A data signal transmission method and system based on network switch

Abstract

The present invention relates to the field of communication technology, and discloses a data signal transmission method based on a network switch, including: establishing a network flow table rule of a target network switch; deploying a virtualization component and its virtual network function in a server corresponding to the target network switch, defining a high-speed Ethernet port of the target network switch, and establishing an aggregation link of the target network switch; using the virtualization component to obtain a data frame of a sending device corresponding to the target network switch, and analyzing the safety factor of the data frame through the virtual network function, analyzing the fragmentation value of the data frame, and determining the target data frame in the data frame; analyzing the forwarding behavior of the target data frame, executing the forwarding of the target data frame, obtaining the forwarding traffic, and analyzing the forwarding anomaly of the target data frame using an AI forwarding traffic algorithm; using an SDN controller to define the forwarding optimization parameters of the target data frame, and executing the efficient transmission of the target data frame based on the forwarding optimization parameters. The present invention can improve the efficiency of data signal transmission.

Description

Technical Field

[0001] The invention relates to a data signal transmission method and system based on a network switch, belonging to the technical field of communications. Background Art

[0002] Data signal transmission refers to the process of transmitting data in the form of signals between different devices or network nodes. Data signal transmission is the basis of modern communication technology. It makes it possible to transmit information quickly and accurately and is an indispensable part of modern society.

[0003] Traditional data signal transmission methods usually rely on fixed hardware devices and preset network protocols, and perform point-to-point direct transmission through physical media such as twisted pair or optical fiber. The control plane and forwarding plane are tightly coupled, resulting in complex network configuration and adjustment and poor flexibility. When faced with complex network environments and changing demands, it is difficult to respond quickly and process efficiently, resulting in poor data signal transmission effects. Summary of the invention

[0004] The present invention provides a data signal transmission method and system based on a network switch, the main purpose of which is to improve the efficiency of data signal transmission.

[0005] To achieve the above object, the present invention provides a data signal transmission method based on a network switch, comprising:

[0006] Determine application requirements of the network switch, wherein the application requirements include usage scenarios, data transmission requirements, number of users, and security requirements; based on the application requirements, define a network topology of the network switch; and perform physical deployment of the network switch according to the network topology to obtain a physically connected network switch;

[0007] Configuring the SDN controller of the physically connected network switch, configuring the SDN parameters of the physically connected network switch according to the SDN controller, obtaining the target network switch, and establishing a network flow table rule for the target network switch;

[0008] Deploy a virtualization component and its virtual network function in a server corresponding to the target network switch, define a high-speed Ethernet port of the target network switch, and establish an aggregation link of the target network switch according to the high-speed Ethernet port;

[0009] The virtualization component is used to obtain a data frame of a sending device corresponding to the target network switch, and a safety factor of the data frame is analyzed by the virtual network function. When the safety factor meets a preset safety threshold, a fragmentation value of the data frame is analyzed, and a target data frame in the data frame is determined based on the fragmentation value;

[0010] Based on the network flow table rules, the forwarding behavior of the target data frame is analyzed, and according to the forwarding behavior, the high-speed Ethernet port and the aggregated link, the forwarding of the target data frame is performed to obtain the forwarding traffic, and based on the forwarding traffic, the forwarding anomaly of the target data frame is analyzed by using a preset AI forwarding traffic algorithm, and through the forwarding anomaly, the forwarding optimization parameters of the target data frame are defined by using the SDN controller, and efficient transmission of the target data frame is performed based on the forwarding optimization parameters.

[0011] Optionally, defining the network topology of the network switch based on the application requirement includes:

[0012] Defining the network scale and peak flow of the network switch according to the number of users and transmission requirements in the application requirements;

[0013] Determining the scalability and redundancy of the network switch according to the security requirements;

[0014] Determine a network hierarchy of the network switch based on the network scale, the peak traffic, the scalability, and the redundancy, wherein the network hierarchy includes a core layer, a convergence layer, and an access layer;

[0015] Defining the topology type, physical layout and virtual layout of the network hierarchy;

[0016] The network topology structure of the network switch is established by combining the topology type, physical layout and virtual layout.

[0017] Optionally, defining the network scale and peak flow of the network switch according to the number of users and transmission requirements in the application requirements includes:

[0018] Based on the transmission demand, defining the activity type and average bandwidth of the network switch;

[0019] Determining the network scale of the network switch according to the number of users and the average bandwidth;

[0020] Analyze the peak online user ratio of the network switch;

[0021] Calculate an activity type coefficient and a concurrent activity coefficient of the activity type;

[0022] Based on the number of users, the peak user online ratio, the average bandwidth, the activity type coefficient, and the concurrent activity coefficient, the peak flow of the network switch is calculated using the following formula:

[0023] f=(U×P_U×B_avg×C_app×C_concurrent×C_peak)+σ;

[0024] Among them, f represents the peak flow of the network switch, U represents the number of users, P_U represents the peak user online ratio, B_avg represents the average bandwidth, C_app represents the activity type coefficient, C_concurrent represents the concurrent activity coefficient, C_peak represents the peak flow coefficient, and σ represents the system flow.

[0025] Optionally, configuring the SDN parameters of the physically connected network switch according to the SDN controller to obtain the target network switch includes:

[0026] Define a model query command for the physically connected network switch;

[0027] According to the model query command, query the switch model of the physically connected network switch;

[0028] Calculate the SDN compatibility coefficient of the switch model;

[0029] When the SDN compatibility coefficient meets the preset compatibility coefficient standard, determining the parameters to be configured of the physically connected network switch, wherein the parameters to be configured include a management IP address, a default gateway, and a VLAN;

[0030] According to the parameters to be configured, the SDN parameters of the physically connected network switch are configured to obtain a target network switch.

[0031] Optionally, establishing the aggregation link of the target network switch according to the high-speed Ethernet port includes:

[0032] defining aggregation requirements of the target network switch;

[0033] Determining an aggregated high-speed Ethernet port of the high-speed Ethernet port according to the aggregation requirement;

[0034] Identifying a system view of the target network switch;

[0035] Based on the system view, creating an aggregation group of the aggregated high-speed Ethernet ports;

[0036] configuring aggregation group parameters of the aggregation group;

[0037] Based on the aggregation group parameters, determining an initial aggregation link of the target network switch;

[0038] The link state of the initial aggregated link is analyzed, and when the link state meets a preset link state standard, the initial aggregated link is used as the aggregated link of the target network switch.

[0039] Optionally, the analyzing the link status of the initial aggregated link includes:

[0040] Collecting aggregate data of the initial aggregate link;

[0041] Analyzing the link utilization, link error rate, link delay and link redundancy coefficient of the initial aggregated link according to the aggregated data;

[0042] Based on the link utilization, link error rate, link delay and link redundancy coefficient, the link status of the initial aggregated link is analyzed using the following formula:

[0043] l=α×l_lyl+β×(1-l_cwl)+γ×(1⁄l_yc)+ρ×l_ry;

[0044] Wherein, l represents the link status of the initial aggregated link, l_lyl represents the link utilization of the initial aggregated link, α represents the weight of the link utilization, l_cwl represents the link error rate of the initial aggregated link, β represents the weight of the link error rate, l_yc represents the link delay of the initial aggregated link, γ represents the weight of the link delay, l_ry represents the link redundancy coefficient of the initial aggregated link, and ρ represents the weight of the link redundancy coefficient.

