Network flow measurement method and device based on autonomous system, and electronic equipment
By deploying traffic acquisition programs in the boundary router of the autonomous system and generating a traffic matrix, the duplication and omission problems in the boundary router traffic measurement are solved, and accurate collection of traffic data and network optimization are achieved.
Patent Information
- Application Number
- CN202510577140.3
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- Filing Date
- 2025-05-06
- Publication Date
- 2025-07-18
AI Technical Summary
In the prior art, when measuring the traffic of the boundary router in the autonomous system, it is necessary to deploy a traffic acquisition program on each host to accumulate the traffic of all hosts under the same address prefix, resulting in duplication and omission of the measured traffic.
By deploying traffic acquisition programs in multiple boundary routers, traffic data is collected based on the routing information of the boundary router, and a traffic matrix is generated based on the longest prefix matching rules to accurately match the real address prefix of the traffic data, avoiding duplication and omissions.
It realizes accurate collection and efficient processing of traffic data, eliminates the inaccuracy of traffic measurement caused by address aggregation, improves the accuracy of traffic measurement and reasonable allocation of network resources, and supports dynamic traffic management and network optimization decisions.
Smart Images

Figure CN120342931A_ABST
Abstract
Description
Technical Field
[0001] The present application relates to the field of network traffic detection, and in particular, to a method, device, and electronic device for measuring network traffic based on autonomous systems. Background Art
[0002] In the prior art, the prefix traffic matrix relies on a traffic collection program. The current solution is to deploy a traffic collection program on each host with the same address prefix. By accumulating the traffic received / sent by all hosts within the address prefix, the traffic received / sent by the address prefix can be further obtained. It is necessary to collect and calculate the traffic "received / sent" by the IP address prefix. In the BGP protocol, the BGP routers (Border Gateway Protocol Speakers, abbreviated as BGPSpeakers) within an autonomous system (AS) announce the IP address prefixes to the BGP routers of other ASs through "UPDATE messages". However, this type of traffic collection and calculation at the address prefix level faces technical challenges. When announcing the address prefix, the BGP router aggregates the address prefixes, resulting in the inability to know the traffic of the original destination address prefix when collecting traffic, thus causing some traffic to be missed and double-collected. For example, the prefix address P1 of the BGP router B1 in AS1 and the prefix address P2 of the BGP router B2 in AS1 are aggregated into the address prefix P12: 10.10.0.0 / 16. The BGP router B1 in AS1 will announce 10.10.0.0 / 16, but the BGP router B3 in AS2 only knows the aggregated address prefix 10.10.0.0 / 16 of P12 and does not know the specific address prefix P1 of the router B1 and the specific address prefix P2 of the router B1. Therefore, when deploying a traffic collection program on the BGP router B1, the traffic from the host S2 forwarded to the host T through the BGP router B2 in AS1 and the BGP router B3 in AS2 cannot be collected because this part of the traffic is not forwarded through the BGP router B1.
[0003] In view of the problem that when measuring the traffic of border routers in an autonomous system in the related art, it is necessary to deploy a traffic collection program on each host to accumulate the traffic of all hosts under the same address prefix, resulting in duplicate and missing traffic measurements, no effective solution has been proposed yet. Summary of the Invention
[0004] The main objective of this application is to provide a network traffic measurement method, device, and electronic device based on an autonomous system, so as to solve the problem in the related art that when measuring the traffic of border routers in an autonomous system, it is necessary to deploy traffic collection programs on each host to accumulate the traffic of all hosts under the same address prefix, resulting in duplicate and missing measured traffic.
[0005] To achieve the above objective, according to one aspect of this application, a network traffic measurement method based on an autonomous system is provided. The method is applied to a target network, and the target network includes: a network controller, an autonomous system, and the autonomous system at least includes: a plurality of border routers. The method includes: for each border router among the plurality of border routers, determining the routing information of the border router and receiving the routing information of the border router; deploying a traffic collection program among the plurality of border routers according to the routing information of the border router, where the traffic collection program is used to collect traffic data received by the border router, and the plurality of border routers are used to calculate the true address prefix of the traffic data; generating a traffic matrix according to the true address prefixes sent by the plurality of border routers and the traffic data sent by the plurality of border routers, and determining the network traffic measurement result of the autonomous system according to the traffic matrix.
[0006] Further, determining the routing information of the border router includes: determining the autonomous system information of the autonomous system, where the autonomous system information at least includes: the identification information of the autonomous system; determining the identification information of the border router and determining the IP address prefix processed by the border router; determining the routing information of the border router according to the autonomous system information, the identification information of the border router, and the IP address prefix.
[0007] Further, generating a traffic matrix according to the true address prefixes sent by the plurality of border routers and the traffic data sent by the plurality of border routers includes: receiving the target mapping relationship between the traffic data sent by the plurality of border routers and the true address prefixes, where the target mapping relationship is obtained by precisely matching the traffic data received by the plurality of border routers based on the longest prefix matching rule; generating the traffic matrix based on the target mapping relationship and the traffic data sent by the plurality of border routers.
[0008] Further, deploying traffic collection programs in the multiple border routers according to the routing information of the border routers includes: deploying the network controller and the multiple border routers in a target cluster; deploying the traffic collection programs in the multiple border routers, where the traffic collection program deployed in each border router in the multiple border routers is responsible for collecting and processing traffic data of a target address prefix, and the target address prefix is the address prefix that the border router is responsible for processing.
[0009] Further, according to one aspect of the present application, a network traffic measurement method based on an autonomous system is provided. The method is applied to a target network, and the target network includes: a network controller and an autonomous system. The autonomous system at least includes: multiple border routers. For each border router in the multiple border routers, the method includes: determining the routing information of the border router and notifying the network controller of the routing information of the border router; collecting traffic data received by each border router through a traffic collection program, where the traffic collection program is deployed in each border router by the network controller; calculating, by each border router, a true address prefix of the traffic data and sending the true address prefix and the traffic data to the network controller; where the network controller generates a traffic matrix based on the traffic data sent by each border router; and determining a network traffic measurement result of the autonomous system based on the traffic matrix.
[0010] Further, notifying the network controller of the routing information of the border router includes: determining node descriptor information according to the address prefix that the border router is responsible for processing, the autonomous system information of the autonomous system, and the identification information of the border router; determining node network layer reachability information according to the node descriptor information, the network layer protocol used for node reachability information, and the identification information of the node; determining triple information according to the node network layer reachability information and node local description information; and sending the triple information to the network controller, where the network controller determines the routing information of the border router according to the triple information.
[0011] Further, calculating, by each border router, a true address prefix of the traffic data, and sending the true address prefix and the traffic data to the network controller, includes: determining an IP address of the traffic data, where the IP address includes an IP destination address and an IP source address; matching the IP address with each prefix stored in a routing table in each border router based on the longest prefix matching principle to obtain a source prefix of the traffic data and a destination prefix of the traffic data; calculating the true address prefix according to the source prefix and the destination prefix; and forwarding, by each border router, the true address prefix and the traffic data to the network controller.
[0012] Further, notifying the network controller of routing information of the border router includes: when any one of the multiple border routers is responsible for processing traffic data corresponding to multiple address prefixes, generating triple information corresponding to the multiple address prefixes according to the multiple address prefixes processed by the border router; and sequentially sending the triple information corresponding to the multiple address prefixes to the network controller.
