Method and device for intelligently managing MCNS topological structure by using composer

Abstract

The invention relates to a method and device for intelligently managing an MCNS topological structure through an orchestrator, and the method comprises the steps: integrating a plurality of SASE services into an SD-WAN orchestrator, obtaining an SASE Connect orchestrator, enabling the service flow in customer-side CPE to reach network-side convergence CPE through an SD-WAN, enabling the network-side convergence CPE to distribute different service flows to different SASEs through the SASE Connect orchestrator, and enabling the SASE Connect orchestrator to distribute the service flows to the network-side convergence CPE through the SASE Connect orchestrator. When the network is congested or the SASE quality is reduced, the SASE Connect orchestrator automatically modifies the distribution strategy, and when the sensitive traffic with extremely high security appears, the SASE Connect orchestrator automatically modifies the network topology. According to the method, the SASE resources are fully utilized by changing an SASE integration scheme, and when the service flow is large or the security priority is highest, the method can correspondingly change an allocation scheme or a topological structure according to a predetermined strategy.

Description

Technical Field

[0001] The present application relates to the field of network security technology, and in particular to a method and device for intelligently managing MCNS topology structure using an orchestrator. Background Art

[0002] SASE, or Secure Access Service Edge, is a cloud-native architecture that unifies network and security functions as services into a single cloud-delivered service. It combines SD-WAN with security functions to provide automatic support for distributed remote and hybrid users, connecting to nearby cloud gateways instead of backhauling traffic to the company data center. This enables organizations to access all applications in a consistent and secure manner while maintaining full visibility and inspection of traffic across all ports and protocols. As part of the SASE integration solution, SD-WAN generally orchestrates CPE resources and binds them to cloud-native security services, that is, a specific network uses a specific SASE. Such a solution is quite simple and easy to implement, but it also brings some problems, mainly manifested in the inability to distinguish different businesses in the same network, that is, different businesses may require different SASE services, different times may require different SASE services, different network quality may require different SASE services, and the topology between SASE services may need to be changed in specific scenarios. These are all things that traditional SASE integration solutions cannot solve. Summary of the invention

[0003] In view of this, the present application proposes a method for intelligently managing the MCNS topology structure using an orchestrator to solve the problems embodied in the above-mentioned background technology.

[0004] According to one aspect of the present application, a method for intelligently managing an MCNS topology structure using an orchestrator is provided, comprising the following steps: Consolidate multiple SASE services into the SD-WAN orchestrator to get a SASE Connect orchestrator; The service traffic in the customer-side CPE reaches the network-side aggregation CPE through SD-WAN; The network-side aggregation CPE distributes different service traffic to different SASEs through the SASE Connect orchestrator; When the network is congested or the SASE quality decreases, the SASE Connect orchestrator automatically modifies the allocation strategy; When security-sensitive traffic occurs, the SASE Connect orchestrator automatically modifies the network topology.

[0005] As an optional implementation scheme of the present application, optionally, the SASE Connect orchestrator's SASE integration solution supports the serial connection of multiple SASE services.

[0006] As an optional implementation scheme of the present application, optionally, the network-side aggregation CPE diverts different service traffic to different SASEs through the SASE Connect orchestrator, including: The SASE Connect orchestrator diverts service traffic based on the DPI technology in the intelligent routing technology; The DPI technology diverts different business traffic to different SASEs by identifying and extracting key information in network transmission.

[0007] As an optional implementation scheme of the present application, optionally, when the network is congested or the SASE quality decreases, the SASE Connect orchestrator automatically modifies the allocation strategy, including: The SASE Connect orchestrator detects network quality based on real-time network quality detection technology in intelligent routing technology; When the business traffic is large, resulting in network congestion and deterioration of SASE quality, the real-time network quality detection technology automatically adjusts the business traffic allocation strategy according to the real-time situation.

