Network convergence gateway based on RK3568 and NF5180

Abstract

The invention relates to the technical field of convergence gateways, in particular to a network convergence gateway based on RK3568 and NF5180, which comprises a convergence gateway main body, an optical modem and a wireless AP (access point), the optical modem is connected with the convergence gateway main body through a network cable, the convergence gateway main body realizes the functions of a firewall, a router and a switch, the convergence gateway main body comprises a CPU (central processing unit), the switch and a peripheral network chip, and the wireless AP is connected with the convergence gateway main body through a network cable. The fusion gateway main body is connected with a computer terminal through a network cable, the fusion gateway main body is connected with a wireless AP through a network cable, the wireless AP is connected with a plurality of wireless terminal devices, and an MGT interface, a Router interface, a Firewall interface and a CPU network interface are arranged in the fusion gateway main body. And the network security is ensured while the traffic is managed.

Description

Technical Field

[0001] The present invention relates to the technical field of converged gateways, and in particular to a network converged gateway based on RK3568 and NF5180. Background Art

[0002] Gateways and switches play a vital role in network architecture. Gateways are responsible for network entry and exit management, and realize communication and data conversion between different networks; while switches are responsible for realizing high-speed data transmission and device interconnection within the local area network. The main network driver component now is DPDK developed by Intel, which has the advantages of driving user state to reduce data memory copy, using polling mode driver in user space, zero copy and providing Hugepage memory management. However, these devices also have some problems.

[0003] Home gateway: 1. The network traffic processing performance is low, about 10M;

[0004] Second, although the home gateway has many functions, the number of connected users is relatively small, about 20.

[0005] Enterprise gateway: First, the combination of firewalls, routers, and switches is extremely difficult to maintain. When a network failure occurs, the switch, router, and firewall need to be checked one by one, which greatly increases the maintenance cost of the network;

[0006] Second, the combined cost of using firewalls, routers, and switches is extremely high;

[0007] Third, the switch traffic cannot be managed and the internal network security risks of the enterprise cannot be controlled;

[0008] Fourth, the switch port can only be used within the local area network. Summary of the invention

[0009] The purpose of the present invention is to provide a network convergence gateway based on RK3568 and NF5180 to solve the problems raised in the above background technology.

[0010] To achieve the above-mentioned purpose, the present invention provides the following technical solutions: 1. A network fusion gateway based on RK3568 and NF5180, including a fusion gateway body, an optical modem and a wireless AP, characterized in that: the optical modem is connected to the fusion gateway body through a network cable, the fusion gateway body realizes the functions of a firewall, a router and a switch, the fusion gateway body contains a CPU and a switch as well as a peripheral network chip, the fusion gateway body is connected to a computer terminal through a network cable, the fusion gateway body is connected to a wireless AP through a network cable, the wireless AP is connected to a large number of wireless terminal devices, and an MGT interface, a Router interface, a Firewall interface and a CPU network port are arranged inside the fusion gateway body.

[0011] Preferably, the CPU chip adopts RK3568, and the CPU chip has two RJ45 electrical ports, and the two interfaces are mainly used for user management functions.

[0012] Preferably, the switch adopts NF5180, and the switch has 8 RJ45 electrical ports, 8 SFP optical ports, and 4 10G optical ports.

[0013] Preferably, the fusion gateway body is provided with an RTL8126 chip and an RTL8251 chip, and the CPU and the switch are connected using the RTL8126 chip and the RTL8251 chip.

[0014] Preferably, the MGT interface is a management interface, and the MGT interface and the PC terminal are connected to access the device IP to configure the internal functions of the device.

[0015] Preferably, the Router interface is a routing module mainly responsible for traffic routing control and NAT conversion of internal and external network addresses.

[0016] Preferably, the Firewall interface is a firewall module that controls the admission and exit of traffic according to firewall rules.

[0017] Preferably, the CPU network port is the upstream and downstream network port of the switch traffic. The module will obtain the port from which the traffic comes according to the VLAN tag carried in the upstream traffic of the switch and add the corresponding VLAN tag to allow the downstream traffic to flow out from the port specified by the switch.

[0018] Preferably, traffic from all ports of the switch is aggregated to the WAN port and upstreamed to the CPU network port, and each port on the switch side is configured with a specific VLAN ID.

[0019] Compared with the prior art, the beneficial effects of the present invention are: first, using the DPDK suite to develop routing, switching and firewall functions to ensure network data processing performance;

[0020] Second, it is easy to maintain, greatly reducing the manpower cost of enterprise LAN maintenance;

[0021] Third, the switch traffic is sent up to the CPU for traffic identification and control to ensure the internal network security of the enterprise;

[0022] Fourth, use VLAN technology to isolate the switch port, so that the switch port can be used as a WAN port or a LAN port;

[0023] Fifth, the firewall, router and switch are integrated into the converged gateway body, which reduces the cost by at least 50% compared with the three devices of firewall, router and switch. BRIEF DESCRIPTION OF THE DRAWINGS

[0024] Figure 1 Provides a flow chart for switch port traffic control and security assurance.

[0025] Figure 2 This is the internal schematic diagram of the Enterprise Fusion Gateway.