[0013] To achieve the above object, according to another aspect of the present application, there is provided a network traffic measurement device based on an autonomous system. The device deploys a target network, and the target network includes: a network controller and an autonomous system. The autonomous system at least includes: a plurality of border routers. The device includes: a first determination unit configured to determine, for each border router among the plurality of border routers, routing information of the border router and receive the routing information of the border router; a deployment unit configured to deploy a traffic collection program among the plurality of border routers according to the routing information of the border router, where the traffic collection program is used to collect traffic data received by the border router, and the plurality of border routers are used to calculate a true address prefix of the traffic data; and a generation unit configured to generate a traffic matrix according to the true address prefixes sent by the plurality of border routers and the traffic data sent by the plurality of border routers, and determine a network traffic measurement result of the autonomous system according to the traffic matrix.
[0014] Further, the first determination unit includes: a first determination subunit configured to determine autonomous system information of the autonomous system, where the autonomous system information at least includes: identification information of the autonomous system; a second determination subunit configured to determine identification information of the border router and determine an IP address prefix processed by the border router; and a third determination subunit configured to determine the routing information of the border router according to the autonomous system information, the identification information of the border router, and the IP address prefix.
[0015] Further, the generating unit includes: a receiving subunit, configured to receive a target mapping relationship between traffic data and the true address prefix sent by the plurality of border routers, where the target mapping relationship is obtained by precisely matching the traffic data received by the plurality of border routers based on the longest prefix matching rule; a first generating subunit, configured to generate the traffic matrix based on the target mapping relationship and the traffic data sent by the plurality of border routers.
[0016] Further, the deploying unit includes: a first deploying subunit, configured to deploy the network controller and the plurality of border routers in a target cluster; a second deploying subunit, configured to deploy the traffic collection program in the plurality of border routers, where the traffic collection program deployed in each border router of the plurality of border routers is responsible for collecting and processing traffic data of a target address prefix, and the target address prefix is the address prefix that the border router is responsible for processing.
[0017] Further, according to another aspect of the present application, there is provided a network traffic measurement device based on an autonomous system. The device deploys a target network, and the target network includes: a network controller, an autonomous system, and the autonomous system at least includes: a plurality of border routers. For each border router of the plurality of border routers, it includes: an announcing unit, configured to determine routing information of the border router and announce the routing information of the border router to the network controller; a collecting unit, configured to collect traffic data received by each border router through a traffic collection program, where the traffic collection program is deployed in each border router by the network controller; a calculating unit, configured to calculate a true address prefix of the traffic data through each border router and send the true address prefix and the traffic data to the network controller; where the network controller generates a traffic matrix based on the traffic data sent by each border router; a second determining unit, configured to determine a network traffic measurement result of the autonomous system based on the traffic matrix.
[0018] Further, the announcing unit includes: a fourth determining subunit, configured to determine node description sub-information based on the address prefix that the border router is responsible for processing, the autonomous system information of the autonomous system, and the identification information of the border router; a fifth determining subunit, configured to determine node network layer reachability information based on the node description sub-information, the network layer protocol used by the node reachability information, and the identification information of the node; a sixth determining subunit, configured to determine triple information based on the node network layer reachability information and node local description information; a sending subunit, configured to send the triple information to the network controller, where the network controller determines the routing information of the border router based on the triple information.
[0019] Further, the computing unit includes: a seventh determination subunit, configured to determine the IP address of the traffic data, where the IP address includes an IP destination address and an IP source address; a matching subunit, configured to match the IP address and each prefix stored in the routing table of each border router based on the longest prefix matching principle to obtain the source prefix of the traffic data and the destination prefix of the traffic data; a calculation subunit, configured to calculate the true address prefix according to the source prefix and the destination prefix; a first sending subunit, configured to send the true address prefix and the traffic data to the network controller through each border router.
[0020] Further, the announcement unit includes: a second generation subunit, configured to generate triple information corresponding to the multiple address prefixes according to the multiple address prefixes for which any one of the multiple border routers is responsible for processing traffic data; a second sending subunit, configured to sequentially send the triple information corresponding to the multiple address prefixes to the network controller.
[0021] To achieve the above object, according to one aspect of the present application, there is provided a computer program product, including a computer program, where when the computer program is executed by a processor, the network traffic measurement method based on an autonomous system described in any one of the above is implemented, and when the computer program is executed by a processor, the steps of the network traffic measurement method based on an autonomous system described in each embodiment of the present application are implemented.
[0022] To achieve the above object, according to one aspect of the present application, there is provided a computer-readable storage medium, where the computer-readable storage medium includes stored computer instructions, and when the computer instructions are executed by a processor, the network traffic measurement method based on an autonomous system described in any one of the above is implemented.
[0023] To achieve the above object, according to one aspect of the present application, there is provided an electronic device, including one or more processors and a memory, where the memory is used to store one or more programs, and when the one or more programs are executed by the one or more processors, the one or more processors implement the network traffic measurement method based on an autonomous system described in any one of the above.
[0024] Through this application, the following steps are adopted: for each of the multiple border routers, determine the routing information of the border router and receive the routing information of the border router; deploy a traffic collection program among the multiple border routers according to the routing information of the border router, where the traffic collection program is used to collect traffic data received by the border router, and the multiple border routers are used to calculate the true address prefix of the traffic data; generate a traffic matrix based on the true address prefixes sent by the multiple border routers and the traffic data sent by the multiple border routers, and determine the network traffic measurement result of the autonomous system according to the traffic matrix. This solves the problem in the related art that when measuring the traffic of border routers in an autonomous system, it is necessary to deploy a traffic collection program on each host to accumulate the traffic of all hosts under the same address prefix, resulting in duplicate and missing traffic measurements.
[0025] By each border router notifying detailed routing information to the network controller, the routing responsibilities of each border router and the address prefixes it manages can be accurately determined, achieving the technical effect of eliminating inaccurate traffic measurement caused by address aggregation. At the same time, by specifically deploying a traffic collection program on these border routers, the collection of traffic data becomes more accurate and efficient, realizing the restoration of the true address prefix of the traffic data, and further achieving the technical effect of avoiding traffic undetected and duplicate counting and improving the accuracy of traffic measurement. By calculating and forwarding traffic data based on the true prefix to the network controller and summarizing these accurate traffic data to calculate the traffic matrix, the traffic demand relationship between each address prefix within the autonomous system can be carefully depicted, achieving the technical effect of precise network traffic engineering and planning. At the same time, by analyzing the network traffic status of the autonomous system through the traffic matrix, the network controller can make network optimization decisions based on accurate data, realizing dynamic traffic management, further improving the reasonable allocation and utilization efficiency of network resources, and achieving the technical effect of optimizing network performance and user experience. BRIEF DESCRIPTION OF THE DRAWINGS
[0026] The drawings constituting a part of this application are used to provide a further understanding of this application. The schematic embodiments of this application and their descriptions are used to explain this application and do not constitute an improper limitation to this application. In the drawings:
[0027] Figure 1 is a flowchart of a network traffic measurement method based on an autonomous system according to Embodiment 1 of this application;
[0028] Figure 2 is a schematic diagram of an optionally redefined data structure of a BGP-LS message according to Embodiment 1 of this application;
[0029] Figure 3It is a schematic diagram of an optional method for sending network traffic data to a network controller through a traffic collection program according to Embodiment 1 of the present application;
[0030] Figure 4 It is a schematic diagram of a network traffic measurement device based on an autonomous system according to Embodiment 2 of the present application;
[0031] Figure 5 It is a schematic diagram of a network traffic measurement electronic device based on an autonomous system according to Embodiment 5 of the present application. Detailed implementation manners
[0032] It should be noted that, without conflict, the embodiments in the present application and the features in the embodiments may be combined with each other. The present application will be described in detail below with reference to the accompanying drawings and in combination with the embodiments.
