Business path determination method and apparatus, nonvolatile storage medium, and electronic device

Abstract

The application discloses a service path determination method and device, a nonvolatile storage medium and an electronic device. The method comprises the following steps: sending simulation messages to adjacent nodes of a node in a communication network, and obtaining detection results of the simulation message sending and receiving processes; determining a network quality matrix according to the detection results, wherein a row in the network quality matrix represents a source node, and a column represents a destination node; determining the metric values of candidate service paths in the communication network according to the network quality matrix and candidate nodes involved in the candidate service paths; determining a candidate service path with the highest metric value from the candidate service paths as a primary service path, and determining a candidate service path with the second highest metric value as a backup service path. The application solves the technical problem of low resource utilization and difficulty in expansion caused by the fact that the resources of a security resource pool are scheduled by using an explicit path in the related art.

Description

Technical Field

[0001] The present application relates to the technical field of security resource pools, and in particular to a method and device for determining a service path, a non-volatile storage medium, and an electronic device. Background Art

[0002] Current technologies primarily implement primary and backup routing for secure resource pool resource scheduling through explicit paths. Explicit paths typically refer to fixed, predefined paths across the network. These paths typically remain unchanged after network configuration unless manually adjusted by the network administrator or due to changes in network policy. While these statically configured explicit paths have their advantages, they also have limitations, including lack of flexibility, difficulty in scalability, slow response, low resource utilization, and difficulty in automation.

[0003] To address the above-mentioned problems, no effective solutions have been proposed so far. Summary of the Invention

[0004] The embodiments of the present application provide a service path determination method, device, non-volatile storage medium and electronic device to at least solve the technical problems of low resource utilization and difficulty in expansion caused by the use of explicit paths to schedule resources in a security resource pool in related technologies.

[0005] According to one aspect of an embodiment of the present application, a service path determination method is provided, comprising: controlling a node in a communication network to send a simulation message to an adjacent node, and obtaining detection results of the simulation message sending and receiving process, wherein the detection results include a sending timestamp, a receiving timestamp, packet loss information, and traffic statistics data of the simulation message; determining a network quality matrix based on the detection results, wherein rows in the network quality matrix represent source nodes, columns represent destination nodes, and elements in the network quality matrix are routing performance indicators between nodes in corresponding rows and columns; determining a metric value corresponding to a candidate service path in the communication network based on the network quality matrix and candidate nodes involved in the candidate service path, wherein the metric value is used to reflect the selection priority of the candidate service path, and the larger the metric value, the higher the selection priority; determining the candidate service path with the highest metric value from each candidate service path as the primary service path, and determining the candidate service path with the second highest metric value as the backup service path.

[0006] Optionally, determining the metric value corresponding to the candidate service path in the communication network based on the network quality matrix and the candidate nodes involved in the candidate service path includes: determining the connection relationship between each candidate node, and determining all candidate node pairs in the candidate service path based on the connection relationship, wherein the candidate node pair contains two adjacent candidate nodes, and the same candidate node is in one or two candidate node pairs; determining the elements corresponding to the candidate node pairs; determining the node metric value corresponding to the connection relationship based on the elements corresponding to the candidate node pairs; and determining the sum of all node metric values ​​as the metric value of the candidate service path.

[0007] Optionally, determining the node metric value corresponding to the candidate node pair based on the elements corresponding to the candidate node pair includes: normalizing each type of performance indicator contained in the network quality matrix; determining the normalized values ​​of each type of performance indicator contained in the elements corresponding to the candidate node pair; and determining the node metric value based on the normalized values ​​of each type of performance indicator.

[0008] Optionally, determining the node measurement value based on the normalized performance indicator values ​​includes: determining the preset business type; determining the weight corresponding to each performance indicator type based on the business type; and performing weighted summation processing on the normalized performance indicator values ​​based on the weight to obtain the node measurement value.

[0009] Optionally, the performance indicator includes at least one of the following: transmission delay, transmission jitter information, packet loss rate and bandwidth utilization.

[0010] Optionally, the performance indicator is determined in the following manner: determining the transmission delay based on the sending timestamp and receiving timestamp of the simulation message; determining the transmission jitter information based on the transmission delay corresponding to multiple consecutive simulation messages; determining the bandwidth utilization based on traffic statistics and bandwidth information between nodes in the communication network.

[0011] Optionally, before controlling a node in the communication network to send a simulation message to an adjacent node, the service path determination method further includes: determining device information of each device in the communication network, the device information including at least one of the following: device type, port identifier, network address, the communication network including a security resource pool network; determining a link topology map of the communication network based on the device information; and determining a node in the communication network based on the link topology map.

[0012] Optionally, the service path determination method also includes: after the detection result changes, updating the network quality matrix according to the changed detection result; updating the measurement value of the candidate service path based on the updated network quality matrix; determining the candidate service path with the largest updated measurement value as the primary path, and determining the candidate service path with the second largest updated measurement value as the backup service path.

