Intelligent routing method and device based on link quality and storage medium

Abstract

The invention discloses an intelligent routing method and device based on link quality, and a storage medium, and provides basic data for intelligent routing by measuring and monitoring the tunnel quality on the device in real time, including link delay, bandwidth utilization rate, packet loss rate and other performance indexes, and uploading the performance indexes to an SDWAN management and control platform. After calculation is carried out based on the data, the SD-WAN selects a better path to carry out data transmission according to real-time network and application conditions. According to the method provided by the invention, a client can flexibly configure link quality thresholds, including packet loss (%), time delay (ms) and jitter (ms), of different application groups according to requirements, and when the network link performance is reduced, a specific application flow can be identified, and a better path is selected for the application group to transmit the data flow. According to the invention, the user configuration is simplified, the network quality is improved, and the network cost of the user is effectively reduced.

Description

Technical Field

[0001] The present invention relates to the field of computer network communication technology, and in particular to an intelligent routing, device and storage medium based on link quality in an SD-WAN solution. Background Art

[0002] The Internet Protocol Security (IPSec) is a network transmission protocol suite that protects IP protocols by encrypting and authenticating IP protocol packets. It is mainly composed of the Authentication Header (AH), Encapsulating Security Payload (ESP), Security Association (SA), and Key Agreement (IKE) protocols. As a standard network security protocol, IPSec supports encrypted communications, authentication, and protection of data integrity. With the increasingly serious trend of Internet security issues, IPSec, which has high security, interoperability, scalability, high flexibility, and high performance, is widely used in virtual private networks (VPNs).

[0003] ACL (Access Control List) is a method for classifying and filtering traffic. The implementation of ACL mainly filters the packets based on the fields in the packets. The most common method is based on the five-tuple attributes in the IP packets, namely the source IP address, destination IP address, protocol type, source port number, and destination port number. An ACL list can have multiple rules, and each rule describes a certain matching condition. For a given packet, the first rule is used to determine whether it matches. Once a match is found, the action set in the rule (permit / deny) is returned. In some applications, this action has been extended to be customized by the business module, such as the application of ACL in policy routing. For configuration examples based on business identification such as five-tuples and URLs, see Figure 5 , Figure 5 The applications app_VoIP and App_douyin are configured. app_VoIP filters the traffic with destination IP addresses of 30.1.1.1, 30.1.1.2 and 30.1.1.3, and App_douyin filters the traffic with destination URL www.douyin.com.

[0004] SQA (Service Quality Analyzer) is a quantitative detection technology. Through the quantitative measurement technology analysis of SQA, you can timely understand the performance status of the network, diagnose and locate network faults, and support the linkage function of certain protocols.

[0005] Route-map is a policy tool that can be used to filter routes or adjust route attributes. It has filtering functions. Route-map allows administrators to select routes to be operated based on different matching conditions, such as matching destination IP address, matching source IP address, etc., so as to filter, modify and redirect incoming or outgoing routes.

[0006] In the original EVPN Over IPSec service solution, the switching of the primary and backup redundant links has been realized. Route-map is used in BGP, so that when the primary tunnel is Down, the route is converged to the backup tunnel through Route-map. However, this solution only supports the case of tunnel Down, and cannot identify a specific application traffic, nor can it handle the situation of network link performance degradation.

[0007] Therefore, it is necessary to provide an intelligent routing solution that selects a better path for the application group to transmit data traffic in the primary and standby redundant links based on factors such as network performance, application requirements, and business requirements. Summary of the invention

[0008] The present invention provides a link quality-based intelligent routing method, device and storage medium, which can at least solve one of the technical problems in the background technology.

