Efficient IP data transparent transmission method and system

Abstract

The invention discloses an efficient IP data unvarnished transmission method and system, and the method comprises the steps: selecting a proper unvarnished transmission protocol through the classification and recognition of a network data flow at a transmitting end, the extraction of a flow type, a QoS demand and the size of a data packet; before data packaging, a lightweight encryption engine is adopted to encrypt a data load and add integrity authentication information; the network state is monitored in real time, a transparent transmission path is dynamically selected, and rapid switching is carried out according to network changes; the receiving end decrypts and authenticates the data and recovers the original IP packet; the system periodically analyzes a transmission log, automatically optimizes a protocol selection and path switching strategy, and improves the transparent transmission performance by using an adaptive algorithm; the invention discloses an efficient IP data transparent transmission method and system, and aims to improve the transparent transmission efficiency of IP data, enhance the safety and stability of the transparent transmission process and realize automatic and intelligent configuration management.

Description

Technical Field

[0001] The present invention belongs to the field of efficient IP data transparent transmission, and in particular relates to an efficient IP data transparent transmission method and a system thereof. Background Art

[0002] Efficient IP data transparent transmission methods and systems generally refer to technologies that ensure data transmission over IP networks with minimal latency, minimal resource consumption, and maximum reliability without content processing or modification. Transparent transmission means that data content is not modified, unpacked, or subjected to any application-layer processing during data transmission. The primary goal is to improve network transmission efficiency and reduce latency, making it particularly suitable for applications requiring high-speed, real-time transmission. Data packets are not decoded, modified, compressed, or decompressed during transmission; instead, they are transmitted completely intact, preserving the integrity and originality of the data. Because transparent transmission involves no complex computation or content parsing, data transmission speed and latency are minimized, which is crucial for applications requiring low latency. Because no deep data packet processing is performed, processing power and storage requirements are relatively low, reducing the burden on network equipment and improving overall efficiency. Transparent transmission maximizes network bandwidth utilization without allocating excessive processing resources, enabling high-throughput data transmission. Transparent transmission technology is not dependent on specific network protocols or application-layer formats, making it applicable in diverse network environments and highly compatible. For example, some network devices simply forward data packets without performing any content processing. Such devices are typically used in specialized transmission networks. VPN transmission technology is also a common method for IP data transmission, transparently transmitting data from the source to the destination through encryption and tunneling technologies, and is used in a variety of scenarios. This technology uses labels to efficiently forward data, enabling rapid data transmission in IP networks and is widely used in large enterprise networks or operator networks. This method is used in dedicated line connections to ensure efficient transmission of IP data, avoiding the congestion and instability of the ordinary Internet. It provides high-bandwidth, low-latency data transmission services through fiber optic networks and is suitable for application scenarios requiring high data rates and large-capacity transmission.

[0003] However, with the widespread application of cloud computing, big data and distributed systems, the demand for IP data transparent transmission between networks is growing. Existing transparent transmission methods mainly include encapsulation technologies based on GRE, IPSec, VxLAN, UDP, etc., but there are still some defects. The transmission efficiency is not high, especially in the scenario of high-frequency transmission of small packets. The protocol header overhead is large, and there is a lack of flexible dynamic protocol selection mechanism. It is impossible to switch the transparent transmission path according to the real-time status of the network. Security relies on additional encryption protocols, deployment is complex, configuration is inflexible, maintenance costs are high, and the encapsulation structure is not unified in a multi-tenant environment, resulting in poor compatibility of transparent transmission across network domains. Summary of the Invention

[0004] In view of the deficiencies in the prior art, the purpose of the present invention is to provide an efficient IP data transparent transmission method and system thereof, aiming to improve the transparent transmission efficiency of IP data, enhance the security and stability of the transparent transmission process, and realize automated and intelligent configuration management.

[0005] The technical solution adopted by the present invention to solve its technical problem is:

[0006] An efficient IP data transparent transmission method includes:

[0007] Classify and identify network data flows at the sending end, extract the flow type, QoS requirements, and packet size parameters of each data flow, and classify the data flows according to flow characteristics;

[0008] Based on the characteristic parameters of the data flow, adopt and match transparent transmission UDP, QUIC, VxLAN and lightweight GRE protocol types;

[0009] Before data encapsulation, a lightweight encryption engine is used to encrypt the data payload and append integrity authentication information.

[0010] Based on the real-time network monitoring module, it dynamically adopts the transparent transmission path and quickly switches according to the changes in network status;

[0011] At the receiving end, the data is decrypted and authenticated based on the encapsulation identifier and protocol type, and restored to the original IP data packet;

[0012] Regularly analyze transmission logs to automatically optimize encapsulation protocols and path switching strategies, and continuously improve transparent transmission performance through adaptive algorithms.

[0013] Preferably, the network data flow is classified and identified at the sending end, and the flow type, QoS requirement, and packet size parameters of each data flow are extracted. The method for classifying the data flow according to the flow characteristics is as follows:

[0014] A data stream contains N packets, and the characteristics of the stream are quantified by the following aspects:

[0015] The flow type T is extracted based on the protocol identifier. For each packet P i , whose size is P i =|D i |, where |D i | is the number of bytes in data packet i, calculate the average packet size of the data flow

[0016]

[0017] Where N is the total number of packets in the flow, |P i | is the number of bytes in data packet i;

[0018] Delay requirement D delay Estimated by measuring the time it takes to send and receive packets:

[0019] D delay =max(T recv )-min(T send )

[0020] Where T recv and T send The timestamps of receiving and sending data packets respectively;

[0021] Packet loss rate L loss Indicates the packet loss rate, calculated as:

[0022]

[0023] Based on the above parameters, a classification function is defined, which classifies according to the characteristic parameters of each data stream, and establishes C k Class flow, the characteristics of each class flow are represented by a vector, and the classification is described by the following formula:

[0024]

[0025] in, is the characteristic vector of the data stream, which contains the characteristic parameters of the data stream;

[0026] μ k,j is the mean of the jth feature of the kth class flow;

[0027] When data flows are classified according to QoS requirements, a weighting function W is defined. QoS , based on the weight of each flow's latency and packet loss rate requirements:

[0028] W QoS =w1·D delay +w2·L loss

[0029] Among them, w1 and w2 are weight coefficients.

[0030] As a preferred method, based on the characteristic parameters of the data stream, the method of adopting and matching transparent transmission of UDP, QUIC, VxLAN and lightweight GRE protocol types is:

[0031] During the matching process, features are extracted from the data stream:

[0032] Packet size P i : The number of bytes per packet;

[0033] End-to-end delay D delay : Data packet transmission delay;

[0034] The transmission mode of the data stream: whether it is connection-oriented or connectionless transmission;

[0035] Protocol specific information:

[0036] For UDP: Not connected to management, the port number is not equal to 443;

[0037] For QUIC: It is an encrypted transport protocol and uses port 443 or other specified ports.