[0013] According to another aspect of the embodiments of the present application, a service path determination apparatus is also provided, which comprises: a packet processing module, configured to control a node in a communication network to send an emulation packet to a neighboring node of the node, and to obtain a detection result of a sending and receiving process of the emulation packet, wherein the detection result comprises a sending timestamp, a receiving timestamp, packet loss information and traffic statistics of the emulation packet; a network controller module, configured to determine a network quality matrix according to the detection result, wherein a row in the network quality matrix represents a source node, a column represents a destination node, and an element in the network quality matrix is a routing performance index between nodes in the corresponding row and column; determine a metric value corresponding to a candidate service path in the communication network according to the network quality matrix and candidate nodes involved in the candidate service path, wherein the metric value is used to reflect a selection priority of the candidate service path, and the greater the metric value, the higher the selection priority; and a service orchestration module, configured to determine a candidate service path with the highest metric value from the candidate service paths as a primary service path, and determine a candidate service path with the second highest metric value as a backup service path.

[0014] According to another aspect of the embodiments of the present application, a nonvolatile storage medium is also provided, which stores a program, wherein the program, when executed, controls a device in which the nonvolatile storage medium is located to perform the service path determination method.

[0015] According to another aspect of the embodiments of the present application, an electronic device is also provided, which comprises a memory and a processor, and the processor is configured to execute a program stored in the memory, wherein the program, when executed, performs the service path determination method.

[0016] According to another aspect of the embodiments of the present application, a computer program product is also provided, which comprises a computer program, and the computer program, when executed by a processor, implements the service path determination method.

[0017] In an embodiment of the present application, a node in a control communication network sends a simulation message to a neighboring node, and obtains the detection results of the simulation message sending and receiving process, wherein the detection results include the sending timestamp, receiving timestamp, packet loss information and traffic statistics of the simulation message; a network quality matrix is ​​determined based on the detection results, wherein the rows in the network quality matrix represent source nodes, the columns represent destination nodes, and the elements in the network quality matrix are routing performance indicators between the nodes in the corresponding rows and columns; based on the network quality matrix and the candidate nodes involved in the candidate service path, the metric value corresponding to the candidate service path in the communication network is determined, wherein the metric value is used to reflect the selection priority of the candidate service path. The method adopts a method for determining the primary service path and the backup service path according to the metric value from among the candidate service paths, wherein the metric value of the candidate service path is determined as the primary service path, and the candidate service path with the second highest metric value is determined as the backup service path. By determining the metric value of the candidate service path according to the routing performance indicator, and determining the primary service path and the backup service path according to the metric value, the purpose of determining the optimal primary service path and the backup service path according to the routing performance indicator is achieved, thereby realizing the technical effect of dynamically determining the optimal service path, and further solving the technical problem of low resource utilization and difficulty in expansion caused by the use of explicit paths to schedule resources of the security resource pool in the related technology. BRIEF DESCRIPTION OF THE DRAWINGS

[0018] The drawings described herein are used to provide a further understanding of the present application and constitute a part of the present application. The illustrative embodiments of the present application and their descriptions are used to explain the present application and do not constitute an improper limitation on the present application. In the drawings:

[0019] Figure 1 1 is a schematic diagram of the structure of a computer terminal (mobile terminal) provided according to an embodiment of the present application;

[0020] Figure 2 This is a flow chart of a method for determining a service path according to an embodiment of the present application;

[0021] Figure 3 This is a schematic diagram of a simulation message provided according to an embodiment of the present application;

[0022] Figure 4 is a schematic diagram of a network quality matrix provided according to an embodiment of the present application;

[0023] Figure 5 This is a schematic diagram of a service path and a service path issuance process provided according to an embodiment of the present application;

[0024] Figure 6 This is a structural diagram of a service path determination device provided according to an embodiment of the present application;

[0025] Figure 7 This is a workflow diagram of a service path determination device provided according to an embodiment of the present application. DETAILED DESCRIPTION

[0026] In order to enable those skilled in the art to better understand the present invention, the following will clearly and completely describe the technical solutions in the embodiments of the present invention in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments in the present invention, all other embodiments obtained by ordinary technicians in this field without making creative efforts should fall within the scope of protection of this application.

[0027] It should be noted that the terms "first", "second", etc. in the specification and claims of the present application and the above-mentioned drawings are used to distinguish similar objects and are not necessarily used to describe a specific order or sequential order. It should be understood that the data used in this way can be interchangeable where appropriate, so that the embodiments of the present application described herein can be implemented in a sequence other than those illustrated or described herein. In addition, the terms "including" and "having" and any of their variations are intended to cover non-exclusive inclusions, for example, a process, method, system, product or device comprising a series of steps or units is not necessarily limited to those steps or units clearly listed, but may include other steps or units that are not clearly listed or inherent to these processes, methods, products or devices.

[0028] In order to better understand the embodiments of the present application, the technical terms involved in the embodiments of the present application are explained as follows:

[0029] Security Resource Pool: An integrated security solution based on cloud computing and virtualization technologies. It delivers security capabilities as a service, forming a centrally managed security capability pool. This enables unified scheduling and management of security resources in an elastic, on-demand manner, providing independent security services to multiple tenants.

[0030] Business Orchestration: A technology for managing and automating business processes. It involves organizing the various steps and tasks in a business process into a certain logical sequence to improve efficiency, reduce costs, and enhance business flexibility and responsiveness.