[0009] To achieve the above object, the present invention adopts the following technical solutions: An intelligent routing method based on link quality comprises the following steps: First, you need to configure an SDWAN network with active and standby redundant links. In the scenario where the CPE device has a single WAN port, configuring active and standby redundant links includes the following steps: Step 1: The customer accesses the CPE device and configures the uplink LAN port (i.e. the user-side UNI port); Step 2: The WAN port of the CPE device creates EVPN Over IPSec services to the primary and backup HUB / POP respectively; In the scenario where the CPE device has two WAN ports, configuring the active / standby redundant links includes the following steps: Step 1: The customer accesses the CPE device and configures the uplink LAN port (i.e. the user-side UNI port); Step 2: The primary WAN port of the CPE device creates an EVPN Over IPSec service to the primary HUB / POP; Step 3: Create an EVPN Over IPSec service from the backup WAN port of the CPE device to the backup HUB / POP; When there are primary and backup redundant links: the priority of the primary tunnel created by the CPE device to the primary HUB / POP is higher than the backup tunnel created to the backup HUB / POP. The priority value is mapped to RouteMap. At this time, RouteMap is used to modify the BGP routing autonomous system path and set the metric value of the routing selection protocol, so that traffic can be switched to the backup tunnel when the primary tunnel goes down.

[0010] Secondly, based on the above SDWAN networking, a link quality-based intelligent routing method is configured, the method comprising: Step 1: The customer first creates an application group on the SDWAN controller and implements traffic classification by configuring ACL. The customer flexibly configures the five-tuple / URL attributes of the application, namely the source IP address, destination IP address, protocol type, source port number, and destination port number, and identifies services such as VoIP and TikTok through the application group to facilitate the subsequent selection of upstream traffic; Step 2: Configure the link quality policy of the tunnel, including packet loss (%), delay (ms), and jitter (ms), and configure the SQA instance for intelligent path selection on the CPE device. The device will periodically check the network quality every 30 seconds to reflect the network quality in real time. When the threshold is exceeded, the device reports an alarm to the controller with the alarm code 300901, 300919, or 300920. Step 3: Associate the tunnel under the application group and configure the priority. This priority is used as the basis for subsequent intelligent routing. The smaller the priority number, the higher the priority. This priority can be different from the priority when creating the Evpn Over IPSec service. The tunnel with the highest priority is the primary tunnel of the current application group by default. Configure RouteMap on the device and specify the next hop address as the LoopBack port address on the HUB side of the primary tunnel, and associate it with the corresponding application group.

[0011] Furthermore, based on the created intelligent routing configuration, when an SQA alarm is generated, a switch is triggered, including the following steps: Step 1: Determine the device alarm code. Alarms with device alarm codes 300901, 300919, and 300920 are SQA alarms, which can trigger switching actions. Step 2: Get the most recent SQA test result of the tunnel associated with the application group, analyze the average values ​​of packet loss, delay, and jitter, and judge according to the SQA threshold in the intelligent routing policy set by the customer. If any one of the three values ​​of packet loss, delay, and jitter is greater than the threshold, the link quality of the tunnel is considered to be substandard: Step 3: Analyze the detection results in step 2. If it is found that all tunnels of the current application group do not meet the link quality requirements, no switching will be performed; if at least one tunnel that meets the link quality requirements is found, the tunnel with the highest priority will be selected for switching; Step 4: Perform route switching by changing the next hop address configured in RouteMap. For example, when switching from the primary tunnel to the backup tunnel, the next hop address in RouteMap is configured as the Loopback port address on the HUB side of the primary tunnel before switching, and is changed to the Loopback port address on the HUB side of the backup tunnel after switching. Step 5: Routing of the application group's upstream traffic. In step 4, the next-hop address of RouteMap is changed. RouteMap matches the application group ACL to implement routing of the application group's upstream traffic.

