Network twin methods, systems, apparatuses, devices, media, and program products

Abstract

The application provides a network twin method, system, device, equipment, medium and program product, relates to the technical field of communication, and aims to solve the problem that the prior art cannot simultaneously meet the authenticity requirement and the scene scale requirement of a twin network. The method comprises the following steps: acquiring network information of a target network, wherein the network information comprises node information, link information and service information; analyzing the node information and the link information to obtain topology structure information; dividing the topology structure information into physical domain topology information and simulation domain topology information according to the twin authenticity requirement of the target network; constructing a target database based on the physical domain topology information, the simulation domain topology information and the service information; and configuring physical devices and virtual network elements according to the target database to obtain a twin network corresponding to the target network. The application can simultaneously meet the authenticity requirement and the scene scale requirement of the twin network.

Description

Technical Field

[0001] This application relates to the field of communication technology, and in particular to a network twin method, system, apparatus, device, medium, and program product. Background Technology

[0002] With the rapid development of emerging communication technologies, people can obtain network services with higher throughput, lower latency, and less jitter; high-performance network services have spawned a large number of new applications and generated massive amounts of data traffic. The constant emergence of new technologies and applications has made the Internet more complex and heterogeneous than ever before, posing significant challenges to network management and optimization. To ensure that network performance meets the requirements of Service Level Agreements (SLAs), new solutions such as traffic scheduling and queue management need to be validated before being deployed in production environments.

[0003] Current Internet Protocol (IP) network verification includes small-scale laboratory network testing and network simulation analysis verification. Small-scale laboratory network testing involves setting up a small-scale real-world equipment environment in a laboratory and using general-purpose instruments to simulate network size and traffic for encirclement testing to determine whether network behavior meets expectations. Network simulation analysis verification can analyze the upper and lower limits of network performance based on the production network topology and the description of packet arrival processes, and is often used for network construction planning; or it can simulate network behavior by calculating forwarding tables through software simulation of routing protocols, but the computational scale is limited. However, small-scale laboratory network testing suffers from limitations in network topology scale, while network simulation analysis verification suffers from insufficient realism in software virtualization modeling, thus failing to simultaneously meet the requirements for realism and scenario scale in twin networks. Summary of the Invention

[0004] This application provides a network twin method, system, apparatus, device, medium, and program product to solve the problem that the existing technology cannot simultaneously meet the requirements for the realism and scale of the twin network.

[0005] To solve the above-mentioned technical problems, this application is implemented as follows:

[0006] In a first aspect, embodiments of this application provide a network twin method, the method comprising:

[0007] Obtain network information of the target network, including node information, link information, and service information;

[0008] The node information and link information are parsed to obtain the topology information;

[0009] Based on the twin realism requirements of the target network, the topology information is divided into physical domain topology information and simulation domain topology information;

[0010] A target database is constructed based on the physical domain topology information, the simulation domain topology information, and the service information. Physical devices and virtual network elements are configured according to the target database to obtain the twin network corresponding to the target network.

[0011] Optionally, the step of configuring physical devices and virtual network elements according to the target database to obtain the twin network corresponding to the target network includes:

[0012] The physical devices are configured based on the physical domain topology information to obtain the physical topology;

[0013] The virtual network elements are configured based on the simulation domain topology information to obtain the virtual topology;

[0014] The physical topology and the virtual topology are combined to obtain the twin network corresponding to the target network.

[0015] Optionally, before configuring the virtual network elements according to the simulation domain topology information to obtain the virtual topology, the method further includes:

[0016] Based on the twin fidelity requirements of the target network, the damage domain parameters are determined;

[0017] The simulation domain topology information includes the damage domain parameters, and the configuration of virtual network elements based on the simulation domain topology information to obtain the virtual topology includes:

[0018] Virtual network elements, virtual links, and impairment domains are created based on the simulation domain topology information;

[0019] The virtual network element, the virtual link, and the damage domain are configured to obtain a virtual topology.

[0020] Optionally, after combining the physical topology and the virtual topology to obtain the twin network corresponding to the target network, the method further includes:

[0021] Based on the business information in the target database, create the business path and business node corresponding to the business information in the twin network;

[0022] The business corresponding to the business information is activated using the business path and the business node.

[0023] Optionally, the method further includes:

[0024] The physical domain topology information and the simulation domain topology information in the target database are updated to obtain the updated target database;

[0025] Based on the updated target database, physical devices and virtual network elements are configured to obtain the updated twin network.

[0026] Optionally, the method further includes:

[0027] Logical verification is performed on the twin network.

[0028] Secondly, embodiments of this application provide a network twin system, the system including a software platform, a software and hardware environment, a twin interface, and a verification interface;

[0029] The hardware and software environment includes physical devices, virtual network elements, and test instruments, and is used to construct a verification environment for the target network.

[0030] The software platform is used to configure the software and hardware environment and to perform simulation and verification of the software and hardware environment.

[0031] The twin interface is used to obtain network information of the target network, including node information, link information, and service information;

[0032] The verification interface is used to provide business orchestration functions to external parties.

[0033] Thirdly, embodiments of this application provide a network twin device, comprising:

[0034] The acquisition module is used to acquire network information of the target network, including node information, link information, and service information;

[0035] The parsing module is used to parse the node information and the link information to obtain topology information;

[0036] The partitioning module is used to partition the topology information into physical domain topology information and simulation domain topology information according to the twin realism requirements of the target network.

[0037] The first configuration module is used to construct a target database based on the physical domain topology information, the simulation domain topology information, and the service information, and to configure physical devices and virtual network elements according to the target database to obtain the twin network corresponding to the target network.

[0038] Optionally, the first configuration module includes:

[0039] The first configuration unit is used to configure the physical devices according to the physical domain topology information to obtain the physical topology;

[0040] The second configuration unit is used to configure the virtual network elements according to the simulation domain topology information to obtain the virtual topology;

[0041] The combination unit is used to combine the physical topology and the virtual topology to obtain the twin network corresponding to the target network.

[0042] Optionally, the first configuration module further includes:

[0043] The determining unit is used to determine the damage domain parameters based on the twin fidelity requirements of the target network;

[0044] The simulation domain topology information includes the damage domain parameters, and the second configuration unit is specifically used for:

[0045] Virtual network elements, virtual links, and impairment domains are created based on the simulation domain topology information;

[0046] The virtual network element, the virtual link, and the damage domain are configured to obtain a virtual topology.

