Intelligent routing method and device based on link quality and storage medium

Abstract

The application discloses a kind of intelligent routing method, equipment and storage medium based on link quality, by real-time measurement and monitoring to tunnel quality on equipment, including link delay, bandwidth utilization, packet loss rate and other performance indicators, and upload to SDWAN control platform, provide basic data for intelligent routing.Based on these data, after calculation, make SD-WAN according to real-time network and application, select the optimal path to carry out data transmission.By the method of the application, customers can flexibly configure link quality threshold of different application groups according to needs, including packet loss (%), delay (ms), jitter (ms), when network link performance declines, specific application traffic can be identified, and the intelligent routing scheme of selecting the optimal path for application group to transmit data traffic.The application simplifies user configuration, improves network quality, and effectively reduces user network cost.

Description

TECHNICAL FIELD

[0001] The present application relates to the technical field of computer network communication, and particularly relates to intelligent routing based on link quality in an SD-WAN scheme, a device and a storage medium. BACKGROUND

[0002] IPSec (Internet Protocol Security) is a network transmission protocol cluster for protecting IP protocol by encrypting and authenticating packets of IP protocol, mainly composed of AH (Authentication Header), ESP (Encapsulating Security Payload), SA (Security Association) and IKE (Internet Key Exchange) protocol. As a standard network security protocol, IPSec supports encrypted communication, authentication and protection of data integrity. Under the trend of increasingly serious Internet security problems, IPSec with high security, interoperability, scalability, high flexibility and high performance is widely used in VPN (Virtual Private Network).

[0003] ACL (Access Control List) is a method of classifying and filtering traffic. The implementation of ACL mainly depends on the fields in the packet to filter the packet. The most common one is to filter the packet according to the five-tuple attributes in the IP packet, i.e. source IP address, destination IP address, protocol type, source port number and destination port number. An ACL list can have multiple rules, and each rule describes a certain matching condition. For a given packet, start from the first rule to determine whether it matches, and once it matches, return the action (permit / deny) set in the rule. In some applications, the action has been extended to be customized by the business module, such as the application of ACL in policy routing. Configuration examples based on five-tuple, URL and other business identification are shown in Figure 5 , Figure 5 The application app_VoIP and App_douyin are configured in the above configuration. The app_VoIP filters the traffic with destination IP addresses of 30.1.1.1, 30.1.1.2 and 30.1.1.3. The App_douyin filters the traffic with destination URL.

[0004] SQA (Service Quality Analyzer) is a quantitative detection technology. Through the quantitative measurement technology analysis of SQA, the performance status of the network can be understood in a timely manner, network faults can be diagnosed and located, and some protocol linkage functions are supported.

[0005] Route-map (route map) is a policy tool that can be used to filter routes and adjust the properties of routes, and itself has filtering function. Route-map allows administrators to select routes to be operated according to different matching conditions, such as matching destination IP address, matching source IP address, etc., so as to realize the filtering, modification and redirection of incoming or outgoing routes.

[0006] In the original Evpn Over IPSec service scheme, the switching of the primary and backup redundant links has been realized, and Route-map is used in BGP, so that when the primary tunnel is down, the route is converged to the backup tunnel through Route-map. However, this scheme only supports the case where the tunnel is down, and cannot identify specific application traffic, nor can it handle the case of network link performance degradation.

[0007] Therefore, it is necessary to provide an intelligent routing scheme for selecting a better path for an application group to transmit data traffic in the primary and backup redundant links according to network performance, application requirements and service requirements. SUMMARY

[0008] The intelligent routing method, device and storage medium based on link quality provided by the application can at least solve one of the technical problems in the background art.

