Industrial control network flow generation system based on zero copy mechanism

Abstract

The invention relates to an industrial control network flow generation system based on a zero copy mechanism, the system comprises a support layer, a service capability layer, an interaction layer and a test device, the support layer is constructed on a basic environment of a Linux operating system and used for managing and driving bottom layer physical resources, and the service capability layer is constructed on the basis of the basic environment of the Linux operating system. An equipment driving library, a software development library and a configuration management tool are provided to support an upper-layer function operation environment, WEB service, database service and storage service operation environments are established, and L7-layer application simulation service is provided; the service capability layer is used as a configuration and execution layer of firewall test items; the interaction layer comprises a WEB GUI interface and a Console CLI interface, and the WEB GUI interface is used for receiving a user instruction, sending the user instruction to the service capability layer and receiving and displaying test process data and a test result; the Console CLI interface is used for a professional user to execute equipment maintenance operation. According to the invention, delay and overhead caused by a network stack can be greatly reduced.

Description

Technical Field

[0001] The present application relates to the field of Internet technology, and in particular to an industrial control network traffic generation system based on a zero-copy mechanism. Background Art

[0002] At present, network traffic generation systems are widely used in the field of network performance and control. Tools such as MoonGen and Pktgen can efficiently generate high-throughput network traffic and accurately control the rate and type of traffic. These tools play an important role in testing network device performance, verifying protocol stack implementation, and simulating real network environments. In the field of industrial control, traffic generation systems can be used to test and simulate the performance of industrial network protocols, pre-verify the reliability and real-time performance of the system to ensure that it can withstand high-traffic and high-load environments in actual applications. In addition, traffic generation systems can be directly applied to industrial equipment, and the reliability of industrial networks can be improved by testing the protocol specifications of the equipment.

[0003] However, all products of this type currently have the same common defects, including: First, complex configuration and operation: Although these tools are also powerful, their configuration and use are relatively complex. For industrial users who lack professional network knowledge, learning and operating these tools may take a long time and have a high technical threshold. In addition, complex configuration files and parameter adjustments can easily lead to misconfiguration, thus affecting the accuracy of test results.

[0004] Second, strong hardware dependence: Existing high-performance traffic generation tools usually rely on specific hardware acceleration functions (such as high-speed network cards, CPU processing power, etc.). In industrial control systems, this hardware dependence may bring additional costs, especially when large-scale deployment or application in resource-constrained environments is required.

[0005] Third, limited support for industrial protocols: Although these systems can generate and process common network protocols, they may not support specific industrial control protocols. Most traffic generation systems focus on testing IP protocols, and their support for proprietary protocols used in the industrial control field may not be comprehensive enough, resulting in limited applicability in practical applications.

[0006] Fourth, the real-time and load balance problem: Industrial control systems have extremely high requirements for real-time performance. Although existing traffic generation tools can provide low-latency traffic generation, they may still encounter performance bottlenecks when facing extremely high loads. In this case, the tool may not be able to accurately simulate the extreme load scenarios encountered in actual industrial environments, thus affecting the effectiveness of the test.

[0007] To sum up, the network traffic generation system in the prior art has problems such as complex configuration and operation, strong hardware dependence, limited industrial protocol support, and real-time and load balancing difficulties. The applicant has made corresponding explorations to solve these problems. Summary of the invention

[0008] The purpose of this application is to solve the above problems and provide an industrial control network traffic generation system based on a zero-copy mechanism.