[0031] Message: In computer networks, it refers to a data unit consisting of two parts: the header and the payload. The header contains control information such as the source address and destination address, while the payload carries the data that actually needs to be transmitted.

[0032] With the rapid development of cloud computing technology, users have increasingly higher requirements for the unification, flexibility and diversification of security capabilities in hybrid IT environments. In particular, with the emergence of public cloud, private cloud, hybrid cloud, multi-cloud and other deployment forms, users' demand for unified management has rapidly increased. Under this background, traditional security hardware cannot be deployed within the cloud, and there are problems of security capability elastic expansion and on-demand combination. The security resource pool effectively solves the security island problem existing in enterprise security construction by integrating multiple security capabilities, helps users reduce the construction cost of security while achieving unified management and collaborative linkage of products, and effectively solves the problems of security compliance, private cloud security, hybrid cloud security, unified security management and the like for many users.

[0033] Currently, the primary and backup routing of security resource pool resource scheduling is mainly realized through the method of explicit path. Explicit path usually refers to a fixed path defined in advance by the network. These paths usually do not change after network configuration, unless the network administrator manually adjusts or the network policy changes. Such static configuration of explicit path has its advantages, but also has some limitations, including lack of flexibility, difficulty in expansion, slow response speed, low resource utilization, difficulty in automation, etc.

[0034] In order to solve the above problems, the related solutions are provided in the embodiments of the present application, which are described in detail below.

[0035] According to the embodiments of the present application, a method embodiment of a service path determination method is provided. It should be noted that the steps shown in the flowchart of the accompanying drawings can be executed in a computer system such as a group of computer executable instructions, and although the logical order is shown in the flowchart, in some cases, the steps shown or described can be executed in an order different from that shown here.

[0036] The method embodiment provided by the embodiments of the present application can be executed in a mobile terminal, a computer terminal or a similar computing device. Figure 1 A hardware structure block diagram of a computer terminal (or mobile device) for implementing a service path determination method is shown. As shown in Figure 1 The computer terminal 10 (or mobile device 10) can include one or more processors 102 (the processor 102 can include but is not limited to a microprocessor MCU or a programmable logic device FPGA processing device), a memory 104 for storing data, and a transmission device 106 for communication function. In addition, it can also include a display, an input / output interface (I / O interface), a universal serial bus (USB) port (which can be included as one of the ports of the BUS bus), a network interface, a power supply and / or a camera. Those skilled in the art can understand that the computer terminal 10 (or mobile device 10) can further include other components necessary for the computer terminal 10 (or mobile device 10) to perform the service path determination method.Figure 1 The structure shown is only for illustration and does not limit the structure of the above electronic device. Figure 1 More or fewer components than shown, or with Figure 1 Different configurations shown.

[0037] It should be noted that the one or more processors 102 and / or other data processing circuits described above may generally be referred to herein as "data processing circuitry". The data processing circuitry may be embodied in whole or in part as software, hardware, firmware, or any other combination thereof. In addition, the data processing circuitry may be a single independent processing module, or may be incorporated in whole or in part into any of the other components of the computer terminal 10 (or mobile device). As described in the embodiments of the present application, the data processing circuitry serves as a processor control (e.g., selection of a variable resistor terminal path connected to an interface).

[0038] The memory 104 can be used to store software programs and modules of application software, such as the program instructions / data storage device corresponding to the service path determination method in the embodiment of the present application. The processor 102 executes various functional applications and data processing by running the software programs and modules stored in the memory 104, that is, implementing the above-mentioned service path determination method. The memory 104 may include a high-speed random access memory and may also include a non-volatile memory, such as one or more magnetic storage devices, flash memory, or other non-volatile solid-state memory. In some examples, the memory 104 may further include a memory remotely located relative to the processor 102, and these remote memories may be connected to the computer terminal 10 via a network. Examples of the above-mentioned network include, but are not limited to, the Internet, an intranet, a local area network, a mobile communication network, and combinations thereof.

[0039] The transmission device 106 is configured to receive or transmit data via a network. A specific example of the aforementioned network may include a wireless network provided by the communications provider of the computer terminal 10. In one embodiment, the transmission device 106 includes a network interface controller (NIC), which can be connected to other network devices via a base station to enable communication with the Internet. In another embodiment, the transmission device 106 may be a radio frequency (RF) module, which is configured to communicate with the Internet wirelessly.

[0040] The display may be, for example, a touch screen liquid crystal display (LCD) that enables a user to interact with a user interface of the computer terminal 10 (or mobile device).

[0041] In the above operating environment, the embodiment of the present application provides a method for determining a service path, such as Figure 2 As shown, the method includes the following steps:

[0042] Step S202: Control a node in the communication network to send a simulation message to a neighboring node, and obtain detection results of the simulation message sending and receiving process, wherein the detection results include a sending timestamp, a receiving timestamp, packet loss information, and traffic statistics of the simulation message;

[0043] In the technical solution provided in step S202, before controlling a node in the communication network to send a simulation message to a neighboring node, the service path determination method further includes: determining device information of each device in the communication network, the device information including at least one of the following: device type, port identifier, network address, the communication network including a security resource pool network; determining a link topology map of the communication network based on the device information; and determining a node in the communication network based on the link topology map.

