Data communication equipment network access test system and method based on full stack simulation

The data communication equipment network access testing system, which integrates user interaction, control center and physical execution unit through full-stack simulation, solves the problems of low testing efficiency, high labor cost and high configuration error rate in the existing technology, and realizes end-to-end automated testing and efficient equipment network access certification.

CN121940328APending Publication Date: 2026-04-28POTIN(BEIJING)TECH CO LTD
View PDF 8 Cites 0 Cited by

Patent Information

Authority / Receiving Office
CN · China
Patent Type
Applications(China)
Current Assignee / Owner
POTIN(BEIJING)TECH CO LTD
Filing Date
2026-03-30
Publication Date
2026-04-28

AI Technical Summary

Technical Problem

Existing technologies for testing data communication equipment suffer from low efficiency, high labor costs, and a high risk of misjudgment. They lack a unified automated testing platform, making it difficult to meet the testing requirements of complex network protocols. They also suffer from high configuration error rates, the inability to achieve automatic loading of configuration templates, and a lack of end-to-end automated verification methods. Furthermore, data fragmentation leads to time-consuming and error-prone data processing.

Method used

A network access testing system for data communication equipment based on full-stack simulation is adopted. Through the integration of user interaction unit, control center unit and physical execution unit, it realizes dual-channel connection for out-of-band management and in-band monitoring, supports multi-protocol testing, automatically generates configuration instructions and reports, simulates real network faults, and conducts system security testing.

Benefits of technology

It achieves end-to-end unmanned operation from test case orchestration to result analysis, improving testing efficiency and accuracy, reducing labor costs, supporting automated testing in multi-protocol scenarios, and improving the efficiency and reliability of device network access certification and protocol compliance verification.

✦ Generated by Eureka AI based on patent content.

Smart Images

  • Figure CN121940328A_ABST
    Figure CN121940328A_ABST
Patent Text Reader

Abstract

The invention relates to the technical field of data communication equipment automatic testing, in particular to a data communication equipment network access testing system and method based on full stack simulation. The system comprises a user interaction unit which comprises a control terminal used for issuing a test demand; the control center unit comprises a configuration management module and a protocol test simulation module; wherein the protocol test simulation module is used for establishing session connection with tested equipment; the physical execution unit comprises a tested device; the tested equipment is connected with the configuration management module through two channels including out-of-band management and in-band monitoring; and the tested equipment establishes a communication relationship with the protocol test simulation module. According to the invention, end-to-end unmanned operation from test case arrangement, equipment configuration, flow injection to result analysis is realized, and the method is suitable for network access authentication and protocol compliance verification of data communication products such as switches and routers.
Need to check novelty before this filing date? Find Prior Art

Description

Technical Field

[0001] This specification relates to the field of automated testing technology for data communication equipment, and in particular to a network access testing system and method for data communication equipment based on full-stack simulation. Background Technology

[0002] Existing technologies for testing data communication product protocols require manual input of configuration commands, manual switching of testing tools, and manual judgment of test results, which are technically flawed due to low efficiency (long testing cycle), high labor costs, and high risk of misjudgment.

[0003] There is a lack of a unified automated testing platform for complex network protocols such as BGP / OSPF. Different protocols require separate test environments, resulting in fragmented testing tools, time-consuming environment setup, and low test case reusability. Moreover, existing technologies often use traditional tools (such as IXIA) that only support single-protocol testing, requiring multiple deployments for multi-protocol scenarios, which is inefficient.

[0004] Traditional testing requires manual input of switch configuration commands one by one, making it impossible to automatically load configuration templates. This leads to technical bottlenecks, especially in complex topology scenarios, such as high configuration error rates and difficulty in tracing configuration states before and after configuration. Furthermore, existing solutions lack the ability to automatically analyze key indicators such as protocol state machine transitions and dynamic changes in routing tables, making it difficult to accurately capture abnormal scenarios and quickly locate the root cause of faults.

[0005] Existing testing methods lack end-to-end automated verification means from underlying configuration to protocol interaction, and from data forwarding to performance monitoring, making it difficult to meet the testing requirements of new network architectures such as SDN / NFV.

[0006] In addition, existing technologies also employ multiple independent tools to complete protocol testing separately (such as Spirent tester for functional performance stress testing, and Agilent Wireshark for packet capture analysis of protocol compliance), with scripts manually written to integrate the test results. The output formats of the various tools are incompatible (such as CSV, PCAP, PDF), requiring manual processing, which is time-consuming and error-prone (error rate ≥15%), resulting in fragmented data. Summary of the Invention

[0007] To address the problems in the prior art, this specification provides a network access testing system and method for data communication equipment based on full-stack simulation. The system includes: a user interaction unit, including a control terminal for issuing test requirements; a control hub unit, including a configuration management module and a protocol test simulation module; wherein the protocol test simulation module is used to establish a session connection with the device under test; a physical execution unit, including the device under test; the device under test and the configuration management module are connected via a dual-channel connection including out-of-band management and in-band monitoring; the device under test and the protocol test simulation module establish a communication relationship.

