Service flow control method and device, equipment and storage medium

Abstract

The invention provides a service flow control method and device, equipment and a storage medium. The service flow control method is applied to a network load balancing device and comprises the steps that a target service is acquired, and the target service comprises a plurality of sessions; determining traffic feature information of each session in the plurality of sessions; and distributing the session to different devices for processing according to the traffic characteristic information of the session. Through the method, the session can be distributed to different devices for processing based on the traffic characteristic information of the session, so that the situation that the service traffic is processed only through network load balancing equipment is avoided, and the situation that the traffic load is unbalanced is reduced.

Description

Technical Field

[0001] The present application relates to the field of communication technology, and in particular to a method, device, equipment and storage medium for controlling business traffic. Background Art

[0002] Network Load Balancer (NLB) is a network service used to distribute network traffic among multiple targets to achieve load balancing and high availability.

[0003] In the prior art, all session traffic in the target business is connected to the same NLB device and then distributed through the NLB nodes. However, the NLB device performs load balancing based on the flow, and the traffic distribution cannot achieve an absolute balance, which will cause some load balancing nodes to have a high load and some load balancing nodes to have a low load. If the target business is processed only through the load balancing device, there is a problem of traffic load imbalance. Summary of the invention

[0004] In view of this, the purpose of the present application is to provide a method, device, equipment and storage medium for controlling business traffic. Through the above method, business traffic can be avoided from being processed only by network load balancing equipment, thereby reducing the situation of traffic load imbalance.

[0005] To achieve the above objectives, the present application discloses the following technical solutions:

[0006] In a first aspect, the present application provides a method for controlling service traffic, the method being applied to a network load balancing device, the method comprising:

[0007] Acquire a target service, where the target service includes multiple sessions;

[0008] Determining traffic characteristic information of each of the plurality of sessions;

[0009] According to the traffic characteristic information of the session, the session is distributed to different devices for processing.

[0010] Optionally, the traffic characteristic information includes traffic size; and determining the traffic characteristic information of each of the plurality of sessions includes:

[0011] Determine the flow size of each of the plurality of sessions;

[0012] Then, according to the traffic characteristic information of the session, the session is distributed to different devices, including:

[0013] If the traffic size of the session is greater than or equal to the traffic threshold, the session is distributed to the cloud server for processing;

[0014] If the flow size of the session is less than the flow threshold, the session is processed through the network load balancing device.

[0015] Optionally, determining the traffic size of each of the multiple sessions includes:

[0016] The traffic size of each of the multiple sessions is determined according to the traffic monitoring tool ITFOP.

[0017] Optionally, the cloud server includes an intrusion detection system server, and distributing the session to the cloud server for processing includes: distributing the session to the intrusion detection system server for intrusion detection.

[0018] Optionally, the method further includes:

[0019] The processing cost of the target service is calculated based on the session processed by the cloud server and the session processed by the network load balancing device.

[0020] Optionally, the method further includes:

[0021] Obtain flow threshold update information, and update the flow threshold based on the flow threshold update information.

[0022] Optionally, the method further includes:

[0023] The traffic threshold is updated based on the processing cost of the target service.

[0024] In a second aspect, the present application provides a device for controlling service traffic, the device being applied to a network load balancing device, the device comprising:

[0025] An acquisition unit, configured to acquire a target service, wherein the target service includes a plurality of sessions;

[0026] A determination unit, configured to determine traffic characteristic information of each of the plurality of sessions;

[0027] The distribution unit is used to distribute the session to different devices for processing according to the traffic characteristic information of the session.

[0028] Optionally, the traffic characteristic information includes traffic size;

[0029] The determining unit is specifically used to: determine the flow size of each of the multiple sessions;

[0030] The distribution unit is specifically used for:

[0031] If the traffic size of the session is greater than or equal to the traffic threshold, the session is distributed to the cloud server for processing;

[0032] If the flow size of the session is less than the flow threshold, the session is processed through a network load balancing device.

[0033] Optionally, the determining unit is specifically configured to:

[0034] Determine the traffic size of each of the multiple sessions using the traffic monitoring tool ITFOP

[0035] Optionally, the cloud server includes an intrusion detection system server, and the distribution unit is specifically used to distribute the session to the intrusion detection system server for intrusion detection.