[0044] In some embodiments of the present application, each node in the communication network can proactively send a message to a neighboring node at a preset time (eg, N seconds). Figure 3 The simulated messages shown above are used to perform network detection. These messages contain key information such as timestamp, message length, and router ID, ensuring message traceability and manageability. As nodes send simulated messages, they can traverse the links between nodes and obtain detection results.

[0045] Step S204: determining a network quality matrix based on the detection results, wherein rows in the network quality matrix represent source nodes, columns represent destination nodes, and elements in the network quality matrix are routing performance indicators between nodes in corresponding rows and columns;

[0046] In the technical solution provided in step S204, the routing performance index includes at least one of the following: transmission delay, transmission jitter information, packet loss rate and bandwidth utilization. Figure 4 As shown in the figure, the rows and columns represent the source node and the destination node respectively. Each element in the matrix contains four parameter values: l, j, p, and b, which represent the delay (ms), jitter (ms), packet loss (%), and bandwidth utilization (%) respectively.

[0047] As an optional implementation, the routing performance indicator is determined in the following manner: determining the transmission delay based on the sending timestamp and receiving timestamp of the simulated message; determining the transmission jitter information based on the transmission delay corresponding to multiple consecutive simulated messages; and determining the bandwidth utilization based on traffic statistics and bandwidth information between nodes in the communication network.

[0048] In some embodiments of the present application, jitter can also be calculated by comparing the timestamp differences of consecutive messages, packet loss can be detected through sequence number tracking and confirmation mechanisms, and bandwidth utilization can be calculated by monitoring interface traffic statistics of network devices.

[0049] Step S206: Determine a metric value corresponding to the candidate service path in the communication network based on the network quality matrix and the candidate nodes involved in the candidate service path, wherein the metric value is used to reflect the selection priority of the candidate service path, and the larger the metric value, the higher the selection priority;

[0050] In the technical solution provided in step S206, the step of determining the metric value corresponding to the candidate service path in the communication network based on the network quality matrix and the candidate nodes involved in the candidate service path includes: determining the connection relationship between each candidate node, and determining all candidate node pairs in the candidate service path based on the connection relationship, wherein the candidate node pair contains two adjacent candidate nodes, and the same candidate node is in one or two candidate node pairs; determining the elements corresponding to the candidate node pairs; determining the node metric value corresponding to the connection relationship based on the elements corresponding to the candidate node pairs; and determining the sum of all node metric values ​​as the metric value of the candidate service path.

[0051] As an optional implementation, the step of determining the node metric value corresponding to the candidate node pair based on the elements corresponding to the candidate node pair includes: normalizing each type of routing performance indicator contained in the network quality matrix; determining the normalized values ​​of each type of routing performance indicator contained in the elements corresponding to the candidate node pair; and determining the node metric value based on the normalized values ​​of each type of routing performance indicator.

[0052] In some embodiments of the present application, the steps of determining the node measurement value based on the normalized performance indicator values ​​of various types include: determining the preset business type; determining the weight corresponding to each routing performance indicator type based on the business type; and performing weighted summation processing on the normalized routing performance indicator values ​​of various types based on the weights to obtain the node measurement value.

[0053] In some embodiments of the present application, the specific process of determining each candidate service path is as follows:

[0054] The first step is to obtain the user's business requirements and determine the weights of each key performance indicator at each network node based on the user's business requirements. The weights corresponding to each key performance indicator can be the same or different, and are pre-set based on the user's business requirements. Let the current node pair be i, and the weights of each indicator are w_latency[i], w_jitter[i], w_packetloss[i], and w_bandwidth[i], corresponding to the weights of latency, jitter, packet loss, and bandwidth utilization, respectively.

[0055] For example, in the anti-DOOS scenario of game service, since game service requires low latency, a general index weight template can be designed, such as: {w_latency[i]=40%, w_jitter[i]=20%, w_packetloss[i]=20%, w_bandwidth[i]=20%}, and applied to all game service scenarios. In addition, if special service requires customized service, the index weight template for the service can be customized according to the requirements of the service and combined with the actual test effect, and input to the algorithm unit through the controller for use.

[0056] Secondly, let the actual measurement value corresponding to each index be L, J, P, B respectively. Normalize each index to ensure that they are in the same order of magnitude, and the formula is as follows:

[0057]

[0058] Where L min , L max , J min , J max , P min , P max , B min , B max are the minimum and maximum values of each index respectively.

[0059] Thirdly, according to the pre-set weights of each key performance parameter and the normalized key performance indicators of node pair i, the node metric value S i of node pair i is calculated, which is shown as follows:

[0060] S i = (w_latency[i]*L ′ [i]) + (w_jitter[i]*J ′ [i]) + (w_packetloss[i]*P ′ [i]) + (w_bandwidth[i]*

[0061] B ′ [i])

[0062] Fourthly, the comprehensive metric S_total of the whole path from node pair i to node pair n is calculated. The comprehensive metric of the path is equal to the sum of the node metric value S i from node pair i to node pair n. The formula for calculating the path comprehensive metric is as follows:

[0063]

[0064] Where S kIt is the comprehensive metric value of node k, and the value of k traverses from i to n.

