Dynamic bandwidth allocation method, system, equipment and medium

Abstract

The invention discloses a dynamic bandwidth allocation method, system and device and a medium. The dynamic bandwidth allocation method comprises the steps that all ONUs and corresponding actual loads in a current PON network are obtained respectively; determining a rogue ONU and a normal ONU in the PON network based on each ONU and the actual load; and allocating bandwidth to the rogue ONU averagely according to an average allocation demand to obtain residual bandwidth, and allocating the residual bandwidth to the normal ONU averagely. According to the method and the device, the bandwidth allocation of the rogue ONU is limited to be the average bandwidth requirement of other ONUs, so that the bandwidth allocation of other ONUs can be increased, the bandwidth allocation is ensured to be reasonable, and the influence of DDoS attacks is reduced.

Description

Technical Field

[0001] The present application relates to the field of optical network technology, and in particular to a method, system, device and medium for dynamic bandwidth allocation. Background Art

[0002] With the rapid development of information technology, the security situation of cyberspace is becoming increasingly severe. The number of network attacks is showing a rising trend. These network attacks are of various types, and each type of network attack will have different effects and consequences on the network or network nodes. Among them, DoS (denial of service) attacks are particularly noteworthy. DoS attacks attempt to exhaust the computing resources or bandwidth of the target network node by sending a large number of invalid or high-traffic data requests to the target network node, thereby causing the network node to crash or the availability of network resources to be significantly reduced. This attack not only affects the attacked network node, but may also cause the degradation of network performance or service interruption. A more serious variant of DoS attacks is distributed denial of service (DDoS) attacks. Compared with DoS attacks, DDoS attacks are more difficult to prevent because they are not initiated by a single attack source, but from the application layer, that is, different user sources, to attack specific ONUs (optical network units). Among them, the attacker controls a large number of infected computers or botnets to send massive messages to the target network node, forming a network torrent, resulting in extremely serious network congestion, and may even directly cause the complete interruption of the ONU (optical network unit) service, posing a serious threat to the continuity and stability of network services. Therefore, it is crucial to protect ONU (Optical Network Unit) and reject DDoS attacks.

[0003] At present, bandwidth allocation for PON networks is mainly carried out through ordinary dynamic bandwidth allocation (DBA) schemes, but it does not fully consider the security requirements faced by PON networks in actual operation. Since PON is an access network technology working at the MAC layer, when the network layer and the transport layer are attacked by DDoS, the traffic rate of the downstream DS link (from OLT to ONUs) and the upstream US link (from ONUs to OLT) of the PON network will also increase significantly. At this time, the attacked ONU (hereinafter referred to as rogue ONU) will send a large number of invalid or redundant data packets, trying to exhaust the bandwidth resources of the shared link. Since the bandwidth resources in the PON network are limited, when a certain ONU occupies a large amount of bandwidth, the bandwidth share that other normally working ONUs can obtain will be reduced accordingly, and may even cause a significant reduction in the performance of the upstream US link. Therefore, the ordinary dynamic bandwidth allocation (DBA) scheme used for upstream US link bandwidth management will not be able to handle this situation.

[0004] Application Contents

[0005] The present application provides a dynamic bandwidth allocation method, system, device and medium, which can increase the bandwidth allocation of other ONUs by limiting the bandwidth allocation of rogue ONUs to the average bandwidth demand of other ONUs, ensure reasonable bandwidth allocation, and thus reduce the impact of DDoS attacks.

[0006] In a first aspect, the present application provides a dynamic bandwidth allocation method, comprising:

[0007] Obtain each ONU in the current PON network and the corresponding actual load respectively;

[0008] Based on each of the ONUs and the actual load, determining rogue ONUs and normal ONUs in the PON network;

[0009] Bandwidth is evenly allocated to the rogue ONU according to an even allocation requirement to obtain remaining bandwidth, and the remaining bandwidth is evenly allocated to the normal ONU.