[0008] According to one aspect of an embodiment of this specification, the dual-channel connection includes an out-of-band management configuration channel and an in-band monitoring channel. The out-of-band management configuration channel is used to send configuration codes to the device under test (DUT) to complete the configuration of the DUT. The in-band monitoring channel is used to collect the status of the DUT.

[0009] This specification provides an embodiment of a network access testing method for data communication devices based on full-stack simulation, applied to a user interaction unit, comprising: sending a test request, the test request including information about the device under test; sending the test request to the device under test through a configuration management module; wherein the configuration management module generates a device configuration instruction based on a preset template and sends it to the device under test; receiving a message from the test device of the user interaction unit, and generating a test report when the message meets preset conditions.

[0010] This specification provides an embodiment of a data communication device network access testing method based on full-stack simulation, applied to a configuration management module, comprising: obtaining device configuration information from the database of the control center unit; and generating device configuration instructions based on the device configuration information and the test requirements.

[0011] According to one aspect of the embodiments of this specification, the method is further used in a protocol test simulation module in a control center unit, including: receiving a topology description file issued by the control center unit, parsing and generating a virtual network configuration; and establishing a session connection with the device under test based on the virtual network configuration.

[0012] This specification provides an embodiment of a network access testing method for data communication equipment based on full-stack simulation. The method is applied to the device under test and includes: receiving configuration code sent by a configuration management module to complete the configuration of the device under test; receiving messages sent by a tester of a user interaction unit and returning data to the tester.

[0013] This specification provides a network access testing device for data communication equipment based on full-stack simulation. The device includes: a first sending unit for sending test requirements, which include the IP address and type of the device under test; a second sending unit for sending the test requirements to the device under test through a configuration management module; wherein the configuration management module generates device configuration instructions based on a preset template and sends them to the device under test; and a report generation unit for receiving messages from the test device via a user interaction unit, and generating a test report when the messages meet preset conditions.

[0014] This specification also provides a network access testing device for data communication equipment based on full-stack simulation. The device includes: a receiving unit for receiving configuration code sent by a configuration management module to complete the configuration of the device under test; and a returning unit for receiving messages sent by a tester from a user interaction unit and returning data to the tester.

[0015] This specification also provides a computer device, which includes a memory, a processor, and a computer program stored in the memory and executable on the processor. When the processor executes the computer program, it implements the network access test method for data communication equipment based on full-stack simulation.

[0016] This specification also provides a computer-readable storage medium storing a computer program that, when executed by a processor, implements the network access testing method for data communication equipment based on full-stack simulation.

[0017] This application enables end-to-end unmanned operation from test case orchestration, device configuration, traffic injection to result analysis, and is applicable to network access authentication and protocol compliance verification of data communication products such as switches and routers. Attached Figure Description

[0018] To more clearly illustrate the technical solutions in the embodiments or prior art of this specification, the drawings used in the description of the embodiments or prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments of this specification. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort.

[0019] Figure 1 The figure shown is a schematic diagram of the implementation system of an oil and gas exploration icon generation method according to an embodiment of this specification; Figure 2 The diagram shown is a schematic diagram of a network access test system for a data communication device based on full-stack simulation, according to an embodiment of this specification. Figure 3The diagram shown is a flowchart of a network access test method for data communication equipment based on full-stack simulation, according to an embodiment of this specification. Figure 4 The diagram shown is a flowchart of a method for generating device configuration instructions using a configuration management module, according to an embodiment of this specification. Figure 5 The diagram shown is a flowchart illustrating a method for establishing a connection between a protocol test simulation module and the device under test, according to an embodiment of this specification. Figure 6 This is a flowchart illustrating a network access testing method for data communication equipment applied to the device under test, as described in this specification. Figure 7 The diagram shown is a schematic representation of a network access testing device for a data communication device based on full-stack simulation, according to an embodiment of this specification. Figure 8 The diagram shown is a schematic representation of another data communication equipment network access test device based on full-stack simulation, as described in this specification. Figure 9 The diagram shown is a schematic representation of a network access testing device for a data communication device based on full-stack simulation, according to an embodiment of this specification. Figure 10 The diagram shown is a structural schematic of a computer device according to an embodiment of this specification.

