Authorization control method and apparatus, electronic device, storage medium, and program product

Abstract

The embodiment of the application discloses an authorization control method, device, equipment, chip and program product, and the authorization control method applied to a target device comprises the following steps: receiving an authorization request sent by a source device; amplifying the number of the authorization request sent by the source device according to a signaling deduction amplification coefficient between the source device and the target device to obtain a real number of authorization requests; and determining whether to authorize the authorization request by comparing the real number of authorization requests with the capacity of a local signaling token bucket.

Description

TECHNICAL FIELD

[0001] The present application belongs to the field of data services, and particularly relates to an authorization control method and device, electronic equipment, a storage medium and a program product. BACKGROUND

[0002] In the related art, a credit-based traffic control strategy can be used to determine whether to perform traffic authorization, that is, a source network edge processing node (Global Scheduled Processor, GSP) sends an authorization request to a destination GSP before sending traffic to the destination GSP, and the destination GSP determines whether to perform traffic authorization according to a local authorization bucket condition. However, when a node or link fault occurs in the network, if only the end-side authorization bucket condition is considered for authorization, network congestion is likely to occur due to a decrease in the overall communication bandwidth of the network. SUMMARY

[0003] To solve the problem of possible network congestion in the related art, the embodiments of the present application propose an authorization control method and device, electronic equipment, a storage medium and a program product.

[0004] The embodiments of the present application provide an authorization control method applied to a destination device, and the method comprises the following steps.

[0005] Receiving an authorization request sent by a source device;

[0006] Amplifying the number of authorization requests sent by the source device according to a signaling deduction amplification coefficient between the source device and the destination device to obtain a real number of authorization requests;

[0007] Determining whether to authorize the authorization request by comparing the real number of authorization requests with a capacity of a local signaling token bucket.

[0008] In some embodiments, before receiving the authorization request sent by the source device, the method further comprises: obtaining a signaling deduction amplification coefficient between other devices and the destination device through a forwarding link state, wherein the other devices include the source device.

[0009] In some embodiments, the signaling deduction amplification factor between the other device and the destination device is determined according to bandwidth weights of links between the other device and each forwarding node, and bandwidth weights of links between each forwarding node and the destination device; wherein a first bandwidth weight is less than a second bandwidth weight, the first bandwidth weight representing a bandwidth weight between two ends of a target link when the target link is in a failure state, and the second bandwidth weight representing a bandwidth weight between two ends of the target link when the target link is in a non-failure state, the target link representing any one of the links between the other device and each forwarding node, and the links between each forwarding node and the destination device.

[0010] In some embodiments, the signaling deduction amplification factor between the other device and the destination device is a ratio of a first product and a first summation value, the first product representing a product of a total number of the forwarding nodes and the second bandwidth weight, and the first summation value representing a sum of link weights corresponding to the forwarding nodes, the link weight corresponding to each of the forwarding nodes being a smaller one of bandwidth weights of the link between the other device and the corresponding forwarding node, and the link between the corresponding forwarding node and the destination device.

[0011] In some embodiments, before obtaining the signaling deduction amplification factor between the other device and the destination device, the method further comprises: periodically or in real time detecting a failure of each link between each of the other devices and each forwarding node, and each link between each forwarding node and each destination device, and determining a state of a target link according to a detection result; and determining the first bandwidth weight or the second bandwidth weight according to the state of the target link.

[0012] Embodiments of the present application also provide another authorization control method, applied to a source device, the method comprising:

[0013] sending an authorization request to a destination device, so that the destination device amplifies a number of authorization requests sent by the source device according to a signaling deduction amplification factor between the source device and the destination device, to obtain a real number of authorization requests, and determines whether to authorize the authorization request by comparing the real number of authorization requests with a capacity of a local signaling token bucket.

[0014] Embodiments of the present application also provide an authorization control device, applied to a destination device, the device comprising:

[0015] a receiving module, configured to receive an authorization request sent by a source device;

[0016] The first processing module is configured to amplify the number of authorization requests sent by the source device according to a signaling deduction amplification coefficient between the source device and the destination device to obtain a real number of authorization requests, and determine whether to authorize the authorization requests by comparing the real number of authorization requests with a capacity of a local signaling token bucket.