[0012] Furthermore, based on the switching of the intelligent routing, after a period of time, the main tunnel is restored. If the customer's intelligent routing policy enables switchback, switchback is required. Step 1: Determine whether the current traffic is on the primary tunnel. If so, no switchback is required. Switchback is only required if the current tunnel is a backup tunnel. Step 2: Determine whether to enable switchback. The customer's intelligent routing policy can enable or disable switchback. In some scenarios, as long as the current tunnel (either the primary tunnel or the backup tunnel) meets the link quality indicator, there is no need to switch back to the primary tunnel when the primary tunnel is available. Step 3: Determine whether the quality of the primary tunnel link meets the standard. The packet loss, delay, and jitter values ​​must all be less than the threshold to meet the switchback condition; Step 4: Perform route switching by changing the next hop address configured in RouteMap, and switch the next hop address in RouteMap back to the loopback port address on the HUB side of the primary tunnel; Step 5: Routing of the application group's upstream traffic. In step 4, the next-hop address of RouteMap is changed. RouteMap matches the application group ACL to implement routing of the application group's upstream traffic.

[0013] The above steps are general processes, but due to the complexity of the network environment, there are some abnormal situations and the corresponding solutions are as follows: SQA alarms are reported repeatedly or frequently in case of network fluctuations: When the system processes SQA alarms, it will record the unique identifier and processing time of the SQA. If the SQA alarm received by the system has been processed within 2 minutes, it will not be processed again to avoid repeated switching; System service abnormality, which may be caused by abnormal service status, thread blocking, insufficient processing capacity due to a large number of alarm impacts, etc.: When the system receives an SQA alarm, the effective time from entering the blocking queue to starting processing is 45 seconds. If it exceeds 45 seconds, it is considered to have expired and no switching is performed; Device terminal configuration is damaged: When switching or switching back, the SQA test result of the tunnel associated with the application group needs to be obtained on the device. If the obtained test result is inconsistent with the tunnel associated with the application group, the configuration is considered damaged and the switching is not performed.

[0014] It can be seen from the above technical solution that the intelligent routing method based on link quality of the present invention measures and monitors the tunnel quality on the device in real time, including performance indicators such as link delay, bandwidth utilization, and packet loss rate, and uploads them to the SDWAN management and control platform to provide basic data for intelligent routing. After calculation based on these data, SD-WAN selects a better path for data transmission according to the real-time network and application conditions.

[0015] The intelligent routing based on link quality of the present invention involves common networking scenarios in SDWAN solutions, ACL traffic classification, Route-map filtering routing and SQA detection technology. Only the SDWAN networking and intelligent routing configuration need to be manually created by the customer, and the subsequent switching and switching back are all handled intelligently by the system and equipment. Customers can flexibly configure the link quality thresholds of different application groups as needed, including packet loss (%), delay (ms), and jitter (ms). When the network link performance degrades, it can identify a specific application traffic and select a better path for the application group to transmit data traffic through an intelligent routing solution. When the intelligent routing strategy is not configured, in the primary-backup tunnel scenario, only the primary tunnel DOWN will trigger the switch. When the primary tunnel is UP, even if the link quality is no longer up to standard, the traffic will still be forwarded through the primary link, which seriously affects the user's network quality and increases the user's network cost in disguise. However, after setting the intelligent routing strategy, based on the link quality threshold configured by the customer, when the quality of the primary tunnel does not meet the standard, a better path can be intelligently selected to transmit data. The user's data will be transmitted from the path with the better link among all primary and backup tunnels, thereby ensuring the user's network quality.

[0016] In summary, the present invention simplifies user configuration, supports more flexible configuration schemes, improves network quality, and effectively reduces user network costs. BRIEF DESCRIPTION OF THE DRAWINGS

[0017] Figure 1 This is the SDWAN active / standby redundant link networking diagram; Figure 2 To create a flow chart for intelligent routing based on link quality; Figure 3It is a flowchart of intelligent routing switching based on link quality; Figure 4 This is a flowchart of intelligent route selection and switching back based on link quality; Figure 5 This is an example diagram for business identification based on quintuples, URLs, etc. Figure 6 Provide an example for configuring intelligent routing; Figure 7 This is an example of configuring the intelligent path selection simulation instance policy. DETAILED DESCRIPTION

[0018] In order to make the purpose, technical solutions and advantages of the embodiments of the present invention clearer, the technical solutions in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments.