[0010] The embodiment of the present application can accurately obtain the actual load of all ONUs in the current PON network by respectively obtaining each ONU and the corresponding actual load in the current PON network, so as to facilitate the subsequent distinction between rogue ONUs and normal ONUs based on the actual load; by distinguishing rogue ONUs and normal ONUs in the PON network based on each ONU and the actual load, it is convenient to allocate bandwidth to rogue ONUs and normal ONUs in the subsequent period; by limiting the bandwidth allocation of rogue ONUs to the average bandwidth demand of other ONUs, and ensuring that no excess bandwidth is allocated to rogue ONUs in the future, the bandwidth allocation of other ONUs is increased, and the bandwidth allocation is ensured to be reasonable. Compared with the prior art, the present application can increase the bandwidth allocation of other ONUs by limiting the bandwidth allocation of rogue ONUs to the average bandwidth demand of other ONUs, and ensure that the bandwidth allocation is reasonable, thereby reducing the impact of DDoS attacks.

[0011] Further, the obtaining of each ONU in the current PON network and the corresponding actual load is specifically as follows:

[0012] Determining an ONU number of ONUs in a PON network and initializing a vector variable based on the ONU number;

[0013] Traversing each of the ONUs in the PON network, and obtaining a buffer occupancy report of each of the ONUs under a traffic category;

[0014] The buffer occupancy reports are respectively accumulated into the vector variables to obtain the actual load.

[0015] In this way, by obtaining the buffer occupancy report under the traffic category in the current PON network and accumulating the buffer occupancy report to the vector variable respectively, the actual load is obtained, and the actual load of all ONUs in the current PON network can be accurately obtained, which is convenient for distinguishing rogue ONUs from normal ONUs based on the actual load.

[0016] Further, the determining of the rogue ONU and the normal ONU in the PON network based on each of the ONUs and the actual load is specifically as follows:

[0017] Inputting each of the ONUs and the actual load into a preset regression model to obtain a bandwidth demand prediction value corresponding to each of the ONUs;

[0018] Based on the bandwidth demand prediction value and the actual load, an error vector corresponding to each of the ONUs is obtained;

[0019] It is determined whether the error vector satisfies a preset error threshold. If so, the ONU satisfying the preset error threshold is determined as a rogue ONU in the PON network; otherwise, it is determined as a normal ONU.

[0020] In this way, rogue ONUs and normal ONUs in the PON network are distinguished based on each ONU and the actual load, so that subsequent bandwidth allocation to the rogue ONUs and normal ONUs is facilitated.

[0021] Further, the ONUs and the actual loads are input into a preset regression model to obtain a bandwidth demand prediction value corresponding to each ONU, specifically:

[0022] Based on each of the ONUs and the actual load, a slope corresponding to the regression model is obtained according to a least squares method, and based on the slope, an intercept corresponding to the regression model is determined;

[0023] Based on the slope and the intercept, a bandwidth demand prediction value corresponding to each of the ONUs is determined.

[0024] In this way, the bandwidth demand prediction value corresponding to each ONU can be accurately determined through the regression model, which facilitates the subsequent distinction between rogue ONUs and normal ONUs in the PON network.

[0025] Furthermore, the calculation formula for the slope corresponding to the regression model obtained by the least squares method is specifically:

[0026]

[0027] In the formula, m ONUis the slope, ONU(i) is the ith ONU, Load(i) is the ith actual load, and N is the number of ONUs.

[0028] Furthermore, the calculation formula for determining the intercept corresponding to the regression model based on the slope is specifically:

[0029]

[0030] In the formula, C ONU is the intercept, Load(i) is the actual load of the ith item, m ONU is the slope, ONU(i) is the ith ONU, and N is the number of ONUs.

[0031] Further, the bandwidth is evenly distributed to the rogue ONU according to the average distribution requirement to obtain the remaining bandwidth, specifically:

[0032] Obtaining bandwidth requirements of each of the ONUs under traffic categories;

[0033] Determine a corresponding average allocation requirement based on the bandwidth requirement and the number of ONUs;

[0034] Bandwidth is evenly allocated to the rogue ONU according to the even allocation requirement to obtain remaining bandwidth.

[0035] In this way, by limiting the bandwidth allocation of the rogue ONU to the average bandwidth demand of other ONUs and ensuring that no excess bandwidth is allocated to the rogue ONU in the future, the bandwidth allocation of other ONUs is increased, ensuring reasonable bandwidth allocation.