[0017] The embodiment of the present application further provides another authorization control device, which is applied to a source device and includes a generating module configured to generate an authorization request.

[0018] The second processing module is configured to send the authorization request to a destination device, so that the destination device amplifies the number of authorization requests sent by the source device according to a signaling deduction amplification coefficient between the source device and the destination device to obtain a real number of authorization requests, and determines whether to authorize the authorization requests by comparing the real number of authorization requests with a capacity of a local signaling token bucket.

[0019] The embodiment of the present application further provides an electronic device including a processor and a memory for storing a computer program capable of running on the processor; wherein the processor is configured to run the computer program to execute any of the authorization control methods.

[0020] The embodiment of the present application further provides a computer storage medium having a computer program stored thereon, which is executed by a processor to implement any of the authorization control methods.

[0021] The embodiment of the present application further provides a computer program product including a computer program, which is executed by a processor to implement any of the authorization control methods.

[0022] It can be seen that the embodiment of the present application is not only to determine whether to authorize by considering the capacity of the local signaling token bucket of the destination device, but also to amplify the number of authorization requests sent by the source device to obtain a real number of authorization requests, and then to determine whether to authorize by comparing the real number of authorization requests with the capacity of the local signaling token bucket, which is beneficial to refuse more authorization requests, thereby reducing the size of the traffic sent in the network and reducing the probability of network congestion. BRIEF DESCRIPTION OF DRAWINGS

[0023] Figure 1 A network topology diagram applied to an intelligent computing center is provided for related technologies.

[0024] Figure 2 A diagram showing congestion in a network in an intelligent computing center is provided for related technologies.

[0025] Figure 3A flow chart of an authorization control method applied to a destination device according to an embodiment of the present application;

[0026] Figure 4 A flow chart of an authorization control method applied to a source device according to an embodiment of the present application;

[0027] Figure 5 A structural schematic diagram of an authorization control device applied to a destination device according to an embodiment of the present application;

[0028] Figure 6 A structural schematic diagram of an authorization control device applied to a source device according to an embodiment of the present application;

[0029] Figure 7 A structural schematic diagram of an electronic device according to an embodiment of the present application. DETAILED DESCRIPTION

[0030] In an artificial intelligence (AI) large model training scenario, the computing mode in the AI large model training process usually includes multiple parallel computing modes such as data parallelism, pipeline parallelism, and tensor parallelism. Collection communication operations need to be performed between multiple computing devices in different parallel modes. The traffic characteristics of a wisdom computing center are relatively few streams, mainly periodic bursty large streams, there is a synchronization effect between streams, and training performance is sensitive to packet loss and latency. Figure 1 A network topology diagram applied to a wisdom computing center provided by related technologies is shown in FIG. 1. As shown in FIG. 1, GSF1 and GSF2 represent two different network core switch nodes (Global Scheduled Fabric, GSF), GSP1, GSP2, GSP3, and GSP4 represent four different GSPs, H0 to H7 represent eight different servers, and the network topology shown in FIG. 1 is a non-converged network. Figure 1 Figure 1 As shown in FIG. 1, in related technologies, a Credit-Based traffic control strategy can be used to determine whether to perform traffic authorization. That is, when a source GSP sends traffic to a destination GSP, the source GSP first sends an authorization request to the destination GSP, and the destination GSP determines whether to perform traffic authorization according to the local authorization bucket condition, so as to avoid network congestion when multiple servers punch one.

[0031] Because the wisdom computing center has large single-stream bandwidth, multiple concurrent machines, and east-west traffic, the wisdom computing center network is generally a non-converged network. When the network is fault-free, using the Credit-Based traffic control strategy and performing load balancing by packet or container will not cause network congestion. However, for Figure 1 ​The network topology shown, when a node or link failure occurs inside the network, needs to isolate the failed node or link, and the remaining nodes and links are load balanced packet by packet or container by container. Due to the reduction of the overall communication bandwidth of the network, if only the end-side authorization bucket case is considered for authorization, it is more likely to occur Figure 2 The network congestion shown causes packet loss and increased communication latency, and the Priority-based Flow Control (PFC) header is blocked and diffused in the opposite direction, which may affect the training performance of the AI model deployed in the intelligence center.

[0032] To solve the above technical problems, the technical solutions of the embodiments of the present application are proposed.