[0008] As an optional implementation scheme of the present application, optionally, when extremely sensitive traffic with high security requirements appears, the SASE Connect orchestrator automatically modifies the network topology, including: When extremely sensitive traffic with high security requirements appears, the SASE Connect orchestrator automatically modifies the current network topology based on the DPI and real-time network quality detection technology in the intelligent routing technology; When the business of the sensitive traffic ends, the SASE Connect orchestrator automatically modifies the network topology back to the original topology.

[0009] As an optional implementation scheme of the present application, optionally, the SASE Connect orchestrator's integration solution for SASE includes that the SASE Connect orchestrator not only integrates multiple SASE services, but also can manage multiple sets of SASE services of different brands.

[0010] As an optional implementation scheme of the present application, optionally, it is characterized in that the SASE Connect orchestrator detects the network quality based on the real-time network quality detection technology in the intelligent routing technology, including: The real-time network quality detection technology allocates corresponding SASE services to business traffic according to different times and different network qualities.

[0011] According to the second aspect of the present application, a device for intelligently managing the MCNS topology structure using an orchestrator is provided, comprising the following modules: Integrate the SASE module to integrate multiple SASE services into the SD-WAN orchestrator to obtain a SASEConnect orchestrator; The service traffic aggregation module is used to aggregate the service traffic of the CPE on the client side to the aggregation CPE on the network side; The business traffic diversion module is used by the SASE Connect orchestrator to divert different business traffic to different SASE services; The adjustment module is used by the SASE Connect orchestrator to adjust the allocation strategy and network topology according to different situations.

[0012] As an optional implementation scheme of the present application, optionally, the adjustment module includes: The adjustment policy module is used by the SASE Connect orchestrator to adjust the allocation policy in real time according to different situations; The topology adjustment module is used by the SASE Connect orchestrator to adjust the network topology in real time according to different situations.

[0013] According to the third aspect of the present application, an electronic device is proposed, comprising: processor; a memory for storing processor-executable instructions; Wherein, the processor is configured to implement any one of the methods for intelligently managing the MCNS topology structure using an orchestrator when executing the executable instructions.

[0014] Beneficial effects of this application: The present invention incorporates multiple SASE services into the SD-WAN orchestrator and upgrades it to the SASE Connect orchestrator, so that the SASE integration solution is transformed from SASE integration of SD-WAN to SD-WAN integration of SASE. Through the SASE Connect orchestrator, the integration solution can make full use of SASE resources. When the traffic is large, some traffic flowing to the high-cost SASE can be temporarily diverted to the low-cost SASE according to the predetermined strategy. When the security priority is the highest, all SASEs can be temporarily connected in series according to the predetermined strategy, and all traffic will flow through all SASEs for cleaning. BRIEF DESCRIPTION OF THE DRAWINGS

[0015] The accompanying drawings, which are incorporated in and constitute a part of the specification, illustrate exemplary embodiments, features, and aspects of the present application and, together with the description, serve to explain the principles of the present application.

[0016] Figure 1 A flowchart showing a method for intelligently managing MCNS topology using an orchestrator according to an embodiment of the present application; Figure 2 A block diagram showing a device for intelligently managing MCNS topology using an orchestrator according to an embodiment of the present application; Figure 3 A schematic diagram showing scenario 1 of a method for intelligently managing MCNS topology structure using an orchestrator according to an embodiment of the present application; Figure 4 A schematic diagram showing scenario 2 of the method for intelligently managing the MCNS topology structure using an orchestrator according to an embodiment of the present application; Figure 5 Flowcharts showing scenario one and scenario two in the method for intelligently managing the MCNS topology structure using an orchestrator according to an embodiment of the present application; Figure 6 A schematic diagram showing scenario 3 of the method for intelligently managing the MCNS topology structure using an orchestrator according to an embodiment of the present application; Figure 7 A flowchart showing scenario 3 of the method for intelligently managing the MCNS topology structure using an orchestrator according to an embodiment of the present application is shown; DETAILED DESCRIPTION Various exemplary embodiments, features and aspects of the present application will be described in detail below with reference to the accompanying drawings. The same reference numerals in the accompanying drawings represent elements with the same or similar functions. Although various aspects of the embodiments are shown in the accompanying drawings, the drawings are not necessarily drawn to scale unless otherwise specified.