[0038] For VxLAN: Check whether a specific VxLAN identifier exists.

[0039] For lightweight GRE: it has a GRE identifier field and carries IP data packets;

[0040] Based on these characteristics, a matching function f is designed to classify data streams through multiple conditions;

[0041] UDP streams are characterized by being connectionless, low-latency, having a simple header structure, and being unencrypted. They are matched using the following formula:

[0042] f UDP =match(P i , D delay , port)

[0043] Among them, if the data packet size P i If it is smaller and does not require a connection, then UDP is the best choice.

[0044] UDP has lower latency, D delay , and the delay fluctuation is small;

[0045] If the port is not 443 and there is no encryption information, it is UDP;

[0046] The QUIC protocol uses port 443 and has encryption features. The following formula is used for matching:

[0047] f QUIC =match(P i , D delay , port, encryption)

[0048] Among them, QUIC uses port 443;

[0049] QUIC packets are slightly larger and carry encrypted data;

[0050] If the data packet has an encryption flag, it is QUIC;

[0051] VxLAN is a tunneling protocol used in virtualized environments. It uses a specific protocol identifier and is matched using the following formula:

[0052] f VxLAN =match(Ethernet Type, VxLAN Identifier, P i )

[0053] The Ethernet type field of VxLAN is 0x0800 or 0x86DD;

[0054] VxLAN packets contain a specific identifier field, which is a 24-bit VNI;

[0055] VxLAN packets are large and contain header information;

[0056] The lightweight GRE protocol carries a GRE identifier and carries IP data packets. The following formula is used for matching:

[0057] f GRE =match(GRE Header, P i )

[0058] Among them, the lightweight GRE data packet has a specific GRE identifier field, which is 0x88BE or 0x0800;

[0059] Lightweight GRE packets are typically smaller and contain an additional GRE header;

[0060] The above protocol matching formulas are combined into a unified matching function f match :

[0061]

[0062] in,

[0063] X=[P i , Ddelay , port, Ethernet Type, GRE Header, VxLAN Identifier] is the feature vector of the data flow;

[0064] The match function checks whether the characteristics of the data stream meet the characteristics of a certain protocol.

[0065] As a preferred method, before data encapsulation, a lightweight encryption engine is used to encrypt the data payload and attach integrity authentication information as follows:

[0066] During data transmission, the data payload is encrypted and a symmetric encryption algorithm is used. The encryption calculation formula is:

[0067] C=E(K,P)

[0068] Where C is the ciphertext;

[0069] E is an encryption operation, using a lightweight encryption engine

[0070] K is the key, which is the shared key;

[0071] P is the original data payload;

[0072] HMAC is used. This method is based on a hash function and a shared key. The specific formula is:

[0073] MAC = HMAC(K, C)

[0074] Among them, HMAC is a message authentication code function, which uses the shared key K and the ciphertext C as input;

[0075] K is the key;

[0076] C is the encrypted ciphertext;

[0077] The encrypted data is sent together with integrity authentication information. The authentication information is a message authentication code and a digital signature, which are attached to the encrypted data. The complete encapsulated data format is as follows:

[0078] D enc =[C, MAC]

[0079] Among them, D enc The final encapsulated data includes the encrypted ciphertext C and the message authentication code or other integrity authentication information;

[0080] After receiving the encapsulated data, the receiver performs the following two steps:

[0081] Integrity Verification:

[0082] Verify(MAC, HMAC(K, C)) (verify the message authentication code) If the verification fails, it means that the data has been tampered with;

[0083] Decryption operation:

[0084] P=D 1 (K, C) (decryption operation)

[0085] Among them, D 1 For the decryption operation, the key K is used to decrypt the ciphertext C and restore it to the plaintext P.

[0086] As a preferred method, based on the real-time network monitoring module, the transparent transmission path is dynamically adopted and the method of rapid switching according to the change of network status is as follows:

[0087] The path selection strategy is based on the real-time status of the network, and multiple transparent transmission paths (P1, P2, ..., P n );

[0088] For each path P i , set up the following indicators;

[0089] D i : Path P i Delays;

[0090] B i : Path P i bandwidth;

[0091] L i : Path P i Packet loss rate;

[0092] By weighted evaluation of these network status indicators, we can get the path quality score W i :

[0093]

[0094] Among them, α, β, and γ are weighting coefficients used to adjust the impact of delay, bandwidth, and packet loss rate on the final path selection;

[0095] Represents the inverse of delay, that is, the smaller the delay, the higher the path score;

[0096] B i Represents bandwidth. The larger the bandwidth, the higher the path score.

[0097] L i Represents the packet loss rate. The lower the packet loss rate, the higher the path score.

[0098] Take the path P with the highest score best As the current transparent transmission path:

[0099]

[0100] As network status changes, the path selection will be dynamically adjusted. The network status indicator of each path will change over time, and the path switching decision will be based on a real-time updated quality score.

[0101] When the network quality score of a path W i Below a certain threshold E threshold When , it immediately switches to another path with better quality. The switching condition is expressed as:

[0102] Switch if W best <W threshold

[0103] Among them, W best Score the quality of the currently selected path;

[0104] W threshold is the preset minimum path quality score threshold;

[0105] The frequency of path switching is controlled according to the frequency of network status changes to avoid unstable performance caused by frequent switching. A switching delay T is set. switch , when the quality score of the path is lower than the threshold, switching will be performed after this time:

[0106] T switch =f(W i , D i , B i , L i )

[0107] Wherein, f is the mapping function between path quality evaluation and handover delay.

[0108] As a preferred method, according to the encapsulation identifier and protocol type, the data is decrypted and authenticated, and the method of restoring it to the original IP data packet is:

[0109] When the receiving end receives the data, it parses the data according to the encapsulation identifier and protocol type, which are stored in the header or metadata of the data packet;

[0110] If the data is encrypted, the receiving end needs to decrypt it. The data is encrypted using a symmetric encryption algorithm. The decryption formula is:

[0111] D payload =Dec K (Enc SPI (D encrypted ))

[0112] Among them, D payloadis the decrypted payload;

[0113] Dec K Indicates the process of decrypting data using the key K;

[0114] Enc SPI Encryption is performed using the key associated with the encapsulation identifier;

[0115] D encrypted To encrypt data;

[0116] If the protocol also includes authentication, the receiving end verifies the integrity of the data to ensure that the data has not been tampered with. Common authentication algorithms include HMAC. The authentication process is expressed as follows:

[0117]

[0118] Among them, K auth is the key used for authentication;

[0119] D payload is the payload recovered from the encrypted data;

[0120] HMAC auth For data D payload the process of conducting certification;

[0121] HMAC received is the received authentication data;

[0122] If the authentication succeeds, that is, the two are equal, the data has not been tampered with and processing continues; if they do not match, the data has been tampered with and needs to be discarded;

[0123] The receiving end restores the decrypted and authenticated data to the original IP packet. The restoration process involves stripping off all encapsulation headers and extracting the original packet.