[0036] In a second aspect, the present application provides a dynamic bandwidth allocation system, including: an acquisition module, a differentiation module and an allocation module;

[0037] The acquisition module is used to respectively acquire each ONU in the current PON network and the corresponding actual load;

[0038] The distinguishing module is used to determine rogue ONUs and normal ONUs in the PON network based on each of the ONUs and the actual load;

[0039] The allocation module is used to evenly allocate bandwidth to the rogue ONU according to an even allocation requirement to obtain remaining bandwidth, and evenly allocate the remaining bandwidth to the normal ONU.

[0040] The embodiment of the present application can accurately obtain the actual load of all ONUs in the current PON network by respectively obtaining each ONU and the corresponding actual load in the current PON network, so as to facilitate the subsequent distinction between rogue ONUs and normal ONUs based on the actual load; by distinguishing rogue ONUs and normal ONUs in the PON network based on each ONU and the actual load, it is convenient to allocate bandwidth to rogue ONUs and normal ONUs in the subsequent period; by limiting the bandwidth allocation of rogue ONUs to the average bandwidth demand of other ONUs, and ensuring that no excess bandwidth is allocated to rogue ONUs in the future, the bandwidth allocation of other ONUs is increased, and the bandwidth allocation is ensured to be reasonable. Compared with the prior art, the present application can increase the bandwidth allocation of other ONUs by limiting the bandwidth allocation of rogue ONUs to the average bandwidth demand of other ONUs, and ensure that the bandwidth allocation is reasonable, thereby reducing the impact of DDoS attacks.

[0041] In a third aspect, the present application provides a terminal device, comprising: one or more processors; a memory coupled to the processor and used to store one or more programs; when the one or more programs are executed by the one or more processors, the one or more processors implement the dynamic bandwidth allocation method as described in the present application.

[0042] In a fourth aspect, the present application provides a computer-readable storage medium having a computer program stored thereon, characterized in that when the computer program is executed by a processor, the dynamic bandwidth allocation method as described in the present application is implemented. BRIEF DESCRIPTION OF THE DRAWINGS

[0043] Figure 1 It is a schematic diagram of the GONP system provided by the present application being attacked by DoS;

[0044] Figure 2 It is a flowchart of an embodiment of the dynamic bandwidth allocation method provided by the present application;

[0045] Figure 3 This application provides Figure 2 A schematic diagram of step S102 in FIG.

[0046] Figure 4 It is a trend chart of the bandwidth demand and bandwidth demand prediction value of each ONU under different loads provided by this application;

[0047] Figure 5 It is a structural diagram of an embodiment of a dynamic bandwidth allocation system provided by the present application;

[0048] Figure 6 This is the hardware structure diagram of the terminal device provided by this application. DETAILED DESCRIPTION

[0049] The following will be combined with the drawings in the embodiments of the present application to clearly and completely describe the technical solutions in the embodiments of the present application. Obviously, the described embodiments are only part of the embodiments of the present application, not all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of this application.

[0050] It should be understood that the step numbers used in this article are only for the convenience of description and are not intended to limit the order in which the steps are executed.

[0051] It should be understood that the terms used in the present specification are only for the purpose of describing specific embodiments and are not intended to limit the present invention. As used in the present specification and the appended claims, the singular forms "a", "an" and "the" are intended to include plural forms unless the context clearly indicates otherwise.

[0052] The terms “include” and “comprising” indicate the presence of described features, integers, steps, operations, elements and / or components, but do not exclude the presence or addition of one or more other features, integers, steps, operations, elements, components and / or combinations thereof.

[0053] The term "and / or" means and includes any and all possible combinations of one or more of the associated listed items.

[0054] With the development of information technology, the network security situation is becoming increasingly severe. The number of network attacks is increasing, and these network attacks are of various types and have different impacts. Among them, DoS attacks are particularly prominent. They exhaust target resources by sending a large number of invalid requests, causing network crashes or reduced availability. The variant of DoS attacks, distributed denial of service, or DDoS attacks, are more serious and more difficult to prevent. They are initiated from multiple sources to a specific ONU and can cause complete service interruption by sending massive messages to the target network node.

[0055] At present, PON networks mainly use common dynamic bandwidth allocation (DBA) solutions, but security requirements are not fully considered. DDoS attacks will cause a large increase in PON network traffic, and the attacked ONU may occupy a large amount of bandwidth. Since the bandwidth resources in the PON network are limited, when an ONU occupies a large amount of bandwidth, the bandwidth share that other ONUs that are working normally can obtain will be reduced accordingly, and may even cause a significant reduction in the performance of the upstream US link.