[0033] It should be noted that the user information (including but not limited to user device information, user personal information, collected data, used data, generated data, processed data, etc.) and data (including but not limited to data for analysis, stored data, displayed data, collected information, used information, generated information, processed information, etc.) involved in the present application are all information and data authorized by the user or fully authorized by all parties. Moreover, the collection, storage, use, processing, transmission, provision, disclosure, application, and other processing of the relevant data all comply with the relevant laws, regulations, and standards of the relevant countries and regions, adopt necessary confidentiality measures, do not violate public order and good customs, and provide corresponding operation entrances for users to choose to authorize or refuse. For example, an interface is set between the present system and relevant users or institutions. Before obtaining relevant information, a request for obtaining information needs to be sent to the aforementioned users or institutions through the interface, and after receiving the consent information feedback from the aforementioned users or institutions, the relevant information can be obtained.
[0034] It should be noted that the present application provides corresponding operation entrances for users to choose to agree or refuse the results of automated decision-making; if the user chooses to refuse, the expert decision-making process will be entered.
[0035] In order to enable those skilled in the art to better understand the solution of the present application, the technical solutions in the embodiments of the present application will be clearly and completely described below with reference to the accompanying drawings in the embodiments of the present application. Obviously, the described embodiments are only a part of the embodiments of the present application, rather than all the embodiments. All other embodiments obtained by those of ordinary skill in the art based on the embodiments in the present application without creative efforts shall fall within the protection scope of the present application.
[0036] It should be noted that the terms "first", "second", etc. in the description, claims and the above-mentioned drawings of this application are used to distinguish similar objects, and do not necessarily need to describe a specific order or sequence. It should be understood that the data used in this way can be interchanged under appropriate circumstances, so as to implement the embodiments of the present application described here. In addition, the terms "including" and "having" and any variations thereof are intended to cover non-exclusive inclusion. For example, a process, method, system, product or device that includes a series of steps or units does not necessarily have to be limited to those steps or units clearly listed, but may include other steps or units that are not clearly listed or are inherent to these processes, methods, products or devices.
[0037] Embodiment 1
[0038] The present invention will be described below in conjunction with the preferred implementation steps. Figure 1 is a flowchart of a network traffic measurement method based on an autonomous system provided in Embodiment 1 of this application, as Figure 1 shown. The above method is applied to a target network, and the target network includes: a network controller and an autonomous system. The autonomous system at least includes: a plurality of border routers. The method includes the following steps:
[0039] Step S101, for each border router among the plurality of border routers, determine the routing information of the border router and receive the routing information of the border router.
[0040] The network traffic measurement method based on an autonomous system provided in Embodiment 1 aims to optimize traffic measurement in the target network. The target network includes a network controller and at least one autonomous system (Autonomous System, abbreviated as AS for short). There are multiple border routers within the AS, which are responsible for communicating with external networks and making routing decisions. The network controller uses the border routers to intelligently deploy traffic collection programs to accurately collect the traffic of each address prefix, avoiding duplication and omission. Through the above method, the high cost of host-level traffic collection is reduced, it adapts to large-scale network environments, and improves the efficiency and accuracy of traffic management.
[0041] In Embodiment 1, the network controller needs to identify and analyze each border router in the target network to determine its routing responsibilities, that is, to determine the specific address prefixes that the border router is responsible for managing. Specifically, each border router will announce its routing information to the network controller. After the network controller receives this information, it will make an intelligent decision on the deployment of the traffic collection program based on this data, ensuring that the traffic collection runs only on the border routers directly responsible for specific prefix routing, so as to accurately calculate the traffic between address prefixes and avoid the redundancy and blind area problems in traffic collection in traditional methods.
[0042] Step S102, deploy traffic collection programs in multiple border routers according to the routing information of the border routers, where the traffic collection programs are used to collect traffic data received by the border routers, and the multiple border routers are used to calculate the true address prefixes of the traffic data.
[0043] In the first embodiment, the network controller deploys traffic collection programs on these border routers according to the routing information of the border routers, which are specifically responsible for collecting the traffic data passing through the routers. It should be noted that each border router only collects the traffic of the address prefixes it is responsible for managing, and resolves the true address prefixes from the received traffic to ensure the accuracy and effectiveness of the collected traffic data, providing accurate information for the subsequent calculation of the traffic matrix.
[0044] Step S103, generate a traffic matrix based on the true address prefixes sent by the multiple border routers and the traffic data sent by the multiple border routers, and determine the network traffic measurement result of the autonomous system according to the traffic matrix.
[0045] In the first embodiment, the network controller receives the true address prefixes reported by each border router and their corresponding traffic data, and calculates the traffic matrix based on this information. The traffic matrix details the traffic demands between address prefixes within the autonomous system and reflects the internal traffic distribution of the network. Further, by analyzing the traffic matrix, the network traffic status of the autonomous system can be accurately evaluated, and the traffic measurement result can be determined, providing data support for network optimization, resource allocation, and fault troubleshooting.
[0046] In summary, the network traffic measurement method based on the autonomous system provided in the first embodiment of this application determines the routing information of each border router among multiple border routers and receives the routing information of the border routers; deploys traffic collection programs in multiple border routers according to the routing information of the border routers, where the traffic collection programs are used to collect traffic data received by the border routers, and the multiple border routers are used to calculate the true address prefixes of the traffic data; generates a traffic matrix based on the true address prefixes sent by the multiple border routers and the traffic data sent by the multiple border routers, and determines the network traffic measurement result of the autonomous system, solving the problem in the related technology that when measuring the traffic of border routers in an autonomous system, it is necessary to deploy traffic collection programs on each host to accumulate the traffic of all hosts under the same address prefix, resulting in duplicate and missing traffic measurements.
[0047] By each border router advertising detailed routing information to the network controller, it is possible to accurately determine the routing responsibilities of each border router and the address prefixes it manages, achieving the technical effect of eliminating inaccurate traffic measurement caused by address aggregation. At the same time, by specifically deploying traffic collection programs on these border routers, the collection of traffic data becomes more accurate and efficient, realizing the restoration of the true address prefix of traffic data, and further achieving the technical effect of avoiding traffic undetected and duplicate counting and improving the accuracy of traffic measurement. By calculating and forwarding traffic data based on the true prefix to the network controller and aggregating these accurate traffic data to calculate the traffic matrix, it is possible to meticulously depict the traffic demand relationship between each address prefix within the autonomous system, achieving the technical effect of precise network traffic engineering and planning. At the same time, by analyzing the network traffic status of the autonomous system through the traffic matrix, the network controller can make network optimization decisions based on accurate data, realizing dynamic traffic management, and further enhancing the reasonable allocation and utilization efficiency of network resources, achieving the technical effect of optimizing network performance and user experience.
[0048] Optionally, in the network traffic measurement method based on an autonomous system provided in Embodiment 1 of this application, determining the routing information of a border router includes: determining the autonomous system information of the autonomous system, where the autonomous system information at least includes: the identification information of the autonomous system; determining the identification information of the border router and determining the IP address prefix that the border router is responsible for processing; determining the routing information of the border router based on the autonomous system information, the identification information of the border router, and the IP address prefix.
[0049] In Embodiment 1, in order to accurately control and manage traffic measurement inside and outside the autonomous system through the network controller, optimize the traffic management strategy, and improve network performance and resource utilization efficiency, it is necessary to determine the triple information, that is, the above-mentioned routing information of the border router, which can be expressed as: "<ASN, BGPSpeaker, Prefix>". Among them, ASN represents the autonomous system identifier (Autonomous System Number, ASN), the identification information of the Border Gateway Protocol Speaker (BGPSpeaker), and the IP address prefix (Prefix).
[0050] The unique identification information (ASN) of the autonomous system (AS) is used to clearly distinguish different autonomous systems in the network environment, ensuring that the network controller can accurately identify and manage each autonomous system.
