Network monitoring management method, device, equipment, system and medium

Abstract

The embodiment of the invention discloses a network monitoring management method, device, equipment, system and medium, and aims to solve the problems that only monitoring data of an SD-WAN can be summarized and network problems cannot be quickly handled in the prior art. The network monitoring management method is applied to a network monitoring platform, the network monitoring platform is located in an SD-WAN, a digital twin model is arranged on the network monitoring platform, and the SD-WAN further comprises an SD-WAN controller; the method comprises the following steps: receiving network operation data from an SD-WAN controller in real time; obtaining a real-time performance analysis result according to the network operation data and network performance and traffic distribution simulated through a digital twin model; and obtaining a network operation management scheme according to the real-time performance analysis result, so that the SD-WAN controller performs network operation management according to the network operation management scheme.

Description

Technical Field

[0001] The embodiments of the present application relate to information processing technology, and specifically to a network monitoring management method, device, equipment, system and medium. Background Art

[0002] Software-Defined Wide Area Network (SD-WAN) is a new network architecture technology that manages and optimizes Wide Area Network (WAN) connections through software control and virtualization.

[0003] Currently, the monitoring and management of SD-WAN can include: traffic monitoring and performance measurement, branch office network supervision, security monitoring, traffic classification and control, as well as reporting and alarms. However, the SD-WAN monitoring and management methods provided by existing technologies can only summarize monitoring data, require human intervention to perform network adjustment and optimization operations, and cannot quickly respond to network problems. Summary of the invention

[0004] The embodiments of the present application propose a network monitoring management method, device, equipment, system and medium to solve the problem that the prior art can only summarize the monitoring data of SD-WAN but cannot quickly respond to network problems.

[0005] In a first aspect, an embodiment of the present application provides a network monitoring management method, which is applied to a network monitoring platform, wherein the network monitoring platform is located in a software-defined wide area network SD-WAN, and a digital twin model corresponding to the SD-WAN is provided on the network monitoring platform, wherein the SD-WAN further includes: an SD-WAN controller, and the network monitoring platform is connected to the SD-WAN controller; the method includes:

[0006] receiving network operation data from the SD-WAN controller in real time;

[0007] Obtaining real-time performance analysis results based on the network operation data and the network performance and traffic distribution simulated by the digital twin model;

[0008] Based on the real-time performance analysis results, a network operation management plan is obtained so that the SD-WAN controller can perform network operation management according to the network operation management plan.

[0009] In a second aspect, an embodiment of the present application provides a network monitoring management device, which is applied to a network monitoring platform, wherein the network monitoring platform is located in a software-defined wide area network SD-WAN, and a digital twin model corresponding to the SD-WAN is provided on the network monitoring platform, wherein the SD-WAN further includes: an SD-WAN controller, and the network monitoring platform is connected to the SD-WAN controller; the device includes:

[0010] A real-time receiving module, used to receive network operation data from the SD-WAN controller in real time;

[0011] A performance analysis module, used to obtain real-time performance analysis results based on the network operation data and the network performance and traffic distribution simulated by the digital twin model;

[0012] The network operation management module is used to obtain a network operation management plan according to the real-time performance analysis result, and perform network operation management according to the network operation management plan.

[0013] In a third aspect, an embodiment of the present application provides a network monitoring management system, which is applied to SD-WAN, and the system includes: a network monitoring platform and an SD-WAN controller, and a digital twin model corresponding to the SD-WAN is set on the network monitoring platform;

[0014] The network monitoring platform is used to receive network operation data from the SD-WAN controller in real time, obtain real-time performance analysis results based on the network operation data and the network performance and traffic distribution simulated by the digital twin model, and obtain a network operation management plan based on the real-time performance analysis results;

[0015] The SD-WAN controller is used to receive the network operation data in real time, send the network operation data to the network monitoring platform in real time, and perform network operation management according to the network operation management plan.

[0016] In a fourth aspect, an embodiment of the present application provides an electronic device, comprising: one or more processors; a storage device on which one or more programs are stored, and when the one or more programs are executed by the one or more processors, the one or more processors implement the method described in any embodiment of the first aspect.

[0017] In a fifth aspect, an embodiment of the present application provides a computer-readable medium having a computer program stored thereon, which, when executed by a processor, implements the method described in any embodiment of the first aspect.