[0009] In order to meet the various objectives of this application, this application adopts the following technical solutions: An industrial control network traffic generation system based on a zero-copy mechanism is proposed to meet one of the purposes of this application, including: Support layer, business capability layer, interaction layer and test equipment, wherein the support layer is built on the Linux operating system basic environment, used to manage and drive the underlying physical resources, provide device driver library, software development library, configuration management tools to support the upper layer function operating environment, build WEB service, database service, storage service operating environment, and provide L7 layer application simulation service; The business capability layer serves as the configuration and execution layer of the firewall test project, wherein the business capability layer includes a traffic configuration module, a traffic generation and monitoring module, and a system management module, wherein the traffic configuration module is used to automatically parse messages and identify a variety of industrial control protocols, and based on the parsing results, generates a traffic model that includes message sending rate, frequency, and traffic mode and supports complex traffic behavior configuration, and provides viewing, exporting, and importing functions for the traffic model; the traffic generation and monitoring module is used to generate industrial control system-specific network traffic and common network traffic that conform to industrial communication standards, supports a variety of industrial control-specific traffic modes, displays the throughput indicators of traffic generation in real time, and displays the overall system operation status in a centralized manner through pie charts and large screens, and has high-performance and high-throughput traffic generation capabilities; the system management module is used to provide test project management, system resource management, user configuration, or log management functions; The interaction layer includes a WEB GUI interface and a Console CLI interface, wherein the WEB GUI interface is used to receive user instructions and send them to the business capability layer, receive and display test process data and test results; the Console CLI interface is used for professional users to perform equipment maintenance operations.

[0010] Optionally, the test device comprises: a control plane, a data plane and a network IO module; wherein the data plane adopts a multi-core processing model, each core independently runs a traffic simulation engine, a traffic generation engine and a data monitoring engine, bypasses the operating system kernel to process data packets in user mode based on DPDK technology, and realizes multi-channel non-interfering traffic generation and monitoring by configuring multiple groups of network cards; the network IO module adopts a zero-copy mechanism to bypass the kernel protocol stack, supports multiple network interfaces, so as to realize bidirectional line-speed transmission and reception of network messages in user mode, and feeds back the traffic to the DP module for statistical verification; Optionally, the message bus implements data exchange and instruction transmission between the control plane, the data plane and the network IO module, and publishes the test dynamic data to the remote management terminal; the remote management terminal interacts with the test device through the WEB GUI interface or the Console CLI interface, the browser communicates with the WEB server through WebSocket, and the WEB server communicates with the control plane through the FastCGI protocol to control the data plane to execute message sending and receiving.

[0011] Optionally, the network IO module adopts a zero-copy mechanism, through memory mapping and direct memory access technology, to avoid multiple copies of data between kernel state and user state and to improve network throughput.

[0012] Optionally, the traffic configuration module identifies the industrial control protocol by matching and identifying a protocol feature library, wherein the protocol feature library contains feature codes and protocol structure information of common industrial control protocols.

[0013] Optionally, the industrial control system dedicated network traffic generated by the traffic generation and monitoring module simulates the device communication behavior and data interaction rules in real industrial scenarios to ensure that the generated traffic complies with industrial communication standards.

[0014] Optionally, the traffic generation and monitoring module has a real-time display function, which collects traffic data at regular intervals and performs real-time analysis to intuitively display throughput indicators in the form of charts.

[0015] Optionally, the WEB GUI interface adopts a responsive design and is compatible with a variety of terminal devices to facilitate users to operate anytime and anywhere.

[0016] Optionally, the industrial control network traffic generation system based on the zero-copy mechanism also includes a security protection module, which is used to encrypt the data transmission and storage of each module of the system to prevent data leakage and illegal access.

[0017] Optionally, the industrial control network traffic generation system based on the zero-copy mechanism also includes an intelligent optimization module, which is used to automatically adjust the parameters of each module according to the system operating status and user configuration to achieve the optimal configuration of system performance.