[0065] It should be noted that the adjacent nodes included in a candidate node pair in a candidate service path are a source node and a destination node. For example, if a candidate service path includes five nodes numbered 1, 2, 3, 4, and 5, and the connection relationship between these five nodes is 1-2-3-4-5, then the candidate node pairs corresponding to this candidate service path include (1, 2), (2, 3), (3, 4), and (4, 5). In other words, any two nodes in the candidate service path that are connected will correspond to a candidate node pair.

[0066] Step S208 : Determine the candidate service path with the highest metric value from among the candidate service paths as the primary service path, and determine the candidate service path with the second highest metric value as the backup service path.

[0067] In the technical solution provided in step S208, if Figure 5 As shown, after selecting the path with the highest comprehensive metric as the primary path and the path with the second highest comprehensive metric as the backup service path, a set of path information, including the primary and backup paths, can be generated and translated into a set of packet matching conditions and forwarding policy entries, also known as a flow table. This flow table is then distributed to each node in the network through a flow table distribution mechanism, ensuring that each node searches and forwards data packets according to the distributed policy, thus forming a controllable and optimal security service chain.

[0068] In some embodiments of the present application, the service path determination method also includes: after the detection result changes, updating the network quality matrix according to the changed detection result; updating the measurement value of the candidate service path based on the updated network quality matrix; determining the candidate service path with the largest updated measurement value as the primary path, and determining the candidate service path with the second largest updated measurement value as the backup service path.

[0069] By periodically probing the communication network, when network quality changes, the comprehensive metric S_total can be recalculated based on the changes, and new primary and backup paths can be selected to form and distribute new service chains. Furthermore, when new devices join the communication network or existing devices go offline, network probing requests can be re-initiated to collect new performance indicator parameter information, return the new parameter information, and then calculate, select routes, orchestrate, and distribute new secure service chains.

[0070] By controlling the nodes in the communication network to send simulation messages to the neighboring nodes, and obtaining the detection results of the simulation message sending and receiving process, wherein the detection results include the sending timestamp, receiving timestamp, packet loss information and traffic statistics of the simulation message; determining the network quality matrix based on the detection results, wherein the rows in the network quality matrix represent source nodes, the columns represent destination nodes, and the elements in the network quality matrix are routing performance indicators between the nodes in the corresponding rows and columns; determining the metric values ​​corresponding to the candidate service paths in the communication network based on the network quality matrix and the candidate nodes involved in the candidate service paths, wherein the metric values ​​are used to reflect the selection priority of the candidate service paths, Moreover, the larger the metric value, the higher the selection priority; the candidate business path with the highest metric value is determined as the primary business path from among the candidate business paths, and the candidate business path with the second highest metric value is determined as the backup business path. By determining the metric values ​​of the candidate business paths according to the routing performance indicators, and determining the primary business path and the backup business path according to the metric values, the purpose of determining the optimal primary business path and the backup business path according to the routing performance indicators is achieved, thereby achieving the technical effect of dynamically determining the optimal business path, and further solving the technical problems of low resource utilization and difficulty in expansion caused by the use of explicit paths to schedule resources of the security resource pool in related technologies.

[0071] The embodiment of the present application provides a service path determination device, Figure 6 It is a schematic diagram of the structure of the device. Figure 6 It can be seen that the device includes: a message processing module 60, which is used to control the nodes in the communication network to send simulated messages to the adjacent nodes, and obtain the detection results of the simulated message sending and receiving process, wherein the detection results include the sending timestamp, receiving timestamp, packet loss information and traffic statistics of the simulated message; a network controller module 62, which is used to determine the network quality matrix based on the detection results, wherein the rows in the network quality matrix represent source nodes, the columns represent destination nodes, and the elements in the network quality matrix are routing performance indicators between the nodes in the corresponding rows and columns; according to the network quality matrix and the candidate nodes involved in the candidate service path, determine the metric value corresponding to the candidate service path in the communication network, wherein the metric value is used to reflect the selection priority of the candidate service path, and the larger the metric value, the higher the selection priority; a service orchestration module 64, which is used to determine the candidate service path with the highest metric value from each candidate service path as the main service path, and determine the candidate service path with the second highest metric value as the backup service path.

[0072] In some embodiments of the present application, before the control module 62 controls the nodes in the communication network to send the simulation packets to the adjacent nodes, the network controller module 62 is further configured to: determine device information of each device in the communication network, the device information comprising at least one of the following: device type, port identifier, network address, and the communication network comprising a secure resource pool network; determine a link topology of the communication network according to the device information; and determine the nodes in the communication network according to the link topology.

[0073] In some embodiments of the present application, the routing performance indicators comprise at least one of the following: transmission delay, transmission jitter information, packet loss rate, and bandwidth utilization.

[0074] In some embodiments of the present application, the routing performance indicators are determined by: determining the transmission delay according to the sending timestamp and the receiving timestamp of the simulation packets; determining the transmission jitter information according to the transmission delays corresponding to a plurality of continuous simulation packets; and determining the bandwidth utilization according to the traffic statistics data and the bandwidth information between the nodes in the communication network.