[0033] The embodiments of the present application will be further described in detail below with reference to the accompanying drawings and embodiments. It should be understood that the embodiments provided herein are only used to explain the embodiments of the present application and not to limit the embodiments of the present application. In addition, the embodiments provided below are used to implement some embodiments of the present application, and the technical solutions described in the embodiments of the present application can be implemented in any combination manner without conflict.

[0034] It should be noted that in the embodiments of the present application, the terms "comprise", "contain" or any other variants thereof are intended to cover non-exclusive inclusion, so that the method or device comprising a series of elements not only includes the elements explicitly described, but also includes other elements not explicitly listed, or includes elements inherent in the implementation of the method or device. Without more limitations, the element defined by the sentence "comprises a" does not exclude the presence of other related elements (such as steps in the method or units in the device, for example, the unit can be part of the circuit, part of the processor, part of the program or software, etc.) in the method or device comprising the element.

[0035] The authorization control method provided by the embodiments of the present application includes a series of steps, but the authorization control method provided by the embodiments of the present application is not limited to the steps described. Similarly, the authorization control device provided by the embodiments of the present application includes a series of modules, but the device provided by the embodiments of the present application is not limited to including the modules explicitly described, and can also include modules required to be set when obtaining related information or processing based on information.

[0036] The embodiments of the present application provide an authorization control method, which can be applied to a destination device. The destination device can be a device such as a destination GSP that receives traffic. The destination device can form a communication connection with a source device. The source device can be a device such as a source GSP that transmits traffic. Exemplarily, the source GSP can transmit traffic to the destination GSP through a GSF.

[0037] Figure 3 As shown in FIG. 1, the flow of an authorization control method applied to a destination device according to an embodiment of the present application can include the following steps. Figure 3

[0038] Step 301: receiving an authorization request sent by a source device.

[0039] In the embodiment of the present application, the number of authorization requests sent by the source device to the destination device can be at least one.

[0040] Step 302: amplifying the number of authorization requests sent by the source device according to a signaling deduction amplification factor between the source device and the destination device to obtain a real number of authorization requests.

[0041] In the embodiment of the present application, the signaling deduction amplification factor between the source device and the destination device is greater than 1, and therefore the real number of authorization requests is greater than the number of authorization requests sent by the source device.

[0042] Step 303: determining whether to authorize the authorization request by comparing the real number of authorization requests with the capacity of a local signaling token bucket.

[0043] Exemplarily, when the real number of authorization requests is less than or equal to the capacity of the local signaling token bucket, it is determined to authorize the authorization request sent by the source device to the destination device; when the real number of authorization requests is greater than the capacity of the local signaling token bucket, it is determined not to authorize the authorization request sent by the source device to the destination device.

[0044] In actual application, steps 301 to 303 can be implemented based on a processor, and the processor can be at least one of an Application Specific Integrated Circuit (ASIC), a Digital Signal Processor (DSP), a Digital Signal Processing Device (DSPD), a Programmable Logic Device (PLD), a Field Programmable Gate Array (FPGA), a Central Processing Unit (CPU), a controller, a microcontroller, or a microprocessor.

[0045] ​It can be seen that the embodiment of the present application is not only to determine whether to grant in the case of considering the capacity of the local signaling token bucket of the destination device, but also to amplify the number of authorization requests sent by the source device to obtain the real number of authorization requests, and to determine whether to grant by comparing the real number of authorization requests and the capacity of the local signaling token bucket, which is conducive to rejecting more authorization requests, thereby reducing the size of the traffic sent in the network, and reducing the probability of network congestion.

[0046] In some embodiments of the present application, before receiving the authorization request sent by the source device, the method further comprises: obtaining the signaling deduction amplification coefficient between the other devices and the destination device through the forwarding link, wherein the other devices represent devices other than the destination device, and the source device is one of the other devices.

[0047] It can be understood that by obtaining the signaling deduction amplification coefficient between the other devices and the destination device, an authorization reference can be provided for subsequent judgment of whether to grant.

