Network application shunting equipment based on network bandwidth flow

Abstract

A network application shunting device based on network bandwidth flow comprises a shell and an uplink and downlink tandem connection box located in the shell, an uplink and downlink tandem connection box socket is arranged on the side, close to the uplink and downlink tandem connection box, of the front end of the shell, and a NET port A, a NET port B, a TAP port A and a TAP port B are sequentially embedded in the position, close to the center, of the front end of the shell from left to right. A processing module is arranged in the uplink and downlink tandem connection box, the processing module is connected with an OPTIC port A, an OPTIC port B is fixed to the right side of the OPTIC port A. A DATA port A and a DATA port B are arranged in the uplink and downlink tandem connection box and correspond to the OPTIC ports respectively, the OPTIC port A and the OPTIC port B are both connected with the processing module, and the OPTIC port A and the OPTIC port B are connected with the processing module. Therefore, network application shunting based on network bandwidth flow can be realized.

Description

Technical Field

[0001] The utility model belongs to the field of communications and has a classification number of H04L12 / 00. Specifically, it relates to a network application flow distribution device based on network bandwidth flow. Background Art

[0002] With the rapid popularization and development of the Internet, in order to manage and maintain the network operating environment, real-time monitoring and analysis of network traffic is necessary. This requires the use of network application diversion devices (Network Tap). Network application diversion devices are a type of network traffic replication device. They are connected inline between network devices. Without interfering with normal network communication, they copy the network transmission traffic and then send the copy to the back-end network analysis device for processing.

[0003] In Chinese patent document CN101217455A, a network splitter based on complete useful connection data for secure content filtering is disclosed, which includes an access unit, a data access allocation unit, a content regular expression matching unit, a data cache unit and a switching output unit, and the switching output unit is connected to the flow control data encapsulation module to output the data packets from the flow control data encapsulation module. Although the splitter can meet the situation of increasing network bandwidth, its splitting process requires the participation of multiple modules in cooperation, the calculation process is complicated, the cost is high, and the network splitting is performed according to the purpose or protocol, which cannot meet the needs of PC based on bandwidth flow splitting.

[0004] There is an urgent need in the prior art for a network application diverter based on network bandwidth flow that can significantly improve functionality based on bandwidth flow diversion. Utility Model Content

[0005] In view of the technical problems existing in the prior art, the utility model aims to provide a network application diversion device which can greatly improve the functionality and can divert traffic based on network bandwidth flow.

[0006] According to one aspect of the utility model, a network application flow distribution device based on network bandwidth flow is provided, characterized in that it includes a shell and an uplink and downlink cascade box located inside the shell, the upper surface and the rear side of the shell are provided with heat dissipation holes, the heat dissipation holes on the upper surface and the rear side are interspersed with dustproof grooves, an uplink and downlink cascade box socket is arranged at the front end of the shell near the side of the uplink and downlink cascade box, and a NET port A, a NET port B, a TAP port A, and a TAP port B are embedded in sequence from left to right near the center of the front end of the shell, and an indicator is fixedly arranged below each port and the uplink and downlink cascade box socket The lamp has a power socket connected to one side of the front end of the shell, and the network bandwidth data flow passes through the NET port A and the NET port B. The data flow flowing into the NET port A is copied and then transmitted back to the TAP port A, and the data flow flowing into the NET port B is copied and then transmitted back to the TAP port B. A processing module is arranged inside the uplink and downlink cascade box, and the processing module is connected to the OPTIC port A. The right side of the OPTIC port A is fixed with the OPTIC port B. The interior of the uplink and downlink cascade box is respectively provided with a DATA port A and a DATA port B corresponding to the OPTIC port, and the OPTIC port A and the OPTIC port B are both connected to the processing module.

[0007] Preferably, two processing modules are provided.

[0008] Preferably, the DATA port A and the DATA port B are both connected to the OPTIC port A and the OPTIC port B.

[0009] Preferably, both the DATA port A and the DATA port B are connected to the OPTIC port B.

[0010] Preferably, the NET port A, NET port B, TAP port A, TAP port B are respectively connected to the OPTIC port A, OPTIC port B, DATA port A, and DATA port B via twisted pair cables.

[0011] According to the utility model, since the uplink and downlink cascade box of the network application shunting device based on network bandwidth flow is provided with a processing module and OPTIC port A and OPTIC port B, the OPTIC port A and OPTIC port B in the uplink and downlink box are shunted and cross-outputted based on different network bandwidths via a processor to achieve flow-based shunting, the data of OPTIC port A can be POS data, the data of OPTIC port B can be Ethernet data, OPTIC port A and OPTIC port B are both connected to the processing module through an uplink data channel, and are used to uplink the collected data to the processing module for corresponding data processing, on the other hand, OPTIC port A and OPTIC port B are both connected to the processing module through a downlink data channel, the data output by the processing module is transmitted to the OPTIC port A and OPTIC port B through the downlink data channel and output by the OPTIC port A and OPTIC port B, thereby achieving data shunting that is independent of each other.