[0018] Compared with the prior art, the present application aims at the following problems: the measurement accuracy and reliability of commercial non-invasive blood glucose meters in the prior art are low, which cannot meet the needs of self-blood glucose monitoring and clinical applications; and the non-invasive blood glucose detection technology based on skin Raman spectroscopy is difficult to have both good Raman detection depth selectivity and skin autofluorescence suppression ability, which leads to the low measurement accuracy of such technology among different human subjects. The present application includes but is not limited to the following beneficial effects: First, the present application uses a spatially offset excitation and collection structure to improve the selectivity of Raman spectroscopy in the inner layer of the skin, achieving the selective collection of Raman photons in the dermis (200-1500 μm below the surface) with the highest content of glucose molecules, while excluding interfering signals such as Raman photons and fluorescent photons from the surface skin tissue; Secondly, the present application combines short-pulse lasers with high-time-resolution single-photon detectors to perform time-resolved measurements, achieving selective detection of Raman spectra and elimination of inner skin autofluorescence interference in the time domain, while also having good Raman detection depth selectivity and skin autofluorescence suppression capabilities; Thirdly, on the basis of the above advantages, the present application can greatly eliminate the interference introduced by the differences in the properties of surface skin tissue and the autofluorescence emission properties of the skin between different individuals while improving the sensitivity of glucose molecule detection, thereby improving the accuracy of blood glucose concentration detection between different human subjects. In addition, the industrial control network traffic generation system based on the zero-copy mechanism provided by the present application is portable, easy to operate, fast in measurement, and less affected by the differences in the properties of the skin between different human subjects, and is applicable to a wider population.

[0019] Compared with the prior art, the present application aims to solve the problems of network traffic generation systems in the prior art, such as complex configuration and operation, strong hardware dependence, limited industrial protocol support, and real-time and load balancing problems. The present application includes but is not limited to the following beneficial effects: First, this system is based on DPDK technology, which can bypass the operating system kernel and directly process data packets in user mode, greatly reducing the delay and overhead caused by the network stack.

[0020] Second, the zero-copy technology is used to avoid unnecessary data copy operations during packet processing. By reducing data transmission between the CPU and memory, the system not only improves processing efficiency, but also reduces the consumption of system resources, enabling it to maintain high performance under high load conditions. The system supports multi-core parallel processing and can fully utilize the computing power of multi-core CPUs. By distributing packet processing tasks to multiple cores, large-scale traffic generation and transmission can be achieved while maintaining stable performance.

[0021] Third, the system provides precise control over traffic generation, and users can flexibly configure parameters such as data packet rate, size, protocol type, etc. It can simulate complex network environments and generate traffic with specific patterns, such as burst traffic, continuous high-load traffic, etc.

[0022] Fourth, the system can utilize the hardware features of modern network cards for acceleration, such as RSS (Receive Side Scaling) and hardware queues.

[0023] Fifth, the system has built-in support for multiple industrial control network protocols, including but not limited to more than 15 industrial control protocols such as NC-Link, S7, Modbus, MC, FOCAS, FINS, GE-SRTP, etc.

[0024] Sixth, the system provides a wealth of analysis tools and detailed reporting functions, allowing users to monitor traffic generation in real time and generate detailed test reports.

[0025] Seventh, the system uses efficient memory management and optimized CPU usage strategy, and its resource usage is relatively low even under high traffic. BRIEF DESCRIPTION OF THE DRAWINGS

[0026] The above and / or additional aspects and advantages of the present application will become apparent and easily understood from the following description of the embodiments in conjunction with the accompanying drawings, in which: Figure 1 This is an exemplary architecture of an industrial control network traffic generation system based on a zero-copy mechanism in an embodiment of the present application; Figure 2 This is a system logic architecture diagram for high-performance industrial control network traffic generation based on a zero-copy mechanism in an embodiment of the present application. DETAILED DESCRIPTION

[0027] The embodiments of the present application are described in detail below, and examples of the embodiments are shown in the accompanying drawings, wherein the same or similar reference numerals throughout represent the same or similar elements or elements having the same or similar functions. The embodiments described below with reference to the accompanying drawings are exemplary and are only used to explain the present application, and cannot be interpreted as limiting the present application.

[0028] It will be understood by those skilled in the art that, unless expressly stated, the singular forms "one", "said", and "the" used herein may also include plural forms. It should be further understood that the term "comprising" used in the specification of the present application refers to the presence of the features, integers, steps, operations, elements and / or components, but does not exclude the presence or addition of one or more other features, integers, steps, operations, elements, components and / or groups thereof. It should be understood that when we refer to an element as being "connected" or "coupled" to another element, it may be directly connected or coupled to the other element, or there may be an intermediate element. In addition, the "connection" or "coupling" used herein may include wireless connection or wireless coupling. The term "and / or" used herein includes all or any unit and all combinations of one or more associated listed items.

