Network port testing device based on flow redirection

Abstract

The invention discloses a network port testing device based on flow redirection, relates to the technical field of computer testing, can realize full coverage of a single-receiving single-transmitting test on an Ethernet protocol, adopts interaction of an application layer and an Ethernet port without passing through a network protocol stack, opens protocol stack full-field configuration to a user in a command line mode, and improves the testing efficiency. And full coverage of the Ethernet data frame on the protocol is realized. The test network topology is extremely simplified, the network topology is extremely simplified by adding the flow redirection module to the link layer of the test device, a test device protocol stack is not introduced in a local area network communication test, and particularly, a plurality of routers, opposite-end equipment and the like are not introduced in a cross-network segment test, so that the test efficiency is greatly improved. And the result of the tested equipment can accurately reflect the network port communication capability of the tested equipment.

Description

Technical Field

[0001] This invention relates to the field of computer testing technology, and in particular to a network port testing device based on traffic redirection that can be fully domestically produced. Background Technology

[0002] Currently, in the development of computer equipment, the common practice is to configure the network interface IP address of the device under test and the network IP address of the directly connected test device to the same network segment, and then perform a ping test to verify the working status of the network interface. This testing method faces several problems.

[0003] 1. Poor High-Traffic Communication Performance: The tested device only underwent ping packet testing within the local area network. This type of test involves relatively low test loads and communication traffic, and high-traffic communication performance was not adequately verified. High traffic is often the reality of the network where computer devices operate; therefore, unpredictable problems frequently arise when devices face high traffic volumes.

[0004] 2. Insufficient cross-network segment communication capability of the device: Due to the lack of network knowledge of the R&D personnel and the limited testing resources, it was impossible to build a network test environment based on IP Layer 3 network layer. The device was only tested for Layer 2 communication within a local area network based on the link layer, which resulted in the device's uncontrollable performance when communicating across network segments in the actual network.

[0005] 3. Incomplete Testing of Device Application Layer Communication Capabilities: Because ping packets use the ICMP protocol, the test only covered the physical, link, and network layers of the network protocol stack, omitting the transport and application layers. However, in actual use, communication is primarily initiated by the application layer, making the device's application layer communication capabilities unpredictable.

[0006] 4. Lack of accuracy in testing: Even if testers set up a three-layer network test environment using a router, the network topology is highly complex due to the introduction of routers and peer test equipment. Once packet loss, latency, or other test failures occur, it is impossible to quickly and accurately determine the topology location of the packet loss, resulting in test results that cannot truly reflect the status of the device's network ports.

[0007] 5. Low localization rate of testing equipment: Existing network testing equipment, such as Smart Bit and Test Center, still mainly relies on imports, resulting in a low overall localization rate. Furthermore, using imported testing equipment for simple computer host devices leads to resource waste. Summary of the Invention

[0008] In view of the above problems, the present invention provides a network interface testing device based on traffic redirection to overcome or at least partially solve the above problems.

[0009] This invention provides the following solution: A network interface testing device based on traffic redirection, comprising: A hardware platform based on the RK3588 core board is configured with the open-source Euler operating system. The configuration module includes a first configuration submodule and a second configuration submodule; the first configuration submodule is embedded in the network link layer driver, and the second configuration submodule is set in the user space. The forwarding module includes a traffic redirection module and a sending module, both of which are embedded in the network link layer driver. The single-transmit module and the single-receive module are both located in the user space; The first configuration submodule is used to specify the forwarding port of the forwarding module and whether the traffic redirection module is working, according to the configuration information given by the second configuration submodule; the second configuration submodule is used to provide a configuration interface to the user in the form of a command line and to interact with the first configuration submodule, and is used to configure the working status of the device and the forwarding port of the forwarding module. The traffic redirection module is used to process the data frames received by the network port and forward them to the data sending module; the sending module is used to forward the data frames to a specified port according to the configuration. The single-transmit module is used to implement the device's individual transmit test function; the single-receive module is used to implement the device's individual receive test function.