[0018] The network monitoring management method, apparatus, equipment, system and medium provided in the embodiments of the present application add a new network monitoring platform in the SD-WAN, and a digital twin model corresponding to the SD-WAN is set on the network monitoring platform. In the process of network monitoring and management of the SD-WAN, the digital twin model can be used to simulate the network performance and traffic distribution in real time, and real-time monitoring and analysis can be performed based on the network operation data received in real time to obtain real-time performance analysis results, thereby solving the problem that the prior art can only perform simple monitoring data aggregation. Real-time monitoring and analysis can enable administrators to quickly detect performance problems, thereby improving the real-time performance response of the network; and, the technical solution provided in the embodiments of the present application can obtain a network operation management plan based on the real-time performance analysis results, so that the SD-WAN controller automatically performs network operation management according to the network operation management plan, thereby improving the degree of automation of the SD-WAN network monitoring and management, avoiding the problem that the prior art requires human intervention to perform network adjustment and optimization operations, and cannot quickly respond to network problems, thereby enhancing the security and reliability of the network. BRIEF DESCRIPTION OF THE DRAWINGS

[0019] Other features, objects and advantages of the present application will become more apparent by reading the detailed description of non-limiting embodiments made with reference to the following drawings:

[0020] Figure 1 It is a schematic diagram of the SD-WAN structure to which the technical solution provided in the embodiment of the present application is applied;

[0021] Figure 2 It is one of the flow charts of an embodiment of the network monitoring management method of the present application;

[0022] Figure 3 This is the second flowchart of an embodiment of the network monitoring management method of the present application;

[0023] Figure 4 It is a structural diagram of an embodiment of the network monitoring management device of the present application;

[0024] Figure 5 It is a structural diagram of an embodiment of the network monitoring management system of the present application;

[0025] Figure 6 It is a schematic diagram of the structure of an electronic device used to implement an embodiment of the present application. DETAILED DESCRIPTION

[0026] All actions to obtain signals, information or data in this application are carried out in compliance with the relevant data protection laws and policies of the country where they are located, and with the authorization given by the owner of the corresponding device.

[0027] The present application will be further described in detail below in conjunction with the accompanying drawings and embodiments. It is to be understood that the specific embodiments described herein are only used to explain the relevant invention, rather than to limit the invention. It should also be noted that, for ease of description, only the parts related to the relevant invention are shown in the accompanying drawings.

[0028] It should be noted that, in the absence of conflict, the embodiments and features in the embodiments of the present application can be combined with each other. The present application will be described in detail below with reference to the accompanying drawings and in combination with the embodiments.

[0029] See Figure 1 As shown, the SD-WAN applied by the technical solution provided in the embodiment of the present application may include:

[0030] 1. SD-WAN Controller

[0031] The SD-WAN controller is the management and control core of SD-WAN, responsible for configuring, monitoring and optimizing network connections and establishing communication connections between all SD-WAN devices.

[0032] 2. SD-WAN edge devices

[0033] SD-WAN edge devices are key components deployed in enterprise branches or remote office locations. They are network entry points used to connect to the enterprise's headquarters and other branch offices, providing traffic management, load balancing, and traffic optimization functions.

[0034] 3. Network monitoring platform

[0035] The network monitoring platform is a new network device added to the SD-WAN by the technical solution provided in the embodiment of the present application. The network monitoring platform is provided with a digital twin model corresponding to the SD-WAN. The network monitoring platform is connected to the SD-WAN controller and can establish a communication connection between the SD-WAN controller and the SD-WAN edge device.

[0036] In this embodiment, the method for generating a digital twin model may include:

[0037] First, network data is obtained through the SD-WAN controller. The network data includes but is not limited to: network topology, device configuration, traffic data, performance metrics, and network events.

[0038] Then, based on the network data, digital twin technology is used to generate a digital twin model.

[0039] Of course, the above methods are only specific examples. In actual use, other methods can also be used to generate the digital twin model corresponding to SD-WAN on the network monitoring platform, which will not be elaborated here.

[0040] like Figure 1 As shown, SD-WAN can also include: security equipment and terminal equipment, etc., which are not elaborated here.

[0041] Please refer to Figure 2 , which shows a process 200 of an embodiment of a network monitoring management method according to the present application. The network monitoring management method can be applied to the network monitoring platform described above, and the network monitoring platform can be various electronic devices with data processing functions. For example, the above electronic devices can include but are not limited to cloud servers, physical servers, etc. The execution subject of the network monitoring management method can be a processor in the above electronic device.

[0042] like Figure 2 As shown, the network monitoring management method includes the following steps:

[0043] Step 201: Receive network operation data from the SD-WAN controller in real time.

[0044] In this embodiment, the network operation data may include any one or a combination of the following: traffic data, delay metric, throughput, packet loss rate, and bandwidth utilization.

[0045] In actual use, depending on the needs for SD-WAN monitoring and management, network operation data can also be other data, which will not be elaborated here.

[0046] In this embodiment, network operation data can be collected in real time by the SD-WAN controller from various SD-WAN devices, sensors, monitoring points, etc.

[0047] Step 202: Obtain real-time performance analysis results based on network operation data, as well as network performance and traffic distribution simulated by the digital twin model.

