Data processing method and device, equipment and storage medium

Abstract

The invention relates to the technical field of intelligent flow management, and discloses a data processing method, device and equipment and a storage medium, and the method comprises the steps: carrying out the detection and analysis of a data package based on a preset network interface, and generating a preset scheduling strategy and a first data flow priority of each network application according to an analysis result; when the data packet is scheduled and forwarded according to a preset scheduling strategy and the first data flow priority, monitoring flow change information in a current network in real time; adjusting the priority of the first data flow according to the flow change information to obtain the priority of a second data flow; and scheduling and forwarding the data packet based on the second data flow priority and a preset scheduling strategy. According to the method and the device, the priority queue is automatically adjusted by analyzing the property of the data packet and monitoring the current network state, so that the performance of the delay sensitive application is optimized.

Description

Technical Field

[0001] The present application relates to the field of intelligent traffic management technology, and in particular to a data processing method, device, equipment and storage medium. Background Art

[0002] Currently, most switch protocols cannot intelligently adjust processing priorities based on the characteristics of data flows, resulting in delay-sensitive applications (such as video conferencing, online games, etc.) not being given priority. Summary of the invention

[0003] The main purpose of this application is to provide a data processing method, device, equipment and storage medium, aiming to solve the technical problem that most current switch protocols cannot intelligently adjust the processing priority according to the characteristics of the data flow, resulting in delay-sensitive applications (such as video conferencing, online games, etc.) cannot obtain priority protection.

[0004] To achieve the above purpose, the present application proposes a data processing method, which includes:

[0005] Detect and analyze data packets based on a preset network interface, and generate a preset scheduling strategy and a first data flow priority for each network application according to the analysis results;

[0006] When scheduling and forwarding the data packet according to the preset scheduling strategy and the first data flow priority, monitoring the flow change information in the current network in real time;

[0007] Adjust the first data flow priority according to the traffic change information to obtain a second data flow priority;

[0008] The data packet is scheduled and forwarded based on the second data flow priority and the preset scheduling policy.

[0009] Optionally, the step of adjusting the first data flow priority according to the traffic change information to obtain the second data flow priority includes:

[0010] Inputting the traffic change information into the network status model to obtain the traffic change results of each application;

[0011] Adjusting the traffic priorities of target applications and non-target applications according to the traffic change results of each application, wherein the target application is an application with a large current network traffic demand or a key application currently designated by a user;

[0012] The first data stream priority is adjusted based on the corresponding adjustment result to obtain the second data stream priority.

[0013] Optionally, the step of adjusting the traffic priorities of the target application and the non-target application according to the traffic change results of each application includes:

[0014] When the traffic change result is that the traffic data of the target application is greater than the first preset traffic threshold and less than the second preset traffic threshold, the traffic priority of the target application is increased;

[0015] When the traffic change result is that the traffic data of the target application is greater than a second preset traffic threshold, the traffic priority of the target application is set to the highest, and the traffic priority of the non-target application is lowered;

[0016] When the traffic change result is that the sum of the traffic data of the target application and the traffic data of the non-target application drops to a network load threshold, the traffic priorities of all applications are reduced.

[0017] Optionally, the step of detecting and analyzing the data packet based on the preset network interface, and generating a preset scheduling strategy and a first data flow priority of each network application according to the analysis result includes:

[0018] Analyze the data packet based on a preset network interface to extract key information of the data packet;

[0019] Counting network traffic data according to the key information, and classifying the data packets to obtain classification results;

[0020] Determine the first data flow priority of each network application based on the network traffic data;

[0021] A preset scheduling strategy is determined based on the classification result.

[0022] Optionally, before the step of determining the first data flow priority of each network application based on the network traffic data, the step further includes:

[0023] Obtaining prediction information, wherein the prediction information is at least one of historical traffic data, application type, and user behavior pattern;

[0024] Establishing a priority prediction model based on the machine learning algorithm and the prediction information;

[0025] Accordingly, the step of determining the first data flow priority of each network application based on the network traffic data includes:

[0026] The first data flow priority of each network application is determined according to the network traffic data and the priority prediction model.

[0027] Optionally, the step of determining a preset scheduling strategy based on the classification result includes:

[0028] Extracting features from the data packet based on the classification result to obtain target feature information;

[0029] Identify the target feature information according to a pattern prediction algorithm to obtain a target traffic pattern, wherein the pattern prediction algorithm is at least one of a clustering algorithm, a decision tree algorithm, and a support vector machine algorithm;

[0030] The preset scheduling strategy is determined according to the target traffic pattern.

[0031] Optionally, after the step of scheduling and forwarding the data packet based on the second data flow priority and the preset scheduling policy, the method further includes:

[0032] Record the acquired data packet scheduling information to obtain log record information;

[0033] Abnormal traffic behavior is detected according to a preset anomaly detection algorithm and the log record information, and a warning and anomaly report are generated when abnormal activities are detected in the current network.

[0034] In addition, to achieve the above-mentioned purpose, the present application also proposes a data processing device, the device comprising:

[0035] A policy generation module, used to detect and analyze data packets based on a preset network interface, and generate a preset scheduling policy and a first data flow priority of each network application according to the analysis result;

[0036] A traffic monitoring module, used to monitor the traffic change information in the current network in real time when the data packet is scheduled and forwarded according to the preset scheduling strategy and the first data flow priority;

[0037] A priority adjustment module, used to adjust the first data flow priority according to the traffic change information to obtain a second data flow priority;

[0038] A traffic scheduling module is used to schedule and forward the data packet based on the second data flow priority and the preset scheduling strategy.

[0039] In addition, to achieve the above objectives, the present application also proposes a data processing device, which includes: a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the computer program is configured to implement the steps of the data processing method described above.

[0040] In addition, to achieve the above objectives, the present application also proposes a storage medium, which is a computer-readable storage medium, and a computer program is stored on the storage medium. When the computer program is executed by a processor, the steps of the data processing method described above are implemented.