[0029] It will be understood by those skilled in the art that, unless otherwise defined, all terms (including technical and scientific terms) used herein have the same meaning as generally understood by those skilled in the art to which this application belongs. It should also be understood that terms such as those defined in common dictionaries should be understood to have meanings consistent with the meanings in the context of the prior art, and will not be interpreted with idealized or overly formal meanings unless specifically defined as here.

[0030] It will be understood by those skilled in the art that the "client", "terminal" and "terminal device" used herein include both devices with wireless signal receivers, which are devices with only wireless signal receivers without transmission capabilities, and devices with receiving and transmitting hardware, which are devices with receiving and transmitting hardware capable of two-way communication on a two-way communication link. Such devices may include: cellular or other communication devices such as personal computers, tablet computers, which have single-line displays or multi-line displays or cellular or other communication devices without multi-line displays; PCS (Personal Communications Service, personal communication system), which can combine voice, data processing, fax and / or data communication capabilities; PDA (Personal Digital Assistant, personal digital assistant), which may include a radio frequency receiver, pager, Internet / intranet access, web browser, notepad, calendar and / or GPS (Global Positioning System, global positioning system) receiver; conventional laptop and / or palmtop computers or other devices, which have and / or include a conventional laptop and / or palmtop computer or other device with and / or including a radio frequency receiver. The "client", "terminal" and "terminal device" used herein may be portable, transportable, installed in a vehicle (air, sea and / or land), or suitable and / or configured to run locally, and / or in a distributed form, at any other location on the earth and / or in space. The "client", "terminal" and "terminal device" used herein may also be a communication terminal, an Internet terminal, a music / video playback terminal, such as a PDA, a MID (Mobile Internet Device) and / or a mobile phone with a music / video playback function, or a smart TV, a set-top box and other devices.

[0031] The hardware referred to by the names such as "server", "client", and "service node" in this application is essentially an electronic device with capabilities equivalent to those of a personal computer. It is a hardware device that has the necessary components revealed by the von Neumann principle, such as a central processing unit (including an arithmetic unit and a controller), a memory, an input device, and an output device. The computer program is stored in its memory, and the central processing unit calls the program stored in the external memory into the internal memory for execution, executes the instructions in the program, and interacts with the input and output devices to complete specific functions.

[0032] It should be pointed out that the concept of "server" referred to in this application can also be extended to the case of server clusters. According to the network deployment principle understood by those skilled in the art, the servers should be logically divided. In physical space, these servers can be independent of each other but can be called through interfaces, or integrated into a physical computer or a set of computer clusters. Those skilled in the art should understand this flexibility, and should not use it to restrict the implementation of the network deployment method of this application.

[0033] Unless expressly specified, one or more technical features of the present application can be deployed on a server for implementation and accessed by a client through a remote call to obtain an online service interface provided by the server, or can be directly deployed and run on a client for access.

[0034] The neural network models referenced or may be referenced in this application, unless expressly specified, can be deployed on a remote server and remotely called on the client, or can be deployed and directly called on a client with sufficient device capabilities. In some embodiments, when it runs on the client, its corresponding intelligence can be obtained through transfer learning to reduce the requirements for the client's hardware operating resources and avoid excessive occupation of the client's hardware operating resources.

[0035] Unless explicitly specified, the various data involved in this application can be stored remotely on a server or on a local terminal device, as long as it is suitable for being called by the technical solution of this application.

[0036] Those skilled in the art should be aware that, although the various methods of the present application are described based on the same concept and thus present commonality to each other, unless otherwise specified, these methods can be independently executed. Similarly, for each embodiment disclosed in the present application, they are all proposed based on the same inventive concept, therefore, concepts with the same expression, and concepts that are appropriately changed for convenience despite different expressions, should be understood as equivalent.

[0037] Unless the mutually exclusive relationship between the embodiments to be disclosed in this application is explicitly stated, the relevant technical features involved in each embodiment can be cross-combined to flexibly construct a new embodiment, as long as such combination does not deviate from the creative spirit of this application and can meet the needs of the prior art or solve certain deficiencies in the prior art. Those skilled in the art should be aware of this flexibility.