[0019] The present invention is an intelligent routing based on link quality, which measures and monitors the tunnel quality on the equipment in real time, including performance indicators such as link delay, bandwidth utilization, and packet loss rate, and uploads them to the SDWAN management and control platform to provide basic data for intelligent routing. After calculation based on these data, SD-WAN selects a better path for data transmission according to the real-time network and application conditions.

[0020] Scenario: Enterprise A's SD-WAN network diagram is as follows Figure 1 As shown in the figure, the tenant administrator has completed the SD-WAN network deployment. Applicable networking scenarios include EVPN Over IPSec service types of single CPE single WAN / dual WAN. The customer proposed that tunnel 1 be preferred for key voice and video phone services. In order to utilize the multi-uplink feature of the site, improve link reliability, and fully and efficiently utilize bandwidth, it is necessary to configure active and standby redundant links for the service.

[0021] Under the premise of the existence of primary and standby redundant links, the controller identifies VoIP and Douyin services through application groups, and selects a better path from multiple available network connections to transmit data traffic based on factors such as network performance, application requirements, and business requirements.

[0022] The present invention can flexibly configure intelligent routing strategies, improve network quality, and effectively reduce network costs for users.

[0023] The following are specific instructions: First, you need to configure an SDWAN network with active and standby redundant links. In the scenario where the CPE device has a single WAN port, configure active and standby redundant links. Figure 1 The SDWAN active / standby redundant link networking diagram includes the following steps: Step S101: The customer accesses the CPE device and configures the uplink LAN port (i.e., the user-side UNI port); Step S102: The WAN port of the CPE device creates an EVPN Over IPSec service to the primary and backup HUB / POP respectively; In the scenario where the CPE device has two WAN ports, configuring the active / standby redundant links includes the following steps: Step S103: The customer accesses the CPE device and configures the uplink LAN port (i.e., the user-side UNI port); Step S104: The primary WAN port of the CPE device creates an EVPN Over IPSec service to the primary HUB / POP; Step S105: The backup WAN port of the CPE device creates an EVPN Over IPSec service to the backup HUB / POP; When there is a primary / standby redundant link: The priority of the primary tunnel created by the CPE device to the primary HUB / POP is higher than the backup tunnel created to the backup HUB / POP. The priority value is mapped to RouteMap. At this time, the BGP routing autonomous system path is modified through RouteMap and the scale value of the routing selection protocol is set to achieve traffic switching to the backup tunnel when the primary tunnel is Down. For detailed configuration, see Figure 6 Example for configuring intelligent uplink selection.

[0024] Based on the above SDWAN networking, configure an intelligent routing based on link quality. Figure 2 Creating a link quality-based intelligent routing flow chart, the method comprising: Step S201: The customer first creates an application group on the SDWAN controller and implements traffic classification by configuring ACL. The customer flexibly configures the five-tuple / URL attributes of the application, namely the source IP address, destination IP address, protocol type, source port number, and destination port number, and identifies the service through the application group, such as VoIP and TikTok, to facilitate the subsequent routing of upstream traffic; Step S202: Configure the link quality policy of the tunnel, including packet loss (%), delay (ms), and jitter (ms), and configure the SQA instance for intelligent path selection to the CPE device. The device will regularly detect the network quality every 30 seconds to reflect the network quality in real time. When the threshold is exceeded, the device reports an alarm to the controller with the alarm code 300901, 300919, or 300920. Step S203: Associate the tunnel under the application group and configure the priority. This priority is used as the basis for subsequent intelligent routing. The smaller the priority number, the higher the priority. This priority can be different from the priority when creating the Evpn Over IPSec service. The tunnel with the highest priority is the main tunnel of the current application group by default. Configure RouteMap for the device and specify the next hop address as the LoopBack port address on the HUB side of the main tunnel, and associate it with the corresponding application group.