[0045] Optionally, analyzing the safety factor of the data frame by using the virtual network function includes:

[0046] Analyzing the integrity of the data frame;

[0047] When the integrity meets a preset integrity threshold, establishing a risk behavior analysis model for the data frame;

[0048] identifying risk behaviors of the data frame based on the risk behavior analysis model;

[0049] defining a security impact indicator of the data frame;

[0050] Analyzing the correlation coefficient between the risk behavior and the security impact index by using the security association function corresponding to the virtual network function;

[0051] The safety factor of the data frame is determined according to the association coefficient.

[0052] Optionally, when the safety factor meets a preset safety threshold, analyzing the fragmentation value of the data frame includes:

[0053] When the safety factor meets a preset safety threshold, marking the header information of the data frame;

[0054] When judging that the data frame is a fragment according to the header information, calculating the fragment offset, fragment size and fragment identifier of the data frame;

[0055] Calculating an identifier consistency coefficient of the fragment identifier;

[0056] When the identifier consistency coefficient meets a preset consistency threshold, a fragment value of the data frame is calculated based on the fragment offset and the fragment size.

[0057] Optionally, the analyzing the forwarding anomaly of the target data frame based on the forwarding traffic using a preset AI forwarding traffic algorithm includes:

[0058] Preprocessing the forwarding traffic to obtain processed forwarding traffic;

[0059] Extracting forwarding abnormality features of the processed forwarding traffic;

[0060] Based on the forwarding abnormality feature, identifying the forwarding abnormality mode of the processing forwarding traffic;

[0061] The AI ​​forwarding traffic algorithm is used to calculate the anomaly score of the forwarding anomaly mode, wherein the AI ​​forwarding traffic algorithm:

[0062] D(Q)=∑_(i=1)^n▒〖τ_i y_i K(x_i,Q)+ω〗;

[0063] Where D(Q) represents the anomaly score of the forwarding anomaly pattern, τ_i represents the Lagrange multiplier, x_i represents the i-th training forwarding anomaly feature, Q represents the forwarding anomaly feature corresponding to the forwarding anomaly pattern, K(x_i,Q) represents the inner product of the i-th training forwarding anomaly feature and the forwarding anomaly feature, y_i represents the label of the i-th training forwarding anomaly feature, n represents the number of training forwarding anomaly features, and ω represents the bias term;

[0064] According to the abnormality score, it is determined that the forwarding abnormality of the target data frame is abnormal.

[0065] In order to solve the above problems, the present invention also provides a data signal transmission system based on a network switch, the system comprising:

[0066] A network switch connection module, used to determine application requirements of the network switch, wherein the application requirements include usage scenarios, data transmission requirements, number of users, and security requirements, define a network topology of the network switch based on the application requirements, and perform physical deployment of the network switch according to the network topology to obtain a physically connected network switch;

[0067] A network switch configuration module, configured to configure the SDN controller of the physically connected network switch, configure the SDN parameters of the physically connected network switch according to the SDN controller, obtain the target network switch, and establish the network flow table rules of the target network switch;

[0068] An aggregation link building module is used to deploy virtualization components and their virtual network functions in the server corresponding to the target network switch, define the high-speed Ethernet port of the target network switch, and establish an aggregation link of the target network switch according to the high-speed Ethernet port;

[0069] A data frame security analysis module, configured to obtain a data frame of a sending device corresponding to the target network switch by using the virtualization component, and analyze a security factor of the data frame by using the virtual network function, and when the security factor meets a preset security threshold, analyze a fragmentation value of the data frame, and determine a target data frame in the data frame based on the fragmentation value;

[0070] A data frame transmission module is used to analyze the forwarding behavior of the target data frame based on the network flow table rule, perform forwarding of the target data frame according to the forwarding behavior, the high-speed Ethernet port and the aggregated link, obtain forwarding traffic, analyze the forwarding anomaly of the target data frame based on the forwarding traffic using a preset AI forwarding traffic algorithm, define the forwarding optimization parameters of the target data frame using the SDN controller through the forwarding anomaly, and perform efficient transmission of the target data frame based on the forwarding optimization parameters.

[0071] In order to solve the above problem, the present invention further provides an electronic device, the electronic device comprising:

[0072] at least one processor; and,

[0073] a memory communicatively connected to the at least one processor; wherein,

[0074] The memory stores instructions that can be executed by the at least one processor, and the instructions are executed by the at least one processor to implement the above-mentioned data signal transmission method based on the network switch.

[0075] In order to solve the above problem, the present invention also provides a computer-readable storage medium, in which at least one instruction is stored. The at least one instruction is executed by a processor in an electronic device to implement the above-mentioned data signal transmission method based on a network switch.

[0076] Compared with the problems described in the background technology, firstly, by deploying virtualization components and their virtual network functions, we have improved the flexibility and scalability of network switches, defined high-speed Ethernet ports and established aggregated links, significantly improved data transmission rate and link reliability, and secondly, by using virtualization components and virtual network functions to analyze the safety factor of data frames, we have ensured the security of network switches during forwarding and effectively defended against potential network attacks. In addition, by analyzing the forwarding behavior of target data frames, combined with high-speed Ethernet ports and aggregated links, efficient forwarding of target data frames is achieved, network latency is reduced, and user experience is improved. A preset AI forwarding traffic algorithm is used to monitor forwarding traffic in real time, accurately identify forwarding anomalies, and define forwarding optimization parameters through an SDN controller, further optimizing the transmission efficiency of data frames. Therefore, the present invention can improve the efficiency of data signal transmission. BRIEF DESCRIPTION OF THE DRAWINGS

[0077] Figure 1 A schematic diagram of a flow chart of a data signal transmission method based on a network switch provided in one embodiment of the present invention;

[0078] Figure 2 A functional module diagram of a data signal transmission system based on a network switch provided by an embodiment of the present invention;

[0079] Figure 3 A schematic diagram of the structure of an electronic device of a data signal transmission system based on a network switch provided by an embodiment of the present invention;

[0080] The purpose, features and advantages of the present invention will be further described with reference to the accompanying drawings in conjunction with the embodiments. DETAILED DESCRIPTION

[0081] It should be understood that the specific embodiments described herein are only used to explain the present invention, and are not used to limit the present invention.

