Routing exception determination method and apparatus, and storage medium

Abstract

The application provides a routing exception determination method and device and a storage medium, relates to the technical field of networks, and can reduce resource occupation for determining an abnormal routing instruction. The method comprises the following steps: in the case where there is an abnormal transmission interface in a plurality of transmission interfaces of a core router in a first time period, determining a second time period based on a center time of the first time period and a preset time length; acquiring a routing update instruction in the second time period and determining a transmission interface of routing information corresponding to the routing update instruction; the routing information comprises original routing information and / or routing update information obtained by performing routing update on the original routing information based on the routing update instruction; and in the case where there is an abnormal transmission interface in the transmission interface corresponding to the routing information, determining that the routing update instruction is an abnormal routing update instruction.

Description

TECHNICAL FIELD

[0001] The present application relates to the network technical field, and particularly relates to a routing exception determination method and device and a storage medium. BACKGROUND

[0002] In an autonomous system (AS), routing update failures often occur, and the routing update failures are usually caused by abnormal routing update instructions. Since the routing update failures will cause router traffic loss or network congestion and other influences, and the influences are relatively large, how to determine the abnormal routing update instructions and then eliminate the routing update failures is a problem to be solved by those skilled in the art.

[0003] At present, the abnormal routing instructions are usually screened periodically according to a fixed interval, and then the routing update failures are periodically eliminated. However, the periodic screening of the abnormal routing instructions will occupy a large amount of resources, which will cause a large processing burden on the equipment. SUMMARY

[0004] The present application provides a routing exception determination method, device and storage medium, which are used to reduce the resource occupation of determining abnormal routing instructions.

[0005] To achieve the above object, the present application adopts the following technical solutions:

[0006] In a first aspect, the present application provides a routing exception determination method, which comprises: in the case that there is an abnormal transmission interface in a plurality of transmission interfaces of a core router in a first time period, determining a second time period based on a center time of the first time period and a preset time length; obtaining routing update instructions in the second time period and determining transmission interfaces of routing information corresponding to the routing update instructions; the routing information comprises original routing information and / or routing update information obtained by performing routing update on the original routing information based on the routing update instructions; in the case that there is an abnormal transmission interface in the transmission interfaces corresponding to the routing information, determining that the routing update instructions are abnormal routing update instructions.

[0007] In a possible implementation manner, the first time period comprises a third time period before the center time and a fourth time period after the center time, and the method further comprises: obtaining traffic of each transmission interface in the third time period and traffic of each transmission interface in the fourth time period; determining absolute values of traffic difference values of each transmission interface based on the traffic of each transmission interface in the third time period and the traffic of each transmission interface in the fourth time period; in the case that the absolute value of the traffic difference value of any transmission interface is greater than or equal to a first preset threshold, determining that there is an abnormal transmission interface in the plurality of transmission interfaces in the first time period.

[0008] In a possible implementation, the method further includes: obtaining the traffic of each transmission interface in a third time period and the transmission rate of each transmission interface in a fourth time period; determining the transmission rate ratio of each transmission interface based on the traffic of each transmission interface in the third time period and the transmission rate of each transmission interface in the fourth time period; and determining that there is an abnormal transmission interface in the plurality of transmission interfaces in the first time period in a case where the transmission rate ratio of any transmission interface is greater than or equal to a second preset threshold value and / or the transmission rate ratio of any transmission interface is less than or equal to a third preset threshold value.

[0009] In a possible implementation, the route update instruction includes at least one of the following: a route update instruction sent by the core router to the network device and the terminal device, and a route update instruction sent by the terminal device to the core router.

[0010] In a possible implementation, the method further includes: determining alarm information based on the original route information, the route update information, and the abnormal transmission interface.

[0011] In a second aspect, the present application provides a route abnormality determination apparatus, which includes: a processing unit and a communication unit; the processing unit is configured to determine a second time period based on a center time point of a first time period and a preset time length in a case where there is an abnormal transmission interface in a plurality of transmission interfaces of a core router in the first time period; the communication unit is configured to obtain a route update instruction in the second time period, and determine a transmission interface of route information corresponding to the route update instruction; the route information includes: original route information, and / or route update information obtained by performing route update on the original route information based on the route update instruction; and the processing unit is further configured to determine that the route update instruction is an abnormal route update instruction in a case where there is an abnormal transmission interface in the transmission interface corresponding to the route information.

[0012] In a possible implementation, the communication unit is further configured to obtain the traffic of each transmission interface in a third time period and the traffic of each transmission interface in a fourth time period; the processing unit is further configured to determine the absolute value of the traffic difference of each transmission interface based on the traffic of each transmission interface in the third time period and the traffic of each transmission interface in the fourth time period; and the processing unit is further configured to determine that there is an abnormal transmission interface in the plurality of transmission interfaces in the first time period in a case where the absolute value of the traffic difference of any transmission interface is greater than or equal to a first preset threshold value.

[0013] In a possible implementation, the communication unit is further configured to acquire the traffic of each transmission interface in a third time period and the transmission rate of each transmission interface in a fourth time period; the processing unit is further configured to determine the transmission rate ratio of each transmission interface based on the traffic of each transmission interface in the third time period and the transmission rate of each transmission interface in the fourth time period; and the processing unit is further configured to determine that there is an abnormal transmission interface in the plurality of transmission interfaces in the first time period in a case where the transmission rate ratio of any transmission interface is greater than or equal to a second preset threshold value and / or the transmission rate ratio of any transmission interface is less than or equal to a third preset threshold value.

[0014] In a possible implementation, the routing update instruction includes at least one of the following: a routing update instruction sent by the core router to the network device and the terminal device, and a routing update instruction sent by the terminal device to the core router.

[0015] In a possible implementation, the processing unit is further configured to determine the alarm information based on the original routing information, the routing update information, and the abnormal transmission interface.

[0016] In a third aspect, the present application provides a routing anomaly determination apparatus, which comprises a processor and a communication interface; the communication interface is coupled to the processor, and the processor is configured to run a computer program or instruction to implement the routing anomaly method described in the first aspect and any possible implementation of the first aspect.

[0017] In a fourth aspect, the present application provides a computer readable storage medium, which stores an instruction, and when the instruction is run on a terminal, the terminal executes the routing anomaly method described in the first aspect and any possible implementation of the first aspect.