[0036] Optionally, the device further comprises: a computing unit,

[0037] The calculation unit is used to calculate the processing cost of the target service based on the session processed by the cloud server and the session processed by the network load balancing device.

[0038] In a third aspect, the present application provides a service flow control device, including:

[0039] Memory for storing computer programs;

[0040] A processor is used to execute the computer program stored in the memory to implement the steps of the service flow control method provided in the first aspect.

[0041] In a fourth aspect, the present application provides a computer-readable storage medium having a computer program stored thereon, wherein the computer program is executed by a processor to implement the steps of the service flow control method provided in the first aspect.

[0042] The present application provides a method, device, equipment and storage medium for controlling business traffic. In a method for controlling business traffic, the method is applied to a network load balancing device, and the method includes obtaining a target business, the target business includes multiple sessions; determining traffic characteristic information of each of the multiple sessions; and distributing the sessions to different devices for processing based on the traffic characteristic information of the sessions. Through the above method, session-based traffic characteristic information can be distributed to different devices for processing, avoiding processing business traffic only through a network load balancing device and reducing traffic load imbalance. BRIEF DESCRIPTION OF THE DRAWINGS

[0043] In order to more clearly illustrate the embodiments of the present application or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are some embodiments of the present application, and a person skilled in the art can also obtain other drawings based on these drawings.

[0044] Figure 1 It is a flow chart of a method for controlling service flow provided in an embodiment of the present application;

[0045] Figure 2 It is a flowchart of another method for controlling service flow provided in an embodiment of the present application;

[0046] Figure 3 This is a schematic diagram of the cost of a network load balancing method for processing a session with a flow rate of 1 GB / s provided in an embodiment of the present application;

[0047] Figure 4 This is a schematic diagram of the cost of a cloud server processing a session with a traffic size of 1 GB / s, provided in an embodiment of the present application;

[0048] Figure 5 It is a structural diagram of a business flow control device provided in an embodiment of the present application. DETAILED DESCRIPTION

[0049] In order to make the purpose, technical solution and advantages of the embodiments of the present application clearer, the technical solution in the embodiments of the present application will be clearly and completely described below in conjunction with the drawings in the embodiments of the present application. Obviously, the described embodiments are part of the embodiments of the present application, not all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of this application.

[0050] To facilitate understanding of the technical solution provided by this application, the background technology involved in this application will be described below.

[0051] The applicant found that in the prior art, all session traffic in the target business is connected to the same load balancing device and then distributed through the nodes of the load balancing device. However, the NLB device performs load balancing based on the flow, and the traffic distribution cannot achieve an absolute balance, which will cause some load balancing nodes to have a high load and some load balancing nodes to have a too low load. If the target business is only processed by the load balancing device, there is a problem of traffic load imbalance.

[0052] In addition, the high cost of load balancing equipment will lead to a problem of wasting company costs and failing to achieve an ideal effect.

[0053] Based on this, the present application provides a method, device, equipment and storage medium for controlling business traffic. In a method for controlling business traffic, the method is applied to a network load balancing device, and the method includes obtaining a target business, the target business includes multiple sessions; determining the traffic characteristic information of each of the multiple sessions; and distributing the sessions to different devices for processing based on the traffic characteristic information of the sessions. Through the above method, sessions can be distributed to different devices for processing based on the traffic characteristic information of the sessions, avoiding processing business traffic only through the network load balancing device and reducing the situation of traffic load imbalance.

[0054] To facilitate understanding of the technical solution provided by the present application, a method for controlling a service flow provided by the present application will be described below in conjunction with the accompanying drawings. A method for controlling a service flow provided by the present application is applied to a network load balancing device. Figure 1 , this figure is a schematic flow chart of a method for controlling business traffic provided in an embodiment of the present application, and the method includes S101-S103.

[0055] S101: Acquire a target service, where the target service includes multiple sessions.

[0056] In the embodiment of the present application, the network load balancing device can obtain the target service. It can be understood that the target service is composed of multiple sessions, and the session is the basic unit of service processing. By processing the multiple sessions included in the target service, the entire process of the target service processing can be completed.

[0057] S102: Determine traffic characteristic information of each of the multiple sessions.