[0124] Assuming the original IP packet is encapsulated in an encrypted or authenticated packet, the recovery process is:

[0125] IP original =Remove Encapsulation Header(D payload )

[0126] Among them, IP original It is the original IP data packet after recovery;

[0127] D payload The decrypted and authenticated payload.

[0128] As a preferred method, regularly analyze transmission logs to automatically optimize the encapsulation protocol and path switching strategy. The following methods are used to continuously improve transparent transmission performance through adaptive algorithms:

[0129] The system collects and analyzes transmission logs, which contain information such as throughput, latency, packet loss rate, connection quality, protocol type, and network path;

[0130] The system has collected n log data, each of which contains T i 、L i 、P i and Q i ;

[0131] A weighted average is used to represent the overall performance of these performance indicators:

[0132]

[0133] Among them, w T , w L , w P , w Q The weight of each indicator is set according to actual needs;

[0134] Based on the analysis of transmission logs, the system decides which encapsulation protocol to use to optimize transmission performance. The encapsulation protocol is dynamically adjusted based on throughput, latency, and packet loss rate.

[0135] Establishing a system selection protocol k The corresponding transmission performance model is:

[0136] Perf k =f(T k , L k , P k , Q k )

[0137] Among them, T k , L k , P k , Q k are the throughput, delay, packet loss rate and connection quality of protocol k respectively;

[0138] f(·) is the performance model of the encapsulation protocol;

[0139] Use the best protocol:

[0140]

[0141] Use the protocol corresponding to the maximum performance value opt ;

[0142] The path switching strategy is to optimize the transparent transmission performance. The system decides whether to switch to another path based on the quality of the current network path. The system has m paths {P1, P2, ..., P m The quality of each path is measured by a comprehensive performance indicator, the performance of each path Perf j Expressed as:

[0143] Perf j =f(L j ,P j ,Q j )

[0144] Among them, L j is the delay of path j, P j is the packet loss rate, Q j For connection quality;

[0145] The system adopts path P according to these indicators opt :

[0146]

[0147] Among them, the weight w P and w Q Used to balance the impact of different path performance indicators;

[0148] The adaptive algorithm dynamically adjusts system behavior based on transmission log analysis, encapsulation protocols, and path switching strategies. The core concept of the adaptive optimization algorithm is to continuously adjust system parameters based on a feedback mechanism to improve transparent transmission performance.

[0149] The optimization goal of the system is to maximize the transparent transmission performance Perf total ,Right now:

[0150] Peff total =α·Throughput-β·Latency-γ·Packet Loss

[0151] Among them, α, β, and γ are weight coefficients, indicating the relative importance of different performance indicators;

[0152] After each adjustment, feedback information is updated and adaptive adjustments are made through the following feedback mechanism:

[0153] An efficient IP data transparent transmission system, including:

[0154] The data stream classification module is used to classify and identify network data streams at the sending end, extract characteristic parameters of the data streams, and classify them according to the stream characteristics;

[0155] The encapsulation strategy matching module is used to match the data flow characteristics with the preset protocol strategy library and encapsulate the data using the corresponding transparent transmission protocol type;

[0156] The encryption and authentication module is used to encrypt the encapsulated data payload and add integrity authentication information;

[0157] The dynamic path selection module monitors the performance indicators of network links in real time and dynamically selects a transparent transmission path based on the network status. When an abnormality is detected in the link, it automatically switches to an alternative path.

[0158] The decapsulation module is used by the receiving end to decapsulate the received data and restore it to the original IP data packet;

[0159] The policy optimization module is used to automatically optimize the protocol adoption strategy and path switching mechanism based on historical transmission logs, and use an adaptive algorithm to adjust the strategy according to the transmission quality.

[0160] Another technical problem to be solved by the present invention is to provide an electronic device, including a memory, a processor, and a computer program stored in the memory and runnable on the processor. When the processor executes the program, it implements an efficient IP data transparent transmission method and system as described above.

[0161] Another technical problem to be solved by the present invention is to provide a computer-readable storage medium having a computer program stored thereon, which, when executed by a processor, implements, for example, an efficient IP data transparent transmission method and system thereof.

[0162] The beneficial effects of the present invention are:

[0163] By classifying and identifying network data flows, the type and requirements of each data flow, especially QoS requirements, can be accurately analyzed; according to different data flow characteristics, the most suitable protocol is automatically selected, and the data payload is encrypted using a lightweight encryption engine, which can effectively protect data privacy and security and prevent data from being stolen or tampered with during transmission; based on the real-time network monitoring module, the optimal transparent transmission path can be dynamically selected; by regularly analyzing transmission logs, the system can adaptively optimize the encapsulation protocol and path switching strategy, thereby improving transparent transmission performance; by supporting multiple protocols, the system has strong flexibility and can adapt to different network environments and application requirements; by continuously adjusting protocols, encryption, paths and other strategies, the system can adapt to changes in the network environment in real time and always maintain the best transparent transmission performance; this solution can be flexibly adjusted in different network environments, support different protocols and path switching, and ensure efficient and secure transmission under various network conditions. BRIEF DESCRIPTION OF THE DRAWINGS

[0164] Figure 1 The figure is a flow chart of an efficient IP data transparent transmission system of the present invention. DETAILED DESCRIPTION

[0165] The principles and features of the present invention are described below. The examples provided are intended to illustrate the present invention only and are not intended to limit the scope of the present invention. The following paragraphs describe the present invention in more detail by way of example. The advantages and features of the present invention will become more apparent from the following description and claims.

[0166] Unless otherwise defined, all technical and scientific terms used herein have the same meaning as commonly understood by those skilled in the art to which this invention pertains. The terms used in this specification of the present invention are for the purpose of describing specific embodiments only and are not intended to limit the present invention. The term "and / or" as used herein includes any and all combinations of one or more of the associated listed items.

[0167] Example

[0168] The technical solution adopted by the present invention to solve its technical problem is:

[0169] An efficient IP data transparent transmission method includes:

[0170] Classify and identify network data flows at the sending end, extract the flow type, QoS requirements, and packet size parameters of each data flow, and classify the data flows according to flow characteristics;

[0171] Based on the characteristic parameters of the data flow, adopt and match transparent transmission UDP, QUIC, VxLAN and lightweight GRE protocol types;

[0172] Before data encapsulation, a lightweight encryption engine is used to encrypt the data payload and append integrity authentication information.

