Virtual private network communication system and method based on 5G terminal

Abstract

The invention provides a virtual private network communication system and method based on a 5G terminal, and the system comprises the 5G terminal which is connected with 5G and WIFI double links at the same time, and builds a virtual private network for a user through a vxlan virtual network; the network branch detection and analysis system is used for detecting network state information of the 5G network and the WIFI network; the link control system is used for controlling the priority of an input end link according to the network state information and controlling and distributing the flow of the link; the vxlan virtual network management system is used for configuring and managing the information of the vxlan virtual network; under the clamping of multiple links of the terminal, the transmission path is dynamically adjusted, the communication performance is exerted to the maximum extent, better network service quality is provided for more access users under the terminal, and therefore clients are helped to construct a reliable, flexible and easy-to-maintain virtual private communication network.

Description

Technical Field

[0001] The present invention relates to the field of virtual private network communication technology, and in particular to a virtual private network communication system and method based on a 5G terminal. Background Art

[0002] As a dedicated 5G network access device, 5G terminals play an increasingly important role in today's 5G and digital construction. It can not only provide faster data transmission speed and lower communication delay, but also is very convenient to deploy and install, bringing users fast and convenient network services and experience. At present, the main forms of 5G terminals: 5G terminals connect to 5G base stations in the north, using 5G networks as terminal WAN ports; Ethernet or WIFI hotspots are provided in the south to provide users with local area network connection entrances. At present, the main solutions for 5G terminal applications: ordinary users can connect and use in the 5G existing network, and can directly use 5G terminals for basic Internet services. However, for toB scenarios such as enterprises and factories, various services are often carried through "internal networks", which are generally implemented by conventional VPN or 5G private network solutions. In conventional VPN solutions, 5G terminals directly use the existing network to connect to the VPN server deployed by the enterprise to access the virtual network. 5G terminals provide users with an entrance to an "internal network". In the 5G private network solution, operators take the lead in planning and deploying private networks for enterprises, and connect the enterprise's servers and other resources to the private network. 5G terminals use dedicated SIM cards and are configured with APN and other authentication information to access the 5G private network, thereby providing users with network services within the private network.

[0003] At present, conventional 5G terminals may have the following deficiencies in network communication capabilities: 1. Insufficient reliability: In actual network environments, the quality of 5G networks is greatly affected by interference, network coverage, environment and other factors. When the 5G network is abnormal or of poor quality, if there is no backup link, the user's service quality may be affected or even interrupted, and reliable communication guarantees cannot be provided to users. 2. Insufficient network bandwidth: When there are too many terminal access devices and the amount of concurrent network data is large, the bandwidth of a single 5G link may not meet the demand, resulting in slower data transmission speed and increased transmission delay, which will affect applications with high real-time requirements or tasks that require large amounts of data transmission.

[0004] At present, 5G terminals have the following deficiencies in network deployment and application solutions: 1. Conventional VPN and other network virtualization technologies have poor scalability and are usually used for point-to-point communication. Affected by factors such as network identifiers, the scale and capacity of virtual networks are limited, and the scalability is not strong enough; at the same time, the isolation is also very limited, and interference and conflicts may occur between virtual networks, which is not conducive to building large-scale virtual networks; and the network bandwidth of VPN is limited by the VPN server, and the communication capacity is limited. 2. The deployment and maintenance of the solution using 5G private network is more complicated and not flexible enough: 5G terminals must use a dedicated SIM card with a contracted APN to access the 5G private network, so the expansion or adjustment of the network requires the intervention of operators, which is relatively cumbersome and complicated; 5G private networks are limited by coverage, the construction cost is high, and cross-regional private networks are more complex, and the management and maintenance are difficult and costly. Summary of the invention

[0005] The present invention solves the problems of poor VPN scalability, limited communication capabilities, and difficult and costly construction and maintenance of 5G private networks. It proposes a virtual private network communication system and method based on 5G terminals. It builds a virtual network with strong scalability and flexible deployment through vxlan technology, and dynamically adjusts the transmission path with the support of terminal multi-link to maximize the communication performance and provide better network service quality for more access users under the terminal, thereby helping customers build a reliable, flexible and easy-to-maintain virtual private communication network.

[0006] In order to achieve the above objectives, the following technical solutions are proposed: A virtual private network communication system based on a 5G terminal, comprising: 5G terminals connect to 5G and WIFI dual links at the same time, and build a "virtual private network" for users through the vxlan virtual network; the network branch detection and analysis system detects the network status information of 5G network and WIFI network; The link control system controls the priority of the link and controls and distributes the link traffic according to the network status information; the vxlan virtual network management system configures and manages the vxlan virtual network.

[0007] The 5G terminal of the present invention is mainly connected to the 5G network in the north, and accesses the WIFI network at the same time, and improves the total bandwidth and reliability of the terminal through dual links; the south provides user access through the network port and WIFI hotspot. At the same time, the terminal improves the reliability and stability of the terminal network through algorithms and strategies such as network monitoring, link switching, and load distribution. As an edge device (VTEP) of a vxlan network, the terminal establishes a vxlan tunnel with the opposite VTEP to access the vxlan virtual network and build a virtual layer 2 network switch, thereby providing users with an entrance to access the virtual network, so that users can easily access multiple hanging devices to the "virtual private network". The vxlan technology breaks the physical boundaries and improves the scalability of the network and the flexibility of deployment; at the same time, with the support of the terminal multi-link, the transmission path is dynamically adjusted to maximize the communication performance and provide better network service quality for more access users under the terminal. Thereby helping customers build a reliable, flexible and easy-to-maintain virtual private communication network.

