Multi-layer network access adaptation method and system

Abstract

The invention discloses a multilayer network access adaptation method and system. The method comprises the following steps: acquiring a network data packet; screening the network data packets to obtain specific data packets; performing message analysis and verification on the specific data packet, and obtaining a sender address and a target IP address of the message by verifying the integrity and validity of the message; dynamic address attachment is carried out, and a second IP address is allocated to the sender based on the sender address; and after the opposite-end device completes addressing of the target IP address, according to the second IP address and the target IP address, business data forwarding is realized through mutual identification of unique MAC addresses between network cards. According to the invention, the key IP information is extracted by accurately capturing the ARP data packet; and automatically generating an IP address matched with the current network segment, and attaching the IP address to the network card. According to the invention, addressing of the opposite terminal device can be successfully realized, and mutual identification is carried out based on the unique MAC address of the link layer, so that data traffic is stably and efficiently forwarded, and rapid and convenient access among different networks is realized.

Description

Technical Field

[0001] The present invention relates to the technical field of power equipment detection, and in particular to a multi-layer network access adaptation method and system. Background Art

[0002] When the substation telecontrol equipment is in operation, maintenance personnel carry out new projects such as simulation protocol test equipment and trustworthy test equipment based on the old telecontrol equipment, and mostly use the "back-to-back" network cable direct connection method to access the telecontrol equipment. However, due to the routing parameter configuration of the old telecontrol equipment, it is difficult for the test equipment to communicate simply through the network cable. There are many problems with the traditional way of relying on telecontrol manufacturers to configure telecontrol equipment. The telecontrol equipment may not have additional network ports for configuration, and the impact of the new configuration on the old telecontrol channel is unknown, which causes great inconvenience and challenges to the maintenance personnel.

[0003] Therefore, portable network access adapters came into being. However, there are still some difficult problems to solve. For example, when forwarding the network, it is usually necessary to collect various parameters of the entire network, such as IP address, mask and gateway information. The configuration process is relatively complicated and difficult to achieve plug-and-play. The user needs to have a certain amount of network knowledge. At the same time, in the actual network environment, the network status is constantly changing. For example, a server may be overloaded due to sudden high-traffic access. At this time, it is necessary to dynamically guide the traffic to other backup servers. However, relying solely on the correspondence between domain names and addresses to determine the route cannot respond quickly to such changes. Once the correspondence is determined, when facing changes in server load, the route cannot be adjusted in time to achieve the optimal traffic distribution, which is very likely to cause some servers to be overloaded, while other server resources are idle, thereby affecting the performance and stability of the entire network. Sometimes there will be short-term network fluctuations, such as increased packet delay and a short-term increase in packet loss rate. And these fluctuations may be misjudged as abnormal communication connections. For example, a link in the network may experience increased latency due to momentary congestion, but in reality the communication connection is not actually interrupted. However, the system may judge it as a connection abnormality. Summary of the invention

[0004] In view of the above existing problems, the present invention is proposed.

[0005] Therefore, the present invention provides a multi-layer network access adaptation method and system to solve the problems that when performing network forwarding, various parameters of the entire network need to be collected, the configuration is cumbersome, and high professional requirements are required for personnel; it is impossible to quickly respond to changes in network conditions; and there are problems of misjudgment of communication connections.

[0006] In order to solve the above technical problems, the present invention provides the following technical solutions:

[0007] In a first aspect, the present invention provides a multi-layer network access adaptation method, comprising:

[0008] Get network data packets;

[0009] Screening the network data packets to obtain specific data packets;

[0010] Parse and verify specific data packets, obtain the sender address and target IP address of the message by verifying the integrity and validity of the message;

[0011] Performing dynamic address attachment, and assigning a second IP address to the sender based on the sender address;

[0012] When the opposite device completes the target IP address addressing, the second IP address and the target IP address are used to identify each other through the unique MAC addresses between the network cards to achieve business data forwarding.

[0013] As a preferred solution of the multi-layer network access adaptation method of the present invention, wherein:

[0014] The network data packet is screened, and the screening is performed through the Ethernet frame header type and the destination MAC address to obtain the ARP request broadcast packet.