[0173] Based on the real-time network monitoring module, it dynamically adopts the transparent transmission path and quickly switches according to the changes in network status;

[0174] At the receiving end, the data is decrypted and authenticated based on the encapsulation identifier and protocol type, and restored to the original IP data packet;

[0175] Regularly analyze transmission logs to automatically optimize encapsulation protocols and path switching strategies, and continuously improve transparent transmission performance through adaptive algorithms.

[0176] By classifying and identifying network data flows at the sending end, the type, QoS requirements and packet size of each flow can be accurately extracted; a lightweight encryption engine is used to encrypt the data payload, and integrity authentication information is attached to ensure that the data during transmission is not stolen or tampered with; based on the real-time network monitoring module, the optimal transparent transmission path can be dynamically selected; by analyzing transmission logs and real-time data, the system can automatically optimize the encapsulation protocol and path switching strategy to improve transparent transmission performance; the solution supports transparent transmission of UDP, QUIC, VxLAN and lightweight GRE protocols, and can select the best protocol type according to different network conditions and business needs; through real-time network monitoring, protocol selection, path switching and other means, it can reduce latency and increase network throughput, thereby improving transparent transmission efficiency.

[0177] At the sending end, network data flows are classified and identified, and the flow type, QoS requirements, and packet size parameters of each data flow are extracted. The method for classifying data flows according to flow characteristics is as follows:

[0178] A data stream contains N packets, and the characteristics of the stream are quantified by the following aspects:

[0179] The flow type T is extracted based on the protocol identifier. For each packet P i , whose size is P i =|D i |, where |D i |For data packets Bytes, calculate the average packet size of the data stream

[0180]

[0181] Where N is the total number of packets in the flow, |P i |For data packets The number of bytes;

[0182] Delay requirement D delay Estimated by measuring the time it takes to send and receive packets:

[0183] Ddelay=max(T recv )-min(T send )

[0184] Where T recv and T send The timestamps of receiving and sending data packets respectively;

[0185] Packet loss rate L loss Indicates the packet loss rate, calculated as:

[0186]

[0187] Based on the above parameters, a classification function is defined, which classifies according to the characteristic parameters of each data stream, and establishes C k Class flow, the characteristics of each class flow are represented by a vector, and the classification is described by the following formula:

[0188]

[0189] in, is the characteristic vector of the data stream, which contains the characteristic parameters of the data stream;

[0190] μ k,j is the mean of the jth feature of the kth class flow;

[0191] When data flows are classified according to QoS requirements, a weighting function W is defined. QoS , based on the weight of each flow's latency and packet loss rate requirements:

[0192] W QoS =w1·D delay +w2·L loss

[0193] Among them, w1 and w2 are weight coefficients.

[0194] By extracting multi-dimensional features of the flow, such as flow type, packet size, delay requirement, packet loss rate, etc., different types of traffic can be identified more accurately; by quantifying the delay requirement and packet loss rate requirement of the data flow, the most appropriate transmission path can be selected according to the characteristics of each flow; by defining a weighting function, different weights can be assigned to different delay requirements and packet loss rate requirements, further adjusting the performance and transmission requirements of the data flow; by classifying flow characteristics, the appropriate protocol and optimal transmission path can be selected according to the traffic characteristics; by classifying flow characteristics, the system can perceive the needs of different flows in real time and automatically adjust the transmission strategy according to the network conditions, thereby improving the stability and reliability of data transmission.

[0195] Based on the characteristic parameters of the data stream, the method for adopting and matching transparent transmission of UDP, QUIC, VxLAN, and lightweight GRE protocol types is as follows:

[0196] During the matching process, features are extracted from the data stream:

[0197] Packet size P i : The number of bytes per packet;

[0198] End-to-end delay D delay : Data packet transmission delay;

[0199] The transmission mode of the data stream: whether it is connection-oriented or connectionless transmission;

[0200] Protocol specific information:

[0201] For UDP: Not connected to management, the port number is not equal to 443;

[0202] For QUIC: It is an encrypted transport protocol and uses port 443 or other specified ports.

[0203] For VxLAN: Check whether a specific VxLAN identifier exists.

[0204] For lightweight GRE: it has a GRE identifier field and carries IP data packets;

[0205] Based on these characteristics, a matching function f is designed to classify data streams through multiple conditions;

[0206] UDP streams are characterized by being connectionless, low-latency, having a simple header structure, and being unencrypted. They are matched using the following formula:

[0207] f UDP =match(P i , D delay , port)

[0208] Among them, if the data packet size P i If it is smaller and does not require a connection, then UDP is the best choice.

[0209] UDP has lower latency, D delay , and the delay fluctuation is small;

[0210] If the port is not 443 and there is no encryption information, it is UDP;

[0211] The QUIC protocol uses port 443 and has encryption features. The following formula is used for matching:

[0212] f QUIC =match(P i ,D delay ,port,encryption)

[0213] Among them, QUIC uses port 443;

[0214] QUIC packets are slightly larger and carry encrypted data;

[0215] If the data packet has an encryption flag, it is QUIC;

[0216] VxLAN is a tunneling protocol used in virtualized environments. It uses a specific protocol identifier and is matched using the following formula:

[0217] f VxLAN =match(Ethernet Type,VxLAN Identifier,P i )

[0218] The Ethernet type field of VxLAN is 0x0800 or 0x86DD;

[0219] VxLAN packets contain a specific identifier field, which is a 24-bit VNI;

[0220] VxLAN packets are large and contain header information;

[0221] The lightweight GRE protocol carries a GRE identifier and carries IP data packets. The following formula is used for matching:

[0222] f CRE =match(GRE Header,P i )

[0223] Among them, the lightweight GRE data packet has a specific GRE identifier field, which is 0x88BE or 0x0800;

[0224] Lightweight GRE packets are typically smaller and contain an additional GRE header;

[0225] The above protocol matching formulas are combined into a unified matching function f match :

[0226]

[0227] in,

[0228] X=[P i ,D delay ,port,Ethernet Type,GRE Header,VxLAN Identifier] is the feature vector of the data flow;

[0229] The match function checks whether the characteristics of the data stream meet the characteristics of a certain protocol.

[0230] By analyzing the characteristics of data packets, this method can accurately classify data streams into protocols such as UDP, QUIC, VxLAN or lightweight GRE; the solution can support multiple protocols, making it adaptable to different network environments and application scenarios; by identifying protocol types, the system can optimize latency and packet loss rates for different protocols; VxLAN and lightweight GRE protocols are mainly used in virtualized network environments. These protocols use tunneling technology to encapsulate and transmit data streams between virtual machines; by identifying the encryption identifier in the QUIC protocol, the system can effectively identify encrypted data streams, thereby avoiding potential security risks.