[0048] In this embodiment, step 202 can use the digital twin model to simulate the actual operation of the SD-WAN and monitor network performance and traffic distribution in real time to provide real-time, accurate, and detailed performance insights and identify potential problems, thereby improving the performance, reliability, and security of the SD-WAN.

[0049] In this embodiment, the method in step 202 for simulating the actual operation of SD-WAN using the digital twin model can be: comparing the network operation data with the network performance and traffic distribution simulated by the digital twin model, and simulating the network performance, traffic distribution and application behavior in real time.

[0050] In this embodiment, the digital twin model can maintain real-time synchronization with the actual SD-WAN, and the synchronization may include but is not limited to: data packet transmission, routing decisions, load balancing, etc., to ensure that the digital twin model can accurately reflect the network status of the SD-WAN, thereby ensuring the effectiveness and reliability of the digital twin model. Step 202 analyzes the performance of the network simulated by the digital twin model, including bandwidth utilization, latency, packet loss rate, and throughput, etc., to obtain real-time performance analysis results. The real-time performance analysis results may include: performance indicators and trends and other information, so as to monitor the network status of the SD-WAN in real time.

[0051] Step 203: Obtain a network operation management plan based on the real-time performance analysis results, so that the SD-WAN controller can perform network operation management according to the network operation management plan.

[0052] In this embodiment, the network operation management solution may be a performance optimization solution, and the performance optimization solution may include any one or a combination of the following: traffic redirection, load balancing, and bandwidth optimization.

[0053] Traffic redirection is to redirect the traffic of a specific application to the best path to improve performance.

[0054] Among them, load balancing is to redistribute traffic to avoid congestion and improve network throughput.

[0055] Among them, bandwidth optimization is to reduce bandwidth usage through compression, caching and intelligent protocol optimization.

[0056] At this time, step 203 may specifically be: sending the real-time performance analysis results to the SD-WAN controller so that the SD-WAN controller can obtain a performance optimization plan and perform performance optimization according to the performance optimization plan.

[0057] In this embodiment, the network operation management solution may also be a security enhancement solution, which includes any one or a combination of the following: intrusion detection and prevention, application-level access control, and data encryption.

[0058] Among them, intrusion detection and prevention is to automatically trigger the intrusion detection system (IDS) or intrusion prevention system (IPS) by monitoring abnormal traffic patterns or potential threats.

[0059] Among them, application-level access control is a fine-grained control of applications on the network to prevent unauthorized access.

[0060] Among them, data encryption is the end-to-end encryption of sensitive data to protect the confidentiality of the data.

[0061] At this time, step 203 can specifically be: generating an alarm signal based on the real-time performance analysis results, and sending the alarm signal to the SD-WAN controller, so that the SD-WAN controller can obtain a security enhancement plan based on the alarm signal, so that the SD-WAN edge device executes the security enhancement plan.

[0062] In this embodiment, step 203 may also perform network resource planning and predictive maintenance based on the real-time performance analysis results to avoid future problems.

[0063] The network monitoring and management method provided in the embodiment of the present application adds a new network monitoring platform in the SD-WAN, and a digital twin model corresponding to the SD-WAN is set on the network monitoring platform. In the process of network monitoring and management of the SD-WAN, the digital twin model can be used to simulate the network performance and traffic distribution in real time, and real-time monitoring and analysis can be performed based on the network operation data received in real time to obtain real-time performance analysis results, thereby solving the problem that the prior art can only perform simple monitoring data aggregation. Real-time monitoring and analysis can enable administrators to quickly detect performance problems, thereby improving the real-time performance response of the network; and, the technical solution provided in the embodiment of the present application can obtain a network operation management plan based on the real-time performance analysis results, so that the SD-WAN controller automatically performs network operation management according to the network operation management plan, thereby improving the degree of automation of SD-WAN network monitoring and management, avoiding the problem that the prior art requires human intervention to perform network adjustment and optimization operations, and cannot quickly respond to network problems, thereby enhancing the security and reliability of the network.

[0064] Please refer to Figure 3 , which shows a process 200 of an embodiment of a network monitoring management method according to the present application. The network monitoring management method can be applied to the network monitoring platform described above, and the network monitoring platform can be various electronic devices with data processing functions. For example, the above electronic devices can include but are not limited to cloud servers, physical servers, etc. The execution subject of the network monitoring management method can be a processor in the above electronic device.

[0065] The network monitoring management method provided in this embodiment is Figure 2 are basically the same as shown, the difference is that Figure 3 As shown, the network monitoring management method provided in this embodiment may also include:

[0066] Step 204: Receive network configuration data from the SD-WAN controller in real time.

[0067] In this embodiment, the network configuration data may include the network operation data described above, and may also include data such as data packet transmission, routing decision, and load balancing.

[0068] Step 205: Update the digital twin model according to the network configuration data.

[0069] It should be noted that steps 204 and 205 may occur at any time, and this embodiment is described by taking the example that steps 204 and 205 occur before step 201 .