[0008] Preferably, the network branch detection and analysis system is provided with a connection status detection module, a service quality detection module and a signal quality detection module for respectively detecting the network status information of the 5G network and the WIFI network.

[0009] The network branch detection and analysis system of the present invention mainly includes a 5G connection status detection module, a 5G service quality detection module, and a 5G signal quality detection module; a WIFI connection status detection module, a WIFI service quality detection module, and a WIFI signal quality detection module.

[0010] The 5G connection status detection module mainly detects and analyzes the connection status, access point name, access cell ID, IP address allocation, running time, etc. of the 5G network.

[0011] The 5G service quality detection module mainly monitors and analyzes 5G network latency, 5G network packet loss rate, and 5G network throughput.

[0012] The 5G signal quality detection module mainly monitors and analyzes signal strength (RSRP), signal-to-noise ratio (SINR), and bit error rate.

[0013] The WIFI connection status detection module mainly detects and analyzes the hotspot name (SSID), hotspot MAC address (BSSID), and hotspot password of the WIFI connection.

[0014] The WIFI service quality detection module mainly monitors and analyzes WIFI network delay, WIFI network packet loss rate, and WIFI network throughput.

[0015] The WIFI signal quality detection module mainly monitors and analyzes the WIFI channel and signal strength (RSSI).

[0016] Preferably, the link control system comprises: User configuration storage module, which saves the configuration files of link control; The network quality alarm module performs comprehensive analysis and alarm on the data of the network branch detection and analysis system; The alarm information judgment module judges the received alarm information to determine whether an alarm is generated; The abnormal control strategy execution module executes the link control strategy according to the type of alarm information.

[0017] The default policy execution module performs default control on the link when no alarm information is received.

[0018] The link control system of the present invention mainly comprises a user configuration storage module, a network quality alarm module, an alarm information judgment module, a default strategy execution module and an abnormal control strategy execution module.

[0019] After the terminal is started, the link control system is started according to the configuration file. The configuration file saves the main configuration of the link control system, including the default main link, the threshold for enabling the backup link, the link load distribution rule, the link switching condition, and the link switching back condition.

[0020] The link control system conducts comprehensive analysis of the data from the network branch detection and analysis system and issues an alarm. If no alarm information is received, the system works according to the default policy execution module: when the data volume is less than the backup link activation threshold, data is transmitted only through the main link. When the transmission data volume is greater than the link activation threshold, the backup link is started and traffic is distributed according to the load distribution rules to improve data transmission efficiency.

[0021] If the link control system receives an alarm from the network quality alarm module, the abnormal control strategy execution module enables the abnormal control strategy execution module according to the alarm information type: the alarm information judgment module judges the results of the main link alarm, the backup link alarm, and the main link and the backup link alarm. If the alarm information only alarms the default main link, the backup link is enabled and the traffic is distributed according to the load distribution rule; if the alarm of the default main link is continuously received and the link switching conditions are met, the backup link is switched to the main link. When the default main link no longer alarms and the link switching conditions are met, the default main link is switched back to the main link. If the alarm information only alarms the backup link, the backup link is prohibited from being enabled. If the alarm information only alarms all links, the link switching is prohibited. If the backup link enabling threshold is currently met, the backup link is enabled and the traffic is distributed according to the link load distribution rules, thereby providing users with the maximum transmission capacity under current conditions.

[0022] Preferably, the vxlan virtual network management system comprises: A list of available VTEP information on the other end, recording the information of the other end VTEP that can establish a vxlan tunnel with the local VTEP; The local VTEP configuration information list records the local VTEP information, the peer VTEP address information, and the VNI network identifier of the tunnel, as well as the transmission mode of the local VTEP and the peer VTEP. The vxlan tunnel management module detects the available VTEP information of the other end, creates a vxlan tunnel, and monitors and manages the tunnel status.

[0023] The vxlan virtual network management system of the present invention mainly includes a peer available VTEP information list, a local VTEP configuration information list, and a vxlan tunnel management module. The peer available VTEP information list records the peer VTEP device information that can establish a vxlan tunnel with the local VTEP device, mainly including the address of the peer VTEP, the VNI network identifier, the node priority, and other necessary information of the VTEP. The local VTEP configuration information list mainly includes the local VTEP address, the tunnel peer VTEP address, the tunnel's VNI network identifier, the transmission mode, and other necessary information of the local VTEP.

[0024] Preferably, the vxlan tunnel management module includes: Available VTEP detection mechanism detects the quality of available VTEPs in real time to derive the node priority of available VTEPs; The tunnel decision mechanism determines the number of tunnels to be created and the physical interfaces to which the tunnels are bound. It selects the peer VTEP of the vxlan tunnel based on the node priority. Tunnel and user management mechanism, create vxlan tunnel, and monitor and manage the tunnel in real time.

[0025] The vxlan tunnel management module of the present invention mainly includes an available VTEP detection mechanism, a tunnel decision mechanism, and a tunnel and user management mechanism.

