A user traffic dynamic management method and system

Abstract

The application relates to a user traffic dynamic management method and system, and relates to the technical field of data communication, which comprises the following steps: when a message corresponding to a target user with authentication passed sent by a 3A server is received, traffic data and a user quantity corresponding to different time points are acquired; a traffic threshold and a traffic limit value of the target user in a target time period are determined based on the traffic data and the user quantity; when a real-time traffic value corresponding to a current time window of the target user is greater than the traffic threshold, the traffic limit value is sent to a switch through the 3A server, so that the switch performs traffic management on the target user based on the traffic limit value. Since the user quantity at different time points in the network and the traffic demand of different users are different, the application monitors the traffic data and the user quantity at different time points, so that dynamic and accurate management of user traffic is realized based on the time attribute of the traffic in the network.

Description

TECHNICAL FIELD

[0001] The present application relates to the technical field of data communication, in particular to a user traffic dynamic management method and system. BACKGROUND

[0002] With the continuous deepening of enterprise informatization construction, the production business system, operation management system and office automation system of the enterprise are developed vigorously, and the construction requirements of the enterprise campus network are higher and higher, and the security and manageability become the focus of the construction of the campus network. Among them, the security is the key in the construction of the enterprise campus network, which includes the security control of the physical space and the security control of the network, so a complete security policy control system is needed to realize the security control of the enterprise campus network.

[0003] However, the current campus network access technology pays more attention to the policy management and control when the device accesses; and after the device accesses, the traffic management mode of the device is relatively extensive, usually a fixed threshold value is set in advance, and then the next step is processed according to whether the user traffic exceeds the fixed threshold value; but the fixed threshold value cannot accurately reflect the traffic demand of all user devices, so that the bandwidth cannot be scientifically and reasonably and accurately allocated. SUMMARY

[0004] The present application provides a user traffic dynamic management method and system to realize the dynamic and accurate management of user traffic.

[0005] In a first aspect, a user traffic dynamic management method is provided, comprising the following steps:

[0006] When the message corresponding to the target user who passes the authentication sent by the 3A server is received, the traffic data and the number of users corresponding to different time points are obtained;

[0007] Based on the traffic data and the number of users, the traffic threshold and the traffic limit value of the target user in the target period are determined;

[0008] When the real-time traffic value of the target user in the current time window is greater than the traffic threshold, the 3A server is used to send the traffic limit value to the switch, so that the switch manages the traffic of the target user based on the traffic limit value.

[0009] In some embodiments, the traffic data includes the available total bandwidth value of the target port corresponding to the target user in the current time window, the first traffic value of the target port available for the target type user in the current time window, and the estimated traffic value of the target port in the target period based on the historical traffic data, and the number of users includes the number of users in the current time window and the estimated number of users in the target period based on the historical user data.

[0010] In some embodiments, the determining the traffic threshold and the traffic limit of the target user in the target time period based on the traffic data and the number of users comprises:

[0011] calculating a first maximum traffic value that can be allocated to the target user in the target time period based on the first traffic value and the estimated number of users;

[0012] calculating an actual traffic value that can be allocated to the target user based on the total available bandwidth value and the number of users in the current time window;

[0013] calculating a second maximum traffic value that can be allocated to the target user in the target time period based on the estimated traffic value and the estimated number of users;

[0014] determining the traffic threshold and the traffic limit of the target user in the target time period based on the first maximum traffic value, the actual traffic value and the second maximum traffic value.

[0015] In some embodiments, the determining the traffic threshold and the traffic limit of the target user in the target time period based on the first maximum traffic value, the actual traffic value and the second maximum traffic value comprises:

[0016] taking the maximum value among the first maximum traffic value, the actual traffic value and the second maximum traffic value as the traffic threshold of the target user in the target time period;

[0017] taking the average value of the first maximum traffic value and the second maximum traffic value as the traffic limit of the target user in the target time period.

[0018] In some embodiments, the historical traffic data comprises an annual traffic average value, a monthly traffic average value and a weekly traffic average value of the target port in the target time period, and the historical user data comprises an annual number of users average value, a monthly number of users average value and a weekly number of users average value in the target time period.