[0041] The present application discloses a method for detecting and analyzing data packets based on a preset network interface, and generating a preset scheduling strategy and a first data flow priority of each network application based on the analysis results; when scheduling and forwarding the data packets based on the preset scheduling strategy and the first data flow priority, real-time monitoring of traffic change information in the current network; adjusting the first data flow priority based on the traffic change information to obtain a second data flow priority; and scheduling and forwarding the data packets based on the second data flow priority and the preset scheduling strategy. Since the present application analyzes the nature of the data packets and the current network status of the monitoring, the priority queue is automatically adjusted, thereby optimizing the performance of delay-sensitive applications. BRIEF DESCRIPTION OF THE DRAWINGS

[0042] The accompanying drawings, which are incorporated in and constitute a part of this specification, illustrate embodiments consistent with the present application and, together with the description, serve to explain the principles of the present application.

[0043] In order to more clearly illustrate the embodiments of the present application or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, for ordinary technicians in this field, other drawings can be obtained based on these drawings without paying any creative labor.

[0044] Figure 1 This is a flow chart of the first embodiment of the data processing method of the present application;

[0045] Figure 2 This is a flow chart of the second embodiment of the data processing method of the present application;

[0046] Figure 3 This is a flow chart of the third embodiment of the data processing method of the present application;

[0047] Figure 4 This is a flow chart of a fourth embodiment of the data processing method of the present application;

[0048] Figure 5 A schematic diagram of the data packet processing flow of the data processing method of this application;

[0049] Figure 6 This is a flowchart of the fifth embodiment of the data processing method of the present application;

[0050] Figure 7 It is a log record diagram of the data processing method of this application;

[0051] Figure 8 This is a schematic diagram of the module structure of the data processing device according to an embodiment of the present application;

[0052] Fig. 9 Schematic diagram of the device structure of the hardware operating environment involved in the data processing method in the embodiment of the present application.

[0053] The purpose, features and advantages of this application will be further described in conjunction with the embodiments and with reference to the accompanying drawings. DETAILED DESCRIPTION

[0054] It should be understood that the specific embodiments described herein are only used to explain the technical solutions of the present application and are not used to limit the present application.

[0055] In order to better understand the technical solution of the present application, a detailed description will be given below in conjunction with the accompanying drawings and specific implementation methods.

[0056] The main solution of the embodiment of the present application is: to detect and analyze the data packets based on the preset network interface, and generate a preset scheduling strategy and the first data flow priority of each network application according to the analysis results; when scheduling and forwarding the data packets according to the preset scheduling strategy and the first data flow priority, monitor the traffic change information in the current network in real time; adjust the first data flow priority according to the traffic change information to obtain the second data flow priority; schedule and forward the data packets based on the second data flow priority and the preset scheduling strategy.

[0057] In modern network architecture, switch protocols such as Ethernet protocol and MPLS (Multi-Protocol Label Switching) are widely used, but most of the current switch protocols cannot intelligently adjust the processing priority according to the characteristics of the data flow, resulting in delay-sensitive applications (such as video conferencing, online games, etc.) not being given priority. In multicast and broadcast scenarios, the way data packets are forwarded often leads to a waste of bandwidth. A large number of invalid data packets are sent to unnecessary recipients, resulting in network congestion and delays. At the same time, existing protocols often rely on static configurations and are difficult to adapt to changes in network traffic, especially during peak traffic periods, resulting in frequent packet loss and retransmission. In addition, the real-time monitoring of traffic is insufficient, and security threats such as DoS attacks cannot be effectively defended, increasing the vulnerability of the network.

[0058] Therefore, the present application provides a data processing method for improving the switch protocol, ensuring priority processing of delay-sensitive applications, reducing network delays, and automatically adjusting priority queues according to real-time network conditions and data packet properties, thereby optimizing the performance of delay-sensitive applications and improving user experience.

[0059] It should be noted that the execution subject of this embodiment can be a computer service device with data processing, network communication and program running functions, such as a computer, or an electronic device capable of realizing the above functions. The following takes a switch as an example to illustrate this embodiment and the following embodiments.

[0060] Based on this, the present application embodiment provides a data processing method, referring to Figure 1 , Figure 1 This is a flowchart of the first embodiment of the data processing method of the present application.

[0061] In this embodiment, the data processing method includes:

[0062] Step S10: Detect and analyze the data packet based on the preset network interface, and generate a preset scheduling strategy and a first data flow priority of each network application according to the analysis result.

[0063] It should be noted that the preset network interface is a pre-configured or designated network interface for data transmission and reception, where the network interface is the connection point between the computer or network device and the network, responsible for data encapsulation, decapsulation and transmission. The data packet is the basic unit of network transmission, which contains information such as source address, destination address, data content, etc., and can be transmitted through different routes and nodes in the network and finally reach the destination.

[0064] In addition, it should be noted that the preset scheduling strategy is to reasonably allocate and utilize system resources in the network environment according to certain rules and algorithms, and reasonably schedule and forward the target data packets to meet the needs of users. The first data flow priority refers to the initial processing priority of different types of data in the network. Different data flows are given different priorities according to their importance, urgency and other factors to ensure that key data can be processed first.

[0065] Specifically, in the current network, data packets are captured through a preset network interface, and corresponding tools or algorithms are used to detect and analyze the data packets, including parsing the header information of the data packets, extracting key fields, analyzing the traffic characteristics of the data packets, etc. Then, according to the analysis results of the data packets, combined with the actual situation and needs of the network system, a corresponding scheduling strategy is generated, and the strategy may include traffic control, load balancing, congestion avoidance, etc. At the same time, considering factors such as the real-time nature, importance, and urgency of the data flow, the first data flow priority of each network application is determined according to the needs of the network application and the characteristics of the data packet.