[0048] In some embodiments of the present application, the signaling deduction amplification coefficient between the other devices and the destination device is determined according to the bandwidth weight of the link from the other devices to each forwarding node and the bandwidth weight of the link from each forwarding node to the destination device; wherein the first bandwidth weight is less than the second bandwidth weight, the first bandwidth weight represents the bandwidth weight between the two ends of the target link when the target link is in a fault state, and the second bandwidth weight represents the bandwidth weight between the two ends of the target link when the target link is in a non-fault state, the target link represents any one of the links from the other devices to the forwarding nodes and the links from the forwarding nodes to the destination device.

[0049] Here, the forwarding node can be a GSF or other types of forwarding nodes; for example, the bandwidth weight between the two ends of the target link when the target link is in a fault state (i.e. the first bandwidth weight) can be set according to the degree of influence of the fault on network transmission, and the higher the degree of influence of the fault on network transmission, the lower the first bandwidth weight.

[0050] It can be seen that the embodiment of the present application can assign different bandwidth weights between the two ends of the link for the fault state and the non-fault state, and can determine the signaling deduction amplification coefficient between the other devices and the destination device when the link is in a fault state, which is conducive to accurately determining the real number of authorization requests according to the signaling deduction amplification coefficient between the other devices and the destination device, so that the authorization request sent by the source device to the destination device can be accurately and efficiently judged whether to grant according to the real number of authorization requests and the capacity of the local signaling token bucket when the link in the network is in a fault state.

[0051] In some embodiments of the present application, the signaling deduction amplification factor between the other device and the destination device is a ratio of a first product and a first sum value, the first product representing a product of the total number of the forwarding nodes and the second bandwidth weight, and the first sum value representing a sum of the link weights corresponding to each of the forwarding nodes, the link weight corresponding to each of the forwarding nodes being a smaller one of the bandwidth weights of the link from the other device to the corresponding forwarding node and the link from the corresponding forwarding node to the destination device.

[0052] For example, taking the forwarding nodes as GSFs, the signaling deduction amplification factor p between the source device and the destination device is calculated according to formula (1) and formula (2).

[0053]

[0054] minB GSF-i =min(B SGSP-GSF-i ,B GSF-i-DGSP ) (2)

[0055] wherein m is the number of GSFs in the network, B is the second bandwidth weight, B SGSP-GSF-i is the bandwidth weight of the link from the source GSP to the i-th GSF, and B GSF-i-DGSP is the bandwidth weight of the link from the i-th GSF to the destination GSP.

[0056] It can be seen that, by setting the first bandwidth weight to be smaller than the second bandwidth weight, the sum of the bandwidth weights of the links corresponding to each of the forwarding nodes is smaller than the product of the total number of the forwarding nodes and the second bandwidth weight, i.e., the first product is greater than the first sum value, and thus the signaling deduction amplification factor between the other device and the destination device is greater than 1. In this case, the embodiments of the present application amplify the number of authorization requests sent by the source device according to the signaling deduction amplification factor to obtain the real number of authorization requests, and then determine whether to authorize by comparing the real number of authorization requests with the capacity of the local signaling token bucket, which is conducive to rejecting authorization for more authorization requests, thereby facilitating reduction of the size of the traffic sent in the network.

[0057] In some embodiments of the present application, before obtaining the signaling deduction amplification factor between the other device and the destination device, the method further comprises:

[0058] detecting the state of the target link according to the detection result;

[0059] determining the first bandwidth weight or the second bandwidth weight according to the state of the target link.

[0060] Exemplarily, the network-wide topology can be maintained by the control plane, and the control plane can be aware of whether the link between each GSF and each GSP is faulty, thereby obtaining a bandwidth weight table, which can present the bandwidth weight of the link between each GSF and each GSP. Table 1 is an example of the bandwidth weight table. Referring to Table 1, GSP-1 to GSP-N represent N different GSPs, and GSF-1 to GSF-M represent M different GSFs. N and M are both integers greater than 1. The link between GSP-1 and GSF-1 is faulty, and the bandwidth weight of the link between GSP-1 and GSF-1 is b. The link between GSP-3 and GSF-1 is also faulty, and the bandwidth weight of the link between GSP-3 and GSF-1 is c. The links other than the link between GSP-1 and GSF-1 and the link between GSP-3 and GSF-1 are normal links, and the second bandwidth weight is a. b and c are all less than a, and b is less than c.