[0017] Among them, it should be understood that the terms "center", "longitudinal", "lateral", "length", "width", "up", "down", "front", "back", "left", "right", "vertical", "horizontal", "top", "bottom", "inside", "outside", "clockwise", "counterclockwise", "axial", "radial", "circumferential" and the like indicate orientations or positional relationships based on the orientations or positional relationships shown in the accompanying drawings, and are only for the convenience of describing the present application or simplifying the description, and do not indicate or imply that the referred device or element must have a specific orientation, be constructed and operated in a specific orientation, and therefore should not be understood as a limitation on the present application.

[0018] In addition, the terms "first" and "second" are used for descriptive purposes only and should not be understood as indicating or implying relative importance or implicitly indicating the number of the indicated technical features. Thus, a feature defined as "first" or "second" may explicitly or implicitly include one or more of the features. In the description of this application, the meaning of "plurality" is two or more, unless otherwise clearly and specifically defined.

[0019] The word “exemplary” is used exclusively herein to mean “serving as an example, example, or illustration.” Any embodiment described herein as “exemplary” is not necessarily to be construed as preferred or advantageous over other embodiments.

[0020] In addition, in order to better illustrate the present application, numerous specific details are given in the following specific embodiments. It should be understood by those skilled in the art that the present application can also be implemented without certain specific details. In some examples, methods, means, components and circuits well known to those skilled in the art are not described in detail in order to highlight the subject matter of the present application.

[0021] Example 1 Figure 1 The flowchart of the method for intelligently managing the MCNS topology structure by using an orchestrator according to the first embodiment of the present application is shown. The MCNS (Multi-Cloud Native Security) is a multi-cloud native security service, such as Figure 1 As shown, the flow chart includes: S100, integrate multiple SASE services into the SD-WAN orchestrator to obtain a SASE Connect orchestrator.

[0022] The SASE is a cloud-native architecture that unifies network and security functions as services into a single cloud-delivered service. The SD-WAN orchestrator is the SD-WAN Orchestrator, which is one of the core components in the SD-WAN architecture and can coordinate all CPEs, all SASEs, and all network devices. By incorporating the multiple SASE services into the SD-WAN orchestrator, the SD-WAN orchestrator is upgraded to obtain a SASE Connect orchestrator.

[0023] S200. The service traffic in the customer-side CPE reaches the network-side aggregation CPE through SD-WAN.

[0024] The client-side CPE is a CPE placed in the client's office, used to direct the service traffic to the network-side aggregation CPE. The network-side aggregation CPE is a CPE deployed on the cloud platform, used to aggregate the service traffic of multiple client-side CPEs and transmit it to the next-hop network.

[0025] S300 and the network-side aggregation CPE divert different business traffic to different SASEs through the SASE Connect orchestrator.

[0026] After the network-side aggregation CPE completes the aggregation of business traffic, it will use intelligent routing technology to identify the business traffic and perform network quality detection on different SASEs respectively. Finally, it will continue to send the business traffic after network quality judgment through intelligent routing technology, and divert different business traffic to different SASEs.

[0027] S400. When the network is congested or the SASE quality decreases, the SASE Connect orchestrator automatically modifies the allocation strategy.

[0028] When the network load is high and new business traffic is still arriving, which may cause network congestion and reduce the quality of SASE services, the SASE Connect orchestrator will identify this problem based on the network quality and automatically modify the strategy, such as temporarily abandoning some low-security services to bypass SASE, and adjusting some services with relatively low security levels to low-intensity SASE.

[0029] S500. When extremely sensitive traffic with high security requirements appears, the SASE Connect orchestrator automatically modifies the network topology.