[0015] As a preferred solution of the multi-layer network access adaptation method of the present invention, wherein:

[0016] Parse and verify specific data packets to verify message integrity and validity, including:

[0017] Check whether the message of a specific data packet is within the standard length range;

[0018] If it is within the standard length range, it is judged to have preliminary integrity.

[0019] As a preferred solution of the multi-layer network access adaptation method of the present invention, wherein:

[0020] Parse and verify specific data packets, verify the integrity and validity of the messages, and also include:

[0021] Use a cyclic redundancy check algorithm to check whether the Ethernet frame sequence value of a specific data packet is consistent;

[0022] If they are consistent, it is determined that no error occurred in the transmission of the Ethernet frame and it is valid.

[0023] As a preferred solution of the multi-layer network access adaptation method of the present invention, wherein:

[0024] Parse and verify specific data packets, verify the integrity and validity of the messages, and also include:

[0025] Check the key fields in a specific data packet message to determine whether the key fields exist and whether their values ​​are within a preset reasonable range;

[0026] If it exists and is within a reasonable range, it is judged to be complete and valid.

[0027] As a preferred solution of the multi-layer network access adaptation method of the present invention, wherein:

[0028] The allocating a second IP address to the sender includes:

[0029] When a device is connected to the network, it is automatically allocated based on the parsed message;

[0030] The second IP address is an IP address that is in the same network segment as the sender's address and can be directly connected;

[0031] When a device leaves the network, the second IP address can be dynamically reassigned.

[0032] As a preferred solution of the multi-layer network access adaptation method of the present invention, wherein:

[0033] The method of mutually identifying the network cards through their unique MAC addresses to achieve service data forwarding includes:

[0034] Aggregate the physical connection links between network cards to form a unified link;

[0035] Use load balancing to evenly distribute data to different links, and identify each other through the unique MAC address at the link layer.

[0036] In a second aspect, the present invention provides a multi-layer network access adaptation system, comprising:

[0037] An acquisition module is used to acquire network data packets;

[0038] A traffic detection module, used for screening the network data packets to obtain specific data packets;

[0039] The message parsing module is used to parse and verify specific data packets, and obtain the sender address and target IP address of the message by verifying the integrity and validity of the message;

[0040] A dynamic address attachment module, used for performing dynamic address attachment and allocating a second IP address to the sender based on the sender address;

[0041] The automatic forwarding module is used to realize business data forwarding by identifying each other through the unique MAC addresses between network cards based on the second IP address and the target IP address after the opposite device completes the addressing of the target IP address.

[0042] In a third aspect, the present invention provides a computing device, comprising:

[0043] Memory and processor;

[0044] The memory is used to store computer executable instructions, and the processor is used to execute the computer executable instructions. When the computer executable instructions are executed by the processor, the steps of the multi-layer network access adaptation method are implemented.

[0045] In a fourth aspect, the present invention provides a computer-readable storage medium storing computer-executable instructions, which, when executed by a processor, implement the steps of the multi-layer network access adaptation method.

[0046] Compared with the prior art, the present invention has the following beneficial effects: the present invention accurately captures ARP data packets, then deeply analyzes the message content, extracts key IP information from it; based on this, automatically generates an IP address that matches the current network segment, and attaches it to the network card. It can successfully achieve the addressing of the peer device and smoothly trigger the sending process of business data. At the same time, the network cards recognize each other based on the unique MAC address of the link layer, and then stably and efficiently forward data traffic to each other, ensuring the smooth operation of the entire network communication link; thereby achieving fast and convenient access between different networks. BRIEF DESCRIPTION OF THE DRAWINGS

[0047] In order to more clearly illustrate the technical solutions of the embodiments of the present invention, the accompanying drawings required for use in the description of the embodiments will be briefly introduced below. Obviously, the accompanying drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other accompanying drawings can be obtained based on these accompanying drawings without paying creative work.