[0018] In a fifth aspect, the present application provides a computer program product comprising an instruction, and when the computer program product is run on a routing anomaly apparatus, the routing anomaly apparatus executes the routing anomaly method described in the first aspect and any possible implementation of the first aspect.

[0019] In a sixth aspect, the present application provides a chip, which comprises a processor and a communication interface; the communication interface is coupled to the processor, and the processor is configured to run a computer program or instruction to implement the routing anomaly method described in the first aspect and any possible implementation of the first aspect.

[0020] Specifically, the chip provided in the present application further comprises a memory configured to store the computer program or instruction.

[0021] The above technical solution brings at least the following beneficial effects: Since route updating often causes changes in the traffic of the transmission interfaces of the router, and the route updating is updated based on the route updating instruction, therefore, based on the above method, the server monitors the traffic change of the multiple transmission interfaces of the core router, and combines the time when the traffic of the transmission interface of the core router abnormally changes, to provide auxiliary information in the process of determining the abnormal route updating instruction, and then the abnormal route updating instruction can be quickly determined. Moreover, the second time period is set based on the center time of the first time period and the preset time length, so that the range of the route updating instruction that may cause the traffic abnormal transmission interface in the first time period can be determined. The server can determine the route updating instruction that actually affects the traffic abnormal transmission interface to abnormally appear through the comparison result of the transmission interface corresponding to the route information in the second time period and the traffic abnormal transmission interface, and does not need the comparison result of the transmission interface corresponding to the route information in other time periods and the traffic abnormal transmission interface, so that the business volume can be reduced, and the efficiency of determining the abnormal route updating instruction can be improved. BRIEF DESCRIPTION OF DRAWINGS

[0022] Figure 1 A structural diagram of a router system provided by an embodiment of the present application is provided.

[0023] Figure 2 A structural diagram of a route abnormality determination apparatus provided by an embodiment of the present application is provided.

[0024] Figure 3 A flowchart of a route abnormality determination method provided by an embodiment of the present application is provided.

[0025] Figure 4 A flowchart of another route abnormality determination method provided by an embodiment of the present application is provided.

[0026] Figure 5 A flowchart of another route abnormality determination method provided by an embodiment of the present application is provided.

[0027] Figure 6 A flowchart of another route abnormality determination method provided by an embodiment of the present application is provided.

[0028] Figure 7 A structural diagram of another route abnormality determination apparatus provided by an embodiment of the present application is provided. DETAILED DESCRIPTION

[0029] The route abnormality determination method, apparatus and storage medium provided by the embodiments of the present application are described in detail below with reference to the accompanying drawings.

[0030] The term "and / or" in this document is only used to describe associated objects, which means that there can be three relationships, for example, A and / or B can represent three cases: A exists alone, A and B exist together, and B exists alone.

[0031] The terms "first" and "second" and the like in the description of the present application and the drawings are used to distinguish different objects, or to distinguish different processing of the same object, and are not used to describe the specific order of the objects.

[0032] In addition, the terms "comprising" and "having" and any variations thereof mentioned in the description of the present application are intended to cover non-exclusive inclusion. For example, a process, method, system, product or device that includes a series of steps or units is not limited to the listed steps or units, but can optionally include other steps or units that are not listed, or can optionally include other steps or units inherent to the process, method, product or device.

[0033] It should be noted that in the embodiments of the present application, the words "exemplary" or "for example" are used to mean serving as an example, instance, or illustration. Any embodiment or design scheme described as "exemplary" or "for example" in the embodiments of the present application should not be construed as being more preferred or advantageous than other embodiments or design schemes. Rather, the use of "exemplary" or "for example" is intended to present relevant concepts in a concrete manner.

[0034] In the description of the present application, unless otherwise specified, the meaning of "a plurality of" is two or more.

[0035] In an autonomous system (AS), routing update failures often occur, and the routing update failures are usually caused by routing updates based on abnormal routing update instructions. Since the above routing update failures will cause router traffic loss or network congestion and other influences, and the above influences are relatively large, how to determine the abnormal routing update instructions and then eliminate the routing update failures is a problem to be solved by those skilled in the art.

[0036] In the prior art, a method for determining a routing update instruction is as follows: an operator deploys a route receiving device around a route reflector (RR) or inside a subnet. In this way, the route receiving device can collect routing update instructions of a router based on monitoring a border gateway protocol (BGP) or an interior gateway protocol (IGP), and determine whether the routing update instructions are abnormal. However, the above method requires additional deployment of the route receiving device, which increases the construction cost. In addition, if the route receiving device monitors the routing update instructions of the router based on the BGP protocol, the route receiving device can only monitor the routing update instructions of the router in different domains.

[0037] However, at present, a method for determining an abnormal routing update instruction is as follows: all routing information of a router is periodically collected, and the all routing information is saved as a routing snapshot file. The change of a next hop network address corresponding to the router in the case of the same destination network segment is determined according to the comparison result of the routing snapshot files in adjacent periods, and the routing update instruction of the router is determined based on the change, so that whether the routing update instruction is abnormal can be determined. However, the above method requires continuous screening of abnormal routing instructions periodically, which occupies a large amount of resources, and thus causes a large processing burden on the device.

[0038] In view of this, an embodiment of the present application provides a routing abnormality determination method. A server screens a routing update instruction actually affecting abnormal state of a transmission interface based on a comparison result of a transmission interface and an abnormal transmission interface of routing information corresponding to the routing update instruction. Since the abnormal routing update instruction directly reflects the abnormal state of the transmission interface, the server can determine the routing update instruction actually affecting the abnormal state of the transmission interface as the abnormal routing update instruction.

[0039] Since the abnormal routing update instruction is most likely to cause transmission abnormality, the routing update instruction in a time period (i.e., a second time period) related to the abnormal transmission interface is more likely to be the abnormal routing update instruction, and correspondingly, the routing update instruction in other time periods is less likely to be the abnormal routing update instruction. Based on this, the server acquires the routing update instruction in the second time period, so that the server can only perform the above-described judgment (i.e., the judgment of whether it is the abnormal routing update instruction) on the routing update instruction, reduces the redundant operation for determining the abnormal update instruction, and further reduces the resource occupation for determining the abnormal routing instruction.

[0040] Exemplarily, as shown in FIG. 1, Figure 1 Figure 1 ​A structural schematic diagram of a router system provided by an embodiment of the present application is shown. The router system 10 includes a server 101 and a core router 102. Figure 1 The communication system 10 includes a server 101 and a core router 102 as an example.