[0020] Explanation of symbols in the attached drawings: 101. Terminal; 102. Server; 100. User Interaction Unit; 200. Control Central Unit; 210. Configuration Management Module; 220. Protocol test simulation module; 230. Database and Analysis Module; 300. Physical Execution Unit; 310. The device under test; 701, First Transmitting Unit; 702. Second transmitting unit; 703. Report Generation Unit; 801. Receiving Unit; 802. Return to Unit; 901. Acquisition Unit; 902. Instruction Generation Unit; 1002. Computer equipment; 1004, Processor; 1006. Memory; 1008. Drive mechanism; 1010. Input / Output Module; 1012. Input devices; 1014. Output devices; 1016. Presentation device; 1018. Graphical User Interface; 1020. Network interface; 1022. Communication link; 1024. Communication bus. Detailed Implementation

[0021] To enable those skilled in the art to better understand the technical solutions in this specification, the technical solutions in the embodiments of this specification will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of this specification, and not all embodiments. Based on the embodiments in this specification, all other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of this specification.

[0022] It should be noted that the terms "first," "second," etc., in the specification, claims, and accompanying drawings are used to distinguish similar objects and are not necessarily used to describe a specific order or sequence. It should be understood that such data can be interchanged where appropriate so that the embodiments described herein can be implemented in orders other than those illustrated or described herein. Furthermore, the terms "comprising" and "having," and any variations thereof, are intended to cover a non-exclusive inclusion; for example, a process, method, apparatus, product, or device that comprises a series of steps or units is not necessarily limited to those steps or units explicitly listed, but may include other steps or units not explicitly listed or inherent to such processes, methods, products, or devices.

[0023] This specification provides the operational steps of the methods described in the embodiments or flowcharts, but based on conventional or non-inventive labor, more or fewer operational steps may be included. The order of steps listed in the embodiments is merely one possible execution order among many and does not represent the only possible execution order. In actual system or device products, the methods shown in the embodiments or drawings can be executed sequentially or in parallel.

[0024] It should be noted that the network access testing system and method for data communication equipment based on full-stack simulation described in this specification can be used in the field of automated testing technology for data communication equipment. This specification does not limit the application field of the network access testing system and method for data communication equipment based on full-stack simulation.

[0025] Figure 1 The diagram shown is a schematic of a network access testing implementation system for data communication equipment based on full-stack simulation according to an embodiment of the present invention.

[0026] The implementation system may include a terminal 101 and a server 102. The terminal 101 and server 102 communicate via a network, which may include a Local Area Network (LAN), a Wide Area Network (WAN), the Internet, or a combination thereof, and is connected to a website, user equipment (e.g., computing devices), and a backend system. A user can send test requests to the server 102 through the terminal 101. After receiving the user's input test request, the server 102 sends the test request to the control center unit. The test request includes information about the device under test. The server 102 then sends the test request to the device under test through a configuration management module. The configuration management module generates device configuration instructions based on a preset template and sends them to the device under test. The system also receives messages from the test device via the user interaction unit. When the messages meet preset conditions, a test report is generated and sent to the terminal 101.

[0027] In the embodiments of this specification, the server 102 may be an independent physical server, a server cluster or distributed system composed of multiple physical servers, or a cloud server that provides basic cloud computing services such as cloud services, cloud databases, cloud computing, cloud functions, cloud storage, network services, cloud communication, middleware services, domain name services, security services, content delivery networks (CDN), and big data and artificial intelligence platforms.

[0028] In an optional embodiment, terminal 101 may be an electronic device, including but not limited to self-service terminal equipment, desktop computers, tablet computers, laptops, smart wearable devices, etc. Optionally, the operating system running on the electronic device may include, but is not limited to, Android, iOS, Linux, Windows, etc. Of course, terminal 101 is not limited to the aforementioned physical electronic devices; it may also be software running on the aforementioned electronic devices.

[0029] In addition, it should be noted that, Figure 1 The example shown is merely one application environment provided by this disclosure. In practical applications, it may include multiple terminals 101, and this specification does not impose any restrictions.

[0030] Figure 2The diagram shown is a schematic representation of a network access test system for data communication equipment based on full-stack simulation, according to an embodiment of this specification. The network access test system includes: a user interaction unit 100, a control center unit 200, and a physical execution unit 300. The user interaction unit 100 may be located at the user interaction layer, the control center unit 200 may be located at the control center layer, and the physical execution unit 300 may be located at the physical execution layer. The physical execution layer includes: the device under test (DUT).

[0031] The user interaction unit 100 further includes a control terminal (Robot Framework), used to issue test requirements. The user interaction unit 100 also includes a tester, which deploys an integration testing tool supporting multiple protocols, such as Robot Framework. The control center unit 200 further includes a configuration management module 210 and a protocol test simulation module 220. The protocol test simulation module is used to establish a session connection with the device under test (DUT). In some embodiments of this specification, the control center unit 200 further includes a database and analysis module 230. The physical execution unit 300 includes the DUT 310, which is connected to the configuration management module 210 via a dual-channel connection including out-of-band management and in-band monitoring. The DUT 310 establishes a communication relationship with the protocol test simulation module 220.