[0047] Optionally, the first configuration module further includes:

[0048] A creation unit is used to create a business path and business node corresponding to the business information in the twin network based on the business information in the target database;

[0049] The activation unit is used to activate the service corresponding to the service information using the service path and the service node.

[0050] Optionally, the device further includes:

[0051] The update module is used to update the physical domain topology information and the simulation domain topology information in the target database to obtain the updated target database;

[0052] The second configuration module is used to configure physical devices and virtual network elements according to the updated target database to obtain the updated twin network.

[0053] Optionally, the device further includes:

[0054] The verification module is used to perform logical verification on the twin network.

[0055] Fourthly, embodiments of this application provide an electronic device, including a transceiver and a processor.

[0056] The transceiver is used to acquire network information of the target network, including node information, link information, and service information.

[0057] The processor is used for:

[0058] The node information and link information are parsed to obtain the topology information;

[0059] Based on the twin realism requirements of the target network, the topology information is divided into physical domain topology information and simulation domain topology information;

[0060] A target database is constructed based on the physical domain topology information, the simulation domain topology information, and the service information. Physical devices and virtual network elements are configured according to the target database to obtain the twin network corresponding to the target network.

[0061] Optionally, the processor is specifically used for:

[0062] The physical devices are configured based on the physical domain topology information to obtain the physical topology;

[0063] The virtual network elements are configured based on the simulation domain topology information to obtain the virtual topology;

[0064] The physical topology and the virtual topology are combined to obtain the twin network corresponding to the target network.

[0065] Optionally, the processor is further configured to:

[0066] Based on the twin fidelity requirements of the target network, the damage domain parameters are determined;

[0067] The simulation domain topology information includes the damage domain parameters, and the processor is specifically used for:

[0068] Virtual network elements, virtual links, and impairment domains are created based on the simulation domain topology information;

[0069] The virtual network element, the virtual link, and the damage domain are configured to obtain a virtual topology.

[0070] Optionally, the processor is further configured to:

[0071] Based on the business information in the target database, create the business path and business node corresponding to the business information in the twin network;

[0072] The business corresponding to the business information is activated using the business path and the business node.

[0073] Optionally, the processor is further configured to:

[0074] The physical domain topology information and the simulation domain topology information in the target database are updated to obtain the updated target database;

[0075] Based on the updated target database, physical devices and virtual network elements are configured to obtain the updated twin network.

[0076] Optionally, the processor is further configured to:

[0077] Logical verification is performed on the twin network.

[0078] Fifthly, embodiments of this application provide an electronic device, including: a processor, a memory, and a program stored in the memory and executable on the processor, wherein when the program is executed by the processor, it implements the steps of the network twin method as described in the first aspect above.

[0079] In a sixth aspect, embodiments of this application provide a computer-readable storage medium storing a computer program that, when executed by a processor, implements the steps of the network twin method as described in the first aspect above.

[0080] In a seventh aspect, embodiments of this application provide a computer program product, including computer instructions, which, when executed by a processor, implement the steps of the network twin method as described in the first aspect above.

[0081] In this embodiment, the network twin method described above can obtain network information of a target network, including node information, link information, and service information. The node information and link information are parsed to obtain topology information. Based on the twin realism requirements of the target network, the topology information is divided into physical domain topology information and simulated domain topology information. A target database is constructed based on the physical domain topology information, the simulated domain topology information, and the service information. Physical devices and virtual network elements are configured according to the target database to obtain the twin network corresponding to the target network. This achieves the reconstruction and replication of the existing network scenario by combining real network devices and simulated network elements. The twin network can be flexibly constructed according to the scenario scale and structural requirements, while ensuring the realism and operability of key devices. It also enables the simulation and measurability of key network elements and services, thereby simultaneously meeting the realism requirements and scenario scale requirements of the digital twin network. Attached Figure Description

[0082] To more clearly illustrate the technical solutions of the embodiments of this application, the drawings used in the description of the embodiments of this application will be briefly introduced below. Obviously, the drawings described below are only some embodiments of this application. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort.

[0083] Figure 1This is a schematic diagram of a traditional network verification method provided in an embodiment of this application;

[0084] Figure 2 This is one of the flowcharts of a network twin method provided in the embodiments of this application;

[0085] Figure 3 This is a schematic diagram of the structure of a network ontology provided in an embodiment of this application;

[0086] Figure 4 This is a schematic diagram of the structure of a network twin system provided in an embodiment of this application;

[0087] Figure 5 This is a second flowchart of a network twin method provided in the embodiments of this application;

[0088] Figure 6 This is the third flowchart of a network twin method provided in the embodiments of this application;

[0089] Figure 7 This is a schematic diagram of a network ontology topology provided in an embodiment of this application;

[0090] Figure 8 This is a schematic diagram of the hardware environment of a network twin system provided in an embodiment of this application;

[0091] Figure 9 This is a schematic diagram of the hardware and software environment of a network twin system provided in an embodiment of this application;

[0092] Figure 10 This is a flowchart of a simulation domain generation algorithm provided in an embodiment of this application;

[0093] Figure 11 This is a schematic diagram of the interface of a simulation interactive console provided in an embodiment of this application;

[0094] Figure 12 This is a schematic diagram of the structure of a network twin device provided in an embodiment of this application;

[0095] Figure 13 This is a schematic diagram of the structure of an electronic device provided in an embodiment of this application. Detailed Implementation

[0096] The technical solutions of the embodiments of this application will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of this application, not all embodiments. Based on the embodiments of this application, all other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of this application.

[0097] For ease of understanding, the following describes some aspects of the embodiments of this application:

[0098] like Figure 1 As shown, traditional IP network verification includes small-scale laboratory network testing and network simulation analysis verification. Among them, instrument-based verification simulates general network protocols and traffic to surround devices for testing, which can perform large-scale batch simulation testing, but lacks business scenarios and network planning analysis, and cannot simulate hardware performance. Simulation-based verification lies between mathematical abstraction and device simulation. It abstracts network topology and common protocol attributes, and can balance realism and performance, but lacks testing of device hardware performance, stability, etc., and lags behind in simulating new technologies.