[0061] Table 1: An example of the bandwidth weight table

[0062] GSP-1 GSP-2 GSP-3 … GSP-N GSF-1 b a c … a GSF-2 a a a … a … … … … … … GSF-M a a a … a

[0063] In some embodiments, for the bandwidth weights of the links shown in Table 1, the signaling deduction amplification coefficients between different GSPs and a destination GSP can be calculated according to Formula (1) and Formula (2). Table 2 presents the signaling deduction amplification coefficients between GSP-1 to GSP-N and a destination GSP.

[0064] Table 2: A table of signaling deduction amplification coefficients corresponding to different GSPs

[0065] GSP-1 GSP-2 … GSP-N (m*a) / ((m-1)a+b) 1 … 1

[0066] It can be seen that the embodiments of the present application can reasonably allocate the bandwidth weight between the two ends of the target link by detecting the state of the target link.

[0067] In some embodiments of the present application, the control plane can periodically detect the faults of the links between each of the other devices and each of the forwarding nodes, and the links between each of the forwarding nodes and each of the destination devices.

[0068] Here, the periodic time can be pre-set according to actual requirements. In the embodiment of the application, whether the link between each source device and each forwarding node and the link between each forwarding node and each destination device is faulty can be detected in a periodic scanning manner, so that the weight of the corresponding link can be determined according to the fault detection result periodically, that is, the signaling deduction amplification coefficient of the corresponding link can be updated periodically in the embodiment of the application, and the current real authorization request number can be determined accurately and timely according to the updated signaling deduction amplification coefficient.

[0069] In some embodiments of the application, when the trigger condition is met, the control plane can detect the fault of the link between each of the other devices and each of the forwarding nodes and the link between each of the forwarding nodes and each of the destination devices.

[0070] Here, the trigger condition can be an event-based trigger condition, for example, the trigger condition can be that a preset event occurs. In the embodiment of the application, whether the link between each source device and each forwarding node and the link between each forwarding node and each destination device is faulty can be detected when the trigger condition is met, that is, the update of the signaling deduction amplification coefficient of the corresponding link can be realized according to the trigger condition in the embodiment of the application.

[0071] Of course, in other embodiments, the periodic scanning and the condition triggering can be combined to detect the fault in the link and maintain the bandwidth weight table in the control plane.

[0072] Figure 4 An application flowchart of the authorization control method of the source device in the embodiment of the application is shown in FIG. 4, which can include the following steps: Figure 4

[0073] Step 401: An authorization request is sent to a destination device, so that the destination device amplifies the number of authorization requests sent by the source device according to the signaling deduction amplification coefficient between the source device and the destination device, obtains a real authorization request number, and determines whether to authorize the authorization request by comparing the real authorization request number with the capacity of a local signaling token bucket.

[0074] In actual application, step 401 can be realized based on a processor, and the processor can be at least one of an ASIC, a DSP, a DSPD, a PLD, a FPGA, a CPU, a controller, a microcontroller, and a microprocessor.

[0075] ​It can be seen that the embodiment of the present application is not only to determine whether to authorize in the case of considering the capacity of the local signaling token bucket of the destination device, but also to amplify the number of authorization requests sent by the source device to obtain the real number of authorization requests, and to determine whether to authorize by comparing the real number of authorization requests with the capacity of the local signaling token bucket, which is beneficial to reject more authorization requests, thereby reducing the size of the traffic sent in the network, and reducing the probability of network congestion.

[0076] In the embodiment of the present application, the network failure between the source device and the destination device can be perceived, and whether to allow authorization is determined according to the port authorization bucket condition of the connection server and the signaling deduction amplification coefficient between the source device and the destination device when the destination device receives the authorization request. The embodiment of the present application proposes an implementation scheme of actively adjusting authorization by perceiving network failure, which can avoid network congestion in the network to a certain extent, has a greater possibility to provide a non-congestion network, can utilize the network bandwidth to the maximum and achieve better forwarding performance.

[0077] Those skilled in the art can understand that in the above method of the specific embodiment, the writing order of each step does not mean a strict execution order and does not constitute any limitation on the implementation process, and the specific execution order of each step should be determined by its function and possible internal logic.

[0078] Figure 5 The structure diagram of the authorization control device of the embodiment of the present application applied to the destination device is shown in FIG. 1, which comprises: Figure 5

[0079] The receiving module 501 is configured to receive the authorization request sent by the source device.