[0009] To achieve the above-mentioned purpose, the application adopts the following technical solutions:

[0010] An intelligent routing method based on link quality, comprising the following steps,

[0011] First, an SDWAN networking with primary and backup redundant links needs to be configured, and the CPE device single WAN port scene is configured with primary and backup redundant links, including the following steps:

[0012] Step 1: the customer accesses the CPE device and configures the uplink LAN port (i.e. the user side UNI port);

[0013] Step 2: the WAN port of the CPE device creates Evpn Over IPSec service to the primary and backup HUB / POP respectively;

[0014] CPE device double WAN port scene, configure primary and backup redundant links, including the following steps:

[0015] Step 1: the customer accesses the CPE device and configures the uplink LAN port (i.e. the user side UNI port);

[0016] Step 2: the primary WAN port of the CPE device creates Evpn Over IPSec service to the primary HUB / POP;

[0017] Step 3: The standby WAN port of the CPE device creates Evpn Over IPSec service to the standby HUB / POP;

[0018] When the master and standby redundant links are provided: the priority of the main tunnel created by the CPE device to the main HUB / POP is higher than that of the standby tunnel created to the standby HUB / POP, and the priority value is mapped to the RouteMap, at this time the autonomous system path of the BGP route is modified and the scale value of the routing protocol is set through the RouteMap, so as to realize the flow switching to the standby tunnel when the main tunnel is down.

[0019] Secondly, based on the above-mentioned SDWAN networking, a link quality-based intelligent routing is configured, and the method comprises:

[0020] Step 1: The customer first creates an application group on the SDWAN controller, realizes traffic classification through configuration of ACL, and flexibly configures the five-tuple / URL attributes of the application, i.e. source IP address, destination IP address, protocol type, source port number and destination port number, identifies the service through the application group, such as VoIP and TikTok, to facilitate subsequent routing of uplink traffic;

[0021] Step 2: Configure the link quality policy of the tunnel, including packet loss (%), delay (ms) and jitter (ms), configure the SQA instance for intelligent routing to the CPE device, and the device will periodically detect the network quality at intervals of 30s to reflect the network quality in real time, and when the threshold is exceeded, the device reports an alarm to the controller, and the alarm code is 300901, 300919 and 300920;

[0022] Step 3: Associate the tunnel under the application group and configure the priority, which is used as the basis for subsequent intelligent routing, and the smaller the priority number is, the higher the priority is. The priority and the priority when creating the Evpn Over IPSec service can be different. The tunnel with the highest priority is the default main tunnel of the current application group, the RouteMap is configured to the device and the next hop address is specified as the LoopBack port address of the main tunnel HUB side, and the corresponding application group is associated.

[0023] Further, based on the created intelligent routing configuration, when the SQA alarm occurs, the switching is triggered, which comprises the following steps,

[0024] Step 1: Judge the device alarm code, and the alarm with the device alarm code of 300901, 300919 and 300920 is the SQA alarm, which can trigger the switching action;

[0025] Step 2: Obtain the latest SQA detection result of the application group associated tunnel, analyze the average values of packet loss, delay, and jitter, and determine whether the link quality of the tunnel is up to standard according to the SQA threshold value in the intelligent routing strategy set by the customer. If any one of the three values is greater than the threshold value, it is considered that the link quality of the tunnel does not meet the requirements:

[0026] Step 3: Analyze the detection result in step 2. If it is found that all tunnels of the current application group do not meet the link quality requirements, switching will not be performed. If it is found that at least one tunnel meets the link quality requirements, the tunnel with the highest priority will be selected for switching;

[0027] Step 4: Change the next hop address configured in the RouteMap to perform route switching. For example, when switching from the primary tunnel to the backup tunnel, the next hop address in the RouteMap is changed from the Loopback port address of the HUB side of the primary tunnel to the Loopback port address of the HUB side of the backup tunnel;

[0028] Step 5: Application group uplink traffic routing. The next hop address in the RouteMap is changed in step 4, and the RouteMap matches the application group ACL, thereby realizing the routing of the application group uplink traffic.