[0070] The network monitoring management method provided in the embodiment of the present application achieves Figure 2 Based on the beneficial effects brought by the technical solutions shown, through real-time network configuration data collection and digital twin model updates, the digital twin model can always reflect the actual status of the network, ensuring highly accurate network simulation. This enables network administrators to understand network performance, device status, and traffic distribution in real time.

[0071] The embodiment of the present application also provides a network monitoring management method, which can be applied to the network monitoring platform described above, and the network monitoring platform can be various electronic devices with data processing functions. For example, the above electronic devices can include but are not limited to cloud servers, physical servers, etc. The execution subject of the network monitoring management method can be a processor in the above electronic device.

[0072] The network monitoring management method provided in this embodiment is Figure 2 The network monitoring and management method provided in this embodiment is basically the same as shown, with the difference that it can also include the step of displaying relevant information of the digital twin model through a display component.

[0073] In this embodiment, the relevant information may include: network topology, network devices and operation data, wherein the network devices are displayed with the actual physical appearance and location of the devices; and the operation data are displayed by superimposing on the corresponding network devices and / or interconnected lines.

[0074] The network monitoring management method provided in the embodiment of the present application achieves Figure 2 Based on the beneficial effects brought by the technical development solutions shown, the network topology in the digital twin model is no longer a traditional abstract icon, but a graphical representation with a highly visual effect, reflecting the physical appearance and location of actual network equipment, which helps network administrators understand the network structure more intuitively.

[0075] Please refer to Figure 4, which shows a process 400 of an embodiment of a network monitoring management device according to the present application. The network monitoring management device can be applied to the network monitoring platform described above, and the network monitoring platform can be various electronic devices with data processing functions. For example, the above electronic devices can include but are not limited to cloud servers, physical servers, etc. The execution subject of the network monitoring management device can be a processor in the above electronic device.

[0076] like Figure 4 As shown, the network monitoring management device provided in this embodiment may include:

[0077] A real-time receiving module 401 is used to receive network operation data from the SD-WAN controller in real time;

[0078] A performance analysis module 402 is used to obtain real-time performance analysis results based on the network operation data and the network performance and traffic distribution simulated by the digital twin model;

[0079] The network operation management module 403 is used to obtain a network operation management plan according to the real-time performance analysis result, and perform network operation management according to the network operation management plan.

[0080] Optionally, the real-time receiving module 401 is also used to receive network configuration data from the SD-WAN controller in real time; and update the digital twin model according to the network configuration data.

[0081] Optionally, the network monitoring management device provided in this embodiment may further include:

[0082] A display module, used to display relevant information of the digital twin model through a display component;

[0083] The relevant information includes: network topology, network equipment and operation data;

[0084] Wherein, the network device is displayed with the actual physical appearance and location of the device;

[0085] The operation data is superimposed on the corresponding network devices and / or interconnected lines for display.

[0086] Optionally, the network operation management is a performance optimization solution, and the performance optimization solution includes any one or a combination of the following:

[0087] Traffic redirection, load balancing, and bandwidth optimization;

[0088] The network operation management module 403 is specifically used to send the real-time performance analysis results to the SD-WAN controller so that the SD-WAN controller can obtain the performance optimization plan and perform performance optimization according to the performance optimization plan.

[0089] Optionally, the network operation management is a security enhancement solution, and the security enhancement solution includes any one or a combination of the following:

[0090] intrusion detection and prevention, application-level access control, and data encryption;

[0091] The network operation management module 403 is specifically used to generate an alarm signal according to the real-time performance analysis result, and send the alarm signal to the SD-WAN controller, so that the SD-WAN controller can obtain a security enhancement plan according to the alarm signal and enable the SD-WAN edge device to execute the security enhancement plan.

[0092] Optionally, the network operation data includes any one or combination of the following:

[0093] Traffic data, latency metrics, throughput, packet loss, and bandwidth utilization.

[0094] The specific implementation method of the network monitoring management device provided in the embodiment of the present application can be found in the network monitoring management method provided in the above embodiment of the present application, and will not be repeated here.

[0095] The network monitoring and management device provided in the embodiment of the present application adds a new network monitoring platform in the SD-WAN, and a digital twin model corresponding to the SD-WAN is set on the network monitoring platform. In the process of network monitoring and management of the SD-WAN, the digital twin model can be used to simulate the network performance and traffic distribution in real time, and real-time monitoring and analysis can be performed based on the network operation data received in real time to obtain real-time performance analysis results, thereby solving the problem that the prior art can only perform simple monitoring data aggregation. Real-time monitoring and analysis can enable administrators to quickly detect performance problems, thereby improving the real-time performance response of the network; and, the technical solution provided in the embodiment of the present application can obtain a network operation management plan based on the real-time performance analysis results, so that the SD-WAN controller automatically performs network operation management according to the network operation management plan, thereby improving the degree of automation of SD-WAN network monitoring and management, avoiding the problem that the prior art requires human intervention to perform network adjustment and optimization operations, and cannot quickly respond to network problems, thereby enhancing the security and reliability of the network.