[0010] Preferably: When the configuration module specifies that the traffic redirection module is working, the traffic redirection module performs the following steps: Step 11: Determine the type of the received data frame. If an IP data frame is received, proceed to step 12. If an ARP packet is received, proceed to step 13. Step 12: Step 121: Determine if the test list is empty. If it is not empty, proceed to step 122. If it is empty, proceed to step 123. Step 122: Poll the test list to determine if the destination IP address of the received data frame is in the test list. If it is, proceed to step 123; otherwise, end the process. Step 123: Exchange the destination IP address and source IP address of the IP data frame header at the network layer, and recalculate the IP frame header checksum and fill it into the corresponding field; Step 124: Determine whether the transport layer protocol is TCP / UDP. If yes, proceed to step 125; otherwise, proceed to step 126. Step 125: Exchange the destination port and source port of the transport layer and recalculate the transport layer checksum and fill it into the corresponding field; Step 126: Place the newly generated data frame into the tail of the data transmission queue and release the semaphore to notify the transmission module; Step 13: Step 131: Determine if the test list is empty. If it is not empty, proceed to step 112; otherwise, proceed to step 133. Step 132: Poll the test list to determine if the destination IP address of the ARP request frame is in the test list. If it is, proceed to step 133; otherwise, end the process. Step 133: Create an ARP response packet, setting the MAC address of the local receiving network interface as the MAC address corresponding to the destination IP; Step 136: Send the ARP response packet back to the peer sending device via the receiving network port.

[0011] Preferably, the sending module is used to perform the following steps: Step 21: Determine whether the signal sent by the traffic redirection module is empty. If it is not empty, proceed to step 22. Step 22: Check the forwarding queue status. If the forwarding queue is not empty, proceed to step 23; otherwise, end the process. Step 23: Read the forwarding network interface information specified by the configuration module. If it is specified to broadcast to 2 network interfaces, broadcast the data frame to 2 network interfaces. If it is specified to send to a certain network interface, send the data frame to the specified network interface. Step 24: Continue with step 22.

[0012] Preferably, the separate test sending function is presented to the user in the form of a command-line tool.

[0013] Preferably, the single-transmission module generates Ethernet data frames at the application layer and sends the data directly to the link layer, enabling data packets to cover the full protocol, full packet length, full data content, and full traffic size of custom Ethernet data frame generation.

[0014] Preferably, the separate receiving test function is presented to the user in the form of a command-line tool.

[0015] Preferably, the single receiving module directly receives data from the link layer, enabling data packets to cover the reception of custom Ethernet data frames based on the full protocol, full packet length, full data content, and full traffic size.

[0016] According to specific embodiments provided by the present invention, the present invention discloses the following technical effects: This application provides a network interface testing device based on traffic redirection, which can achieve full coverage of Ethernet protocol in single-receive and single-transmit testing. It adopts the interaction between the application layer and the Ethernet port without going through the network protocol stack, and opens up the full field configuration of the protocol stack to the user through the command line, thus achieving full coverage of the protocol in Ethernet data frames.

[0017] The test network topology is extremely simplified by adding a traffic redirection module to the link layer of the test device. In LAN communication testing, the test device protocol stack is not introduced. In particular, in cross-segment testing, multiple routers and peer devices are not introduced, which makes the results of the device under test extremely accurate in reflecting the network port communication capabilities of the device under test.

[0018] Of course, any product implementing this invention does not necessarily need to achieve all of the advantages described above at the same time. Attached Figure Description

[0019] To more clearly illustrate the technical solutions in the embodiments of the present invention or the prior art, the drawings used in the embodiments will be briefly described below. Obviously, the drawings described below are merely some embodiments of the present invention. For those skilled in the art, other drawings can be obtained based on these drawings without any creative effort.