[0075] In some embodiments of the present application, the service arrangement module 64 determines the metric value corresponding to the candidate service path in the communication network according to the network quality matrix and the candidate nodes involved in the candidate service path, which comprises: determining the connection relationship between each candidate node, and determining the node metric value corresponding to the connection relationship according to the elements corresponding to the candidate node pairs; determining the sum of all the node metric values as the metric value of the candidate service path.

[0076] In some embodiments of the present application, the service arrangement module 64 determines the node metric value corresponding to the candidate node pair according to the elements corresponding to the candidate node pair, which comprises: performing normalization processing on each type of routing performance indicator contained in the network quality matrix; determining the normalized values of each type of routing performance indicator contained in the elements corresponding to the candidate node pair; and determining the node metric value according to the normalized values of each type of routing performance indicator.

[0077] In some embodiments of the present application, the service arrangement module 64 determines the node metric value according to the normalized values of each type of performance indicator, which comprises: determining a preset service type; determining the weight corresponding to each type of routing performance indicator according to the service type; and performing weighted summation processing on the normalized values of each type of routing performance indicator according to the weight to obtain the node metric value.

[0078] In some embodiments of the present application, the service path determination device is also used to: update the network quality matrix according to the changed detection results after the detection results change; update the measurement values ​​of the candidate service paths based on the updated network quality matrix; determine the candidate service path with the largest updated measurement value as the primary path, and determine the candidate service path with the second largest updated measurement value as the backup service path.

[0079] As an optional implementation, the workflow of the above service path determination device is as follows: Figure 7 As shown. Figure 7 As can be seen from FIG, the network controller module 62 further includes a network detection unit, a matrix processing unit and an algorithm unit. The message processing module further includes a calculation unit and a detection unit.

[0080] In addition, from Figure 7 As can be seen in Figure 6, after the service path determination device is connected to the secure resource pool, the network controller module 62 calculates the topology of the secure resource pool and sends simulation messages through the message processing module 60. The message processing module 60 then performs real-time detection of all resource nodes and routes, including key performance indicators such as latency, jitter, packet loss, and bandwidth utilization. This data is then analyzed and provided to the network controller module 62 to form a network quality matrix. The service chain orchestration algorithm selects the primary and backup paths, and the service orchestration module 64 then distributes the flow table and periodically updates it to achieve optimal service chain orchestration.

[0081] In some embodiments of the present application, Figure 7 As shown, the workflow of the above service path determination device includes the following steps:

[0082] In the first step, the network detection unit of the network controller module 62 automatically detects and collects information about all devices, such as device type, port identifier, and network address, to calculate the link topology of the security resource pool network. Once the network topology is calculated and determined, the detection unit notifies the detection unit of the message processing module 60 of these key topological conditions.

[0083] In the second step, the detection unit sends control information to all nodes in the network, instructing them to proactively send simulated messages to neighboring nodes every N seconds to perform network detection. These messages contain key information such as timestamp, message length, and router ID, ensuring message traceability and manageability. After traversing all network nodes and links, the detection results are reported to the calculation unit of the message processing module 60.

[0084] In the third step, the calculation unit performs data preprocessing after receiving the performance indicator information: calculating the delay by the difference between two timestamps, calculating the jitter by comparing the timestamp difference of consecutive messages, detecting packet loss through sequence number tracking and confirmation mechanism, and calculating the bandwidth utilization by monitoring the interface traffic statistics of network devices.

[0085] In the fourth step, the pre-processed parameter data is sent to the matrix processing unit of the network controller module 62. This unit exhaustively enumerates all paths in the network and statistically processes key performance indicators one by one, ultimately forming a large tenant-level network quality matrix. This matrix focuses on analyzing network structure and paths, exhaustively enumerating all possible transmission paths in the network and capturing every subtle dynamic in the network, including direct and indirect connections between nodes, possible data flow routes, and potential bottlenecks and redundancies in the network.

[0086] In the fifth step, the algorithm unit of the network controller module 62 sets a weighted comprehensive evaluation algorithm model to calculate the quality matrix formed in the above steps. First, the parameters are weighted and the metric value of each path is calculated through a formula.

[0087] In the sixth step, the path metrics calculated by the network controller module 62 are sent to the service orchestration module 64. The path with the highest metric is selected as the primary path, and the path with the second highest metric is selected as the backup service path, generating a set of path information containing one primary and one backup. This is then translated into a set of packet matching conditions and forwarding policy entries, known as the flow table. This flow table is then distributed to each node in the network through a flow table distribution mechanism, ensuring that each node searches and forwards data packets according to the distributed policy, thus forming a controllable and optimal secure service chain.

[0088] Step 7: Monitor network quality changes in real time. Use the following two methods to ensure rapid routing convergence and flexible management, enabling updates and iterations of the service chain:

[0089] In method 1, the message processing unit periodically performs network detection. When network quality changes, the message processing unit promptly sends the change information to the controller to recalculate the comprehensive metric S_total. The service orchestrator then selects new primary and backup paths, forms a new service chain, and distributes it.