[0096] Please refer to Figure 5, which shows a process 500 of an embodiment of a network monitoring management system according to the present application. The network monitoring management system 500 may include: a network monitoring platform 501 and an SD-WAN controller 502, wherein the network monitoring platform 501 is provided with a digital twin model 5011 corresponding to the SD-WAN;

[0097] The network monitoring platform 501 is used to receive network operation data from the SD-WAN controller 502 in real time, obtain real-time performance analysis results based on the network operation data and the network performance and traffic distribution simulated by the digital twin model 5011, and obtain a network operation management solution based on the real-time performance analysis results;

[0098] The SD-WAN controller 502 is used to receive the network operation data in real time, send the network operation data to the network monitoring platform 501 in real time, and perform network operation management according to the network operation management plan.

[0099] Optionally, the network monitoring platform 501 is also used to receive network configuration data from the SD-WAN controller 502 in real time; and update the digital twin model according to the network configuration data.

[0100] Optionally, the network monitoring platform 501 is further used to display relevant information of the digital twin model through a display component;

[0101] The relevant information includes: network topology, network equipment and operation data;

[0102] Wherein, the network device is displayed with the actual physical appearance and location of the device;

[0103] The operation data is superimposed on the corresponding network devices and / or interconnected lines for display.

[0104] Optionally, the network operation management is a performance optimization solution, and the performance optimization solution includes any one or a combination of the following:

[0105] Traffic redirection, load balancing, and bandwidth optimization;

[0106] The network monitoring platform 501 is also used to send the real-time performance analysis results to the SD-WAN controller 502;

[0107] The SD-WAN controller 502 is also used to obtain the performance optimization plan and perform performance optimization according to the performance optimization plan.

[0108] Optionally, the network operation management is a security enhancement solution, and the security enhancement solution includes any one or a combination of the following:

[0109] intrusion detection and prevention, application-level access control, and data encryption;

[0110] The network monitoring platform 501 is further used to generate an alarm signal according to the real-time performance analysis result, and send the alarm signal to the SD-WAN controller 502;

[0111] The SD-WAN controller 502 is also used to obtain a security enhancement plan based on the alarm signal, so that the SD-WAN edge device executes the security enhancement plan.

[0112] Optionally, the network operation data includes any one or combination of the following:

[0113] Traffic data, latency metrics, throughput, packet loss, and bandwidth utilization.

[0114] The specific implementation method of the network monitoring and management system provided in the embodiment of the present application can be found in the network monitoring and management method provided in the above embodiment of the present application, and will not be repeated here.

[0115] The network monitoring and management system provided in the embodiment of the present application adds a new network monitoring platform in the SD-WAN, and a digital twin model corresponding to the SD-WAN is set on the network monitoring platform. In the process of network monitoring and management of the SD-WAN, the digital twin model can be used to simulate the network performance and traffic distribution in real time, and real-time monitoring and analysis can be performed based on the network operation data received in real time to obtain real-time performance analysis results, thereby solving the problem that the prior art can only perform simple monitoring data aggregation. Real-time monitoring and analysis can enable administrators to quickly detect performance problems, thereby improving the real-time performance response of the network; and, the technical solution provided in the embodiment of the present application can obtain a network operation management plan based on the real-time performance analysis results, so that the SD-WAN controller automatically performs network operation management according to the network operation management plan, thereby improving the degree of automation of the SD-WAN network monitoring and management, avoiding the problem that the prior art requires human intervention to perform network adjustment and optimization operations, and cannot quickly respond to network problems, thereby enhancing the security and reliability of the network.

[0116] In order to enable those skilled in the art to more clearly understand the technical solutions described in the network monitoring management method, device and system described in the above embodiments, a specific application scenario is provided below for explanation.

[0117] Scenario 1: Real-time traffic optimization

[0118] The steps of applying the technical solution provided by the embodiments of the present application may include:

[0119] Step 1: Data collection and digital twin model update

[0120] Execution entities: SD-WAN edge devices, digital twin models, SD-WAN controllers

[0121] Trigger conditions: Periodic or event-triggered, such as device status change, new application traffic introduction.

[0122] Processing action: The SD-WAN edge device periodically collects actual traffic data and performance metrics of the SD-WAN edge device; the digital twin model receives the actual data and updates the model to reflect the network status.

[0123] Result: The digital twin is synchronized with the actual network data, ensuring accurate network topology and performance information.

[0124] Function: Maintain the real-time and accuracy of the digital twin model and provide a data basis for real-time performance analysis.