[0066] For ease of understanding, the following examples are given, but the present application is not limited. In one example, it is assumed that there is an enterprise network environment, which includes multiple network applications, such as video conferencing, online office, file transfer, etc. In order to optimize network performance and improve user experience, it is necessary to detect and analyze data packets based on a preset network interface, and generate scheduling strategies and data flow priorities based on the analysis results. First, an efficient network interface card (NIC) is used to capture data packets on a preset network interface, and the captured data packets are parsed and analyzed to extract key information such as source address, destination address, protocol type, data packet size, and analyze the traffic characteristics of the data packets, such as transmission rate, data packet arrival interval, etc. According to the analysis results of the data packets, it is found that the data packets of the video conferencing application have the characteristics of high real-time performance and large bandwidth occupancy. Therefore, a traffic control strategy for video conferencing applications can be formulated, such as allocating higher bandwidth and lower latency to them. At the same time, for applications such as online office and file transfer, corresponding load balancing and congestion avoidance strategies can be formulated according to their traffic characteristics and user needs. According to the real-time requirements of the video conferencing application, its data flow is set to the highest priority. The data flow of the online office application can be set to a medium priority to ensure that it can still maintain a certain transmission rate when the network is congested. The data flow of applications such as file transfer can be set to low priority, and its transmission rate can be appropriately limited when the network is congested.

[0067] Step S20, when scheduling and forwarding the data packet according to the preset scheduling strategy and the first data flow priority, monitoring the flow change information in the current network in real time.

[0068] It should be noted that traffic change information refers to the dynamic change information of data traffic in the network, including but not limited to the transmission rate of data packets, traffic size, traffic direction, traffic type (such as TCP, UDP, etc.), traffic source and destination, etc.

[0069] It should be understood that network monitoring tools or network statistics provided by the operating system can be used to monitor network traffic in real time, and the monitored indicators include the number of data packets, transmission rate, delay, etc. Then, based on the monitored traffic data, the needs of delay-sensitive applications are evaluated and subsequent processing is performed.

[0070] Step S30: adjusting the first data flow priority according to the traffic change information to obtain a second data flow priority.

[0071] It should be noted that the second data flow priority is a new priority obtained by adjusting the first data flow priority according to the traffic change information in the network. The adjusted priority can better reflect the actual situation of the current network and help optimize network performance and resource allocation.

[0072] It is understandable that the first data flow priority is adjusted according to the traffic change information to obtain the second data flow priority, which can be adjusted according to the traffic demand in the current network or according to the urgency of the traffic demand of the application in the current network. Of course, in order to better meet the user's demand for application traffic, the priority can also be adjusted according to the user's choice of target application.

[0073] Step S40: schedule and forward the data packet based on the second data flow priority and the preset scheduling policy.

[0074] It should be understood that after obtaining the second priority, the data flow to which each data packet belongs is matched with the second data flow priority, and at the same time, according to the type, destination, protocol and other characteristics of the data packet, it is matched with the rules in the preset scheduling policy to determine its scheduling and forwarding path and method, and according to the matching result, the data packet is scheduled and forwarded according to the second data flow priority and the preset scheduling policy. Among them, high-priority data packets will be processed first to ensure that they reach the destination quickly and accurately to meet the user's traffic needs.

[0075] In this embodiment, the data packet is detected and analyzed based on the preset network interface, and a preset scheduling strategy and the first data flow priority of each network application are generated according to the analysis results; when the data packet is scheduled and forwarded according to the preset scheduling strategy and the first data flow priority, the flow change information in the current network is monitored in real time; the first data flow priority is adjusted according to the flow change information to obtain the second data flow priority; the data packet is scheduled and forwarded based on the second data flow priority and the preset scheduling strategy. Thus, the priority queue is automatically adjusted according to the real-time network status and data packet properties to optimize the performance of delay-sensitive applications.

[0076] refer to Figure 2 , Figure 2 This is a flow chart of the second embodiment of the data processing method of the present application. Based on the above-mentioned first embodiment, the second embodiment of the data processing method of the present application is proposed.

[0077] In the second embodiment, the step S30 includes:

[0078] Step S301: input the traffic change information into a network status model to obtain traffic change results of each application.

[0079] It should be noted that the network status model is a mathematical model used to describe and predict the state changes of the network. Based on the input traffic change information, the traffic distribution, traffic trends, and possible bottlenecks or anomalies in the network can be analyzed to obtain the traffic change results of each application. The traffic change results are the traffic changes of various network applications (such as video conferencing, online office, file transfer, etc.) obtained by the model analysis after the traffic change information is input into the network status model. These results may include the increase or decrease of traffic, the stability of traffic, the distribution of traffic, etc.

[0080] Step S302: adjusting the traffic priorities of target applications and non-target applications according to the traffic change results of the applications, wherein the target application is an application with a large current network traffic demand or a key application currently designated by the user.

[0081] It is important to understand that the target application is an application with a large current network traffic demand or a key application currently designated by the user. These applications have a high demand for network resources and their network performance and stability need to be prioritized. Compared with the target application, the non-target application has a small current network traffic demand or is not a key application currently designated by the user. The traffic priority of these applications may be relatively low, so as to prioritize the network demand of the target application when resources are limited.

[0082] It is understandable that after receiving the traffic change results of each application output by the network status model, the traffic status of each application in the current network is determined. Then, based on the traffic change results, the application with the larger current network traffic demand is identified, or it is determined as the target application based on the key application specified by the user. In addition to the target application, other applications are regarded as non-target applications. By dynamically adjusting the traffic priority setting of the network device according to the division of target applications and non-target applications, high-priority traffic will be given priority by the network device to ensure that the target application can transmit data quickly and accurately. At the same time, the network needs of non-target applications also need to be considered to avoid excessive impact or unfair resource allocation when adjusting priorities.

[0083] Step S303: adjusting the first data stream priority based on the corresponding adjustment result to obtain the second data stream priority.