[0051] The identification information of the border router (BGP Speaker) is the unique identifier for each border router, which is used to clearly identify each border router within the autonomous system, facilitating the subsequent deployment of traffic collection programs and the precise collection of traffic data. The network controller receives and differentiates traffic data from each border router based on the identification information of the border router.
[0052] Meanwhile, the network controller also needs to determine the IP address prefixes that the border router is responsible for processing. In the BGP protocol, the border router advertises the address prefix information it manages, enabling the network controller to determine the scope of responsibilities of each border router corresponding to the traffic data received in the target network.
[0053] By combining the autonomous system identification information, the identification information of the border router, and the IP address prefix, the network controller can accurately distinguish and control each border router in different autonomous systems, as well as clarify the precise routing prefix information associated with each border router. This step enables the network controller to intelligently deploy traffic collection programs, ensuring that they run only on directly connected border routers and collecting traffic data only for the address prefixes that the border router is responsible for, avoiding unnecessary resource consumption and data redundancy, while ensuring the comprehensiveness and accuracy of traffic information, providing a solid data foundation for subsequent traffic matrix calculation and network traffic measurement. The network controller deploys traffic collection based on the actual routing information of the border router, achieving the technical effects of enhancing the accuracy of traffic statistics and improving the efficiency of traffic collection.
[0054] Optionally, in the network traffic measurement method based on autonomous systems provided in the first embodiment of this application, generating a traffic matrix based on the actual address prefixes sent by multiple border routers and the traffic data sent by multiple border routers includes: receiving the target mapping relationship between the traffic data and the actual address prefixes sent by multiple border routers, where the target mapping relationship is obtained by precisely matching the traffic data received by multiple border routers based on the longest prefix matching rule; generating a traffic matrix based on the target mapping relationship and the traffic data sent by multiple border routers.
[0055] In the first embodiment, the network controller receives the target mapping relationship between the traffic data sent by each border router and the real address prefix. The target mapping relationship is generated by the border router after precisely matching the received traffic data using the longest prefix matching rule. In the autonomous system network, data packets may carry aggregated address prefix information during transmission. However, through the deployed traffic collection program, the border router can identify and record the real address prefix corresponding to the traffic data passing through the router, that is, the original destination address or source address prefix of the data packet, rather than the aggregated fuzzy identifier. This precise matching is based on the address prefix list directly managed by the border router, ensuring the accurate correspondence between the traffic data and its specific prefix, and avoiding misjudgment or omission in traffic statistics.
[0056] Based on the received target mapping relationship and traffic data, the network controller generates a traffic matrix. The traffic matrix is a two-dimensional structure, where each row and each column represent an address prefix within the autonomous system. The traffic matrix can be shown as Formula 1,
[0057]
[0058] where the traffic matrix is granular with address prefixes, intuitively showing the traffic demands between different prefixes, and the unit is Mbps. The diagonal elements are 0, indicating that there is no self-generated traffic between the same prefix addresses (no traffic from prefix Pi to prefix Pj). Exemplarily, T[i][j] represents the data traffic demand from prefix Pi to prefix Pj. For example, T[1][3] = 100 means the traffic demand from prefix P1 to prefix P3 is 100 Mbps; T[3][1] = 200 means the traffic demand from prefix P3 to prefix P1 is 200 Mbps, where the IP address of prefix P1 can be represented as 10.10.1.0 / 24, and the IP address of prefix P3 can be represented as 10.10.3.0 / 24.
[0059] The network controller calculates the actual traffic size between each prefix by analyzing the target mapping relationship and fills it into the traffic matrix. This process not only depends on the size of the traffic data itself but also fully considers the real address prefix of the traffic data, enabling the traffic matrix to accurately reflect the traffic flow direction and traffic volume between different address prefixes within the autonomous system.
[0060] Through the above steps, the network controller can achieve efficient measurement and management of the autonomous system network traffic based on precise traffic data and address prefix mapping, improving the accuracy and real-time performance of network traffic monitoring.
[0061] Optionally, in the network traffic measurement method based on an autonomous system provided in Embodiment 1 of this application, deploying traffic collection programs in multiple border routers according to the routing information of border routers includes: deploying a network controller and multiple border routers in a target cluster; deploying traffic collection programs in the multiple border routers, where the traffic collection program deployed in each border router among the multiple border routers is responsible for collecting and processing traffic data of a target address prefix, and the target address prefix is the address prefix that this border router is responsible for processing.
[0062] In Embodiment 1, in order to facilitate the network controller to globally control and manage the network traffic between autonomous systems, the network controller and multiple border routers within the autonomous system can be deployed in the same cluster environment (i.e., the above-mentioned target cluster), thereby ensuring efficient communication and collaborative work among various components in the network.
[0063] Then, the network controller determines each border router based on the routing information collected from the border routers, that is, the <ASN, BGPSpeaker, Prefix> triple information. By analyzing the routing information, the network controller can identify the ingress and egress of network traffic, thereby accurately locating the necessary positions for traffic collection.
[0064] Finally, the network controller deploys traffic collection programs on each border router. These traffic collection programs are designed to only collect and process traffic data of the real address prefixes that this border router is responsible for, that is, the address prefixes directly managed by this router.
[0065] By deploying traffic collection programs on each border router, duplicate collection or omission of traffic data can be avoided, ensuring the efficiency and accuracy of traffic monitoring. In addition, when collecting data, the traffic collection program can further follow the longest prefix matching principle, so as to accurately identify and measure the traffic associated with each prefix, providing high-quality basic data for subsequent calculation of the traffic matrix, achieving the technical effect of improving the accuracy of the traffic matrix, and further achieving the technical effect of supporting more refined network traffic analysis and management strategy formulation.
[0066] Optionally, in the network traffic measurement method based on an autonomous system provided in Embodiment 1 of this application, the above method is applied to a target network, and the target network includes: a network controller, an autonomous system, and the autonomous system at least includes: multiple border routers. For each border router among the multiple border routers, it includes:
[0067] Determine the routing information of the border router and announce the routing information of the border router to the network controller.
[0068] In the first embodiment, to facilitate the network controller to control the traffic data in the autonomous system, the border router needs to determine its routing information, including the IP address prefixes it is responsible for, and announce these details to the network controller through the newly defined BGP-LS message format, so as to clarify the specific autonomous system and border router to which each address prefix belongs, enhance the network controller's understanding of the network topology and traffic paths, and provide a high-quality data basis for subsequent traffic collection and analysis.
[0069] The traffic collection program collects the traffic data received by each border router, where the traffic collection program is deployed in each border router by the network controller.
[0070] In the first embodiment, the network controller deploys a traffic collection program on each border router. The traffic collection program focuses on collecting the traffic data of the address prefixes directly related to the border router. Further, the longest prefix matching technology can be used to ensure the accurate correspondence of the data, thus avoiding the problems of duplication and omission in traditional traffic collection and providing accurate traffic monitoring information for the network controller.
[0071] Each border router calculates the real address prefix of the traffic data and sends the real address prefix and the traffic data to the network controller; among them, the network controller generates a traffic matrix based on the traffic data sent by each border router; and determines the network traffic measurement result of the autonomous system according to the traffic matrix.
[0072] In the first embodiment, the border router uses the longest prefix matching technology to calculate and determine the real address prefix corresponding to all the traffic data passing through it, and then reports these real address prefixes and the traffic data to the network controller together. The network controller generates a traffic matrix based on this to accurately depict the traffic interaction between each prefix. Finally, through the analysis of the traffic matrix, the network traffic measurement result of the autonomous system is obtained, so as to achieve the technical effect of effectively evaluating the network state and traffic distribution.