[0025] Based on the created intelligent routing configuration, when an SQA alarm is generated, a switchover is triggered. Figure 3 The intelligent path selection and switching flow chart based on link quality includes step S301: judging the device alarm code, the alarms with the device alarm codes 300901, 300919, 300920 are SQA alarms, which can trigger the switching action; Step S302: Obtain the most recent SQA test result of the tunnel associated with the application group, analyze the average values ​​of packet loss, delay, and jitter, and judge according to the SQA threshold in the intelligent routing strategy set by the customer. If any one of the three values ​​of packet loss, delay, and jitter is greater than the threshold, it is considered that the link quality of the tunnel does not meet the standard: Step S303: Analyze the detection result in step 2. If it is found that all tunnels of the current application group do not meet the link quality requirement, no switching will be performed; if at least one tunnel that meets the link quality requirement is found, a tunnel with the highest priority will be selected for switching; Step S304: Perform route switching by changing the next hop address configured in RouteMap. For example, when switching from the primary tunnel to the backup tunnel, the next hop address in RouteMap is configured as the Loopback port address of the HUB side of the primary tunnel before switching, and is changed to the Loopback port address of the HUB side of the backup tunnel after switching. Step S305: Routing of the application group's upstream traffic. In step 4, the next hop address of RouteMap is changed, and RouteMap matches the application group ACL, thereby implementing routing of the application group's upstream traffic.

[0026] Based on the above intelligent routing switch, after a period of time, the primary tunnel is restored. If the customer's intelligent routing policy has enabled switchback, switchback is required. For details, refer to Figure 4 The intelligent route selection and switching back flow chart based on link quality is characterized in that: Step S401: Determine whether the current traffic is on the primary tunnel. If so, no switching back is required. Switching back is required only when the current tunnel is a backup tunnel. Step S402: Determine whether to enable switchback. The customer's intelligent routing policy can enable or disable switchback. In some scenarios, as long as the current tunnel (whether the primary tunnel or the backup tunnel) meets the link quality indicator, it is not necessary to switch back to the primary tunnel when the primary tunnel is available. Step S403: Determine whether the link quality of the primary tunnel meets the standard. The packet loss, delay, and jitter values ​​must all be less than the threshold value to meet the switching back condition; Step S404: Perform route switching by changing the next hop address configured in RouteMap, and switch the next hop address in RouteMap back to the loopback port address on the HUB side of the primary tunnel; Step S405: Routing of the application group's upstream traffic. In step 4, the next hop address of RouteMap is changed, and RouteMap matches the application group ACL, thereby implementing routing of the application group's upstream traffic.

[0027] When the user's data packet enters the UNI ingress: After steps S101 to S105, a primary and backup tunnel is established. When the primary tunnel is in UP state, regardless of application groups, traffic of all applications is transmitted through the primary tunnel.

[0028] The ACL configuration in intelligent routing realizes the traffic classification of application groups. The traffic of different application groups can be distinguished according to the five-tuple / URL information. RouteMap uses ACL to match the routing entries of application groups and uses the route mapping mode to route data packets to the specified next hop. This method realizes the switching and reversal of intelligent routing of application groups by switching the next hop address of RouteMap.

[0029] After intelligent routing is configured in S201-S203, before switching occurs, the next hop address of RouteMap is the address on the HUB side of the primary tunnel. At this time, the traffic of the application group will be transmitted through the primary tunnel with the highest priority. Different application groups can set different tunnels as primary tunnels.

[0030] In the switching process of S301-S305 intelligent routing, if the application group that meets the switching conditions needs to switch the traffic from the primary tunnel to the backup tunnel, the next hop address of RouteMap needs to be modified to the address on the HUB side of the backup tunnel, and RouteMap will route the data packet to the backup tunnel.