[0082] The embodiment of the present application provides a data signal transmission method based on a network switch. The execution subject of the data signal transmission method based on the network switch includes but is not limited to at least one of the electronic devices such as a server, a terminal, etc. that can be configured to execute the method provided by the embodiment of the present application. In other words, the data signal transmission method based on the network switch can be executed by software or hardware installed in a terminal device or a server device. The server includes but is not limited to: a single server, a server cluster, a cloud server or a cloud server cluster, etc. Example

[0083] Reference Figure 1 FIG. 1 is a flow chart of a data signal transmission method based on a network switch provided in an embodiment of the present invention. In this embodiment, the data signal transmission method based on a network switch includes:

[0084] S1. Determine application requirements of a network switch, wherein the application requirements include usage scenarios, data transmission requirements, number of users, and security requirements. Based on the application requirements, define a network topology of the network switch, and perform physical deployment of the network switch according to the network topology to obtain a physically connected network switch.

[0085] It should be explained that the usage scenario refers to the specific environment or application occasion where the network switch will be deployed, such as intranet, data center, cloud computing infrastructure, campus network, remote office environment and other scenarios; the data transmission requirement refers to the performance standards and service quality requirements that the network switch needs to meet when transmitting data, such as bandwidth requirements (such as 1Gbps, 10Gbps, 100Gbps, etc.), delay sensitivity, packet loss rate, jitter tolerance and other requirements; the number of users refers to the number of users or devices expected to use the network switch; the security requirement refers to the security standards that the network switch needs to meet in order to protect the network and data from unauthorized access and attacks.

[0086] Based on the application requirements, the present invention defines the network topology structure of the network switch and can define a network topology structure of the network switch that meets the specific application requirements. This structure will provide clear guidance for subsequent physical deployment and configuration.

[0087] In detail, the network topology structure of the network switch is defined based on the application requirements, including:

[0088] Defining the network scale and peak flow of the network switch according to the number of users and transmission requirements in the application requirements;

[0089] Determining the scalability and redundancy of the network switch according to the security requirements;

[0090] Determine a network hierarchy of the network switch based on the network scale, the peak traffic, the scalability, and the redundancy, wherein the network hierarchy includes a core layer, a convergence layer, and an access layer;

[0091] Defining the topology type, physical layout and virtual layout of the network hierarchy;

[0092] The network topology structure of the network switch is established by combining the topology type, physical layout and virtual layout.

[0093] Among them, the network scale refers to the number of devices, the number of users and the size of the service scope in the network, the peak traffic refers to the highest rate of data transmission in the network within a specific time period, the scalability refers to the ability of the network to accommodate more users and devices without affecting performance, the redundancy refers to the backup components or paths included in the network design, the core layer refers to the high-speed backbone part of the network, responsible for quickly forwarding large amounts of data, the aggregation layer refers to the bridge between the core layer and the access layer, responsible for aggregating data streams from the access layer, the access layer refers to the part of the network closest to the user device, responsible for connecting the user device to the network, the topology type refers to the physical or logical layout of network device connections, the physical layout refers to the actual location and connection method of network devices in physical space, the virtual layout refers to the logically defined network components and connections in a network virtualization environment, and the network topology structure refers to the overall layout of all devices, connections and paths in the network.

[0094] Furthermore, the network scale and peak flow of the network switch are defined according to the number of users and transmission requirements in the application requirements, including:

[0095] Based on the transmission demand, defining the activity type and average bandwidth of the network switch;

[0096] Determining the network scale of the network switch according to the number of users and the average bandwidth;

[0097] Analyze the peak online user ratio of the network switch;

[0098] Calculate an activity type coefficient and a concurrent activity coefficient of the activity type;

[0099] Based on the number of users, the peak user online ratio, the average bandwidth, the activity type coefficient, and the concurrent activity coefficient, the peak flow of the network switch is calculated using the following formula:

[0100] f=(U×P_U×B_avg×C_app×C_concurrent×C_peak)+σ;

[0101] Among them, f represents the peak flow of the network switch, U represents the number of users, P_U represents the peak user online ratio, B_avg represents the average bandwidth, C_app represents the activity type coefficient, C_concurrent represents the concurrent activity coefficient, C_peak represents the peak flow coefficient, and σ represents the system flow.

[0102] Among them, the activity type refers to the different types of network activities that network users may perform, such as web browsing, email, video conferencing, file transfer and other activities; the average bandwidth refers to the average bandwidth required for each activity type under normal operating conditions; the peak user online ratio refers to the expected proportion of users online at the same time during a specific time period of a day; the activity type coefficient refers to the coefficient used to adjust the average bandwidth to reflect the actual bandwidth demand of a specific activity type; the concurrent activity coefficient refers to the coefficient used to take into account the situation that users may perform multiple activities at the same time, thereby increasing the overall bandwidth demand; the peak traffic coefficient refers to the coefficient used to adjust the calculation result to reflect the uneven distribution of network traffic during peak hours; the system traffic refers to the traffic generated by the network switch to maintain normal operation, including network management, monitoring, backup and other traffic.

[0103] It should be explained that the physically connected network switch refers to a switch device that is actually connected to the network after the physical deployment is completed according to the network topology structure.

[0104] S2. Configure the SDN controller of the physically connected network switch, configure the SDN parameters of the physically connected network switch according to the SDN controller, obtain the target network switch, and establish a network flow table rule for the target network switch.

[0105] It should be explained that the SDN controller refers to the core component in the software defined network (SDN) architecture, which is responsible for managing and controlling network devices.

[0106] The present invention configures the SDN parameters of the physically connected network switch according to the SDN controller, and obtains the target network switch, which can ensure that the network switch can be accurately controlled in the subsequent data exchange tasks.

[0107] In detail, configuring the SDN parameters of the physically connected network switch according to the SDN controller to obtain the target network switch includes:

[0108] Define a model query command for the physically connected network switch;

[0109] According to the model query command, query the switch model of the physically connected network switch;

[0110] Calculate the SDN compatibility coefficient of the switch model;

[0111] When the SDN compatibility coefficient meets the preset compatibility coefficient standard, determining the parameters to be configured of the physically connected network switch, wherein the parameters to be configured include a management IP address, a default gateway, and a VLAN;

[0112] According to the parameters to be configured, the SDN parameters of the physically connected network switch are configured to obtain a target network switch.

[0113] The model query command refers to a specific command executed in the command line interface (CLI) of the network switch to obtain the model information of the switch. The switch model refers to the model information about the switch function, structure, etc. The SDN compatibility coefficient refers to the degree of support for the SDN protocol (such as OpenFlow) of the switch. The compatibility coefficient standard refers to a threshold used to determine whether the SDN compatibility coefficient of the switch is high enough. The management IP address refers to the IP address of the switch for remote management. The default gateway refers to the default router address of the switch for accessing the external network. The VLAN refers to the virtual local area network configuration used for network segmentation. The target network switch refers to a physically connected network switch that is ready to run in the SDN environment after the above configuration steps.

[0114] Optionally, the calculation of the SDN compatibility coefficient of the switch model may be performed through a comprehensive score of factors such as the switch's hardware capabilities, supported OpenFlow versions, and a maximum number of flow table entries.