[0056] Next, the nouns involved in this application are analyzed:

[0057] Optical Network Unit (ONU) is a terminal device for fiber access. It plays the role of fiber termination in the fiber access network and provides multiple service interfaces for users. As a terminal device for fiber access, it should be used in conjunction with OLT (Optical Line Terminal). OLT is usually stored in the central computer room of the ISP, while ONU is deployed at the user end.

[0058] Passive Optical Network (PON) is a new access network topology based on optical fiber with high bandwidth. It accesses users in a point-to-multipoint tree topology, where the root of the tree is the optical fiber terminal (OLT). A simple optical splitter (OS) is connected to the root through optical fiber, dividing the optical signal of a single optical fiber into multiple optical fiber points connected to the optical network unit (ONU).

[0059] Ordinary Dynamic Bandwidth Allocation (DBA) is a mechanism that can dynamically allocate upstream bandwidth within microsecond or millisecond time intervals. It dynamically allocates bandwidth according to business needs, which can significantly improve bandwidth utilization and enable the setting of business priorities to achieve communication at different business levels. DBA is mainly used in PON (Passive Optical Network) systems, especially EPON (Ethernet Passive Optical Network) systems. In PON systems, DBA is a dynamic allocation protocol between OLT (Optical Line Terminal) and ONU (Optical Network Unit).

[0060] Based on this, the embodiments of the present application provide a dynamic bandwidth allocation method and system, which can increase the bandwidth allocation of other ONUs by limiting the bandwidth allocation of the rogue ONU to the average bandwidth demand of other ONUs, ensure reasonable bandwidth allocation, and thus reduce the impact of DDoS attacks.

[0061] A dynamic bandwidth allocation method and system provided in an embodiment of the present application are specifically described through the following embodiments. First, the dynamic bandwidth allocation method in an embodiment of the present application is described.

[0062] The dynamic bandwidth allocation method provided in the embodiment of the present application relates to the field of power system communication. The dynamic bandwidth allocation method provided in the embodiment of the present application can be applied to a terminal, can be applied to a server side, and can also be software running in a terminal or a server side. In some embodiments, the terminal can be a smart phone, a tablet computer, a laptop computer, a desktop computer, etc.; the server side can be configured as an independent physical server, or can be configured as a server cluster or a distributed system composed of multiple physical servers, and can also be configured as a cloud server that provides basic cloud computing services such as cloud services, cloud databases, cloud computing, cloud functions, cloud storage, network services, cloud communications, middleware services, domain name services, security services, CDN, and big data and artificial intelligence platforms; the software can be an application that implements the dynamic bandwidth allocation method, etc., but is not limited to the above forms.

[0063] The present application can also be used in numerous general or special computer system environments or configurations. For example: personal computers, server computers, handheld or portable devices, tablet devices, multiprocessor systems, microprocessor-based systems, set-top boxes, programmable consumer electronics, network PCs, minicomputers, mainframe computers, distributed computing environments including any of the above systems or devices, etc. The present application can be described in the general context of computer executable instructions executed by a computer, such as program modules. Generally, program modules include routines, programs, objects, components, data structures, etc. that perform specific tasks or implement specific abstract data types. The present application can also be practiced in distributed computing environments, in which tasks are performed by remote processing devices connected through a communication network. In a distributed computing environment, program modules can be located in local and remote computer storage media including storage devices.

[0064] Please refer to Figure 1 , Figure 1Figure 1 is a schematic diagram of a GONP system under DoS attack. In the GPON (Gigabit Passive Optical Network) system, the passive optical network (PON) is a new access network topology based on optical fiber, which has a very high bandwidth and accesses users in a point-to-multipoint tree topology. The root of the tree is the optical fiber terminal (OLT). The simple optical splitter (OS) is connected to the optical fiber terminal (OLT) through an optical fiber. The GPON system divides the optical signal of a single optical fiber into multiple optical fiber points and optical network units (ONUs). When a user is attacked, the flow rate (λ) of the downstream (DS) link (from OLT to ONUs) and upstream (US) link (from ONUs to OLT) of the PON will increase significantly. At this time, the attacked ONU (hereinafter referred to as rogue ONU) will send a large number of invalid or redundant data packets, trying to exhaust the bandwidth resources of the shared link. Since the bandwidth resources in the PON network are limited, when a certain ONU occupies a large amount of bandwidth, the bandwidth share that other normally operating ONUs can obtain will be reduced accordingly, and may even cause a significant reduction in the performance of the upstream US link.

