Software defined wide area network communication networking solution

Abstract

The invention relates to a networking solution for software defined wide area network communication. According to the solution, Hub-Spoke networking and a hierarchical networking scheme are established in a mixed mode, five-level network points are included, the first-level network point is a top-level center network point, the second-level network point is a secondary-level center network point, and the third-level network point, the fourth-level network point and the fifth-level network point are branch network points; first-level, second-level and third-level network points are configured with double devices, and fourth-level and fifth-level network points are configured with single devices; sD-WAN tunnels are respectively established between each branch network point and the top-level central network point and between each branch network point and the secondary-level central network point, and link access adopts an internet line; an SD-WAN tunnel is established between the top-level center network point and the secondary-level center network point, and link access adopts an MSTP or MPLS-VPN line and a dual-internet line; compared with the existing solution, the private network resource can be scheduled on the unified cloud network platform, the bidirectional perception of the network edge equipment is realized, and the network quality and safety are improved.

Description

Technical Field

[0001] The present invention relates to the technical field of network communications, and in particular to a networking solution for software-defined wide area network communications. Background Art

[0002] Currently, the insurance industry mainly relies on a flattened Multi-Service Transfer Platform (MSTP) to connect data centers, branches, and subordinate third-, fourth-, and fifth-level institutions through operators and local dedicated lines. MSTP refers to a technology based on the Synchronous Digital Hierarchy (SDH) technology that simultaneously implements the access, processing, and transmission of multiple services such as Time-Division Multiplexing (TDM), Asynchronous Transfer Mode (ATM Asynchronous Transfer Mode), and Ethernet, and provides a unified network management multi-service network point technology.

[0003] The flat multi-service transmission platform sends data from the data center to the branch, and then from the branch to the subordinate fourth and fifth-level organizations. When processing data services, especially bursty Ethernet data services, there is a problem of inflexible bandwidth allocation. For example, for Ethernet services, MSTP usually adopts a fixed bandwidth allocation method. Even when the service is idle, the allocated bandwidth cannot be used by other services, resulting in low overall bandwidth utilization.

[0004] The network architecture and technical characteristics of MSTP determine that it has limitations in supporting some emerging services. For example, when dealing with the massive connections and dynamic bandwidth requirements brought by new services such as the Internet of Things (IoT) and cloud computing, it is difficult for MSTP to meet the requirements of these services through simple upgrades or configuration adjustments. For new services that require flexible network topology and dynamic resource allocation, the network structure of MSTP is relatively fixed and lacks sufficient flexibility to quickly adapt to the development of new services.

[0005] In recent years, the current insurance industry has advocated reducing costs and increasing efficiency through technology and finance to empower business development. The original traditional MSTP wide-area backbone network can no longer meet the needs of the rapid development of existing businesses: including the challenges of diversified business of enterprises; the application experience of key businesses is difficult to guarantee; the large-scale deployment of desktop clouds and non-critical applications occupying bandwidth resources make it difficult to guarantee the bandwidth of the production network, etc. Summary of the invention

[0006] The purpose of the present invention is to provide a networking solution for software-defined wide area network communications in order to overcome the network communication defects existing in the above-mentioned prior art.

[0007] The purpose of the present invention can be achieved by the following technical solutions:

[0008] According to one aspect of the present invention, a networking solution for software-defined wide area network communication is provided, which mixes Hub-Spoke networking with hierarchical networking solutions to establish a network, and the network includes five levels of network points, wherein the first-level network point is a top-level central network point, the second-level network point is a secondary central network point, and the third-level, fourth-level and fifth-level network points are branch network points;

[0009] The first-level, second-level and third-level outlets are equipped with dual devices, and the fourth-level and fifth-level outlets are equipped with single devices;

[0010] Each branch network point establishes an SD-WAN tunnel with the top-level central network point and the secondary central network point respectively, and the link access adopts the Internet line; among them, the link access of the third-level network point adopts dual Internet lines, and the link access of the fourth and fifth-level network points adopts the Internet line plus 4G or 5G line;

[0011] An SD-WAN tunnel is established between the top-level central network point and the secondary central network point, and the link access adopts MSTP or MPLS-VPN line and dual Internet line;

[0012] The connection links are customized to perform complex topology according to actual needs.

