Route matching method and system based on traffic priority

Abstract

The invention discloses a route matching method and system based on flow priority, and relates to the technical field of router matching, and the method comprises the following steps: 1, equipment management and strategy configuration; step 2, performing VPN management and performance monitoring; step 3, alarm management and log management; 4, authority management and report generation; step 5, backup and recovery of the configuration; step 6, license management and update management; step 7, network topology and multi-tenant management; and step 8, QoS management and API management, equipment management in the step 1 is used for adding, deleting and configuring the SDWAN equipment, and equipment state monitoring is carried out on a plate data list which consists of fields such as equipment ID, equipment name, equipment type and IP address. According to the invention, the network strategy is set, and the network strategy comprises the application priority, the security strategy and the routing strategy, so that the flow of the router is matched according to the application priority, and the flow is reasonably distributed.

Description

Technical Field

[0001] The present invention relates to the technical field of router matching, and in particular to a method and system for routing matching based on traffic priority. Background Art

[0002] Multiple routing protocols can be run on a router at the same time. Different routing protocols have their own standards to measure the quality of routing, and each routing protocol sends the best route it thinks to the routing table. In actual applications, the basis for the router to select a routing protocol is the routing priority. Different routing protocols are given different routing priorities. The smaller the value, the higher the priority. When there are multiple routes to the same destination address, the one with the smallest priority value can be selected as the optimal route according to the size of the priority, and this route is written into the routing table. The existing technology has the following problems:

[0003] Because existing routers lack consideration of traffic priority during matching, they are unable to effectively perform priority matching operations based on traffic, which results in uneven traffic distribution and inconvenience in use. Summary of the invention

[0004] The present invention provides a route matching method and system based on traffic priority to solve the problems raised in the above background technology.

[0005] In order to solve the above technical problems, the technical solution adopted by the present invention is:

[0006] A method and system for routing matching based on traffic priority, comprising the following steps:

[0007] Step 1: Device management and policy configuration;

[0008] Step 2: VPN management and performance monitoring;

[0009] Step 3: Alarm management and log management;

[0010] Step 4: Permission management and report generation;

[0011] Step 5: Configuration backup and recovery;

[0012] Step 6: License management and update management;

[0013] Step 7: Network topology and multi-tenant management;

[0014] Step 8: QoS management and API management.

[0015] A further improvement of the technical solution of the present invention is that the management of the device in step one is used to add, delete and configure SDWAN devices and device status monitoring. The section data list consists of fields such as device ID, device name, device type, IP address, physical location, status, last online time, bandwidth, software version, and addition time. Then, the network policy is set, which includes application priority, security policy and routing policy. The section data list consists of fields such as policy name, policy type, application or service, priority, source IP, target IP, source port, destination port, transmission protocol, action, remarks, status.

[0016] A further improvement of the technical solution of the present invention is that: in the step 2, it is necessary to create and manage VPN connections, including site-to-site and user remote access configurations. The section data list consists of fields such as VPNID, VPN name, type, local site name, local site IP, remote site name, remote site IP, remote user, encryption method, status, creation time, and update time. After the creation is completed, the network and device performance can be monitored to provide key indicator information such as delay, packet loss and throughput. The section data list consists of fields such as timestamp, device name, delay, packet loss rate, throughput, upstream traffic, downstream traffic, CPU usage, memory usage, network status, etc.

[0017] A further improvement of the technical solution of the present invention is that by configuring the alarm rules in step three, the warning information generated by the system can be viewed and managed. The data list in this section is composed of the fields such as alarm ID, alarm level, alarm type, alarm content, occurrence time, status, confirmation time, confirmation user, solution time, and solution description. At the same time, by collecting and viewing system logs, it is convenient for troubleshooting and auditing. The data list in this section is composed of the fields such as timestamp, log level, IP address, device identification, event type, description, action, user, and result.

[0018] A further improvement of the technical solution of the present invention is that: in the step four, user accounts and permissions can be managed, including the creation of user roles and the adjustment of user permissions. The data list of this section is composed of fields such as user name, name, role, email, mobile phone, status, etc. At the same time, various reports can be generated and viewed, including performance reports and usage reports, and export functions are supported. The data list of this section is composed of fields such as time range, report type, total traffic, upstream traffic, downstream traffic, average delay, packet loss rate, application name, application traffic, maximum used device, device traffic, connection status, number of alarms, and export function.

[0019] A further improvement of the technical solution of the present invention is that: in step five, a backup and recovery function of the system configuration can be provided to prevent the loss of important configurations. The data list of this section consists of the fields of backup ID, backup name, backup time, backup size, backup type, and status.