[0099] Specifically, the main problems with small-scale laboratory network reconstruction methods are:

[0100] (1) Limitations of network topology scale: Reproducing network scenarios by building a live network topology environment in the laboratory has limitations in terms of network equipment and scale. Limited equipment and space make it difficult to present the scale and complexity of production networks, and can only solve the simulation needs of local networks.

[0101] (2) Flexibility of multi-scenario reuse: Operators will generate different network topology scenarios according to the needs of users or services, and the backbone network and the provincial network present different network topology scenarios. How can we flexibly and quickly realize the reconstruction of different network scenarios?

[0102] The main problems with network simulation analysis and verification methods are:

[0103] (1) The authenticity of software virtualization modeling: Network modeling is achieved through software simulation. This method can solve the problems of scale and flexibility, but the disadvantage is also obvious. It cannot realize the real characteristics and consistency of the actual network. It does not support the real characteristics of network devices in basic modeling and data evaluation.

[0104] (2) Reconstructing the operability and measurement requirements of the network: Pure virtual networks cannot achieve encirclement measurement of real device environments, and the goal of network twins cannot be achieved under such circumstances.

[0105] In this application embodiment, a network twin method, system, device, equipment, medium, and program product are proposed to solve the problem that the existing technology cannot simultaneously meet the requirements for the realism of twin networks and the requirements for the scale of scenarios.

[0106] See Figure 2 , Figure 2 This is one of the flowcharts of a network twin method provided in the embodiments of this application, such as... Figure 2 As shown, the method includes the following steps:

[0107] Step 101: Obtain network information of the target network, including node information, link information, and service information.

[0108] Specifically, the network information of the target network mentioned above can be collected through a network management system or network controller. The target network can be the target object of a network twin, i.e., the network itself. The node information mentioned above can be the device information of the target network, such as devices like routers, switches, and firewalls in the network itself, which are mapped as network element nodes in the twin topology. Specific parameters can include device physical information, device simulation information, and device configuration information.

[0109] For example, the above-mentioned device physical information may include information such as management IP address (MgmtIP), management session type (MgmtSessionType), device manufacturer (Vendor), device model (Model), device region (Region), and device city (City).

[0110] The above-mentioned device simulation information may include information such as device type, tester name, communication latency, and forwarding rate.

[0111] The device configuration information mentioned above may include the device alias (DeviceAliasName), device description (Description), router identifier (RouterID), IPv6 router identifier (IPv6RouterID), Segment Routing IPv6 (SRv6) terminal SID (SRv6EndSID) based on the IPv6 forwarding plane, IPv4 routing information (IPv4Routes) and IPv6 routing information (IPv6Routes), and the InitCmdFile field. When the InitCmdFile field is not empty, the file points to the command-line text file for device initialization and clearing configuration.

[0112] Specifically, the aforementioned link information can be links between network devices in the network body, which are mapped as network element connections in the twin topology. Specific parameters can include link physical information, link simulation information, and link configuration information.

[0113] For example, the above-mentioned link physical information may include information such as LocalDevice, LocalPort, PeerDevice, PeerPort, LinkAliasName, TrunkName, Status, Number of Members, Number of Active Members, Equal-Cost Multi-Path (ECMP), Unequal-Cost Multi-Path (UCMP), and LinkSpeed.

[0114] The link simulation information mentioned above may include information such as link type, utilization (%), latency, and forwarding rate.

[0115] The link configuration information mentioned above may include local IP address (LocalIpAddr), local IPv6 address (LocalIpv6Addr), ISIS L1 metric (IsisL1Metric), ISIS L2 metric (IsisL2Metric), OSPF cost (OspfCost), Virtual LAN (VLAN), Multiprotocol Label Switching (MPLS), IPv6 segmented route end point with extended source packet identifier (SRv6End.XSID), etc.

[0116] Specifically, the aforementioned service information may be service-bearing information such as Virtual Private Network (VPN), traffic, and tunnels in the network body. Specific parameters may include VPN configuration information, traffic configuration information, and tunnel configuration information.

[0117] For example, the VPN configuration information mentioned above may include VPN Name, IPv4 Route Target (IPv4RT), IPv6 Route Target (IPv6RT), Route Reflector (RR), Provider Edge (Pe), SRv6 VPN Segment Identifier (SRv6VpnSid), VPN IPv4 Route Count (Vpnv4RouteNum), etc.

[0118] The traffic configuration information mentioned above may include information such as traffic name (StreamName), source device (SrcDevice), destination device (DstDevice) / VPN instance (VpnInstance) / load (%, frames per second (fps), megabits per second (Mbps)), frame size (FrameSize), path (TunnelName) (Latency), and forwarding rate (ForwardingRate).

[0119] The tunnel configuration information mentioned above may include name, candidate path name, path type, segment sequence number, weight, number of hops, and hop list.

[0120] Step 102: Parse the node information and the link information to obtain the topology information.

[0121] Specifically, the above-mentioned parsing process can be to convert the physical domain information and the simulation domain information into data structures, such as adjacency matrices, adjacency lists, etc., which are the obtained topological structure information.

[0122] Step 103: Based on the twin fidelity requirements of the target network, the topology information is divided into physical domain topology information and simulation domain topology information.

[0123] It should be understood that the aforementioned twin realism requirement can be the degree of realism of the twin network required by the user when establishing the twin network. It can be determined according to the user's actual purpose in establishing the twin network. Specifically, it can be to determine which nodes in the twin network need to correspond to real physical devices and which nodes correspond to simulated network elements. Then, the topology information can be divided into physical domain topology information and simulated domain topology information.

[0124] For example, based on the user's requirements for the realism of the twin, the nodes in the target network can be divided into general key nodes and other nodes. The general key nodes in the target network can use physical devices that are consistent with the existing network model and version. The topology information corresponding to the general key nodes is filled into the physical domain, while the topology information corresponding to other nodes is filled into the simulation domain, such as the control domain, network loss domain, network domain, and background domain, according to actual needs.

[0125] Specifically, the physical domain topology information and the simulation domain topology information mentioned above can be distinguished by storing them in different files or by using the Type field identifier. Domains can be combined and spliced ​​together using the same node (connection point) information.