[0026] Figure 3 This is the device hardware connection diagram. DETAILED DESCRIPTION

[0027] In order to deepen the understanding and recognition of the present invention, the technical solutions in the embodiments of the present invention will be clearly and completely described and introduced in combination with the drawings in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments, and are not intended to limit the embodiments in any form. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0028] See also Figure 1-3 The present invention provides a technical solution: 1. A network fusion gateway based on RK3568 and NF5180, including a fusion gateway body, an optical modem and a wireless AP, characterized in that: the optical modem is connected to the fusion gateway body through a network cable, the fusion gateway body realizes the functions of a firewall, a router and a switch, the fusion gateway body contains a CPU and a switch and a peripheral network chip, the fusion gateway body is connected to a computer terminal through a network cable, the fusion gateway body is connected to a wireless AP through a network cable, the wireless AP is connected to a plurality of wireless terminal devices, and an MGT interface, a Router interface, a Firewall interface and a CPU network port are arranged inside the fusion gateway body.

[0029] The CPU chip uses RK3568, and the CPU chip has 2 RJ45 electrical ports. The two interfaces are mainly used for user management functions. The switch uses NF5180, and the switch has 8 RJ45 electrical ports, 8 SFP optical ports, and 4 10G optical ports. The main body of the fusion gateway is equipped with RTL8126 chip and RTL8251 chip. The CPU and the switch are connected using RTL8126 chip and RTL8251 chip. The MGT interface is the management interface. The MGT interface and the PC end are connected to the access device ip to configure the internal functions of the device. The Router interface is the routing module, which is mainly responsible for traffic routing control and internal and external network address NAT conversion. The Firewall interface is the firewall module that controls the access and exit of traffic according to the firewall rules. The CPU network port is the upstream and downstream network port of the switch traffic. The module will obtain the port from which the traffic comes according to the VLAN tag carried in the upstream traffic of the switch and add the corresponding VLAN tag to let the downstream traffic flow out from the port specified by the switch. The traffic of all ports of the switch converges to the WAN port and goes up to the CPU network port. Each port on the switch side is configured with a specific VLAN ID, the present invention adjusts the traditional firewall, router and switch, and integrates the three devices into one device, which is more convenient to manage and facilitate later maintenance. Through the mutual cooperation between the CPU chip RK3568 and the switch chip NF5810, it can ensure data security while accurately controlling the traffic.

[0030] Although the embodiments of the present invention have been shown and described, it should be emphasized that the above description is only an introduction and description of the use of the embodiments of the present invention, and does not limit the present invention in any form. For those of ordinary skill in the art, it can be understood that various changes, modifications, substitutions and variations can be made to these embodiments without departing from the principles and spirit of the present invention, and the scope of the present invention is defined by the attached claims and their equivalents.

Claims

1. A network fusion gateway based on RK3568 and NF5180, including a fusion gateway body, an optical modem and a wireless AP, characterized in that: The optical modem is connected to the fusion gateway body through a network cable. The fusion gateway body realizes the functions of firewall, router and switch. The fusion gateway body contains CPU, switch and peripheral network chips. The fusion gateway body is connected to the computer terminal through a network cable. The fusion gateway body is connected to the wireless AP through a network cable. The wireless AP is connected to many wireless terminal devices. The MGT interface, Router interface, Firewall interface and CPU network port are set inside the fusion gateway body.

2. According to claim 1, a network fusion gateway based on RK3568 and NF5180 is characterized in that: The CPU chip adopts RK3568, and the CPU chip has two RJ45 electrical ports, and the two interfaces are mainly used for user management functions.

3. According to claim 1, a network fusion gateway based on RK3568 and NF5180 is characterized in that: The switch adopts NF5180, and the switch has 8 RJ45 electrical ports, 8 SFP optical ports, and 4 10G optical ports.

4. According to claim 1, a network fusion gateway based on RK3568 and NF5180 is characterized in that: The fusion gateway body is provided with an RTL8126 chip and an RTL8251 chip, and the CPU and the switch are connected by using the RTL8126 chip and the RTL8251 chip.

5. According to claim 1, a network fusion gateway based on RK3568 and NF5180 is characterized in that: The MGT interface is a management interface. The MGT interface and the PC are connected to access the device IP to configure the internal functions of the device.

6. The network convergence gateway based on RK3568 and NF5180 according to claim 1, characterized in that: The Router interface is a routing module that is mainly responsible for traffic routing control and NAT conversion of internal and external network addresses.

7. The network convergence gateway based on RK3568 and NF5180 according to claim 1, characterized in that: The Firewall interface is a firewall module that controls the entry and exit of traffic according to firewall rules.

8. The network convergence gateway based on RK3568 and NF5180 according to claim 1, characterized in that: The CPU network port is the upstream and downstream network port of the switch traffic. The module will obtain the port from which the traffic comes according to the VLAN tag carried in the upstream traffic of the switch and add the corresponding VLAN tag to allow the downstream traffic to flow out from the port specified by the switch.

9. The network convergence gateway based on RK3568 and NF5180 according to claim 1, characterized in that: The traffic of all ports of the switch is aggregated to the WAN port and then upstreamed to the CPU network port. Each port on the switch side is configured with a specific VLAN ID.

Images