[0231] Before data encapsulation, a lightweight encryption engine is used to encrypt the data payload and append integrity authentication information as follows:

[0232] During data transmission, the data payload is encrypted and a symmetric encryption algorithm is used. The encryption calculation formula is:

[0233] C=E(K,P)

[0234] Where C is the ciphertext;

[0235] E is an encryption operation, using a lightweight encryption engine

[0236] K is the key, which is the shared key;

[0237] P is the original data payload;

[0238] HMAC is used. This method is based on a hash function and a shared key. The specific formula is:

[0239] MAC = HMAC(K, C)

[0240] Among them, HMAC is a message authentication code function, which uses the shared key K and the ciphertext C as input;

[0241] K is the key;

[0242] C is the encrypted ciphertext;

[0243] The encrypted data is sent together with integrity authentication information. The authentication information is a message authentication code and a digital signature, which are attached to the encrypted data. The complete encapsulated data format is as follows:

[0244] D enc =[C, MAC]

[0245] Among them, D enc The final encapsulated data includes the encrypted ciphertext C and the message authentication code or other integrity authentication information;

[0246] After receiving the encapsulated data, the receiver performs the following two steps:

[0247] Integrity Verification:

[0248] Verify(MAC, HMAC(K, C))

[0249] If the verification fails, it means that the data has been tampered with;

[0250] Decryption operation:

[0251] P=D1(K,C) (decryption operation)

[0252] Among them, D 1 For the decryption operation, the key K is used to decrypt the ciphertext C and restore it to the plaintext P.

[0253] Even if the data is intercepted during transmission, the content cannot be decrypted and read without the key; HMAC is used to ensure that the data has not been tampered with. Once there is any tampering, the authentication will fail immediately; HMAC prevents middlemen from forging data or replaying old data packets; it can be completed in real time on low-power processors without complex calculations; compared with TLS / QUIC-type handshake protocols, this solution does not introduce connection establishment delays and is suitable for UDP-type communications; the solution is independent of the transport protocol layer; it can be deployed as a preprocessing module on any protocol stack to enhance the data security of the protocol without changing the original logic; it can be combined with existing protocols into a "lightweight encrypted transmission protocol"; the computational complexity of symmetric encryption is much lower than that of asymmetric encryption (such as RSA), and it is suitable for large-scale data communication; it is naturally adapted to the shared key pre-distribution model; timestamp / random number / serial number to prevent replay attacks; used for version control, security level marking, etc.

[0254] Based on the real-time network monitoring module, the method of dynamically adopting the transparent transmission path and quickly switching according to changes in network status is as follows:

[0255] The path selection strategy is based on the real-time status of the network, and multiple transparent transmission paths (P1, P2, ..., P n );

[0256] For each path P i , set up the following indicators;

[0257] D i : Path P i Delays;

[0258] B i : Path P i bandwidth;

[0259] L i : Path P i Packet loss rate;

[0260] By weighted evaluation of these network status indicators, we can get the path quality score W i :

[0261]

[0262] Among them, α, β, and γ are weighting coefficients used to adjust the impact of delay, bandwidth, and packet loss rate on the final path selection;

[0263] Represents the inverse of delay, that is, the smaller the delay, the higher the path score;

[0264] B i Represents bandwidth. The larger the bandwidth, the higher the path score.

[0265] L i Represents the packet loss rate. The lower the packet loss rate, the higher the path score.

[0266] Take the path P with the highest score best As the current transparent transmission path:

[0267]

[0268] As network status changes, the path selection will be dynamically adjusted. The network status indicator of each path will change over time, and the path switching decision will be based on a real-time updated quality score.

[0269] When the network quality score of a path W i Below a certain threshold W threshold When , it immediately switches to another path with better quality. The switching condition is expressed as:

[0270] Switch if W best <W threshold

[0271] Among them, W best Score the quality of the currently selected path;

[0272] W threshold is the preset minimum path quality score threshold;

[0273] The frequency of path switching is controlled according to the frequency of network status changes to avoid unstable performance caused by frequent switching. A switching delay T is set. switch , when the quality score of the path is lower than the threshold, switching will be performed after this time:

[0274] T switch =f(W i , D i , B i , L i )

[0275] Wherein, f is the mapping function between path quality evaluation and handover delay.

[0276] Path selection and switching are dynamic, responding to network changes in real time to ensure stable and efficient network communications. A weighted scoring system comprehensively considers different network conditions and optimizes various network environments. A path switching delay is set, adjusting the switching frequency to avoid the negative impact of frequent switching on network performance. By evaluating the quality of each path in real time, the system automatically selects the optimal path, not just at a single moment in time, but also dynamically adjusting based on real-time network changes. This solution is applicable to various network environments, especially those sensitive to latency, bandwidth, and packet loss. The system can adjust the weighting coefficients for latency, bandwidth, and packet loss as needed, tailoring path selection to the specific application scenario. For example, in real-time communication scenarios, latency and packet loss may be more important, while in high-volume transmission, bandwidth may be more important. Dynamic path selection and switching ensures better distribution of network traffic and improves load balancing across different paths. If the quality of a path degrades for any reason, the system immediately switches to another path, ensuring continuous and stable data transmission and enhancing the system's fault tolerance.

[0277] The method for decrypting and authenticating the data and restoring it to the original IP data packet is as follows:

[0278] When the receiving end receives the data, it parses the data according to the encapsulation identifier and protocol type, which are stored in the header or metadata of the data packet;

[0279] If the data is encrypted, the receiving end needs to decrypt it. The data is encrypted using a symmetric encryption algorithm. The decryption formula is:

[0280] D payload =Dec K (Enc SPI (D encrypted ))

[0281] Among them, D payload is the decrypted payload;

[0282] Dec K Indicates the process of decrypting data using the key K;

[0283] Enc SPI Encryption is performed using the key associated with the encapsulation identifier;

[0284] D encrypted To encrypt data;

[0285] If the protocol also includes authentication, the receiving end verifies the integrity of the data to ensure that the data has not been tampered with. Common authentication algorithms include HMAC. The authentication process is expressed as follows:

[0286]

[0287] Among them, K auth is the key used for authentication;

[0288] D payload is the payload recovered from the encrypted data;

[0289] For data D payload the process of conducting certification;

[0290] HMAC received is the received authentication data;

[0291] If the authentication succeeds, that is, the two are equal, the data has not been tampered with and processing continues; if they do not match, the data has been tampered with and needs to be discarded;

[0292] The receiving end restores the decrypted and authenticated data to the original IP packet. The restoration process involves stripping off all encapsulation headers and extracting the original packet.

[0293] Assuming the original IP packet is encapsulated in an encrypted or authenticated packet, the recovery process is:

[0294] IP original =Remove Encapsulation Header(D payload )

[0295] Among them, IP original It is the original IP data packet after recovery;

[0296] D payload The decrypted and authenticated payload.