[0013] As a preferred technical solution, the first-level outlets include the intelligent routing equipment of the head office, the second-level outlets include the intelligent routing equipment of the branch office, the third-level outlets include the intelligent routing equipment of the central branch office, the fourth-level outlets include the intelligent routing equipment of the branch office, and the fifth-level outlets include the intelligent routing equipment of the marketing service department.

[0014] As a preferred technical solution, the dual devices are a dual-machine cluster system.

[0015] As a preferred technical solution, the network points at both ends of the SD-WAN tunnel are respectively connected to the local city network access point gateway, and are connected through the backbone private network to form a three-stage transmission.

[0016] As the preferred technical solution, MSTP or MPLS-VPN lines are carried on two operators to achieve cloud-network integration and SDN in a private network mode.

[0017] As the preferred technical solution, the connection links are customized according to the actual needs to carry out complex topology, including: the branch's own business forms multiple small star networks based on the secondary network points, and the branch points are fully interconnected based on the business isolation between branches.

[0018] As a preferred technical solution, the SD-WAN tunnel established between the top-level central network and the secondary central network is used to realize direct two-way information transmission between the first-level network and the third, fourth and fifth-level networks, as well as to realize direct two-way information transmission between the second-level network and the third, fourth and fifth-level networks.

[0019] As a preferred technical solution, network communication technology is applied in the process of information transmission between network points in the network;

[0020] The network communication technology includes intelligent routing technology, flow control technology and QoS technology.

[0021] As a preferred technical solution, during the information transmission process between network points in the network, for various types of intranet data with different indicator requirements, intelligent transmission links are selected based on the indicator requirements.

[0022] As the preferred technical solution, the indicator requirements include link quality, load sharing, utilization and cost.

[0023] Compared with the prior art, the present invention has the following beneficial effects:

[0024] 1. The present invention mixes Hub-Spoke networking with hierarchical networking to realize a networking solution for software-defined wide area network communication, wherein the networking includes five-level network points, wherein the first-level network point is a top-level central network point, the second-level network point is a secondary central network point, and the third-level, fourth-level and fifth-level network points are branch network points; the first-level, second-level and third-level network points are equipped with dual equipment, and the fourth-level and fifth-level network points are equipped with single equipment; each branch network point establishes an SD-WAN tunnel with the top-level central network point and the secondary central network point respectively, and the link access adopts the Internet line; wherein the link access of the third-level network point adopts dual Internet lines, and the link access of the fourth-level and fifth-level network points adopts the Internet line plus 4G or 5G lines; an SD-WAN tunnel is established between the top-level central network point and the secondary central network point, and the link access adopts MSTP or MPLS-VPN line and dual Internet lines; a virtual private network based on multiprotocol label switching (Multiprotocol Label Switch-Virtual Private The two operators have realized cloud-network integration and SDN in the private network mode. The former can ensure the scheduling of private network resources on a unified cloud-network platform; the latter can achieve real-time bandwidth speed increase and decrease, quality of service (QoS) on the cloud-network platform. Service, QoS) ratio adjustment, etc., to achieve two-way perception of network edge devices on the operator and customer side, so that operation and maintenance personnel can fully and sensitively perceive the network status.

[0025] 2. The present invention connects the network points at both ends of the SD-WAN tunnel to the local city network access point gateway respectively, and connects them through the backbone private network to form a three-stage transmission. The traditional SD-WAN Internet channel mode is end-to-end full Internetization. The congestion level of the Internet backbone network outlet and the interconnection problem have posed a great challenge to the guarantee of network quality. The present invention is designed to divide the entire tunnel into three sections, and the two sides are connected to the local city network access point gateway respectively, and then connected through the backbone private network, bypassing the Internet backbone outlet. The use of the backbone network part improves the overall network quality and security.