[0030] When the network load is low and sensitive traffic with high security requirements appears, the SASE Connect orchestrator can temporarily change the network topology according to the predetermined strategy, that is, connect all SASEs in series. At this time, all business traffic will be cleaned by all SASEs. When the sensitive traffic service with high security requirements ends, the SASE Connect orchestrator will switch the network topology back to the original topology and scenario.

[0031] As an optional implementation scheme of the present application, optionally, in step S100, the SASE Connect orchestrator's SASE integration solution supports the serial connection of multiple SASE services.

[0032] In this implementation scheme, the series connection of multiple SASE services can achieve unified management and monitoring, making it convenient for enterprises to centrally control and manage their networks. Different SASE services may have different optimization strategies and technologies. By connecting these services in series, intelligent routing and optimization of business traffic can be achieved, and the performance and response speed of the network can be improved. Using multiple SASE services in series can achieve multi-level and multi-angle security inspection and processing of business traffic, thereby greatly improving the security of the network. The SASE Connect orchestrator can dynamically select the optimal path to transmit business traffic, thereby realizing the series connection of multiple SASE services. This method can dynamically adjust the route according to the network status and service quality, and improve the flexibility and reliability of the network.

[0033] As an optional implementation scheme of the present application, optionally, in step S300, the network-side aggregation CPE diverts different business traffic to different SASEs through the SASE Connect orchestrator, including: the SASE Connect orchestrator diverts business traffic based on the DPI technology in the intelligent routing technology; the DPI technology diverts different business traffic to different SASEs by identifying and extracting key information in network transmission.

[0034] In this embodiment, after the service traffic reaches the network-side aggregation CPE, the SASE Connect orchestrator sends the service traffic based on the DPI technology in the intelligent routing technology. DPI (Deep Packet Inspection) technology can deeply analyze the content of the data packet, thereby realizing fine classification and identification of network traffic. This classification and identification provides an accurate basis for traffic diversion. Through the DPI technology, the SASE Connect orchestrator can identify different types of network traffic, such as video streams, data streams, voice streams, etc., and select the best transmission path for them according to the characteristics and requirements of these traffic, thereby realizing intelligent allocation and optimization of traffic. Figure 3 In scenario one, after multiple customer-side CPEs reach the "network-side aggregation CPE" through SD-WAN, the "intelligent routing technology" will identify the traffic of services with low security levels (such as APP services provided by large manufacturers such as Douyin that are not related to work) and divert them to low-intensity SASE (low cost). At the same time, the traffic of services with high security levels will be identified and diverted to high-intensity SASE (high cost).

[0035] As an optional implementation scheme of the present application, optionally, in step S400, when the network is congested or the SASE quality is degraded, the SASE Connect orchestrator automatically modifies the allocation strategy, including: the SASE Connect orchestrator detects the network quality based on the real-time network quality detection technology in the intelligent routing technology; when the business traffic is large and causes network congestion and SASE quality degradation, the real-time network quality detection technology automatically adjusts the business traffic allocation strategy according to the real-time situation.

[0036] In this embodiment, when the business traffic is large and the network is congested, the SASE Connect orchestrator will use the real-time network quality detection technology based on the intelligent routing technology to identify the network congestion and deal with the network congestion accordingly. Using the real-time network quality detection technology to send business traffic can achieve dynamic, efficient and reliable network traffic management. Figure 4 In the second scenario, based on the first scenario, the video conference traffic is suddenly increased temporarily, and the security requirements are higher. It is recognized by the "intelligent routing technology" and allocated to the high-intensity SASE. However, for the temporarily increased traffic, the high-intensity SASE is overwhelmed. SASE Connect can identify this situation based on the network quality, automatically modify the policy, and temporarily allocate the email traffic to the low-intensity SASE. At this time, if the low-intensity SASE load is also high, SASE Connect can also identify the network quality and temporarily prevent the Douyin traffic from passing through any SASE, reserving SASE resources for email traffic (this scenario will not be described in detail with pictures).