[0038] See also Figure 1 In one embodiment, the industrial control network traffic generation system based on the zero-copy mechanism of the present application includes: Support layer, business capability layer, interaction layer and test equipment, wherein the support layer is built on the Linux operating system basic environment, used to manage and drive the underlying physical resources, provide device driver library, software development library, configuration management tools to support the upper layer function operating environment, build WEB service, database service, storage service operating environment, and provide L7 layer application simulation service; The business capability layer serves as the configuration and execution layer of the firewall test project, wherein the business capability layer includes a traffic configuration module, a traffic generation and monitoring module, and a system management module, wherein the traffic configuration module is used to automatically parse messages and identify a variety of industrial control protocols, and based on the parsing results, generates a traffic model that includes message sending rate, frequency, and traffic mode and supports complex traffic behavior configuration, and provides viewing, exporting, and importing functions for the traffic model; the traffic generation and monitoring module is used to generate industrial control system-specific network traffic and common network traffic that conform to industrial communication standards, supports a variety of industrial control-specific traffic modes, displays the throughput indicators of traffic generation in real time, and displays the overall system operation status in a centralized manner through pie charts and large screens, and has high-performance and high-throughput traffic generation capabilities; the system management module is used to provide test project management, system resource management, user configuration, or log management functions; The interaction layer includes a WEB GUI interface and a Console CLI interface, wherein the WEB GUI interface is used to receive user instructions and send them to the business capability layer, receive and display test process data and test results; the Console CLI interface is used for professional users to perform equipment maintenance operations.

[0039] In some embodiments, the test device comprises: a control plane, a data plane and a network IO module; wherein the data plane adopts a multi-core processing model, each core independently runs a traffic simulation engine, a traffic generation engine and a data monitoring engine, bypasses the operating system kernel to process data packets in user mode based on DPDK technology, and realizes multi-channel non-interfering traffic generation and monitoring by configuring multiple groups of network cards; the network IO module adopts a zero-copy mechanism to bypass the kernel protocol stack, supports multiple network interfaces, so as to realize bidirectional line-speed transmission and reception of network messages in user mode, and feeds back the traffic to the DP module for statistical verification; In some embodiments, the message bus implements data exchange and instruction transmission between the control plane, the data plane and the network IO module, and publishes the test dynamic data to the remote management terminal; the remote management terminal interacts with the test device through the WEB GUI interface or the Console CLI interface, the browser communicates with the WEB server through WebSocket, and the WEB server communicates with the control plane through the FastCGI protocol to control the data plane to execute message sending and receiving.

[0040] In some embodiments, the network IO module adopts a zero-copy mechanism, through memory mapping and direct memory access technology, to avoid multiple copies of data between kernel state and user state and to improve network throughput.

[0041] In some embodiments, the traffic configuration module identifies the industrial control protocol based on matching and identification of a protocol feature library, wherein the protocol feature library contains feature codes and protocol structure information of common industrial control protocols.

[0042] In some embodiments, the industrial control system dedicated network traffic generated by the traffic generation and monitoring module simulates the device communication behavior and data interaction rules in real industrial scenarios to ensure that the generated traffic complies with industrial communication standards.

[0043] In some embodiments, the real-time display function of the traffic generation and monitoring module collects traffic data at regular intervals and performs real-time analysis to intuitively display throughput indicators in the form of charts.

[0044] In some embodiments, the WEB GUI interface adopts a responsive design and is compatible with a variety of terminal devices to facilitate users to operate anytime and anywhere.

[0045] In some embodiments, the industrial control network traffic generation system based on the zero-copy mechanism also includes a security protection module, which is used to encrypt the data transmission and storage of each module of the system to prevent data leakage and illegal access.

[0046] In some embodiments, the industrial control network traffic generation system based on the zero-copy mechanism also includes an intelligent optimization module, which is used to automatically adjust the parameters of each module according to the system operation status and user configuration to achieve the optimal configuration of system performance.