[0126] It should be noted that the upper layer can call the above physical domain topology information and simulation domain topology information as needed, and can generate a visual network topology through the above physical domain topology information and simulation domain topology information.

[0127] Step 104: Construct a target database based on the physical domain topology information, the simulation domain topology information, and the service information; configure physical devices and virtual network elements according to the target database to obtain the twin network corresponding to the target network.

[0128] Specifically, the target database may include the physical domain topology information, the simulation domain topology information, and the service information. Based on the information in the target database, physical devices and virtual network elements are configured, and the virtualized environment is spliced ​​and connected with the environment within the virtualized environment to construct a 1:1 end-to-end virtual-physical hybrid verification environment, i.e., the aforementioned twin network. The physical devices are real devices that are the same as or similar to those in the target network, and the virtual network elements are virtual network elements obtained by simulating nodes in the target network.

[0129] In this embodiment, the network twin method described above can obtain network information of a target network, including node information, link information, and service information. The node information and link information are parsed to obtain topology information. Based on the twin realism requirements of the target network, the topology information is divided into physical domain topology information and simulated domain topology information. A target database is constructed based on the physical domain topology information, the simulated domain topology information, and the service information. Physical devices and virtual network elements are configured according to the target database to obtain the twin network corresponding to the target network. This achieves the reconstruction and replication of the existing network scenario by combining real network devices and simulated network elements. The twin network can be flexibly constructed according to the scenario scale and structural requirements, while ensuring the realism and operability of key devices. It also enables the simulation and measurability of key network elements and services, thereby simultaneously meeting the realism requirements and scenario scale requirements of the digital twin network.

[0130] Optionally, the step of configuring physical devices and virtual network elements according to the target database to obtain the twin network corresponding to the target network includes:

[0131] The physical devices are configured based on the physical domain topology information to obtain the physical topology;

[0132] The virtual network elements are configured based on the simulation domain topology information to obtain the virtual topology;

[0133] The physical topology and the virtual topology are combined to obtain the twin network corresponding to the target network.

[0134] Specifically, the physical devices are configured according to the physical domain topology information to obtain the physical topology. The physical topology environment can be configured manually or automatically by configuring physical switches. Device configuration in the physical topology can be achieved through methods such as Secure Shell (SSH), Telecommunication Network (TELNET), and Network Configuration Protocol (NETCONF).

[0135] The virtual network elements are configured based on the simulation domain topology information. The virtual topology can be created by calling the network instrument application programming interface (API) to connect to port addresses. It should be noted that the physical topology and the virtual topology can be flexibly combined according to actual needs.

[0136] In this embodiment, the network twinning method described above can obtain a physical topology by configuring physical devices according to the physical domain topology information, obtain a virtual topology by configuring virtual network elements according to the simulation domain topology information, and obtain a twin network corresponding to the target network by combining the physical topology and the virtual topology. This allows for the integration of two different verification methods, network analysis and laboratory verification, to twinnize and verify the network, interface with the target network, restore network node information based on a hardware-software integrated system architecture, extract and restore actual characteristic services and traffic, quickly construct a large-scale topology of equal scale, and analyze and verify the impact on target network resources, network device configuration adjustments, and restore fault scenarios. It can be widely used in technical solution verification, network cutover and operation and maintenance solution verification, thereby improving the overall orchestration service capabilities of the computing network.

[0137] Optionally, before configuring the virtual network elements according to the simulation domain topology information to obtain the virtual topology, the method further includes:

[0138] Based on the twin fidelity requirements of the target network, the damage domain parameters are determined;

[0139] The simulation domain topology information includes the damage domain parameters, and the configuration of virtual network elements based on the simulation domain topology information to obtain the virtual topology includes:

[0140] Virtual network elements, virtual links, and impairment domains are created based on the simulation domain topology information;

[0141] The virtual network element, the virtual link, and the damage domain are configured to obtain a virtual topology.

[0142] Specifically, the aforementioned damage domain parameters may be information simulating parts or parameters in the target network that may fail or be damaged.

[0143] For example, the above-mentioned creation of virtual network elements and virtual links based on the simulation domain topology information may involve calling the corresponding instrument API to create a simulated instrument port based on the instrument type, searching the simulation topology database through the simulated instrument port, finding, creating, and configuring the virtual network element associated with the instrument port, then retrieving the link related to the virtual network element through the simulation domain topology information, creating the adjacency relationship of the semi-physical connection link, as well as associating the virtual link, and traversing the associated virtual links in the simulation domain topology information to retrieve and create the adjacent virtual network element associated with the virtual link. At the same time, by retrieving and creating the associated virtual link and adjacent virtual network element of the virtual network element, this step is repeated until the associated virtual network elements have been traversed.

[0144] In this embodiment, the network twinning method described above can determine the damage domain parameters according to the twinning realism requirements of the target network, and create virtual network elements, virtual links, and damage domains based on the simulation domain topology information. The virtual network elements, virtual links, and damage domains are configured to obtain a virtual topology, thereby enabling the virtual topology restoration of the target network. Furthermore, by introducing damage domain information, a more realistic twin network can be established, making it more representative of the behavior and performance of the real network. Optionally, after combining the physical topology and the virtual topology to obtain the twin network corresponding to the target network, the method further includes:

[0145] Based on the business information in the target database, create the business path and business node corresponding to the business information in the twin network;

[0146] The business corresponding to the business information is activated using the business path and the business node.

[0147] Specifically, the above-mentioned creation of the business path and business node corresponding to the business information in the twin network based on the business information in the target database can be based on the business name in the business information to create the corresponding business path, and under the instrument port, to create the service provider edge (PE) / virtual private network (VPN) local / remote node associated with the business, and to enable the business, data flow and communication path.

[0148] In this embodiment, the network twin method described above can create service paths and service nodes corresponding to the service information in the twin network based on the service information in the target database, and activate the service corresponding to the service information using the service paths and service nodes, thereby enabling service reconstruction, superimposing real service applications, and realizing the simulation and measurability of key network elements and services.