[0012] Preferably, the DATA port A is connected to the router via the DATA port B. The OPTIC port B receives data from the DATA port A, processes the data from the DATA port A through a processing module, and outputs the data to the DATA port B, which is then output to the router by the OPTIC port B, thereby achieving data diversion that is independent of each other.

[0013] The technical effects of the utility model are as follows:

[0014] Since the utility model adopts the diversion mode of port mirroring, the link is divided into two by the TAP diversion device, and the diverted data is connected to the collection interface, which can provide a data collection source for Internet information security. Since the utility model is for different bandwidth flows, the OPTIC port A and the OPTIC port B are connected to the processing module through the uplink data channel, which is used to transmit the collected data uplink to the processing module for corresponding data processing. On the other hand, the OPTIC port A and the OPTIC port B are connected to the processing module through the downlink data channel, and the data output by the processing module is transmitted to the OPTIC port A and the OPTIC port B through the downlink data channel and output by the OPTIC port A and the OPTIC port B, thereby realizing data diversion that is unrelated to each other. Moreover, the OPTIC port B receives data from the DATA port A, and after processing the data of the DATA port A through the processing module, it is output to the DATA port B, and the OPTIC port B is output to the router, thereby realizing data diversion that is unrelated to each other. BRIEF DESCRIPTION OF THE DRAWINGS

[0015] Figure 1A schematic diagram of an application scenario simulation of a network application diversion device based on network bandwidth flow according to a specific implementation mode of the utility model is shown.

[0016] Figure 2 A schematic diagram showing the appearance of a network application diversion device according to a specific implementation mode of the utility model.

[0017] Figure 3 A schematic diagram showing the internal structure of an uplink and downlink cascade box of a network application splitting device according to a specific embodiment of the utility model. DETAILED DESCRIPTION

[0018] The present invention will be described in detail below in conjunction with specific implementations with reference to the accompanying drawings. Those skilled in the art will appreciate that the description is exemplary and the present invention is not limited to the specific implementations.

[0019] Figure 1 A schematic diagram of an application scenario simulation of a network application diversion device based on network bandwidth flow according to a specific implementation mode of the utility model is shown.

[0020] like Figure 1 As shown, database servers, file servers, mail servers and other servers, switches, network analysis equipment, PCs and network application diversion equipment all have specific network interfaces, and the network interfaces are connected to each other using twisted pair cables. Taking the file transfer request between a PC and a remote file server as an example, the PC first initiates a corresponding request to the file server. The data flow corresponding to the request starts from the PC, flows through the NET port B, NET port A and switch of the network application diversion equipment in sequence, and then reaches the file server. After receiving the request from the PC, the file server needs to send a corresponding response back to the PC. The data flow corresponding to the response starts from the file server, flows through the switch, NET port A and NET port B of the network application diversion equipment in sequence, and finally reaches the PC. During the whole process, all data flows flowing into NET port A will be copied and then transmitted back to TAP port A and transmitted to the network analysis equipment for analysis; by analogy, all data flows flowing into NET port B will also be copied and then transmitted back to TAP port B, and finally sent to the network analysis equipment for analysis.

[0021] Figure 2 A schematic diagram showing the appearance of a network application diversion device according to a specific implementation mode of the utility model.

[0022] like Figure 2As shown, the network application shunting device based on network bandwidth flow includes a housing 1 and an uplink and downlink cascade box 2 located inside the housing 1. The upper surface and rear side of the housing 1 are provided with heat dissipation holes 3. The heat dissipation holes 3 on the upper surface and rear side are interspersed with dustproof grooves (not shown). The front end of the housing 1 is close to the side of the uplink and downlink cascade box 2 and the uplink and downlink cascade box socket 5 is arranged. The front end of the housing is close to the center and is embedded with NET port A, NET port B, TAP port A, and TAP port B from left to right. An indicator light 6 is fixedly arranged below each port and the socket 5. The front end of the housing 1 is connected to a power socket 4. The network bandwidth data flow passes through the NET port A and NET port B of the network application shunting device. All data flows flowing into the NET port A will be copied and then transmitted back to the TAP port A. All data flows flowing into the NET port B will be copied and then transmitted back to the TAP port B.

[0023] Figure 3 A schematic diagram showing the internal structure of an uplink and downlink cascade box of a network application splitting device according to a specific embodiment of the utility model.

[0024] like Figure 3 As shown, the uplink and downlink cascade box 2 is provided with a processing module inside, the processing module is connected to an OPTIC port A, an OPTIC port B is fixed to the right side of the OPTIC port A, and the uplink and downlink cascade box is provided with a DATA port A and a DATA port B corresponding to the OPTIC port, respectively, and the OPTIC port A and the OPTIC port B are both connected to the processing module. In a preferred embodiment, two processing modules are provided.

[0025] In a preferred embodiment, the DATA port A and the DATA port B are both connected to the OPTIC port A and the OPTIC port B. In a preferred embodiment, the DATA port A and the DATA port B are both connected to the OPTIC port B.

[0026] In a preferred embodiment, the NET port A, NET port B, TAP port A, TAP port B are respectively connected to the OPTIC port A, OPTIC port B, DATA port A, and DATA port B via twisted pair cables.