[0065] Please refer to Figure 2 , Figure 2 It is a flowchart of an embodiment of the dynamic bandwidth allocation method provided by the present application, including steps S101 to S103;

[0066] Step S101, respectively obtaining each ONU in the current PON network and the corresponding actual load;

[0067] It can be understood that, first, the number of ONUs in the PON network is determined, and a vector variable is initialized based on the number of ONUs. Specifically, it is necessary to create a vector variable with the number of ONUs as the length, and initialize all elements to 0; secondly, traverse each of the ONUs in the PON network to obtain a buffer occupancy report of each of the ONUs under a traffic category, wherein the traffic categories include T-CONT Type2 (T2), T-CONT Type3 (T3) and T-CONT Type4 (T4), specifically, create a loop, traverse from the first ONU to the last ONU, and in each loop process, obtain the buffer occupancy report of the current ONU under the T2, T3 and T4 traffic categories; finally, add the buffer occupancy report of each ONU under the T2, T3 and T4 traffic categories to the previously initialized vector variable to obtain the actual load. The relevant formula is: Load(ONU)+=T2_buffer_usage; Load(ONU)+=T3_buffer_usage; Load(ONU)+=T4_buffer_usage, where T2_buffer_usage, T3_buffer_usage, and T4_buffer_usage represent the buffer occupancy report of each ONU under the T2, T3 and T4 traffic categories respectively, and Load is a measurement variable.

[0068] It should be noted that T-CONT includes five types, namely T-CONT Type1 (T1), fixed bandwidth and fixed time slot, suitable for services sensitive to delay such as voice services; T-CONT Type2 (T2), fixed bandwidth and non-fixed time slot, suitable for services with low jitter requirements such as video on demand services; T-CONT Type3 (T3), with minimum bandwidth guarantee and the ability to dynamically share the remaining bandwidth, and with maximum bandwidth constraints, suitable for services with service guarantee requirements and large burst traffic such as download services; T-CONT Type4 (T4), without bandwidth guarantee, suitable for services with low delay and jitter requirements such as WEB browsing services; T-CONT Type5 (T5), a combination type, after allocating network guaranteed and non-guaranteed bandwidth, additional bandwidth requirements are allocated on a best-effort basis, among which T-CONT Type2 (T2), T-CONT Type3 (T3) and T-CONT Type4 (T4) belong to traffic categories.

[0069] In this way, by obtaining the buffer occupancy report under the traffic category in the current PON network and accumulating the buffer occupancy report to the vector variable respectively, the actual load is obtained, and the actual load of all ONUs in the current PON network can be accurately obtained, which is convenient for distinguishing rogue ONUs from normal ONUs based on the actual load.

[0070] Step S102, determining rogue ONUs and normal ONUs in the PON network based on each of the ONUs and the actual load;

[0071] After obtaining the actual load of each ONU, you can distinguish between rogue ONUs and normal ONUs in the PON network. Figure 3 In some embodiments, step S102 may include, but is not limited to, steps S301 to S303:

[0072] Step S301, inputting each of the ONUs and the actual load into a preset regression model to obtain a bandwidth demand prediction value corresponding to each of the ONUs;

[0073] It can be understood that, first, based on each of the ONUs and the actual load Load(i), the slope m corresponding to the regression model is obtained according to the least squares method. ONU , where the slope m is ONU The calculation formula is:

[0074]

[0075] In the formula, m ONU is the slope, ONU(i) is the ith ONU, Load(i) is the ith actual load, and N is the number of ONUs.

[0076] When the slope m corresponding to the regression model is obtained ONU After that, we need to calculate the slope m based on the ONU , each of the ONUs and the actual load Load(i), determine the intercept C corresponding to the regression model ONU , determine the intercept C corresponding to the regression model ONU The calculation formula is as follows:

[0077]

[0078] In the formula, C ONU is the intercept, Load(i) is the actual load of the ith item, m ONU is the slope, ONU(i) is the ith ONU, and N is the number of ONUs.