[0125] Beneficial effects: Through real-time data collection and model updates, the digital twin model always reflects the actual status of the SD-WAN, ensuring highly accurate network simulation. This enables network administrators to understand network performance, device status, and traffic distribution in real time, improving network visualization and comprehensibility.

[0126] Step 2: Real-time performance analysis

[0127] Execution entity: Digital twin model, SD-WAN controller

[0128] Trigger conditions: Continuous, real-time reception and analysis of actual and simulated data.

[0129] Processing action: The digital twin model simulates network performance and traffic distribution, including device performance, bandwidth utilization, latency, etc. The SD-WAN controller communicates with the digital twin model to obtain simulation results.

[0130] Result: The SD-WAN controller obtains real-time performance analysis results, including potential issues and performance optimization recommendations.

[0131] Purpose: Provides network administrators with real-time performance insights to detect performance issues and optimization opportunities.

[0132] Beneficial effects: Real-time performance analysis based on digital twin models provides real-time insights into network performance. This allows administrators to quickly detect performance issues such as congestion or bottlenecks, improving the network's real-time performance response.

[0133] Step 3: Automatic performance optimization

[0134] Execution entity: SD-WAN controller, SD-WAN edge device

[0135] Trigger conditions: Automatic triggering or administrator intervention based on real-time performance analysis results.

[0136] Processing action: The SD-WAN controller automatically or with administrator authorization executes performance optimization measures such as traffic redirection or load balancing based on the performance analysis results; the SD-WAN edge device executes the optimization strategy.

[0137] Result: Network performance is optimized in real time, congestion issues are resolved, and network throughput is improved.

[0138] Function: Improve SD-WAN network performance, ensure traffic balance and quick response to performance issues.

[0139] Beneficial effects: Automatic performance optimization automatically takes action to solve problems, such as traffic redirection or load balancing, based on real-time performance analysis results. This reduces the complexity of network management, reduces the need for manual intervention by administrators, and improves network performance and efficiency.

[0140] Scenario 2: Adaptive security enhancement

[0141] The steps of applying the technical solution provided by the embodiments of the present application may include:

[0142] Step 1: Real-time security performance analysis

[0143] Execution entities: Digital twin model, SD-WAN edge device, SD-WAN controller

[0144] Trigger conditions: Continuous, real-time reception and analysis of actual and simulated data.

[0145] Processing action: The digital twin model detects abnormal traffic patterns or potential threats by analyzing actual data; the digital twin model sends alerts to the SD-WAN edge device through the SD-WAN controller, and the SD-WAN edge device executes corresponding security measures.

[0146] Result: Abnormal traffic and threats are detected and alerts are triggered.

[0147] Purpose: Provides real-time threat detection and security performance analysis.

[0148] Beneficial effects: Real-time security performance analysis uses digital twin models to detect abnormal traffic patterns and potential threats. Potential network threats can be discovered in a timely manner, improving network security.

[0149] Step 2: Automated security enhancements

[0150] Execution entity: SD-WAN edge device, SD-WAN controller

[0151] Trigger conditions: Automatically triggered or with administrator intervention based on real-time security performance analysis results.

[0152] Processing action: The SD-WAN controller automatically or with administrator authorization executes security enhancement measures based on the security performance analysis results, such as intrusion detection system (IDS) alerts, traffic redirection to the firewall, etc.; the SD-WAN edge device executes the security enhancement policy.

[0153] Result: Potential threats are isolated or blocked, and network security is improved.

[0154] Function: Strengthen network security and quickly respond to potential threats and abnormal network behavior.

[0155] Beneficial effects: Automated security enhancement automatically executes security measures based on real-time security performance analysis results, such as triggering an intrusion detection system (IDS) alert or redirecting traffic to a firewall. This strengthens network security, reduces response time, and helps reduce the impact of potential threats on the network.

[0156] Reference below Figure 6 , which shows a schematic structural diagram of an electronic device for implementing some embodiments of the present application. Figure 6 The electronic device shown is merely an example and should not bring any limitation to the functions and scope of use of the embodiments of the present application.

[0157] like Figure 6 As shown, the electronic device 600 may include a processing device (e.g., a central processing unit, a graphics processing unit, etc.) 601, which can perform various appropriate actions and processes according to a program stored in a read-only memory (ROM) 602 or a program loaded from a storage device 608 into a random access memory (RAM) 603. In the RAM 603, various programs and data required for the operation of the electronic device 600 are also stored. The processing device 601, the ROM 602, and the RAM 603 are connected to each other via a bus 604. An input / output (I / O) interface 605 is also connected to the bus 604.