[0020] Figure 1 This is a system block diagram of a network interface testing device based on traffic redirection provided in an embodiment of the present invention; Figure 2 This is a flowchart of the traffic redirection module provided in an embodiment of the present invention; Figure 3 This is a flowchart of the forwarding module provided in an embodiment of the present invention; Figure 4 These are typical application technology effect diagrams provided by embodiments of the present invention; Figure 5 This is a technical effect diagram showing that the IP address of the computer device and the IP address of the testing device are in the same network segment, as provided in the embodiments of the present invention. Figure 6 This is a technical effect diagram showing that the IP address of the computer device and the IP address of the testing device are in different network segments, as provided in the embodiments of the present invention. Detailed Implementation

[0021] The technical solutions of the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only a part of the embodiments of the present invention, and not all of them. All other embodiments obtained by those skilled in the art based on the embodiments of the present invention are within the scope of protection of the present invention.

[0022] See Figure 1 This invention provides a network interface testing device based on traffic redirection, such as... Figure 1 As shown, the device may include: A hardware platform based on the RK3588 core board is configured with the open-source Euler operating system. The configuration module includes a first configuration submodule and a second configuration submodule; the first configuration submodule is embedded in the network link layer driver, and the second configuration submodule is set in the user space. The forwarding module includes a traffic redirection module and a sending module, both of which are embedded in the network link layer driver. The single-transmit module and the single-receive module are both located in the user space; The first configuration submodule is used to specify the forwarding port of the forwarding module and whether the traffic redirection module is working, according to the configuration information given by the second configuration submodule; the second configuration submodule is used to provide a configuration interface to the user in the form of a command line and to interact with the first configuration submodule, and is used to configure the working status of the device and the forwarding port of the forwarding module. The traffic redirection module is used to process the data frames received by the network port and forward them to the data sending module; the sending module is used to forward the data frames to a specified port according to the configuration. The single-transmit module is used to implement the device's individual transmit test function; the single-receive module is used to implement the device's individual receive test function.

[0023] The network port testing device provided in this application embodiment is based on the domestically developed RK3588 platform, the open-source Euler operating system, and network traffic redirection technology. It can cover typical computer device network port testing scenarios. It provides direct support for research, testing, and verification of computer device network port communication and has promising application prospects.

[0024] The RK3588 is Rockchip's latest octa-core flagship chip, based on the ARM architecture. It integrates four Cortex-A76 cores and four Corex-A55 cores, along with a dedicated NEON coprocessor. Equipped with an embedded ARM Mal G610 3D GPU, it supports OpenGLES 1.1, 2.0, and 3.2, OpenCL 2.2, and Vulkan 1.2. Its built-in NPU supports mixed INT4 / INT8 / INT16 / FP16 operations, achieving a processing power of up to 6 TOPS. This configuration makes the RK3588 processor perform exceptionally well in both processing speed and graphics capabilities. Furthermore, it supports 8K video encoding and decoding, handling various video formats and providing users with a high-definition, smooth viewing experience. Overall, the RK3588 processor is at a relatively high performance level.

[0025] The openEuler operating system (also known as "Euler" or "open source Euler") is an operating system for digital infrastructure, supporting applications in servers, cloud computing, edge computing, and embedded systems. It supports diverse computing needs and is committed to providing a secure, stable, and easy-to-use operating system. By providing deterministic assurance capabilities for applications, it supports OT applications and the convergence of OT and ICT.

[0026] The configuration module provided in this application embodiment consists of two parts: a first configuration submodule and a second configuration submodule. The first configuration submodule is embedded in the network link layer driver and is used to specify the forwarding port of the forwarding module and whether the traffic redirection module is working. The second configuration submodule is located in the user space and provides a configuration interface to the user in the form of a command line, used to configure the working state of the device (single transmit, single receive, forward) and the forwarding port of the forwarding module.

[0027] This module uses traffic redirection technology to implement local area network (LAN) and cross-network segment send / receive testing functions. The forwarding module is divided into a traffic redirection module and a sending module. Embedded in the link layer driver, this module is the core of the invention, used to process IP data frames received from the network interface and forward them to the data sending module. It takes effect when the traffic redirection module is specified to operate by the configuration module. Its execution flow is as follows: Figure 2 As shown.