[0041] The server 101 is configured to, in a case where there is an abnormal transmission interface in the plurality of transmission interfaces of the core router 102 in a first time period, determine a second time period based on a center time of the first time period and a preset time length, acquire a route update instruction in the second time period, determine a transmission interface of route information corresponding to the route update instruction, and determine the route update instruction as an abnormal route update instruction in a case where there is an abnormal transmission interface in the transmission interface corresponding to the route information.

[0042] The route information includes original route information and / or route update information obtained by performing route update on the original route information based on the route update instruction.

[0043] The core router 102 is configured to provide the server 101 with information such as a traffic value of each transmission interface, a route update instruction, and route information.

[0044] Optionally, the core router 102 is a core device in an AS. In a metropolitan area network, route update instructions of other routers are also forwarded to other routers by the core router, so the core router can store route update instructions of all routers in the AS, and aggregate uplink traffic in the AS and downlink traffic in the AS. The route update instruction sent by the core router to a network device and a terminal device will guide external devices (for example, the network device, the terminal device, and other routers in the AS) to send data to the core router, thereby affecting the traffic of the external devices entering the AS to which the core router belongs. Correspondingly, the route update instruction sent by the network device and the terminal device to the core router will guide the core router to send data to the external devices, thereby affecting the traffic output by the AS to which the core router belongs to the external devices.

[0045] In an example, the route update instruction (that is, the route update instruction in the AS) sent by the core router to the network device and the terminal device includes at least one of the following: a route update instruction based on an internal border gateway protocol (IBGP) protocol, a route update instruction based on an IGP, and a route update instruction based on service opening and network condition adjustment.

[0046] It should be noted that, for the above-mentioned intra-AS route update instruction, in the case that the route has been updated based on the above-mentioned route update instruction, but the terminal device does not make a service request, the transmission interface will not have traffic changes. In the case that the terminal device makes a service request, the transmission interface will have traffic changes. In addition, service opening will also cause the transmission interface to have traffic changes.

[0047] Optionally, the traffic changes can be divided into two cases: normal traffic changes and abnormal traffic changes. Normal traffic changes are usually caused by service opening. Abnormal traffic changes are usually caused by abnormal route update instructions, and can cause traffic drops and bandwidth congestion and other routing failures, and the abnormal update instructions are usually error update instructions determined by the operator due to lack of understanding of the routing strategy.

[0048] It should be noted that the network structure of the metropolitan area network is usually divided into three layers: core layer, convergence layer and access layer. For example, the core layer can include two core routers (CR), and the two CRs are backup to each other. The convergence layer can include at least one service router (SR) and at least one broadband remote access server (BRAS). The access layer can include at least one access switch.

[0049] In addition, the communication system described in the embodiments of the present application is used to more clearly illustrate the technical solutions of the embodiments of the present application, and does not constitute a limitation on the technical solutions provided by the embodiments of the present application. Those skilled in the art can know that, with the evolution of network architecture and the emergence of new communication systems, the technical solutions provided by the embodiments of the present application are also applicable to similar technical problems.

[0050] In specific implementation, Figure 1 The devices in the above-mentioned apparatuses can adopt the component structures shown in Figure 2 , or include the components shown in Figure 2 . Figure 2 A component structure of a route anomaly determination apparatus 200 provided by the embodiments of the present application is shown in the figure. The route anomaly determination apparatus 200 can be a server 101 or a chip or system on chip in the server 101. Alternatively, the apparatus 200 can be a core router 102 or a chip or system on chip in the core router 102. As shown in Figure 2 , the route anomaly determination apparatus 200 can include a processor 201 and a communication line 202.

[0051] Further, the routing anomaly determination apparatus 200 can further include a communication interface 203 and a memory 204. The processor 201, the memory 204 and the communication interface 203 can be connected through a communication line 202.

[0052] The processor 201 can be a CPU, a general processor, a network processor (NP), a digital signal processing (DSP), a microprocessor, a microcontroller, a programmable logic device (PLD) or any combination thereof. The processor 201 can also be other apparatuses with processing function, such as a circuit, a device or a software module, which are not limited herein.

[0053] The communication line 202 is used to transmit information between the components included in the communication apparatus 200.

[0054] The communication interface 203 is used to communicate with other devices or other communication networks. The other communication networks can be an Ethernet, a radio access network (RAN), a wireless local area network (WLAN) and the like. The communication interface 203 can be a module, a circuit, a communication interface or any apparatus capable of realizing communication.

[0055] The memory 204 is used to store instructions. The instructions can be a computer program.

[0056] The memory 204 can be a read-only memory (ROM) or other types of static storage devices that can store static information and / or instructions, or can be a random access memory (RAM) or other types of dynamic storage devices that can store information and / or instructions, or can be an electrically erasable programmable read-only memory (EEPROM), a compact disc read-only memory (CD-ROM) or other optical disk storage, a magneto-optical disk, a magnetic disk storage or other magnetic storage devices, etc., which are not limited herein.

[0057] It should be noted that the memory 204 can exist independently of the processor 201, or can be integrated with the processor 201. The memory 204 can be used to store instructions or program codes or some data, etc. The memory 204 can be located in the communication apparatus 200, or can be located outside the communication apparatus 200, which is not limited. The processor 201 is configured to execute the instructions stored in the memory 204, so as to implement the routing exception determination method provided in the embodiments of the present application.

[0058] In an example, the processor 201 can include one or more CPUs, for example, CPU0 and CPU1.

[0059] As an optional implementation, the communication apparatus 200 includes a plurality of processors.

[0060] As an optional implementation, the communication apparatus 200 further includes an output device 205 and an input device 206. For example, the input device 206 is a keyboard, a mouse, a microphone, a joystick or the like, and the output device 205 is a display screen, a speaker or the like.

[0061] It should be noted that the communication apparatus 200 can be a desktop computer, a laptop computer, a network server, a mobile phone, a tablet computer, a wireless terminal, an embedded device, a chip system or a device with similar structure. In addition, the communication apparatus 200 can include more or less components than those shown in the figure, or combine some components, or different arrangement of components. Figure 2 The constituent structure shown in the figure does not constitute a limitation on each device in the present application and the future applications, and in addition to the components shown in the figure, each device in the present application and the future applications can include more or less components, or combine some components, or different arrangement of components. Figure 2 Figure 1 Figure 2 Figure 2 Figure 1 Figure 2 Each device in the present application and the future applications can include more or less components than those shown in the figure, or combine some components, or different arrangement of components.