[0073] Optionally, in the network traffic measurement method based on the autonomous system provided in the first embodiment of this application, announcing the routing information of the border router to the network controller includes: determining the node descriptor information according to the address prefixes processed by the border router, the autonomous system information of the autonomous system, and the identification information of the border router; determining the node network layer reachability information according to the node descriptor information, the network layer protocol used by the node reachability information, and the identification information of the node; determining the triple information according to the node network layer reachability information and the node local description information; and sending the triple information to the network controller, where the network controller determines the routing information of the border router according to the triple information.
[0074] In the first embodiment, to avoid duplication or omission in traffic statistics and improve the efficiency and accuracy of network traffic management, the network controller needs to determine the routing information of the border router, thereby constructing a newly defined BGP-LS message. The newly defined BGP-LS message can be as follows Figure 2 shown, which includes autonomous system identification information, the border router identification responsible for prefix routing, and specific address prefixes, ensuring that the network controller can accurately grasp the routing structure within the autonomous system and the scope of responsibilities of the border router.
[0075] Determine the node descriptor information (such as Figure 2 the Node Descriptors Sub-TLVs in it) based on the address prefix (Prefix) handled by the border router, the autonomous system representation information (ASN) based on the autonomous system, and the unique identifier of the border router (for example, IGP Router ID) to clearly identify the identity of the border router within the autonomous system.
[0076] Subsequently, combining the node descriptor information, the network layer protocol used for reachability information (such as Figure 2 the Protocol-ID in it), and the node identification information (such as Figure 2 the Identifier in it), define the node network layer reachability information (such as Figure 2 the Network Layer Reachability Information in it). This part of the information describes the address prefixes that the border router is responsible for managing. In other words, this part of the information describes which address prefixes the border router can provide routing services for.
[0077] Next, through the integration of the node network layer reachability information and the node local description information, form the <ASN, BGPSpeaker, Prefix> triple information.
[0078] Finally, the border router sends the triple information to the network controller in the defined BGP-LS (Border Gateway Protocol Link State, which can be abbreviated as BGP-LS) message format. The network controller receives and parses this information to determine the routing information of the border router, including which border routers are responsible for the routing and management of which address prefixes, and the traffic relationship between these prefixes. This process is a key step in achieving accurate traffic statistics and network optimization. Through the intelligent processing of the triple information by the controller, it can effectively avoid duplication or omission in traffic statistics and improve the efficiency and accuracy of network traffic management.
[0079] Optionally, in the network traffic measurement method based on an autonomous system provided in the first embodiment of this application, calculating the true address prefix of traffic data by each border router and sending the true address prefix and traffic data to the network controller includes: determining the IP address of the traffic data, where the IP address includes the IP destination address and the IP source address; matching the IP address with each prefix stored in the routing table of each border router based on the longest prefix matching principle to obtain the source prefix of the traffic data and the destination prefix of the traffic data; calculating the true address prefix according to the source prefix and the destination prefix; and forwarding the true address prefix and the traffic data to the network controller through each border router.
[0080] In the first embodiment, during the traffic collection process of the border router, first identify the IP address of each data packet, including the IP destination address and the IP source address. Next, apply the longest prefix matching principle to compare these two addresses with the prefix information stored in the local routing table of the border router. By looking up the longest matching prefix entry in the local routing table, the border router can determine the actual source prefix and destination prefix of the traffic data, rather than the aggregated ambiguous prefix information. This precise matching process is crucial for accurate traffic statistics because it can eliminate the uncertainty caused by address aggregation and ensure the association between traffic data and the correct prefix.
[0081] After calculating the source prefix and the destination prefix, encapsulate these true address prefixes together with the corresponding traffic data through the border router and forward them to the network controller. The network controller receives this information and uses it to generate a traffic matrix that accurately reflects the internal traffic distribution of the network, thereby assisting in formulating strategies such as network traffic engineering and load balancing.
[0082] Through the above steps, the accuracy of traffic monitoring is significantly improved, the repetition and omission phenomena in the traditional traffic collection method are reduced, the effect of improving the accuracy of traffic collection is achieved, and further the effect of providing a more detailed and reliable network traffic view for network managers is achieved.
[0083] Optionally, in the network traffic measurement method based on an autonomous system provided in the first embodiment of this application, notifying the network controller of the routing information of the border router includes: when any one of the multiple border routers is responsible for processing traffic data corresponding to multiple address prefixes, generating triple information corresponding to the multiple address prefixes according to the multiple address prefixes processed by the border router; and sequentially sending the triple information corresponding to the multiple address prefixes to the network controller.
[0084] In the first embodiment, when the border router needs to process traffic data of multiple address prefixes, it needs to generate a corresponding number of<ASN,BGPSpeaker,Prefix> Triple information, each triplet records the autonomous system identifier, border router identifier and a specific address prefix in detail. This process ensures that the traffic data of each prefix can be independently and accurately described and tracked.
[0085] The border router then sends these triplet information to the network controller one by one. This batch-by-item notification method ensures that the network controller can receive and resolve the routing information of all relevant prefixes in a timely and complete manner even when processing multiple address prefixes. This mechanism not only improves the transmission efficiency of traffic data, but also ensures that the controller can build and maintain the traffic matrix based on accurate prefix information, thereby more effectively monitoring and optimizing network traffic.
[0086] Optionally, in this embodiment 1, Figure 3 Schematic diagram of sending network traffic data to the network controller through the traffic collection program in the first embodiment. BGPSpeakers (a router using the BGP protocol, i.e., the above-mentioned border router, such as Figure 3 B1 and B2 in the figure) announce the address prefixes that they are responsible for in the AS to which the border router belongs, and learn the address prefixes announced by other ASs. The address prefix announced by a border router is usually the prefix of the network to which it belongs, or the set of prefixes that it performs routing aggregation. The SDN controller (i.e., the network controller mentioned above, such as Figure 3 After obtaining the above triplet information, the SDN controller in the network determines the border router connected to the external network or other autonomous system as the deployment object of the deployment collection program. Each border router only collects the "received / sent" traffic of the address prefix that it is responsible for routing and managing. The border router transmits the collection results to the network controller, and the network controller calculates the prefix traffic matrix based on the traffic collection results.
[0087] It should be noted that the steps shown in the flowcharts of the accompanying drawings can be executed in a computer system such as a set of computer executable instructions, and that, although a logical order is shown in the flowcharts, in some cases, the steps shown or described can be executed in an order different from that shown here.
[0088] Embodiment 2
[0089] Embodiment 2 of the present application also provides a network traffic measurement device based on an autonomous system. It should be noted that the network traffic measurement device based on an autonomous system in Embodiment 2 of the present application can be used to execute the network traffic measurement method based on an autonomous system provided in Embodiment 1 of the present application. The network traffic measurement device based on an autonomous system provided in Embodiment 2 of the present application will be introduced below.
[0090] Figure 4 It is a schematic diagram of the network traffic measurement device based on an autonomous system according to Embodiment 2 of the present application. As Figure 4 shown, the above device deploys a target network, and the target network includes: a network controller, an autonomous system, and the autonomous system at least includes: a plurality of border routers. The device includes: a first determination unit 401, a deployment unit 402, and a generation unit 403.
[0091] Specifically, the first determination unit 401 is configured to determine the routing information of each border router among the plurality of border routers and receive the routing information of the border router.
[0092] The deployment unit 402 is configured to deploy a traffic collection program among the plurality of border routers according to the routing information of the border router, where the traffic collection program is used to collect the traffic data received by the border router, and the plurality of border routers are used to calculate the true address prefix of the traffic data.
[0093] The generation unit 403 is configured to generate a traffic matrix according to the true address prefixes sent by the plurality of border routers and the traffic data sent by the plurality of border routers, and determine the network traffic measurement result of the autonomous system according to the traffic matrix.