[0158] Typically, the following devices may be connected to the I / O interface 605: an input device 606 including, for example, a touch screen, a touch pad, a keyboard, a mouse, a camera, a microphone, an accelerometer, a gyroscope, etc.; an output device 607 including, for example, a liquid crystal display (LCD), a speaker, a vibrator, etc.; a storage device 608 including, for example, a disk, a hard disk, etc.; and a communication device 609. The communication device 609 may allow the electronic device 600 to communicate with other devices wirelessly or by wire to exchange data. Although Figure 6The electronic device 600 is shown with various devices, but it should be understood that it is not required to implement or possess all the devices shown. More or fewer devices may be implemented or possessed instead. Figure 6 Each block shown in the figure may represent one device, or may represent multiple devices as required.

[0159] In particular, according to some embodiments of the present application, the process described above with reference to the flowchart can be implemented as a computer software program. For example, some embodiments of the present application include a computer program product, which includes a computer program carried on a computer-readable medium, and the computer program includes a program code for executing the method shown in the flowchart. In some such embodiments, the computer program can be downloaded and installed from the network through the communication device 609, or installed from the storage device 608, or installed from the ROM 602. When the computer program is executed by the processing device 601, the above-mentioned functions defined in the method of some embodiments of the present application are executed.

[0160] It should be noted that the computer-readable medium described in some embodiments of the present application may be a computer-readable signal medium or a computer-readable storage medium or any combination of the above two. The computer-readable storage medium may be, for example, but not limited to, an electrical, magnetic, optical, electromagnetic, infrared, or semiconductor system, device or device, or any combination of the above. More specific examples of computer-readable storage media may include, but are not limited to: an electrical connection with one or more wires, a portable computer disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the above. In some embodiments of the present application, a computer-readable storage medium may be any tangible medium containing or storing a program that can be used by or in combination with an instruction execution system, device or device. In some embodiments of the present application, a computer-readable signal medium may include a data signal propagated in a baseband or as part of a carrier wave, which carries a computer-readable program code. This propagated data signal may take a variety of forms, including but not limited to electromagnetic signals, optical signals, or any suitable combination of the above. The computer readable signal medium may also be any computer readable medium other than a computer readable storage medium, which may send, propagate or transmit a program for use by or in conjunction with an instruction execution system, apparatus or device. The program code contained on the computer readable medium may be transmitted using any suitable medium, including but not limited to: wires, optical cables, RF (radio frequency), etc., or any suitable combination of the above.

[0161] In some embodiments, the client and the server may communicate using any currently known or future developed network protocol such as HTTP (HyperText Transfer Protocol), and may be interconnected with any form or medium of digital data communication (e.g., a communication network). Examples of communication networks include a local area network ("LAN"), a wide area network ("WAN"), an internet (e.g., the Internet), and a peer-to-peer network (e.g., an ad hoc peer-to-peer network), as well as any currently known or future developed network.

[0162] The computer-readable medium may be included in the electronic device; or it may exist independently without being installed in the electronic device. The computer-readable medium carries one or more programs. When the one or more programs are executed by the electronic device, the electronic device: receives network operation data from the SD-WAN controller in real time; obtains real-time performance analysis results based on the network operation data and the network performance and traffic distribution simulated by the digital twin model; obtains a network operation management plan based on the real-time performance analysis results, so that the SD-WAN controller can perform network operation management according to the network operation management plan.

[0163] Computer program code for performing the operations of some embodiments of the present application may be written in one or more programming languages ​​or a combination thereof, including object-oriented programming languages ​​such as Java, Smalltalk, C++; and also conventional procedural programming languages ​​such as "C" language or similar programming languages. The program code may be executed entirely on the user's computer, partially on the user's computer, as a separate software package, partially on the user's computer and partially on a remote computer, or entirely on a remote computer or server. In the case of a remote computer, the remote computer may be connected to the user's computer through any type of network, or may be connected to an external computer (e.g., through the Internet using an Internet service provider), including a local area network (LAN) or a wide area network (WAN).

[0164] The flow chart and block diagram in the accompanying drawings illustrate the possible architecture, function and operation of the system, method and computer program product according to various embodiments of the present application. In this regard, each square box in the flow chart or block diagram can represent a module, a program segment or a part of a code, and the module, the program segment or a part of the code contains one or more executable instructions for realizing the specified logical function. It should also be noted that in some alternative implementations, the functions marked in the square box can also occur in a sequence different from that marked in the accompanying drawings. For example, two square boxes represented in succession can actually be executed substantially in parallel, and they can sometimes be executed in the opposite order, depending on the functions involved. It should also be noted that each square box in the block diagram and / or flow chart, and the combination of the square boxes in the block diagram and / or flow chart can be implemented with a dedicated hardware-based system that performs a specified function or operation, or can be implemented with a combination of dedicated hardware and computer instructions.

[0165] The units described in some embodiments of the present application may be implemented by software or hardware. The units described may also be set in a processor, for example, it may be described as: a processor includes a first determination unit, a second determination unit, a selection unit, and a third determination unit. The names of these units do not, in some cases, constitute limitations on the units themselves.