[0026] 3. The present invention is designed to intelligently select transmission links based on the index requirements for various types of intranet data with different index requirements during the information transmission between network nodes within the network, where the index requirements include link quality, load sharing, utilization and cost. This intelligent selection mechanism not only improves the flexibility of network traffic scheduling, but also can dynamically adjust the transmission path according to the real-time network status and business needs, thereby improving the overall efficiency and performance of the network.

[0027] 4. The present invention applies network communication technology in the process of information transmission between network points in the network, including intelligent routing technology, flow control technology and QoS technology, to improve the user's online experience, shorten the response time and waiting time, increase the user's network access experience rate by 4 times, and provide stable network services and high-quality user experience for the business, thereby improving user experience and satisfaction.

[0028] 5. The present invention establishes SD-WAN tunnels between each branch network and the top-level central network and the secondary central network respectively, and the link access adopts the Internet line; among them, the third-level network link access adopts dual Internet lines, and the fourth and fifth-level network link access adopts the Internet line plus 4G or 5G line; the Internet line replaces the original SDH / MSTP dedicated line, reducing the annual network operating cost by 30%, thereby benefiting the branch offices; thereby reducing the operating cost.

[0029] 6. In the present invention, the MSTP or MPLS-VPN line is carried on two operators, which can realize cloud-network integration and SDN in the private network mode to improve the disaster recovery of the network line and reduce the impact of single operator problems on the business of branch offices; thereby improving the robustness of the network.

[0030] 7. The present invention improves management efficiency by automating the network management process, saving time and energy for branch IT personnel; further reducing the overall operation and maintenance of branch IT personnel, working towards the goal of unified management at the headquarters, and achieving full standardization of configuration, operation and maintenance, and management processes; thereby achieving unified centralized management.

[0031] 8. In the networking solution of the present invention, the SD-WAN network of the first-level, second-level and third-level outlets can use the MPLS-VPN link channel to transmit data, while the SD-WAN network of the fourth-level and fifth-level outlets can use the Internet 4G / 5G link channel, realizing the direct interconnection of data between outlets of different levels in the large network. This design not only releases the bandwidth potential of the MPLS-VPN link channel, but also reduces the dependence on expensive MPLS-VPN links by flexibly utilizing the Internet 4G / 5G link channel, thereby improving network performance while reducing network operating costs and maximizing cost-effectiveness. BRIEF DESCRIPTION OF THE DRAWINGS

[0032] Figure 1 A schematic diagram of a networking solution for software-defined wide area network communications in the present invention. DETAILED DESCRIPTION

[0033] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work should fall within the scope of protection of the present invention.

[0034] Example

[0035] In this embodiment, the overall network architecture of Pacific Life Insurance is taken as an example. The overall network architecture applies a networking solution for software-defined wide area network communication. The networking solution is established by mixing Hub-Spoke networking with hierarchical networking solutions. The networking includes five levels of network points, such as Figure 1 As shown, the first-class outlets are the three data centers in Shanghai and Chengdu, the operation center and the workplaces directly under the headquarters, the second-class outlets are branches, the third-class outlets are central branches, the fourth-class outlets are sub-branches, and the fifth-class outlets are marketing service departments. Among them, the first-class outlets are top-level central outlets, the second-class outlets are secondary central outlets, and the third-, fourth- and fifth-class outlets are sub-branches;

[0036] In this embodiment, the first-level, second-level and third-level network points are all configured with dual devices, that is, a dual-machine cluster system (Highly Available, HA), and the fourth-level and fifth-level network points are configured with a single device.