[0037] As an optional implementation scheme of the present application, optionally, in step S500, when extremely sensitive traffic with high security appears, the SASE Connect orchestrator automatically modifies the network topology, including: when extremely sensitive traffic with high security appears, the SASE Connect orchestrator can automatically modify the current network topology based on the DPI and real-time network quality detection technology in the intelligent routing technology; when the business of the sensitive traffic ends, the SASE Connect orchestrator automatically modifies the network topology back to the original topology.

[0038] The process of scenario 1 and scenario 2 is as follows Figure 5As shown, first, the client-side CPE sends traffic to the network-side aggregation CPE, then identifies the traffic, diverts it according to the security level service, and performs network quality detection on the low-intensity SASE and high-intensity SASE. Next, the network quality is determined based on the detection data, and the traffic of the high-security level service is sent to the high-intensity SASE. At the same time, the network quality is detected again on the low-intensity SASE and high-intensity SASE. Finally, the network quality is determined again based on the detection data, and the traffic of the low-security level service is sent to the low-intensity SASE.

[0039] In this embodiment, when there is business traffic with extremely high security requirements, the SASE Connect orchestrator can combine the DPI and real-time network quality detection technology in the intelligent routing technology to connect multiple SASE services in series to achieve multiple security protections for business traffic. When the business traffic with extremely high security requirements ends the process, the SASE Connect orchestrator switches back to the original topology structure based on the DPI and real-time network quality detection technology to achieve the need to divert traffic of different security levels to different SASEs. Figure 6 In scenario 3, at a time when the whole network load is low, a sensitive flow with extremely high security requirements appears. At this time, considering that other flows do not exist, SASE Connect will change the network topology to connect two SASEs with low strength and high strength in series. The sensitive flow passes through two SASEs in succession to meet security requirements. After the business is completed, it will switch back to the original topology and scenario.

[0040] As an optional implementation scheme of the present application, optionally, the SASE Connect orchestrator's integration solution for SASE includes that the SASE Connect orchestrator can not only integrate multiple SASE services, but also manage multiple sets of SASE services of different brands.

[0041] In this implementation, the SASE Connect orchestrator integration solution supports flexible configuration of multiple SASE services of the same brand according to actual needs, and also supports the management of multiple sets of SASE services of different brands, fully enjoying the advantages brought by SASE of different brands.

[0042] As an optional implementation scheme of the present application, it is optionally characterized in that the SASE Connect orchestrator detects the network quality based on the real-time network quality detection technology in the intelligent routing technology, including: the real-time network quality detection technology can allocate corresponding appropriate SASE services to business traffic according to different times and different network qualities.

[0043] In this implementation scheme, the real-time network quality detection technology continuously monitors and analyzes the quality of network links, including key indicators such as packet loss rate, latency, and jitter, to evaluate the real-time performance status of each link, and dynamically adjusts the service traffic allocation strategy based on these data. Specifically, the real-time network quality detection technology uses a detection mechanism, such as a firewall regularly sending detection messages to the destination IP to collect link quality data. Based on these data, the corresponding appropriate SASE service is allocated to the service traffic at different times and different network qualities.

[0044] The process of scenario three is as follows Figure 7 As shown, first, the client-side CPE sends traffic to the network-side aggregation CPE, then identifies the traffic and triggers the topology change requirement, and requests the topology change to the orchestrator. Then the orchestrator executes the topology change on the low-intensity SASE and the high-intensity SASE in turn. After the change is completed, the orchestrator sends the change completion to the network-side aggregation CPE. Finally, the network-side aggregation CPE sends the traffic to the low-intensity SASE, and then the low-intensity SASE sends the traffic to the high-intensity SASE.