[0032] In some embodiments of this specification, the device under test is a data communication device to be verified for network access compliance, including but not limited to: routers, switches, firewalls, base station transmission equipment, optical communication equipment, and other network devices that support protocols such as BGP, OSPF, and TCP / IP. By receiving automated configuration instructions from the configuration management module and simulation test messages from the tester, the device's functionality, performance, and protocol compatibility are fully simulated and tested.

[0033] In some embodiments of this specification, an x86 server equipped with multiple network interface cards (NICs) runs an Ubuntu system and an open-source softswitch platform. The x86 server has at least four physical network ports. Three of these ports are used to connect to the device under test, and one port is used to connect to the management network. Virtualized network interfaces are provided to construct a test topology (VLAN / VXLAN); actual protocol processing and data forwarding are performed, and operation logs and routing table snapshots are generated.

[0034] The control terminal in the user interaction unit 100 runs in a Python virtual environment on a Linux host. The control terminal is primarily used for test lifecycle management and execution control. The test lifecycle management includes: creating, scheduling, and terminating test tasks; providing a graphical test case editing interface; organizing test suites according to the YD / T standard; and managing test cases. Execution control includes: parallel execution of tests on multiple devices under test; real-time display of test progress; configuration distribution status and protocol interaction logs; result collection; generation of the output.xml log file; and recording of the management interface status. In this specification, the control terminal ultimately aggregates multi-source data to generate an auditable report. It also has the function of receiving alarms from the database and analysis module 230 of the control center unit, triggering manual intervention or automatic repair.

[0035] The protocol testing and simulation module 220 of the control center unit 200 is based on the Linux kernel's DPDK acceleration framework and uses the ExaBGP library to simulate the BGP protocol state machine, dynamically generating route update messages and supporting OSPF, RIP, and other protocol testing plugins. The protocol testing and simulation module 220 is also used for real-time comparison of the protocol state transitions of the device under test (DUT). It is deployed using Docker containers, with each protocol instance running independently.

[0036] The configuration management module 210 of the control hub unit 200 is an independent microservice deployed on a Linux host. It receives instructions via a message queue (RabbitMQ), integrates with the Robot Framework, and configures device protocol parameters such as BGP and OSPF. The configuration management module 210 is used to receive instructions from the protocol test simulation module, call Ansible scripts to perform configuration operations in batches, and provide feedback on the execution status.

[0037] In some embodiments of this specification, the dual-channel connection between the device under test (DUT) and the configuration management module 210 includes an out-of-band management and configuration channel and an in-band monitoring channel. The out-of-band management and configuration channel is used to send configuration codes to the DUT to complete the configuration of the DUT; the in-band monitoring channel is used to collect the status of the DUT.

[0038] This application conducts systematic security testing from three dimensions: protocol message format, state machine, and resource management. It simulates cross-protocol fault propagation in a real network, tests the end-to-end recovery capability of the DUT, and enables in-depth testing and optimization for complex protocols such as BGP.

[0039] This application presents a fully integrated test platform based on a general-purpose server. It integrates test function modules such as control center, protocol simulation, configuration management, and data analysis on a single standard x86 server. It achieves logical isolation and data interaction with multiple network cards through the internal Linux network, which overturns the traditional decentralized architecture that requires dedicated hardware testers, independent consoles, and independent data acquisition servers, and realizes an All-in-One tester form.

[0040] Figure 3 The diagram shown is a flowchart of a network access testing method for a data communication device based on full-stack simulation, as described in this specification. This method is applied to a user interaction unit and specifically includes the following steps: Step 301: Send test requirements, which include the configuration information of the device under test.

[0041] In this manual, test requirements are initiated by the user and transmitted to the user interaction unit. The user interaction unit then distributes the test requirements to the control center unit via the test protocol. The test requirements include, but are not limited to, the configuration information of the device under test (DUT), such as the DUT's IP address, DUT type, DUT command-line configuration, test protocol, and test scenario parameters.

[0042] For example, the configuration information of the device under test (DUT) includes: DUT IP address: 192.168.0.203, device type: Huawei. This DUT information is then sent to the control center unit.

[0043] Step 302: The test requirements are sent to the device under test through the configuration management module; wherein, the configuration management module generates device configuration instructions based on the test requirements using a preset template and then sends them to the device under test.

[0044] The control terminal sends test requirements containing information about the device under test (DUT) to the configuration management module. The configuration management module template can modify the content in the DUT information and generate configuration instructions to send to the DUT.

[0045] This application binds the configuration management module to the test lifecycle, enabling automated configuration version management at the test case level. Configuration is automatically backed up before each test case execution and automatically rolled back upon failure. This ensures the independence and repeatability of tests and allows for rapid recovery from errors, forming the cornerstone for supporting large-scale, automated, and destructive testing (such as attack simulation), and enabling test-driven dynamic configuration and rollback.