[0079] Finally, based on the slope m ONU and the intercept C ONU , determine the bandwidth demand prediction value corresponding to each of the ONUs, wherein when determining the slope m of the regression model ONU and the intercept C ONU After that, we can determine the regression model as Dp (i) = m ONU ★i+C ONU Where D p (i) is the predicted value of bandwidth demand, m ONU is the slope of the regression model, C ONU is the intercept of the regression model, and the bandwidth demand prediction value D corresponding to each ONU is determined based on the regression model. p (i), where the trend graph of the bandwidth demand and bandwidth demand prediction value of each ONU under different loads is shown in Figure 4. The ONUs that suffer from DOS attacks (such as ONU3 and ONU12) have very high bandwidth requirements relative to other ONUs, which makes their error vectors always positive and very high.

[0080] In this way, the bandwidth demand prediction value corresponding to each ONU can be accurately determined through the regression model, which facilitates the subsequent distinction between rogue ONUs and normal ONUs in the PON network.

[0081] Step S302, obtaining an error vector corresponding to each of the ONUs based on the bandwidth demand prediction value and the actual load;

[0082] It can be understood that when the bandwidth demand prediction value D is obtained p (i) After that, the bandwidth demand prediction value D can be calculated p (i) and the actual load Load(i) to obtain the error vector Err(i) corresponding to each of the ONUs, wherein the calculation formula of the error vector Err(i) is: Where Err(i) is the error vector, Load(i) is the actual load, and D p (i) is the bandwidth demand prediction value.

[0083] Step S303, determining whether the error vector satisfies a preset error threshold, if so, determining the ONU that satisfies the preset error threshold as a rogue ONU in the PON network, otherwise, determining the ONU as a normal ONU.

[0084] It can be understood that when the bandwidth demand prediction value D is obtained p (i) After that, it is necessary to determine the error vector D p (i) Whether the preset error threshold is met, if the preset error threshold is met, the ONU that meets the preset error threshold is determined as a rogue ONU in the PON network, otherwise, it is a normal ONU. It should be noted that the preset threshold can be set freely and this application does not limit it.

[0085] In this way, rogue ONUs and normal ONUs in the PON network are distinguished based on each ONU and the actual load, so that subsequent bandwidth allocation to the rogue ONUs and normal ONUs is facilitated.

[0086] Step S103: Evenly allocate bandwidth to the rogue ONU according to even allocation requirements to obtain remaining bandwidth, and evenly allocate the remaining bandwidth to the normal ONUs.

[0087] It is understandable that when an ONU is under DDoS attack, bandwidth allocation for rogue ONUs cannot be stopped directly because the user of the ONU has signed a service level agreement (SLA) with the service provider. Before bandwidth allocation, the rogue ONU can be detected through the above steps but is not limited to, or a preset rogue ONU list can be traversed through a computer programming language to determine whether the current ONU is a rogue ONU; if it is a rogue ONU, it is necessary to first ensure allocation to the rogue ONU, and then evenly allocate the remaining bandwidth to normal ONUs; if it is not a rogue ONU, the bandwidth can be evenly allocated to all ONUs.

[0088] When a rogue ONU exists, first, the bandwidth requirements of each ONU under the traffic category are obtained from the queue report received in the previous service interval, and the bandwidth requirements are summed to obtain the total bandwidth requirement, wherein the traffic category includes T-CONT Type2 (T2), T-CONT Type3 (T3) and T-CONT Type4 (T4); secondly, the corresponding average distribution requirement is determined based on the total bandwidth requirement and the number of ONUs, that is, the total bandwidth requirement is divided by the number of ONUs to obtain the average requirement, but when determining the average distribution requirement, the emergency situation needs to be considered, and the calculated average requirement needs to be assigned a certain weight such as 1.2, 1.3, etc. to obtain the average distribution requirement; finally, the bandwidth is evenly distributed to the rogue ONU according to the average distribution requirement to obtain the remaining bandwidth, wherein the total bandwidth-average distribution bandwidth=remaining bandwidth.

[0089] After obtaining the remaining bandwidth, it is necessary to ensure that no excess bandwidth is allocated to the rogue ONU. That is, the remaining bandwidth needs to be evenly distributed to all normal ONUs. The formula is: Bandwidth allocated to a single normal ONU = remaining bandwidth / (NN 流氓ONU ), where N is the total number of ONUs, N 流氓ONU is the number of the rogue ONUs.