[0045] Example 2 Based on the same principle as the above method, a device for intelligently managing the MCNS topology structure using an orchestrator is also proposed, see Figure 2 , a device 100 according to an embodiment of the present disclosure includes: Integrate the SASE module 110 to integrate multiple SASE services into the SD-WAN orchestrator to obtain a SASEConnect orchestrator; The service traffic aggregation module 120 is used to aggregate the service traffic of the client-side CPE to the network-side aggregation CPE; The business traffic diversion module 130 is used by the SASE Connect orchestrator to divert different business traffic to different SASE services; The adjustment module 140 is used by the SASE Connect orchestrator to adjust the allocation strategy and network topology according to different situations.

[0046] As an optional implementation scheme of the present application, optionally, the adjustment module includes: The adjustment policy module is used by the SASE Connect orchestrator to adjust the allocation policy in real time according to different situations; The topology adjustment module is used by the SASE Connect orchestrator to adjust the network topology in real time according to different situations.

[0047] Obviously, those skilled in the art should understand that all or part of the processes in the above-mentioned embodiment method can be implemented by instructing the relevant hardware through a computer program. The program can be stored in a computer-readable storage medium. When the program is executed, it can include the processes of the embodiments of the above-mentioned control methods. The modules or steps of the present invention can be implemented by a general-purpose computing device. They can be concentrated on a single computing device or distributed on a network composed of multiple computing devices. Optionally, they can be implemented by program codes executable by computing devices, so that they can be stored in a storage device and executed by the computing device, or they can be made into individual integrated circuit modules respectively, or multiple modules or steps therein can be made into a single integrated circuit module for implementation. In this way, the present invention is not limited to any specific combination of hardware and software.

[0048] Those skilled in the art can understand that the implementation of all or part of the processes in the above-mentioned embodiment method can be completed by instructing the relevant hardware through a computer program, and the program can be stored in a computer-readable storage medium. When the program is executed, it can include the processes of the embodiments of the above-mentioned control methods. Among them, the storage medium can be a disk, an optical disk, a read-only memory (ROM), a random access memory (RAM), a flash memory (Flash Memory), a hard disk (Hard Disk Drive, abbreviated as: HDD) or a solid-state drive (SSD), etc.; the storage medium can also include a combination of the above-mentioned types of memory.

[0049] Example 3 Furthermore, an electronic device is proposed, comprising: processor; a memory for storing processor-executable instructions; The processor is configured to implement the method for intelligently managing the MCNS topology structure by using an orchestrator as described in Example 1 when executing the executable instructions.

[0050] The electronic device of the embodiment of the present disclosure includes a processor and a memory for storing processor executable instructions, wherein the processor is configured to implement any of the above-mentioned methods for intelligently managing MCNS topology structures by using an orchestrator when executing the executable instructions.

[0051] It should be noted that the number of processors may be one or more. At the same time, the electronic device of the embodiment of the present disclosure may also include an input device and an output device. The processor, memory, input device, and output device may be connected via a bus or in other ways, which are not specifically limited here.

[0052] The memory is a computer-readable storage medium for the method of using an orchestrator to intelligently manage the MCNS topology structure, and can be used to store software programs, computer executable programs, and various modules, such as: the program or module corresponding to the method of using an orchestrator to intelligently manage the MCNS topology structure in the embodiment of the present disclosure. The processor executes various functional applications and data processing of the electronic device by running the software program or module stored in the memory.

[0053] The input device can be used to receive input numbers or signals. The signal can be a key signal related to user settings and function control of the device / terminal / server. The output device can include a display device such as a display screen.

[0054] The embodiments of the present application have been described above, and the above description is exemplary, not exhaustive, and is not limited to the disclosed embodiments. Many modifications and changes will be apparent to those of ordinary skill in the art without departing from the scope and spirit of the described embodiments. The selection of terms used herein is intended to best explain the principles of the embodiments, practical applications, or improvements to the technology in the market, or to enable other persons of ordinary skill in the art to understand the embodiments disclosed herein.