[0046] Step 303: Receive the message fed back by the test device of the user interaction unit. When the message meets the preset conditions, generate a test report.

[0047] Based on step 302, after the device under test (DUT) generates data according to the device configuration command, the network probe collects the data and feeds it back to the test device in the user interaction unit, i.e., the tester. The tester receives the messages fed back by the DUT and performs parsing, verification, and statistical analysis on the received messages. In this step, the preset conditions include, but are not limited to, the message format, latency, packet loss rate, throughput, and protocol interaction process, each corresponding to a preset test pass condition. When the message format, latency, packet loss rate, throughput, and protocol interaction process each meet the preset conditions, the message fed back by the test device contains a PASS result, confirming that the DUT has passed the test.

[0048] Further, based on test data, configuration information, and test results, the system automatically generates test results and populates the corresponding fields of the test results into the report generation template to generate a report in a specific format. Digital signatures and timestamps can be attached to the report.

[0049] The report generation template has a built-in industry-standard network access report template and can dynamically fill in the raw test data through the data conversion engine to generate the final deliverable document, achieving the ultimate efficiency of test as report.

[0050] Figure 4 The diagram shown is a flowchart of a method for generating device configuration instructions using a configuration management module according to an embodiment of this specification, which specifically includes the following steps: Step 401: Obtain the configuration information of the device under test from the database of the control center unit.

[0051] In this step, the configuration information of the device under test (DUT) has been predetermined in the test requirements. After the test requirements are sent in step 301, the DUT configuration information is stored in the database and analysis module of the control center unit. Therefore, this step can retrieve the DUT configuration information from the database.

[0052] Step 402: Generate device configuration instructions based on the device configuration information and the test requirements.

[0053] In this manual, each test for the device under test (DUT) requires execution by the configuration management module. The configuration management module generates structured executable code, i.e., device configuration instructions, based on a preset device configuration template. These instructions include protocol configuration parameters, interface operating modes, routing policy rules, security authentication parameters, and simulation service flow adaptation parameters, and are sent directly to the DUT via Ansible.

[0054] When the testing requirements involve BGP protocol function verification, the configuration code includes the corresponding BGP policy configuration file.

[0055] The BGP policy configuration file specifically includes: BGP neighbor IP addresses, AS numbers, route filtering rules (prefix list, AS path filtering), and route optimization policies, ensuring that the device under test loads the BGP protocol operation logic according to the test requirements.

[0056] This manual provides code examples for the following device configuration commands: bgp 1 router-id 10.1.1.1 private-4-byte-as enable peer 192.168.1.10 as-number 1 ! Internal peer (port 1) peer 192.168.2.10 as-number 2 ! External peer (port 2) Figure 5 The diagram shown is a flowchart illustrating a method for establishing a connection between a protocol test simulation module and a device under test, according to an embodiment of this specification. The method includes the following steps: Step 501: Receive the topology description file issued by the control center unit and parse it to generate a virtual network configuration.

[0057] In this step, the test protocol simulation module receives the topology description file from the control center unit and parses it to generate a virtual network configuration. It then starts a Docker container cluster, where each Docker container corresponds to a protocol simulation node and is isolated through a Linux network namespace. A virtual network interface is assigned to each container, with one end connected to the container's interior and the other end connected to the OVS virtual switch. The OVS virtual switch establishes a physical connection with the DUT through the physical network interface cards (ETH1-ETH3) bound to the DPDK. This forms a logical topology consisting of the container cluster, the OVS virtual switch and DPDK, the physical network interface cards, and the DUT's service interfaces.

[0058] Step 502: Establish a session connection with the device under test based on the virtual network configuration.

[0059] In this step, the protocol testing simulation module establishes a Border Gateway Protocol (BGP) session. BGP is a structured configuration file used to configure and control BGP behavior, guiding data communication devices (such as routers, switches, and firewalls) on how to receive, forward, prioritize, publish, and filter routes within a BGP session. Specifically, the ExaBGP instance within the container starts, loads a predefined BGP policy configuration file, and initiates a TCP connection to the BGP peer address of the device under test (DUT). After completing a TCP three-way handshake with the DUT, the protocol testing simulation module sends a BGP OPEN message carrying the pre-configured AS number, Hold Time, and BGP Identifier; and receives the OPEN message returned by the DUT to verify the parameter validity.

[0060] The dynamic interaction process of the intelligent routing policy, as described in the instruction manual, is as follows: The simulation module announces a specific prefix (such as 192.168.1.0 / 24) to the DUT via a BGP UPDATE message; it starts a high-precision timer to record the transmission timestamp T1; it detects the DUT routing table update timestamp T2 through in-band monitoring (ExaBGP's adj-rib-in) or SNMP polling; and it calculates the routing convergence time: ΔT = T2 - T1, to evaluate the DUT's forwarding performance.