[0058] In the embodiment of the present application, after acquiring the target service, the flow characteristic information of each session in the target service can be determined. The present application does not limit the specific content of the flow characteristic information. As an example, the flow characteristic information may include flow size, flow fluctuation, etc.

[0059] The present application does not limit the specific method of determining the traffic characteristic information of each of the multiple sessions. As an example, when the traffic characteristic information includes the traffic size, the embodiment of the present application can determine the traffic size of each of the multiple sessions. Then S102 determines the traffic size of each of the multiple sessions, including: determining the traffic size of each of the multiple sessions according to the traffic monitoring tool ITFOP.

[0060] It is understandable that the present application can directly use the traffic monitoring tool ITFOP to identify each session and determine the traffic size of each session. The traffic monitoring tool ITFOP can quickly and effectively identify the traffic size of the session.

[0061] S103: Distribute the session to different devices for processing according to the traffic characteristic information of the session.

[0062] In the embodiment of the present application, after determining the traffic characteristic information of the session, the session can be distributed to different devices for processing according to the traffic characteristic information of the session. The present application does not limit the specific content of the different devices. As an example, the different devices may include other devices besides the network load balancing device, such as a cloud server, etc.

[0063] Through the above method, sessions can be distributed to different devices for processing based on the traffic feature information of the sessions, avoiding processing business traffic only through network load balancing devices and reducing traffic load imbalance.

[0064] This application does not limit the specific method of distributing the session to different devices for processing according to the traffic characteristic information of the session. As an example, when the traffic characteristic information includes the traffic size. Figure 2 As shown, Figure 2 A flowchart of another method for controlling business traffic provided in an embodiment of the present application.

[0065] Figure 2 The specific content of S101 is the same as above and will not be repeated here. Figure 2 S102 determining the traffic characteristic information of each of the multiple sessions may include S1021: determining the traffic size of each of the multiple sessions.

[0066] Then S103 distributes the session to different devices for processing according to the traffic characteristic information of the session, including:

[0067] S1031: If the traffic size of the session is greater than or equal to the traffic threshold, the session is distributed to the cloud server for processing.

[0068] S1032: If the flow size of the session is less than the flow threshold, the session is processed through a network load balancing device.

[0069] In the embodiment of the present application, a flow threshold can be pre-set. By comparing the flow size of the session with the flow threshold, if the flow size of the session is greater than or equal to the flow threshold, it means that the flow of the session is large. If the session is directly processed by a network load balancing device, load imbalance is likely to occur. If the flow size of the session is less than the flow threshold, it means that the flow of the session is small, so it can be directly processed by a network load balancing device. The present application does not limit the specific size of the flow threshold. As an example, the flow threshold can be 300M / s, 500M / s, etc.

[0070] This application can effectively reduce traffic load imbalance by distributing sessions with traffic sizes greater than or equal to the traffic threshold to the cloud server for processing.

[0071] In addition, it is understandable that the network load balancing device will charge according to the traffic size. In the embodiment of the present application, the small traffic session is processed by the network load balancing device, and the large traffic session is processed by the cloud server, which can effectively reduce the processing cost of the target business. The present application does not limit the specific content of the cloud server. As an example, the cloud server can be an Amazon cloud server EC2.

[0072] As a possible implementation manner, the cloud server includes an intrusion detection system server, and distributing the session to the cloud server for processing includes: distributing the session to the intrusion detection system server for intrusion detection.

[0073] It is understandable that the present application can also be applied to the field of intrusion detection. The present application can distribute large-traffic sessions directly to the intrusion detection system server, and also solve the problem of unbalanced traffic load in intrusion detection.

[0074] As a possible implementation, the present application provides a method for controlling service flow, further comprising the following steps:

[0075] The processing cost of the target business is calculated based on the sessions processed by the cloud server and the sessions processed by the network load balancing device.

[0076] It can be understood that the present application determines the equipment requirements of the cloud server based on information such as the traffic size of the sessions processed by the cloud server, and determines the equipment requirements of the network load balancing device based on information such as the traffic size of the sessions processed by the network load balancing device, so that the processing cost of the target business can be calculated based on the equipment requirements of the above two devices, so that users can better understand the cost saved by the above business traffic control method.