[0019] In some embodiments, after the step of performing traffic management on the target user based on the traffic limit by the switch, the method further comprises:

[0020] when detecting that the traffic value of the target user in the current time window is greater than a second traffic value, determining whether the real-time number of users in the current time window is less than a number of users threshold and the traffic limit is less than a third traffic value, the second traffic value being a product of the traffic limit and a preset first percentage, and the third traffic value being a product of the total available bandwidth value and a preset second percentage;

[0021] if yes, re-executing the steps of obtaining the traffic data and the number of users corresponding to different time points;

[0022] If not, the step of traffic management of the target user by the switch based on the traffic limit value is continued.

[0023] In some embodiments, after the step of when the real-time traffic value of the target user corresponding to the current time window is greater than the traffic threshold, the method further comprises:

[0024] sending a traffic exceeding alarm signal to the switch, so that the switch re-sends an authentication request corresponding to the target user to the 3A server based on the traffic exceeding alarm signal.

[0025] In some embodiments, the step of issuing the traffic limit value to the switch by the 3A server, so that the switch performs traffic management on the target user based on the traffic limit value, comprises:

[0026] sending the traffic limit value to the 3A server for storage;

[0027] when the 3A server confirms that the target user is authenticated by the authentication request sent by the switch, issuing the stored traffic limit value to the switch, so that the switch performs traffic management on the target user based on the traffic limit value.

[0028] In a second aspect, a user traffic dynamic management system is provided, comprising a traffic management device, a 3A server and a switch, wherein the traffic management device comprises a collection module, an analysis module and a management module.

[0029] The 3A server is configured to send a message corresponding to the target user authenticated to the collection module;

[0030] The collection module is configured to obtain traffic data and user quantity corresponding to different time points when receiving the message corresponding to the target user authenticated sent by the 3A server;

[0031] The analysis module is configured to determine a traffic threshold and a traffic limit value of the target user in a target period based on the traffic data and the user quantity;

[0032] The management module is configured to issue the traffic limit value to the switch by the 3A server when the real-time traffic value of the target user corresponding to the current time window is greater than the traffic threshold;

[0033] The switch is configured to perform traffic management on the target user based on the traffic limit value.

[0034] In some embodiments, the flow data includes a total available bandwidth value of the target port corresponding to the target user in a current time window, a first flow value of the target port available for the target type user in the current time window, and an estimated flow value of the target port in a target period calculated based on historical flow data, and the number of users includes a current time window user number and an estimated user number in the target period calculated based on historical user data.

[0035] The present application provides a user flow dynamic management method and system, including obtaining flow data and user number corresponding to different time points when receiving a message sent by a 3A server and corresponding to a target user passing authentication; determining a flow threshold and a flow limit value of the target user in a target period based on the flow data and the user number; and when a real-time flow value of the target user in a current time window is greater than the flow threshold, the flow limit value is sent to a switch by the 3A server for the switch to perform flow management on the target user based on the flow limit value. Since the number of users and the demand of different users for flow are different at different time points in the network, the present application monitors the flow data and user number at different time points to achieve dynamic and accurate management of user flow based on the time attribute of flow in the network. BRIEF DESCRIPTION OF DRAWINGS

[0036] In order to more clearly illustrate the technical solutions in the embodiments of the present application, the drawings needed in the embodiment description will be briefly introduced. Obviously, the drawings in the following description are only some embodiments of the present application, and other drawings can be obtained by those skilled in the art without creative labor.

[0037] Figure 1 The flow chart of the user flow dynamic management method provided by the embodiments of the present application is shown.

[0038] Figure 2 The specific flow chart of the flow dynamic management provided by the embodiments of the present application is shown.

[0039] Figure 3 The structure diagram of the user flow dynamic management system provided by the embodiments of the present application is shown. DETAILED DESCRIPTION

[0040] In order to make the purposes, technical solutions, and advantages of the embodiments of the present application clearer, the technical solutions in the embodiments of the present application will be described clearly and completely below with reference to the drawings in the embodiments of the present application. Obviously, the described embodiments are only some of the embodiments of the present application, rather than all the embodiments of the present application. Based on the embodiments in the present application, all other embodiments obtained by those of ordinary skill in the art without creative work fall within the scope of protection of the present application.