[0031] In the switchback process of S401-S405 intelligent routing, if the application group that meets the switchback conditions needs to switch the traffic from the backup tunnel to the accommodation location, the next hop address of RouteMap needs to be modified to the address on the HUB side of the primary tunnel. RouteMap will route the data packet to the primary tunnel.

[0032] Reference simulation example Figure 7 , the policy "app-path-select_01_01" is configured. Taking the application group app_VoIP as an example, the link switching threshold is configured: delay 150ms, jitter 30ms, and packet loss rate 10%. The main link is tunnel 1, and the backup link is tunnel 2. The default tunnel is the main tunnel. When no switching occurs, the traffic is on tunnel 1.

[0033] According to the switching process S301-S305, in the simulation example, when the packet loss rate of the link is greater than 10%, the device will report the SQA alarm to the controller. Assuming that the packet loss rate of tunnel 1 is 13% at this time, the link quality indicators set in the policy are unqualified and switching is required. If the delay of tunnel 2 is 50ms, the jitter is 10ms, and the packet loss rate is 3% at this time, that is, all indicators are less than the threshold, then tunnel 2 is considered to meet the link quality standard. By updating the next hop address in RouteMap to the address on the HUB side of tunnel 2, the traffic is switched to tunnel 2 to achieve switching.

[0034] According to the switching back process S401-S405, in the simulation example, switching back is enabled when the policy is configured. After a period of time, the packet loss rate of tunnel 1 returns to 1%, that is, tunnel 1 meets the link quality standard, and tunnel 1 is the main tunnel. The next hop address in RouteMap is updated to the address on the HUB side of tunnel 1, and the traffic is switched to tunnel 1 to achieve switching back.

[0035] However, in real scenarios, complex network environments and server status may cause abnormal intelligent routing switching. Therefore, this system takes the following protection measures for switching intervals, system processing time, and device configuration integrity: Step S501: When the system processes the SQA alarm, it will record the unique identifier and processing time of the SQA. If the SQA alarm received by the system has been processed within 2 minutes, it will not be processed again to avoid repeated switching; Step S502: The system receives an SQA alarm, and the effective time from entering the blocking queue to starting processing is 45 seconds. If it exceeds 45 seconds, it is considered to have expired and no switching is performed; Step S503: When switching or switching back, the SQA detection result of the tunnel associated with the application group needs to be obtained on the device. If the obtained detection result is inconsistent with the tunnel associated with the application group, it is considered that the configuration is damaged and no switching is performed.

[0036] On the other hand, the present invention further discloses a computer-readable storage medium storing a computer program, wherein when the computer program is executed by a processor, the processor executes the steps of the above method.

[0037] On the other hand, the present invention further discloses a computer device, including a memory and a processor, wherein the memory stores a computer program, and when the computer program is executed by the processor, the processor executes the steps of the above method.

[0038] In another embodiment provided by the present application, a computer program product including instructions is also provided. When the computer program product is run on a computer, the computer executes any one of the link quality-based intelligent routing methods in the above embodiments.

[0039] It is understandable that the system, device and storage medium provided in the embodiments of the present invention correspond to the method provided in the embodiments of the present invention, and the explanation, examples and beneficial effects of the relevant contents can refer to the corresponding parts in the above methods.

[0040] In the above embodiments, it can be implemented in whole or in part by software, hardware, firmware or any combination thereof. When implemented using software, it can be implemented in whole or in part in the form of a computer program product. The computer program product includes one or more computer instructions. When the computer program instructions are loaded and executed on a computer, the process or function described in the embodiment of the present application is generated in whole or in part. The computer may be a general-purpose computer, a special-purpose computer, a computer network, or other programmable device. The computer instructions may be stored in a computer-readable storage medium, or transmitted from one computer-readable storage medium to another computer-readable storage medium. For example, the computer instructions may be transmitted from a website site, computer, server or data center to another website site, computer, server or data center by wired (e.g., coaxial cable, optical fiber, digital subscriber line (DSL)) or wireless (e.g., infrared, wireless, microwave, etc.) means. The computer-readable storage medium may be any available medium that a computer can access or a data storage device such as a server or data center that includes one or more available media integrated. The available medium may be a magnetic medium (e.g., a floppy disk, a hard disk, a tape), an optical medium (e.g., a DVD), or a semiconductor medium (e.g., a solid-state drive Solid State Disk (SSD)), etc.