[0094] The network traffic measurement device based on an autonomous system provided in Embodiment 2 of the present application, through the first determination unit 401, determines the routing information of each border router among the plurality of border routers and receives the routing information of the border router; the deployment unit 402 deploys a traffic collection program among the plurality of border routers according to the routing information of the border router, where the traffic collection program is used to collect the traffic data received by the border router, and the plurality of border routers are used to calculate the true address prefix of the traffic data; the generation unit 403 generates a traffic matrix according to the true address prefixes sent by the plurality of border routers and the traffic data sent by the plurality of border routers, and determines the network traffic measurement result of the autonomous system according to the traffic matrix, which solves the problem in the related art that when measuring the traffic of border routers in an autonomous system, it is necessary to deploy a traffic collection program on each host to accumulate the traffic of all hosts under the same address prefix, resulting in duplicate and missing measured traffic.
[0095] By each border router notifying detailed routing information to the network controller, the routing responsibilities of each border router and the address prefixes it manages can be accurately determined, achieving the technical effect of eliminating inaccurate traffic measurement caused by address aggregation. At the same time, by deploying traffic collection programs on these border routers specifically, the collection of traffic data becomes more accurate and efficient, realizing the restoration of the true address prefixes of traffic data, further achieving the technical effect of avoiding traffic undetected and duplicate counting and improving the accuracy of traffic measurement. By calculating and forwarding traffic data based on true prefixes to the network controller and aggregating these accurate traffic data to calculate the traffic matrix, the traffic demand relationship between each address prefix within the autonomous system can be depicted in detail, achieving the technical effect of precise network traffic engineering and planning. At the same time, by analyzing the network traffic status of the autonomous system through the traffic matrix, the network controller can make network optimization decisions based on accurate data, realizing dynamic traffic management, further improving the reasonable allocation and utilization efficiency of network resources, and achieving the technical effect of optimizing network performance and user experience.
[0096] Optionally, in the network traffic measurement device based on an autonomous system provided in the second embodiment of the present application, the above-mentioned first determination unit 401 includes: a first determination subunit, configured to determine the autonomous system information of the autonomous system, where the autonomous system information at least includes: the identification information of the autonomous system; a second determination subunit, configured to determine the identification information of the border router and determine the IP address prefix that the border router is responsible for processing; a third determination subunit, configured to determine the routing information of the border router according to the autonomous system information, the identification information of the border router, and the IP address prefix.
[0097] Optionally, in the network traffic measurement device based on an autonomous system provided in the second embodiment of the present application, the above-mentioned generation unit 403 includes: a receiving subunit, configured to receive the target mapping relationship between the traffic data and the true address prefix sent by multiple border routers, where the target mapping relationship is obtained by accurately matching the traffic data received by multiple border routers based on the longest prefix matching rule; a first generation subunit, configured to generate a traffic matrix based on the target mapping relationship and the traffic data sent by multiple border routers.
[0098] Optionally, in the network traffic measurement device based on an autonomous system provided in the second embodiment of the present application, the above-mentioned deployment unit 402 includes: a first deployment subunit, configured to deploy a network controller and multiple border routers in a target cluster; a second deployment subunit, configured to deploy a traffic collection program in multiple border routers, where the traffic collection program deployed in each border router among the multiple border routers is responsible for collecting and processing the traffic data of the target address prefix, and the target address prefix is the address prefix that the border router is responsible for processing.
[0099] Optionally, in the network traffic measurement device based on an autonomous system provided in the second embodiment of the present application, the above device deploys a target network, and the target network includes: a network controller and an autonomous system. The autonomous system at least includes: a plurality of border routers. For each border router among the plurality of border routers, the above device includes: an advertisement unit, configured to determine the routing information of the border router and advertise the routing information of the border router to the network controller; a collection unit, configured to collect traffic data received by each border router through a traffic collection program, where the traffic collection program is deployed in each border router by the network controller; a calculation unit, configured to calculate the true address prefix of the traffic data through each border router and send the true address prefix and the traffic data to the network controller; where the network controller generates a traffic matrix based on the traffic data sent by each border router; a second determination unit, configured to determine the network traffic measurement result of the autonomous system based on the traffic matrix.
[0100] Optionally, in the network traffic measurement device based on an autonomous system provided in the second embodiment of the present application, the above advertisement unit includes: a fourth determination subunit, configured to determine node description sub-information based on the address prefix processed by the border router, the autonomous system information of the autonomous system, and the identification information of the border router; a fifth determination subunit, configured to determine node network layer reachability information based on the node description sub-information, the network layer protocol used for node reachability information, and the identification information of the node; a sixth determination subunit, configured to determine triple information based on the node network layer reachability information and the node local description information; a sending subunit, configured to send the triple information to the network controller, where the network controller determines the routing information of the border router based on the triple information.
[0101] Optionally, in the network traffic measurement device based on an autonomous system provided in the second embodiment of the present application, the above calculation unit includes: a seventh determination subunit, configured to determine the IP address of the traffic data, where the IP address includes an IP destination address and an IP source address; a matching subunit, configured to match the IP address with each prefix stored in the routing table of each border router based on the longest prefix matching principle to obtain the source prefix and the destination prefix of the traffic data; a calculation subunit, configured to calculate the true address prefix based on the source prefix and the destination prefix; a first sending subunit, configured to send the true address prefix and the traffic data to the network controller through each border router.
[0102] Optionally, in the network traffic measurement device based on the autonomous system provided in the second embodiment of the present application, the above-mentioned announcement unit includes: a second generation subunit, configured to generate triple information corresponding to multiple address prefixes according to the multiple address prefixes processed by any one of the multiple border routers when any one of the multiple border routers is responsible for processing traffic data corresponding to the multiple address prefixes; a second sending subunit, configured to sequentially send the triple information corresponding to the multiple address prefixes to the network controller.
[0103] The network traffic measurement device based on the autonomous system includes a processor and a memory. The above-mentioned first determination unit 401, deployment unit 402, generation unit 403, etc. are all stored in the memory as program units, and the processor executes the above program units stored in the memory to implement corresponding functions.
[0104] The processor contains a kernel, and the kernel retrieves the corresponding program unit from the memory. One or more kernels can be set, and the accuracy of measuring the traffic of border routers in the autonomous system can be improved by adjusting the kernel parameters.
[0105] The memory may include non-permanent memory in a computer-readable medium, in the form of random access memory (RAM) and / or non-volatile memory, such as read-only memory (ROM) or flash memory (flash RAM), and the memory includes at least one storage chip.
[0106] Embodiment 3 of the present invention provides a computer-readable storage medium, on which a program is stored, and when the program is executed by a processor, it implements a network traffic measurement method based on an autonomous system.
[0107] Embodiment 4 of the present invention provides a processor, which is used to run a program, and when the program runs, it executes a network traffic measurement method based on an autonomous system.
[0108] As Figure 5 shown, Embodiment 5 of the present invention provides an electronic device, which includes a processor, a memory, and a program stored on the memory and executable on the processor. When the processor executes the program, the following steps are implemented: for each of the multiple border routers, determine the routing information of the border router and receive the routing information of the border router; deploy a traffic collection program among the multiple border routers according to the routing information of the border router, where the traffic collection program is used to collect traffic data received by the border router, and the multiple border routers are used to calculate the true address prefix of the traffic data; generate a traffic matrix according to the true address prefixes sent by the multiple border routers and the traffic data sent by the multiple border routers, and determine the network traffic measurement result of the autonomous system according to the traffic matrix.
[0109] When the processor executes the program, the following steps are also implemented: determining the routing information of the border router, including: determining the autonomous system information of the autonomous system, where the autonomous system information at least includes: the identification information of the autonomous system; determining the identification information of the border router, and determining the IP address prefix that the border router is responsible for processing; determining the routing information of the border router based on the autonomous system information, the identification information of the border router, and the IP address prefix.