[0062] In the embodiments of the present application, the chip system can be composed of a chip, or can include a chip and other discrete devices.

[0063] In addition, the actions, terms, etc. involved in each embodiment of the present application can be mutually referred to, which is not limited. The message name or parameter name in the message exchanged between each device in the embodiments of the present application is only an example, and other names can also be used in the specific implementation, which is not limited.

[0064] The following will be described in detail with reference to the accompanying drawings. Figure 1 ​​​​​The communication system shown, the data transmission method provided by the embodiments of the present application is described. Among them, the actions, terms and the like involved in the embodiments of the present application can be mutually referenced, and are not limited. The message name or parameter name in the message between the devices in the embodiments of the present application is only an example, and other names can also be used in specific implementation, and are not limited. The actions involved in the embodiments of the present application are only an example, and other names can also be used in specific implementation, such as: the "include" in the embodiments of the present application can also be replaced by "carried in" or "carried in" and the like.

[0065] In order to solve the problems existing in the prior art, the embodiments of the present application provide a routing exception determination method, which is used to reduce the resource occupation of determining abnormal update information. As shown in the figure, Figure 3 The method comprises:

[0066] S301, in the case that there is an abnormal transmission interface in the plurality of transmission interfaces of the core router in the first time period, the server determines the second time period based on the center time of the first time period and the preset time length.

[0067] As an optional implementation, the implementation process of S301 can be: the server can obtain the traffic and / or transmission rate of each transmission interface of the core router in the first time period, and determine whether there is an abnormal transmission interface in the plurality of transmission interfaces based on the traffic and / or transmission rate of each transmission interface. In the case that there is an abnormal transmission interface in the plurality of transmission interfaces of the core router in the first time period, the server can determine a time period (referred to as a third time period) before the center time and a time period (referred to as a fourth time period) after the center time as the second time period, wherein the time length corresponding to the third time period and the time length corresponding to the fourth time period are both preset time lengths.

[0068] For example, the center time is 20XX X month X day 10:00, and the preset time length is 5 minutes: the server can determine the second time period as 20XX X month X day 9:55 to 20XX X month X day 10:05.

[0069] Optionally, the time length corresponding to the second time period can be less than or equal to the time length corresponding to the first time period. For example, the time length corresponding to the second time period is 10 minutes, and the time length corresponding to the first time period is also 10 minutes; for example, the time length corresponding to the second time period is 8 minutes, and the time length corresponding to the first time period is 10 minutes. In this case, the probability that the routing update instruction obtained by the server from the second time period is an abnormal routing update instruction is higher, so as to improve the accuracy of determining the abnormal update instruction.

[0070] It should be noted that the above is only an exemplary description of the relationship between the first time period and the second time period, and the embodiments of the present application do not make any limitation on the relationship between the first time period and the second time period.

[0071] Optionally, in the case that there is no abnormal transmission interface in the plurality of transmission interfaces of the core router in the first time period, the server can determine whether there is an abnormal transmission interface in the plurality of transmission interfaces in other time periods, and in the case that there is an abnormal transmission interface in the plurality of transmission interfaces in other time periods, determine the second time period based on the central time of the other time period and the preset time length.

[0072] S302, the server acquires the route update instruction in the second time period, and determines the transmission interface of the route information corresponding to the route update instruction.

[0073] The route information includes original route information and / or route update information obtained by updating the original route information based on the route update instruction.

[0074] As an optional implementation, in the case that the route information includes the original route information and the route update information, the implementation process of S302 can be that the server acquires the route update instruction in the second time period, and determines whether the route update instruction is the first update in the current first cycle. If yes, the server acquires the route information at the start time in the current first cycle (denoted as initial route information), and determines that the initial route information is the original route information. The server can update the original route information based on the route update instruction, and determine that the route information obtained after the update is the route update information. The server determines the transmission interface of the original route information and the transmission interface of the route update information.

[0075] If no, the server acquires the route update information obtained in the last route update process, and determines the route update information in the last route update process as the original route information. The server can update the original route information based on the route update instruction, and determine that the route information obtained after the update is the route update information. The server determines the transmission interface of the original route information and the transmission interface of the route update information.

[0076] In an optional implementation, the implementation process of the server acquiring the route update instruction in the second time period can be that the server directly acquires the route update instruction in the second time period from the side of the core router.

[0077] In another optional implementation, the server obtaining the implementation of the routing update instruction in the second time period can be: the server obtains the initial routing information of the core router according to the first period, obtains the routing update instruction and the routing update information of the core router according to the second period, and stores the obtained initial routing information, the routing update instruction and the routing update information into the local database, so that the server can directly obtain the routing update instruction in the second time period from the local database.

[0078] Optionally, the first period can be greater than the second period. For example, the first period can be 1 day, and the second period can be 5 minutes. The above is only an exemplary description of the first period and the second period, and the first period and the second period in the present application can also be other time lengths (for example, the first period can be 2 days, and the second period can be 10 minutes), which are not limited in the present application.

[0079] Optionally, as to the case of including the initial routing information or the routing update information in the routing information, the implementation of S302 can be understood with reference to the description of the corresponding position, which will not be described here.

[0080] In an optional embodiment, the routing update instruction includes at least one of the following: the routing update instruction sent by the core router to the network device and the terminal device, and the routing update instruction sent by the terminal device to the core router.

[0081] In this embodiment, the server can delete the routing update instruction sent by the network device to the core router (i.e., the routing update instruction of the upper link outside the AS) in the obtained routing update instruction, and only keep the routing update instruction sent by the core router to the network device and the terminal device (i.e., the routing update instruction inside the AS), and the routing update instruction sent by the terminal device to the core router (i.e., the routing update instruction of the lower link outside the AS).

[0082] It can be understood that the network device sends a large number of route update instructions to the core router, but not every route update instruction causes a large amount of traffic change, and not every route update instruction is the source of the fault. Generally, the route update instruction generated based on the service opening and network adjustment causes a large amount of traffic change, but is not an abnormal route update instruction, and the route update instruction generated based on the service opening and network adjustment is less likely to cause a route update fault, that is, the route update instruction sent by the network device to the core router (i.e., the route update instruction of the AS external uplink) is less likely to cause a route update fault. Therefore, the method filters out the route update instruction sent by the network device to the core router (i.e., the route update instruction of the AS external uplink), which can reduce the data amount of the server determining the abnormal update instruction and improve the efficiency of determining the abnormal route update instruction.