[0080] The first processing module 502 is configured to amplify the number of authorization requests sent by the source device according to the signaling deduction amplification coefficient between the source device and the destination device to obtain the real number of authorization requests, and to determine whether to authorize the authorization request by comparing the real number of authorization requests with the capacity of the local signaling token bucket.

[0081] In some embodiments, the receiving module 501 is further configured to, before receiving the authorization request sent by the source device, the method further comprises: obtaining the signaling deduction amplification coefficient between other devices and the destination device through the forwarding link state, wherein the other devices include the source device.

[0082] ​In some embodiments, the signaling deduction amplification factor between the other device and the destination device is determined according to bandwidth weights of links between the other device and each forwarding node, and bandwidth weights of links between each forwarding node and the destination device; wherein a first bandwidth weight is less than a second bandwidth weight, the first bandwidth weight representing a bandwidth weight between two ends of a target link when the target link is in a failure state, the second bandwidth weight representing a bandwidth weight between two ends of the target link when the target link is in a non-failure state, the target link representing any one of the links between the other device and each forwarding node, and the links between each forwarding node and the destination device.

[0083] In some embodiments, the signaling deduction amplification factor between the other device and the destination device is a ratio of a first product and a first sum value, the first product representing a product of a total number of the forwarding nodes and the second bandwidth weight, and the first sum value representing a sum of link weights corresponding to the forwarding nodes, the link weight corresponding to each of the forwarding nodes being a smaller one of bandwidth weights of the link between the other device and the corresponding forwarding node, and the link between the corresponding forwarding node and the destination device.

[0084] In some embodiments, the receiving module 501 is further configured to, before obtaining the signaling deduction amplification factor between the other device and the destination device, perform failure detection on the links between each of the other devices and each of the forwarding nodes, and the links between each of the forwarding nodes and each of the destination devices, and determine a state of a target link according to a detection result.

[0085] The receiving module 501 is further configured to determine the first bandwidth weight or the second bandwidth weight according to the state of the target link.

[0086] In actual applications, the receiving module 501 and the first processing module 502 can be implemented based on a processor and a communication device.

[0087] Figure 6 For a structural schematic diagram of the authorization control device of the embodiment of the present application applied to a source device, as shown in Figure 6 The device comprises:

[0088] A generating module 601 is configured to generate an authorization request.

[0089] The second processing module 602 is configured to send an authorization request to a target device, and make the target device amplify the number of authorization requests sent by the source device according to an amplification coefficient deducted according to signaling between the source device and the target device, to obtain a real number of authorization requests, and determine whether to authorize the authorization request by comparing the real number of authorization requests with the capacity of a local signaling token bucket.

[0090] In actual applications, the generating module 601 and the second processing module 602 can be implemented based on a processor and a communication device.

[0091] It should be noted that the above description of the device embodiments is similar to the description of the above method embodiments, and has similar beneficial effects to the method embodiments. For technical details not disclosed in the device embodiments of the present application, please refer to the description of the method embodiments of the present application for understanding.

[0092] It should be noted that in the embodiments of the present application, if the above method is implemented in the form of a software function module and sold or used as an independent product, it can also be stored in a computer readable storage medium. Based on such understanding, the technical solutions of the embodiments of the present application can be embodied in the form of a software product, and the computer software product is stored in a storage medium, and includes a plurality of instructions for causing a computer device (which can be a terminal, a server, etc.) to execute all or part of the methods described in the embodiments of the present application. The foregoing storage medium includes: a U disk, a mobile hard disk, a read-only memory (ROM), a magnetic disk or an optical disk, and various storage media that can store program codes. Thus, the embodiments of the present application are not limited to any specific hardware and software combination.

[0093] Correspondingly, the embodiments of the present application further provide a computer program product, which includes computer executable instructions for implementing any one of the authorization control methods provided by the embodiments of the present application.

[0094] Correspondingly, the embodiments of the present application further provide a computer storage medium, which stores computer executable instructions for implementing any one of the authorization control methods provided by the above embodiments.

[0095] The embodiments of the present application also provide an electronic device. Figure 7 The structural diagram of an electronic device provided by the embodiments of the present application is shown in FIG. 7. Figure 7 As shown in FIG. 7, the electronic device 70 can include:

[0096] The memory 701 is configured to store executable instructions.