[0026] Available VTEP detection mechanism detects the latency and other indicators of available VTEP in real time, determines the link quality of the available VTEP at the other end, and then determines the node priority in the available VTEP information list based on the judgment result; The tunnel decision mechanism determines the number of tunnels to be created and the physical interface to be bound to the tunnel based on the link operation status determined by the link control system, and then determines the VTEP node at the other end of the vxlan tunnel based on the node priority.

[0027] The tunnel and user management mechanism creates a vxlan tunnel based on the results of the tunnel decision mechanism and monitors and manages the status of the tunnel in real time. There is also a tunnel allocation mechanism to provide reliable tunnels for access users.

[0028] Preferably, the tunnel and user management mechanism can create and select the best quality tunnel for the user.

[0029] If the terminal creates multiple tunnels, management and decisions are made based on the tunnel status and user status, and tunnel allocation management is performed on user devices connected to the VTEP, thereby improving the transmission efficiency and quality of each access user.

[0030] A virtual private network communication method based on a 5G terminal, using the above-mentioned virtual private network communication system based on a 5G terminal, comprises the following steps: S1, real-time detection of network status information of 5G network and WIFI network, and analysis of network status information; S2, determine whether there is an alarm information, if so, proceed to S3; if not, perform link selection according to the default strategy execution module; S3, classify and judge the alarm information; S4, based on the alarm type, the abnormal control strategy execution module performs link selection; S5, the link control system reports the link status to the vxlan management module, and performs S7 S6, the vxlan virtual network management system detects the available VTEP information in real time and obtains the node priority of the available VTEP; S7, receives the link status information reported by S5, and determines the information of the vxlan tunnel according to the VTEP priority; S8, create a vxlan tunnel, monitor and manage the tunnel in real time, and allocate tunnels to users.

[0031] Preferably, the default policy execution module comprises the following steps: Determine whether the backup link activation threshold is met. If so, enable the backup link. If not, return to S1.

[0032] When the data volume is less than the backup link activation threshold, data is transmitted only through the main link. When the data volume is greater than the link activation threshold, it is considered to meet the backup link activation threshold, the backup link is started, and the traffic is distributed according to the load distribution rules to improve data transmission efficiency.

[0033] Preferably, the abnormal control strategy execution module comprises the following steps: When the main link is judged to be in alarm, the backup link is activated; When it is judged as a backup link alarm, it is forbidden to enable the backup link; When it is determined that both the main link and the backup link are in alarm, link switching is prohibited, and then it is determined whether the backup link activation threshold is met. If so, the backup link is activated, otherwise it returns to S1.

[0034] The alarm information judgment module has three judgment results: main link alarm, backup link alarm, and alarms for both main and backup links. If the alarm information only warns the default main link, the backup link is enabled and traffic is distributed according to the load distribution rules; if the alarm of the default main link is continuously received and the link switching conditions are met, the backup link is switched to the main link. When the default main link no longer alarms and the link switching conditions are met, the default main link is switched back to the main link. If the alarm information only warns the backup link, enabling the backup link is prohibited. If the alarm information only warns all links, link switching is prohibited. If the backup link enabling threshold is currently met, the backup link is enabled and traffic is distributed according to the link load distribution rules, thereby providing users with the maximum transmission capacity under current conditions.

[0035] Preferably, when the backup link is enabled, traffic is distributed according to a load distribution rule.

[0036] After the backup link is enabled, the system will dynamically allocate data traffic based on the link status to increase the total bandwidth.

[0037] As a preferred option, the vxlan virtual network management system mainly detects and adjusts the vxlan network in real time to provide users with the best "private network" service.

[0038] By real-time detection of available VTEPs' latency and other quality information, the priority of available VTEPs is determined; according to the system's link status, the physical interface bound to the tunnel, the number of tunnels and other information are determined, and the peer VTEP is selected to create a vxlan tunnel. If there are multiple tunnels, tunnels are allocated to users based on the tunnel status and user status, thereby providing each user with a stable "virtual private network" service.

[0039] The beneficial effects of the present invention are: the communication capability of 5G terminals is guaranteed through dual links. When the 5G network is abnormal, the backup link can be used to ensure that the customer's business is not interrupted, thereby meeting the customer's business needs and reducing unnecessary economic losses; when the terminal has too many devices connected to it, it can provide services to users through dual links to provide better network services for more users. The vxlan virtual technology has extremely strong scalability. vxlan has the identification capability of 16M tenants, which can meet the needs of users' huge virtual network deployment, and based on L3 network transmission, the bandwidth will not be limited by the server bandwidth like the traditional VPN solution. Compared with the 5G private network, vxlan can break through the regional restrictions, without considering cross-regional issues, and the network expansion is convenient. The construction cost of the traditional 5G private network ranges from tens to hundreds of RMB, and the subsequent maintenance and operation require continuous investment, which is very costly. It can meet the needs of users to deploy virtual networks on a large scale, and reduce the network construction and operation and maintenance costs of millions for customers. It is simple to deploy and convenient to adjust the network, effectively shortening the process and cycle of network construction, and shortening the average construction period by 10+ days. Through the virtual private network communication system based on 5G terminals, the limitations of tunnel bandwidth, network capacity, scale and other issues have been overcome, and cross-regional, large-scale virtual private network construction can be realized. The terminal can also dynamically adjust the link, tunnel and access user status according to the detection of 5G and WIFI network status in real time, providing guarantees for the user's communication quality and experience. This helps customers quickly implement their "private network" needs and reduces the construction and operation costs and construction period of customers' private networks. BRIEF DESCRIPTION OF THE DRAWINGS

[0040] Figure 1 It is a simplified structural connection diagram of the system of the present invention.