[0048] Figure 1 A schematic diagram of the overall process of a multi-layer network access adaptation method according to an embodiment of the present invention;

[0049] Figure 2 A schematic diagram of a specific process and system process in a multi-layer network access adaptation method according to an embodiment of the present invention;

[0050] Figure 3 The present invention is a schematic diagram of a product structure used in a multi-layer network access adaptation method according to an embodiment of the present invention. DETAILED DESCRIPTION

[0051] In order to make the above-mentioned purposes, features and advantages of the present invention more obvious and easy to understand, the specific implementation methods of the present invention are described in detail below in conjunction with the drawings of the specification. Obviously, the described embodiments are part of the embodiments of the present invention, but not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary persons in the art without creative work should fall within the scope of protection of the present invention.

[0052] Example 1

[0053] Reference Figure 1 , as an embodiment of the present invention, provides a multi-layer network access adaptation method, comprising:

[0054] S100: Obtain network data packets;

[0055] S200: Screening the network data packets to obtain specific data packets;

[0056] S300: parsing and verifying a specific data packet, and obtaining a sender address and a target IP address of the message by verifying the integrity and validity of the message;

[0057] S400: Perform dynamic address attachment, and allocate a second IP address to the sender based on the sender address;

[0058] S500: After the opposite device completes the target IP address addressing, the network cards are mutually identified through the unique MAC addresses based on the second IP address and the target IP address to achieve service data forwarding.

[0059] It should be noted that in the operation of substation telecontrol equipment, maintenance personnel often have the need to carry out new projects based on old telecontrol equipment, such as simulation protocol test equipment and trustworthy test equipment. These projects are often connected to telecontrol equipment through a "back-to-back" network cable direct connection to carry out work.

[0060] Therefore, the network access adaptation method of steps S100-S500 is proposed, which can enable the IP address devices of different networks to temporarily establish communication after the telecontrol equipment is directly connected to the test device network cable, without the need for the telecontrol manufacturer to intervene in the configuration, and provide an efficient and convenient solution for the communication problems in the maintenance of substation telecontrol equipment and the development of new projects, effectively improving work efficiency and flexibility, and having good application prospects and development potential in the work scenarios related to substation telecontrol equipment. The method and its portable hardware equipment have the advantages of fast access speed, good stability, strong protocol conversion capability, high data forwarding efficiency, etc., and can meet the network access needs in different scenarios.

[0061] Example 2

[0062] Reference Figure 1-Figure 2, which is an embodiment of the present invention, provides a multi-layer network access adaptation method based on the previous embodiment, including:

[0063] In the implementation manner of the present application, when acquiring the network data packet in step S100, the acquisition mode of the network card is adjusted to the promiscuous mode;

[0064] It should be noted that in this mode, all network data packets passing through can be received without configuring the IP address.

[0065] In an optional implementation, the network data packets in step S100 may also be obtained by using a network monitoring tool to capture all the passing data packets without changing the network card mode.

[0066] In another optional implementation, the network data packets obtained in step S100 can also be copied and forwarded to the monitoring device through a network splitter without interfering with normal network traffic. This method does not require changing the working mode of the network card and is suitable for high availability and high reliability network environments.

[0067] In the implementation mode of this application, Figure 2 As shown, in step S200, the network data packet is screened, and the screening is performed based on the Ethernet frame header type and the destination MAC address to obtain the ARP request broadcast packet;

[0068] In the implementation manner of the present application, this step is specifically manifested as:

[0069] Filter out specific data packets from network data packets, namely, ARP request broadcast packets whose Ethernet frame header type is ARP protocol (0x0806) and whose destination MAC address is the broadcast address (FF:FF:FF:FF:FF:FF:FF).

[0070] In an optional implementation, the network data packets in step S200 may also be screened by a protocol analysis tool, such as Wireshark, which may screen the data packets according to a variety of conditions (such as protocol type, source / destination IP address, port number, etc.). For example, the display filter arp or eth.type == 0x0806 of Wireshark may be used to screen the ARP request broadcast packets.

[0071] In another optional implementation, the network data packets in step S200 can also be screened using a high-level network programming interface, using a PF_PACKET socket to directly capture and process Ethernet frames. By setting appropriate filtering conditions, ARP request broadcast packets can be screened out.

[0072] In the implementation mode of this application, Figure 2 As shown, in step S300, the specific data packet is parsed and verified, and the integrity and validity of the message are verified, including the following steps A1:

[0073] In A1, it is detected whether the message of a specific data packet is within the standard length range; if it is within the standard length range, it is determined to have preliminary integrity.