[0077] As a possible implementation manner, the service flow control method provided in the present application further includes the following steps: obtaining flow threshold update information, and updating the flow threshold based on the flow threshold update information.

[0078] It is understandable that in the embodiment of the present application, the size of the traffic threshold can also be updated in time according to actual needs. The present application does not limit the specific method of updating the size of the traffic threshold. As an example, the user may need to set the updated traffic threshold through the user terminal, so that the traffic update information carrying the updated traffic threshold is sent to the network load, so that the network load balancing device obtains the traffic threshold update information and modifies the original traffic threshold to the updated traffic threshold, so that when the target service is obtained later, the updated traffic threshold is compared with the traffic size of each session, and the session is distributed to different devices for processing. By updating the traffic threshold, the situation of traffic load imbalance can be better reduced.

[0079] As a possible implementation manner, the service flow control method provided in the present application further includes the following steps: updating the flow threshold based on the processing cost of the target service.

[0080] It is understandable that in the embodiment of the present application, the flow threshold can be updated in the direction of reducing the processing cost of the target business. The present application does not limit the specific method of updating the flow threshold based on the processing cost of the target business. As an example, the present application can calculate the processing cost of the target business under different flow thresholds, thereby establishing a corresponding relationship between different flow thresholds and the processing cost of the target business, so that the flow threshold with the lowest processing cost of the target business can be determined based on the corresponding relationship. In order to reduce the processing cost of the target business.

[0081] The following is a further description of the embodiments of the present application in conjunction with specific examples. The present application can be applied to an intrusion detection system (IDS). Of course, the present application is not limited thereto, and the present application can also be applied to an intrusion prevention system (IPS), a website application-level intrusion prevention system (WAF), a firewall, and all other bypass interception detection security systems.

[0082] The following is an example of the application of the present invention to an intrusion detection system. The network load balancing device will first obtain the target service. The present invention does not limit the specific number of target services to be obtained. The present invention can obtain multiple target services at one time, or only one target service at a time.

[0083] In the embodiment of the present application, the network load balancing device can be a load balancer on the Amazon platform (Amazon Web Services, AWS). It can be understood that the present application can achieve access to the target business based on AWS.

[0084] Assume that the network load balancing device obtains the target business X, which includes session X1, session X2 and session X3. The network load balancing device will determine the traffic size of each session based on the traffic monitoring tool ITFOP, such as determining that the traffic size of session X1 is 500M / s, the traffic size of session X2 is 1GB / s, and the traffic size of session X3 is 100M / s. After determining the traffic size of each session, the traffic size of each session will be compared with the traffic threshold. When the traffic threshold is 300M / s, it can be determined that the traffic size of session X1 and session X2 is greater than the traffic threshold, then session X1 and session X2 can be sent to the Amazon platform cloud server EC2 for processing, that is, this application uses EC2 as an IDS detection server and directly performs IDS detection. If it is determined that the traffic size of session X3 is less than the traffic threshold, the network load balancing device will retain the session and process session X3 through the network load balancing device.

[0085] This application can effectively reduce the situation of traffic load imbalance by distributing sessions with traffic size greater than or equal to the traffic threshold to the cloud server for processing. In addition, it can be understood that the network load balancing device will charge according to the traffic size. In the embodiment of this application, the session with small traffic is processed by the network load balancing device, and the session with large traffic is processed by the cloud server, which can effectively reduce the processing cost of the target business.

[0086] In the embodiment of the present application, after determining the sessions processed by the network load balancing device and the sessions processed by the cloud service, the processing cost of the target business will be calculated. As an example, in the embodiment of the present application, the cost can be calculated directly through the device price provided by the Amazon platform, so that the user can better understand the cost saved by the above business traffic control method.

[0087] like Figure 3 Shown and Figure 4 As shown, Figure 3 A schematic diagram of the cost of a network load balancing method for processing a session with a traffic size of 1 GB / s is provided in an embodiment of the present application. Figure 4 A schematic diagram of the cost of a cloud server processing a session with a traffic size of 1GB / s provided in an embodiment of the present application. The cost of processing 1GB / s of traffic using a network load balancing device is $15784.43 per month. If the 1GB / s of traffic is processed using EC2 cloud services, the cost is $0.992*24*30=$714.24 per month. It can be understood that the present application can quickly and effectively determine the processing cost of the target business by directly calculating the cost through the equipment price provided by the Amazon platform, so that users can better understand the cost saved by the above business traffic control method.