[0083] Optionally, for the route update based on the route update instruction sent by the network device to the core router (i.e., the route update instruction of the AS external uplink), the server can determine the abnormal route update instruction based on the traffic change of the docking transmission interface of the BGP neighbor router of the core router, in combination with the corresponding route information. The specific implementation process can be understood with reference to the description of the corresponding position, which will not be described here.

[0084] It can be understood that, since the core router stores the route update instruction of the router in the AS, the server can only interact with the core router to obtain the route update instruction of the core router, without interacting with each router in the AS, thereby reducing the communication overhead.

[0085] S303, in the case that the transmission interface corresponding to the original route information is consistent with the abnormal transmission interface, and / or the transmission interface corresponding to the route update information is consistent with the abnormal transmission interface, the server determines that the route update instruction is an abnormal route update instruction.

[0086] Exemplarily, taking the transmission interface corresponding to the original route information as A and the transmission interface corresponding to the route update information as B as an example: in the case that the abnormal transmission interface is A, the server determines that the route update instruction is an abnormal route update instruction. In the case that the abnormal transmission interface is B, the server determines that the route update instruction is an abnormal route update instruction.

[0087] Optionally, in the case that the transmission interface corresponding to the original route information is inconsistent with the abnormal transmission interface, and the transmission interface corresponding to the route update information is inconsistent with the abnormal transmission interface, the server determines that the route update instruction is a normal route update instruction.

[0088] In combination with the above examples, in the case that the abnormal transmission port is neither A nor B (i.e., the abnormal transmission interface is other than A and B), the server determines that the routing update instruction is a normal routing update instruction.

[0089] The technical solution described above at least has the following beneficial effects: The routing abnormality determination method provided in the present application filters out the routing update instruction that actually affects the abnormal state of the transmission interface based on the comparison result of the transmission interface of the routing information corresponding to the routing update instruction and the abnormal transmission interface. Since the abnormal routing update instruction directly reflects the abnormal state of the transmission interface, the server can determine the routing update instruction that actually affects the abnormal state of the transmission interface as the abnormal routing update instruction.

[0090] Since the abnormal routing update instruction is most likely to cause transmission abnormalities, the routing update instruction in the time period related to the abnormal transmission interface (i.e., the second time period) is more likely to be an abnormal routing update instruction. Accordingly, the routing update instruction in other time periods is less likely to be an abnormal routing update instruction. Based on this, the server acquires the routing update instruction in the second time period, so that the server can only perform the above-described judgment (i.e., the judgment of whether it is an abnormal routing update instruction) on the routing update instruction, reducing the redundant operation for determining the abnormal update instruction, and further reducing the resource occupation for determining the abnormal routing instruction.

[0091] In an optional embodiment, as shown in S301, the server needs to execute the subsequent steps only in the case that there is an abnormal transmission interface in the plurality of transmission interfaces in the first time period. Based on this, before S301, the server needs to determine whether there is an abnormal transmission interface in the plurality of transmission interfaces of the core router in the first time period. In Figure 3 Based on the method embodiment shown in the figure, the present embodiment provides a possible implementation manner, as shown in Figure 4 The implementation process of the server determining whether there is an abnormal transmission interface in the plurality of transmission interfaces of the core router in the first time period can be determined through the following S401 to S402.

[0092] S401, the server determines the absolute value of the traffic difference value of each transmission interface based on the traffic of each transmission interface in the third time period before the center time and the traffic of each transmission interface in the third time period after the center time.

[0093] The first time period includes the third time period before the center time and the third time period after the center time.

[0094] As a possible implementation manner, the implementation process of S401 can be: the server can collect the traffic of each transmission interface in a third time period before the center time and the traffic of each transmission interface in a third time period after the center time. The server compares the traffic of a transmission interface in the third time period before the center time and the traffic of the transmission interface in the third time period after the center time in sequence, obtains the traffic difference of the transmission interface in the third time period before the center time and the third time period after the center time, and determines the absolute value of the traffic difference of the transmission interface. The server can determine the absolute value of the traffic difference of each transmission interface based on the above method.

[0095] As another possible implementation manner, the implementation process of S401 can also be: the server can collect the transmission rate of each transmission interface at each collection time. The server adds the transmission rate of a transmission interface at each collection time before the center time, and adds the transmission rate of the transmission interface at each collection time after the center time. The server obtains the traffic of the transmission interface in the third time period before the center time and the traffic of the transmission interface in the third time period after the center time in the manner of transmission rate multiplied by time, and determines the difference of the traffic of the transmission interface and the absolute value of the difference. The server can determine the absolute value of the traffic difference of each transmission interface based on the above method.

[0096] As an optional implementation manner, the server can use a network traffic monitoring graphical analysis tool (for example, cacti software) to collect the traffic or transmission rate of each transmission interface.

[0097] It should be noted that the cacti software obtains data through a simple network management protocol (SNMP).

[0098] Optionally, the server can set the collection interval of the traffic or transmission rate to 1 minute. The above is only an exemplary description of the collection interval, and the collection interval of the traffic or transmission rate provided by the embodiments of the present application can also be other values (for example, 2 minutes), which is not limited by the present application.

[0099] S402, in the case that the absolute value of the traffic difference of any transmission interface is greater than or equal to a first preset threshold, the server determines that there is an abnormal transmission interface in the plurality of transmission interfaces in the first time period.

[0100] Optionally, the server can set the first preset threshold according to actual conditions. For example, the server sets the first preset threshold as 10 GB. The above is only an exemplary description of the first preset threshold, and the first preset threshold can also be other values (for example, 20 GB), which are not limited in the present application.

[0101] The technical solution described above at least brings the following beneficial effects: The flow abnormality determination method provided by the present application determines the absolute value of the flow difference value of the two third time periods before and after the first time period of the transmission interface through the server by comparing the flows of the adjacent two time periods of the transmission interface in the first time period, and compares the absolute value of the flow difference value with the first preset threshold, and determines that the transmission interface with a large flow change in the first time period is an abnormal transmission interface. Based on the above method, the server can determine the transmission interface with abnormal flow change in the first time period, and then determine the time range of the route update that may affect the abnormal flow change of the transmission interface, thereby providing a data basis for subsequent determination of abnormal route update, and improving the efficiency of determining abnormal route update instruction.