Claims

1. A method for intelligently managing MCNS topology using an orchestrator, characterized in that The method for transforming from integrating SD-WAN with SASE to integrating SASE with SD-WAN includes the following steps: Consolidate multiple SASE services into the SD-WAN orchestrator to get a SASE Connect orchestrator; The service traffic in the customer-side CPE reaches the network-side aggregation CPE through SD-WAN; The network-side aggregation CPE distributes different service traffic to different SASEs through the SASE Connect orchestrator; When the network is congested or the SASE quality decreases, the SASE Connect orchestrator automatically modifies the allocation strategy; When security-sensitive traffic occurs, the SASE Connect orchestrator automatically modifies the network topology.

2. A method for intelligently managing MCNS topology structure using an orchestrator as claimed in claim 1, characterized in that: The SASE Connect orchestrator's SASE integration solution supports the concatenation of multiple SASE services.

3. A method for intelligently managing MCNS topology structure using an orchestrator as claimed in claim 1, characterized in that: The network-side aggregation CPE distributes different service traffic to different SASEs through the SASE Connect orchestrator, including: The SASE Connect orchestrator diverts service traffic based on the DPI technology in the intelligent routing technology; The DPI technology diverts different business traffic to different SASEs by identifying and extracting key information in network transmission.

4. A method for intelligently managing MCNS topology structure using an orchestrator as claimed in claim 1, characterized in that: When the network is congested or the SASE quality decreases, the SASE Connect orchestrator automatically modifies the allocation strategy, including: The SASE Connect orchestrator detects network quality based on real-time network quality detection technology in intelligent routing technology; When the business traffic is large, resulting in network congestion and deterioration of SASE quality, the real-time network quality detection technology automatically adjusts the business traffic allocation strategy according to the real-time situation.

5. A method for intelligently managing MCNS topology structure using an orchestrator as claimed in claim 1, characterized in that: When security-sensitive traffic appears, the SASE Connect orchestrator automatically modifies the network topology, including: When extremely sensitive traffic with high security requirements appears, the SASE Connect orchestrator automatically modifies the current network topology based on the DPI and real-time network quality detection technology in the intelligent routing technology; When the business of the sensitive traffic ends, the SASE Connect orchestrator automatically modifies the network topology back to the original topology.

6. A method for intelligently managing MCNS topology structure using an orchestrator as claimed in claim 2, characterized in that: The SASE Connect orchestrator's integration solution for SASE includes that the SASE Connect orchestrator not only integrates multiple SASE services, but also can manage multiple sets of SASE services of different brands.

7. A method for intelligently managing MCNS topology structure using an orchestrator as claimed in claim 4, characterized in that: The SASE Connect orchestrator detects network quality based on the real-time network quality detection technology in the intelligent routing technology, including: The real-time network quality detection technology allocates corresponding SASE services to business traffic according to different times and different network qualities.

8. A device for intelligently managing MCNS topology using an orchestrator, comprising: Integrate the SASE module to integrate multiple SASE services into the SD-WAN orchestrator to get a SASE Connect orchestrator; The service traffic aggregation module is used to aggregate the service traffic of the CPE on the client side to the aggregation CPE on the network side; The business traffic diversion module is used by the SASE Connect orchestrator to divert different business traffic to different SASE services; The adjustment module is used by the SASE Connect orchestrator to adjust the allocation strategy and network topology according to different situations.

9. The device for intelligently managing MCNS topology structure using an orchestrator as claimed in claim 8, characterized in that: Adjustment modules, including: The adjustment policy module is used by the SASE Connect orchestrator to adjust the allocation policy in real time according to different situations; The topology adjustment module is used by the SASE Connect orchestrator to adjust the network topology in real time according to different situations.

10. An electronic device, characterized in that: include: processor; a memory for storing processor-executable instructions; The processor is configured to implement a method for intelligently managing an MCNS topology structure using an orchestrator as described in any one of claims 1 to 7 when executing the executable instructions.

Images