[0041] Figure 2 It is a flow chart of the link control system of the present invention.

[0042] Figure 3 It is a flow chart of the vxlan virtual network management system of the present invention. DETAILED DESCRIPTION

[0043] Embodiment 1: This embodiment proposes a virtual private network communication system based on 5G terminals, referring to Figure 1, including 5G terminals, network branch detection and analysis system, link control system and vxlan virtual network management system. The virtual private network communication system based on 5G terminals of the present invention consists of three parts, namely network quality detection and analysis system, link control system and vxlan virtual network management system, which is the core of the present invention. The virtual private network communication system based on 5G terminals is an independent software system: the network branch detection and analysis system mainly detects the signal indicators, network status and other information of the northbound 5G and WIFI networks of 5G terminals, and saves and analyzes the changes of relevant indicators in real time; the link control system controls the priority of the link according to the network status information, and controls and distributes the traffic of the link; the vxlan virtual network management system configures and manages the network information of vxlan, controls the establishment of vxlan network tunnels, and provides users with access points to "virtual networks".

[0044] The network branch detection and analysis system of the present invention mainly includes a 5G connection status detection module, a 5G service quality detection module, and a 5G signal quality detection module; a WIFI connection status detection module, a WIFI service quality detection module, and a WIFI signal quality detection module.

[0045] The 5G connection status detection module mainly detects and analyzes the connection status, access point name, access cell ID, IP address allocation, running time, etc. of the 5G network.

[0046] The 5G service quality detection module mainly monitors and analyzes 5G network latency, 5G network packet loss rate, and 5G network throughput.

[0047] The 5G signal quality detection module mainly monitors and analyzes signal strength (RSRP), signal-to-noise ratio (SINR), and bit error rate.

[0048] The WIFI connection status detection module mainly detects and analyzes the hotspot name (SSID), hotspot MAC address (BSSID), and hotspot password of the WIFI connection.

[0049] The WIFI service quality detection module mainly monitors and analyzes WIFI network delay, WIFI network packet loss rate, and WIFI network throughput.

[0050] The WIFI signal quality detection module mainly monitors and analyzes the WIFI channel and signal strength (RSSI).

[0051] The link control system of the present invention mainly comprises a user configuration storage module, a network quality alarm module, an alarm information judgment module, a default strategy execution module and an abnormal control strategy execution module.

[0052] After the terminal is started, the link control system is started according to the configuration file. The configuration file saves the main configuration of the link control system, including the default main link, the threshold for enabling the backup link, the link load distribution rule, the link switching condition, and the link switching back condition.

[0053] If the link control system does not receive the network quality alarm from the network quality alarm module, the system will work according to the default policy execution module: when the data volume is less than the backup link activation threshold, data is transmitted only through the main link. When the transmission data volume is greater than the link activation threshold, the backup link is started and the traffic is distributed according to the load distribution rules to improve data transmission efficiency.

[0054] If the link control system receives a network quality alarm from the network quality alarm module, the abnormal control strategy execution module enables the abnormal control strategy execution module according to the alarm information type: the alarm information judgment module judges the results of the main link alarm, the backup link alarm, and the main link and the backup link alarm. If the alarm information only alarms the default main link, the backup link is enabled and the traffic is distributed according to the load distribution rule; if the alarm of the default main link is continuously received and the link switching conditions are met, the backup link is switched to the main link. When the default main link no longer alarms and the link switching conditions are met, the default main link is switched back to the main link. If the alarm information only alarms the backup link, the backup link is prohibited from being enabled. If the alarm information only alarms all links, the link switching is prohibited. If the backup link enabling threshold is currently met, the backup link is enabled and the traffic is distributed according to the link load distribution rule, thereby providing users with the maximum transmission capacity under current conditions.

[0055] The vxlan virtual network management system of the present invention mainly includes a peer available VTEP information list, a local VTEP configuration information list, and a vxlan tunnel management module. The peer available VTEP information list records the peer VTEP device information that can establish a vxlan tunnel with the local VTEP device, mainly including the address of the peer VTEP, the VNI network identifier, the node priority, and other necessary information of the VTEP. The local VTEP configuration information list mainly includes the local VTEP address, the tunnel peer VTEP address, the tunnel's VNI network identifier, the transmission mode, and other necessary information of the local VTEP.

[0056] The vxlan tunnel management module of the present invention mainly includes an available VTEP detection mechanism, a tunnel decision mechanism, and a tunnel and user management mechanism.

[0057] Available VTEP detection mechanism detects the latency and other indicators of available VTEP in real time, determines the link quality of the available VTEP at the other end, and then determines the node priority in the available VTEP information list based on the judgment result; The tunnel decision mechanism determines the number of tunnels to be created and the physical interface to be bound to the tunnel based on the link operation status determined by the link control system, and then determines the VTEP node at the other end of the vxlan tunnel based on the node priority.