[0029] Further, based on the intelligent routing switching, after a period of time, the primary tunnel is restored, and if the customer's intelligent routing strategy is enabled for switching back, switching back is required,

[0030] Step 1: Determine whether the current traffic is on the primary tunnel. If so, no switching back is required. Only if the current tunnel is the backup tunnel, switching back is required;

[0031] Step 2: Determine whether switching back is enabled. The customer's intelligent routing strategy can enable or disable switching back. In some scenarios, as long as the current tunnel (whether it is the primary tunnel or the backup tunnel) meets the link quality indicators, switching back to the primary tunnel when the primary tunnel is available is not required;

[0032] Step 3: Determine whether the link quality of the primary tunnel meets the requirements. The three values of packet loss, delay, and jitter must all be less than the threshold value to meet the switching back condition;

[0033] Step 4: Change the next hop address configured in the RouteMap to perform route switching. The next hop address in the RouteMap is switched back to the Loopback port address of the HUB side of the primary tunnel;

[0034] Step 5: Application group uplink traffic routing. The next hop address in the RouteMap is changed in step 4, and the RouteMap matches the application group ACL, thereby realizing the routing of the application group uplink traffic.

[0035] The above steps are general procedures, but due to the complexity of the network environment, there are some abnormal situations, and the corresponding processing scheme is as follows:

[0036] SQA alarm repetition or frequent reporting under network fluctuation: when the system processes the SQA alarm, the unique identifier and processing time of the SQA are recorded, and if the SQA alarm received by the system is processed within 2 minutes, it will not be processed again to avoid repeated switching;

[0037] System service exception, possible situations are service state exception, thread blocking, and insufficient processing capacity caused by a large number of alarm impact: the system receives the SQA alarm, enters the blocking queue, and the effective time length from the start of processing is 45s, and more than 45s is considered to have expired, and switching is not performed.

[0038] Device terminal configuration damage: switching or switching back requires obtaining the SQA detection result of the application group associated tunnel on the device, and if the detection result obtained is inconsistent with the application group associated tunnel, it is considered that the configuration is damaged, and switching is not performed.

[0039] As can be seen from the above technical solution, the intelligent routing method based on link quality of the application can realize real-time measurement and monitoring of the tunnel quality on the device, including link delay, bandwidth utilization, packet loss rate and other performance indicators, and upload to the SDWAN management platform to provide basic data for intelligent routing. After calculation based on these data, the SD-WAN selects the optimal path for data transmission according to the real-time network and application conditions.

[0040] The intelligent routing based on link quality of the application relates to common networking scenarios in the SDWAN scheme, ACL traffic classification, Route-map filtering route and SQA detection technology. Only the SDWAN networking and intelligent routing configuration need to be created manually by the customer, and the subsequent switching and switching back are intelligently processed by the system and the device. The customer can flexibly configure the link quality threshold of different application groups according to the need, including packet loss (%), delay (ms), and jitter (ms). When the network link performance decreases, the specific application traffic can be identified, and the intelligent routing scheme can be selected to transmit data traffic. When the intelligent routing strategy is not configured, in the master-slave tunnel scenario, only the master tunnel DOWN can trigger switching. When the master tunnel is UP, even if the link quality does not meet the standard, the traffic will still be forwarded through the master link, which seriously affects the network quality of the user and also increases the network cost of the user. However, after the intelligent routing strategy is configured, based on the link quality threshold configured by the customer, when the master tunnel quality does not meet the standard, the optimal path can be intelligently selected to transmit data, and the user's data will be transmitted from the path with better link among all master-slave tunnels, thereby ensuring the network quality of the user.

[0041] In summary, the application simplifies user configuration, supports more flexible configuration schemes, improves network quality, and effectively reduces user network costs. BRIEF DESCRIPTION OF DRAWINGS

[0042] Figure 1 SDWAN master standby redundant link networking diagram;

[0043] Figure 2 Flowchart for creating intelligent routing based on link quality;

[0044] Figure 3 Intelligent routing based on link quality switching flowchart;

[0045] Figure 4 Intelligent routing based on link quality backflow flowchart;

[0046] Figure 5 Service identification example based on five-tuple, URL, etc.