[0041] The embodiments of the present application provide a user traffic dynamic management method and system, which can solve the problems in the related art.

[0042] Figure 1 The user traffic dynamic management method provided by the embodiments of the present application comprises the following steps:

[0043] Step S10: When receiving the message corresponding to the target user authenticated successfully sent by the 3A server, the traffic data and the number of users corresponding to different time points are obtained; wherein the traffic data comprises the total available bandwidth value of the target port corresponding to the target user in the current time window, the first traffic value of the target port available for the target type user in the current time window, and the estimated traffic value of the target port in the target period calculated based on the historical traffic data; and the number of users comprises the number of users in the current time window and the estimated number of users in the target period calculated based on the historical user data. The historical traffic data comprises the annual traffic average value, the monthly traffic average value, and the weekly traffic average value of the target port in the target period; and the historical user data comprises the annual user number average value, the monthly user number average value, and the weekly user number average value in the target period.

[0044] Exemplarily, it can be understood that when the to-be-accessed device needs to access the network for data communication, the username and password of the to-be-accessed device need to be sent to the switch first to initiate an authentication request to the switch; and the user access module in the switch, as a client of the 3A server (namely, the AAA server, which is a server program capable of processing user access requests, used to provide authentication, authorization, and account services to manage user access to network servers and provide services to users with access rights), will send the username and password of the to-be-accessed device to the 3A server for authentication.

[0045] The authentication control module in the 3A server will perform authentication processing after receiving the authentication request of the switch, and will perform control policy issuing to the switch according to the ACL (Access Control List) policy stored in the user policy control module in the 3A server after the authentication is passed. It should be noted that the ACL is an ordered rule set that allows or rejects a message through an interface by matching the field parameters in the message, that is, the basic function of the ACL is to allow or reject a message flow based on the established standard. After the switch receives the control policy issued by the 3A server, the switch will continue to issue the policy to the policy deployment module on the switch to control the network resources that can be accessed by the to-be-accessed device. As can be seen, in the embodiment, when controlling user access, not only is the username and password used for authentication, but also policy control management is performed to achieve more accurate access control.

[0046] It should be understood that after the above communication process is implemented to control the access of the to-be-accessed device, the device traffic accessing the network will also be dynamically monitored according to the time attribute of the traffic in the network. Therefore, after the 3A server completes the authentication of the to-be-accessed device, the to-be-accessed device that passes the authentication will be taken as a target user, and the related information of the target user (such as the IP address of the target user, etc.) will be sent to the traffic management device in the embodiment, so that the collection module in the traffic management device can monitor and collect the historical data of the traffic value of the target user at each time point in the historical working days (such as each working day in the previous week, each working day in the previous month, and each working day in the previous year, etc.) and the historical user quantity, and the real-time data of the available total bandwidth value of the target port where the target user is located in the current time window, the first traffic value of the target port in the current time window that can be used by the target type user, and the user quantity in the current time window, and store the collected traffic data and user quantity to the storage module in the traffic management device. The target type user refers to a user of the same type as the target user.

[0047] It should be noted that for an enterprise campus network, the user quantity and traffic will often change greatly during working days, so the embodiment will monitor and collect the traffic and user quantity corresponding to the working days, and other campus networks can determine the required monitoring time period according to actual needs. As can be seen, the storage module can store the historical data of the traffic value of each authenticated user at each time point in the historical working days and the historical user quantity, and the real-time data of the available total bandwidth value of each port in the current time window and the user quantity in the current time window.

[0048] It can be understood that the analysis module in the traffic management device can calculate the annual traffic average, the monthly traffic average and the weekly traffic average of the target port in a time period according to the historical data stored in the storage module, and predict the estimated traffic value of the target port in the time period after weighting the calculated traffic averages. At the same time, the annual user quantity average, the monthly user quantity average and the weekly user quantity average of the target port in a time period are calculated, and the estimated user quantity of the target port in the time period is predicted after weighting the calculated user quantity averages.