[0084] It is understandable that in the current network, the traffic demands of different applications are constantly changing. For data flows belonging to high-priority target applications, their priorities are increased to ensure that they can transmit data quickly and accurately. For data flows belonging to low-priority non-target applications, their priorities may be reduced to prioritize the network demands of high-priority data flows when resources are limited. The adjusted data flow priority is the second data flow priority, which also reflects the actual situation of the current network and the relative importance of each data flow.

[0085] Of course, in order to improve the accuracy of adjusting the target application traffic priority, the step S302 may include:

[0086] When the traffic change result is that the traffic data of the target application is greater than the first preset traffic threshold and less than the second preset traffic threshold, the traffic priority of the target application is increased;

[0087] When the traffic change result is that the traffic data of the target application is greater than a second preset traffic threshold, the traffic priority of the target application is set to the highest, and the traffic priority of the non-target application is lowered;

[0088] When the traffic change result is that the sum of the traffic data of the target application and the traffic data of the non-target application drops to a network load threshold, the traffic priorities of all applications are reduced.

[0089] It should be noted that the first preset traffic threshold and the second preset traffic threshold are pre-set traffic values, which are used to determine whether the traffic of the target application has reached the level that requires priority protection. The network load threshold represents the threshold of the overall network load level. When the total traffic in the network drops below this threshold, it may mean that the network resources are in excess, and the traffic priority of all applications can be appropriately reduced to save energy or optimize other performance indicators.

[0090] For ease of understanding, the following examples are provided, but are not intended to limit the present application. In one example, refer to Table 1, which shows the adjustment of traffic monitoring, priority setting, and packet scheduling strategies over time in a network environment. During packet forwarding, the WFQ (Weighted Fair Queuing) algorithm is used to schedule packets. The WFQ algorithm allocates bandwidth resources to each data stream based on its priority. Higher-priority data streams receive more bandwidth resources to ensure that their delay-sensitive needs are met, while also ensuring the basic transmission needs of low-priority data streams.

[0091] First, after the data packet is scheduled and forwarded, the network traffic is continuously monitored from time t0. Through monitoring, the dynamic changes of network traffic are understood in real time, providing data support for subsequent policy adjustments. At the same time, the WFQ algorithm is used to assign different weights to different data flows, thereby achieving fair distribution of traffic and priority support to a certain extent.

[0092] Table 1_Priority and resource scheduling table

[0093]

[0094] At t1, an increase in video conferencing traffic is detected. In order to ensure the performance of this critical application, the priority of video conferencing traffic needs to be quickly increased to ensure that video conferencing can obtain sufficient network resources to maintain smoothness and stability. At the same time, video conferencing traffic is prioritized and other low-priority traffic continues to be scheduled, but the bandwidth or processing time allocated to them may be reduced.

[0095] At t2, the video conferencing traffic continues to increase, and its priority is further increased to ensure that the video conference can proceed smoothly. The WFQ algorithm continues to prioritize the video conferencing traffic and may further reduce the scheduling of other low-priority traffic to avoid network congestion.

[0096] At t3, it was detected that the traffic demand of other applications also began to increase. In order to balance the allocation of network resources, the priority of low-priority traffic was appropriately adjusted. At the same time, the WFQ algorithm began to balance the scheduling of video conferencing traffic and other low-priority traffic to ensure that all applications can obtain certain network resources and avoid network congestion and performance degradation.

[0097] At t4, as the network load decreases, the priority of all traffic is lowered. At the same time, the WFQ algorithm resumes normal scheduling mode, no longer giving priority to any specific traffic, but ensuring that all traffic is treated fairly. This is designed to save energy and optimize network performance. By resuming the normal scheduling mode, it ensures that all traffic is treated fairly, which helps with subsequent traffic management.

[0098] In this embodiment, the traffic change results of each application are obtained by inputting the traffic change information into the network status model; the traffic priority of the target application and the non-target application is adjusted according to the traffic change results of each application, wherein the target application is an application with a large current network traffic demand or a key application currently designated by the user; the first data flow priority is adjusted based on the corresponding adjustment result to obtain the second data flow priority. The network traffic is monitored in real time and input into the network status model to accurately capture the traffic change trend of each application, and based on the traffic change, the traffic priority of the target application and the non-target application is intelligently adjusted, ensuring that network resources can be efficiently allocated according to actual needs, avoiding idle or overused resources, and thus improving the overall utilization of network resources.

[0099] refer to Figure 3 , Figure 3 This is a flow chart of the third embodiment of the data processing method of the present application. Based on the above second embodiment, the third embodiment of the data processing method of the present application is proposed.

[0100] In this embodiment, the step S10 includes:

[0101] Step S101, analyzing the data packet based on a preset network interface to extract key information of the data packet.

[0102] It should be noted that key information is information in the data packet that has an important impact on subsequent processing or analysis, including the type of data packet, source address, destination address, data content, timestamp, etc., depending on the purpose and needs of the analysis.

[0103] It is understandable that the data packet is analyzed based on the preset network interface, and the key information of the data packet is extracted by analyzing the data packet header information to identify the transmission protocol to which the data packet belongs (such as TCP, UDP, etc.), or by inspecting the payload of the data packet through DPI (Deep Packet Inspection) technology to identify the type of data packet (such as video stream, audio stream, file transfer, etc.). Of course, in order to facilitate the subsequent generation of corresponding processing strategies for use by subsequent modules, the data packet is analyzed based on the preset network interface, and the key information of the data packet is extracted. The data packet can also be divided into different categories (such as unicast, broadcast, multicast, delay-sensitive traffic, etc.) according to the analysis results, and the key information is determined according to these categories.

[0104] Step S102, counting network traffic data according to the key information, and classifying the data packets to obtain classification results.

[0105] It should be noted that network traffic data refers to the statistical information such as the number, size, and rate of data packets transmitted in the network. These data can reflect the network usage, performance, and possible anomalies or security issues. The classification results include the specific categories or groups into which the data packets are classified, which can be used for subsequent network management, security monitoring, performance optimization, etc.