[0047] Specifically, if Figure 1As shown in the overall functional architecture, the system adopts a layered design, which is divided into the support layer, business capability layer and interaction layer from bottom to top. Each layer interacts through the message bus and API interface to encapsulate its own internal processing flow. The support layer is built on the Linux operating system basic environment and is responsible for the management and driving of the underlying physical resources; provides support for the upper-layer functional operating environment, including device driver library, software development library, configuration management tools, etc.; provides WEB services, database services, storage service operating environment; and also provides L7 layer application simulation services. The business capability layer is the configuration and execution layer of the firewall test project. It is divided into three modules: traffic configuration, traffic generation and monitoring, and system management. Among them, the traffic configuration module: users can manually configure or import industrial control traffic sample messages through the sample message function. The sample message can be the real industrial control traffic data pre-built in the system and captured by the user, or the simulated industrial control traffic message created manually. This configuration process involves specifying various characteristic parameters of the message, such as message length, protocol type, source / destination IP address, port number, etc. The system will automatically parse the sample message provided by the user, extract and identify the information of each field in the message. This parsing process can identify common industrial control protocols (such as Modbus, S7, OPC, etc.) and present them to the user in a structured manner for further operation. Based on the parsed sample message, the system can generate the corresponding traffic model. This traffic model will include the message sending rate, sending frequency, traffic mode (such as burst, stable, etc.), and support the configuration of complex traffic behaviors (such as multi-point sending, time synchronization, etc.). Users can view the details of the generated traffic model in the system. The browsing function includes viewing the content of the message sample, the configuration parameters of the traffic model, and the expected performance of the traffic behavior. Users can export the generated traffic model to a standardized format (such as pcap) for sharing between different systems or projects. In addition, users can also import externally generated traffic models and quickly apply them in the current system. The traffic generation and monitoring module generates dedicated network traffic related to industrial control systems, including but not limited to NC-Link protocol, S7 protocol, Modbus protocol, MC protocol, FOCAS protocol, FINS protocol, GE-SRTP protocol and more than 15 other industrial control protocols. The generated traffic complies with industrial communication standards and supports industrial control-specific traffic modes such as long connections, short connections, and periodic messages. The module supports the generation of common network traffic, such as TCP, UDP, HTTP, FTP and other protocol communications, to meet various network testing needs. The module provides a real-time display function that can display the throughput indicators of the system-generated traffic, such as data transmission rate, message processing rate, packet loss rate, etc., to help users monitor traffic generation. It provides pie charts and large screen functions to centrally display the overall operating status of the traffic generation system, including throughput, protocol distribution, real-time alarms and other information. The module also supports high-performance and high-throughput traffic generation.System management module: provides auxiliary functions such as test project management, system resource management, user configuration, and log management.

[0048] The interactive layer provides a WEB GUI interface, which is mainly responsible for receiving user instructions, sending them to the back-end business capability layer, generating corresponding traffic models or sending generation instructions to the back-end; receiving and displaying test process data and test results. A Console CLI interface is provided for professional users to perform equipment maintenance operations.

[0049] like Figure 2 In the system logical architecture diagram shown, the central boxed part shows the internal technical design of the test equipment, mainly including the design of the control plane (CP), data plane (DP) and network IO module.

[0050] In the data plane, a multi-core processing model is adopted, and each core independently runs the traffic simulation engine, traffic generation engine, and data monitoring engine. This design can support the generation of multiple traffic flows without interfering with each other. Efficient traffic generation and monitoring can be achieved by simply configuring multiple sets of network cards for the device. The traffic generation engine is based on DPDK technology, which can bypass the operating system kernel and directly process data packets in user mode, greatly reducing the delay and overhead caused by the network stack.

[0051] The network IO module uses a zero-copy mechanism to significantly improve network throughput and reduce latency by bypassing the kernel protocol stack. The module supports a variety of network interfaces, including physical network cards, virtual network cards, and TAP devices. Network messages are sent and received directly in the user state of the operating system, thus achieving bidirectional line-speed transmission and reception. Ultimately, these flows from two physical or virtual interfaces are fed back to the DP module for statistical verification, and the data is collated and statistically analyzed by the data monitoring engine.