[0058] The tunnel and user management mechanism creates a vxlan tunnel based on the results of the tunnel decision mechanism and manages the tunnel in real time.

[0059] The 5G terminal of the present invention is mainly connected to the 5G network in the north direction, and accesses the WIFI network at the same time, and improves the total bandwidth and reliability of the terminal through dual links; the south direction provides user access through the network port and WIFI hotspot. At the same time, the terminal improves the reliability and stability of the terminal network through algorithms and strategies such as network monitoring, link switching, and load distribution. Thereby providing users with a stable "virtual private network". As an edge device (VTEP) of a vxlan network, the terminal establishes a vxlan tunnel with the opposite VTEP to access the vxlan virtual network and build a virtual layer 2 network switch, thereby providing users with an entrance to access the virtual network, so that users can easily access multiple hanging devices to the "virtual private network". The vxlan technology breaks the physical boundaries, improves the scalability of the network and the flexibility of deployment; at the same time, with the support of the terminal multi-link, the transmission path is dynamically adjusted to maximize the communication performance and provide better network service quality for more access users under the terminal. Thereby helping customers build a reliable, flexible and relatively simple to maintain virtual private communication network.

[0060] The present invention ensures the communication capability of 5G terminals through dual links. When the 5G network is abnormal, the backup link can be used to ensure that the customer's business is not interrupted, thereby meeting the customer's business needs and reducing unnecessary economic losses; when the terminal has too many devices connected to it, it can provide services to users through dual links to provide better network services for more users. The vxlan virtual technology has extremely strong scalability. vxlan has the identification capability of 16M tenants, which can meet the needs of users' huge virtual network deployment, and based on L3 network transmission, the bandwidth will not be limited by the server bandwidth like the traditional VPN solution. Compared with the 5G private network, vxlan can break through the regional restrictions, without considering cross-regional issues, and the network expansion is convenient. The construction cost of the traditional 5G private network ranges from tens to hundreds of RMB, and the later maintenance and operation require continuous investment, which is very costly. The present invention can meet the needs of users to deploy virtual networks on a large scale, and reduce the network construction and operation and maintenance costs of millions for customers, and the deployment is simple, the network adjustment and management are convenient, and the process and cycle of network construction are effectively shortened, and the average construction period is shortened by 10+ days. Through the virtual private network communication system based on 5G terminals, the limitations of tunnel bandwidth, network capacity, scale and other issues have been overcome, and cross-regional, large-scale virtual private network construction can be realized. The terminal can also dynamically adjust the link and tunnel status according to the detection of 5G and WIFI network status in real time to ensure the communication quality and experience of users. This helps customers quickly implement their "private network" needs and reduces the construction and operation costs and construction period of customers' private networks.

[0061] This embodiment also proposes a virtual private network communication method based on a 5G terminal, using a virtual private network communication system based on a 5G terminal, referring to Figure 2 , including the following steps: S1, real-time detection of network status information of 5G network and WIFI network, including 5G network connection status, access point name, access cell ID, IP address allocation, running time, 5G network delay, 5G network packet loss rate, 5G network throughput, signal strength (RSRP), signal-to-noise ratio (SINR), bit error rate, WIFI connection hotspot name (SSID), hotspot MAC address (BSSID), hotspot password, WIFI network delay, WIFI network packet loss rate, WIFI network throughput, WIFI channel, signal strength (RSSI).

[0062] S2, analyze the network status information to determine whether there is alarm information, if not, perform link selection according to the default strategy execution module, and then proceed to S5; if yes, proceed to S3.

[0063] S3, classify the alarm information to obtain alarm types, where the alarm types include primary link alarm, backup link alarm, and both primary link and backup link alarm.

[0064] S4, based on the classification results, the abnormal control strategy execution module selects links for the three types of alarms, and then proceeds to S5; S5, the link control system reports the link status to the vxlan management module and proceeds to S7; S6, the vxlan virtual network management system detects the available VTEP information in real time and obtains the node priority of the available VTEP; S7, receives the link status information reported by S5, and determines the information of the vxlan tunnel according to the VTEP priority; S8, reference Figure 3 , create vxlan tunnels, monitor and manage tunnels in real time, and allocate tunnels to users.

[0065] Real-time detection of available VTEP latency and other indicators, determine the link quality of the available VTEP on the other end, and then determine the node priority in the available VTEP information list based on the judgment result; according to the link operation status after the link control system's decision, determine the number of tunnels to be created and the physical interface bound to the tunnel, and then determine the VTEP node on the other end of the vxlan tunnel based on the node priority. Create a vxlan tunnel based on the results of the tunnel decision mechanism and manage the tunnel in real time.

[0066] When the data volume is less than the backup link activation threshold, data is transmitted only through the main link. When the data volume is greater than the link activation threshold, it is considered to meet the backup link activation threshold, the backup link is started, and the traffic is distributed according to the load distribution rules to improve data transmission efficiency.