[0297] It uses symmetric encryption, taking into account both security and performance, and is suitable for high-speed network transmission scenarios. It prevents data tampering, ensures integrity, and enhances security. It supports flexible key distribution and processing in multi-path and multi-protocol environments. It restores the original IP data structure to ensure seamless connection of subsequent processing logic. It manages the logic layer through encapsulation identification, making the protocol highly scalable and adaptable to multiple encryption / authentication methods.

[0298] Regularly analyze transmission logs to automatically optimize encapsulation protocols and path switching strategies. This method continuously improves transparent transmission performance through adaptive algorithms.

[0299] The system collects and analyzes transmission logs, which contain information such as throughput, latency, packet loss rate, connection quality, protocol type, and network path;

[0300] The system has collected n log data, each of which contains T i 、L i 、P i and Q i ;

[0301] A weighted average is used to represent the overall performance of these performance indicators:

[0302]

[0303] Among them, w T , w L , w P , w Q The weight of each indicator is set according to actual needs;

[0304] Based on the analysis of transmission logs, the system decides which encapsulation protocol to use to optimize transmission performance. The encapsulation protocol is dynamically adjusted based on throughput, latency, and packet loss rate.

[0305] Establishing a system selection protocol k The corresponding transmission performance model is:

[0306] Perf k =f(T k , L k , P k , Q k )

[0307] Among them, T k , L k , P k , Q k are the throughput, delay, packet loss rate and connection quality of protocol k respectively;

[0308] f(·) is the performance model of the encapsulation protocol;

[0309] Use the best protocol:

[0310]

[0311] Use the protocol corresponding to the maximum performance value opt ;

[0312] The path switching strategy is to optimize the transparent transmission performance. The system decides whether to switch to another path based on the quality of the current network path. The system has m paths {P1, P2, ..., P mThe quality of each path is measured by a comprehensive performance indicator, the performance of each path Perf j Expressed as:

[0313] Perf j =f(L j , P j , Q j )

[0314] Among them, L j is the delay of path j, P j is the packet loss rate, Q j For connection quality;

[0315] The system adopts path P according to these indicators opt :

[0316]

[0317] Among them, the weight w P and w Q Used to balance the impact of different path performance indicators;

[0318] The adaptive algorithm dynamically adjusts system behavior based on transmission log analysis, encapsulation protocols, and path switching strategies. The core concept of the adaptive optimization algorithm is to continuously adjust system parameters based on a feedback mechanism to improve transparent transmission performance.

[0319] The optimization goal of the system is to maximize the transparent transmission performance Perf total ,Right now:

[0320] Peff total =α·Throughput-β·Latency-γ·Packet Loss

[0321] Among them, α, β, and γ are weight coefficients, indicating the relative importance of different performance indicators;

[0322] After each adjustment, feedback information is updated and adaptive adjustments are made through the following feedback mechanism:

[0323] Based on real logs, it improves the accuracy of optimization decisions, adapts to changes in network status, improves transmission performance, and has stronger disaster recovery and stability in multi-path environments. Similar to reinforcement learning, it reversely optimizes system behavior through actual performance, supports custom weights, policies, protocols and path access, and can be deployed in SD-WAN, IoT gateway, edge computing and other environments.

[0324] An efficient IP data transparent transmission system, including:

[0325] The data stream classification module is used to classify and identify network data streams at the sending end, extract characteristic parameters of the data streams, and classify them according to the stream characteristics;

[0326] The encapsulation strategy matching module is used to match the data flow characteristics with the preset protocol strategy library and encapsulate the data using the corresponding transparent transmission protocol type;

[0327] The encryption and authentication module is used to encrypt the encapsulated data payload and add integrity authentication information;

[0328] The dynamic path selection module monitors the performance indicators of network links in real time and dynamically selects a transparent transmission path based on the network status. When an abnormality is detected in the link, it automatically switches to an alternative path.

[0329] The decapsulation module is used by the receiving end to decapsulate the received data and restore it to the original IP data packet;

[0330] The policy optimization module is used to automatically optimize the protocol adoption strategy and path switching mechanism based on historical transmission logs, and use an adaptive algorithm to adjust the strategy according to the transmission quality.

[0331] Through data stream classification, the system can accurately identify different types of data streams and perform targeted processing on them; the encapsulation strategy matching module ensures that the system can select the optimal protocol according to different data stream characteristics, avoiding performance bottlenecks caused by protocol mismatch; the encryption and authentication module ensures that data is effectively encrypted and integrity protected during transmission, greatly enhancing the security of the system and is suitable for scenarios with high data security requirements; the dynamic path selection module can monitor the network status in real time and switch to the optimal path according to actual conditions, ensuring that the system can maintain good performance in the face of network fluctuations or link failures; the decapsulation module ensures that the receiving end can seamlessly restore the original data, avoiding the complex protocol parsing process and enhancing the system's transparency; the policy optimization module continuously optimizes the protocol and path selection strategy through historical data analysis and adaptive algorithms; the system can work effectively in a variety of network environments, including high-bandwidth, low-latency environments, and poor-quality network environments. By dynamically selecting paths and protocols, it can adapt to changes in the network environment and maintain stable performance.

[0332] This embodiment also provides an electronic device, including a memory, a processor, and a computer program stored in the memory and executable on the processor. When the processor executes the computer program, an efficient IP data transparent transmission method and system thereof as described above are implemented.

[0333] This embodiment also provides a computer-readable storage medium having a computer program stored thereon. When the program is executed by a processor, the method and system for efficient IP data transparent transmission as described above are implemented.

[0334] The following technical contents are not disclosed in the claims but have important application value:

[0335] Use machine learning algorithms to train the package selection model to achieve more accurate protocol matching;

[0336] Integrated DPI deep identification module to achieve cross-application layer traffic identification and transparent transmission priority scheduling;

[0337] Link anomaly prediction mechanism: predicts link quality degradation in advance and preheats backup channels;

[0338] Quantum key pre-sharing mechanism access interface: reserved for adaptation to the PQC communication framework;

[0339] Programmable network adapter interface: supports transparent transmission protocol and hardware offload in switching equipment through P4 programming.

[0340] Those skilled in the art will appreciate that all or part of the processes in the above-mentioned embodiments can be implemented by instructing the relevant hardware through a computer program. The computer program can be stored in a non-volatile computer-readable storage medium. When the computer program is executed, it can include the processes of the embodiments of the above-mentioned methods. Among them, any reference to memory, storage, database or other media used in the embodiments provided in this application can include non-volatile and / or volatile memory. Non-volatile memory can include read-only memory (ROM), programmable ROM (PROM), electrically programmable ROM (EPROM), electrically erasable programmable ROM (EEPROM) or flash memory. Volatile memory can include random access memory (RAM) or external cache memory. By way of illustration and not limitation, RAM is available in various forms, such as static RAM (SRAM), dynamic RAM (DRAM), synchronous DRAM (SDRAM), double data rate SDRAM (DDRSDRAM), enhanced SDRAM (ESDRAM), synchronous link (Synchlink) DRAM (SLDRAM), memory bus (Rambus) direct RAM (RDRAM), direct memory bus dynamic RAM (DRDRAM), and memory bus dynamic RAM (RDRAM).