[0102] In an optional embodiment, in Figure 3 Based on the method embodiment shown, the present embodiment provides a possible implementation manner, such as Figure 5 As shown, the implementation process of the server to determine whether there is an abnormal transmission interface in the plurality of transmission interfaces of the core router in the first time period can also be determined through S501 to S502.

[0103] S501, the server determines the transmission rate ratio of each transmission interface based on the transmission rate of each transmission interface in the third time period before the center time and the transmission rate of each transmission interface in the third time period after the center time.

[0104] As a possible implementation manner, the implementation process of S501 can also be: the server can collect the transmission rate of each transmission interface at each collection time. The server adds the transmission rate of one transmission interface at each collection time before the center time, and adds the transmission rate of the transmission interface at each collection time after the center time. The server determines the ratio of the rate of the transmission interface after the center time to the rate of the transmission interface before the center time as the transmission rate ratio of the transmission interface.

[0105] S502, in the case that the transmission rate ratio of any transmission interface is greater than or equal to the second preset threshold, and / or the transmission rate ratio of any transmission interface is less than or equal to the third preset threshold, the server determines that there is an abnormal transmission interface in the plurality of transmission interfaces in the first time period.

[0106] Optionally, the server can set the second preset threshold and the third preset threshold according to actual conditions. For example, the server sets the second preset threshold as 5 and the third preset threshold as 0.5. The above is only an exemplary description of the second preset threshold and the third preset threshold, and the second preset threshold and the third preset threshold can also be other values (for example, the second preset threshold is 6 and the third preset threshold is 0.7), which are not limited in the present application.

[0107] As an example, taking the collection interval of the transmission rate as 1 minute, the center time as 1:00, the third time period before the center time as 0:55-0:59, the third time period after the center time as 1:00-1:04, the second preset threshold as 5, and the third preset threshold as 0.7 as an example: the server adds the rates of the five collection points of the transmission interface from 0:55 to 0:59 to obtain a value (denoted as value #1), and adds the rates of the five collection points of the target transmission interface from 1:00 to 1:04 to obtain a value (denoted as value #2). The server divides the above value #1 by value #2 to obtain a ratio. In the case that the above ratio is greater than or equal to 5, the server determines that the transmission interface is an abnormal transmission interface. In the case that the above ratio is less than or equal to 0.7, the server determines that the transmission interface is an abnormal transmission interface. In the case that the above ratio is greater than 0.7 and less than 5, the server determines that the transmission interface is a normal transmission interface.

[0108] The technical solution at least brings the following beneficial effects: the flow abnormality determination method provided in the present application determines the ratio of the sum of the transmission rates in the two third time periods before and after the first time period of the transmission interface by comparing the transmission rates of the transmission interface in the adjacent two time periods in the first time period, and compares the ratio with the second preset threshold or the third preset threshold to determine the transmission interface with a large change in the transmission rate in the first time period as an abnormal transmission interface. Based on the above method, the server can determine the transmission interface with an abnormal change in the transmission rate in the first time period, and further determine the time range of the route update that may affect the abnormal change in the transmission rate of the transmission interface, thereby providing a data basis for subsequent determination of abnormal route update.

[0109] In an optional embodiment, after determining the abnormal transmission interface and the abnormal route update instruction, the server can form alarm information from the original route information, the route update information, and the abnormal transmission interface. The above alarm information can not only prompt maintenance personnel to timely process the failure caused by the above abnormal route update instruction, but also facilitate subsequent maintenance personnel to quickly locate the abnormal route update. Figure 5 Based on the method embodiment shown in the present application, the present embodiment provides a possible implementation manner, such as Figure 6As shown, the server determines the implementation process of the alarm information can be determined by the following S601.

[0110] S601, the server determines the alarm information based on the original routing information, the routing update information, and the abnormal transmission interface.

[0111] As a possible implementation, the server can also determine the alarm information based on the original routing information, the routing update information, the abnormal transmission interface, and the abnormal routing update instruction.

[0112] In a possible implementation, the types of information included in the original routing information and the routing update information can be the same. For example, the types of information can include at least one of the following: destination network, subnet mask, transmission interface, next hop address. The above is only an exemplary description of the type of information, and the type of information provided by the embodiments of the application can also include other information (for example, metric value), which is not limited by the application.

[0113] Optionally, the alarm information can also include other information (for example, the traffic of the abnormal transmission interface), which is not limited by the application.

[0114] As an optional implementation, for the determined abnormal transmission interface, since the traffic of each transmission interface varies differently, the server can determine different levels of alarm information according to the specific variation of each abnormal transmission interface in the abnormal transmission interface.

[0115] The above technical solution at least brings the following beneficial effects: the routing exception determination method provided by the application, the server determines the alarm information based on the original routing information, the routing update information, and the abnormal transmission interface, not only can prompt the maintenance personnel to process the fault caused by the abnormal routing update instruction in time, but also is convenient for subsequent maintenance personnel to quickly locate the abnormal routing update, and then exclude the router failure caused by the abnormal routing update, thereby improving the efficiency of excluding routing failure.

[0116] In an optional embodiment, the implementation process in which the server acquires the initial routing information on the core router according to the first period can be that the server sends a routing information collection command (display ip routing) to the core router. Correspondingly, the core router receives the routing information collection command from the server and runs the routing information collection command to obtain a collection result. The core router can process the collection result to obtain the initial routing information and send the initial routing information to the server. Correspondingly, the server receives the initial routing information from the core router.

[0117] For example, an example of the initial routing information is shown as follows.

[0118] <r1-c-gdgz-kxc>dis pip routing-table

[0119] Route Flags: R-relay, D-download to fid, T-to vpn-instance, B-black hole route Routing Table: _public_

[0120] Destinations: 962368 Routes: 972749

[0121]

[0122] In an alternative embodiment, the implementation process of the server acquiring the route update instruction and / or the route update information on the core router according to the second period can be: the server sends a route information collection command (disp ip routing-table time-range 0d0h0m0s0d0h5m0s) to the core router. Correspondingly, the core router receives the route information collection command from the server and runs the above route information collection command to obtain a collection result. The core router can process the above collection result to obtain initial route information and send the initial route information to the server. Correspondingly, the server receives the initial route information from the core router.