[0037] In this embodiment, each branch network establishes an SD-WAN tunnel with the top-level central network and the secondary central network respectively, and the link access adopts the Internet line; among them, the third-level network link access adopts dual Internet lines, and the fourth and fifth-level network link access adopts the Internet line plus 4G or 5G line; the Internet line replaces the original SDH / MSTP dedicated line, reducing the annual network operating cost by 30%, thereby benefiting the branch offices.

[0038] In this embodiment, an SD-WAN tunnel is established between the top-level central network point and the secondary central network point, and the link access adopts MSTP or MPLS-VPN line and dual Internet line;

[0039] In this embodiment, MSTP or MPLS-VPN lines are carried on two operators to achieve cloud-network integration and SDN in the private network mode, thereby realizing a flexible, integrated, and highly secure network based on comprehensive policy judgments on the business and network planes. Cloud-network integration can ensure the scheduling of private network resources on a unified cloud-network platform; SDN can achieve real-time bandwidth speed increase and decrease, QoS (Quality of Service) on the cloud-network platform. The system can adjust the ratio of service quality and service quality, realize two-way perception of network edge devices on the operator and customer side, and enable operation and maintenance personnel to fully and sensitively perceive the network status. It can shorten the response time and waiting time, increase the user network access experience rate by 4 times, and provide stable network services and high-quality user experience for the business.

[0040] In this embodiment, the networking solution breaks through the limitations of traditional routing protocols, makes up for the shortcomings of the Overlay (virtual network built on the physical network) deployment model, realizes air-ground integration and Underlay (underlying network) + Overlay mode integration, and has made innovative breakthroughs in both models and technologies.

[0041] In this embodiment, the network points at both ends of the SD-WAN tunnel are connected to the local city network access point gateway respectively, and are connected through the backbone private network to form a three-stage transmission. This solves the problems of congestion of the traditional Internet backbone network outlet, inability to interconnect and interoperate, and inability to guarantee network quality. The three-stage transmission bypasses the Internet backbone outlet and improves the overall network quality and security through the use of the backbone network.

[0042] In this embodiment, the backbone private network transmits both production data and office data such as OA, video conferencing, and cloud desktops. In order to carry various types of intranet data with different security, quality, and bandwidth requirements on the network, the SD-WAN hybrid networking solution is adopted in this embodiment, and multiple identification methods and refined application matching are realized through the SD-WAN mechanism.

[0043] In this embodiment, during the information transmission between network nodes in the network, for various types of intranet data with different index requirements, intelligent transmission links are selected based on the index requirements, which include link quality, load sharing, utilization and cost.

[0044] In this embodiment, the connection link can be customized with complex topology according to actual needs. The complex customized topology specifically includes: the branch's own business forms multiple small star networks based on the secondary network points, and the branch network points are fully interconnected based on the business isolation between the branches. This not only makes the network traffic scheduling more flexible, but also greatly releases the bandwidth potential of the MPLS-VPN link channel.

[0045] In this embodiment, network communication technology is applied in the process of information transmission between network points in the network, including intelligent routing technology, flow control technology and QoS technology.

[0046] In this embodiment, the traditional data center network cannot meet the requirements of cloud services and subsequent intelligent computing services. The SDN of data center networks has emerged and has gradually covered the entire financial industry data center. As one of the branches of SDN solutions, the SD-WAN solution can be perfectly integrated with the data center SDN network to achieve a unified SDN architecture for the entire network, laying the foundation for the integration of cloud, computing and network.

[0047] In this embodiment, the third-level, fourth-level and fifth-level outlets establish logical tunnels with the second-level branch and the first-level data center respectively. Whether the subordinate institutions access the data center system or the branch Internet exit, they can access directly without being transferred through the superior institutions and being limited by the bandwidth of the superior institutions.

[0048] In this embodiment, the underlying Internet lines, flat dedicated lines, and 4G / 5G links are used in a mixed manner. Through the SD-WAN multi-link scheduling capability, the line utilization rate can be conveniently and flexibly improved, and an N:1 level guarantee mechanism can be formed. This not only broadens the network bandwidth at all levels, but also greatly reduces the wide area network communication cost.