[0020] A further improvement of the technical solution of the present invention is that: Step six refers to managing and updating the license of the SDWAN system, including activation and renewal of the license. The data list of this section consists of the license number, license type, effective date, expiration date; status, renewal operation, and these fields. At the same time, the software update of the system and equipment can be managed, including automatic and manual update configuration. The data list of this section consists of the update ID, device name, current version, available update version, update type, update status, start update time, completion time, update result, and these fields.

[0021] A further improvement of the technical solution of the present invention is that: in step seven, the network topology diagram of the system can be displayed to help understand the connection relationship between devices. The data list of this section is composed of fields such as device ID, device name, device type, IP address, MAC address, connection status, bandwidth utilization, delay, packet loss rate, and last update time. It also configures and manages multiple tenant environments, and each tenant can have independent network and device configurations. The data list of this section is composed of fields such as tenant ID, tenant name, contact person, contact information, network configuration status, number of devices, and last update time.

[0022] A further improvement of the technical solution of the present invention is that the QoS management in step eight refers to configuring and managing quality services to optimize network performance. The data list of this section consists of the fields such as rule name, rule description, traffic classification, priority, bandwidth guarantee, bandwidth limitation, congestion avoidance technology, application identification, source IP address range, destination IP address range, source port range, destination port range, protocol type, status, etc. At the same time, API interface management can also be provided to allow third-party system integration and automated operation. The data list of this section consists of the fields such as API name, API description, access URL, request method, parameters, response example, status, creation time, and last modification time.

[0023] A routing matching system based on traffic priority includes a device management module, a policy configuration module, a VPN management module, a performance monitoring module, an alarm management module, a log management module, a permission management module, a report module, a configuration module, a license management module, an update management module, a network topology module, a multi-tenant management module, a QoS management module, an API management module, and a software navigation module. Users can enter the corresponding functional module using the software navigation module.

[0024] Due to the adoption of the above technical solution, the present invention has the following technical advances compared with the prior art:

[0025] 1. The present invention provides a routing matching method and system based on traffic priority, which sets a network policy including application priority, security policy and routing policy, so that the traffic of the router is matched according to the priority of the application and the traffic is reasonably distributed.

[0026] 2. The present invention provides a route matching method and system based on traffic priority, which improves the safety of system use by configuring alarm rules, viewing and managing warning information generated by the system, and collecting and viewing system logs.

[0027] 3. The present invention provides a route matching method and system based on traffic priority, which optimizes the network performance of the router system through the mutual cooperation between QoS management and API management, and allows third-party system integration and automated operation to improve the overall user experience during router matching. BRIEF DESCRIPTION OF THE DRAWINGS

[0028] Figure 1 It is a schematic diagram of the method flow of the present invention;

[0029] Figure 2 It is a system schematic diagram of the present invention. DETAILED DESCRIPTION

[0030] The present invention is further described in detail below in conjunction with embodiments:

[0031] Example 1

[0032] like Figure 1 , Figure 2 As shown, the present invention provides a route matching method based on traffic priority, comprising the following steps:

[0033] Step 1: Device management and policy configuration;

[0034] Step 2: VPN management and performance monitoring;

[0035] Step 3: Alarm management and log management;

[0036] Step 4: Permission management and report generation;

[0037] Step 5: Configuration backup and recovery;

[0038] Step 6: License management and update management;

[0039] Step 7: Network topology and multi-tenant management;

[0040] Step 8: QoS management and API management;

[0041] The management of devices in step 1 is used to add, delete and configure SDWAN devices and monitor device status. The data list of this section consists of fields such as device ID, device name, device type, IP address, physical location, status, last online time, bandwidth, software version, and addition time. Then set the network policy, which includes application priority, security policy and routing policy. The data list of this section consists of fields such as policy name, policy type, application or service, priority, source IP, target IP, source port, destination port, transmission protocol, action, remarks, and status. In step 2, you need to create and manage VPN connections, including site-to-site and user remote access configuration. The data list of this section consists of fields such as VPN ID, VPN name, type, local site name, local site IP, remote site name, remote site IP, remote user, encryption method, status, creation time, and update time. After creation, you can monitor network and device performance and provide key indicator information such as latency, packet loss and throughput. The data list of this section consists of fields such as timestamp, device name, latency, packet loss rate, throughput, upstream traffic, downstream traffic, CPU usage, memory usage, and network status.

[0042] In this embodiment, in step one, the operating status of the device can be monitored in real time, and the software version of the selected SDWAN device can be updated. At the same time, the enabled or disabled status of the selected policy can be switched, and the detailed information of the selected policy can be displayed. In step two, the detailed information of the selected VPN connection can be viewed, and the status of the selected VPN connection can be changed. At the same time, the configuration file of the selected VPN connection can be downloaded, and the specific detailed information of the performance monitoring record can be displayed, such as the network status at a specific point in time.