[0115] Optionally, the present invention establishes a network flow table rule of the target network switch to ensure the correct forwarding and processing of data packets in the network. The network flow table rule refers to a series of instructions defined in a network switch (especially an OpenFlow switch in a software-defined network SDN), which instructs the switch on how to process data packets passing through the network. Each flow table rule contains a set of conditions and one or more actions. When the data packet meets these conditions, the switch will perform the corresponding action. The network flow table rule includes a matching field, priority, action, instruction, timeout, and cookie.

[0116] S3. Deploy a virtualization component and its virtual network function in a server corresponding to the target network switch, define a high-speed Ethernet port of the target network switch, and establish an aggregation link of the target network switch based on the high-speed Ethernet port.

[0117] It should be explained that the virtualization components refer to software or hardware facilities that can create and run virtual machines (VMs) or containers on physical servers to achieve resource abstraction and management, and the virtual network functions refer to network services traditionally implemented by dedicated hardware.

[0118] The present invention defines the high-speed Ethernet port of the target network switch, and establishes the aggregation link of the target network switch according to the high-speed Ethernet port, so as to improve the performance and reliability of the network. The high-speed Ethernet port refers to a physical interface on the network switch that supports high-speed data transmission, and they can transmit data at a higher rate than traditional Ethernet ports.

[0119] In detail, establishing the aggregation link of the target network switch according to the high-speed Ethernet port includes:

[0120] defining aggregation requirements of the target network switch;

[0121] Determining an aggregated high-speed Ethernet port of the high-speed Ethernet port according to the aggregation requirement;

[0122] Identifying a system view of the target network switch;

[0123] Based on the system view, creating an aggregation group of the aggregated high-speed Ethernet ports;

[0124] configuring aggregation group parameters of the aggregation group;

[0125] Based on the aggregation group parameters, determining an initial aggregation link of the target network switch;

[0126] The link state of the initial aggregated link is analyzed, and when the link state meets a preset link state standard, the initial aggregated link is used as the aggregated link of the target network switch.

[0127] Among them, the aggregation demand refers to the specific requirements of the network for bandwidth, redundancy, reliability and performance, the aggregated high-speed Ethernet port refers to a group of physical high-speed Ethernet ports selected to realize the aggregated link, the system view refers to the global configuration mode of the network switch, the aggregation group refers to a plurality of physical ports, which are regarded as a single link inside the switch, the aggregation group parameters refer to specific options set when configuring the aggregation group, including load balancing mode, aggregation protocol, link monitoring, etc., the initial aggregation link refers to the aggregation group just configured, the link state refers to the operating state of each physical port and the entire aggregation group in the aggregation link, including whether it is online, bandwidth utilization, error count, etc., the link state standard refers to the performance and reliability set to ensure that the aggregated link meets the network requirements, and the aggregated link refers to a logical link that has been configured, verified and meets the link state standard. It is composed of multiple physical high-speed Ethernet ports and can provide higher bandwidth and redundancy.

[0128] In detail, the analyzing the link status of the initial aggregated link includes:

[0129] Collecting aggregate data of the initial aggregate link;

[0130] Analyzing the link utilization, link error rate, link delay and link redundancy coefficient of the initial aggregated link according to the aggregated data;

[0131] Based on the link utilization, link error rate, link delay and link redundancy coefficient, the link status of the initial aggregated link is analyzed using the following formula:

[0132] l=α×l_lyl+β×(1-l_cwl)+γ×(1⁄l_yc)+ρ×l_ry;

[0133] Wherein, l represents the link status of the initial aggregated link, l_lyl represents the link utilization of the initial aggregated link, α represents the weight of the link utilization, l_cwl represents the link error rate of the initial aggregated link, β represents the weight of the link error rate, l_yc represents the link delay of the initial aggregated link, γ represents the weight of the link delay, l_ry represents the link redundancy coefficient of the initial aggregated link, and ρ represents the weight of the link redundancy coefficient.

[0134] Among them, the aggregation data refers to a series of performance indicator data collected from the initial aggregation link, including link utilization, error rate, delay and redundancy coefficient, etc. The link utilization refers to the ratio of the amount of data actually transmitted on the link to the total bandwidth of the link within a certain period of time, the link error rate refers to the ratio of the number of data packets with errors on the link to the total number of transmitted data packets within a certain period of time, the link delay refers to the time required for a data packet to be transmitted from the source to the destination, the link redundancy coefficient refers to the additional link capacity reserved in the network design, which is used to measure the fault tolerance of the network in the event of a link failure, and the weight refers to the importance coefficient assigned to different performance indicators (link utilization, link error rate, link delay and link redundancy coefficient) when calculating the link status.

[0135] S4. Use the virtualization component to obtain the data frame of the sending device corresponding to the target network switch, and analyze the safety factor of the data frame through the virtual network function. When the safety factor meets the preset safety threshold, analyze the fragmentation value of the data frame, and determine the target data frame in the data frame based on the fragmentation value.

[0136] The present invention utilizes the virtualization component to obtain the data frame of the sending device corresponding to the target network switch, and analyzes the safety factor of the data frame through the virtual network function. The virtualization component and VNF can be used to obtain and analyze the safety factor of the data frame, thereby improving the security of the network.

[0137] In detail, analyzing the safety factor of the data frame by the virtual network function includes:

[0138] Analyzing the integrity of the data frame;

[0139] When the integrity meets a preset integrity threshold, establishing a risk behavior analysis model for the data frame;

[0140] identifying risk behaviors of the data frame based on the risk behavior analysis model;

[0141] defining a security impact indicator of the data frame;

[0142] Analyzing the correlation coefficient between the risk behavior and the security impact index by using the security association function corresponding to the virtual network function;

[0143] The safety factor of the data frame is determined according to the association coefficient.

[0144] Among them, the integrity refers to the state in which data has not been tampered with or damaged during transmission, the integrity threshold refers to the threshold used to determine whether the integrity of the data frame is acceptable, the risk behavior analysis model refers to a model used to identify and evaluate potential risk behaviors in data frames, the risk behavior refers to characteristics or behaviors in data frames that may indicate security threats or abnormal activities, the security impact index refers to a metric used to measure the impact that risk behaviors in data frames may have on network or system security, the virtual network function refers to a software entity that implements network services in a virtualized environment, the security association function refers to a correlation coefficient used to analyze risk behaviors and security impact indicators, the correlation coefficient refers to the strength of the correlation between risk behaviors and security impact indicators, and the security factor refers to a comprehensive indicator used to quantify the overall security status of data frames.

[0145] Optionally, the risk behavior analysis model for establishing the data frame may be obtained by training a neural network using historical data frame behavior data.

[0146] When the safety factor meets the preset safety threshold, the fragmentation value of the data frame can be analyzed effectively and appropriate measures can be taken to maintain the health and safety of the network.