[0074] Exemplarily, it is detected whether the ARP message is within the standard length range. The length of the ARP message is fixed. In an Ethernet environment, the length of an ARP request or response message is generally 28 bytes of ARP data plus a 14-byte Ethernet frame header.

[0075] In the implementation mode of this application, Figure 2 As shown, in step S300, the specific data packet is parsed and verified, and the integrity and validity of the message are verified, and the following step A2 is also included:

[0076] In A2, a cyclic redundancy check algorithm is used to check whether the Ethernet frame sequence values ​​of a specific data packet are consistent; if they are consistent, it is determined that no error has occurred in the transmission process of the Ethernet frame and it is valid.

[0077] In the implementation manner of the present application, this step is specifically manifested as:

[0078] Use the cyclic redundancy check CRC-32 (generator polynomial 0x04C11DB7) algorithm to check whether the FCS (Frame Check Sequence) value of the ARP broadcast packet Ethernet frame is consistent. If the two are the same, it means that there is no error in the transmission of the Ethernet frame; if they are different, it means that there is an error in the data.

[0079] In an optional implementation, A2 in step S300 can also perform verification through an IP header checksum. In IPv4, the header of each IP data packet contains a 16-bit checksum field. This checksum is used to detect whether an error occurs in the IP header during transmission; if in other non-ARP message types, the TCP and UDP headers both contain a 16-bit checksum field, which is also used to detect whether an error occurs in the entire message (including the header and data part) during transmission.

[0080] In another optional implementation, A2 in step S300 may also be verified by using the hash function MD5.

[0081] In the implementation mode of this application, Figure 2 As shown, in step S300, the specific data packet is parsed and verified, and the integrity and validity of the message are verified, and the following step A3 is also included:

[0082] In A3, the key fields in the specific data packet message are checked to determine whether the key fields exist and whether their existence values ​​are within a preset reasonable range; if they exist and are within a reasonable range, it is determined to be complete and valid.

[0083] In the implementation manner of the present application, this step is specifically manifested as:

[0084] Check the key fields in the ARP message, such as hardware type, protocol type, hardware address length, protocol address length, and operation code, to ensure that the values ​​of these key fields are reasonable and exist.

[0085] For example, the hardware type and protocol type should be values ​​that comply with the standard, and the operation code should be request (1) or response (2), etc. If the key field is missing or the value is unreasonable, the message frame is incomplete.

[0086] It should be noted that step S300 is used to check the integrity and validity of the ARP broadcast message to ensure that the message format is correct and not damaged. According to the specific structure of the specific message (ARP), the content of each field is gradually parsed. After parsing, the required key information is extracted from the ARP data packet, which mainly includes the sender IP address (Sender IPaddress) and the target IP address (Target IP address) for subsequent processing and use.

[0087] In the implementation mode of this application, Figure 2 As shown, the second IP address is allocated to the sender in step S400, including:

[0088] When a device is connected to the network, it is automatically allocated based on the parsed message;

[0089] The second IP address is an IP address that is in the same network segment as the sender's address and can be directly connected;

[0090] When a device leaves the network, the second IP address can be dynamically reassigned.

[0091] It should be noted that, based on the sender's address information, the system will automatically assign the sender a second IP address that is in the same network segment as the target device and can be directly connected, while ensuring that the address is valid and available within a specific time period. This step is to ensure that the communication connection can be established more efficiently between the two devices and that the sender can communicate directly with the target device more effectively. At the same time, in order to achieve specific network configuration requirements, that is: once the device leaves the network, or other situations such as changes in network status occur, the address can be dynamically reallocated, allowing the device network card to flexibly obtain and use IP addresses in different network environments without the need for tedious manual configuration, thereby making device access in different network environments more convenient and efficient.

[0092] In the implementation mode of this application, Figure 2 As shown, the mutual identification of network cards through unique MAC addresses in step S500 to achieve service data forwarding includes:

[0093] Aggregate the physical connection links between network cards to form a unified link;

[0094] Use load balancing to evenly distribute data to different links, and identify each other through the unique MAC address at the link layer.