[0106] Step S103: determining the first data flow priority of each network application based on the network traffic data.

[0107] It is understandable that in order to determine the first data flow priority of each network application based on the network traffic data, it is necessary to analyze the network traffic data, including the number, size, transmission rate, etc. of data packets. Then, according to the characteristics of the network application (such as real-time requirements, bandwidth requirements, etc.) and business priorities, a data flow priority is assigned to each network application. This priority can be a weight-based, queue-based or other form of priority allocation mechanism. The first data flow priority (i.e., default priority) of each network application is determined, and it will also be used to guide subsequent data packet scheduling and resource allocation.

[0108] Step S104: determining a preset scheduling strategy based on the classification result.

[0109] It should be understood that the packet scheduling policy is set or adjusted based on the classification results of the data packets. First, it is necessary to understand the composition and characteristics of the network traffic based on the classification results, such as which data packets belong to high-priority applications (such as video conferencing) and which belong to low-priority applications (such as background data downloads). Then, based on factors such as business needs, network performance, and security policies, the packet scheduling policy is set or adjusted. This includes allocating different bandwidths to different categories of data packets, setting different queue lengths, applying different scheduling algorithms, etc. The final preset scheduling policy will be used to guide the transmission order and resource allocation of data packets to ensure efficient, secure, and stable operation of the network.

[0110] In this embodiment, data packets are analyzed based on the preset network interface, and key information is extracted, network traffic data is counted, and data packets are classified. Based on this, the first data flow priority and preset scheduling strategy of each network application are determined, thereby improving the accuracy of network traffic management, optimizing network traffic classification and scheduling, and improving the automation and intelligence level of network management, thereby promoting the rational use of network resources and ensuring that the traffic demands of key applications and services are met first.

[0111] refer to Figure 4 , Figure 4 This is a flow chart of the fourth embodiment of the data processing method of the present application. Based on the above third embodiment, the fourth embodiment of the data processing method of the present application is proposed.

[0112] In the fourth embodiment, before step S103, the method further includes:

[0113] Step S1031, obtaining prediction information, wherein the prediction information is at least one of historical traffic data, application type, and user behavior pattern.

[0114] It should be noted that prediction information refers to information used to predict future network traffic behavior or characteristics, which may include historical traffic data, application types, user behavior patterns, etc.

[0115] It is understandable that when obtaining prediction information, it is necessary to collect historical traffic data, including the traffic size, transmission rate, peak time, etc. of each network application in the past period of time. At the same time, it is also necessary to collect application type information to understand the characteristics and needs of different network applications. In addition, through user behavior analysis, users' usage habits and behavior patterns in different time periods can be obtained. Through integration, a set of prediction information containing historical traffic data, application types, user behavior patterns and other information is obtained.

[0116] Step S1032: establishing a priority prediction model based on the machine learning algorithm and the prediction information.

[0117] It is important to understand that a machine learning algorithm is an algorithm that can automatically learn from data and improve its performance. In network traffic management, machine learning algorithms can be used to predict network traffic behavior, identify abnormal traffic, optimize resource allocation, etc. The priority prediction model is a model based on machine learning algorithms and prediction information, which is used to pre-set the data flow priority of different network applications in the future time period. This model can automatically determine the default data flow priority of each network application based on network traffic data, application type, user behavior pattern and other information.

[0118] It should be understood that when a machine learning algorithm is used to analyze and model the prediction information to establish a priority prediction model, the machine learning algorithm can be one of a decision tree, a random forest, and a neural network. The prediction information is then used as input data to train the algorithm to learn the data flow priorities of different network applications under different conditions. During the training process, the algorithm will continuously adjust the model parameters to improve the accuracy of the prediction.

[0119] Accordingly, the step S103 includes:

[0120] Step S1033: determining the first data flow priority of each network application according to the network traffic data and the priority prediction model.

[0121] It should be understood that through the previous steps, a priority prediction model can be obtained that can predict the data flow priorities of different network applications in the future time period. When determining the initial data flow priority of the current network, the collected network traffic data, including the current traffic size and transmission rate of each network application, is input into the priority prediction model. The model will automatically calculate the data flow priority of each network application based on the learned knowledge, and obtain the first data flow priority of each network application in the current time period.

[0122] In the fourth embodiment, the step S104 includes:

[0123] Step S1041, extracting features from the data packet based on the classification result to obtain target feature information.

[0124] It should be noted that target feature information is feature information extracted from the original data packet that is useful for target identification or classification. In network traffic management, feature extraction can include extracting features such as the length of the data packet, the arrival interval, and the transmission protocol type.

[0125] It is understandable that before extracting features from the data packets to obtain target feature information, the traffic data needs to be preprocessed, such as deduplication, normalization, missing value processing, etc., to improve the accuracy of the model.

[0126] Step S1042, identifying the target feature information according to a pattern prediction algorithm to obtain a target traffic pattern, wherein the pattern prediction algorithm is at least one of a clustering algorithm, a decision tree algorithm, and a support vector machine algorithm.

[0127] It should be noted that pattern prediction algorithms refer to algorithms used to identify and analyze potential patterns or regularities in data sets. In network traffic management, pattern prediction algorithms are used to identify target traffic patterns, such as specific network behaviors, application types, or user behavior patterns. Common pattern prediction algorithms include clustering algorithms, decision tree algorithms, support vector machine algorithms, etc. Target traffic patterns refer to specific network traffic behaviors or regularities identified by pattern prediction algorithms, representing a specific network behavior, application type, or user behavior pattern.

[0128] Step S1043: determine the preset scheduling strategy according to the target traffic pattern.

[0129] It should be understood that when determining the preset scheduling strategy based on the target traffic pattern, a scheduling strategy that best matches the target traffic pattern can be selected based on a previously defined set of preset scheduling strategies, wherein the strategies may include priority scheduling, polling scheduling, weighted polling scheduling, minimum delay scheduling, etc.