[0067] The abnormal control strategy execution module includes the following steps: the alarm information judgment module judges that the results are three types: main link alarm, backup link alarm, and alarms for both the main link and the backup link. If the alarm information only alarms the default main link, the backup link is enabled and the traffic is allocated according to the load distribution rules; if the alarm of the default main link is continuously received and the link switching conditions are met, the backup link is switched to the main link. When the default main link no longer alarms and the link switching conditions are met, the default main link is switched back to the main link. If the alarm information only alarms the backup link, enabling the backup link is prohibited. If the alarm information only alarms all links, link switching is prohibited. If the backup link enabling threshold is currently met, the backup link is enabled and the traffic is allocated according to the link load distribution rules, thereby providing users with the maximum transmission capacity under current conditions.

[0068] Embodiment 2: This embodiment adds a traffic allocation mechanism on the basis of embodiment 1, and proposes a virtual private network communication system based on 5G terminals. Figure 1, including 5G terminals, network branch detection and analysis system, link control system and vxlan virtual network management system. The virtual private network communication system based on 5G terminals of the present invention consists of three parts, namely network quality detection and analysis system, link control system and vxlan virtual network management system, which is the core of the present invention. The virtual private network communication system based on 5G terminals is an independent software system: the network branch detection and analysis system mainly detects the signal indicators, network status and other information of the northbound 5G and WIFI networks of 5G terminals, and saves and analyzes the changes of relevant indicators in real time; the link control system controls the priority of the link according to the network status information, and controls and allocates the traffic of the link; the vxlan virtual network management system configures and manages the network information of vxlan, controls the establishment of vxlan network tunnels, and allocates and manages tunnels for users.

[0069] The network branch detection and analysis system of the present invention mainly includes a 5G connection status detection module, a 5G service quality detection module, and a 5G signal quality detection module; a WIFI connection status detection module, a WIFI service quality detection module, and a WIFI signal quality detection module.

[0070] The 5G connection status detection module mainly detects and analyzes the connection status, access point name, access cell ID, IP address allocation, running time, etc. of the 5G network.

[0071] The 5G service quality detection module mainly monitors and analyzes 5G network latency, 5G network packet loss rate, and 5G network throughput.

[0072] The 5G signal quality detection module mainly monitors and analyzes signal strength (RSRP), signal-to-noise ratio (SINR), and bit error rate.

[0073] The WIFI connection status detection module mainly detects and analyzes the hotspot name (SSID), hotspot MAC address (BSSID), and hotspot password of the WIFI connection.

[0074] The WIFI service quality detection module mainly monitors and analyzes WIFI network delay, WIFI network packet loss rate, and WIFI network throughput.

[0075] The WIFI signal quality detection module mainly monitors and analyzes the WIFI channel and signal strength (RSSI).

[0076] The link control system of the present invention mainly comprises a user configuration storage module, a network quality alarm module, an alarm information judgment module, a default strategy execution module and an abnormal control strategy execution module.

[0077] After the terminal is started, the link control system is started according to the configuration file. The configuration file saves the main configuration of the link control system, including the default main link, the threshold for enabling the backup link, the link load distribution rule, the link switching condition, and the link switching back condition.

[0078] If the link control system does not receive a network quality alarm from the network quality alarm module, the system will work according to the default policy execution module: when the data volume is less than the backup link activation threshold, data is transmitted only through the main link. When the transmission data volume is greater than the link activation threshold, the backup link is started and traffic is distributed according to the load distribution rules to improve data transmission efficiency.

[0079] If the link control system receives a network quality alarm from the network quality alarm module, the abnormal control strategy execution module is enabled: the alarm information judgment module determines that the results are three types: main link alarm, backup link alarm, and main link and backup link alarm. If the alarm information only alarms the default main link, the backup link is enabled and the traffic is distributed according to the load distribution rule; if the alarm of the default main link is continuously received and the link switching conditions are met, the backup link is switched to the main link. When the default main link no longer alarms and the link switching conditions are met, the default main link is switched back to the main link. If the alarm information only alarms the backup link, the backup link is prohibited from being enabled. If the alarm information only alarms all links, link switching is prohibited. If the backup link enabling threshold is currently met, the backup link is enabled and the traffic is distributed according to the link load distribution rules, thereby providing users with the maximum transmission capacity under current conditions.

[0080] The vxlan virtual network management system of the present invention mainly includes a peer available VTEP information list, a local VTEP configuration information list, and a vxlan tunnel management module. The peer available VTEP information list records the peer VTEP device information that can establish a vxlan tunnel with the local VTEP device, mainly including the address of the peer VTEP, the VNI network identifier, the node priority, and other necessary information of the VTEP. The local VTEP configuration information list mainly includes the local VTEP address, the tunnel peer VTEP address, the tunnel's VNI network identifier, the transmission mode, and other necessary information of the local VTEP.

[0081] The vxlan tunnel management module of the present invention mainly includes an available VTEP detection mechanism, a tunnel decision mechanism, and a tunnel and user management mechanism.

[0082] Available VTEP detection mechanism detects the latency and other indicators of available VTEP in real time, determines the link quality of the available VTEP at the other end, and then determines the node priority in the available VTEP information list based on the judgment result; The tunnel decision mechanism determines the number of tunnels to be created and the physical interface to be bound to the tunnel based on the link operation status determined by the link control system, and then determines the VTEP node at the other end of the vxlan tunnel based on the node priority.

[0083] The tunnel and user management mechanism creates a vxlan tunnel based on the results of the tunnel decision mechanism and manages the tunnel in real time. If multiple tunnels are created, management and decision making are performed based on the load distribution rules, and tunnel allocation management is performed for user devices connected to the VTEP, thereby improving the transmission efficiency and quality of each access user.