[0090] Method 2: The network detection unit manages the network topology in real time. When a new device joins the network or an existing device goes offline, the network detection unit will re-initiate a network detection request to the message processing module 60, requesting the collection of new performance indicator parameter information, returning the new parameter information, calculating, routing, orchestrating, and issuing a new security service chain.

[0091] It should be noted that each module in the above service path determination apparatus can be a program module (for example, a program instruction set implementing a certain specific function) or a hardware module. For the latter, it can be in the form of, but not limited to, a processor or a processor implementing the functions of the above modules.

[0092] According to the embodiments of the present application, a non-volatile storage medium is also provided, and the non-volatile storage medium stores a program. When the program runs, the device in which the non-volatile storage medium is located performs the following service path method: controlling a node in a communication network to send simulation messages to adjacent nodes, and obtaining detection results of the sending and receiving processes of the simulation messages, wherein the detection results include sending time stamps, receiving time stamps, packet loss information and traffic statistics of the simulation messages; determining a network quality matrix according to the detection results, wherein the rows of the network quality matrix represent source nodes, the columns represent destination nodes, and the elements of the network quality matrix are routing performance indicators between the nodes in the corresponding rows and columns; determining a metric value corresponding to a candidate service path in the communication network according to the network quality matrix and candidate nodes involved in the candidate service path, wherein the metric value reflects the selection priority of the candidate service path, and the larger the metric value is, the higher the selection priority is; determining a candidate service path with the highest metric value from the candidate service paths as a primary service path, and determining a candidate service path with the second highest metric value as a backup service path.

[0093] According to the embodiments of the present application, an electronic device is also provided, which includes a memory and a processor. The processor is configured to run a program stored in the memory. When the program runs, the following service path determination method is performed: controlling a node in a communication network to send simulation messages to adjacent nodes, and obtaining detection results of the sending and receiving processes of the simulation messages, wherein the detection results include sending time stamps, receiving time stamps, packet loss information and traffic statistics of the simulation messages; determining a network quality matrix according to the detection results, wherein the rows of the network quality matrix represent source nodes, the columns represent destination nodes, and the elements of the network quality matrix are routing performance indicators between the nodes in the corresponding rows and columns; determining a metric value corresponding to a candidate service path in the communication network according to the network quality matrix and candidate nodes involved in the candidate service path, wherein the metric value reflects the selection priority of the candidate service path, and the larger the metric value is, the higher the selection priority is; determining a candidate service path with the highest metric value from the candidate service paths as a primary service path, and determining a candidate service path with the second highest metric value as a backup service path.

[0094] According to an embodiment of the present application, a computer program product is also provided, including a computer program, which implements the following service path determination method when executed by a processor: controlling a node in a communication network to send a simulation message to an adjacent node, and obtaining detection results of the simulation message sending and receiving process, wherein the detection results include the sending timestamp, receiving timestamp, packet loss information and traffic statistics of the simulation message; determining a network quality matrix based on the detection results, wherein the rows in the network quality matrix represent source nodes, the columns represent destination nodes, and the elements in the network quality matrix are routing performance indicators between the nodes in the corresponding rows and columns; determining the metric values ​​corresponding to the candidate service paths in the communication network based on the network quality matrix and the candidate nodes involved in the candidate service paths, wherein the metric values ​​are used to reflect the selection priority of the candidate service paths, and the larger the metric value, the higher the selection priority; determining the candidate service path with the highest metric value from each candidate service path as the main service path, and determining the candidate service path with the second highest metric value as the backup service path.

[0095] In the above embodiments of the present application, the description of each embodiment has its own focus. For parts that are not described in detail in a certain embodiment, please refer to the relevant description of other embodiments.

[0096] In the several embodiments provided in this application, it should be understood that the disclosed technical content can be implemented in other ways. Among them, the device embodiments described above are only exemplary. For example, the division of the units can be a logical function division. In actual implementation, there may be other division methods, such as multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed can be through some interfaces, indirect coupling or communication connection of units or modules, which can be electrical or other forms.

[0097] The units described as separate components may or may not be physically separate, and the components shown as units may or may not be physical units, that is, they may be located in one place or distributed across multiple units. Some or all of the units may be selected according to actual needs to achieve the purpose of the present embodiment.

[0098] In addition, the functional units in the various embodiments of the present application may be integrated into a single processing unit, or each unit may exist physically separately, or two or more units may be integrated into a single unit. The aforementioned integrated units may be implemented in the form of hardware or software functional units.

[0099] The integrated unit, if implemented in the form of a software function unit and sold or used as an independent product, can be stored in a computer readable storage medium. Based on such understanding, the technical solutions of the present application or the part that essentially contributes to the related art or the whole or part of the technical solutions can be embodied in the form of a software product. The computer software product is stored in a storage medium and includes a plurality of instructions for causing a computer device (which can be a personal computer, a server or a network device, etc.) to execute all or part of the steps of the method described in the embodiments of the present application. The aforementioned storage medium includes a U disk, a read-only memory (ROM), a random access memory (RAM), a mobile hard disk, a magnetic disk or an optical disk, and various media that can store program codes.