[0147] In detail, when the safety factor meets a preset safety threshold, analyzing the fragmentation value of the data frame includes:

[0148] When the safety factor meets a preset safety threshold, marking the header information of the data frame;

[0149] When judging that the data frame is a fragment according to the header information, calculating the fragment offset, fragment size and fragment identifier of the data frame;

[0150] Calculating an identifier consistency coefficient of the fragment identifier;

[0151] When the identifier consistency coefficient meets a preset consistency threshold, a fragment value of the data frame is calculated based on the fragment offset and the fragment size.

[0152] Among them, the security threshold refers to a pre-set value used to determine whether the data frame meets specific security requirements, and the header information refers to the control information contained in the beginning of the data frame. In the network protocol, the header information usually includes the source address, destination address, protocol type, data frame length, fragment offset, fragment identifier, etc. The fragment offset is a value that indicates the position of the current data frame in the original unfragmented data packet, the fragment size refers to the size of the current data frame, the fragment identifier is a unique value used to identify which fragments belong to the same original data packet, the identifier consistency coefficient refers to a coefficient used to measure the degree of match between the fragment identifier of the data frame and the expected or known identifier, the consistency threshold is a pre-set value used to determine whether the identifier consistency coefficient is high enough so that the fragment identifier can be considered to be matched, and the fragment value refers to a value calculated based on the fragment offset and fragment size, which represents the specific position and size of the fragment in the original data packet.

[0153] Optionally, the calculation of the identifier consistency coefficient of the fragment identifier may be analyzed by a matching function.

[0154] It should be explained that the target data frame refers to a complete data unit that the receiver expects to recover or extract from a series of fragments during network communication. In detail, the target data frame can be reassembled by sequentially splicing fragments with the same fragment identifier.

[0155] S5. Based on the network flow table rules, the forwarding behavior of the target data frame is analyzed. According to the forwarding behavior, the high-speed Ethernet port and the aggregated link, the target data frame is forwarded to obtain forwarding traffic. Based on the forwarding traffic, the forwarding anomaly of the target data frame is analyzed using a preset AI forwarding traffic algorithm. Through the forwarding anomaly, the forwarding optimization parameters of the target data frame are defined using the SDN controller. Based on the forwarding optimization parameters, efficient transmission of the target data frame is performed.

[0156] The present invention is based on the network flow table rules, and the forwarding behavior of the target data frame can be analyzed and determined according to the predefined flow table rules, so as to ensure that the data frame is correctly and efficiently transmitted in the network. The forwarding behavior refers to the specific operation taken by the network device (such as a switch, a router) on the data frame according to the flow table rules, including forwarding, discarding, modifying, redirecting, copying and sending to the controller.

[0157] It should be explained that the forwarded traffic refers to the data involved that is processed by a network device (such as a switch or router) and finally sent to the destination or next-hop network device according to the flow table rules and device configuration.

[0158] Based on the forwarding traffic, the present invention uses a preset AI forwarding traffic algorithm to analyze the forwarding anomaly of the target data frame, which can effectively detect and analyze abnormal traffic in the network, and help network administrators take timely measures to protect the security and stability of the network.

[0159] In detail, the forwarding anomaly of the target data frame is analyzed based on the forwarding traffic using a preset AI forwarding traffic algorithm, including:

[0160] Preprocessing the forwarding traffic to obtain processed forwarding traffic;

[0161] Extracting forwarding abnormality features of the processed forwarding traffic;

[0162] Based on the forwarding abnormality feature, identifying the forwarding abnormality mode of the processing forwarding traffic;

[0163] The AI ​​forwarding traffic algorithm is used to calculate the anomaly score of the forwarding anomaly mode, wherein the AI ​​forwarding traffic algorithm:

[0164] D(Q)=∑_(i=1)^n▒〖τ_i y_i K(x_i,Q)+ω〗;

[0165] Where D(Q) represents the anomaly score of the forwarding anomaly pattern, τ_i represents the Lagrange multiplier, x_i represents the i-th training forwarding anomaly feature, Q represents the forwarding anomaly feature corresponding to the forwarding anomaly pattern, K(x_i,Q) represents the inner product of the i-th training forwarding anomaly feature and the forwarding anomaly feature, y_i represents the label of the i-th training forwarding anomaly feature, n represents the number of training forwarding anomaly features, and ω represents the bias term;

[0166] According to the abnormality score, it is determined that the forwarding abnormality of the target data frame is abnormal.

[0167] The processed forwarding traffic is preprocessed network traffic data. Preprocessing may include steps such as cleaning data, normalization, noise removal, feature extraction, etc. The forwarding abnormality feature is a data point extracted from the processed forwarding traffic that can reflect the abnormal characteristics of the traffic. The forwarding abnormality pattern refers to a specific combination of abnormal features identified in the forwarding traffic, which indicates that the traffic may have abnormal behavior. For example, an abnormal pattern may be sending a large amount of data during non-working hours. The AI ​​forwarding traffic algorithm refers to an algorithm that uses artificial intelligence technology (such as machine learning or deep learning models) to analyze and identify forwarding traffic anomalies. The anomaly score refers to the possibility of representing the abnormal pattern of forwarding traffic. The Lagrange multiplier refers to the variable used to solve the constrained optimization problem. The trained forwarding anomaly feature is used to train the abnormal feature of the AI ​​model during the training phase. The forwarding anomaly feature refers to the abnormal feature vector extracted from the forwarding traffic to be detected during the testing or actual application phase. The inner product refers to the dot product between the training forwarding anomaly feature and the forwarding anomaly feature, which is used to measure the similarity between them. The label refers to the classification label corresponding to the training forwarding anomaly feature, which is usually 1 (abnormal) or -1 (normal). The bias term refers to a constant used to adjust the model output. The forwarding anomaly refers to the situation in the network traffic that does not conform to the normal behavior pattern, which may be caused by a network attack, equipment failure or other abnormal events.

[0168] The present invention can effectively respond to abnormal situations in the network by using the SDN controller to define the forwarding optimization parameters of the target data frame through the forwarding anomaly, thereby ensuring the stable operation and efficient performance of the network.

[0169] The forwarding optimization parameters include forwarding rules, path selection, bandwidth allocation, priority setting, queue management, traffic shaping, load balancing and congestion control.

[0170] Finally, the present invention can improve the transmission effect of data signals by executing efficient transmission of the target data frame based on the forwarding optimization parameters.

[0171] Compared with the problems described in the background technology, firstly, by deploying virtualization components and their virtual network functions, we have improved the flexibility and scalability of network switches, defined high-speed Ethernet ports and established aggregated links, significantly improved data transmission rate and link reliability, and secondly, by using virtualization components and virtual network functions to analyze the safety factor of data frames, we have ensured the security of network switches during forwarding and effectively defended against potential network attacks. In addition, by analyzing the forwarding behavior of target data frames, combined with high-speed Ethernet ports and aggregated links, efficient forwarding of target data frames is achieved, network latency is reduced, and user experience is improved. A preset AI forwarding traffic algorithm is used to monitor forwarding traffic in real time, accurately identify forwarding anomalies, and define forwarding optimization parameters through an SDN controller, further optimizing the transmission efficiency of data frames. Therefore, the present invention can improve the efficiency of data signal transmission. Example

[0172] like Figure 2 , which is a functional module diagram of a data signal transmission system based on a network switch provided by an embodiment of the present invention.