[0166] The functions described above herein may be performed at least in part by one or more hardware logic components. For example, without limitation, exemplary types of hardware logic components that may be used include: field programmable gate arrays (FPGAs), application specific integrated circuits (ASICs), application specific standard products (ASSPs), systems on chips (SOCs), complex programmable logic devices (CPLDs), and the like.

[0167] The above description is only some preferred embodiments of the present application and an explanation of the technical principles used. Those skilled in the art should understand that the scope of the invention involved in the embodiments of the present application is not limited to the technical solutions formed by the specific combination of the above technical features, but should also cover other technical solutions formed by any combination of the above technical features or their equivalent features without departing from the above invention concept. For example, the above features are replaced with (but not limited to) the technical features with similar functions disclosed in the embodiments of the present application to form a technical solution.

Claims

1. A network monitoring management method, characterized in that: Applied to a network monitoring platform, the network monitoring platform is located in a software defined wide area network SD-WAN, a digital twin model corresponding to the SD-WAN is provided on the network monitoring platform, the SD-WAN further comprises: an SD-WAN controller, the network monitoring platform is connected to the SD-WAN controller; the method comprises: receiving network operation data from the SD-WAN controller in real time; Obtaining real-time performance analysis results based on the network operation data and the network performance and traffic distribution simulated by the digital twin model; Based on the real-time performance analysis results, a network operation management plan is obtained so that the SD-WAN controller can perform network operation management according to the network operation management plan.

2. The method according to claim 1, characterized in that Also includes: receiving network configuration data from the SD-WAN controller in real time; Update the digital twin model according to the network configuration data.

3. The method according to claim 1, characterized in that The method further comprises: Displaying relevant information of the digital twin model through a display component; The relevant information includes: network topology, network equipment and operation data; Wherein, the network device is displayed with the actual physical appearance and location of the device; The operation data is superimposed on the corresponding network devices and / or interconnected lines for display.

4. The method according to claim 1, characterized in that The network operation management solution is a performance optimization solution, which includes any one or combination of the following: Traffic redirection, load balancing, and bandwidth optimization; The obtaining of a network operation management plan according to the real-time performance analysis result, so that the SD-WAN controller can perform network operation management according to the network operation management plan, includes: The real-time performance analysis results are sent to the SD-WAN controller so that the SD-WAN controller can obtain the performance optimization plan and perform performance optimization according to the performance optimization plan.

5. The method according to claim 1, characterized in that The network operation management solution is a security enhancement solution, which includes any one or combination of the following: intrusion detection and prevention, application-level access control, and data encryption; The obtaining of a network operation management plan according to the real-time performance analysis result, so that the SD-WAN controller can perform network operation management according to the network operation management plan, includes: An alarm signal is generated according to the real-time performance analysis result, and the alarm signal is sent to the SD-WAN controller, so that the SD-WAN controller can obtain a security enhancement plan according to the alarm signal and enable the SD-WAN edge device to execute the security enhancement plan.

6. The method according to claim 1, characterized in that The network operation data includes any one or combination of the following: Traffic data, latency metrics, throughput, packet loss, and bandwidth utilization.

7. A network monitoring management device, characterized in that: Applied to a network monitoring platform, the network monitoring platform is located in a software-defined wide area network SD-WAN, a digital twin model corresponding to the SD-WAN is set on the network monitoring platform, the SD-WAN also includes: an SD-WAN controller, the network monitoring platform is connected to the SD-WAN controller; the device includes: A real-time receiving module, used to receive network operation data from the SD-WAN controller in real time; A performance analysis module, used to obtain real-time performance analysis results based on the network operation data and the network performance and traffic distribution simulated by the digital twin model; The network operation management module is used to obtain a network operation management plan according to the real-time performance analysis result, and perform network operation management according to the network operation management plan.

8. A network monitoring and management system, characterized in that: Applied in SD-WAN, the system includes: a network monitoring platform and an SD-WAN controller, and the network monitoring platform is provided with a digital twin model corresponding to the SD-WAN; The network monitoring platform is used to receive network operation data from the SD-WAN controller in real time, obtain real-time performance analysis results based on the network operation data and the network performance and traffic distribution simulated by the digital twin model, and obtain a network operation management plan based on the real-time performance analysis results; The SD-WAN controller is used to receive the network operation data in real time, send the network operation data to the network monitoring platform in real time, and perform network operation management according to the network operation management plan.

9. An electronic device, characterized in that: include: one or more processors; a storage device having one or more programs stored thereon, When the one or more programs are executed by the one or more processors, the one or more processors implement the method according to any one of claims 1 to 6.

10. A computer readable medium having a computer program stored thereon, characterized in that: When the program is executed by a processor, the method according to any one of claims 1 to 6 is implemented.

Images