[0061] One embodiment of this specification further includes: determining the status of the device under test based on the status data of the device under test.

[0062] For example, the command `ip link set dev vethX down` simulates a virtual interface failure. During the test, the OSPF / BGP session interruption detection time of the device under test (DUT) is observed to verify the Fast Rerouting (FRR) handover process and measure the service interruption time. This assesses the DUT's resistance to attacks and enables network anomaly simulation and fault recovery testing.

[0063] For example, during test execution, CPU / memory metrics of the DUT are collected in real time. When CPU utilization exceeds a threshold (e.g., 80%), the traffic injection rate is automatically reduced, and the system switches to diagnostic mode to collect detailed debugging information. When resource utilization returns to normal, the test intensity is gradually increased.

[0064] Figure 6 The diagram shows a flowchart of a network access testing method for a data communication device applied to the device under test, according to an embodiment of this specification. The method, applied to the device under test, specifically includes the following steps: Step 601: Receive the configuration code sent by the configuration management module to complete the configuration of the device under test.

[0065] When the device under test (DUT) is in a configuration-ready state, it establishes a communication connection with the configuration management module via the out-of-band management interface. The DUT receives configuration codes sent by the configuration management module, which are test requirements issued by the user interaction unit.

[0066] After receiving the configuration code, the device under test automatically parses the configuration instructions in the code, completes operations such as interface activation, protocol initialization, policy loading, and parameter binding, and finally enters the test working state.

[0067] Step 602: Receive the message sent by the tester of the user interaction unit and return data to the tester.

[0068] The device under test (DUT) establishes a data communication link with the tester associated with the user interaction unit through its service interface. The tester generates simulation test messages based on preset test cases and sends the messages to the DUT through the data communication link. After receiving the test messages, the DUT's service interface parses, forwards, filters, or performs protocol interaction processing on the test messages according to the protocol rules, routing strategies, and business processing logic in the loaded configuration code.

[0069] For example, if the tester performs BGP protocol testing, the device under test (DUT) establishes a BGP session with the DUT based on the configuration information in the BGP configuration file. The DUT will generate corresponding response data based on the processing results of the messages and feed it back to the tester through the in-band data channel, thus achieving closed-loop transmission of test data.

[0070] In this manual, the device under test is automatically configured based on the configuration management module. Through message interaction with the tester, the verification of functions, performance and protocol compatibility is achieved without manual intervention in configuration, which effectively improves the efficiency, accuracy and reliability of network access testing of data communication equipment and reduces testing costs.

[0071] This application simulates dozens of independent protocol peers on the same physical host using container technology. Each container runs a complete protocol stack, enabling large-scale containerized multi-instance parallel testing scenarios. Bypassing the kernel protocol stack, it directly processes packets through user-space drivers, achieving line-rate traffic generation and capture.

[0072] The test strategy is dynamically adjusted based on the real-time status of the DUT (CPU, memory, number of sessions) to achieve adaptive stress testing. System security testing is carried out from three dimensions: protocol message format, state machine, and resource management, simulating cross-protocol fault propagation in a real network and testing the DUT's end-to-end recovery capability.

[0073] Multi-level data recording, from message level to performance metric level, supports in-depth post-event analysis and problem reproduction. Automated RFC compliance verification: Transforms abstract RFC text into executable test cases and verification scripts.

[0074] Figure 7 The diagram shown is a structural schematic of a network access testing device for data communication equipment based on full-stack simulation, according to an embodiment of this specification. The basic structure of the network access testing device for data communication equipment based on full-stack simulation is illustrated in this diagram. The functional units and modules can be implemented in software, or using general-purpose chips or specific chips to implement network access testing for data communication equipment based on full-stack simulation. This device is applied to a user interaction unit and specifically includes: The first sending unit 701 is used to send test requirements, which include the IP address of the device under test and the type of the device under test; The second sending unit 702 is used to send the test requirements to the device under test through the configuration management module; wherein, the configuration management module generates device configuration instructions based on the test requirements according to a preset template and then sends them to the device under test; The report generation unit 703 is used to receive messages from the test device of the user interaction unit, and generate a test report when the messages meet preset conditions.

[0075] Figure 8 The diagram shown is a structural schematic of a network access testing device for data communication equipment based on full-stack simulation, according to an embodiment of this specification. The basic structure of the network access testing device for data communication equipment based on full-stack simulation is illustrated in this diagram. The functional units and modules can be implemented in software, or using general-purpose chips or specific chips to implement network access testing for data communication equipment based on full-stack simulation. This device is applied to the device under test and specifically includes: The receiving unit 801 is used to receive the configuration code sent by the configuration management module and complete the configuration of the device under test; The return unit 802 is used to receive messages sent by the tester of the user interaction unit and return data to the tester.