[0084] The 5G terminal of the present invention is mainly connected to the 5G network in the north direction, and accesses the WIFI network at the same time, and improves the total bandwidth and reliability of the terminal through dual links; the south direction provides user access through the network port and WIFI hotspot. At the same time, the terminal improves the reliability and stability of the terminal network through algorithms and strategies such as network monitoring, link switching, and load distribution. Thereby providing users with a stable "virtual private network". As an edge device (VTEP) of a vxlan network, the terminal establishes a vxlan tunnel with the opposite VTEP to access the vxlan virtual network and build a virtual layer 2 network switch, thereby providing users with an entrance to access the virtual network, so that users can easily access multiple hanging devices to the "virtual private network". The vxlan technology breaks the physical boundaries, improves the scalability of the network and the flexibility of deployment; at the same time, with the support of the terminal multi-link, the transmission path is dynamically adjusted to maximize the communication performance and provide better network service quality for more access users under the terminal. Thereby helping customers build a reliable, flexible and relatively simple to maintain virtual private communication network.

[0085] The present invention ensures the communication capability of 5G terminals through dual links. When the 5G network is abnormal, the backup link can be used to ensure that the customer's business is not interrupted, thereby meeting the customer's business needs and reducing unnecessary economic losses; when the terminal has too many devices connected to it, it can provide services to users through dual links to provide better network services for more users. The vxlan virtual technology has extremely strong scalability. vxlan has the identification capability of 16M tenants, which can meet the needs of users' huge virtual network deployment, and based on L3 network transmission, the bandwidth will not be limited by the server bandwidth like the traditional VPN solution. Compared with the 5G private network, vxlan can break through the regional restrictions, without considering cross-regional issues, and the network expansion is convenient. The construction cost of the traditional 5G private network ranges from tens to hundreds of RMB, and the later maintenance and operation require continuous investment, which is very costly. The present invention can meet the needs of users to deploy virtual networks on a large scale, and reduce the network construction and operation and maintenance costs of millions for customers, and the deployment is simple, the network adjustment and management are convenient, and the process and cycle of network construction are effectively shortened, and the average construction period is shortened by 10+ days. Through the virtual private network communication system based on 5G terminals, the limitations of tunnel bandwidth, network capacity, scale and other issues have been overcome, and cross-regional, large-scale virtual private network construction can be realized. The terminal can also dynamically adjust the link, tunnel and access user status according to the detection of 5G and WIFI network status in real time, providing guarantees for the user's communication quality and experience. This helps customers quickly implement their "private network" needs and reduces the construction and operation costs and construction period of customers' private networks.

[0086] This embodiment also proposes a virtual private network communication method based on a 5G terminal, using a virtual private network communication system based on a 5G terminal, referring to Figure 2 , including the following steps: S1, real-time detection of network status information of 5G network and WIFI network, including 5G network connection status, access point name, access cell ID, IP address allocation, running time, 5G network delay, 5G network packet loss rate, 5G network throughput, signal strength (RSRP), signal-to-noise ratio (SINR), bit error rate, WIFI connection hotspot name (SSID), hotspot MAC address (BSSID), hotspot password, WIFI network delay, WIFI network packet loss rate, WIFI network throughput, WIFI channel, signal strength (RSSI).

[0087] S2, analyze the network status information to determine whether there is alarm information, if not, perform link selection according to the default strategy execution module, and then proceed to S5; if yes, proceed to S3.

[0088] S3, classify the alarm information to obtain alarm types, where the alarm types include primary link alarm, backup link alarm, and both primary link and backup link alarm.

[0089] S4, based on the classification results, the abnormal control strategy execution module selects links for the three types of alarms, and then proceeds to S5; S5, the link control system reports the link status to the vxlan management module and proceeds to S7; S6, the vxlan virtual network management system detects the available VTEP information in real time and obtains the node priority of the available VTEP; S7, receives the link status information reported by S5, and determines the information of the vxlan tunnel according to the VTEP priority; S8, reference Figure 3 , create vxlan tunnels, monitor and manage tunnels in real time, and allocate tunnels to users.

[0090] The present invention detects the time delay and other indicators of the available VTEP in real time, judges the link quality of the available VTEP at the opposite end, and then determines the node priority in the available VTEP information list according to the judgment result; according to the link operation status after the link control system decides, determines the number of tunnels to be created and the physical interface bound to the tunnel, and then determines the VTEP node at the opposite end of the vxlan tunnel according to the node priority. According to the result of the tunnel decision mechanism, a vxlan tunnel is created and managed in real time.

[0091] When the data volume is less than the backup link activation threshold, data is transmitted only through the main link. When the data volume is greater than the link activation threshold, it is considered to meet the backup link activation threshold, the backup link is started, and the traffic is distributed according to the load distribution rules to improve data transmission efficiency.