[0095] It should be noted that this step uses the unique MAC addresses between network cards to identify each other and forward business data. When they are in working state, there will be several reliable physical connection links to ensure that data can be transmitted at the physical level. In order to further optimize the allocation and management of network resources, the physical connection links are aggregated, and these originally independent physical connections are logically integrated to form a unified link at the logical level. In this way, not only can the utilization rate of network resources be improved, but also the network traffic can be more flexibly scheduled and controlled, providing a more efficient and stable communication environment for various network applications. Use load balancing to evenly distribute data to different links to avoid excessive load on a certain link, thereby improving the throughput and performance of the entire network.

[0096] In an optional implementation, business data forwarding is implemented in step S500, and network traffic can also be managed through an SDN centralized controller, and the traffic path can be dynamically adjusted according to the real-time network status to achieve more flexible load balancing and fault recovery.

[0097] In another optional implementation, the business data forwarding is implemented in step S500, and flexible configuration can be achieved through a software load balancer, which is applicable to network environments of various sizes.

[0098] In summary, the overall technical method of the present application and the preferred technical solution can realize convenient data acquisition without configuring IP addresses, so that the network card can directly receive all network data packets and accurately screen out specific ARP request broadcast packets, greatly improving the convenience and pertinence of data acquisition. A variety of methods are used to verify the integrity and validity of ARP messages, including detection length, CRC-32 check and checking key fields to ensure that key information is accurate and reliable. It can enable the device network card to flexibly obtain and use IP addresses in different network environments without manual configuration, and can be dynamically reallocated according to network changes, making access more efficient. Finally, the two network cards identify each other through unique MAC addresses to ensure the accuracy and reliability of data transmission. At the same time, the physical connection channel is virtualized and integrated, and load balancing is used to distribute data to improve network resource utilization and throughput, enhance network traffic scheduling and control capabilities, and provide an efficient and stable environment for network applications.

[0099] Example 3

[0100] The above is a schematic scheme of a multi-layer network access adaptation method of this embodiment. It should be noted that the technical scheme of the multi-layer network access adaptation system and the technical scheme of the multi-layer network access adaptation method described above belong to the same concept, and the details of the technical scheme of the multi-layer network access adaptation system not described in detail in this embodiment can all be referred to the description of the technical scheme of the multi-layer network access adaptation method described above.

[0101] This embodiment also provides a system for a multi-layer network access adaptation method, such as Figure 2 As shown, including:

[0102] An acquisition module, used to acquire network data packets;

[0103] A traffic detection module, used for screening the network data packets to obtain specific data packets;

[0104] The message parsing module is used to parse and verify specific data packets, and obtain the sender address and target IP address of the message by verifying the integrity and validity of the message;

[0105] A dynamic address attachment module, used for performing dynamic address attachment and allocating a second IP address to the sender based on the sender address;

[0106] The automatic forwarding module is used to realize business data forwarding by identifying each other through the unique MAC addresses between network cards based on the second IP address and the target IP address after the opposite device completes the addressing of the target IP address.

[0107] It should be noted that the acquisition module is provided with two network interfaces, and the network cards at the interfaces are both adjusted to promiscuous mode.

[0108] Through the above description of the implementation methods, those skilled in the art can clearly understand that the present invention can be implemented by means of software and necessary general hardware, and of course can also be implemented by hardware, such as Figure 3 As shown, the hardware has the advantage of being pocket-sized and portable.

[0109] This embodiment also provides a computing device suitable for multi-layer network access adaptation, including: a memory and a processor; the memory is used to store computer executable instructions, and the processor is used to execute computer executable instructions to implement the multi-layer network access adaptation method proposed in the above embodiment.

[0110] This embodiment further provides a storage medium on which a computer program is stored. When the program is executed by a processor, the method for implementing multi-layer network access adaptation as proposed in the above embodiment is implemented.

[0111] The storage medium proposed in this embodiment and the method for implementing multi-layer network access adaptation proposed in the above embodiment belong to the same inventive concept. The technical details not fully described in this embodiment can be referred to the above embodiment, and this embodiment has the same beneficial effects as the above embodiment.