[0076] Figure 9 The diagram shown is a structural schematic of a network access testing device for data communication equipment based on full-stack simulation, according to an embodiment of this specification. The diagram illustrates the basic structure of the network access testing device for data communication equipment based on full-stack simulation. The functional units and modules can be implemented in software, or using general-purpose chips or specific chips to implement the network access testing of data communication equipment based on full-stack simulation. This device is applied to a control center unit and specifically includes: Acquisition unit 901 is used to obtain device configuration information from the database of the control center unit; The instruction generation unit 902 is used to generate device configuration instructions based on the device configuration information and the test requirements.

[0077] like Figure 10The diagram illustrates a computer device according to an embodiment of this specification. The network access testing method for data communication devices based on full-stack simulation described in this application can be applied to the computer device. The computer device 1002 may include one or more processors 1004, such as one or more central processing units (CPUs), each of which can implement one or more hardware threads. The computer device 1002 may also include any memory 1006 for storing any kind of information such as code, settings, data, etc. Non-limitingly, for example, the memory 1006 may include any type of RAM, any type of ROM, flash memory, hard disk, optical disk, etc. More generally, any memory can use any technology to store information. Further, any memory can provide volatile or non-volatile retention of information. Further, any memory can represent a fixed or removable component of the computer device 1002. In one case, when the processor 1004 executes associated instructions stored in any memory or combination of memories, the computer device 1002 can perform any operation of the associated instructions. The computer device 1002 also includes one or more drive mechanisms 1008 for interacting with any memory, such as a hard disk drive mechanism, an optical disk drive mechanism, etc.

[0078] Computer device 1002 may further include an input / output module 1010 (I / O) for receiving various inputs (via input device 1012) and providing various outputs (via output device 1014). A specific output mechanism may include a presentation device 1016 and an associated graphical user interface (GUI) 1018. In other embodiments, the input / output module 1010 (I / O), input device 1012, and output device 1014 may be omitted, and the device may function solely as a computer device within a network. Computer device 1002 may also include one or more network interfaces 1020 for exchanging data with other devices via one or more communication links 1022. One or more communication buses 1024 couple the components described above together.

[0079] The communication link 1022 can be implemented in any way, such as via a local area network, a wide area network (e.g., the Internet), a point-to-point connection, or any combination thereof. The communication link 1022 may include any combination of hardwired links, wireless links, routers, gateway functions, name servers, etc., governed by any protocol or combination of protocols.

[0080] Corresponding to Figures 3 to 6 In addition to the methods described above, embodiments of this specification also provide a computer-readable storage medium storing a computer program that, when executed by a processor, performs the steps of the methods described above.

[0081] This specification also provides computer-readable instructions, wherein when a processor executes the instructions, the program therein causes the processor to perform the following... Figures 3 to 6 The method shown.

[0082] It should be understood that in the various embodiments of this specification, the sequence number of each process does not imply the order of execution. The execution order of each process should be determined by its function and internal logic, and should not constitute any limitation on the implementation process of the embodiments of this specification.

[0083] It should also be understood that, in the embodiments of this specification, the term "and / or" is merely a description of the relationship between related objects, indicating that three relationships can exist. For example, A and / or B can represent: A existing alone, A and B existing simultaneously, and B existing alone. Additionally, the character " / " in this specification generally indicates that the preceding and following related objects have an "or" relationship.

[0084] Those skilled in the art will recognize that the units and algorithm steps of the various examples described in conjunction with the embodiments disclosed in this specification can be implemented in electronic hardware, computer software, or a combination of both. To clearly illustrate the interchangeability of hardware and software, the components and steps of each example have been generally described in terms of functionality in the foregoing description. Whether these functions are implemented in hardware or software depends on the specific application and design constraints of the technical solution. Those skilled in the art can use different methods to implement the described functions for each specific application, but such implementation should not be considered beyond the scope of this specification.

[0085] Those skilled in the art will clearly understand that, for the sake of convenience and brevity, the specific working processes of the systems, devices, and units described above can be referred to the corresponding processes in the foregoing method embodiments, and will not be repeated here.

[0086] In the several embodiments provided in this specification, it should be understood that the disclosed systems, apparatuses, and methods can be implemented in other ways. For example, the apparatus embodiments described above are merely illustrative; for instance, the division of units is only a logical functional division, and in actual implementation, there may be other division methods. For example, multiple units or components may be combined or integrated into another system, or some features may be ignored or not executed. Furthermore, the couplings or direct couplings or communication connections shown or discussed may be indirect couplings or communication connections through some interfaces, devices, or units, or they may be electrical, mechanical, or other forms of connection.