[0041] It should be noted that, in this article, relational terms such as first and second, etc. are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Moreover, the terms "include", "comprise" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or device. In the absence of further restrictions, the elements defined by the sentence "comprise a ..." do not exclude the existence of other identical elements in the process, method, article or device including the elements.

[0042] Each embodiment in this specification is described in a related manner, and the same or similar parts between the embodiments can be referred to each other, and each embodiment focuses on the differences from other embodiments. In particular, for the system embodiment, since it is basically similar to the method embodiment, the description is relatively simple, and the relevant parts can be referred to the partial description of the method embodiment.

[0043] The above embodiments are only used to illustrate the technical solutions of the present invention, rather than to limit the same. Although the present invention has been described in detail with reference to the aforementioned embodiments, those skilled in the art should understand that the technical solutions described in the aforementioned embodiments may still be modified, or some of the technical features may be replaced by equivalents. However, these modifications or replacements do not deviate the essence of the corresponding technical solutions from the spirit and scope of the technical solutions of the embodiments of the present invention.

Claims

1. An intelligent routing method based on link quality, characterized in that: First, you need to configure an SDWAN network with primary and backup redundant links, including the following steps: For a single WAN port on a CPE device, configuring active / standby redundant links includes the following steps: Step A1: The customer accesses the CPE device and configures the uplink LAN port, i.e. the user-side UNI port; Step A2: The WAN port of the CPE device creates EVPN Over IPSec services to the primary and backup HUB / POP respectively; For dual WAN port scenarios on CPE devices, configuring active / standby redundant links includes the following steps: Step B1: The customer accesses the CPE device and configures the uplink LAN port, i.e. the user-side UNI port; Step B2: The primary WAN port of the CPE device creates an EVPN Over IPSec service to the primary HUB / POP; Step B3: The backup WAN port of the CPE device creates an EVPN Over IPSec service to the backup HUB / POP; It also includes configuring an intelligent path selection based on link quality based on the above SDWAN networking, including the following steps: Step C1: The customer first creates an application group on the SDWAN controller and implements traffic classification by configuring ACL. The customer configures the five-tuple / URL attributes of the application, namely the source IP address, destination IP address, protocol type, source port number, and destination port number, and identifies the service through the application group to facilitate the subsequent routing of the upstream traffic; Step C2: Configure the link quality policy of the tunnel, including packet loss, delay, and jitter, and configure the SQA instance for intelligent path selection on the CPE device. The device will periodically check the network quality every 30 seconds to reflect the network quality in real time. When the threshold is exceeded, the device reports an alarm to the controller. Step C3: Associate the tunnel under the application group and configure the priority. This priority is used as the basis for subsequent intelligent routing. The smaller the priority number, the higher the priority. This priority can be different from the priority when creating the EVPN Over IPSec service.

2. The intelligent routing method based on link quality according to claim 1, characterized in that: In the scenario where the CPE device has dual WAN ports and active / standby redundant links are configured: The priority of the primary tunnel created by the CPE device to the primary HUB / POP is higher than that of the backup tunnel created to the backup HUB / POP. The priority is mapped to the RouteMap. At this time, the BGP routing autonomous system path is modified through RouteMap and the metric value of the routing selection protocol is set to achieve traffic switching to the backup tunnel when the primary tunnel goes down.

3. The intelligent routing method based on link quality according to claim 1, characterized in that: In step C3, the tunnel with the highest priority is the primary tunnel of the current application group by default. RouteMap is configured on the device and the next hop address is specified as the loopback port address on the HUB side of the primary tunnel, and the corresponding application group is associated.