[0028] Step 11: Determine the type of the received data frame. If an IP data frame is received, proceed to step 12. If an ARP packet is received, proceed to step 13. Step 12: Step 121: Determine if the test list is empty. If it is not empty, proceed to step 122. If it is empty, proceed to step 123. Step 122: Poll the test list to determine if the destination IP address of the received data frame is in the test list. If it is, proceed to step 123; otherwise, end the process. Step 123: Exchange the destination IP address and source IP address of the IP data frame header at the network layer, and recalculate the IP frame header checksum and fill it into the corresponding field; Step 124: Determine whether the transport layer protocol is TCP / UDP. If yes, proceed to step 125; otherwise, proceed to step 126. Step 125: Exchange the destination port and source port of the transport layer and recalculate the transport layer checksum and fill it into the corresponding field; Step 126: Place the newly generated data frame into the tail of the data transmission queue and release the semaphore to notify the transmission module; Step 13: Step 131: Determine if the test list is empty. If it is not empty, proceed to step 112; otherwise, proceed to step 133. Step 132: Poll the test list to determine if the destination IP address of the ARP request frame is in the test list. If it is, proceed to step 133; otherwise, end the process. Step 133: Create an ARP response packet, setting the MAC address of the local receiving network interface as the MAC address corresponding to the destination IP; Step 136: Send the ARP response packet back to the peer sending device via the receiving network port.

[0029] The sending module is also embedded in the link layer driver, used to forward newly generated data frames from the traffic redirection module to the specified port according to the configuration. Its execution flow is as follows: Figure 3 As shown.

[0030] The sending module is used to perform the following steps: Step 21: Determine whether the signal sent by the traffic redirection module is empty. If it is not empty, proceed to step 22. Step 22: Check the forwarding queue status. If the forwarding queue is not empty, proceed to step 23; otherwise, end the process. Step 23: Read the forwarding network interface information specified by the configuration module. If it is specified to broadcast to 2 network interfaces, broadcast the data frame to 2 network interfaces. If it is specified to send to a certain network interface, send the data frame to the specified network interface. Step 24: Continue with step 22.

[0031] Furthermore, embodiments of this application can provide the standalone transmission test function to the user in the form of a command-line tool. The standalone transmission module generates Ethernet data frames at the application layer and directly sends the data to the link layer for transmission, enabling data packets to cover the full protocol, full packet length, full data content, and full traffic size of custom Ethernet data frame generation.

[0032] The single-transmission module is used to implement the device's individual transmission test function, presented to the user through a command-line tool. The test device adopts a method of generating Ethernet data frames at the application layer and directly sending the data to the link layer, enabling data packets to cover the full protocol, full packet length, full data content, and full traffic size of custom Ethernet data frame generation.

[0033] Furthermore, embodiments of this application can provide the individual reception test function, which is presented to the user in the form of a command-line tool. The individual reception module directly receives data from the link layer, enabling data packets to cover the reception of custom Ethernet data frames based on the full protocol, full packet length, full data content, and full traffic size.

[0034] The single-receive module is used to implement the device's individual receive test function, presented to the user via a command-line tool. The test device directly receives data from the link layer, enabling the reception of custom Ethernet data frames covering the full protocol, packet length, data content, and bandwidth size based on Ethernet.

[0035] like Figure 4 The diagram illustrates a typical application of the device provided in this application, used to test the cross-network segment communication function of a computer device. The test device is configured in forwarding mode with the forwarding port as the source port, and the gateway address of the computer under test is configured as the IP address of the test device's directly connected network port. The computer under test sends cross-network segment destination IP data packets to the test device. After the test device redirects the traffic at the link layer to the cross-network segment transmission data frame, it acts as the communication destination device and immediately executes the workflow of the traffic redirection module and the forwarding module, sending a response data frame to the computer under test to test the computer device's cross-network segment communication capability. At this time, the data traffic size, packet length, transport layer protocol, and application layer protocol of the computer under test can all be specified as needed, and the test device incurs minimal overhead, with the data frame traversing the shortest path (link layer data processing and return). Therefore, this test device covers high-traffic, cross-network segment, and multi-protocol test cases for the device under test and significantly improves the accuracy of the technical status of the network port under test.