[0090] In this way, by limiting the bandwidth allocation of the rogue ONU to the average bandwidth demand of other ONUs and ensuring that no excess bandwidth is allocated to the rogue ONU in the future, the bandwidth allocation of other ONUs is increased, ensuring reasonable bandwidth allocation.

[0091] The embodiment of the present application can accurately obtain the actual load of all ONUs in the current PON network by respectively obtaining each ONU and the corresponding actual load in the current PON network, so as to facilitate the subsequent distinction between rogue ONUs and normal ONUs based on the actual load; by distinguishing rogue ONUs and normal ONUs in the PON network based on each ONU and the actual load, it is convenient to allocate bandwidth to rogue ONUs and normal ONUs in the subsequent period; by limiting the bandwidth allocation of rogue ONUs to the average bandwidth demand of other ONUs, and ensuring that no excess bandwidth is allocated to rogue ONUs in the future, the bandwidth allocation of other ONUs is increased, and the bandwidth allocation is ensured to be reasonable. Compared with the prior art, the present application can increase the bandwidth allocation of other ONUs by limiting the bandwidth allocation of rogue ONUs to the average bandwidth demand of other ONUs, and ensure that the bandwidth allocation is reasonable, thereby reducing the impact of DDoS attacks.

[0092] Please refer to Figure 5 , Figure 5 It is a structural diagram of an embodiment of the dynamic bandwidth allocation system provided by the present application, including an acquisition module 100, a distinction module 200 and an allocation module 300;

[0093] The acquisition module 100 is used to respectively acquire each ONU and the corresponding actual load in the current PON network;

[0094] The distinguishing module 200 is used to determine rogue ONUs and normal ONUs in the PON network based on each of the ONUs and the actual load;

[0095] The allocation module 300 is used to allocate bandwidth to the rogue ONUs on an average basis according to an average allocation requirement, obtain remaining bandwidth, and evenly allocate the remaining bandwidth to the normal ONUs.

[0096] Since the information interaction, execution process, etc. between the modules in the above-mentioned dynamic bandwidth allocation system are based on the same concept as the embodiment of the dynamic bandwidth allocation method of the first aspect of the present invention, the technical effects achieved are basically the same. For the specific contents, please refer to the description in the embodiment 1 of the method of the present invention, and no further description is given here.

[0097] See also Figure 6 , Figure 6 The hardware structure of a terminal device of another embodiment is illustrated, and the terminal device includes:

[0098] The processor 601 may be implemented by a general-purpose CPU (Central Processing Unit), a microprocessor, an application-specific integrated circuit (Application Specific Integrated Circuit, ASIC), or one or more integrated circuits, and is used to execute relevant programs to implement the technical solutions provided in the embodiments of the present application;

[0099] The memory 602 can be implemented in the form of a read-only memory (ROM), a static storage device, a dynamic storage device, or a random access memory (RAM). The memory 602 can store an operating system and other application programs. When the technical solution provided in the embodiment of this specification is implemented by software or firmware, the relevant program code is stored in the memory 602, and the processor 601 calls and executes the dynamic bandwidth allocation method of the embodiment of this application;

[0100] Input / output interface 603, used to implement information input and output;

[0101] Communication interface 604, used to realize communication interaction between the device and other devices, which can be realized by wired mode (such as USB, network cable, etc.) or wireless mode (such as mobile network, WIFI, Bluetooth, etc.);

[0102] Bus 605 , which transmits information between various components of the device (e.g., processor 601 , memory 602 , input / output interface 603 , and communication interface 604 );

[0103] The processor 601 , the memory 602 , the input / output interface 603 and the communication interface 604 are connected to each other in communication within the device via a bus 605 .

[0104] The present invention further provides a computer-readable storage medium on which a computer program is stored. When the computer program is executed by a processor, the dynamic bandwidth allocation method as described in the first embodiment is implemented.

[0105] A person skilled in the art can understand that all or part of the processes in the above-mentioned embodiments can be implemented by instructing the relevant hardware through a computer program, and the program can be stored in a computer-monitorable storage medium, and when the program is executed, it can include the processes of the embodiments of the above-mentioned methods. The storage medium can be a disk, an optical disk, a read-only memory (ROM) or a random access memory (RAM), etc.