[0100] The above only describes the preferred embodiments of the present application. It should be noted that, for those skilled in the art, without departing from the principles of the present application, a number of improvements and refinements can be made, which should also be considered as the protection scope of the present application.

Claims

1. A method for determining a service path, characterized in that: include: Controlling a node in a communication network to send a simulation message to a neighboring node, and obtaining detection results of the simulation message sending and receiving process, wherein the detection results include a sending timestamp, a receiving timestamp, packet loss information, and traffic statistics of the simulation message; Determine a network quality matrix based on the detection results, wherein rows in the network quality matrix represent source nodes, columns represent destination nodes, and elements in the network quality matrix are routing performance indicators between nodes in corresponding rows and columns; Determining, based on the network quality matrix and the candidate nodes involved in the candidate service path, a metric value corresponding to the candidate service path in the communication network, wherein the metric value is used to reflect the selection priority of the candidate service path, and the larger the metric value, the higher the selection priority; The candidate service path with the highest metric value among the candidate service paths is determined as a primary service path, and the candidate service path with the second highest metric value is determined as a backup service path.

2. The service path determination method according to claim 1, wherein: Determining, according to the network quality matrix and the candidate nodes involved in the candidate service path, a metric value corresponding to the candidate service path in the communication network includes: Determining connection relationships between the candidate nodes, and determining all candidate node pairs in the candidate service path based on the connection relationships, wherein the candidate node pairs include two adjacent candidate nodes, and the same candidate node is in one or two candidate node pairs; Determine the elements corresponding to the candidate node pairs; Determining a node metric value corresponding to the connection relationship based on elements corresponding to the candidate node pairs; The sum of all the node metrics is determined to be the metric of the candidate service path.

3. The service path determination method according to claim 2, wherein: Determining the node metric value corresponding to the candidate node pair according to the element corresponding to the candidate node pair includes: Normalizing each type of routing performance indicator included in the network quality matrix; Determining normalized routing performance indicator values ​​of various types contained in the elements corresponding to the candidate node pairs; The node metric value is determined based on the normalized various routing performance indicator values.

4. The service path determination method according to claim 3, characterized in that: Determining the node metric value based on the normalized performance indicator values ​​includes: Determine the preset business type; Determine the weight corresponding to each routing performance indicator type based on the service type; The normalized various routing performance indicator values ​​are weighted and summed according to the weights to obtain the node metric value.

5. The service path determination method according to claim 1, wherein: The routing performance indicator includes at least one of the following: transmission delay, transmission jitter information, packet loss rate and bandwidth utilization.

6. The service path determination method according to claim 5, characterized in that: The routing performance indicator is determined in the following manner: Determining the transmission delay according to a sending timestamp and a receiving timestamp of the simulation message; Determining the transmission jitter information according to transmission delays corresponding to a plurality of consecutive simulation messages; The bandwidth utilization is determined according to the traffic statistics and bandwidth information between nodes in the communication network.

7. The service path determination method according to claim 1, wherein: Before controlling a node in the communication network to send a simulation message to a neighboring node, the service path determination method further includes: Determining device information of each device in the communication network, the device information including at least one of the following: device type, port identifier, network address, the communication network including a secure resource pool network; Determining a link topology diagram of the communication network based on the device information; Nodes in the communication network are determined according to the link topology graph.

8. The service path determination method according to claim 1, wherein: The service path determination method further includes: After the detection result changes, updating the network quality matrix according to the changed detection result; Updating the metric value of the candidate service path according to the updated network quality matrix; The candidate service path with the largest updated metric value is determined as the primary path, and the candidate service path with the second largest updated metric value is determined as the backup service path.

9. A service path determination device, characterized in that: include: A message processing module, configured to control a node in the communication network to send a simulation message to a neighboring node, and obtain detection results of the simulation message sending and receiving process, wherein the detection results include the sending timestamp, receiving timestamp, packet loss information, and traffic statistics of the simulation message; a network controller module, configured to determine a network quality matrix based on the detection results, wherein rows in the network quality matrix represent source nodes, columns represent destination nodes, and elements in the network quality matrix are routing performance indicators between nodes in corresponding rows and columns; and determine a metric value corresponding to a candidate service path in the communication network based on the network quality matrix and candidate nodes involved in the candidate service path, wherein the metric value is used to reflect the selection priority of the candidate service path, and the larger the metric value, the higher the selection priority; The service orchestration module is configured to determine, from among the candidate service paths, the candidate service path with the highest metric value as the primary service path, and determine the candidate service path with the second highest metric value as the backup service path.

10. A non-volatile storage medium, characterized in that: The non-volatile storage medium stores a program, wherein when the program is running, the device where the non-volatile storage medium is located is controlled to execute the service path determination method according to any one of claims 1 to 8.

11. An electronic device, characterized in that: include: A memory and a processor, wherein the processor is configured to run a program stored in the memory, wherein the program executes the service path determination method according to any one of claims 1 to 8 when running.

12. A computer program product, characterized in that The method comprises a computer program, which implements the service path determination method according to any one of claims 1 to 8 when executed by a processor.

Images