[0341] Those skilled in the art will clearly understand that for the sake of convenience and brevity in description, only the division of the above-mentioned functional units and modules is used as an example. In actual applications, the above-mentioned functions can be distributed and completed by different functional units and modules as needed, that is, the internal structure of the system can be divided into different functional units or modules to complete all or part of the functions described above.

[0342] The above embodiments of the present invention are not intended to limit the scope of protection of the present invention, and the implementation methods of the present invention are not limited thereto. All other modifications, replacements or changes made to the above structures of the present invention based on the above contents of the present invention, in accordance with common technical knowledge and customary means in this field, without departing from the above basic technical ideas of the present invention, should fall within the scope of protection of the present invention.

Claims

1. An efficient IP data transparent transmission method, characterized in that: Includes: Classify and identify network data flows at the sending end, extract the flow type, QoS requirements, and packet size parameters of each data flow, and classify the data flows according to flow characteristics; Based on the characteristic parameters of the data flow, adopt and match transparent transmission UDP, QUIC, VxLAN and lightweight GRE protocol types; Before data encapsulation, a lightweight encryption engine is used to encrypt the data payload and append integrity authentication information. Based on the real-time network monitoring module, it dynamically adopts the transparent transmission path and quickly switches according to the changes in network status; At the receiving end, the data is decrypted and authenticated based on the encapsulation identifier and protocol type, and restored to the original IP data packet; Regularly analyze transmission logs to automatically optimize encapsulation protocols and path switching strategies, and continuously improve transparent transmission performance through adaptive algorithms.

2. The efficient IP data transparent transmission method according to claim 1, characterized in that: At the sending end, network data flows are classified and identified, and the flow type, QoS requirements, and packet size parameters of each data flow are extracted. The method for classifying data flows according to flow characteristics is as follows: A data stream contains N packets, and the characteristics of the stream are quantified by the following aspects: The flow type T is extracted based on the protocol identifier. For each packet P i , whose size is P i =|D i |, where |D i |For data packets Bytes, calculate the average packet size of the data stream Where N is the total number of packets in the flow, |P i |For data packets The number of bytes; Delay requirement D delay Estimated by measuring the time it takes to send and receive packets: D delay =max(T recv )-min(T send ) where T recv and T send The timestamps of receiving and sending data packets respectively; Packet loss rate L loss Indicates the packet loss rate, calculated as: Based on the above parameters, a classification function is defined, which classifies according to the characteristic parameters of each data stream, and establishes C k Class flow, the characteristics of each class flow are represented by a vector, and the classification is described by the following formula: in, is the characteristic vector of the data stream, which contains the characteristic parameters of the data stream; μ k，j is the mean of the jth feature of the kth class flow; When data flows are classified according to QoS requirements, a weighting function W is defined. QoS , based on the weight of each flow's latency and packet loss rate requirements: W QoS =w1·D delay +w2·L loss Among them, w1 and w2 are weight coefficients.

3. The efficient IP data transparent transmission method according to claim 2, characterized in that: Based on the characteristic parameters of the data stream, the method for adopting and matching transparent transmission of UDP, QUIC, VxLAN, and lightweight GRE protocol types is as follows: During the matching process, features are extracted from the data stream: Packet size P i : The number of bytes per packet; End-to-end delay D delay : Data packet transmission delay; The transmission mode of the data stream: whether it is connection-oriented or connectionless transmission; Protocol specific information: For UDP: Not connected to management, the port number is not equal to 443; For QUIC: It is an encrypted transport protocol and uses port 443 or other specified ports. For VxLAN: Check whether a specific VxLAN identifier exists. For lightweight GRE: it has a GRE identifier field and carries IP data packets; Based on these characteristics, a matching function f is designed to classify data streams through multiple conditions; UDP streams are characterized by being connectionless, low-latency, having a simple header structure, and being unencrypted. They are matched using the following formula: f UDP =match(P i ,D delay ,port) Among them, if the data packet size P i If it is smaller and does not require a connection, then UDP is the best choice. UDP has lower latency, D delay , and the delay fluctuation is small; If the port is not 443 and there is no encryption information, it is UDP; The QUIC protocol uses port 443 and has encryption features. The following formula is used for matching: f QUIC =match(P i ,D delay ,port,encryption) Among them, QUIC uses port 443; QUIC packets are slightly larger and carry encrypted data; If the data packet has an encryption flag, it is QUIC; VxLAN is a tunneling protocol used in virtualized environments. It uses a specific protocol identifier and is matched using the following formula: f VxLAN =match(Ethernet Type, VxLAN Identifier, P i ) Wherein, the Ethernet type field of VxLAN is 0x0800 or 0x86DD; VxLAN packets contain a specific identifier field, which is a 24-bit VNI; VxLAN packets are large and contain header information; The lightweight GRE protocol carries a GRE identifier and carries IP data packets. The following formula is used for matching: f GRE =match(GRE Header,P i ) Among them, the lightweight GRE data packet has a specific GRE identifier field, which is 0x88BE or 0x0800; Lightweight GRE packets are typically smaller and contain an additional GRE header; The above protocol matching formulas are combined into a unified matching function f match : in, X=[P i ,D delay ,port,Ethernt Type,GRE Header,VxLAN Identifier] is the characteristic vector of the data stream; The match function checks whether the characteristics of the data stream meet the characteristics of a certain protocol.

4. The efficient IP data transparent transmission method according to claim 3, characterized in that: Before data encapsulation, a lightweight encryption engine is used to encrypt the data payload and append integrity authentication information as follows: During data transmission, the data payload is encrypted and a symmetric encryption algorithm is used. The encryption calculation formula is: C=E(K,P) Where C is the ciphertext; E is an encryption operation, using a lightweight encryption engine K is the key, which is the shared key; P is the original data payload; HMAC is used. This method is based on a hash function and a shared key. The specific formula is: MAC = HMAC(K, C) Among them, HMAC is a message authentication code function, which uses the shared key K and the ciphertext C as input; K is the key; C is the encrypted ciphertext; The encrypted data is sent together with integrity authentication information. The authentication information is a message authentication code and a digital signature, which are attached to the encrypted data. The complete encapsulated data format is as follows: D enc =[C,MAC] Among them, D enc The final encapsulated data includes the encrypted ciphertext C and the message authentication code or other integrity authentication information; After receiving the encapsulated data, the receiver performs the following two steps: Integrity Verification: Verify(MAC, HMAC(K, C)) If the verification fails, it means that the data has been tampered with; Decryption operation: P=D 1 (K, C) (decryption operation) Among them, D 1 For the decryption operation, the key K is used to decrypt the ciphertext C and restore it to the plaintext P.