[0173] The data signal transmission system 200 based on the network switch of the present invention can be installed in an electronic device. According to the functions to be implemented, the data signal transmission system 200 based on the network switch can include a network switch connection module 201, a network switch configuration module 202, an aggregation link construction module 203, a data frame security analysis module 204 and a data frame transmission module 205. The module of the present invention can also be called a unit, which refers to a series of computer program segments that can be executed by an electronic device processor and can complete fixed functions, which are stored in the memory of the electronic device.

[0174] In this embodiment, the functions of each module / unit are as follows:

[0175] The network switch connection module 201 is used to determine the application requirements of the network switch, wherein the application requirements include usage scenarios, data transmission requirements, number of users, and security requirements, define the network topology of the network switch based on the application requirements, and perform physical deployment of the network switch according to the network topology to obtain a physically connected network switch;

[0176] The network switch configuration module 202 is used to configure the SDN controller of the physically connected network switch, configure the SDN parameters of the physically connected network switch according to the SDN controller, obtain the target network switch, and establish the network flow table rules of the target network switch;

[0177] The aggregated link building module 203 is used to deploy virtualization components and their virtual network functions in the server corresponding to the target network switch, define the high-speed Ethernet port of the target network switch, and establish an aggregated link of the target network switch according to the high-speed Ethernet port;

[0178] The data frame security analysis module 204 is used to obtain the data frame of the sending device corresponding to the target network switch by using the virtualization component, and analyze the security factor of the data frame through the virtual network function, and when the security factor meets the preset security threshold, analyze the fragmentation value of the data frame, and determine the target data frame in the data frame based on the fragmentation value;

[0179] The data frame transmission module 205 is used to analyze the forwarding behavior of the target data frame based on the network flow table rule, perform forwarding of the target data frame according to the forwarding behavior, the high-speed Ethernet port and the aggregated link, obtain forwarding traffic, analyze the forwarding anomaly of the target data frame based on the forwarding traffic using a preset AI forwarding traffic algorithm, define the forwarding optimization parameters of the target data frame using the SDN controller through the forwarding anomaly, and perform efficient transmission of the target data frame based on the forwarding optimization parameters.

[0180] In detail, each module described in the data signal transmission system 200 based on the network switch described in the embodiment of the present invention adopts the same technical means as the data signal transmission method based on the network switch described in the accompanying drawings when used, and can produce the same technical effects, which will not be repeated here.

[0181] An embodiment of the present invention provides an electronic device for implementing a data signal transmission method based on a network switch.

[0182] See also Figure 3 As shown, the electronic device may include a processor 30, a memory 31, a communication bus 32 and a communication interface 33, and may also include a computer program stored in the memory 31 and executable on the processor 30, such as a data signal transmission method program based on a network switch.

[0183] In some embodiments, the processor may be composed of an integrated circuit, for example, a single packaged integrated circuit, or a plurality of packaged integrated circuits with the same or different functions, including one or more central processing units (CPUs), microprocessors, digital processing chips, graphics processors, and a combination of various control chips, etc. The processor is the control core (Control Unit) of the electronic device, and uses various interfaces and lines to connect various components of the entire electronic device, and executes various functions of the electronic device and processes data by running or executing programs or modules stored in the memory (for example, executing data signal transmission programs based on network switches, etc.), and calling data stored in the memory.

[0184] The memory includes at least one type of readable storage medium, and the readable storage medium includes a flash memory, a mobile hard disk, a multimedia card, a card-type memory (for example, SD or DX memory, etc.), a magnetic memory, a disk, an optical disk, etc. In some embodiments, the memory may be an internal storage unit of an electronic device, such as a mobile hard disk of the electronic device. In other embodiments, the memory may also be an external storage device of an electronic device, such as a plug-in mobile hard disk, a smart memory card (Smart Media Card, SMC), a secure digital (Secure Digital, SD) card, a flash card (Flash Card), etc. equipped on the electronic device. Further, the memory may also include both an internal storage unit of the electronic device and an external storage device. The memory may not only be used to store application software and various types of data installed in the electronic device, such as codes of a data signal transmission program based on a network switch, but may also be used to temporarily store data that has been output or is to be output.

[0185] The communication bus may be a Peripheral Component Interconnect (PCI) bus or an Extended Industry Standard Architecture (EISA) bus, etc. The bus may be divided into an address bus, a data bus, a control bus, etc. The bus is configured to realize connection and communication between the memory and at least one processor, etc.

[0186] The communication interface is used for communication between the above-mentioned electronic device and other devices, including a network interface and a user interface. Optionally, the network interface may include a wired interface and / or a wireless interface (such as a WI-FI interface, a Bluetooth interface, etc.), which is generally used to establish a communication connection between the electronic device and other electronic devices. The user interface may be a display (Display), an input unit (such as a keyboard (Keyboard)), and optionally, the user interface may also be a standard wired interface, a wireless interface. Optionally, in some embodiments, the display may be an LED display, a liquid crystal display, a touch-sensitive liquid crystal display, and an OLED (Organic Light-Emitting Diode, organic light-emitting diode) touch device, etc. Among them, the display may also be appropriately referred to as a display screen or a display unit, which is used to display information processed in the electronic device and to display a visual user interface.

[0187] For example, although not shown, the electronic device may also include a power source (such as a battery) for supplying power to various components. Preferably, the power source may be logically connected to the at least one processor through a power management system, so that the power management system can realize functions such as charging management, discharging management, and power consumption management. The power source may also include any components such as one or more DC or AC power sources, recharging systems, power failure detection circuits, power converters or inverters, and power status indicators. The electronic device may also include a variety of sensors, Bluetooth modules, Wi-Fi modules, etc., which will not be repeated here.

[0188] It should be understood that the embodiment is for illustration only and the scope of the patent application is not limited to this structure.

[0189] The data signal transmission program based on the network switch stored in the memory of the electronic device is a combination of multiple instructions, and when running in the processor, it can achieve:

[0190] Determine application requirements of the network switch, wherein the application requirements include usage scenarios, data transmission requirements, number of users, and security requirements; based on the application requirements, define a network topology of the network switch; and perform physical deployment of the network switch according to the network topology to obtain a physically connected network switch;

[0191] Configuring the SDN controller of the physically connected network switch, configuring the SDN parameters of the physically connected network switch according to the SDN controller, obtaining the target network switch, and establishing a network flow table rule for the target network switch;

[0192] Deploy a virtualization component and its virtual network function in a server corresponding to the target network switch, define a high-speed Ethernet port of the target network switch, and establish an aggregation link of the target network switch according to the high-speed Ethernet port;

[0193] The virtualization component is used to obtain a data frame of a sending device corresponding to the target network switch, and a safety factor of the data frame is analyzed by the virtual network function. When the safety factor meets a preset safety threshold, a fragmentation value of the data frame is analyzed, and a target data frame in the data frame is determined based on the fragmentation value;

[0194] Based on the network flow table rules, the forwarding behavior of the target data frame is analyzed, and according to the forwarding behavior, the high-speed Ethernet port and the aggregated link, the forwarding of the target data frame is performed to obtain the forwarding traffic, and based on the forwarding traffic, the forwarding anomaly of the target data frame is analyzed by using a preset AI forwarding traffic algorithm, and through the forwarding anomaly, the forwarding optimization parameters of the target data frame are defined by using the SDN controller, and efficient transmission of the target data frame is performed based on the forwarding optimization parameters.