[0052] As a high-speed data channel, the message bus realizes data exchange and command transmission between CP, DP and IO modules. All dynamic data in the test process is also published to the remote management terminal through the message bus, realizing real-time dynamic data display on the user interface.

[0053] The remote management terminal can interact with the test equipment through the WEB GUI or Console CLI. The GUI is mainly used for user operations, while the CLI provides support for professional maintenance. The browser establishes two-way communication with the WEB server in the device through WebSocket, sends control instructions and configuration parameters, and receives traffic data and updates the interface. The WEB server communicates with the CP through the FastCGI protocol, and ultimately controls the execution of the DP, which is responsible for calling the network IO module to send and receive messages.

[0054] The industrial control network traffic generation system based on zero-copy mechanism of this application is based on multi-core processing model, DPDK technology and zero-copy mechanism, adopts the architecture combining control plane, data plane and network IO module, and realizes efficient industrial control traffic generation and low-latency data transmission through multi-core parallel processing. The message bus is responsible for data exchange and instruction transmission between modules to ensure the coordinated operation of the system. The remote management terminal provides WEB GUI and Console CLI interfaces to realize user-friendly and flexible configuration and monitoring management.

[0055] It can be seen from the above embodiments that, compared with the prior art, the present application aims to solve the problems of the network traffic generation system in the prior art, such as complex configuration and operation, strong hardware dependence, limited industrial protocol support, and real-time and load balancing problems. The present application includes but is not limited to the following beneficial effects: First, this system is based on DPDK technology, which can bypass the operating system kernel and process data packets directly in user mode, greatly reducing the delay and overhead caused by the network stack.

[0056] Second, the zero-copy technology is used to avoid unnecessary data copy operations during packet processing. By reducing data transmission between the CPU and memory, the system not only improves processing efficiency, but also reduces the consumption of system resources, enabling it to maintain high performance under high load conditions. The system supports multi-core parallel processing and can fully utilize the computing power of multi-core CPUs. By distributing packet processing tasks to multiple cores, large-scale traffic generation and transmission can be achieved while maintaining stable performance.

[0057] Third, the system provides precise control over traffic generation, and users can flexibly configure parameters such as data packet rate, size, protocol type, etc. It can simulate complex network environments and generate traffic with specific patterns, such as burst traffic, continuous high-load traffic, etc.

[0058] Fourth, the system can utilize the hardware features of modern network cards for acceleration, such as RSS (Receive Side Scaling) and hardware queues.

[0059] Fifth, the system has built-in support for multiple industrial control network protocols, including but not limited to more than 15 industrial control protocols such as NC-Link, S7, Modbus, MC, FOCAS, FINS, GE-SRTP, etc.

[0060] Sixth, the system provides a wealth of analysis tools and detailed reporting functions, allowing users to monitor traffic generation in real time and generate detailed test reports.

[0061] Seventh, the system uses efficient memory management and optimized CPU usage strategy, and its resource usage is relatively low even under high traffic.

[0062] A person skilled in the art can understand that all or part of the processes in the above-mentioned embodiments of the present application can be implemented by instructing the relevant hardware through a computer program, and the computer program can be stored in a computer-readable storage medium. When the program is executed, it can include the processes of the embodiments of the above-mentioned methods. Among them, the aforementioned storage medium can be a computer-readable storage medium such as a disk, an optical disk, a read-only memory (ROM), or a random access memory (RAM).

[0063] The above description is only a partial implementation method of the present application. It should be pointed out that for ordinary technicians in this technical field, several improvements and modifications can be made without departing from the principles of the present application. These improvements and modifications should also be regarded as the scope of protection of the present application.