[0088] It can be seen that the cost of processing large-traffic sessions through cloud servers is more than twenty times lower than that of processing large-traffic sessions through network load balancing devices. If there are multiple large-traffic sessions, more costs can be saved. This application can maximize the respective advantages of network load balancing devices and cloud servers to save costs.

[0089] See also Figure 5 , Figure 5 A schematic diagram of the structure of a device for controlling service traffic provided by an embodiment of the present invention, wherein the device is applied to a network load balancing device, and comprises: an acquisition unit 501, a determination unit 502, and a distribution unit 503.

[0090] An acquisition unit 501 is used to acquire a target service, where the target service includes multiple sessions;

[0091] A determining unit 502, configured to determine traffic characteristic information of each of the plurality of sessions;

[0092] The distribution unit 503 is used to distribute the session to different devices for processing according to the traffic characteristic information of the session.

[0093] Through the above-mentioned device, the session can be distributed to different devices for processing based on the traffic characteristic information of the session, avoiding processing business traffic only through the network load balancing device and reducing the situation of traffic load imbalance.

[0094] As a possible implementation, the traffic characteristic information includes traffic size;

[0095] The determining unit 502 is specifically configured to: determine the flow size of each of the plurality of sessions;

[0096] The distribution unit 503 is specifically used for:

[0097] If the traffic size of the session is greater than or equal to the traffic threshold, the session is distributed to the cloud server for processing;

[0098] If the flow size of the session is less than the flow threshold, the session is processed through a network load balancing device.

[0099] Optionally, the determining unit 502 is specifically configured to:

[0100] Determine the traffic size of each of the multiple sessions using the traffic monitoring tool ITFOP

[0101] Optionally, the cloud server includes an intrusion detection system server, and the distribution unit 503 is specifically used to distribute the session to the intrusion detection system server for intrusion detection.

[0102] Optionally, the device further comprises: a computing unit,

[0103] The calculation unit is used to calculate the processing cost of the target service based on the session processed by the cloud server and the session processed by the network load balancing device.

[0104] Optionally, the acquisition unit 501 is further used to acquire flow threshold update information;

[0105] The device further includes: an updating unit, configured to update the flow threshold based on the flow threshold update information.

[0106] Optionally, the updating unit is further configured to update the traffic threshold based on the processing cost of the target service.

[0107] The present application also provides a service flow control device, which may include a memory and a processor, wherein a computer program is stored in the memory, and when the processor calls the computer program in the memory, the steps provided in the above embodiment may be implemented. Of course, the terminal may also include various network interfaces, power supplies and other components.

[0108] The processor may include one or more processing cores, such as a 4-core processor, an 8-core processor, etc. The processor may be implemented in at least one hardware form of a digital signal processor (DSP), a field-programmable gate array (FPGA), or a programmable logic array (PLA). The processor may also include a main processor and a coprocessor. The main processor is a processor for processing data in the wake-up state, also known as a central processing unit (CPU); the coprocessor is a low-power processor for processing data in the standby state.

[0109] The memory may include one or more computer-readable storage media, which may be non-transitory. The memory may also include high-speed random access memory, and non-volatile memory, such as one or more disk storage devices, flash memory storage devices. In this embodiment, the memory is at least used to store the following computer program, wherein, after the computer program is loaded and executed by the processor, it can implement the relevant steps of the service flow control method disclosed in any of the aforementioned embodiments. In addition, the resources stored in the memory may also include an operating system and data, etc., and the storage method may be temporary storage or permanent storage. Among them, the operating system may include Windows, Unix, Linux, etc. The data may include but is not limited to the data involved in the service flow control method, etc.

[0110] It should be noted that a service flow control device provided in an embodiment of the present application has the technical effects of any of the above embodiments, and the embodiments of the present application are not described in detail here.