[0149] Optionally, the method further includes:

[0150] The physical domain topology information and the simulation domain topology information in the target database are updated to obtain the updated target database;

[0151] Based on the updated target database, physical devices and virtual network elements are configured to obtain the updated twin network.

[0152] Specifically, the updated target database includes the updated physical domain topology information and the updated simulation domain topology information, and the updated twin network corresponds to the updated topology information.

[0153] It should be noted that updating the physical domain topology information and the simulated domain topology information in the target database can be done before configuring physical devices and virtual network elements according to the target database to obtain the twin network corresponding to the target network, by modifying the physical domain topology information and the simulated domain topology information according to specific needs; or it can be done after obtaining the twin network corresponding to the target network, by modifying the physical domain topology information and the simulated domain topology information according to specific needs. This application does not make specific limitations in this regard.

[0154] In this embodiment, the network twin method described above can update the physical domain topology information and the simulated domain topology information in the target database to obtain an updated target database. Based on the updated target database, physical devices and virtual network elements are configured to obtain an updated twin network. This allows the physical domain topology information and the simulated domain topology information to be flexibly adjusted according to actual needs, and a corresponding updated twin network can be obtained, thereby further improving the flexibility of network twins and meeting the diverse needs of users.

[0155] Optionally, the method further includes:

[0156] Logical verification is performed on the twin network.

[0157] Specifically, the above logical verification can be network topology analysis, that is, using graph theory algorithms to analyze the nodes and connections in the network, discover important nodes and critical paths in the network, and perform network optimization and fault diagnosis. For example, the shortest path algorithm in a graph can find the best or shortest path in the network. It can also be traffic analysis and optimization, that is, using graph theory algorithms to model and analyze the transmission path, traffic volume and traffic optimization problem of network traffic. For example, the maximum flow minimum cut algorithm can find the maximum transmission capacity in the network, which helps to perform network congestion control and traffic scheduling optimization.

[0158] It should be noted that logical verification of the twin network can be performed on all generated twin networks, including logical verification of the updated twin network.

[0159] In this embodiment, the network twin method described above can perform logical verification on the twin network, evaluate the efficiency and security of the target network design and configuration, help discover potential network configuration errors or fault points, optimize the target network, and thus improve the stability and reliability of the target network.

[0160] This application provides a network twin system, which includes a software platform, a hardware and software environment, a twin interface, and a verification interface;

[0161] The hardware and software environment includes physical devices, virtual network elements, and test instruments, and is used to construct a verification environment for the target network.

[0162] The software platform is used to configure the software and hardware environment and to perform simulation and verification of the software and hardware environment.

[0163] The twin interface is used to obtain network information of the target network, including node information, link information, and service information;

[0164] The verification interface is used to provide business orchestration functions to external parties.

[0165] For example, the target network is as follows Figure 3 As shown, the network twin system corresponding to the target network is as follows: Figure 4 As shown, the network twin system consists of a software platform and a hardware and software environment: the hardware and software environment includes physical devices similar to or the same as those in the network body, virtual network elements provided by various equipment manufacturers, and various test instruments; the software platform supports connecting various elements of the hardware and software environment to splice together to construct ultra-large-scale topology, superimpose service impairments / traffic performance, present the twin state in a domain-based and layered manner, and complete various simulation and verification.

[0166] The network twin system provides two types of interfaces: one is a standardized network digital twin data interface for the network ontology, through which information from the network ontology can be connected to the network twin system, enabling the network twin system to quickly generate scenario twins; the other is a verification interface for business orchestration for the orchestration body, which can perform simulation and verification of scenarios in the network twin system.

[0167] The node information, link information, and service information of the target network can be extracted through the network management software of the existing network and filled into the twin data interface in a hierarchical manner. The network twin software platform performs twin simulation and modeling on the above network model.

[0168] Figure 5 This is a second flowchart of a network twin method provided in the embodiments of this application, such as... Figure 5 As shown, information files can be parsed based on node information, link information, and service information obtained from the topology information file, i.e., the twin interface, and a database can be established. Based on the database, physical device connections and configurations, simulated network elements and service configurations can be performed to obtain the hardware and software environment. The software platform can then perform simulations and statistical analyses based on the hardware and software environment.

[0169] The specific implementation process is as follows: By merging and deduplicating the device information and chainsaw information in the network digital twin interface file, the network topology is stored using common graph data structures (adjacency matrix, adjacency list, etc.). At the same time, a visual network topology can be generated based on the connection relationship. Based on this database, the software platform can provide mathematical models and algorithms such as shortest path algorithm and maximum flow, and perform logical verification on the generated twin network.

[0170] In addition to logical verification, the network twin system also supports scenario orchestration that combines real devices with virtual network topologies. It can simultaneously realize the verification of real devices under a large-scale live network topology. The specific implementation method is as follows:

[0171] The first step is to extract the physical domain topology information and the simulation domain topology information respectively based on the identification method in the interface information;

[0172] The second step is to restore the physical topology information to the actual physical topology. This configuration process is implemented through device configuration interfaces (NETCONF / Telnet / SSH, etc.).

[0173] The third step involves generating different instrument configurations from the simulation data based on the physical-simulation connection points and simulation topology information, configuring them on various instruments, and realizing virtual topology restoration and business reconstruction. This configuration process is achieved by defining different types of simulation domains, calling different instrument configuration interfaces, and traffic configuration interfaces.

[0174] After the above three steps, several virtualized environments and physical environments can be spliced ​​together and connected. The physical environment can be used to completely reproduce the behavior of the manufacturer's equipment, while the virtual environment uses different instruments / tools to divide the network into domains to build network scale, simulate routing, set impairments, send traffic, etc., to build a 1:1 end-to-end virtual-physical combined verification environment of the network body.

[0175] Meanwhile, the network twin system also provides twin network topology construction and visualization capabilities, integrates various physical devices and various instrument tool interfaces, supports and verifies testing capabilities, automates task execution, analysis and inference functions, and displays the status of multiple layers such as basic / protocol / service / tunnel / traffic in real time.

[0176] Figure 6 This is the third flowchart of a network twin method provided in the embodiments of this application, such as... Figure 6 As shown, the network twin system first constructs the twin scenario, including the physical topology initialization module, the simulation topology initialization module, and the scenario library. Then, it sets up services, including the tunnel setting module and the traffic setting module. Next, it performs simulation and verification, including the manual command module, the automation module, and the logical simulation. Finally, it presents the results, including the report generation module, the real-time result / status display module, and the log module.

