067] The modules can be physically separate, for example, installed in different locations within a single device, installed on different devices, distributed across multiple network units, or distributed across multiple processors. Alternatively, the modules can be integrated, for example, installed in the same device, or integrated into a single codebase. The modules can exist in hardware form, software form, or a combination of both. This application can select some or all of the modules to achieve the objectives of this embodiment based on actual needs.
[0068] It should be understood that although the steps in the flowcharts of the above embodiments are shown sequentially according to the arrows, these steps are not necessarily executed in the order indicated by the arrows. Unless explicitly stated herein, there is no strict order restriction on the execution of these steps, and they can be executed in other orders. Moreover, at least some of the steps in the figures may include multiple sub-steps or multiple stages. These sub-steps or stages are not necessarily completed at the same time, but can be executed at different times, and their execution order is not necessarily sequential, but can be performed alternately or in turn with other steps or at least some of the sub-steps or stages of other steps.
[0069] Other embodiments of this application will readily occur to those skilled in the art upon consideration of the specification and practice of the invention disclosed herein. This application is intended to cover any variations, uses, or adaptations of this application that follow the general principles of this application and include common knowledge or customary techniques in the art not disclosed herein. The specification and examples are to be considered exemplary only, and the true scope and spirit of this application are indicated by the following claims.
[0070] It should be understood that this application is not limited to the precise structure described above and shown in the accompanying drawings, and various modifications and changes can be made without departing from its scope. The scope of this application is limited only by the appended claims.
Claims
1. A communication service system, characterized in that, include: User edge devices, industrial internet access networks, public internet service networks, and industrial internet service networks; The user edge device and the industrial internet access network are connected by communication; the industrial internet access network and the public internet service network are connected by communication; the industrial internet access network and the industrial internet service network are connected by communication. The user edge device includes sub-interface 1 and sub-interface 2. The industrial internet access network includes access PE, aggregation PE, core PE and forwarding PE. Both access PE and aggregation PE include sub-interface 3 and sub-interface 4. Sub-interface 1 and sub-interface 3 communicate with each other. Sub-interface 2 and sub-interface 4 communicate with each other. Sub-interface 3 is bound to the industrial internet VPN. Sub-interface 4 is bound to the public internet VPN. The user edge device forwards industrial internet access data to the access PE or the aggregation PE via the sub-interface 1, and forwards public internet access data to the access PE or the aggregation PE via the sub-interface 2; it connects through a single physical line, simultaneously enabling internal networking, cloud access, and internet access, achieving isolation and separate rate limiting for internet traffic and network traffic; The forwarding PE forwards the public Internet access data to the public Internet service network via public Internet routing, the aggregation PE forwards the industrial Internet access data to the core PE, and the core PE forwards the industrial Internet access data to the industrial Internet service network. If the industrial internet access network includes a POP PE, then the POP PE acts as the forwarding PE, and the core route in the public internet access network acts as the public internet route; the POP PE communicates with the SD WAN access point, the SD WAN access point communicates with the core route in the public internet access network, and the public internet access network communicates with the public internet service network; the POP PE forwards the public internet access data to the SD WAN access point, the SD WAN access point forwards the public internet access data to the core route in the public internet access network, and other routes in the public internet access network forward the public internet access data to the public internet service network; the user edge device forwards the access request to the access PE according to the issued default route, the access PE forwards the access request to the POP PE according to the default route in the access request, the POP PE forwards the access request to the SD WAN POP, and the SD WAN... In POP, the virtual gateway performs address translation on the service address of the access request and forwards the access request to the public Internet access network based on the translated address. The DNS service within the public Internet access network resolves the translated address and forwards the access request to the public Internet service network.
2. The communication service system according to claim 1, characterized in that, If the industrial internet access network includes a public network route, then the aggregation PE and the forwarding PE are the same PE, and the public network route is the public internet route; The aggregation PE is connected to the public network router, and the public network router is connected to the public Internet service network. The aggregation PE forwards the public internet access data to the public network router, and the public network router forwards the public internet access data to the public internet service network.
3. The communication service system according to claim 2, characterized in that, The aggregation PE and the public network route are connected via static routing.
4. The communication service system according to claim 3, characterized in that, The public network route used by the user edge device to access the domestic public internet is different from the public network route used to access the international public internet.
5. The communication service system according to claim 1, characterized in that, If the industrial internet access network includes an egress PE, then the egress PE serves as the forwarding PE, and the core route in the public internet access network serves as the public internet route. The outgoing PE is connected to the core router in the public Internet access network, and the public Internet access network is connected to the public Internet service network. The outgoing PE forwards the public internet access data to the core route in the public internet access network, and other routes in the public internet access network forward the public internet access data to the public internet service network.
6. The communication service system according to claim 5, characterized in that, The outgoing PE and the core router in the public Internet access network are connected via static routing.
7. The communication service system according to claim 5, characterized in that, The egress PE includes a sub-interface 5, which communicates with the sub-interface 2 or the sub-interface 4, enabling the egress PE to receive public Internet access data forwarded by the access PE or the aggregation PE.
8. The communication service system according to claim 1, characterized in that, The access PE, the aggregation PE, and the forwarding PE all include a virtual routing forwarding module.