[0195] Specifically, the specific implementation method of the processor for the above instructions can refer to the description of the relevant steps in the corresponding embodiment of the accompanying drawings, which will not be repeated here.

[0196] Furthermore, if the module / unit integrated in the electronic device is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. The computer-readable storage medium can be volatile or non-volatile. For example, the computer-readable medium can include: any entity or system that can carry the computer program code, a recording medium, a USB flash drive, a mobile hard disk, a magnetic disk, an optical disk, a computer memory, and a read-only memory (ROM).

[0197] The present invention further provides a computer-readable storage medium, wherein the computer-readable storage medium stores a computer program, and when the computer program is executed by a processor of an electronic device, the computer program can implement:

[0198] Determine application requirements of the network switch, wherein the application requirements include usage scenarios, data transmission requirements, number of users, and security requirements; based on the application requirements, define a network topology of the network switch; and perform physical deployment of the network switch according to the network topology to obtain a physically connected network switch;

[0199] Configuring the SDN controller of the physically connected network switch, configuring the SDN parameters of the physically connected network switch according to the SDN controller, obtaining the target network switch, and establishing a network flow table rule for the target network switch;

[0200] Deploy a virtualization component and its virtual network function in a server corresponding to the target network switch, define a high-speed Ethernet port of the target network switch, and establish an aggregation link of the target network switch according to the high-speed Ethernet port;

[0201] The virtualization component is used to obtain a data frame of a sending device corresponding to the target network switch, and a safety factor of the data frame is analyzed by the virtual network function. When the safety factor meets a preset safety threshold, a fragmentation value of the data frame is analyzed, and a target data frame in the data frame is determined based on the fragmentation value;

[0202] Based on the network flow table rules, the forwarding behavior of the target data frame is analyzed, and according to the forwarding behavior, the high-speed Ethernet port and the aggregated link, the forwarding of the target data frame is performed to obtain the forwarding traffic, and based on the forwarding traffic, the forwarding anomaly of the target data frame is analyzed by using a preset AI forwarding traffic algorithm, and through the forwarding anomaly, the forwarding optimization parameters of the target data frame are defined by using the SDN controller, and efficient transmission of the target data frame is performed based on the forwarding optimization parameters.

[0203] In the several embodiments provided by the present invention, it should be understood that the disclosed devices, systems and methods can be implemented in other ways. For example, the system embodiments described above are only schematic, for example, the division of the modules is only a logical function division, and there may be other division methods in actual implementation.

[0204] The modules described as separate components may or may not be physically separated, and the components shown as modules may or may not be physical units, that is, they may be located in one place or distributed on multiple network units. Some or all of the modules may be selected according to actual needs to achieve the purpose of the solution of this embodiment.

[0205] In addition, each functional module in each embodiment of the present invention may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit. The above-mentioned integrated unit may be implemented in the form of hardware or in the form of hardware plus software functional modules.

[0206] It is obvious to those skilled in the art that the present invention is not limited to the details of the above exemplary embodiments, and that the present invention can be implemented in other specific forms without departing from the spirit or essential characteristics of the present invention.

[0207] Therefore, no matter from which point of view, the embodiments should be regarded as illustrative and non-restrictive, and the scope of the present invention is limited by the appended claims rather than the above description, so it is intended that all changes falling within the meaning and scope of the equivalent elements of the claims are included in the present invention. Any attached figure mark in the claims should not be regarded as limiting the claims involved.

[0208] The embodiments of the present application can acquire and process relevant data based on artificial intelligence technology. Artificial Intelligence (AI) is the theory, method, technology and application system that uses digital computers or machines controlled by digital computers to simulate, extend and expand human intelligence, perceive the environment, acquire knowledge and use knowledge to obtain the best results.

[0209] In addition, it is clear that the word "comprising" does not exclude other units or steps, and the singular does not exclude the plural. Multiple units or systems stated in a system claim can also be implemented by one unit or system through software or hardware. The words first, second, etc. are used to indicate names, and do not indicate any particular order.

Claims

1. A data signal transmission method based on a network switch, characterized in that: The method comprises: Determine application requirements of the network switch, wherein the application requirements include usage scenarios, data transmission requirements, number of users, and security requirements; based on the application requirements, define a network topology of the network switch; and perform physical deployment of the network switch according to the network topology to obtain a physically connected network switch; Configuring the SDN controller of the physically connected network switch, configuring the SDN parameters of the physically connected network switch according to the SDN controller, obtaining the target network switch, and establishing a network flow table rule for the target network switch; Deploy a virtualization component and its virtual network function in a server corresponding to the target network switch, define a high-speed Ethernet port of the target network switch, and establish an aggregation link of the target network switch according to the high-speed Ethernet port; The virtualization component is used to obtain a data frame of a sending device corresponding to the target network switch, and a safety factor of the data frame is analyzed by the virtual network function. When the safety factor meets a preset safety threshold, a fragmentation value of the data frame is analyzed, and a target data frame in the data frame is determined based on the fragmentation value; Based on the network flow table rules, the forwarding behavior of the target data frame is analyzed, and according to the forwarding behavior, the high-speed Ethernet port and the aggregated link, the forwarding of the target data frame is performed to obtain the forwarding traffic, and based on the forwarding traffic, the forwarding anomaly of the target data frame is analyzed by using a preset AI forwarding traffic algorithm, and through the forwarding anomaly, the forwarding optimization parameters of the target data frame are defined by using the SDN controller, and efficient transmission of the target data frame is performed based on the forwarding optimization parameters.

2. The data signal transmission method based on a network switch according to claim 1, characterized in that: The defining the network topology of the network switch based on the application requirements includes: Defining the network scale and peak flow of the network switch according to the number of users and transmission requirements in the application requirements; Determining the scalability and redundancy of the network switch according to the security requirements; Determine a network hierarchy of the network switch based on the network scale, the peak traffic, the scalability, and the redundancy, wherein the network hierarchy includes a core layer, a convergence layer, and an access layer; Defining the topology type, physical layout and virtual layout of the network hierarchy; The network topology structure of the network switch is established by combining the topology type, physical layout and virtual layout.