[0130] For ease of understanding, the following examples are provided, but are not intended to limit the present application. Figure 5 , Figure 5The data packet processing flow diagram of the data processing method of the present application. After the data packet enters the data packet classification module, the data packet is analyzed according to its type or characteristics to identify the protocol type of the data packet, such as TCP, UDP, HTTP, etc. At the same time, when abnormal traffic is detected, the content of the data packet is checked to ensure that the content of the network transmission complies with the security regulations and prevent malicious attacks or the spread of illegal content. After the data packet analysis is completed, the data packet is classified and output according to the data analysis results. During the output process, priority information is set according to the traffic data, and the changes in traffic are monitored at the same time, and priority queue scheduling is performed on the data packet, such as using the WFQ algorithm. The intelligent traffic monitoring and management module continuously collects data, monitors network traffic, and promptly discovers and solves network congestion, abnormal traffic and other problems to ensure the stable operation of the network. Among them, the traffic monitor is a software or hardware device for real-time monitoring of network traffic. It can obtain traffic data by monitoring the network interface, using a network sniffer or analyzing network data packets. When a data packet passes through the traffic pattern recognition module, the traffic pattern of the data packet, such as periodic traffic, burst traffic, etc., is identified according to the pattern recognition algorithm, and the identified data is input into the prediction model to obtain an adjustment strategy, wherein the prediction model is a time series model, and the adjustment strategy includes a dynamic adjustment strategy and a forwarding path, etc.

[0131] In this embodiment, a more accurate priority prediction model is established by using machine learning algorithms and rich prediction information, and a pattern prediction algorithm is used to identify the target traffic pattern, thereby determining the preset scheduling strategy and improving the accuracy of the initial network traffic scheduling priority. The speed of traffic identification is improved, the network traffic scheduling strategy is optimized, and the response of subsequent processing decisions is facilitated.

[0132] refer to Figure 6 , Figure 6 This is a flow chart of the fifth embodiment of the data processing method of the present application. Based on the above fourth embodiment, the fifth embodiment of the data processing method of the present application is proposed.

[0133] In this embodiment, after step S40, the following steps are further included:

[0134] Step S501, record the acquired data packet scheduling information to obtain log record information.

[0135] It should be noted that data packet scheduling information is related information about how data packets are scheduled, transmitted and processed during network communication. It includes key parameters such as data packet priority, transmission order, transmission time, transmission path, etc., which can be collected by the second data flow priority and the preset scheduling strategy. Logging information refers to information about the operation, events, errors, etc. of the system or application that is automatically recorded during operation. It is arranged in a certain time sequence and contains detailed information about the status of the system or application.

[0136] Step S502: Detect abnormal traffic behavior according to a preset anomaly detection algorithm and the log record information, and generate a warning and anomaly report when abnormal activities are detected in the current network.

[0137] It should be noted that anomaly detection algorithm is a data analysis technique designed to identify data points or samples that are significantly different from expected patterns or normal behaviors. These anomalies may indicate potential problems, errors, unusual events, or abnormal situations. An anomaly report is a detailed document or record that describes anomalies that occurred in a system or application. An anomaly report usually contains key information such as the time, location, cause, scope of impact, and resolution suggestions of the anomaly. Through anomaly reports, administrators or users can fully understand the anomaly and take appropriate measures to resolve the problem.

[0138] It should be understood that during the automatic configuration synchronization process, detailed log information is recorded, and built-in anomaly detection algorithms are used to identify potential DoS attacks, network scanning and other malicious activities. When abnormal traffic is identified, measures are automatically taken, such as limiting the bandwidth of suspicious traffic or even temporarily blocking it. When abnormal activities are found, alerts are generated and detailed reports are provided to help administrators with subsequent disposal.

[0139] For ease of understanding, the following examples are provided, but are not intended to limit the present application. Figure 7 , Figure 7 This is a log record diagram of the data processing method of the present application. After capturing the passing data packets according to the network interface, a series of processing is performed on the target data packets, and the processing operations are monitored and logged at the same time, wherein the processing operations include feature extraction, pattern prediction, and detection of the processed data packets based on the traffic pattern prediction algorithm to obtain the scheduling strategy. The target data packets are scheduled according to the scheduling strategy and the adjusted quantity flow priority. The monitoring log records use the built-in anomaly detection algorithm during the automatic configuration synchronization process to identify potential DoS attacks, network scanning, and other malicious activities. If there is a serious configuration inconsistency or synchronization failure, an alarm will be issued so that the network administrator can intervene in time.

[0140] In this embodiment, detailed log information is recorded during the automatic configuration synchronization process, and an alarm is issued when a serious configuration inconsistency or synchronization failure occurs, so that the network administrator can intervene in time to provide a higher security guarantee.

[0141] It should be noted that the above examples are only used to understand the present application and do not constitute a limitation on the data processing method of the present application. More simple transformations based on this technical concept are all within the scope of protection of the present application.

[0142] This application also provides a data processing device, please refer to Figure 8 , the data processing device comprises:

[0143] A policy generation module 10 is used to detect and analyze data packets based on a preset network interface, and generate a preset scheduling policy and a first data flow priority of each network application according to the analysis result;

[0144] A traffic monitoring module 20, configured to monitor traffic change information in the current network in real time when the data packet is scheduled and forwarded according to the preset scheduling strategy and the first data flow priority;

[0145] A priority adjustment module 30, configured to adjust the first data flow priority according to the traffic change information to obtain a second data flow priority;

[0146] The traffic scheduling module 40 is used to schedule and forward the data packet based on the second data flow priority and the preset scheduling strategy.

[0147] The data processing device provided by the present application adopts the data processing method in the above embodiment, which can solve the technical problem that most current switch protocols cannot intelligently adjust the processing priority according to the characteristics of the data flow, resulting in delay-sensitive applications (such as video conferencing, online games, etc.) being unable to obtain priority protection. Compared with the prior art, the beneficial effects of the data processing device provided by the present application are the same as the beneficial effects of the data processing method provided by the above embodiment, and the other technical features in the data processing device are the same as the features disclosed in the above embodiment method, which will not be repeated here.