[0049] For example, the traffic prediction of the target port in the time period from 9 am to 10 am: according to the stored traffic values of each user in the time period from 9 am to 10 am in the historical working day, the annual traffic average, the monthly traffic average and the weekly traffic average of the target port in the time period from 9 am to 10 am are calculated, and then the estimated traffic value M(foreCast) of the target port in the time period from 9 am to 10 am is calculated according to the following formula: M(foreCast) = λ1*M(year) + λ2*M(month) + λ3*M(week), wherein M(year) represents the annual traffic average, M(month) represents the monthly traffic average, M(week) represents the weekly traffic average, λ1, λ2 and λ3 all represent weighting coefficients, and theoretically the weighting coefficient corresponding to the traffic average closer to the current time is larger, i.e. λ1< λ2< λ3, but the specific value of the weighting coefficient can be determined according to actual needs, as long as the sum of the three is equal to 1.

[0050] For example, the user quantity prediction of the target port in the time period from 9 am to 10 am: according to the stored user quantity in the time period from 9 am to 10 am in the historical working day, the annual user quantity average, the monthly user quantity average and the weekly user quantity average of the target port in the time period from 9 am to 10 am are calculated, and then the estimated user quantity N(foreCast) of the target port in the time period from 9 am to 10 am is calculated according to the following formula: N(foreCast) = λ4*N(year) + λ5*N(month) + λ6*N(week), wherein N(year) represents the annual user quantity average, N(month) represents the monthly user quantity average, N(week) represents the weekly user quantity average, λ4, λ5 and λ6 all represent weighting coefficients, and theoretically the weighting coefficient corresponding to the user quantity average closer to the current time is larger, i.e. λ4< λ5< λ6, but the specific value of the weighting coefficient can be determined according to actual needs, as long as the sum of the three is equal to 1.

[0051] Step S20: determining the traffic threshold and the traffic limit of the target user in the target time period based on the traffic data and the user quantity;

[0052] In the embodiment, the analysis module can estimate the maximum flow value that the target user can be allocated in the target period and calculate the actual flow value that the target user can be allocated after obtaining the available total bandwidth value M(current) of the target port in the current time window, the first flow value M(port) that the target port can provide for the target type user in the current time window, the estimated flow value M(foreCast) of the target port in the target period, the current time window user quantity N(current), and the estimated user quantity N(foreCast) of the target port in the target period. Then, the maximum flow threshold value that the target user can use in the target period and the flow limit value suitable for the target user can be determined according to the maximum flow value that can be allocated and the actual flow value that can be allocated. The flow threshold value and the flow limit value stored in the management module of the flow management device are updated according to the flow threshold value and the flow limit value. Since the flow threshold value and the flow limit value in the target period are predicted by considering the historical data in the whole year, the accuracy of the prediction result is effectively improved.

[0053] Further, the flow threshold value and the flow limit value of the target user in the target period are determined based on the flow data and the user quantity, and the method comprises:

[0054] The first maximum flow value that the target user can be allocated in the target period is calculated based on the first flow value and the estimated user quantity.

[0055] The actual flow value that the target user can be allocated is calculated based on the available total bandwidth value and the current time window user quantity.

[0056] The second maximum flow value that the target user can be allocated in the target period is calculated based on the estimated flow value and the estimated user quantity.

[0057] The flow threshold value and the flow limit value of the target user in the target period are determined by the first maximum flow value, the actual flow value, and the second maximum flow value.

[0058] Exemplarily, in the embodiment, the first flow value M(port) and the estimated user number N(foreCast) are substituted into the following formula: L1=M(port)N(foreCast) to calculate the first maximum flow value L1 that the target user can be allocated in the target period under the maximum bandwidth; then the available total bandwidth value M(current) and the current time window user number N(current) are substituted into the following formula: L2=M(current)N(current) to calculate the actual flow value L2 that the target user can be allocated under the current actual bandwidth and actual user number; the estimated flow value M(foreCast) and the estimated user number N(foreCast) are substituted into the following formula: L3=M(foreCast)N(foreCast) to predict the second maximum flow value L3 that the target user can be allocated in the target period; and finally the first maximum flow value L1, the actual flow value L2 and the second maximum flow value L3 are used to calculate the flow threshold L and the flow limit L(new) of the target user in the target period.