[0106] The specific embodiments described above further illustrate the purpose, technical solutions and beneficial effects of the present application in detail. It should be understood that the above description is only a specific embodiment of the present application and is not intended to limit the scope of protection of the present application.

[0107] It is particularly pointed out that for those skilled in the art, any modifications, equivalent substitutions, improvements, etc. made within the spirit and principles of this application should be included in the protection scope of this application.

Claims

1. A dynamic bandwidth allocation method, characterized in that: include: Obtain each ONU in the current PON network and the corresponding actual load respectively; Based on each of the ONUs and the actual load, determining rogue ONUs and normal ONUs in the PON network; Bandwidth is evenly allocated to the rogue ONU according to an even allocation requirement to obtain remaining bandwidth, and the remaining bandwidth is evenly allocated to the normal ONU.

2. The dynamic bandwidth allocation method according to claim 1, characterized in that: The method of respectively obtaining each ONU in the current PON network and the corresponding actual load is specifically as follows: Determining an ONU number of ONUs in a PON network and initializing a vector variable based on the ONU number; Traversing each of the ONUs in the PON network, and obtaining a buffer occupancy report of each of the ONUs under a traffic category; The buffer occupancy reports are respectively accumulated into the vector variables to obtain the actual load.

3. The dynamic bandwidth allocation method according to claim 1, characterized in that: The determining of the rogue ONU and the normal ONU in the PON network based on each of the ONUs and the actual load is specifically: Inputting each of the ONUs and the actual load into a preset regression model to obtain a bandwidth demand prediction value corresponding to each of the ONUs; Based on the bandwidth demand prediction value and the actual load, an error vector corresponding to each of the ONUs is obtained; It is determined whether the error vector satisfies a preset error threshold. If so, the ONU satisfying the preset error threshold is determined as a rogue ONU in the PON network; otherwise, it is determined as a normal ONU.

4. The dynamic bandwidth allocation method according to claim 3, characterized in that: The ONUs and the actual loads are input into a preset regression model to obtain a bandwidth demand prediction value corresponding to each ONU, specifically: Based on each of the ONUs and the actual load, a slope corresponding to the regression model is obtained according to a least squares method, and based on the slope, an intercept corresponding to the regression model is determined; Based on the slope and the intercept, a bandwidth demand prediction value corresponding to each of the ONUs is determined.

5. The dynamic bandwidth allocation method according to claim 4, characterized in that: The calculation formula for the slope corresponding to the regression model obtained by the least squares method is specifically: In the formula, m ONU is the slope, ONU(i) is the ith ONU, Load(i) is the ith actual load, and N is the number of ONUs.

6. The dynamic bandwidth allocation method according to claim 4, characterized in that: The calculation formula for determining the intercept corresponding to the regression model based on the slope is specifically: In the formula, C ONU is the intercept, Load(i) is the actual load of the ith item, m ONU is the slope, ONU(i) is the ith ONU, and N is the number of ONUs.

7. The dynamic bandwidth allocation method according to claim 2, characterized in that: The method of evenly allocating bandwidth to the rogue ONU according to the even distribution requirement to obtain the remaining bandwidth is specifically as follows: Obtaining bandwidth requirements of each of the ONUs under traffic categories; Determine a corresponding average allocation requirement based on the bandwidth requirement and the number of ONUs; Bandwidth is evenly allocated to the rogue ONU according to the even allocation requirement to obtain remaining bandwidth.

8. A dynamic bandwidth allocation system, characterized in that: include: Acquisition module, differentiation module and allocation module; The acquisition module is used to respectively acquire each ONU in the current PON network and the corresponding actual load; The distinguishing module is used to determine rogue ONUs and normal ONUs in the PON network based on each of the ONUs and the actual load; The allocation module is used to evenly allocate bandwidth to the rogue ONU according to an even allocation requirement to obtain remaining bandwidth, and evenly allocate the remaining bandwidth to the normal ONU.

9. A terminal device, characterized in that: include: one or more processors; A memory, coupled to the processor, for storing one or more programs; When the one or more programs are executed by the one or more processors, the one or more processors implement the dynamic bandwidth allocation method according to any one of claims 1 to 7.

10. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the computer program is executed by a processor, the dynamic bandwidth allocation method according to any one of claims 1 to 7 is implemented.

Images