[0111] The present application also provides a computer-readable storage medium on which a computer program is stored, and when the computer program is executed, the steps provided in the above embodiment can be implemented. The storage medium may include: a USB flash drive, a mobile hard disk, a read-only memory (ROM), a random access memory (RAM), a magnetic disk or an optical disk, and other media that can store program codes.

[0112] It should be noted that a computer-readable storage medium provided in an embodiment of the present application has the technical effects of any of the above embodiments, and the embodiments of the present application are not described in detail here.

[0113] The present application may also provide a computer program product or a computer program, the computer program product or the computer program including computer instructions, the computer instructions being stored in a computer-readable storage medium. The processor of a computer device reads the computer instructions from the computer-readable storage medium, and the processor executes the computer instructions, so that the computer device executes the methods provided by the above aspects.

[0114] It should be understood that in the present application, "at least one (item)" means one or more, and "plurality" means two or more. "And / or" is used to describe the association relationship of associated objects, indicating that three relationships may exist. For example, "A and / or B" can mean: only A exists, only B exists, and A and B exist at the same time, where A and B can be singular or plural. The character " / " generally indicates that the objects associated before and after are in an "or" relationship. "At least one of the following" or similar expressions refers to any combination of these items, including any combination of single or plural items. For example, at least one of a, b or c can mean: a, b, c, "a and b", "a and c", "b and c", or "a and b and c", where a, b, c can be single or multiple.

[0115] It should also be noted that, in this article, relational terms such as first and second, etc. are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Moreover, the terms "include", "comprise" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or device. In the absence of further restrictions, the elements defined by the sentence "comprise a ..." do not exclude the presence of other identical elements in the process, method, article or device including the elements.

[0116] Specific examples are used herein to illustrate the principles and implementation methods of the present application, and the description of the above embodiments is only used to help understand the method and core ideas of the present application. It should be pointed out that for ordinary technicians in this technical field, without departing from the principles of the present application, several improvements and modifications can be made to the present application, and these improvements and modifications also fall within the scope of protection of the claims of the present application.

Claims

1. A method for controlling business traffic, characterized in that: The method is applied to a network load balancing device, and the method comprises: Acquire a target service, where the target service includes multiple sessions; Determining traffic characteristic information of each of the plurality of sessions; According to the traffic characteristic information of the session, the session is distributed to different devices for processing.

2. The method according to claim 1, characterized in that The traffic characteristic information includes traffic size; the determining of the traffic characteristic information of each of the plurality of sessions includes: Determine the flow size of each of the plurality of sessions; Then, according to the traffic characteristic information of the session, the session is distributed to different devices, including: If the traffic size of the session is greater than or equal to the traffic threshold, the session is distributed to the cloud server for processing; If the flow size of the session is less than the flow threshold, the session is processed through the network load balancing device.

3. The method according to claim 2, characterized in that The determining of the flow size of each of the plurality of sessions includes: The traffic size of each of the multiple sessions is determined according to the traffic monitoring tool ITFOP.

4. The method according to claim 2, characterized in that: The cloud server includes an intrusion detection system server, and distributing the session to the cloud server for processing includes: distributing the session to the intrusion detection system server for intrusion detection.

5. The method according to claim 2, characterized in that: The method further comprises: The processing cost of the target service is calculated based on the session processed by the cloud server and the session processed by the network load balancing device.

6. The method according to claim 2, characterized in that The method further comprises: Get traffic threshold update information; The flow threshold is updated based on the flow threshold update information.

7. The method according to claim 5, characterized in that The method further comprises: The traffic threshold is updated based on the processing cost of the target service.

8. A device for controlling business flow, characterized in that: The device is applied to a network load balancing device, and the device comprises: An acquisition unit, configured to acquire a target service, wherein the target service includes a plurality of sessions; A determination unit, configured to determine traffic characteristic information of each of the plurality of sessions; The distribution unit is used to distribute the session to different devices for processing according to the traffic characteristic information of the session.

9. A service flow control device, characterized in that: include: Memory for storing computer programs; A processor, configured to execute the computer program stored in the memory to implement the steps of the service flow control method according to any one of claims 1 to 7.

10. A computer-readable storage medium having a computer program stored thereon, characterized in that: The computer program is executed by a processor to implement the steps of the service flow control method according to any one of claims 1 to 7.

Images