[0036] like Figure 5As shown, the IP address of the computer device and the IP address of the test device are in the same network segment, which can cover single transmission, single reception and transmission and reception tests within the local area network of the computer device. At this time, the data traffic size, packet length, transport layer protocol and application layer protocol of the computer under test can be specified as needed.

[0037] like Figure 6 As shown, the computer device IP address and the test device IP address are in different network segments. The gateway address of the computer device is specified as the IP address of the test device. This can cover single transmission, single reception and transmission and reception tests of the computer device across network segments. At this time, the data traffic size, packet length, transport layer protocol and application layer protocol of the computer under test can be specified as needed.

[0038] In summary, the network interface testing device based on traffic redirection provided in this application provides full coverage of the Ethernet protocol for single-receive and single-transmit testing. It adopts the interaction between the application layer and the Ethernet interface without going through the network protocol stack, and opens up the full field configuration of the protocol stack to the user through the command line, thus realizing full coverage of the Ethernet data frame protocol.

[0039] The test network topology is extremely simplified by adding a traffic redirection module to the link layer of the test device. In LAN communication testing, the test device protocol stack is not introduced. In particular, in cross-segment testing, multiple routers and peer devices are not introduced, which makes the results of the device under test extremely accurate in reflecting the network port communication capabilities of the device under test.

[0040] Full traffic stress testing coverage allows users to precisely specify traffic pressure according to their needs, whether it's sending, receiving, or forwarding.

[0041] It is domestically produced, using the domestically produced RK3588 chip and the domestically produced open-source Euler operating system, and can be integrated and used in special fields with extremely high requirements for domestic production.

[0042] It should be noted that, in this document, relational terms such as "first" and "second" are used only to distinguish one entity or operation from another, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Furthermore, the terms "comprising," "including," or any other variations thereof are intended to cover non-exclusive inclusion, such that a process, method, article, or apparatus that comprises a list of elements includes not only those elements but also other elements not expressly listed, or elements inherent to such a process, method, article, or apparatus. Without further limitations, an element defined by the phrase "comprising one..." does not exclude the presence of other identical elements in the process, method, article, or apparatus that includes said element.

[0043] As can be seen from the above description of the embodiments, those skilled in the art can clearly understand that this application can be implemented by means of software plus necessary general-purpose hardware platforms. Based on this understanding, the technical solution of this application, in essence, or the part that contributes to the prior art, can be embodied in the form of a software product. This computer software product can be stored in a storage medium, such as ROM / RAM, magnetic disk, optical disk, etc., and includes several instructions to cause a computer device (which may be a personal computer, server, or network device, etc.) to execute the methods described in various embodiments or some parts of the embodiments of this application.

[0044] The various embodiments in this specification are described in a progressive manner. Similar or identical parts between embodiments can be referred to mutually. Each embodiment focuses on describing the differences from other embodiments. In particular, for system or system embodiments, since they are basically similar to method embodiments, the description is relatively simple, and relevant parts can be referred to the descriptions in the method embodiments. The systems and system embodiments described above are merely illustrative. The units described as separate components may or may not be physically separate. The components shown as units may or may not be physical units; that is, they may be located in one place or distributed across multiple network units. Some or all of the modules can be selected to achieve the purpose of this embodiment according to actual needs. Those skilled in the art can understand and implement this without creative effort.

[0045] The above description is merely a preferred embodiment of the present invention and is not intended to limit the scope of protection of the present invention. Any modifications, equivalent substitutions, improvements, etc., made within the spirit and principles of the present invention are included within the scope of protection of the present invention.