[0110] When the processor executes the program, the following steps are also implemented: generating a traffic matrix based on the real address prefixes sent by multiple border routers and the traffic data sent by multiple border routers, including: receiving the target mapping relationship between the traffic data and the real address prefixes sent by multiple border routers, where the target mapping relationship is obtained by precisely matching the traffic data received by multiple border routers based on the longest prefix matching rule; generating a traffic matrix based on the target mapping relationship and the traffic data sent by multiple border routers.
[0111] When the processor executes the program, the following steps are also implemented: deploying a traffic collection program among multiple border routers based on the routing information of the border router, including: deploying a network controller and multiple border routers in the target cluster; deploying a traffic collection program among multiple border routers, where the traffic collection program deployed for each border router among multiple border routers is responsible for collecting and processing the traffic data of the target address prefix, and the target address prefix is the address prefix that this border router is responsible for processing.
[0112] When the processor executes the program, the following steps are also implemented: determining the routing information of the border router and notifying the network controller of the routing information of the border router; collecting the traffic data received by each border router through the traffic collection program, where the traffic collection program is deployed in each border router through the network controller; calculating the real address prefix of the traffic data by each border router and sending the real address prefix and the traffic data to the network controller; where the network controller generates a traffic matrix based on the traffic data sent by each border router; determining the network traffic measurement result of the autonomous system based on the traffic matrix.
[0113] When the processor executes the program, the following steps are also implemented: notifying the network controller of the routing information of the border router, including: determining the node descriptor information based on the address prefix that the border router is responsible for processing, the autonomous system information of the autonomous system, and the identification information of the border router; determining the node network layer reachability information based on the node descriptor information, the network layer protocol used by the node reachability information, and the identification information of the node; determining the triple information based on the node network layer reachability information and the node local description information; sending the triple information to the network controller, where the network controller determines the routing information of the border router based on the triple information.
[0114] When the processor executes the program, the following steps are also implemented: calculating the true address prefix of the traffic data through each border router, and sending the true address prefix and the traffic data to the network controller, including: determining the IP address of the traffic data, where the IP address includes the IP destination address and the IP source address; matching the IP address with each prefix stored in the routing table of each border router based on the longest prefix matching principle to obtain the source prefix of the traffic data and the destination prefix of the traffic data; calculating the true address prefix according to the source prefix and the destination prefix; forwarding the true address prefix and the traffic data to the network controller through each border router.
[0115] When the processor executes the program, the following steps are also implemented: notifying the network controller of the routing information of the border router, including: when any one of the multiple border routers is responsible for processing the traffic data corresponding to multiple address prefixes, generating triple information corresponding to the multiple address prefixes according to the multiple address prefixes processed by the border router; sequentially sending the triple information corresponding to the multiple address prefixes to the network controller.
[0116] The device in this article can be a server, a PC, a PAD, a mobile phone, etc.
[0117] This application also provides a computer program product, which, when executed on a data processing device, is suitable for executing a program initialized with the following method steps: for each of the multiple border routers, determining the routing information of the border router and receiving the routing information of the border router; deploying a traffic collection program among the multiple border routers according to the routing information of the border router, where the traffic collection program is used to collect the traffic data received by the border router, and the multiple border routers are used to calculate the true address prefix of the traffic data; generating a traffic matrix according to the true address prefixes sent by the multiple border routers and the traffic data sent by the multiple border routers, and determining the network traffic measurement result of the autonomous system according to the traffic matrix.
[0118] When executed on a data processing device, it is also suitable for executing a program initialized with the following method steps: determining the routing information of the border router, including: determining the autonomous system information of the autonomous system, where the autonomous system information at least includes: the identification information of the autonomous system; determining the identification information of the border router, and determining the IP address prefix processed by the border router; determining the routing information of the border router according to the autonomous system information, the identification information of the border router, and the IP address prefix.
[0119] When executed on a data processing device, it is also suitable for executing a program initialized with the following method steps: generating a traffic matrix based on the real address prefixes sent by multiple border routers and the traffic data sent by multiple border routers, including: receiving the target mapping relationship between the traffic data sent by multiple border routers and the real address prefixes, where the target mapping relationship is obtained by precisely matching the traffic data received by multiple border routers based on the longest prefix matching rule; generating a traffic matrix based on the target mapping relationship and the traffic data sent by multiple border routers.
[0120] When executed on a data processing device, it is also suitable for executing a program initialized with the following method steps: deploying traffic collection programs in multiple border routers based on the routing information of the border routers, including: deploying a network controller and multiple border routers in a target cluster; deploying traffic collection programs in multiple border routers, where the traffic collection program deployed in each of the multiple border routers is responsible for collecting and processing the traffic data of the target address prefix, and the target address prefix is the address prefix that this border router is responsible for processing.
[0121] When executed on a data processing device, it is also suitable for executing a program initialized with the following method steps: determining the routing information of the border router and notifying the network controller of the routing information of the border router; collecting the traffic data received by each border router through the traffic collection program, where the traffic collection program is deployed in each border router by the network controller; calculating the real address prefix of the traffic data by each border router and sending the real address prefix and the traffic data to the network controller; where the network controller generates a traffic matrix based on the traffic data sent by each border router; determining the network traffic measurement result of the autonomous system based on the traffic matrix.
[0122] When executed on a data processing device, it is also suitable for executing a program initialized with the following method steps: notifying the network controller of the routing information of the border router, including: determining node descriptor information based on the address prefix that the border router is responsible for processing, the autonomous system information of the autonomous system, and the identification information of the border router; determining node network layer reachability information based on the node descriptor information, the network layer protocol used by the node reachability information, and the identification information of the node; determining triple information based on the node network layer reachability information and the node local description information; sending the triple information to the network controller, where the network controller determines the routing information of the border router based on the triple information.
[0123] When executed on a data processing device, it is also suitable for executing a program initialized with the following method steps: calculating the true address prefix of traffic data through each border router, and sending the true address prefix and traffic data to a network controller, including: determining the IP address of the traffic data, where the IP address includes an IP destination address and an IP source address; matching the IP address with each prefix stored in the routing table of each border router based on the longest prefix matching principle to obtain the source prefix of the traffic data and the destination prefix of the traffic data; calculating the true address prefix according to the source prefix and the destination prefix; forwarding the true address prefix and traffic data to the network controller through each border router.
[0124] When executed on a data processing device, it is also suitable for executing a program initialized with the following method steps: notifying the network controller of the routing information of the border router, including: when any one of the multiple border routers is responsible for processing traffic data corresponding to multiple address prefixes, generating triple information corresponding to the multiple address prefixes according to the multiple address prefixes processed by the border router; sequentially sending the triple information corresponding to the multiple address prefixes to the network controller.
[0125] Those skilled in the art should understand that the embodiments of the present application can be provided as a method, a system, or a computer program product. Therefore, the present application can adopt the form of a complete hardware embodiment, a complete software embodiment, or an embodiment combining software and hardware aspects. Moreover, the present application can adopt the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) containing computer-usable program code.
[0126] The present application is described with reference to the flowcharts and / or block diagrams of methods, devices (systems), and computer program products according to the embodiments of the present application. It should be understood that each flow and / or block in the flowcharts and / or block diagrams, as well as the combination of flows and / or blocks in the flowcharts and / or block diagrams, can be implemented by computer program instructions. These computer program instructions can be provided to the processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing devices to generate a machine, so that the instructions executed by the processor of the computer or other programmable data processing devices generate means for realizing the functions specified in Figure 1 one flow or multiple flows and / or blocks Figure 1 one block or multiple blocks.