[0027] According to the utility model, since the uplink and downlink cascade box of the network application shunting device based on network bandwidth flow is provided with a processing module and OPTIC port A and OPTIC port B, the OPTIC port A and OPTIC port B in the uplink and downlink box are shunted and cross-outputted based on different network bandwidths via a processor to achieve flow-based shunting, the data of OPTIC port A can be POS data, the data of OPTIC port B can be Ethernet data, OPTIC port A and OPTIC port B are both connected to the processing module through an uplink data channel, and are used to uplink the collected data to the processing module for corresponding data processing, on the other hand, OPTIC port A and OPTIC port B are both connected to the processing module through a downlink data channel, the data output by the processing module is transmitted to the OPTIC port A and OPTIC port B through the downlink data channel and output by the OPTIC port A and OPTIC port B, thereby achieving data shunting that is independent of each other.

[0028] In a preferred embodiment, the DATA port A is connected to the router via the DATA port B. The OPTIC port B receives data from the DATA port A, processes the data from the DATA port A through a processing module, and outputs the data to the DATA port B, which is then output to the router (not shown) by the OPTIC port B, thereby achieving data diversion that is independent of each other.

[0029] According to the utility model, due to the use of this port mirroring diversion mode, the link is divided into two by the TAP diversion device, and the diverted data is connected to the collection interface, which can provide a data collection source for Internet information security. Since the utility model is aimed at different bandwidth flows and diverts according to the bandwidth flow, OPTIC port A and OPTIC port B are both connected to the processing module through an uplink data channel, which is used to transmit the collected data uplink to the processing module for corresponding data processing. On the other hand, OPTIC port A and OPTIC port B are both connected to the processing module through a downlink data channel, and the data output by the processing module is transmitted to the OPTIC port A and OPTIC port B through the downlink data channel and output by the OPTIC port A and OPTIC port B, thereby realizing data diversion that is unrelated to each other. Moreover, the OPTIC port B receives data from the DATA port A, and after processing the data of the DATA port A through the processing module, it is output to the DATA port B, and the OPTIC port B is output to the router, thereby realizing data diversion that is unrelated to each other.

[0030] The above is a detailed description of the utility model in combination with specific implementation methods. Those skilled in the art understand that various modifications and changes can be made thereon. As long as they do not depart from the purpose and spirit of the utility model, these modifications and changes should fall within the protection scope of the utility model. The protection scope of the utility model is defined by the attached claims.

Claims

1. A network application traffic distribution device based on network bandwidth flow, characterized in that: The invention comprises a shell and an uplink and downlink cascade box located inside the shell. An uplink and downlink cascade box socket is arranged at the front end of the shell near one side of the uplink and downlink cascade box. A NET port A, a NET port B, a TAP port A and a TAP port B are sequentially embedded from left to right at the front end of the shell near the center. An indicator light is fixedly arranged below each port and the uplink and downlink cascade box socket. A power socket is connected to one side of the front end of the shell. The network bandwidth data flow passes through the NET port A and the NET port B. The data flow flowing into the NET port A is copied and then transmitted back to the TAP port A. The data flow flowing into the NET port B is copied and then transmitted back to the TAP port B. A processing module is arranged inside the uplink and downlink cascade box. The processing module is connected to the OPTIC port A. The OPTIC port B is fixed to the right side of the OPTIC port A. The uplink and downlink cascade box is respectively provided with a DATA port A and a DATA port B corresponding to the OPTIC port. The OPTIC port A and the OPTIC port B are both connected to the processing module.

2. The device according to claim 1, characterized in that There are two processing modules.

3. The device according to claim 1, characterized in that The DATA port A and the DATA port B are both connected to the OPTIC port A and the OPTIC port B.

4. The device according to claim 1, characterized in that The DATA port A and the DATA port B are both connected to the OPTIC port B.

5. The device according to any one of claims 1 to 4, characterized in that: The NET port A, NET port B, TAP port A, TAP port B are respectively connected to the OPTIC port A, OPTIC port B, DATA port A, and DATA port B via twisted pair cables.

6. The device according to claim 5, characterized in that A router is also included, and the DATA port A is connected to the router via the DATA port B.

7. The device according to claim 6, characterized in that The OPTIC port B receives data from the DATA port A, processes the data from the DATA port A through a processing module, and outputs the data to the DATA port B, which then outputs the data to the router.

8. The device according to claim 5, characterized in that The OPTIC port A and the OPTIC port B are both connected to the processing module via an uplink data channel, and are used to uplink the collected data to the processing module for corresponding data processing.

9. The device according to claim 5, characterized in that OPTIC port A and OPTIC port B are both connected to the processing module through a downlink data channel. The data output by the processing module is transmitted to the OPTIC port A and OPTIC port B through the downlink data channel and output by the OPTIC port A and OPTIC port B.

10. The device according to claim 1, characterized in that The upper surface and the rear side of the shell are provided with heat dissipation holes, and the heat dissipation holes on the upper surface and the rear side are interspersed with dustproof grooves.

Images