4. The intelligent routing method based on link quality according to claim 1, characterized in that: It also includes the following steps: Step D1: Determine the device alarm code. Alarms with device alarm codes of 300901, 300919, and 300920 are SQA alarms, which can trigger a switching action. Step D2: Get the most recent SQA test result of the tunnel associated with the application group, analyze the average values ​​of packet loss, delay, and jitter, and judge according to the SQA threshold in the intelligent routing policy set by the customer. If any one of the three values ​​of packet loss, delay, and jitter is greater than the threshold, the link quality of the tunnel is considered to be substandard: Step D3: Analyze the SQA detection result in step D2. If it is found that all tunnels of the current application group do not meet the link quality requirement, no switching will be performed. If at least one tunnel that meets the link quality requirements is found, the tunnel with the highest priority will be selected for switching; Step D4: Perform route switching by changing the next hop address configured in RouteMap. For example, when switching from the primary tunnel to the backup tunnel, the next hop address in RouteMap is configured as the Loopback port address on the HUB side of the primary tunnel before switching, and is changed to the Loopback port address on the HUB side of the backup tunnel after switching. Step D5: Routing of the application group's upstream traffic. In step D4, the next hop address of RouteMap is changed, and RouteMap matches the application group ACL, thereby implementing routing of the application group's upstream traffic.

5. The intelligent routing method based on link quality according to claim 1, characterized in that: For intelligent path selection, after a period of time, the primary tunnel is restored and a switchback is required, including the following steps: Step E1: Determine whether the current traffic is on the primary tunnel. If so, no switchback is required. Switchback is only required if the current tunnel is a backup tunnel. Step E2: Determine whether to enable switchback. The customer's intelligent routing policy can enable or disable switchback. In some scenarios, as long as the current tunnel, whether it is the primary tunnel or the backup tunnel, meets the link quality index, it is not necessary to switch back to the primary tunnel when the primary tunnel is available. In this scenario, switchback can be disabled when setting the intelligent routing policy. Step E3: Determine whether the link quality of the primary tunnel meets the standard. The packet loss, delay, and jitter values ​​must all be less than the thresholds to meet the switchback condition. Step E4: Perform route switching by changing the next hop address configured in RouteMap, and switch the next hop address in RouteMap back to the loopback port address on the HUB side of the primary tunnel; Step E5: Routing of the application group's upstream traffic. In step E4, the next hop address of RouteMap is changed, and RouteMap matches the application group ACL, thereby implementing routing of the application group's upstream traffic.

6. The intelligent routing method based on link quality according to claim 1, characterized in that: It also includes some abnormal situations and the corresponding processing solutions are as follows: SQA alarms are reported repeatedly or frequently in case of network fluctuations: When the system processes SQA alarms, it will record the unique identifier and processing time of the SQA. If the SQA alarm received by the system has been processed within 2 minutes, it will not be processed again to avoid repeated switching; System service abnormality, which may be caused by abnormal service status, thread blocking, or insufficient processing capacity due to a large number of alarm impacts: When the system receives an SQA alarm, the effective time from entering the blocking queue to starting processing is 45 seconds. If it exceeds 45 seconds, it is considered to have expired and no switching is performed; Device terminal configuration is damaged: When switching or switching back, the SQA test result of the tunnel associated with the application group needs to be obtained on the device. If the obtained test result is inconsistent with the tunnel associated with the application group, the configuration is considered damaged and the switching is not performed.

7. A computer-readable storage medium storing a computer program, characterized in that: When the computer program is executed by a processor, the processor is caused to perform the steps of the method according to any one of claims 1 to 6.

8. A computer device comprising a memory and a processor, wherein the memory stores a computer program, wherein: When the computer program is executed by the processor, the processor is caused to perform the steps of the method according to any one of claims 1 to 6.

Images