[0127] These computer program instructions can also be stored in a computer-readable memory that can direct a computer or other programmable data processing device to work in a specific manner, so that the instructions stored in the computer-readable memory generate a manufactured article including instruction means, and the instruction means realizes the functions in the processFigure 1 one or more processes and / or blocks Figure 1 functions specified in one or more blocks.
[0128] These computer program instructions may also be loaded onto a computer or other programmable data processing apparatus, causing a series of operational steps to be performed on the computer or other programmable apparatus to produce a computer-implemented process, so that the instructions executed on the computer or other programmable apparatus provide steps for implementing the functions specified in one Figure 1 one or more processes and / or blocks Figure 1 or more processes and / or blocks.
[0129] In a typical configuration, a computing device includes one or more processors (CPUs), an input / output interface, a network interface, and memory.
[0130] The memory may include non-permanent memory in the computer-readable medium, random access memory (RAM) and / or non-volatile memory such as read-only memory (ROM) or flash memory (flash RAM). The memory is an example of a computer-readable medium.
[0131] Computer-readable media includes both permanent and non-permanent, removable and non-removable media implemented by any method or technology for storing information. The information may be computer-readable instructions, data structures, program modules, or other data. Examples of computer storage media include, but are not limited to, phase change memory (PRAM), static random access memory (SRAM), dynamic random access memory (DRAM), other types of random access memory (RAM), read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM), flash memory or other memory technologies, compact disc read-only memory (CD-ROM), digital versatile discs (DVD) or other optical storage, magnetic cassettes, magnetic tape disk storage or other magnetic storage devices, or any other non-transmission media that can be used to store information accessible by a computing device. As defined herein, computer-readable media does not include transitory media such as modulated data signals and carrier waves.
[0132] It should also be noted that the term "comprises", "comprising" or any other variation thereof is intended to cover a non-exclusive inclusion, such that a process, method, article, or apparatus that comprises a list of elements does not include only those elements but may include other elements not expressly listed or inherent to such process, method, article, or apparatus. Without further limitation, an element defined by the phrase "comprising an..." does not exclude the presence of additional identical elements in the process, method, article, or apparatus that comprises the element.
[0133] Those skilled in the art should understand that the embodiments of the present application can be provided as a method, a system or a computer program product. Therefore, the present application can take the form of a complete hardware embodiment, a complete software embodiment or an embodiment combining software and hardware aspects. Moreover, the present application can take the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) containing computer-usable program code.
[0134] The above are only the embodiments of the present application and are not used to limit the present application. For those skilled in the art, various changes and modifications can be made to the present application. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of the present application shall be included within the scope of the claims of the present application.
Claims
1. A network traffic measurement method based on an autonomous system, characterized in that, The method is applied to a target network, which includes a network controller and an autonomous system. The autonomous system includes at least: multiple border routers, including: For each of the multiple border routers, determine the routing information of the border router and receive the routing information of the border router; Deploy a traffic collection program among the multiple border routers according to the routing information of the border routers. The traffic collection program is used to collect traffic data received by the border routers, and the multiple border routers are used to calculate the true address prefix of the traffic data; Generate a traffic matrix according to the true address prefixes sent by the multiple border routers and the traffic data sent by the multiple border routers, and determine the network traffic measurement result of the autonomous system according to the traffic matrix.
2. The method according to claim 1, characterized in that Determining the routing information of the border router includes: Determine the autonomous system information of the autonomous system, where the autonomous system information includes at least: the identification information of the autonomous system; Determine the identification information of the border router and determine the IP address prefix processed by the border router; Determine the routing information of the border router according to the autonomous system information, the identification information of the border router, and the IP address prefix.
3. The method according to claim 1, wherein Generating a traffic matrix according to the true address prefixes sent by the multiple border routers and the traffic data sent by the multiple border routers includes: Receive the target mapping relationship between the traffic data sent by the multiple border routers and the true address prefixes, where the target mapping relationship is obtained by precisely matching the traffic data received by the multiple border routers based on the longest prefix matching rule; Generate the traffic matrix based on the target mapping relationship and the traffic data sent by the multiple border routers.
4. The method according to any one of claims 1 to 3, characterized in that, Deploying a traffic collection program among the multiple border routers according to the routing information of the border router includes: Deploy the network controller and the multiple border routers in a target cluster; Deploy the traffic collection program among the multiple border routers. The traffic collection program deployed in each of the multiple border routers is responsible for collecting and processing the traffic data of the target address prefix, and the target address prefix is the address prefix processed by the border router.
5. A network traffic measurement method based on an autonomous system, characterized in that, The method is applied to a target network, which includes a network controller and an autonomous system. The autonomous system includes at least: multiple border routers. For each of the multiple border routers, it includes: Determine the routing information of the border router and announce the routing information of the border router to the network controller; Collect the traffic data received by each border router through the traffic collection program, where the traffic collection program is deployed in each border router by the network controller; Calculate the true address prefix of the traffic data through each border router and send the true address prefix and the traffic data to the network controller; the network controller generates a traffic matrix according to the traffic data sent by each border router. Determine the network traffic measurement result of the autonomous system according to the traffic matrix.
6. The method according to claim 5, wherein Notify the network controller of the routing information of the border router, including: Determine the node descriptor information according to the address prefix processed by the border router, the autonomous system information of the autonomous system, and the identification information of the border router; Determine the node network layer reachability information according to the node descriptor information, the network layer protocol used by the node reachability information, and the identification information of the node; Determine the triple information according to the node network layer reachability information and the node local description information; Send the triple information to the network controller, where the network controller determines the routing information of the border router according to the triple information.
7. The method according to claim 5, characterized in that, Calculate the true address prefix of the traffic data through each border router, and send the true address prefix and the traffic data to the network controller, including: Determine the IP address of the traffic data, where the IP address includes the IP destination address and the IP source address; Match the IP address with each prefix stored in the routing table of each border router based on the longest prefix matching principle to obtain the source prefix and the destination prefix of the traffic data; Calculate the true address prefix according to the source prefix and the destination prefix; Forward the true address prefix and the traffic data to the network controller through each border router.
8. The method according to claim 5, wherein Notify the network controller of the routing information of the border router, including: When any one of the multiple border routers is responsible for processing traffic data corresponding to multiple address prefixes, generate triple information corresponding to the multiple address prefixes according to the multiple address prefixes processed by the border router; Send the triple information corresponding to the multiple address prefixes to the network controller in sequence.
9. A network traffic measurement device based on an autonomous system, characterized in that, The device deploys a target network, the target network includes: a network controller, an autonomous system, the autonomous system at least includes: multiple border routers, and the device includes: A first determination unit, configured to determine the routing information of each border router among the multiple border routers and receive the routing information of the border router; A deployment unit, configured to deploy a traffic collection program among the multiple border routers according to the routing information of the border router, where the traffic collection program is used to collect traffic data received by the border router, and the multiple border routers are used to calculate the true address prefix of the traffic data; A generation unit, configured to generate a traffic matrix according to the true address prefixes sent by the multiple border routers and the traffic data sent by the multiple border routers, and determine the network traffic measurement result of the autonomous system according to the traffic matrix.
10. An electronic device, characterized in that, Includes one or more processors and a memory, the memory is used to store one or more programs, where when the one or more programs are executed by the one or more processors, the one or more processors implement the network traffic measurement method based on an autonomous system according to any one of claims 1 to 8.
Citation Information
Patent Citations
Method for detecting and classifying all-network flow abnormity on line
CN101848160A
Network flow regulation method and system
CN103618677A
Autonomous system level flow collection system and method based on Netflow
CN104168156A
NS3 simulation system flow importing method based on Netflow
CN106027406A
Interaction flow multi-dimensional monitoring analysis system based on NetFlow big data acquisition technology
CN118075201A