[0059] Further, the determination of the flow threshold and the flow limit of the target user in the target period by the first maximum flow value, the actual flow value and the second maximum flow value comprises:

[0060] taking the maximum value among the first maximum flow value, the actual flow value and the second maximum flow value as the flow threshold of the target user in the target period;

[0061] taking the average value of the first maximum flow value and the second maximum flow value as the flow limit of the target user in the target period.

[0062] Exemplarily, in the embodiment, the maximum flow that the target user can use in the target period is constrained by the maximum value among the first maximum flow value L1, the actual flow value L2 and the second maximum flow value L3, i.e. the maximum value among the first maximum flow value L1, the actual flow value L2 and the second maximum flow value L3 is taken as the flow threshold of the target user in the target period; and meanwhile, the more appropriate flow value that the target user can be allocated in the target period is constrained according to the first maximum flow value L1 and the second maximum flow value L3, i.e. the average value of the first maximum flow value L1 and the second maximum flow value L3 is taken as the flow limit of the target user in the target period, so that the flow allocation for the target user is more scientific and reasonable.

[0063] Step S30: when the real-time flow value of the target user in the current time window is greater than the flow threshold, the flow limit is downloaded to the switch by the 3A server for the switch to perform flow management on the target user based on the flow limit.

[0064] Exemplarily, in the embodiment, after the determination of the traffic threshold and the traffic limit of the target user is completed, the real-time traffic value of the target user in the current time window is also monitored. When it is detected that the real-time traffic value of the target user is greater than the traffic threshold, it indicates that the traffic used by the target user has exceeded the traffic value that can be allocated to the target user by the target port where the target user is located, i.e., the traffic of the target user has exceeded the standard; at this time, the traffic value that can be used by the target user needs to be limited, i.e., the traffic limit is sent to the switch by the 3A server, so that the switch can automatically control and manage the traffic of the target user according to the traffic limit, thereby achieving the purpose of automatic traffic management.

[0065] Further, after the step that the real-time traffic value of the target user in the current time window is greater than the traffic threshold, the method further comprises:

[0066] sending a traffic exceeding standard alarm signal to the switch, so that the switch re-sends an authentication request corresponding to the target user to the 3A server based on the traffic exceeding standard alarm signal.

[0067] Exemplarily, in the embodiment, referring to FIG. 6, when the analysis module detects that the real-time traffic value of the target user in the current time window is greater than the traffic threshold, the abnormality alarm module in the traffic management device will send a traffic exceeding standard alarm signal to the switch to inform the switch that the traffic value of the target user needs to be updated and limited; at this time, the alarm control module of the switch receives the traffic exceeding standard alarm signal, and re-sends a request for authenticating the target user to the 3A server, so that the 3A server re-authenticates the target user and determines whether the traffic of the target user needs to be newly limited according to the authentication result. Figure 2

[0068] Further, the sending of the traffic limit to the 3A server for storage comprises:

[0069] sending the traffic limit to the 3A server for storage;

[0070] when the 3A server confirms that the target user passes the authentication based on the authentication request sent by the switch, sending the stored traffic limit to the switch, so that the switch manages the traffic of the target user based on the traffic limit.

[0071] Exemplarily, in the embodiment, referring to FIG. 6, when the analysis module detects that the real-time traffic value of the target user in the current time window is greater than the traffic threshold, the abnormality alarm module in the traffic management device will send a traffic exceeding standard alarm signal to the switch to inform the switch that the traffic value of the target user needs to be updated and limited; at this time, the alarm control module of the switch receives the traffic exceeding standard alarm signal, and re-sends a request for authenticating the target user to the 3A server, so that the 3A server re-authenticates the target user and determines whether the traffic of the target user needs to be newly limited according to the authentication result. Figure 2 ​As shown, when the analysis module detects that the real-time traffic value of the target user in the current time window is greater than the traffic threshold, the traffic alarm signal is sent to the 3A server at the same time as the traffic alarm signal is sent to the switch, and the traffic limit value corresponding to the target user is sent to the 3A server for storage through the management module, so that the 3A server updates the user data based on the traffic limit value. Therefore, when the 3A server receives the re-sent authentication request of the switch, the target user will be re-authenticated, and if the authentication fails, the message of authentication failure will be sent to the switch to prohibit the target user from accessing; and if the authentication is passed, the corresponding stored traffic limit value and ACL policy will be downloaded to the switch according to the IP address of the target user, so that the switch limits the speed of the target user, thereby realizing the automatic management of traffic.