Claims

1. A network interface testing device based on traffic redirection, characterized in that, include: A hardware platform based on the RK3588 core board is configured with the open-source Euler operating system. The configuration module includes a first configuration submodule and a second configuration submodule; the first configuration submodule is embedded in the network link layer driver, and the second configuration submodule is set in the user space. The forwarding module includes a traffic redirection module and a sending module, both of which are embedded in the network link layer driver. The single-transmit module and the single-receive module are both located in the user space; The first configuration submodule is used to specify the forwarding port of the forwarding module and whether the traffic redirection module is working, according to the configuration information given by the second configuration submodule; the second configuration submodule is used to provide a configuration interface to the user in the form of a command line and to interact with the first configuration submodule, and is used to configure the working status of the device and the forwarding port of the forwarding module. The traffic redirection module is used to process the data frames received by the network port and forward them to the data sending module. The sending module is used to forward the data frame to a specified port according to the configuration. The single-transmit module is used to implement the device's individual transmit test function; the single-receive module is used to implement the device's individual receive test function.

2. The network interface testing device based on traffic redirection according to claim 1, characterized in that, When the configuration module specifies that the traffic redirection module is working, the traffic redirection module performs the following steps: Step 11: Determine the type of the received data frame. If an IP data frame is received, proceed to step 12. If an ARP packet is received, proceed to step 13. Step 12: Step 121: Determine if the test list is empty. If it is not empty, proceed to step 122. If it is empty, proceed to step 123. Step 122: Poll the test list to determine if the destination IP address of the received data frame is in the test list. If it is, proceed to step 123; otherwise, end the process. Step 123: Exchange the destination IP address and source IP address of the IP data frame header at the network layer, and recalculate the IP frame header checksum and fill it into the corresponding field; Step 124: Determine whether the transport layer protocol is TCP / UDP. If yes, proceed to step 125; otherwise, proceed to step 126. Step 125: Exchange the destination port and source port of the transport layer and recalculate the transport layer checksum and fill it into the corresponding field; Step 126: Place the newly generated data frame into the tail of the data transmission queue and release the semaphore to notify the transmission module; Step 13: Step 131: Determine if the test list is empty. If it is not empty, proceed to step 112; otherwise, proceed to step 133. Step 132: Poll the test list to determine if the destination IP address of the ARP request frame is in the test list. If it is, proceed to step 133; otherwise, end the process. Step 133: Create an ARP response packet, setting the MAC address of the local receiving network interface as the MAC address corresponding to the destination IP; Step 136: Send the ARP response packet back to the peer sending device via the receiving network port.

3. The network interface testing device based on traffic redirection according to claim 1, characterized in that, The sending module is used to perform the following steps: Step 21: Determine whether the signal sent by the traffic redirection module is empty. If it is not empty, proceed to step 22. Step 22: Check the forwarding queue status. If the forwarding queue is not empty, proceed to step 23; otherwise, end the process. Step 23: Read the forwarding network interface information specified by the configuration module. If it is specified to broadcast to 2 network interfaces, broadcast the data frame to 2 network interfaces. If it is specified to send to a certain network interface, send the data frame to the specified network interface. Step 24: Continue with step 22.

4. The network interface testing device based on traffic redirection according to claim 1, characterized in that, The separate test sending function is presented to the user in the form of a command-line tool.

5. The network interface testing device based on traffic redirection according to claim 4, characterized in that, The single-transmission module generates Ethernet data frames at the application layer and sends the data directly to the link layer, enabling data packets to cover the full protocol, full packet length, full data content, and full traffic size of custom Ethernet data frame generation.

6. The network interface testing device based on traffic redirection according to claim 1, characterized in that, The separate reception test function is presented to the user in the form of a command-line tool.

7. The network interface testing device based on traffic redirection according to claim 6, characterized in that, The single-receive module directly receives data from the link layer, enabling data packets to cover the reception of custom Ethernet data frames based on the full protocol, full packet length, full data content, and full traffic size.

Images