[0097] The processor 702 is configured to execute executable instructions stored in the memory 701 to implement any of the authorization control methods described above.

[0098] The processor 702 can be at least one of an ASIC, a DSP, a DSPD, a PLD, an FPGA, a CPU, a controller, a microcontroller, and a microprocessor.

[0099] The computer readable storage medium and the memory 702 can be a Read Only Memory (ROM), a Programmable Read-Only Memory (PROM), an Erasable Programmable Read-Only Memory (EPROM), an Electrically Erasable Programmable Read-Only Memory (EEPROM), a Ferromagnetic Random Access Memory (FRAM), a Flash Memory, a magnetic surface memory, an optical disc, a Compact Disc Read-Only Memory (CD-ROM), or the like. The computer readable storage medium can also be various terminals including one or any combination of the above memories, such as a mobile phone, a computer, a tablet device, a personal digital assistant, and the like.

[0100] In some embodiments, the apparatus provided by the embodiments of the present application has functions or includes modules for performing the methods described in the above method embodiments, and the specific implementation can refer to the description of the above method embodiments. For brevity, details are not repeated here.

[0101] The above description of each embodiment tends to emphasize the differences between the embodiments, and the same or similar parts can be mutually referred to. For brevity, details are not repeated here.

[0102] The methods disclosed in the method embodiments of the present application can be combined arbitrarily without conflict to obtain new method embodiments.

[0103] The features disclosed in the product embodiments of the present application can be combined arbitrarily without conflict to obtain new product embodiments.

[0104] The features disclosed in the method or device embodiments of the present application can be combined arbitrarily without conflict to obtain new method or device embodiments.

[0105] Those skilled in the art can clearly understand the above-mentioned embodiment method can be realized by means of software and the necessary general hardware platform, of course, also can be through hardware, but many cases the former is the better embodiment. Based on such understanding, the technical solutions of the present application essentially or say the part of the contribution to the prior art can be embodied in the form of software products, the computer software product is stored in a storage medium (such as ROM / RAM, magnetic disc, optical disc), including a number of instructions to make a terminal (may be a mobile phone, computer, server, air conditioner, or network equipment, etc.) executes the method described in various embodiments of the present application.

[0106] The embodiments of the present application are described above in combination with the drawings, but the present application is not limited to the above-mentioned specific embodiments, the above-mentioned specific embodiments are only illustrative, but not limited, those skilled in the art can make many forms without departing from the purpose of the present application and the scope of the claims under the inspiration of the present application, which are all within the protection of the present application.

Claims

1. An authorization control method characterized by, Applied to a destination device, the method comprises: receiving an authorization request sent by a source device; amplifying the number of authorization requests sent by the source device according to a signaling deduction amplification coefficient between the source device and the destination device to obtain a real number of authorization requests; determining whether to authorize the authorization request by comparing the real number of authorization requests with the capacity of a local signaling token bucket; before receiving the authorization request sent by the source device, the method further comprises: obtaining a signaling deduction amplification coefficient between other devices and the destination device through a forwarding link state, wherein the other devices include the source device; the signaling deduction amplification coefficient between the other devices and the destination device is determined according to the bandwidth weight of a link from the other devices to each forwarding node and the bandwidth weight of a link from each forwarding node to the destination device; wherein a first bandwidth weight is less than a second bandwidth weight, the first bandwidth weight represents the bandwidth weight between the two ends of a target link when the target link is in a fault state, and the second bandwidth weight represents the bandwidth weight between the two ends of the target link when the target link is in a non-fault state, and the target link represents any one of the links from the other devices to the forwarding nodes and the links from the forwarding nodes to the destination device.

2. The method of claim 1, wherein, the signaling deduction amplification coefficient between the other devices and the destination device is the ratio of a first product and a first summation value, the first product represents the product of the total number of the forwarding nodes and the second bandwidth weight, and the first summation value represents the sum of the link weights corresponding to the forwarding nodes, and the link weight corresponding to each forwarding node is the smaller one of the bandwidth weights of the link from the other device to the corresponding forwarding node and the link from the corresponding forwarding node to the destination device.