[0072] Further, after the step of managing the traffic of the target user based on the traffic limit value by the switch, the method further comprises:

[0073] When it is detected that the traffic value of the target user in the current time window is greater than a second traffic value, it is judged whether the real-time number of users in the current time window is less than a user number threshold and the traffic limit value is less than a third traffic value, the second traffic value being a product of the traffic limit value and a preset first percentage, and the third traffic value being a product of the available total bandwidth value and a preset second percentage;

[0074] If yes, the step of obtaining the traffic data and the number of users corresponding to different time points is re-executed;

[0075] If no, the step of managing the traffic of the target user based on the traffic limit value by the switch is continued.

[0076] It should be noted that the specific values of the user number threshold, the first percentage and the second percentage can be determined according to actual needs, and the first percentage and the second percentage can be the same or different, which is not limited herein. For example, the first percentage is set to 90%, the second percentage is set to 80%, and the user number threshold is set to 50.

[0077] It can be understood that when the demand of a user is large, if the user is limited in speed, the traffic after speed limiting may not meet the actual demand of the user. Therefore, the embodiment provides a traffic recovery method after the user is limited in traffic, that is, if the actual demand of the target user is large and there is still spare bandwidth in the current network, the actual situation will be adjusted to calculate a new traffic limit value and re-download to the switch, so that the switch can recover the traffic of the target user.

[0078] Specifically, if the real-time traffic value of the target user in the current time window is less than 90% of L(new), it indicates that the traffic after the speed limiting is sufficient for the target user, and thus no adjustment needs to be made; if the real-time traffic value of the target user in the current time window exceeds 90% of L(new), it indicates that the traffic after the speed limiting is insufficient for the target user, and thus adjustment needs to be made. At this time, it is determined whether the current number of users is less than 50 and whether the value of L(new) is less than 80% of the available total bandwidth value M(current). If not, it indicates that there is no spare bandwidth in the current network, i.e., the target user cannot be provided with a new L(new), and thus the target user is still speed limited according to L(new).

[0079] If the current number of users is less than 50 and the value of L(new) is less than 80% of the available total bandwidth value M(current), it indicates that there is idle network traffic, and then a new L(new) is calculated for the target user according to the foregoing algorithm, and the traffic limit value in the user data table (the user data table includes but is not limited to user IP, traffic value of the user at each time point, allowed actions of the user, and traffic threshold and traffic limit value corresponding to the user) in the 3A server is updated, and a traffic limit update signal is sent to the switch. The switch receives the traffic limit update signal, reinitiates authentication of the target user to the 3A server, and after the target user passes the authentication, the 3A server downloads the ACL policy and the new traffic limit value in the user data table to the switch, so that the switch performs speed limiting control on the target user based on the new traffic limit value, thereby realizing traffic recovery operation on the user whose traffic is limited, and completing dynamic and accurate adjustment of user traffic and accurate policy control of the user.

[0080] As can be seen, in the embodiment, after the target user accesses, the policy control is downloaded, data is collected, and specific algorithm data analysis is performed on historical data such as the number of users and traffic bandwidth at different time points in the network, to dynamically calculate a reasonable traffic threshold in the current network and a traffic limit value suitable for the user based on the time attribute of the traffic in the network, and then dynamically and accurately manage the accessed target user.

[0081] Referring to Figure 3 The embodiment of the present application further provides a user traffic dynamic management system, comprising a traffic management device, a 3A server and a switch, wherein the traffic management device comprises an acquisition module, an analysis module and a management module;

[0082] The 3A server is configured to send a message corresponding to the target user passing the authentication to the acquisition module;

[0083] The collection module is configured to acquire the traffic data and the number of users corresponding to different time points when a message corresponding to the target user who passes the authentication is received from the 3A server.