[0043] Example 2

[0044] like Figure 1 , Figure 2As shown, on the basis of Example 1, the present invention provides a technical solution: preferably, in step three, by configuring the alarm rules, the warning information generated by the system can be viewed and managed, and the section data list consists of the fields of alarm ID, alarm level, alarm type, alarm content, occurrence time, status, confirmation time, confirmation user, solution time, solution description, and at the same time, by collecting and viewing the system log, it is convenient for troubleshooting and auditing. The section data list consists of the fields of timestamp, log level, IP address, device identification, event type, description, action, user, result, and can manage user accounts and permissions in step four, including the creation of user roles and user permissions. Adjustment, the data list of this section consists of fields such as user name, name, role, email, mobile phone, status, and you can also generate and view various reports, including performance reports, usage reports, and support export functions. The data list of this section consists of fields such as time range, report type, total traffic, upstream traffic, downstream traffic, average delay, packet loss rate, application name, application traffic, maximum used device, device traffic, connection status, number of alarms, and export function. In step five, the system configuration backup and recovery function can be provided to prevent the loss of important configurations. The data list of this section consists of fields such as backup ID, backup name, backup time, backup size, backup type, and status.

[0045] In this embodiment, step three allows the user to view all detailed information of a single alarm, such as alarm content, alarm type, occurrence time, etc., provides the user with complete alarm context information, allows the user to confirm a single alarm, indicating that the user is aware of the alarm, which helps to distinguish which alarms have been paid attention to, allows the user to enter a solution description for a single alarm and mark it as resolved, which helps to track the alarm processing process and provide a reference for subsequent alarm processing, allows the user to modify part of the alarm information, such as adjusting the alarm level or updating the alarm content, which helps to adjust the alarm information according to actual conditions so that it more accurately reflects the severity of the problem, and can view the log details, including the complete event description and context information, and export the log record information as a file. In step four, the status of the user account can be changed (for example, activated / disabled), and the detailed information of the row report, such as detailed performance data and usage, can be viewed. In step five, a single configuration backup can be downloaded to restore the device configuration to the backup state, and a single configuration backup can be deleted.

[0046] Example 3

[0047] like Figure 1 , Figure 2As shown, on the basis of Example 1, the present invention provides a technical solution: preferably, step six refers to managing and updating the license of the SDWAN system, including activation and renewal of the license, and the section data list consists of the license number, license type, effective date, expiration date; status, renewal operation, these fields, and can manage the software updates of the system and equipment at the same time, including automatic and manual update configurations. The section data list consists of update ID, device name, current version, available update version, update type, update status, start update time, completion time, update result, these fields are composed, and in step seven, the network topology diagram of the system can be displayed to help understand the connection relationship between devices. The section data list consists of device ID, device name, device type, IP address, MAC address, connection status, bandwidth utilization, delay, packet loss rate, last update time, these fields, and Configure and manage multiple tenant environments. Each tenant can have independent network and device configurations. The data list in this section consists of the fields such as tenant ID, tenant name, contact person, contact information, network configuration status, number of devices, and last update time. The QoS management in step eight refers to the configuration and management of quality services to optimize network performance. The data list in this section consists of the fields such as rule name, rule description, traffic classification, priority, bandwidth guarantee, bandwidth limitation, congestion avoidance technology, application identification, source IP address range, destination IP address range, source port range, destination port range, protocol type, and status. At the same time, API interface management can also be provided to allow third-party system integration and automated operations. The data list in this section consists of the fields such as API name, API description, access URL, request method, parameters, response example, status, creation time, and last modification time.

[0048] In this embodiment, in step six, a single license is renewed and activated, and the selected device can be manually updated, and an updated version can be selected for update. In step seven, the user is allowed to modify the device name, IP address, MAC address and other information, and all detailed information of the selected device is displayed, including connection status, delay and packet loss rate, etc. The connection status with the device is tested, including delay and packet loss rate, etc., and the device can be reset to its default configuration state. The detailed network configuration and device configuration information of the selected tenant can be viewed, and the network and device configuration information of the tenant can be exported. In step eight, the QoS rule can be deleted, started, and disabled, and the user is allowed to modify the details of a single API (API name, description, access URL, etc.), allow the user to delete a single API, allow the user to view the specific information of a single API (including request method, parameters, etc.), and allow the user to copy the information of a single API for easy use when creating.

[0049] Example 4

[0050] like Figure 1 , Figure 2 As shown, the present invention provides a routing matching system based on traffic priority: preferably, it includes a device management module, a policy configuration module, a VPN management module, a performance monitoring module, an alarm management module, a log management module, a permission management module, a report module, a configuration module, a license management module, an update management module, a network topology module, a multi-tenant management module, a QoS management module, an API management module, and a software navigation module, and the user can enter the corresponding functional module using the software navigation module.