[0177] The following is a specific embodiment of this application, using an SRv6 reliability verification scenario as an example:

[0178] SRv6, with its rich network programming capabilities, can better meet the needs of new network services. To fully utilize network bandwidth and link resources, the programmability of SRv6 can be used to customize tunnel paths to distinguish different services for transport. When SRv6 tunnels are used for critical services, the requirements for service quality and reliability are high. To comprehensively verify the reliability of SRv6, the verification scheme needs to simulate faults from multiple dimensions, including the device layer, network layer, service layer, control plane, and security level. This method can simultaneously meet the requirements of logical verification and configuration simulation.

[0179] Assuming the network ontology topology is as follows: Figure 7 As shown, the system's hardware environment can consist of several physical devices and network traffic generating meters, such as... Figure 8 As shown, it can be extended to a software platform. Figure 9 The effect shown.

[0180] For example, the structural information corresponding to the physical devices in the topology information is shown in Table 1 below:

[0181] Table 1

[0182]

[0183] It should be noted that the equipment information is not limited to the information shown in Table 1, and may also include other information.

[0184] The device types can include simulated network elements, ERouter simulated routers, and physical network elements.

[0185] Correspondingly, the link information can also be stored in the target database in the form of the data structure shown in Table 1 above. Specifically, it may include the link name (LinkName), link type (LinkType), local device (LocalDevice), local port (LocalPort), local IP address (LocalIpAddr), local IPv6 address (LocalIpv6Addr), peer device (PeerDevice), peer port (PeerPort), link alias (LinkAliasName), device description (Description), etc.

[0186] It should be noted that the topology information includes the node information, link information and service information of the target network, and is stored in the target database in the form of a data structure.

[0187] It should be understood that the physical domain and the simulation domain can be distinguished by the DeviceType / LinkType fields. Virtual network element (Simulated), simulated router (ERouter), and physical network element represent, respectively, a virtual network element that is simulated and can establish an adjacency protocol with physical devices, a virtual network element that is simulated but has no protocol state, and a real network device. Virtual link, semi-physical link, and physical link represent, respectively, links completely simulated by simulation, links connecting physical network elements via simulated ports, and links interconnecting real physical devices. The junction point between the physical topology and the simulation topology is the TesterName simulated instrument port, such as Instrument Port P1 / Instrument Port P2. In addition, VPN service information and traffic information can also be added.

[0188] The duplicate connection points (instrument port P1 / instrument port P2, etc.) in the physical topology are deduplicated and merged with the simulation topology into a full topology database, i.e., the target database. After being stored in the target database, logical algorithms and verification can be performed, and multi-level visualizations can be generated based on the physical and logical topologies.

[0189] To simultaneously verify device reliability and accurately assess service convergence time, the network twin system needs to support operational verification using real devices in overlay network-level topology service scenarios.

[0190] like Figure 8The physical topology environment shown can be configured manually or automatically using physical switches. Device configuration within the physical topology can be achieved via SSH / TELNET / NETCONF, etc. Figure 9 The simulation domain shown can be created by calling the network instrument API to connect to the port address.

[0191] The specific process of network twin topology and service generation is as follows. Different simulation domains and instrument types use different algorithms to generate services. Taking a network traffic generation instrument as an example:

[0192] like Figure 10 As shown, the basic rule of the algorithm is to first index the instrument port, create the instrument simulation port, then create the simulation network element and the topology and adjacency protocol between it and the physical device, and then create the simulation topology and virtual network element.

[0193] Among them, the instrument port indexing algorithm first indexes the instrument port in the physical topology database. Each instrument port is connected to the physical network element through a physical link. The simulated router network element under this port is connected to the physical network element through a semi-physical link.

[0194] Creating a simulation network element: After creating a simulation instrument port by calling the corresponding instrument API based on the instrument type, the simulation topology database is retrieved through the instrument port to find, create, and configure the simulation network element associated with that instrument port.

[0195] The links related to the simulated network elements are retrieved from the simulation topology database, and the adjacency relationships of the semi-physical connection links and associated virtual links are created. The associated virtual links in the simulation topology database are traversed, and the adjacent virtual network elements associated with the virtual links are retrieved and created. At the same time, the associated virtual links and adjacent virtual network elements of the virtual network elements are retrieved and created. This process is repeated until all associated virtual network elements have been traversed.

[0196] Create a service: Based on the service name in the topology database, create the corresponding service path, and under the instrument port, create the PE / VPN local / remote node associated with the service, and enable the service / flow / path.

[0197] It should be noted that services can be created based on the business information in the database. The business information can be stored in the target database in the form of a data structure as shown in Table 1 above. Specifically, it can include information such as the simulated VPN name, IPv4 routing target (IPv4RT), IPv6 routing target (IPv6RT), number of nodes (Sites) in the VPN, simulated VPN Site name on the CE side, simulated VPN Site name on the PE side, simulated traffic name, source node of simulated traffic, and destination node of simulated traffic.

[0198] After the above steps, the network twin system has established a connection between the front-end twin object, the database, and the hardware platform resources through the object names. This allows for the calling of corresponding interfaces to configure and simulate the simulation resources. Different object attributes are placed on different layers for visualization, enabling observation and verification of the entire network behavior. Figure 11 This is a schematic diagram of the interface of the simulation interactive console, such as... Figure 11 As shown, you can select the basic / protocol / service / tunnel / traffic layer status in the simulation interactive console.

[0199] In this implementation, the aforementioned network twin system supports network logic verification and live network solution verification. Network logic verification includes network topology analysis, traffic analysis, and optimization. Live network solution verification includes device layer reliability verification, network layer reliability verification, service layer reliability verification, control plane reliability verification, and security-level reliability verification. Device layer reliability verification specifically includes verifying the existence of device master control failures, switching board failures, power supply / fan failures, and device restarts. Network layer reliability verification includes Customer Edge (CE) dual-active access, ECMP switching, SRv6 Policy master-slave switching, and Ti-LFA Fast ReRoute (FRR). Service layer reliability verification (adding a network loss domain and corresponding instruments) includes SRv6 Policy VPN FRR and SRv6 BE VPN FRR. Control plane reliability verification (adding a control domain and corresponding controllers) includes single controller fault protection and multi-controller hot standby. Security-level reliability verification (adding an attack domain and corresponding tools) includes robustness of anti-DDoS attack protocols and security against path tampering attacks.