[0123] For example, one example of the route update information is shown as follows.

[0124] <r1-c-gdgz-kxc>disp ip routing-table time-range 0d0h0m0s 0d0h5m0s | exclude 100GE

[0125] Info:It will take a long time if the content you search is too much or the string you inpeak.

[0126] Routing Table:_public_

[0127] Destinations:962210 Routes:972591

[0128]

[0129]

[0130] <r1-c-gdgz-kxc>

[0131] <r1-c-gdgz-kxc>

[0132] <r1-c-gdgz-kxc>

[0133] <r1-c-gdgz-kxc>

[0134] <r1-c-gdgz-kxc>disp clock 2023-02-02 15:44:06+08:00

[0135] In an alternative embodiment, the implementation process of the server screening the routing update information obtained by the core router performing routing update based on the routing update instruction sent by the core router to the network device and the terminal device can be: the server sends a screening command (disp ip routing-table time-range 0d0h0m0s0d0h5m0s|exclude 100GE) to the core router. Correspondingly, the core router receives the screening command from the server and runs the above-mentioned screening command to obtain the screening result. The core router can process the above-mentioned screening result to obtain the routing update information obtained by the core router performing routing update based on the routing update instruction sent by the core router to the network device and the terminal device, and send the above-mentioned routing update information to the server. Correspondingly, the server receives the above-mentioned routing update information from the core router.

[0136] For example, one example of the above-mentioned routing update information is shown as follows.

[0137] <r1-c-gdgz-kxc>disp ip routing-table protocol bgp time-range 0d 0h 0m 0s 0d 0h 5m 0s

[0138] Info:It will take a long time if the content you search is too muchor the string you inpeak.

[0139] Route Flags:R-relay,D-download to fid,T-to vpn-instance,B-black hole

[0140] _public_Routing Table:BGP

[0141] Destinations:959707Routes:959707

[0142] BGP routing table status: <active>

[0143] Destinations:959096Routes:959096

[0144]

[0145] It is understood that the above-described route anomaly determination method can be implemented by a route anomaly determination device. To achieve the above functions, the route anomaly determination device includes hardware structures and / or software modules corresponding to the execution of each function. Those skilled in the art should readily recognize that, based on the modules and algorithm steps of the various examples described in conjunction with the embodiments disclosed herein, the embodiments disclosed in this application can be implemented in hardware or a combination of hardware and computer software. Whether a function is executed in hardware or by computer software driving hardware depends on the specific application and design constraints of the technical solution. Those skilled in the art can use different methods to implement the described functions for each specific application, but such implementation should not be considered beyond the scope of the embodiments disclosed in this application.

[0146] The embodiments disclosed in this application can divide the routing anomaly determination device generated by the above method example into functional modules. For example, each function can be divided into its own functional module, or two or more functions can be integrated into one processing module. The integrated module can be implemented in hardware or as a software functional module. It should be noted that the module division in the embodiments disclosed in this application is illustrative and only represents one logical functional division. In actual implementation, there may be other division methods.

[0147] Figure 7 This is a schematic diagram of a routing anomaly determination device provided in an embodiment of the present invention. Figure 7 As shown, the routing anomaly determination device 70 can be used to perform... Figures 3-6 The method for determining routing anomalies is shown. The routing anomaly determination device 70 includes a processing unit 701 and a communication unit 702.

[0148] Processing unit 701 is used to determine a second time period based on the center time of the first time period and a preset duration when an abnormal transmission interface exists among the multiple transmission interfaces of the core router during the first time period; communication unit 702 is used to obtain the routing update instruction within the second time period and determine the transmission interface of the routing information corresponding to the routing update instruction; the routing information includes: original routing information, and / or, routing update information obtained after updating the original routing information based on the routing update instruction; processing unit 701 is also used to determine that the routing update instruction is an abnormal routing update instruction when an abnormal transmission interface exists among the transmission interfaces corresponding to the routing information.

[0149] In a possible implementation, the communication unit 702 is further configured to acquire the traffic of each transmission interface in the third time period and the traffic in the fourth time period; the processing unit 701 is further configured to determine the absolute value of the traffic difference of each transmission interface based on the traffic of each transmission interface in the third time period and the traffic in the fourth time period; and the processing unit 701 is further configured to determine that there is an abnormal transmission interface in the plurality of transmission interfaces in the first time period in a case where the absolute value of the traffic difference of any transmission interface is greater than or equal to the first preset threshold.

[0150] In a possible implementation, the communication unit 702 is further configured to acquire the traffic of each transmission interface in the third time period and the transmission rate in the fourth time period; the processing unit 701 is further configured to determine the transmission rate ratio of each transmission interface based on the traffic of each transmission interface in the third time period and the transmission rate in the fourth time period; and the processing unit 701 is further configured to determine that there is an abnormal transmission interface in the plurality of transmission interfaces in the first time period in a case where the transmission rate ratio of any transmission interface is greater than or equal to the second preset threshold and / or the transmission rate ratio of any transmission interface is less than or equal to the third preset threshold.

[0151] In a possible implementation, the processing unit 701 is further configured to determine the alarm information based on the original routing information, the routing update information, and the abnormal transmission interface.

[0152] Those skilled in the art can clearly understand the system, apparatus and unit by the description of the foregoing embodiments. For the convenience and brevity of description, only the division of the foregoing functional modules is taken as an example for illustration. In actual applications, the foregoing functions can be completed by different functional modules according to needs, that is, the internal structure of the apparatus is divided into different functional modules to complete all or part of the functions described above. The specific working process of the system, apparatus and unit described above can refer to the corresponding process in the foregoing method embodiments, and will not be described herein.

[0153] The present disclosure further provides a computer-readable storage medium, which stores instructions. When the instructions in the storage medium are executed by a processor of an electronic device, the electronic device can perform the routing anomaly determination method provided in the foregoing embodiments of the present disclosure.

[0154] The embodiments of the present disclosure further provide a computer program product containing instructions, which, when running on an electronic device, causes the electronic device to perform the routing anomaly determination method provided in the foregoing embodiments of the present disclosure.