[0084] The analysis module is configured to determine a traffic threshold and a traffic limit value of the target user in a target time period based on the traffic data and the number of users.

[0085] The management module is configured to send the traffic limit value to the switch through the 3A server when the real-time traffic value corresponding to the current time window of the target user is greater than the traffic threshold.

[0086] The switch is configured to perform traffic management on the target user based on the traffic limit value.

[0087] It can be understood that the traffic management device in the embodiment includes a collection module, a storage module, an analysis module, a management module, and an abnormality alarm module. The collection module is mainly configured to collect the traffic of the user who passes the authentication on the port. The storage module is mainly configured to store the traffic data and the IP information of the user collected by the collection module. The analysis module is mainly configured to analyze the collected traffic data. The management module is mainly configured to send the data result obtained by the data analysis to the 3A server to realize data synchronization. The abnormality alarm module is mainly configured to send an abnormality alarm signal to the switch and the 3A server.

[0088] The 3A server in the embodiment includes a user policy control module and an authentication control module. The user policy control module is mainly configured to synchronize the user data (such as the traffic limit value) sent from the management module and update the user data table, and then send the corresponding policy and traffic limit to the user who initiates the authentication on the switch according to the user data table. The authentication control module is mainly configured to perform authentication processing on the username and password sent from the switch, and then perform policy and traffic control through the user policy control module after the authentication is passed.

[0089] The switch in the embodiment includes a user access module, an alarm control module, and a policy deployment module. The user access module is mainly configured to receive the authentication request of the user, that is, after the user inputs the username and password, the user access module initiates the authentication request to the 3A server. The alarm control module is mainly configured to receive the alarm signal sent from the abnormality alarm module and reinitiate the authentication to the 3A server. The policy deployment module is mainly configured to receive the policy and the traffic limit value sent from the 3A server and send the corresponding configuration to manage the access and the traffic limit value of the user.

[0090] The above data interaction between the modules is used to complete the monitoring of the traffic data and the number of users at different time points, and the dynamic and accurate management of the user traffic is realized based on the time attribute of the traffic in the network.

[0091] It should be noted that, for the convenience and brevity of description, the specific working processes of the system and each module described above can be referred to the corresponding processes in the foregoing embodiments of the user flow dynamic management method, and will not be described herein.

[0092] It should be noted that, in this document, the terms "comprise", "contain" or any other variant thereof are intended to cover non-exclusive inclusions, so that a process, method, article or system including a series of elements not only includes those elements, but also includes other elements not explicitly listed or inherent to such a process, method, article or system. Without more limitations, the element defined by the statement "comprises a" does not exclude the existence of other identical elements in the process, method, article or system including the element.

[0093] The above description is merely one specific implementation of the present application, enabling those skilled in the art to understand or implement the present application. Various modifications to these embodiments will be apparent to those skilled in the art, and the general principles defined herein can be implemented in other embodiments without departing from the spirit or scope of the present application. Therefore, the present application will not be limited to these embodiments shown herein, but will conform to the widest scope consistent with the principles and novel features applied herein.

Claims

1. A method for dynamic management of user traffic, characterized by, The method comprises the following steps: When receiving the message corresponding to the target user with authentication passed sent by the 3A server, the traffic data and the number of users corresponding to different time points are obtained, wherein the traffic data comprises the available total bandwidth value of the target port corresponding to the target user in the current time window, the first traffic value of the target port available for the target type user in the current time window, and the estimated traffic value of the target port in the target period calculated based on the historical traffic data, and the number of users comprises the number of users in the current time window and the estimated number of users in the target period calculated based on the historical user data; the historical traffic data comprises the annual, monthly and weekly traffic average values of the target port in the target period, and the historical user data comprises the annual, monthly and weekly user number average values in the target period; The traffic threshold and the traffic limit value of the target user in the target period are determined based on the traffic data and the number of users; The traffic threshold and the traffic limit value of the target user in the target period are determined based on the traffic data and the number of users, comprising: The first maximum traffic value that can be allocated to the target user in the target period is calculated based on the first traffic value and the estimated number of users; The actual traffic value that can be allocated to the target user is calculated based on the available total bandwidth value and the number of users in the current time window; The second maximum traffic value that can be allocated to the target user in the target period is calculated based on the estimated traffic value and the estimated number of users; The traffic threshold and the traffic limit value of the target user in the target period are determined based on the first maximum traffic value, the actual traffic value and the second maximum traffic value; When the real-time traffic value of the target user in the current time window is greater than the traffic threshold, the traffic limit value is sent to the switch by the 3A server for the switch to perform traffic management on the target user based on the traffic limit value.