[0200] See Figure 12 , Figure 12 This is a schematic diagram of the structure of a network twin device provided in an embodiment of this application, as shown below. Figure 12 As shown, the network twin device 1200 includes:

[0201] The acquisition module 1201 is used to acquire network information of the target network, the network information including node information, link information and service information;

[0202] The parsing module 1202 is used to parse the node information and the link information to obtain topology information;

[0203] The partitioning module 1203 is used to partition the topology information into physical domain topology information and simulation domain topology information according to the twin realism requirements of the target network.

[0204] The first configuration module 1204 is used to construct a target database based on the physical domain topology information, the simulation domain topology information and the service information, and to configure physical devices and virtual network elements according to the target database to obtain the twin network corresponding to the target network.

[0205] Optionally, the first configuration module 1204 includes:

[0206] The first configuration unit is used to configure the physical devices according to the physical domain topology information to obtain the physical topology;

[0207] The second configuration unit is used to configure the virtual network elements according to the simulation domain topology information to obtain the virtual topology;

[0208] The combination unit is used to combine the physical topology and the virtual topology to obtain the twin network corresponding to the target network.

[0209] Optionally, the first configuration module 1204 further includes:

[0210] The determining unit is used to determine the damage domain parameters based on the twin fidelity requirements of the target network;

[0211] The simulation domain topology information includes the damage domain parameters, and the second configuration unit is specifically used for:

[0212] Virtual network elements, virtual links, and impairment domains are created based on the simulation domain topology information;

[0213] The virtual network element, the virtual link, and the damage domain are configured to obtain a virtual topology.

[0214] Optionally, the first configuration module 1204 further includes:

[0215] A creation unit is used to create a business path and business node corresponding to the business information in the twin network based on the business information in the target database;

[0216] The activation unit is used to activate the service corresponding to the service information using the service path and the service node.

[0217] Optionally, the device further includes:

[0218] The update module is used to update the physical domain topology information and the simulation domain topology information in the target database to obtain the updated target database;

[0219] The second configuration module is used to configure physical devices and virtual network elements according to the updated target database to obtain the updated twin network.

[0220] Optionally, the device further includes:

[0221] The verification module is used to perform logical verification on the twin network.

[0222] It should be noted that the network twin device provided in this application embodiment is a device capable of executing the above-described network twin method. Therefore, all implementation methods in the above-described network twin method embodiments are applicable to this device and can achieve the same or similar beneficial effects. To avoid repetition, this embodiment will not elaborate further.

[0223] For details, see Figure 13 As shown in the figure, this application embodiment also provides an electronic device, including a bus 1301, a transceiver 1302, an antenna 1303, a bus interface 1304, a processor 1305, and a memory 1306.

[0224] Transceiver 1302 is used to acquire network information of the target network, including node information, link information and service information.

[0225] Furthermore, the processor 1305 is used for:

[0226] The node information and link information are parsed to obtain the topology information;

[0227] Based on the twin realism requirements of the target network, the topology information is divided into physical domain topology information and simulation domain topology information;

[0228] A target database is constructed based on the physical domain topology information, the simulation domain topology information, and the service information. Physical devices and virtual network elements are configured according to the target database to obtain the twin network corresponding to the target network. Figure 13 In this document, a bus architecture (represented by bus 1301) is used. Bus 1301 can include any number of interconnected buses and bridges, linking various circuits including one or more processors represented by processor 1305 and memory represented by memory 1306. Bus 1301 can also link various other circuits such as peripheral devices, voltage regulators, and power management circuits, which are well known in the art and therefore will not be described further herein. Bus interface 1304 provides an interface between bus 1301 and transceiver 1302. Transceiver 1302 can be a single element or multiple elements, such as multiple receivers and transmitters, providing a unit for communicating with various other devices over a transmission medium. Data processed by processor 1305 is transmitted over a wireless medium via antenna 1303, which further receives data and transmits it to processor 1305.

[0229] Processor 1305 manages bus 1301 and general processing, and also provides various functions, including timing, peripheral interface, voltage regulation, power management, and other control functions. Memory 1306 can be used to store data used by processor 1305 during operation.

[0230] Optionally, the processor 1305 may be a central processing unit (CPU), an application-specific integrated circuit (ASIC), a field-programmable gate array (FPGA), or a complex programmable logic device (CPLD).

[0231] Optionally, the processor 1305 is specifically used for:

[0232] The physical devices are configured based on the physical domain topology information to obtain the physical topology;

[0233] The virtual network elements are configured based on the simulation domain topology information to obtain the virtual topology;

[0234] The physical topology and the virtual topology are combined to obtain the twin network corresponding to the target network.

[0235] Optionally, the processor 1305 is further configured to:

[0236] Based on the twin fidelity requirements of the target network, the damage domain parameters are determined;

[0237] The simulation domain topology information includes the damage domain parameters, and the processor is specifically used for:

[0238] Virtual network elements, virtual links, and impairment domains are created based on the simulation domain topology information;

[0239] The virtual network element, the virtual link, and the damage domain are configured to obtain a virtual topology.

[0240] Optionally, the processor 1305 is further configured to:

[0241] Based on the business information in the target database, create the business path and business node corresponding to the business information in the twin network;

[0242] The business corresponding to the business information is activated using the business path and the business node.

[0243] Optionally, the processor 1305 is further configured to:

[0244] The physical domain topology information and the simulation domain topology information in the target database are updated to obtain the updated target database;

[0245] Based on the updated target database, physical devices and virtual network elements are configured to obtain the updated twin network.

[0246] Optionally, the processor 1305 is further configured to:

[0247] Logical verification is performed on the twin network.

[0248] It should be noted that the electronic device provided in this application embodiment is a device capable of executing the above-described network twin method. Therefore, all implementation methods in the above-described network twin method embodiments are applicable to this electronic device and can achieve the same or similar beneficial effects. To avoid repetition, this embodiment will not elaborate further.