[0155] The computer readable storage medium, for example, can be, but is not limited to, an electronic, magnetic, optical, electromagnetic, infrared, or semiconductor system, apparatus, or device, or any suitable combination of the foregoing. More specific examples (a non-exhaustive list) of the computer readable storage medium include: an electrical connection having one or more wires, a portable computer diskette, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or Flash memory), a register, a hard disk, an optical fiber, a portable compact disc read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the foregoing, or any other medium from which a computer can read instructions. An exemplary storage medium is coupled to the processor such that the processor can read information from, and write information to, the storage medium. In the alternative, the storage medium can be integral to the processor. The processor and the storage medium can reside in an application-specific integrated circuit (ASIC). Alternatively, the processor and the storage medium can exist as discrete components. In some implementations, the processor and the storage medium can be located in a single ASIC. The steps of a method or algorithm can be embodied in a program of instructions, either directly or indirectly, stored in a storage medium such as the storage medium described above. In other implementations, the methods or algorithms can be embodied in computer readable instructions transmitted over a computer network.

[0156] The above merely provides the specific implementation of the present application, but the protection scope of the present application is not limited to this. Any change or replacement within the technical scope disclosed in the present application should be covered in the protection scope of the present application. Therefore, the protection scope of the present application should be subject to the protection scope of the claims.< / active> < / r1-c-gdgz-kxc> < / r1-c-gdgz-kxc> < / r1-c-gdgz-kxc> < / r1-c-gdgz-kxc>

Claims

1. A method of determining a routing anomaly, the method comprising: The method comprises: In the case that there is an abnormal transmission interface in the plurality of transmission interfaces of the core router in a first time period, determining a second time period based on a center time of the first time period and a preset time length; Obtaining a routing update instruction in the second time period, and determining a transmission interface of routing information corresponding to the routing update instruction; the routing information comprises original routing information and / or routing update information obtained by performing routing update on the original routing information based on the routing update instruction; In the case that the abnormal transmission interface exists in the transmission interface corresponding to the routing information, determining that the routing update instruction is an abnormal routing update instruction.

2. The method of claim 1, wherein, The first time period comprises a third time period before the center time and a fourth time period after the center time, and the method further comprises: Obtaining a traffic in the third time period and a traffic in the fourth time period of each transmission interface; Determining an absolute value of a traffic difference value of each transmission interface based on the traffic in the third time period and the traffic in the fourth time period of each transmission interface; In the case that the absolute value of the traffic difference value of any transmission interface is greater than or equal to a first preset threshold, it is determined that the abnormal transmission interface exists in the plurality of transmission interfaces in the first time period.

3. The method of claim 1, wherein, The first time period comprises a third time period before the center time and a fourth time period after the center time, and the method further comprises: Obtaining a traffic in the third time period and a transmission rate in the fourth time period of each transmission interface; Determining a transmission rate ratio of each transmission interface based on the traffic in the third time period and the transmission rate in the fourth time period of each transmission interface; In the case that the transmission rate ratio of any transmission interface is greater than or equal to a second preset threshold and / or the transmission rate ratio of the any transmission interface is less than or equal to a third preset threshold, it is determined that the abnormal transmission interface exists in the plurality of transmission interfaces in the first time period.

4. The method according to any one of claims 1 to 3, characterized in that, The routing update instruction comprises at least one of a routing update instruction sent by the core router to a network device and a terminal device and a routing update instruction sent by the terminal device to the core router.

5. The method according to any one of claims 1 to 3, characterized in that, The method further comprises: Determining alarm information based on the original routing information, the routing update information and the abnormal transmission interface.

6. A routing anomaly determination apparatus characterized by comprising: The apparatus comprises a processing unit and a communication unit; The processing unit is configured to, in the case that there is an abnormal transmission interface in the plurality of transmission interfaces of the core router in a first time period, determine a second time period based on a center time of the first time period and a preset time length; The communication unit is configured to obtain a routing update instruction in the second time period, and determine a transmission interface of routing information corresponding to the routing update instruction; the routing information comprises original routing information and / or routing update information obtained by performing routing update on the original routing information based on the routing update instruction; The processing unit is configured to, in the case that the abnormal transmission interface exists in the transmission interface corresponding to the routing information, determine that the routing update instruction is an abnormal routing update instruction. The processing unit is further configured to determine that the routing update instruction is an abnormal routing update instruction if the abnormal transmission interface exists in the transmission interfaces corresponding to the routing information.

7. The apparatus of claim 6, wherein, The first time period includes a third time period before the center time and a fourth time period after the center time, The communication unit is further configured to obtain the traffic of each transmission interface in the third time period and the traffic of each transmission interface in the fourth time period; The processing unit is further configured to determine the absolute value of the traffic difference of each transmission interface based on the traffic of each transmission interface in the third time period and the traffic of each transmission interface in the fourth time period; The processing unit is further configured to determine that the abnormal transmission interface exists in the plurality of transmission interfaces in the first time period if the absolute value of the traffic difference of any transmission interface is greater than or equal to a first preset threshold.

8. The apparatus of claim 6, wherein, The first time period includes a third time period before the center time and a fourth time period after the center time; The communication unit is further configured to obtain the traffic of each transmission interface in the third time period and the transmission rate of each transmission interface in the fourth time period; The processing unit is further configured to determine the transmission rate ratio of each transmission interface based on the traffic of each transmission interface in the third time period and the transmission rate of each transmission interface in the fourth time period; The processing unit is further configured to determine that the abnormal transmission interface exists in the plurality of transmission interfaces in the first time period if the transmission rate ratio of any transmission interface is greater than or equal to a second preset threshold and / or the transmission rate ratio of the any transmission interface is less than or equal to a third preset threshold.

9. The device of any of claims 6-8, wherein, The routing update instruction includes at least one of the following: a routing update instruction sent by the core router to a network device and a terminal device, and a routing update instruction sent by the terminal device to the core router.

10. The apparatus of any of claims 6-8, wherein, The processing unit is further configured to determine alarm information based on the original routing information, the routing update information, and the abnormal transmission interface.

11. A routing anomaly determination apparatus characterized by comprising: including: a processor and a communication interface; the communication interface and the processor are coupled, and the processor is configured to run computer programs or instructions to implement the routing abnormality determination method in any of claims 1-5.

12. A computer-readable storage medium having stored therein instructions, the computer-readable storage medium comprising: When a computer executes the instructions, the computer executes the routing abnormality determination method in any of claims 1-5.

Images