[0047] Figure 6 Intelligent routing configuration example;

[0048] Figure 7 Intelligent routing simulation example policy configuration example. DETAILED DESCRIPTION

[0049] In order to make the purpose, technical scheme and advantages of the embodiments of the application clearer, the technical scheme in the embodiments of the application will be described clearly and completely below with reference to the drawings in the embodiments of the application. Obviously, the described embodiments are part of the embodiments of the application, not all embodiments.

[0050] The application is an intelligent routing based on link quality. The quality of tunnels on the device is measured and monitored in real time, including link delay, bandwidth utilization, packet loss rate and other performance indicators, and uploaded to the SDWAN management platform to provide basic data for intelligent routing. After calculation based on these data, SD-WAN selects the optimal path for data transmission according to real-time network and application conditions.

[0051] Scenario: the SD-WAN networking diagram of enterprise A is as shown in Figure 1 The tenant administrator has completed SD-WAN network deployment, and the applicable networking scenarios include single CPE single WAN / dual WAN EVPN Over IPSec service type. The customer proposes that the key voice and video telephone service preferentially selects tunnel 1. In order to utilize the multiple uplink characteristics of the site, improve link reliability, and fully and efficiently utilize bandwidth, it is necessary to configure primary and standby redundant links for the service.

[0052] In the presence of master standby redundant link, the controller identifies VoIP, Tiktok service by applying group, and selects the optimal path in multiple available network connections according to network performance, application demand and service demand and other factors to transmit data flow.

[0053] The application can flexibly configure intelligent routing strategy, improve network quality, and effectively reduce user network cost.

[0054] The following is specifically explained:

[0055] First, a kind of SDWAN networking with master standby redundant link needs to be configured, CPE device single WAN port scene, configure master standby redundant link, refer to Figure 1 SDWAN master standby redundant link networking diagram, including the following steps:

[0056] Step S101: the customer accesses CPE device, and configures uplink LAN port (i.e. user side UNI port);

[0057] Step S102: the WAN port of CPE device respectively creates Evpn Over IPSec service to master and standby HUB / POP;

[0058] CPE device double WAN port scene, configure master standby redundant link, including the following steps:

[0059] Step S103: the customer accesses CPE device, and configures uplink LAN port (i.e. user side UNI port);

[0060] Step S104: the master WAN port of CPE device creates Evpn Over IPSec service to master HUB / POP;

[0061] Step S105: the standby WAN port of CPE device creates Evpn Over IPSec service to standby HUB / POP;

[0062] When having master standby redundant link: the priority of the master tunnel created by CPE device to master HUB / POP is higher than the standby tunnel created to standby HUB / POP, and the priority value is mapped to RouteMap, at this time, BGP route autonomous system path is modified and the scale value of routing protocol is set through RouteMap, so as to realize that when the master tunnel is down, the flow is switched to standby tunnel. For details, see Figure 6 Intelligent routing configuration example.

[0063] Based on the above SDWAN networking, a kind of intelligent routing based on link quality is configured, refer to Figure 2 Create intelligent routing flow chart based on link quality, the method comprises:

[0064] Step S201: The customer first creates an application group on the SDWAN controller, and realizes traffic classification by configuring an ACL. The customer flexibly configures the five-tuple / URL attributes of the application, i.e., the source IP address, the destination IP address, the protocol type, the source port number, and the destination port number, identifies the service, such as VoIP and Douyin, through the application group, and facilitates subsequent routing of uplink traffic.

[0065] Step S202: Configure the link quality policy of the tunnel, including the packet loss (%), the delay (ms), and the jitter (ms), configure the SQA instance for intelligent routing to the CPE device, the device periodically detects the network quality at intervals of 30 s to reflect the network quality in real time, and when the threshold is exceeded, the device reports an alarm to the controller, and the alarm code is 300901, 300919, and 300920.