[0148] The present application provides a data processing device, which includes: at least one processor; and a memory communicatively connected to the at least one processor; wherein the memory stores instructions executable by the at least one processor, and the instructions are executed by the at least one processor so that the at least one processor can execute the data processing method in the above-mentioned embodiment 1.

[0149] Reference below Fig. 9, which shows a schematic diagram of the structure of a data processing device suitable for implementing an embodiment of the present application. The data processing device in the embodiment of the present application may include, but is not limited to, mobile terminals such as mobile phones, laptop computers, digital broadcast receivers, PDAs (Personal Digital Assistants), PADs (Portable Application Descriptions), PMPs (Portable Media Players), vehicle-mounted terminals (such as vehicle-mounted navigation terminals), etc., and fixed terminals such as digital TVs, desktop computers, etc. Fig. 9 The data processing device shown is only an example and should not bring any limitation to the functions and scope of use of the embodiments of the present application.

[0150] like Fig. 9 As shown, the data processing device may include a processing device 1001 (e.g., a central processing unit, a graphics processor, etc.), which can perform various appropriate actions and processes according to a program stored in a read-only memory (ROM: Read Only Memory) 1002 or a program loaded from a storage device 1003 to a random access memory (RAM: Random Access Memory) 1004. In RAM1004, various programs and data required for the operation of the data processing device are also stored. The processing device 1001, ROM1002, and RAM1004 are connected to each other through a bus 1005. An input / output (I / O) interface 1006 is also connected to the bus. Generally, the following systems can be connected to the I / O interface 1006: an input device 1007 including, for example, a touch screen, a touch pad, a keyboard, a mouse, an image sensor, a microphone, an accelerometer, a gyroscope, etc.; an output device 1008 including, for example, a liquid crystal display (LCD: Liquid Crystal Display), a speaker, a vibrator, etc.; a storage device 1003 including, for example, a magnetic tape, a hard disk, etc.; and a communication device 1009. The communication device 1009 can allow the data processing device to communicate with other devices wirelessly or by wire to exchange data. Although the figure shows a data processing device with various systems, it should be understood that it is not required to implement or have all the systems shown. More or fewer systems can be implemented or have alternatively.

[0151] In particular, according to the embodiments disclosed in the present application, the process described above with reference to the flowchart can be implemented as a computer software program. For example, the embodiments disclosed in the present application include a computer program product, which includes a computer program carried on a computer-readable medium, and the computer program includes a program code for executing the method shown in the flowchart. In such an embodiment, the computer program can be downloaded and installed from a network through a communication device, or installed from a storage device 1003, or installed from a ROM 1002. When the computer program is executed by the processing device 1001, the above-mentioned functions defined in the method of the embodiment disclosed in the present application are executed.

[0152] The data processing device provided by the present application adopts the data processing method in the above embodiment, which can solve the technical problem that most current switch protocols cannot intelligently adjust the processing priority according to the characteristics of the data flow, resulting in delay-sensitive applications (such as video conferencing, online games, etc.) being unable to obtain priority protection. Compared with the prior art, the beneficial effects of the data processing device provided by the present application are the same as the beneficial effects of the data processing method provided by the above embodiment, and the other technical features in the data processing device are the same as the features disclosed in the method of the previous embodiment, which will not be repeated here.

[0153] It should be understood that the various parts disclosed in this application can be implemented by hardware, software, firmware or a combination thereof. In the description of the above embodiments, specific features, structures, materials or characteristics can be combined in any one or more embodiments or examples in a suitable manner.

[0154] The above is only a specific implementation of the present application, but the protection scope of the present application is not limited thereto. Any person skilled in the art who is familiar with the present technical field can easily think of changes or substitutions within the technical scope disclosed in the present application, which should be included in the protection scope of the present application. Therefore, the protection scope of the present application should be based on the protection scope of the claims.

[0155] The present application provides a computer-readable storage medium having computer-readable program instructions (ie, computer programs) stored thereon, wherein the computer-readable program instructions are used to execute the data processing method in the above-mentioned embodiment.

[0156] The computer-readable storage medium provided in the present application may be, for example, a USB flash drive, but is not limited to electrical, magnetic, optical, electromagnetic, infrared, or semiconductor systems, systems or devices, or any combination of the above. More specific examples of computer-readable storage media may include, but are not limited to: an electrical connection with one or more wires, a portable computer disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the above. In this embodiment, the computer-readable storage medium may be any tangible medium containing or storing a program that can be used by or in combination with an instruction execution system, system or device. The program code contained on the computer-readable storage medium may be transmitted using any appropriate medium, including but not limited to: wires, optical cables, RF (Radio Frequency), etc., or any suitable combination of the above.

[0157] The computer-readable storage medium may be included in a data processing device, or may exist independently without being incorporated into a data processing device.

[0158] The computer-readable storage medium carries one or more programs. When the one or more programs are executed by a data processing device, the data processing device executes the data processing method described above.

[0159] Computer program code for performing the operations of the present application may be written in one or more programming languages ​​or a combination thereof, including object-oriented programming languages ​​such as Java, Smalltalk, C++, and conventional procedural programming languages ​​such as "C" or similar programming languages. The program code may be executed entirely on the user's computer, partially on the user's computer, as a separate software package, partially on the user's computer and partially on a remote computer, or entirely on a remote computer or server. In the case of a remote computer, the remote computer may be connected to the user's computer through any type of network, including a local area network (LAN) or a wide area network (WAN), or may be connected to an external computer (e.g., via the Internet using an Internet service provider).