[0049] In this embodiment, the central branch, branch offices, and marketing service department establish SD-WAN tunnels with the branch offices and data centers respectively. When accessing the data center system, it is accessed directly through the SD-WAN tunnel to the data center. When accessing branch office services such as proxy Internet access, it is accessed through the SD-WAN tunnel to the branch office.

[0050] The above is only a specific embodiment of the present invention, but the protection scope of the present invention is not limited thereto. Any technician familiar with the technical field can easily think of various equivalent modifications or replacements within the technical scope disclosed by the present invention, and these modifications or replacements should be included in the protection scope of the present invention. Therefore, the protection scope of the present invention shall be based on the protection scope of the claims.

Claims

1. A networking solution for software-defined wide area network communication, characterized in that: This solution combines Hub-Spoke networking with hierarchical networking to build a network that includes five levels of outlets, where level 1 outlets are top-level central outlets, level 2 outlets are secondary central outlets, and level 3, 4, and 5 outlets are branch outlets. The first-level, second-level and third-level outlets are equipped with dual devices, and the fourth-level and fifth-level outlets are equipped with single devices; Each branch network point establishes an SD-WAN tunnel with the top-level central network point and the secondary central network point respectively, and the link access adopts the Internet line; among them, the link access of the third-level network point adopts dual Internet lines, and the link access of the fourth and fifth-level network points adopts the Internet line plus 4G or 5G line; An SD-WAN tunnel is established between the top-level central network point and the secondary central network point, and the link access adopts MSTP or MPLS-VPN line and dual Internet line; The connection links are customized to perform complex topology according to actual needs.

2. A networking solution for software-defined wide area network communication according to claim 1, characterized in that: The first-level outlets include the intelligent routing equipment of the head office, the second-level outlets include the intelligent routing equipment of the branch offices, the third-level outlets include the intelligent routing equipment of the central branch offices, the fourth-level outlets include the intelligent routing equipment of the branch offices, and the fifth-level outlets include the intelligent routing equipment of the marketing service department.

3. A software defined wide area network communication networking solution according to claim 1, characterized in that: The dual devices are a dual-machine cluster system.

4. A networking solution for software-defined wide area network communication according to claim 1, characterized in that: The network points at both ends of the SD-WAN tunnel are respectively connected to the local city network access point gateway, and are connected through the backbone private network to form a three-stage transmission.

5. A software defined wide area network communication networking solution according to claim 1, characterized in that: The MSTP or MPLS-VPN line is carried by two operators, realizing cloud network integration and SDN in a private network mode.

6. A networking solution for software-defined wide area network communication according to claim 1, characterized in that: The connection links are customized according to actual needs to form complex topologies, including: the branch's own business forms multiple small star networks based on secondary outlets, and the branch outlets are fully interconnected based on the business isolation between branches.

7. A software defined wide area network communication networking solution according to claim 1, characterized in that: The SD-WAN tunnel established between the top-level central network and the secondary central network is used to realize direct two-way information transmission between the first-level network and the third-level, fourth-level and fifth-level networks, and to realize direct two-way information transmission between the second-level network and the third-level, fourth-level and fifth-level networks.

8. A software defined wide area network communication networking solution according to claim 7, characterized in that: The network communication technology is applied in the process of information transmission between network points in the said network; The network communication technology includes intelligent routing technology, flow control technology and QoS technology.

9. A software defined wide area network communication networking solution according to claim 7, characterized in that: In the process of information transmission between network points in the networking, for various types of intranet data with different indicator requirements, intelligent transmission links are selected based on the indicator requirements.

10. A software defined wide area network communication networking solution according to claim 9, characterized in that: The indicator requirements include link quality, load sharing, utilization and cost.

Images