2. The user traffic dynamic management method of claim 1, wherein, The traffic threshold and the traffic limit value of the target user in the target period are determined based on the first maximum traffic value, the actual traffic value and the second maximum traffic value, comprising: The maximum value among the first maximum traffic value, the actual traffic value and the second maximum traffic value is taken as the traffic threshold of the target user in the target period; The average value of the first maximum traffic value and the second maximum traffic value is taken as the traffic limit value of the target user in the target period.

3. The user traffic dynamic management method of claim 1, wherein, After the step of the switch performing traffic management on the target user based on the traffic limit value, further comprising: When it is detected that the traffic value of the target user in the current time window is greater than the second traffic value, it is judged whether the real-time number of users in the current time window is less than the user number threshold and the traffic limit value is less than the third traffic value, the second traffic value being the product of the traffic limit value and a preset first percentage, and the third traffic value being the product of the available total bandwidth value and a preset second percentage; If yes, the step of obtaining the traffic data and the number of users corresponding to different time points is re-executed; If not, continue to perform the step of the switch performing traffic management on the target user based on the traffic limit value.

4. The user traffic dynamic management method of claim 1, wherein, After the step of the target user corresponding to the real-time traffic value in the current time window being greater than the traffic threshold, further comprising: sending a traffic exceeding alarm signal to the switch, so that the switch re-sends an authentication request corresponding to the target user to the 3A server based on the traffic exceeding alarm signal.

5. The user traffic dynamic management method of claim 4, wherein, The traffic limit value is sent to the 3A server for storage; When the 3A server confirms that the target user is authenticated based on the authentication request sent by the switch, the stored traffic limit value is sent to the switch for traffic management of the target user based on the traffic limit value. Comprise:

6. A user traffic dynamic management system characterized by, Traffic management device, 3A server and switch, the traffic management device comprises acquisition module, analysis module and management module; The 3A server is used to send a message corresponding to the target user authenticated to the acquisition module; The acquisition module is used to obtain the traffic data corresponding to different time points and the number of users when receiving the message corresponding to the target user authenticated sent by the 3A server, wherein the traffic data comprises the available total bandwidth value of the target port corresponding to the target user in the current time window, the first traffic value of the target port available for the target type user in the current time window, and the estimated traffic value of the target port in the target period based on the historical traffic data, the number of users comprises the number of users in the current time window and the estimated number of users in the target period based on the historical user data; The historical traffic data comprises the annual, monthly and weekly traffic average value of the target port in the target period, and the historical user data comprises the annual, monthly and weekly user number average value in the target period; The analysis module is used to determine the traffic threshold and traffic limit value of the target user in the target period based on the traffic data and the number of users; The analysis module is used to determine the traffic threshold and traffic limit value of the target user in the target period based on the traffic data and the number of users, comprising: Based on the first traffic value and the estimated number of users, the first maximum traffic value that can be allocated to the target user in the target period is calculated; Based on the available total bandwidth value and the number of users in the current time window, the actual traffic value that can be allocated to the target user is calculated; Based on the estimated traffic value and the estimated number of users, the second maximum traffic value that can be allocated to the target user in the target period is calculated; The first maximum traffic value, the actual traffic value and the second maximum traffic value are used to determine the traffic threshold and the traffic limit value of the target user in the target period; The management module is used to send the traffic limit value to the switch through the 3A server when the real-time traffic value corresponding to the target user in the current time window is greater than the traffic threshold; The switch is used to perform traffic management on the target user based on the traffic limit value. ​

Images