[0066] Step S203: Associate the tunnel under the application group and configure the priority, which is used as the basis for subsequent intelligent routing. The smaller the priority number is, the higher the priority is. The priority can be different from the priority when the Evpn Over IPSec service is created. The tunnel with the highest priority is the default primary tunnel of the current application group. Configure the RouteMap to the device and specify the next hop address as the LoopBack port address of the HUB side of the primary tunnel, and associate the corresponding application group.

[0067] Based on the created intelligent routing configuration, switching is triggered when the SQA alarm is generated. Referring to Figure 3 The intelligent routing switching flowchart based on the link quality includes the following steps: Step S301: Determine the device alarm code. The alarm with the device alarm code of 300901, 300919, and 300920 is an SQA alarm, which can trigger the switching action.

[0068] Step S302: Obtain the latest SQA detection result of the application group associated tunnel, analyze the average values of the packet loss, the delay, and the jitter, and determine according to the SQA threshold value in the intelligent routing strategy set by the customer. As long as one of the three values is greater than the threshold value, it is considered that the link quality of the tunnel does not meet the requirements:

[0069] Step S303: Analyze the detection result in step 2. If it is found that all tunnels of the current application group do not meet the link quality requirements, switching will not be performed. If it is found that at least one tunnel meets the link quality requirements, the tunnel with the highest priority is selected for switching.

[0070] Step S304: route switching is performed by changing the next hop address configured in the RouteMap, for example, when switching from the primary tunnel to the backup tunnel, the next hop address in the RouteMap is switched from the Loopback port address of the HUB side of the primary tunnel to the Loopback port address of the HUB side of the backup tunnel;

[0071] Step S305: routing of application group uplink traffic, in step 4, the next hop address of the RouteMap is changed, the RouteMap matches the application group ACL, thereby realizing the routing of the application group uplink traffic.

[0072] Based on the above intelligent routing switching, after a period of time after switching, the primary tunnel is restored, and if the client's intelligent routing strategy is enabled for switching back, switching back needs to be performed, referring to Figure 4 The intelligent routing switching back flowchart based on link quality, characterized in that,

[0073] Step S401: determining whether the current traffic is on the primary tunnel, if yes, no switching back is needed, only if the current tunnel is the backup tunnel, switching back is needed;

[0074] Step S402: determining whether switching back is enabled, the client's intelligent routing strategy can enable or disable switching back, in some scenarios, as long as the current tunnel (whether the primary tunnel or the backup tunnel) reaches the link quality index, no switching back to the primary tunnel is needed when the primary tunnel is available;

[0075] Step S403: determining whether the primary tunnel link quality meets the requirements, the three values of packet loss, delay and jitter must be less than the threshold value to meet the switching back condition;

[0076] Step S404: route switching is performed by changing the next hop address configured in the RouteMap, the next hop address in the RouteMap is switched back to the Loopback port address of the HUB side of the primary tunnel;

[0077] Step S405: routing of application group uplink traffic, in step 4, the next hop address of the RouteMap is changed, the RouteMap matches the application group ACL, thereby realizing the routing of the application group uplink traffic.

[0078] When the user's data packet enters the UNI entrance:

[0079] After the steps S101-S105, the primary and backup tunnels are established, when the primary tunnel is in the UP state, no application group is distinguished, and the traffic of all applications is transmitted through the primary tunnel.

[0080] The ACL configuration in the intelligent routing realizes the traffic classification of the application group, and can distinguish the traffic of different application groups according to the five-tuple / URL information. The RouteMap uses the ACL to match the routing entry of the application group, and uses the route mapping mode to route the data packet to the specified next hop. The application group intelligent routing switching and fallback can be realized by switching the next hop address of the RouteMap.

[0081] After the intelligent routing is configured in S201-S203, and before the switching occurs, the next hop address of the RouteMap is the address of the HUB side of the primary tunnel. At this time, the traffic of the application group is transmitted through the primary tunnel with the highest priority, and different application groups can set different tunnels as the primary tunnel.