3. The method of claim 1, wherein, before obtaining the signaling deduction amplification coefficient between the other devices and the destination device, the method further comprises: detecting the fault of the links between each of the other devices and each of the forwarding nodes and the links between each of the forwarding nodes and each of the destination devices periodically or in real time, and determining the state of a target link according to the detection result; determining the first bandwidth weight or the second bandwidth weight according to the state of the target link.

4. An authorization control method characterized by, applied to a source device, the method comprises: sending an authorization request to a destination device, so that the destination device amplifies the number of authorization requests sent by the source device according to a signaling deduction amplification coefficient between the source device and the destination device to obtain a real number of authorization requests, and determines whether to authorize the authorization request by comparing the real number of authorization requests with the capacity of a local signaling token bucket; the destination device is further configured to obtain a signaling deduction amplification coefficient between other devices and the destination device through a forwarding link state before receiving the authorization request sent by the source device, wherein the other devices include the source device. The signaling deduction amplification factor between the other devices and the destination device is determined according to bandwidth weights of links from the other devices to each forwarding node and bandwidth weights of links from each of the forwarding nodes to the destination device; wherein a first bandwidth weight is less than a second bandwidth weight, the first bandwidth weight representing a bandwidth weight between two ends of a target link when the target link is in a failure state, and the second bandwidth weight representing a bandwidth weight between the two ends of the target link when the target link is in a non-failure state, the target link representing any one of the links from the other devices to the respective forwarding nodes and the links from the respective forwarding nodes to the destination device.

5. An authorization control device characterized by comprising: The device applied to the destination device comprises: a receiving module configured to receive an authorization request sent by a source device; a first processing module configured to amplify a number of the authorization requests sent by the source device according to a signaling deduction amplification factor between the source device and the destination device to obtain a real number of authorization requests, and determine whether to authorize the authorization request by comparing the real number of authorization requests with a capacity of a local signaling token bucket; the receiving module is further configured to obtain the signaling deduction amplification factor between the other devices and the destination device through a forwarding link state before receiving the authorization request sent by the source device, the other devices including the source device; the signaling deduction amplification factor between the other devices and the destination device is determined according to bandwidth weights of links from the other devices to each forwarding node and bandwidth weights of links from each of the forwarding nodes to the destination device; wherein a first bandwidth weight is less than a second bandwidth weight, the first bandwidth weight representing a bandwidth weight between two ends of a target link when the target link is in a failure state, and the second bandwidth weight representing a bandwidth weight between the two ends of the target link when the target link is in a non-failure state, the target link representing any one of the links from the other devices to the respective forwarding nodes and the links from the respective forwarding nodes to the destination device.

6. An authorization control device characterized by comprising: The device applied to the source device comprises: a generating module configured to generate an authorization request; a second processing module configured to send the authorization request to a destination device, so that the destination device amplifies a number of the authorization requests sent by the source device according to a signaling deduction amplification factor between the source device and the destination device to obtain a real number of authorization requests, and determines whether to authorize the authorization request by comparing the real number of authorization requests with a capacity of a local signaling token bucket; the destination device is further configured to obtain the signaling deduction amplification factor between the other devices and the destination device through a forwarding link state before receiving the authorization request sent by the source device, the other devices including the source device; The signaling deduction amplification factor between the other device and the destination device is determined according to a bandwidth weight of a link from the other device to each forwarding node and a bandwidth weight of a link from each forwarding node to the destination device; wherein a first bandwidth weight is less than a second bandwidth weight, the first bandwidth weight representing a bandwidth weight between two ends of a target link when the target link is in a failure state, the second bandwidth weight representing a bandwidth weight between two ends of the target link when the target link is in a non-failure state, the target link representing any one of the link from the other device to each forwarding node and the link from each forwarding node to the destination device.

7. An electronic device, comprising: The electronic device comprises a processor and a memory for storing a computer program capable of running on the processor; wherein, The processor is configured to run the computer program to perform the method of any one of claims 1 to 4.

8. A computer storage medium having stored thereon a computer program, characterized in that The computer program, when executed by the processor, performs the method of any one of claims 1 to 4.

9. A computer program product comprising a computer program, characterized in that, The computer program, when executed by the processor, performs the method of any one of claims 1 to 4. The computer program, when executed by the processor, performs the method of any one of claims 1 to 4.

Images