[0092] The abnormal control strategy execution module includes the following steps: the alarm information judgment module judges that the results are three types: main link alarm, backup link alarm, and alarms for both the main link and the backup link. If the alarm information only alarms the default main link, the backup link is enabled and the traffic is allocated according to the load distribution rules; if the alarm of the default main link is continuously received and the link switching conditions are met, the backup link is switched to the main link. When the default main link no longer alarms and the link switching conditions are met, the default main link is switched back to the main link. If the alarm information only alarms the backup link, enabling the backup link is prohibited. If the alarm information only alarms all links, link switching is prohibited. If the backup link enabling threshold is currently met, the backup link is enabled and the traffic is allocated according to the link load distribution rules, thereby providing users with the maximum transmission capacity under current conditions.

[0093] After enabling the backup link, the system will dynamically allocate data traffic according to the link status to increase the total bandwidth. The vxlan virtual network management system mainly detects and adjusts the vxlan network in real time to provide users with the best "private network" service. Determine the priority of the available VTEP by detecting the latency and other quality information of the available VTEP in real time; determine the physical interface bound to the tunnel, the number of tunnels and other information according to the link status of the system, and select the peer VTEP to create a vxlan tunnel. If there are multiple tunnels, tunnels are allocated to users according to the tunnel status and user status, thereby providing each user with a stable "virtual private network" service. If multiple tunnels are created, management and decision-making are carried out according to the load distribution rules, and tunnel allocation management is performed on user devices connected under the VTEP, thereby improving the transmission efficiency and quality of each access user.

Claims

1. A virtual private network communication system based on 5G terminals, characterized in that: include: 5G terminals can connect to 5G and WIFI dual links at the same time, and build a virtual private network for users through the vxlan virtual network; Network branch detection and analysis system, detects network status information of 5G network and WIFI network; The link control system controls the priority of the link and controls and distributes the link traffic according to the network status information; the vxlan virtual network management system configures and manages the vxlan virtual network.

2. According to claim 1, a virtual private network communication system based on a 5G terminal is characterized in that: The network branch detection and analysis system is provided with a connection status detection module, a service quality detection module and a signal quality detection module for respectively detecting the network status information of the 5G network and the WIFI network.

3. According to claim 1, a virtual private network communication system based on a 5G terminal is characterized in that: The link control system comprises: User configuration storage module, which saves the configuration files of link control; The network quality alarm module analyzes and issues alarms on the data of the network branch detection and analysis system; An alarm information judgment module judges the type of alarm information when receiving the alarm information; The abnormal control strategy execution module performs link control according to the type of alarm information; The default policy execution module performs default control on the link when no alarm information is received.

4. According to claim 1, a virtual private network communication system based on a 5G terminal is characterized in that: The vxlan virtual network management system includes: A list of available VTEP information on the other end, recording the information of the other end VTEP that can establish a vxlan tunnel with the local VTEP; The local VTEP configuration information list records the local VTEP information, the peer VTEP address information, and the VNI network identifier of the tunnel, as well as the transmission modes of the local VTEP and the peer VTEP; The vxlan tunnel management module detects the available VTEP information of the other end, creates a vxlan tunnel, and monitors and manages the tunnel status.

5. According to claim 4, a virtual private network communication system based on a 5G terminal is characterized in that: The vxlan tunnel management module includes: Available VTEP detection mechanism detects the quality of available VTEPs in real time to derive the node priority of available VTEPs; The tunnel decision mechanism determines the number of tunnels to be created and the physical interfaces to which the tunnels are bound. It selects the peer VTEP of the vxlan tunnel based on the node priority. Tunnel and user management mechanism, create vxlan tunnel, and monitor and manage the tunnel in real time.

6. A virtual private network communication system based on a 5G terminal according to claim 5, characterized in that: The tunnel and user management mechanism is provided with a tunnel allocation mechanism to create and select tunnels for users; if multiple tunnels are created, management and decision making are performed based on the tunnel status and user status to perform tunnel allocation management for access users.

7. A virtual private network communication method based on a 5G terminal, using a virtual private network communication system based on a 5G terminal according to any one of claims 1 to 6, characterized in that: The following steps are involved: S1, real-time detection of network status information of 5G network and WIFI network, and analysis of network status information; S2, determine whether there is alarm information, if so, proceed to S3; if not, select a link according to the default strategy; S3, classify and judge the alarm information; S4, based on the alarm type, link selection is performed according to the abnormal control strategy; S5, the link control system reports the link status to the vxlan management module and proceeds to S7; S6, the vxlan virtual network management system detects the available VTEP information in real time and obtains the node priority of the available VTEP; S7, receives the link status information reported by S5, and determines the information of the vxlan tunnel according to the VTEP priority; S8, create a vxlan tunnel, monitor and manage the tunnel in real time, and allocate tunnels to users.

8. A virtual private network communication method based on a 5G terminal according to claim 7, characterized in that: The default policy execution module includes the following steps: Determine whether the backup link activation threshold is met. If so, enable the backup link. If not, return to S1.

9. A virtual private network communication method based on a 5G terminal according to claim 7, characterized in that: The abnormal control strategy execution module includes the following steps: When the main link is judged to be in alarm, the backup link is enabled; When it is judged as a backup link alarm, it is forbidden to enable the backup link; When it is determined that both the main link and the backup link are in alarm, link switching is prohibited, and then it is determined whether the backup link activation threshold is met. If so, the backup link is activated, otherwise it returns to S1.

10. A virtual private network communication method based on a 5G terminal according to claim 8 or 9, characterized in that: When the backup link is enabled, traffic is distributed according to the load distribution rules.

Images