Claims

1. An industrial control network traffic generation system based on a zero-copy mechanism, characterized in that: include: Support layer, business capability layer, interaction layer and test equipment, wherein the support layer is built on the Linux operating system basic environment, used to manage and drive the underlying physical resources, provide device driver library, software development library, configuration management tools to support the upper layer function operating environment, build WEB service, database service, storage service operating environment, and provide L7 layer application simulation service; The business capability layer serves as the configuration and execution layer of the firewall test project, wherein the business capability layer includes a traffic configuration module, a traffic generation and monitoring module, and a system management module, wherein the traffic configuration module is used to automatically parse messages and identify a variety of industrial control protocols, and based on the parsing results, generates a traffic model that includes message sending rate, frequency, and traffic mode and supports complex traffic behavior configuration, and provides viewing, exporting, and importing functions for the traffic model; the traffic generation and monitoring module is used to generate industrial control system-specific network traffic and common network traffic that conform to industrial communication standards, supports a variety of industrial control-specific traffic modes, displays the throughput indicators of traffic generation in real time, and displays the overall system operation status in a centralized manner through pie charts and large screens, and has high-performance and high-throughput traffic generation capabilities; the system management module is used to provide test project management, system resource management, user configuration, or log management functions; The interaction layer includes a WEB GUI interface and a Console CLI interface, wherein the WEB GUI interface is used to receive user instructions and send them to the business capability layer, receive and display test process data and test results; the Console CLI interface is used for professional users to perform equipment maintenance operations.

2. The industrial control network traffic generation system based on the zero-copy mechanism according to claim 1 is characterized in that The test equipment includes: a control plane, a data plane and a network IO module; wherein the data plane adopts a multi-core processing model, each core independently runs a traffic simulation engine, a traffic generation engine and a data monitoring engine, and bypasses the operating system kernel to process data packets in user mode based on DPDK technology, and realizes multi-channel non-interfering traffic generation and monitoring by configuring multiple groups of network cards; the network IO module adopts a zero-copy mechanism to bypass the kernel protocol stack, supports multiple network interfaces, so as to realize bidirectional line-speed transmission and reception of network messages in user mode, and feeds back the traffic to the DP module for statistical verification.

3. The industrial control network traffic generation system based on the zero copy mechanism according to claim 2 is characterized in that: The message bus realizes data exchange and instruction transmission between the control plane, the data plane and the network IO module, and publishes the test dynamic data to the remote management terminal; the remote management terminal interacts with the test equipment through the WEB GUI interface or the Console CLI interface, the browser communicates with the WEB server through WebSocket, and the WEB server communicates with the control plane through the FastCGI protocol to control the data plane to execute message sending and receiving.

4. The industrial control network traffic generation system based on the zero copy mechanism according to claim 2 is characterized in that: The network IO module adopts a zero-copy mechanism, through memory mapping and direct memory access technology, to avoid multiple copies of data between kernel state and user state and to improve network throughput.

5. The industrial control network traffic generation system based on the zero copy mechanism according to claim 1 is characterized in that: The traffic configuration module identifies the industrial control protocol by matching and identifying the protocol feature library, wherein the protocol feature library contains feature codes and protocol structure information of common industrial control protocols.

6. The industrial control network traffic generation system based on the zero copy mechanism according to claim 1 is characterized in that: The industrial control system dedicated network traffic generated by the traffic generation and monitoring module simulates the device communication behavior and data interaction rules in real industrial scenarios to ensure that the generated traffic complies with industrial communication standards.

7. The industrial control network traffic generation system based on the zero copy mechanism according to claim 1 is characterized in that: The real-time display function of the traffic generation and monitoring module collects traffic data at regular intervals and performs real-time analysis to intuitively display throughput indicators in the form of charts.

8. The industrial control network traffic generation system based on the zero copy mechanism according to claim 1 is characterized in that: The WEB GUI interface adopts a responsive design and is compatible with a variety of terminal devices to facilitate users to operate anytime and anywhere.

9. The industrial control network traffic generation system based on the zero copy mechanism according to claim 1 is characterized in that: It also includes a security protection module, which is used to encrypt the data transmission and storage of each module of the system to prevent data leakage and illegal access.

10. The industrial control network traffic generation system based on the zero copy mechanism according to claim 1, characterized in that: It also includes an intelligent optimization module, which is used to automatically adjust the parameters of each module according to the system operating status and user configuration to achieve the optimal configuration of system performance.

Images