[0087] The units described as separate components may or may not be physically separate. The components shown as units may or may not be physical units; that is, they may be located in one place or distributed across multiple network units. Some or all of the units can be selected to achieve the purpose of the embodiments described in this specification, depending on actual needs.

[0088] Furthermore, the functional units in the various embodiments of this specification can be integrated into one processing unit, or each unit can exist physically separately, or two or more units can be integrated into one unit. The integrated unit can be implemented in hardware or as a software functional unit.

[0089] If the integrated unit is implemented as a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of this specification, in essence, or the part that contributes to the prior art, or all or part of the technical solution, can be embodied in the form of a software product. This computer software product is stored in a storage medium and includes several instructions to cause a computer device (which may be a personal computer, server, or network device, etc.) to execute all or part of the steps of the methods described in the various embodiments of this specification. The aforementioned storage medium includes various media capable of storing program code, such as USB flash drives, portable hard drives, read-only memory (ROM), random access memory (RAM), magnetic disks, or optical disks.

[0090] This specification uses specific embodiments to illustrate the principles and implementation methods of this specification. The descriptions of the above embodiments are only for the purpose of helping to understand the methods and core ideas of this specification. At the same time, for those skilled in the art, there will be changes in the specific implementation methods and application scope based on the ideas of this specification. Therefore, the content of this specification should not be construed as a limitation of this specification.

Claims

1. A network access testing system for data communication equipment based on full-stack simulation, characterized in that, The system includes: The user interaction unit includes: a control terminal for issuing test requirements; The control center unit includes: a configuration management module and a protocol test simulation module; wherein, the protocol test simulation module is used to establish a session connection with the device under test; The physical execution unit includes: the device under test; The device under test (DUT) and the configuration management module are connected via a dual-channel system, including out-of-band management and in-band monitoring; the DUT and the protocol test simulation module establish a communication relationship.

2. The system according to claim 1, characterized in that, The dual-channel connection includes an out-of-band management and configuration channel and an in-band monitoring channel. The out-of-band management configuration channel is used to send configuration codes to the device under test to complete the configuration of the device under test; The in-band monitoring channel is used to collect the status of the device under test.

3. A network access testing method for data communication equipment based on full-stack simulation, characterized in that, The method is applied to the user interaction unit according to any one of claims 1 to 2, comprising: Send a test request, which includes information about the device under test; The test requirements are sent to the device under test through the configuration management module; wherein, the configuration management module generates device configuration instructions based on a preset template and then sends them to the device under test; The system receives messages from the test device of the user interaction unit, and generates a test report when the messages meet preset conditions.

4. A network access testing method for data communication equipment based on full-stack simulation, characterized in that, The method is applied to the configuration management module in the control center unit according to any one of claims 1 to 2, comprising: Retrieve device configuration information from the database of the control center unit; Based on the device configuration information and the test requirements, generate device configuration instructions.

5. The method according to claim 4, characterized in that, The method is further used to control the protocol test simulation module in the central unit, including: Receive the topology description file sent by the control center unit, parse it to generate virtual network configuration; Based on the virtual network configuration, a session connection is established with the device under test.

6. A network access testing method for data communication equipment based on full-stack simulation, characterized in that, The method is applied to the device under test according to any one of claims 1 to 2, comprising: Receive configuration codes sent by the configuration management module to complete the configuration of the device under test; It receives messages sent by the tester of the user interaction unit and returns data to the tester.

7. A network access testing device for data communication equipment based on full-stack simulation, characterized in that, The device employs the method of claim 3, comprising: The first sending unit is used to send test requirements, which include the IP address of the device under test and the type of the device under test; The second sending unit is used to send the test requirements to the device under test through the configuration management module; wherein, the configuration management module generates device configuration instructions based on the test requirements according to a preset template and then sends them to the device under test; The report generation unit is used to receive messages from the test equipment of the user interaction unit, and generate a test report when the messages meet preset conditions.

8. A network access testing device for data communication equipment based on full-stack simulation, characterized in that, The device employs the method of claim 6, comprising: The receiving unit is used to receive configuration codes sent by the configuration management module and complete the configuration of the device under test. The return unit is used to receive messages sent by the tester of the user interaction unit and return data to the tester.

9. A computer device, characterized in that, The computer device includes a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor executes the computer program to implement the method of any one of claims 3 to 6.

10. A computer-readable storage medium, characterized in that, The computer-readable storage medium stores a computer program that, when executed by a processor, implements the method according to any one of claims 3 to 6.

Citation Information

Patent Citations

  • A router test method and its onsite simulation test device

    CN101056225A

  • Remote out-of-band management method and system for communication system

    CN102377613A

  • Automatic simulation test method and system for network security and protection equipment

    CN119544574A

  • System and method for detecting A interface equipment based on upper computer

    CN120281692A

  • Gateway machine double-confirmation closed-loop test system and method

    CN120658664A