[0160] The flow chart and block diagram in the accompanying drawings illustrate the possible architecture, function and operation of the system, method and computer program product according to various embodiments of the present application. In this regard, each square box in the flow chart or block diagram can represent a module, a program segment or a part of a code, and the module, the program segment or a part of the code contains one or more executable instructions for realizing the specified logical function. It should also be noted that in some alternative implementations, the functions marked in the square box can also occur in a sequence different from that marked in the accompanying drawings. For example, two square boxes represented in succession can actually be executed substantially in parallel, and they can sometimes be executed in the opposite order, depending on the functions involved. It should also be noted that each square box in the block diagram and / or flow chart, and the combination of the square boxes in the block diagram and / or flow chart can be implemented with a dedicated hardware-based system that performs a specified function or operation, or can be implemented with a combination of dedicated hardware and computer instructions.

[0161] The modules involved in the embodiments described in this application may be implemented by software or hardware, wherein the name of the module does not constitute a limitation on the unit itself in some cases.

[0162] The readable storage medium provided by the present application is a computer-readable storage medium, which stores computer-readable program instructions (i.e., computer programs) for executing the above-mentioned data processing method, and can solve the technical problem that most current switch protocols cannot intelligently adjust the processing priority according to the characteristics of the data flow, resulting in delay-sensitive applications (such as video conferencing, online games, etc.) not being able to obtain priority protection. Compared with the prior art, the beneficial effects of the computer-readable storage medium provided by the present application are the same as the beneficial effects of the data processing method provided by the above-mentioned embodiment, and will not be repeated here.

[0163] The above descriptions are only some embodiments of the present application, and are not intended to limit the patent scope of the present application. All equivalent structural changes made using the contents of the present application specification and drawings under the technical concept of the present application, or direct / indirect applications in other related technical fields are included in the patent protection scope of the present application.

Claims

1. A data processing method, characterized in that: The data processing method comprises: Detect and analyze data packets based on a preset network interface, and generate a preset scheduling strategy and a first data flow priority for each network application according to the analysis results; When scheduling and forwarding the data packet according to the preset scheduling strategy and the first data flow priority, monitoring the flow change information in the current network in real time; Adjust the first data flow priority according to the traffic change information to obtain a second data flow priority; The data packet is scheduled and forwarded based on the second data flow priority and the preset scheduling policy.

2. The data processing method according to claim 1, characterized in that: The step of adjusting the first data flow priority according to the traffic change information to obtain the second data flow priority includes: Inputting the traffic change information into the network status model to obtain the traffic change results of each application; Adjusting the traffic priorities of target applications and non-target applications according to the traffic change results of each application, wherein the target application is an application with a large current network traffic demand or a key application currently designated by a user; The first data stream priority is adjusted based on the corresponding adjustment result to obtain the second data stream priority.

3. The data processing method according to claim 2, characterized in that: The step of adjusting the traffic priorities of the target application and the non-target application according to the traffic change results of each application includes: When the traffic change result is that the traffic data of the target application is greater than the first preset traffic threshold and less than the second preset traffic threshold, the traffic priority of the target application is increased; When the traffic change result is that the traffic data of the target application is greater than a second preset traffic threshold, the traffic priority of the target application is set to the highest, and the traffic priority of the non-target application is lowered; When the traffic change result is that the sum of the traffic data of the target application and the traffic data of the non-target application drops to a network load threshold, the traffic priorities of all applications are reduced.

4. The data processing method according to claim 1, characterized in that: The step of detecting and analyzing the data packet based on the preset network interface, and generating a preset scheduling strategy and a first data flow priority of each network application according to the analysis result, includes: Analyze the data packet based on a preset network interface to extract key information of the data packet; Counting network traffic data according to the key information, and classifying the data packets to obtain classification results; Determine the first data flow priority of each network application based on the network traffic data; A preset scheduling strategy is determined based on the classification result.

5. The data processing method according to claim 4, characterized in that: Before the step of determining the first data flow priority of each network application based on the network traffic data, the method further includes: Obtaining prediction information, wherein the prediction information is at least one of historical traffic data, application type, and user behavior pattern; Establishing a priority prediction model based on the machine learning algorithm and the prediction information; Accordingly, the step of determining the first data flow priority of each network application based on the network traffic data includes: The first data flow priority of each network application is determined according to the network traffic data and the priority prediction model.

6. The data processing method according to claim 4, characterized in that: The step of determining a preset scheduling strategy based on the classification result includes: Extracting features from the data packet based on the classification result to obtain target feature information; Identify the target feature information according to a pattern prediction algorithm to obtain a target traffic pattern, wherein the pattern prediction algorithm is at least one of a clustering algorithm, a decision tree algorithm, and a support vector machine algorithm; The preset scheduling strategy is determined according to the target traffic pattern.

7. The data processing method according to claim 1, characterized in that: After the step of scheduling and forwarding the data packet based on the second data flow priority and the preset scheduling strategy, the method further includes: Record the acquired data packet scheduling information to obtain log record information; Abnormal traffic behavior is detected according to a preset anomaly detection algorithm and the log record information, and a warning and anomaly report are generated when abnormal activities are detected in the current network.

8. A data processing device, characterized in that: The device comprises: A policy generation module, used to detect and analyze data packets based on a preset network interface, and generate a preset scheduling policy and a first data flow priority of each network application according to the analysis result; A traffic monitoring module, used to monitor the traffic change information in the current network in real time when the data packet is scheduled and forwarded according to the preset scheduling strategy and the first data flow priority; A priority adjustment module, used to adjust the first data flow priority according to the traffic change information to obtain a second data flow priority; A traffic scheduling module is used to schedule and forward the data packet based on the second data flow priority and the preset scheduling strategy.

9. A data processing device, characterized in that: The device comprises: a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the computer program is configured to implement the steps of the data processing method according to any one of claims 1 to 7.

10. A storage medium, characterized in that: The storage medium is a computer-readable storage medium, and a computer program is stored on the storage medium. When the computer program is executed by a processor, the steps of the data processing method according to any one of claims 1 to 7 are implemented.

Images