[0051] The above generally describes the present invention in detail, but it is obvious to a person skilled in the art that some modifications or improvements can be made to the present invention. Therefore, modifications or improvements that do not depart from the spirit of the present invention are within the scope of protection of the present invention.

Claims

1. A route matching method based on traffic priority, characterized in that: The following steps are involved: Step 1: Device management and policy configuration; Step 2: VPN management and performance monitoring; Step 3: Alarm management and log management; Step 4: Permission management and report generation; Step 5: Configuration backup and recovery; Step 6: License management and update management; Step 7: Network topology and multi-tenant management; Step 8: QoS management and API management.

2. A route matching method based on traffic priority according to claim 1, characterized in that: The management of the device in step 1 is used to add, delete and configure SDWAN devices and device status monitoring. The data list of this section consists of the fields of device ID, device name, device type, IP address, physical location, status, last online time, bandwidth, software version, and addition time. Then, the network policy is set, which includes application priority, security policy and routing policy. The data list of this section consists of the fields of policy name, policy type, application or service, priority, source IP, target IP, source port, destination port, transmission protocol, action, remarks, status.

3. A route matching method based on traffic priority according to claim 1, characterized in that: In the step 2, it is necessary to create and manage VPN connections, including site-to-site and user remote access configuration. The data list of this section consists of the fields such as VPNID, VPN name, type, local site name, local site IP, remote site name, remote site IP, remote user, encryption method, status, creation time, and update time. After the creation is completed, the network and device performance can be monitored to provide key indicator information such as delay, packet loss and throughput. The data list of this section consists of the fields such as timestamp, device name, delay, packet loss rate, throughput, upstream traffic, downstream traffic, CPU usage, memory usage, network status, etc.

4. The method for routing matching based on traffic priority according to claim 1, characterized in that: By configuring the alarm rules in step three, the warning information generated by the system can be viewed and managed. The data list in this section consists of the fields such as alarm ID, alarm level, alarm type, alarm content, occurrence time, status, confirmation time, confirmation user, solution time, and solution description. At the same time, the collection and viewing of system logs are convenient for troubleshooting and auditing. The data list in this section consists of the fields such as timestamp, log level, IP address, device identification, event type, description, action, user, and result.

5. The method for routing matching based on traffic priority according to claim 1, characterized in that: In step four, user accounts and permissions can be managed, including the creation of user roles and the adjustment of user permissions. The data list in this section consists of fields such as user name, name, role, email, mobile phone, and status. Various reports can also be generated and viewed, including performance reports and usage reports, and the export function is supported. The data list in this section consists of fields such as time range, report type, total traffic, upstream traffic, downstream traffic, average delay, packet loss rate, application name, application traffic, maximum used device, device traffic, connection status, number of alarms, and export function.

6. The method for routing matching based on traffic priority according to claim 1, characterized in that: The step five may provide a system configuration backup and recovery function to prevent important configurations from being lost. The data list of this section consists of the fields of backup ID, backup name, backup time, backup size, backup type, and status.

7. The method for routing matching based on traffic priority according to claim 1, characterized in that: The step six refers to managing and updating the license of the SDWAN system, including the activation and renewal of the license. The data list of this section consists of the fields such as license number, license type, effective date, expiration date; status, renewal operation, etc. At the same time, the software updates of the system and equipment can be managed, including automatic and manual update configuration. The data list of this section consists of the fields such as update ID, device name, current version, available update version, update type, update status, start update time, completion time, and update result.

8. The method for routing matching based on traffic priority according to claim 1, characterized in that: In step seven, the network topology diagram of the system can be displayed to help understand the connection relationship between devices. The data list in this section consists of fields such as device ID, device name, device type, IP address, MAC address, connection status, bandwidth utilization, latency, packet loss rate, and last update time. Multiple tenant environments can be configured and managed. Each tenant can have independent network and device configurations. The data list in this section consists of fields such as tenant ID, tenant name, contact person, contact information, network configuration status, number of devices, and last update time.

9. The method for routing matching based on traffic priority according to claim 1, characterized in that: The QoS management in step eight refers to configuring and managing quality services to optimize network performance. The data list in this section consists of the fields such as rule name, rule description, traffic classification, priority, bandwidth guarantee, bandwidth limit, congestion avoidance technology, application identification, source IP address range, destination IP address range, source port range, destination port range, protocol type, and status. At the same time, API interface management can also be provided to allow third-party system integration and automated operations. The data list in this section consists of the fields such as API name, API description, access URL, request method, parameters, response example, status, creation time, and last modification time.

10. A route matching system based on traffic priority, characterized in that: It includes device management module, policy configuration module, VPN management module, performance monitoring module, alarm management module, log management module, permission management module, report module, configuration module, license management module, update management module, network topology module, multi-tenant management module, QoS management module, API management module and software navigation module. Users can use the software navigation module to enter the corresponding functional module.

Images