[0082] In the intelligent routing switching process of S301-S305, the application group meeting the switching condition needs to switch the traffic from the primary tunnel to the backup tunnel, and then the next hop address of the RouteMap needs to be modified to the address of the HUB side of the backup tunnel. The RouteMap will route the data packet to the backup tunnel.

[0083] In the intelligent routing fallback process of S401-S405, the application group meeting the fallback condition needs to switch the traffic from the backup tunnel to the primary tunnel, and then the next hop address of the RouteMap needs to be modified to the address of the HUB side of the primary tunnel. The RouteMap will route the data packet to the primary tunnel.

[0084] Reference simulation example Figure 7 The policy "app-path-select_01_01" is configured, and the link switching threshold of the application group app_VoIP is configured: delay 150ms, jitter 30ms, and packet loss rate 10%. The primary link is tunnel 1, the backup link is tunnel 2, the default tunnel is the primary tunnel, and the traffic is on tunnel 1 when no switching occurs.

[0085] According to the switching process S301-S305, in the simulation example, when the packet loss rate of the link is greater than 10%, the device will report the SQA alarm to the controller. Assuming that the packet loss rate of tunnel 1 is 13% at this time, the link quality indicators set in the policy are not qualified, and switching is needed. If the delay of tunnel 2 is 50ms, the jitter is 10ms, and the packet loss rate is 3% at this time, that is, all indicators are less than the threshold, it is considered that tunnel 2 meets the link quality standard. The traffic is switched to tunnel 2 by updating the next hop address of the RouteMap to the address of the HUB side of tunnel 2, and the switching is realized.

[0086] According to the switching back process S401-S405, in the simulation instance, the switching back is enabled when the configuration strategy is enabled, the packet loss rate of tunnel 1 is restored to 1% after a period of time, that is, tunnel 1 reaches the link quality standard, and tunnel 1 is the main tunnel, the next hop address in the RouteMap is updated to the address of the tunnel 1 HUB side, the traffic is switched to tunnel 1, and the switching back is realized.

[0087] However, in a real scene, complex network environment and server state can all cause abnormal intelligent routing switching, therefore, the system has the following protection measures for switching interval time, system processing time and device configuration integrity.

[0088] Step S501: When processing the SQA alarm, the system records the unique identifier and processing time of the SQA, if the SQA alarm received by the system is processed within 2 minutes, the processing is not performed again, and repeated switching is avoided.

[0089] Step S502: After the system receives the SQA alarm, the effective time length from entering the blocking queue to starting processing is 45s, and if the time length exceeds 45s, it is considered to be expired, and the switching is not performed.

[0090] Step S503: When switching or switching back, the SQA detection result of the application group associated tunnel needs to be obtained from the device, if the obtained detection result is inconsistent with the application group associated tunnel, it is considered that the configuration is damaged, and the switching is not performed.

[0091] In another aspect, the application further discloses a computer readable storage medium, which stores a computer program, and the computer program is executed by a processor to make the processor execute the steps of the above method.

[0092] In another aspect, the application further discloses a computer device, which comprises a memory and a processor, and the memory stores a computer program, and the computer program is executed by the processor to make the processor execute the steps of the above method.

[0093] In another embodiment provided in the application, a computer program product containing instructions is also provided, which makes a computer execute the intelligent routing method based on link quality in any of the above embodiments when the computer program product is executed on the computer.

[0094] It can be understood that the system, device and storage medium provided by the embodiments of the application correspond to the method provided by the embodiments of the application, and the explanation, examples and beneficial effects of the related content can be referred to the corresponding part in the above method.

[0095] In the embodiments described above, all or some of the steps can be implemented by hardware, software, firmware or any combination thereof. When implemented by software, all or some of the steps can be implemented in the form of one or more computer programs or program elements. The computer programs reside (at least temporarily) in a memory of a computer during execution. The memory can be a RAM memory, a flash memory, a ROM memory, an EPROM memory, or any other suitable memory. The memory can be integral to or separate from the computer. The computer programs can be written in any suitable programming language, such as C, C++, Java, Visual Basic, etc. The computer programs can be written in assembly or machine language, if desired. The computer programs can be distributed over network coupled file servers, or can be distributed by any other suitable means.