[0112] Based on this understanding, the technical solution of the present invention can essentially or the part that contributes to the prior art can be embodied in the form of a software product. The computer software product can be stored in a computer-readable storage medium, such as a computer floppy disk, read-only memory (ROM), random access memory (RAM), flash memory (FLASH), hard disk or optical disk, etc., including a number of instructions for enabling a computer device (which can be a personal computer, a server, or a network device, etc.) to execute the methods of the various embodiments of the present invention.

[0113] It should be noted that the above embodiments are only used to illustrate the technical solutions of the present invention and are not intended to limit the present invention. Although the present invention has been described in detail with reference to the preferred embodiments, those skilled in the art should understand that the technical solutions of the present invention may be modified or replaced by equivalents without departing from the spirit and scope of the technical solutions of the present invention, which should all be included in the scope of the claims of the present invention.

Claims

1. A multi-layer network access adaptation method, characterized in that: include: Get network data packets; Screening the network data packets to obtain specific data packets; Parse and verify specific data packets, obtain the sender address and target IP address of the message by verifying the integrity and validity of the message; Performing dynamic address attachment, and assigning a second IP address to the sender based on the sender address; When the opposite device completes the target IP address addressing, the second IP address and the target IP address are used to identify each other through the unique MAC addresses between the network cards to achieve business data forwarding.

2. The multi-layer network access adaptation method according to claim 1, characterized in that: The network data packet is screened, and the screening is performed through the Ethernet frame header type and the destination MAC address to obtain the ARP request broadcast packet.

3. The multi-layer network access adaptation method according to claim 1 or 2, characterized in that: Parse and verify specific data packets to verify message integrity and validity, including: Check whether the message of a specific data packet is within the standard length range; If it is within the standard length range, it is judged to have preliminary integrity.

4. The multi-layer network access adaptation method according to claim 3, characterized in that: Parse and verify specific data packets, verify the integrity and validity of the messages, and also include: Use a cyclic redundancy check algorithm to check whether the Ethernet frame sequence value of a specific data packet is consistent; If they are consistent, it is determined that no error occurred in the transmission of the Ethernet frame and it is valid.

5. The multi-layer network access adaptation method according to claim 4, characterized in that: Parse and verify specific data packets, verify the integrity and validity of the messages, and also include: Check the key fields in a specific data packet message to determine whether the key fields exist and whether their values ​​are within a preset reasonable range; If it exists and is within a reasonable range, it is judged to be complete and valid.

6. The multi-layer network access adaptation method according to claim 5, characterized in that: The allocating a second IP address to the sender includes: When a device is connected to the network, it is automatically allocated based on the parsed message; The second IP address is an IP address that is in the same network segment as the sender's address and can be directly connected; When a device leaves the network, the second IP address can be dynamically reassigned.

7. The multi-layer network access adaptation method according to claim 6, characterized in that: The method of mutually identifying the network cards through their unique MAC addresses to achieve service data forwarding includes: Aggregate the physical connection links between network cards to form a unified link; Use load balancing to evenly distribute data to different links, and identify each other through the unique MAC address at the link layer.

8. A system applied to the multi-layer network access adaptation method according to any one of claims 1 to 7, characterized in that: include: An acquisition module, used to acquire network data packets; A traffic detection module, used for screening the network data packets to obtain specific data packets; The message parsing module is used to parse and verify specific data packets, and obtain the sender address and target IP address of the message by verifying the integrity and validity of the message; A dynamic address attachment module, used for performing dynamic address attachment and allocating a second IP address to the sender based on the sender address; The automatic forwarding module is used to realize business data forwarding by identifying each other through the unique MAC addresses between network cards based on the second IP address and the target IP address after the opposite device completes the addressing of the target IP address.

9. An electronic device, comprising: Memory and processor; The memory is used to store computer executable instructions, and the processor is used to execute the computer executable instructions. When the computer executable instructions are executed by the processor, the steps of the multi-layer network access adaptation method according to any one of claims 1 to 7 are implemented.

10. A computer-readable storage medium storing computer-executable instructions, wherein the computer-executable instructions, when executed by a processor, implement the steps of the multi-layer network access adaptation method according to any one of claims 1 to 7.

Images