[0249] This application also provides an electronic device, including: a processor, a memory, and a program stored in the memory and executable on the processor. When the program is executed by the processor, it implements the various processes of the above-described network twin method embodiments and achieves the same technical effect. To avoid repetition, it will not be described again here.

[0250] This application also provides a computer-readable storage medium storing a computer program. When executed by a processor, this computer program implements the various processes of the above-described network twin method embodiments and achieves the same technical effects. To avoid repetition, it will not be described again here. The computer-readable storage medium may be a read-only memory (ROM), a random access memory (RAM), a magnetic disk, or an optical disk, etc.

[0251] This application also provides a computer program product, including computer instructions. When executed by a processor, these computer instructions implement the various processes of the above-described network twin method embodiments and achieve the same technical effects. To avoid repetition, they will not be described again here.

[0252] It should be noted that, in this document, the terms "comprising," "including," or any other variations thereof are intended to cover non-exclusive inclusion, such that a process, method, article, or apparatus that comprises a list of elements includes not only those elements but also other elements not expressly listed, or elements inherent to such a process, method, article, or apparatus. Unless otherwise specified, an element defined by the phrase "comprising one..." does not exclude the presence of other identical elements in the process, method, article, or apparatus that includes that element.

[0253] Through the above description of the embodiments, those skilled in the art can clearly understand that the methods of the above embodiments can be implemented by means of software plus necessary general-purpose hardware platforms. Of course, they can also be implemented by hardware, but in many cases the former is a better implementation method. Based on this understanding, the technical solution of this application, in essence, or the part that contributes to the prior art, can be embodied in the form of a software product. This computer software product is stored in a storage medium (such as ROM / RAM, magnetic disk, optical disk) and includes several instructions to cause a terminal (which may be a mobile phone, computer, server, air conditioner, or network device, etc.) to execute the methods described in the various embodiments of this application.

[0254] The embodiments of this application have been described above with reference to the accompanying drawings. However, this application is not limited to the specific embodiments described above. The specific embodiments described above are merely illustrative and not restrictive. Those skilled in the art can make many other forms under the guidance of this application without departing from the spirit and scope of the claims, and all of these forms are within the protection scope of this application.

Claims

1. A network twin method, characterized in that, The method comprises: obtaining network information of a target network, the network information comprising node information, link information and service information; parsing the node information and the link information to obtain topology structure information; dividing the topology structure information into physical domain topology information and simulation domain topology information according to a twin reality requirement of the target network; constructing a target database based on the physical domain topology information, the simulation domain topology information and the service information, and configuring physical devices and virtual network elements according to the target database to obtain a twin network corresponding to the target network.

2. The method of claim 1, wherein, The configuring of the physical devices and the virtual network elements according to the target database to obtain the twin network corresponding to the target network comprises: configuring the physical devices according to the physical domain topology information to obtain a physical topology; configuring the virtual network elements according to the simulation domain topology information to obtain a virtual topology; combining the physical topology and the virtual topology to obtain the twin network corresponding to the target network.

3. The method of claim 2, wherein, Before the configuring of the virtual network elements according to the simulation domain topology information to obtain the virtual topology, the method further comprises: determining damage domain parameters according to the twin reality requirement of the target network; the simulation domain topology information comprises the damage domain parameters, and the configuring of the virtual network elements according to the simulation domain topology information to obtain the virtual topology comprises: creating virtual network elements, virtual links and damage domains according to the simulation domain topology information; configuring the virtual network elements, the virtual links and the damage domains to obtain the virtual topology.

4. The method of claim 3, wherein, After the combining of the physical topology and the virtual topology to obtain the twin network corresponding to the target network, the method further comprises: creating service paths and service nodes corresponding to the service information in the twin network according to the service information in the target database; opening services corresponding to the service information by using the service paths and the service nodes.

5. The method of claim 1, wherein, The method further comprises: updating the physical domain topology information and the simulation domain topology information in the target database to obtain an updated target database; configuring physical devices and virtual network elements according to the updated target database to obtain an updated twin network.

6. The method according to any one of claims 1 to 5, characterized in that, The method further comprises: performing logical verification on the twin network.

7. A network twin system, characterized by, A system for performing the network twin method of any one of claims 1 to 6, the system comprising a software platform, a software and hardware environment, a twin interface and a verification interface; the software and hardware environment comprising physical devices, virtual network elements and test instruments, and the software and hardware environment being used to construct a verification environment of a target network; the software platform being used to configure the software and hardware environment and perform deductive verification on the software and hardware environment; the twin interface being used to obtain network information of the target network, the network information comprising node information, link information and service information; the verification interface being used to provide a service orchestration function externally.

8. A network twin device, comprising: comprises: an obtaining module, configured to obtain network information of a target network, the network information comprising node information, link information and service information; The analysis module is configured to analyze the node information and the link information to obtain topology structure information. The division module is configured to divide the topology structure information into physical domain topology information and simulation domain topology information according to a twin reality requirement of the target network. The first configuration module is configured to construct a target database based on the physical domain topology information, the simulation domain topology information and the service information, to configure physical devices and virtual network elements according to the target database, and to obtain a twin network corresponding to the target network.

9. An electronic device, comprising: The transceiver is configured to obtain network information of a target network, the network information comprising node information, link information and service information. The processor is configured to: analyze the node information and the link information to obtain topology structure information; divide the topology structure information into physical domain topology information and simulation domain topology information according to a twin reality requirement of the target network; construct a target database based on the physical domain topology information, the simulation domain topology information and the service information, to configure physical devices and virtual network elements according to the target database, and to obtain a twin network corresponding to the target network. The processor, the memory and the program stored on the memory and executable on the processor, the program being executed by the processor to implement the steps of the network twin method according to any one of claims 1 to 6.

10. An electronic device, comprising: The computer program is stored on the computer readable storage medium, and the computer program is executed by the processor to implement the steps of the network twin method according to any one of claims 1 to 6. The computer program comprises computer instructions, and the computer instructions are executed by the processor to implement the steps of the network twin method according to any one of claims 1 to 6.

11. A computer readable storage medium, characterized in that, ​ 12. A computer program product, characterised in that, ​

Images