[0096] It is to be understood that the terminology "first", "second", etc. used herein merely for the purpose of distinguishing one entity or action from another, and does not necessarily imply these entities or actions are mutually exclusive or are either temporal or spatial priorities of one another. Moreover, the terms "comprising", "including", or any other variation thereof, are intended to cover a non-exclusive inclusion, such that a process, method, article, or apparatus that comprises a list of elements does not include only those elements but can include other elements not expressly listed or inherent to such process, method, article, or apparatus. In other words, any of the steps of the methods described herein can be performed in any order that is suitable in the circumstances.

[0097] Each of the embodiments described in the specification is described in a related manner, and the same or similar parts of each of the embodiments can be referred to each other. Each of the embodiments focuses on the difference from other embodiments. In particular, for the system embodiments, since they are basically similar to the method embodiments, the description is relatively simple, and the relevant parts can be referred to the part of the description of the method embodiments.

[0098] The above examples are only used to illustrate the technical solutions of the present application, and are not intended to limit the present application; although the present application has been described in detail with reference to the foregoing examples, those skilled in the art should understand that the technical solutions recorded in the foregoing examples can be modified, or some technical features can be replaced by equivalent features; and these modifications or replacements do not cause the essence of the corresponding technical solutions to deviate from the spirit and scope of the technical solutions of the embodiments of the present application.

Claims

1. A link quality based intelligent routing method, characterized in that, First, a kind of SDWAN networking with master and standby redundant links needs to be configured, Including the following steps, For CPE device single WAN port scene, configure master and standby redundant links, including the following steps: Step A1: the customer accesses the CPE device, and the uplink LAN port, that is, the user side UNI port, is configured; Step A2: the WAN port of the CPE device creates Evpn Over IPSec service to the master and standby HUB / POP respectively; For CPE device double WAN port scene, configure master and standby redundant links, including the following steps: Step B1: the customer accesses the CPE device, and the uplink LAN port, that is, the user side UNI port, is configured; Step B2: the master WAN port of the CPE device creates Evpn Over IPSec service to the master HUB / POP; Step B3: the standby WAN port of the CPE device creates Evpn Over IPSec service to the standby HUB / POP; Also including configuring a kind of intelligent routing based on link quality based on the above SDWAN networking, including the following steps: Step C1: the customer first creates an application group on the SDWAN controller, realizes traffic classification by configuring ACL, and identifies the service by the five-tuple / URL attributes of the application, that is, source IP address, destination IP address, protocol type, source port number and destination port number, to facilitate subsequent routing of uplink traffic; Step C2: configure the link quality policy of the tunnel, including packet loss, delay and jitter, configure the SQA instance for intelligent routing to the CPE device, and the device will detect the network quality periodically at intervals of 30s to reflect the network quality in real time, and when the threshold is exceeded, the device reports the alarm to the controller; Step C3: associate the tunnel under the application group and configure the priority, which is used as the basis for subsequent intelligent routing. The smaller the priority number is, the higher the priority is.

2. The intelligent routing method based on link quality according to claim 1, wherein: For CPE device double WAN port scene, when the master and standby redundant links are configured: The tunnel priority of the main tunnel created by the CPE device to the master HUB / POP is higher than that of the standby tunnel created to the standby HUB / POP, and the priority is mapped to the RouteMap, at this time, the BGP route autonomous system path is modified and the scale value of the routing protocol is set through the RouteMap, so as to realize the switching of the traffic to the standby tunnel when the main tunnel is down.

3. The link quality based intelligent routing method according to claim 1, wherein: The tunnel with the highest priority in step C3 is the main tunnel of the current application group by default, the RouteMap is configured to the device and the next hop address is specified as the LoopBack port address of the HUB side of the main tunnel, and the corresponding application group is associated.