3. The data signal transmission method based on a network switch according to claim 2, characterized in that: Defining the network scale and peak flow of the network switch according to the number of users and transmission requirements in the application requirements includes: Based on the transmission demand, defining the activity type and average bandwidth of the network switch; Determining the network scale of the network switch according to the number of users and the average bandwidth; Analyze the peak online user ratio of the network switch; Calculate an activity type coefficient and a concurrent activity coefficient of the activity type; Based on the number of users, the peak user online ratio, the average bandwidth, the activity type coefficient, and the concurrent activity coefficient, the peak flow of the network switch is calculated using the following formula: f=(U×P_U×B_avg×C_app×C_concurrent×C_peak)+σ Among them, f represents the peak traffic of the network switch, U represents the number of users, P_U represents the peak user online ratio, B_avg represents the average bandwidth, C_app represents the activity type coefficient, C_concurrent represents the concurrent activity coefficient, C_peak represents the peak traffic coefficient, and σ represents the system traffic.

4. The data signal transmission method based on a network switch according to claim 3, characterized in that: The step of configuring the SDN parameters of the physically connected network switch according to the SDN controller to obtain the target network switch includes: Define a model query command for the physically connected network switch; According to the model query command, query the switch model of the physically connected network switch; Calculate the SDN compatibility coefficient of the switch model; When the SDN compatibility coefficient meets the preset compatibility coefficient standard, determining the parameters to be configured of the physically connected network switch, wherein the parameters to be configured include a management IP address, a default gateway, and a VLAN; According to the parameters to be configured, the SDN parameters of the physically connected network switch are configured to obtain a target network switch.

5. The data signal transmission method based on a network switch according to claim 4, characterized in that: The step of establishing an aggregation link of the target network switch according to the high-speed Ethernet port includes: defining aggregation requirements of the target network switch; Determining an aggregated high-speed Ethernet port of the high-speed Ethernet port according to the aggregation requirement; Identifying a system view of the target network switch; Based on the system view, creating an aggregation group of the aggregated high-speed Ethernet ports; configuring aggregation group parameters of the aggregation group; Based on the aggregation group parameters, determining an initial aggregation link of the target network switch; The link state of the initial aggregated link is analyzed, and when the link state meets a preset link state standard, the initial aggregated link is used as the aggregated link of the target network switch.

6. The data signal transmission method based on a network switch according to claim 5, characterized in that: The analyzing the link status of the initial aggregated link includes: Collecting aggregate data of the initial aggregate link; Analyzing the link utilization, link error rate, link delay and link redundancy coefficient of the initial aggregated link according to the aggregated data; Based on the link utilization, link error rate, link delay and link redundancy coefficient, the link status of the initial aggregated link is analyzed using the following formula: l=α×l_lyl+β×(1-l_cwl )+γ×(1⁄l_yc )+ρ×l_ry Wherein, l represents the link status of the initial aggregated link, l_lyl represents the link utilization of the initial aggregated link, α represents the weight of the link utilization, l_cwl represents the link error rate of the initial aggregated link, β represents the weight of the link error rate, l_yc represents the link delay of the initial aggregated link, γ represents the weight of the link delay, l_ry represents the link redundancy coefficient of the initial aggregated link, and ρ represents the weight of the link redundancy coefficient.

7. The data signal transmission method based on a network switch according to claim 6, characterized in that: The analyzing the safety factor of the data frame by using the virtual network function includes: Analyzing the integrity of the data frame; When the integrity meets a preset integrity threshold, establishing a risk behavior analysis model for the data frame; identifying risk behaviors of the data frame based on the risk behavior analysis model; defining a security impact indicator of the data frame; Analyzing the correlation coefficient between the risk behavior and the security impact index by using the security association function corresponding to the virtual network function; The safety factor of the data frame is determined according to the association coefficient.

8. The data signal transmission method based on a network switch according to claim 7, characterized in that: When the safety factor meets a preset safety threshold, analyzing the fragmentation value of the data frame includes: When the safety factor meets a preset safety threshold, marking the header information of the data frame; When judging that the data frame is a fragment according to the header information, calculating the fragment offset, fragment size and fragment identifier of the data frame; Calculating an identifier consistency coefficient of the fragment identifier; When the identifier consistency coefficient meets a preset consistency threshold, a fragment value of the data frame is calculated based on the fragment offset and the fragment size.

9. The data signal transmission method based on a network switch according to claim 8, characterized in that: The analyzing the forwarding anomaly of the target data frame based on the forwarding traffic using a preset AI forwarding traffic algorithm includes: Preprocessing the forwarding traffic to obtain processed forwarding traffic; Extracting forwarding abnormality features of the processed forwarding traffic; Based on the forwarding abnormality feature, identifying the forwarding abnormality mode of the processing forwarding traffic; The AI ​​forwarding traffic algorithm is used to calculate the anomaly score of the forwarding anomaly mode, wherein the AI ​​forwarding traffic algorithm: D(Q)=∑_(i=1)^n〖τ_i y_i K(x_i,Q)+ω〗 Where D(Q) represents the anomaly score of the forwarding anomaly pattern, τ_i represents the Lagrange multiplier, x_i represents the i-th training forwarding anomaly feature, Q represents the forwarding anomaly feature corresponding to the forwarding anomaly pattern, K(x_i,Q) represents the inner product of the i-th training forwarding anomaly feature and the forwarding anomaly feature, y_i represents the label of the i-th training forwarding anomaly feature, n represents the number of training forwarding anomaly features, and ω represents the bias term; According to the abnormality score, it is determined that the forwarding abnormality of the target data frame is abnormal.

10. A data signal transmission system based on a network switch, characterized in that: The system is used to execute the data signal transmission method based on a network switch according to any one of claims 1 to 9, comprising: A network switch connection module, used to determine application requirements of the network switch, wherein the application requirements include usage scenarios, data transmission requirements, number of users, and security requirements, define a network topology of the network switch based on the application requirements, and perform physical deployment of the network switch according to the network topology to obtain a physically connected network switch; A network switch configuration module, configured to configure the SDN controller of the physically connected network switch, configure the SDN parameters of the physically connected network switch according to the SDN controller, obtain the target network switch, and establish the network flow table rules of the target network switch; An aggregation link building module is used to deploy virtualization components and their virtual network functions in the server corresponding to the target network switch, define the high-speed Ethernet port of the target network switch, and establish an aggregation link of the target network switch according to the high-speed Ethernet port; A data frame security analysis module, configured to obtain a data frame of a sending device corresponding to the target network switch by using the virtualization component, and analyze a security factor of the data frame by using the virtual network function, and when the security factor meets a preset security threshold, analyze a fragmentation value of the data frame, and determine a target data frame in the data frame based on the fragmentation value; A data frame transmission module is used to analyze the forwarding behavior of the target data frame based on the network flow table rule, perform forwarding of the target data frame according to the forwarding behavior, the high-speed Ethernet port and the aggregated link, obtain forwarding traffic, analyze the forwarding anomaly of the target data frame based on the forwarding traffic using a preset AI forwarding traffic algorithm, define the forwarding optimization parameters of the target data frame using the SDN controller through the forwarding anomaly, and perform efficient transmission of the target data frame based on the forwarding optimization parameters.

Images