5. The efficient IP data transparent transmission method according to claim 4, characterized in that: Based on the real-time network monitoring module, the method of dynamically adopting the transparent transmission path and quickly switching according to changes in network status is as follows: The path selection strategy is based on the real-time status of the network, and multiple transparent transmission paths (P1, P2, ..., P n ); For each path P i , set up the following indicators; D i : Path P i Delays; B i : Path P i bandwidth; L i : Path P i Packet loss rate; By weighted evaluation of these network status indicators, we can get the path quality score W i : Among them, α, β, and γ are weighting coefficients used to adjust the impact of delay, bandwidth, and packet loss rate on the final path selection; Represents the inverse of delay, that is, the smaller the delay, the higher the path score; B i Represents bandwidth. The larger the bandwidth, the higher the path score. L i Represents the packet loss rate. The lower the packet loss rate, the higher the path score. Take the path P with the highest score best As the current transparent transmission path: As network status changes, the path selection will be dynamically adjusted. The network status indicator of each path will change over time, and the path switching decision will be based on a real-time updated quality score. When the network quality score of a path W i Below a certain threshold W threshold When , it immediately switches to another path with better quality. The switching condition is expressed as: Switch if W best <W threshold Among them, W best Score the quality of the currently selected path; W threshold is the preset minimum path quality score threshold; The frequency of path switching is controlled according to the frequency of network status changes to avoid unstable performance caused by frequent switching. A switching delay T is set. switch When the quality score of the path is lower than the threshold, the switch is performed after this time: T switch =f(W i ,D i ,B i ,L i ) Wherein, f is the mapping function between path quality evaluation and handover delay.

6. The efficient IP data transparent transmission method according to claim 5, characterized in that: At the receiving end, the data is decrypted and authenticated based on the encapsulation identifier and protocol type, and the method for restoring it to the original IP data packet is as follows: When the receiving end receives the data, it parses the data according to the encapsulation identifier and protocol type, which are stored in the header or metadata of the data packet; If the data is encrypted, the receiving end needs to decrypt it. The data is encrypted using a symmetric encryption algorithm. The decryption formula is: D payload =Dec K (Enc SPI (D encrypted )) Among them, D payload is the decrypted payload; Dec K Indicates the process of decrypting data using the key K; Enc SPI Encryption is performed using the key associated with the encapsulation identifier; D encrypted To encrypt data; If the protocol also includes authentication, the receiving end verifies the integrity of the data to ensure that the data has not been tampered with. Common authentication algorithms include HMAC. The authentication process is expressed as follows: Among them, K auth is the key used for authentication; D payload is the payload recovered from the encrypted data; For data D payload the process of conducting certification; HMAC received is the received authentication data; If the authentication succeeds, that is, the two are equal, the data has not been tampered with and processing continues; if they do not match, the data has been tampered with and needs to be discarded; The receiving end restores the decrypted and authenticated data to the original IP packet. The restoration process involves stripping off all encapsulation headers and extracting the original packet. Assuming the original IP packet is encapsulated in an encrypted or authenticated packet, the recovery process is: IP original =Remove Encapsulation Header(D payload ) Among them, IP original It is the original IP data packet after recovery; D payload The decrypted and authenticated payload.

7. The efficient IP data transparent transmission method according to claim 6, characterized in that: Regularly analyze transmission logs to automatically optimize encapsulation protocols and path switching strategies. This method continuously improves transparent transmission performance through adaptive algorithms. The system collects and analyzes transmission logs, which contain information such as throughput, latency, packet loss rate, connection quality, protocol type, and network path; The system has collected n log data, each of which contains T i 、L i 、P i and Q i ; A weighted average is used to represent the overall performance of these performance indicators: Among them, w T , w L , w P , w Q The weight of each indicator is set according to actual needs; Based on the analysis of transmission logs, the system decides which encapsulation protocol to use to optimize transmission performance. The encapsulation protocol is dynamically adjusted based on throughput, latency, and packet loss rate. Establishing a system selection protocol k The corresponding transmission performance model is: Perf k =f(T k ,L k ,P k ,Q k ) Among them, T k , L k , P k , Q k are the throughput, delay, packet loss rate and connection quality of protocol k respectively; f(·) is the performance model of the encapsulation protocol; Use the best protocol: Use the protocol corresponding to the maximum performance value opt ; The path switching strategy is to optimize the transparent transmission performance. The system decides whether to switch to another path based on the quality of the current network path. The system has m paths {P1, P2, ..., P m The quality of each path is measured by a comprehensive performance indicator, the performance of each path Perf j Expressed as: Perfect j =f(L j ,P j ,Q j ) Among them, L j is the delay of path j, P j is the packet loss rate, Q j For connection quality; The system adopts path P according to these indicators out : Among them, the weight w P and w Q Used to balance the impact of different path performance indicators; The adaptive algorithm dynamically adjusts system behavior based on transmission log analysis, encapsulation protocols, and path switching strategies. The core concept of the adaptive optimization algorithm is to continuously adjust system parameters based on a feedback mechanism to improve transparent transmission performance. The optimization goal of the system is to maximize the transparent transmission performance Perf total ,Right now: Perf total =α·Throughput-β·Lateny-γ·Packet Loss Among them, α, β, and γ are weight coefficients, indicating the relative importance of different performance indicators; After each adjustment, feedback information is updated and adaptive adjustments are made through the following feedback mechanism:

8. An efficient IP data transparent transmission system, characterized in that: Includes: The data stream classification module is used to classify and identify network data streams at the sending end, extract characteristic parameters of the data streams, and classify them according to the stream characteristics; The encapsulation strategy matching module is used to match the data flow characteristics with the preset protocol strategy library and encapsulate the data using the corresponding transparent transmission protocol type; The encryption and authentication module is used to encrypt the encapsulated data payload and add integrity authentication information; The dynamic path selection module monitors the performance indicators of network links in real time and dynamically selects a transparent transmission path based on the network status. When an abnormality is detected in the link, it automatically switches to an alternative path. The decapsulation module is used by the receiving end to decapsulate the received data and restore it to the original IP data packet; The policy optimization module is used to automatically optimize the protocol adoption strategy and path switching mechanism based on historical transmission logs, and use an adaptive algorithm to adjust the strategy according to the transmission quality.

9. An electronic device, characterized in that: The invention comprises a memory, a processor and a computer program stored in the memory and executable on the processor. When the processor executes the program, an efficient IP data transparent transmission method as claimed in any one of claims 1 to 7 is implemented.

10. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the program is executed by a processor, an efficient IP data transparent transmission method as described in any one of claims 1 to 7 is implemented.

Images