4. The link quality based intelligent routing method according to claim 1, wherein: Also including configuring intelligent routing based on the created intelligent routing, when SQA alarm occurs, switching is triggered, including the following steps, Step D1: judge the device alarm code, the alarm codes 300901, 300919 and 300920 are SQA alarms, and switching action can be triggered; Step D2: Obtain the latest SQA detection result of the application group associated tunnel, analyze the average values of packet loss, delay, and jitter, and determine whether the link quality of the tunnel is up to standard according to the SQA threshold value in the intelligent routing strategy set by the customer. If any one of the three values is greater than the threshold value, it is considered that the link quality of the tunnel does not meet the requirements: Step D3: Analyze the SQA detection result in step D2. If it is found that all tunnels of the current application group do not meet the link quality requirements, switching will not be performed; If it is found that at least one tunnel meets the link quality requirements, the tunnel with the highest priority will be selected for switching; Step D4: Change the next hop address configured in the RouteMap to perform route switching. When switching from the primary tunnel to the backup tunnel, the next hop address in the RouteMap is changed from the Loopback port address of the HUB side of the primary tunnel before switching to the Loopback port address of the HUB side of the backup tunnel after switching; Step D5: Application group uplink traffic routing. The next hop address of the RouteMap is changed in step D4, and the RouteMap matches the application group ACL, thereby realizing the routing of the application group uplink traffic.

5. The link quality based intelligent routing method according to claim 1, wherein: For intelligent routing switching, after a period of time, the primary tunnel is restored, and back switching needs to be performed, including the following steps: Step E1: Determine whether the current traffic is on the primary tunnel. If it is, back switching is not needed. Only if the current tunnel is the backup tunnel does back switching need to be performed; Step E2: Determine whether back switching is enabled. The intelligent routing strategy of the customer can enable or disable back switching. In some scenarios, as long as the current tunnel meets the link quality indicators, whether it is the primary tunnel or the backup tunnel, back switching to the primary tunnel is not needed. In this scenario, back switching can be disabled when setting the intelligent routing strategy; Step E3: Determine whether the link quality of the primary tunnel meets the requirements. The three values of packet loss, delay, and jitter must all be less than the threshold value to meet the back switching condition; Step E4: Change the next hop address configured in the RouteMap to perform route switching. The next hop address in the RouteMap is switched back to the Loopback port address of the HUB side of the primary tunnel; Step E5: Application group uplink traffic routing. The next hop address of the RouteMap is changed in step E4, and the RouteMap matches the application group ACL, thereby realizing the routing of the application group uplink traffic.

6. The intelligent routing method based on link quality according to claim 1, characterized in that: It further includes handling schemes corresponding to some abnormal situations as follows: In the case of network fluctuations, SQA alarms are repeatedly or frequently reported: When the system processes SQA alarms, it records the unique identifier and processing time of SQA. If the system receives an SQA alarm within 2 minutes, it will not be processed again to avoid repeated switching; System service exception, possible cases are service state exception, thread blocking, large alarm impact leading to insufficient processing capacity: the system receives an SQA alarm, enters the blocking queue, and the effective time from starting processing is 45s. If it exceeds 45s, it is considered to have expired and no switching is performed; Device terminal configuration damage: switching or back switching requires obtaining the SQA detection result of the application group associated tunnel on the device. If the detection result obtained is inconsistent with the application group associated tunnel, it is considered that the configuration is damaged, and no switching is performed.

7. A computer readable storage medium storing a computer program, wherein the computer program comprises program instructions configured to cause a processor to perform the method according to any one of claims 1 to 6. The computer program, when executed by a processor, causes the processor to perform the steps of the method of any one of claims 1 to 6.

8. A computer device comprising a memory and a processor, the memory storing a computer program, characterized in that, The computer program, when executed by the processor, causes the processor to perform the steps of the method of any one of claims 1 to 6.

Images