Dynamic bandwidth allocation method and system, device, and medium

Abstract

The present application discloses a dynamic bandwidth allocation method and system, a device, and a medium. The method comprises: separately acquiring ONUs in a current PON and corresponding actual loads; on the basis of the ONUs and the actual loads, determining rogue ONUs and normal ONUs in the PON; and according to an equal allocation requirement, equally allocating bandwidth to the rogue ONUs, obtaining the remaining bandwidth, and equally allocating the remaining bandwidth to the normal ONUs. In the present application, bandwidth allocation for rogue ONUs is restricted to an equal bandwidth requirement of other ONUs, so that bandwidth available for allocation to the other ONUs can be increased, thereby ensuring reasonable bandwidth allocation, and mitigating impact of DDoS attacks.

Description

A dynamic bandwidth allocation method, system, device, and medium Technical Field

[0001] This application relates to the field of optical network technology, and in particular to a dynamic bandwidth allocation method, system, device and medium. Background Technology

[0002] With the rapid development of information technology, the security situation in cyberspace is becoming increasingly severe, and the number of cyberattacks is showing a continuous upward trend. These cyberattacks are diverse, and each type of cyberattack will have different impacts and consequences on the network or network nodes. Among them, DoS (Denial of Service) attacks are particularly noteworthy. DoS attacks attempt to exhaust the computing resources or bandwidth of a target network node by sending a large number of invalid or high-volume data requests, thereby causing the network node to crash or significantly reducing the availability of network resources. This type of attack not only affects the attacked network node, but may also cause a decline in network performance or service interruption. A more serious variant of DoS attacks is Distributed Denial of Service (DDoS) attacks. Compared with DoS attacks, DDoS attacks are more difficult to defend against because they are not launched from a single attack source, but rather from the application layer, i.e., different user sources, to a specific ONU (Optical Network Unit). In this case, the attacker controls a large number of infected computers or botnets to send massive amounts of packets to the target network node, forming a network flood that causes extremely serious network congestion and may even directly cause a complete interruption of the ONU's (Optical Network Unit's) services, posing a serious threat to the continuity and stability of network services. Therefore, protecting the ONU (Optical Network Unit) and rejecting DDoS attacks is of paramount importance.

[0003] Currently, bandwidth allocation in PON networks is mainly done through the standard Dynamic Bandwidth Allocation (DBA) scheme. However, this scheme does not fully consider the security requirements faced by PON networks in actual operation. Since PON is an access network technology that operates at the MAC layer, when the network layer and transport layer are subjected to DDoS attacks, the traffic rate of the downstream DS link (from OLT to ONUs) and the upstream US link (from ONUs to OLT) of the PON network will increase significantly. At this time, the attacked ONU (hereinafter referred to as rogue ONU) will send a large number of invalid or redundant data packets, attempting to exhaust the bandwidth resources of the shared link. Since the bandwidth resources in the PON network are limited, when a certain ONU occupies a large amount of bandwidth, the bandwidth share that other normally operating ONUs can obtain will be reduced accordingly, which may even lead to a significant reduction in the performance of the uplink US link. Therefore, the standard Dynamic Bandwidth Allocation (DBA) scheme used for uplink US link bandwidth management cannot handle this situation.

[0004] Application content

[0005] This application provides a dynamic bandwidth allocation method, system, device, and medium. By limiting the bandwidth allocation of rogue ONUs to the average bandwidth requirement of other ONUs, the bandwidth allocation of other ONUs can be increased, ensuring reasonable bandwidth allocation and thus mitigating the impact of DDoS attacks.

[0006] Firstly, this application provides a dynamic bandwidth allocation method, including:

[0007] Obtain the ONUs and their corresponding actual loads in the current PON network;

[0008] Based on each ONU and the actual load, identify the rogue ONUs and normal ONUs in the PON network;

[0009] The bandwidth is allocated equally to the rogue ONUs according to the average allocation demand, and the remaining bandwidth is then evenly distributed to the normal ONUs.

[0010] This application embodiment accurately obtains the actual load of all ONUs in the current PON network by acquiring the actual load of each ONU and its corresponding data. This facilitates the subsequent differentiation between rogue ONUs and normal ONUs based on the actual load. By distinguishing between rogue and normal ONUs in the PON network based on each ONU and its actual load, it facilitates subsequent bandwidth allocation between them. By limiting the bandwidth allocation of rogue ONUs to the average bandwidth requirement of other ONUs and ensuring that no excessive bandwidth is allocated to them, the bandwidth allocation for other ONUs increases, ensuring reasonable bandwidth allocation. Compared with existing technologies, this application, by limiting the bandwidth allocation of rogue ONUs to the average bandwidth requirement of other ONUs, increases the bandwidth allocation for other ONUs, ensuring reasonable bandwidth allocation and thus mitigating the impact of DDoS attacks.

[0011] Furthermore, the step of obtaining each ONU and its corresponding actual load in the current PON network specifically involves:

[0012] Determine the number of ONUs in the PON network, and initialize vector variables based on the number of ONUs;

[0013] Traverse each ONU in the PON network and obtain the buffer occupancy report of each ONU under the traffic category;

[0014] The buffer occupancy reports are accumulated into the vector variables to obtain the actual load.

[0015] By obtaining the buffer occupancy report under the traffic category in the current PON network and accumulating the buffer occupancy report into the vector variable, the actual load can be obtained. This allows for accurate acquisition of the actual load of all ONUs in the current PON network, facilitating the subsequent differentiation between rogue ONUs and normal ONUs based on the actual load.

[0016] Furthermore, the determination of rogue ONUs and normal ONUs in the PON network based on each ONU and the actual load specifically involves:

[0017] By inputting each ONU and the actual load into a preset regression model, the bandwidth demand prediction value corresponding to each ONU is obtained;

[0018] Based on the predicted bandwidth demand and the actual load, an error vector is obtained for each ONU.

[0019] Determine whether the error vector meets a preset error threshold. If it does, the ONU that meets the preset error threshold is identified as a rogue ONU in the PON network; otherwise, it is a normal ONU.

[0020] This allows for the differentiation between rogue ONUs and normal ONUs in the PON network based on each ONU and the actual load, facilitating subsequent bandwidth allocation between them.

[0021] Furthermore, the step of inputting each ONU and the actual load into a preset regression model to obtain the bandwidth demand prediction value corresponding to each ONU specifically involves:

[0022] Based on each ONU and the actual load, the slope corresponding to the regression model is obtained according to the least squares method, and the intercept corresponding to the regression model is determined based on the slope.

[0023] Based on the slope and the intercept, the predicted bandwidth demand value corresponding to each ONU is determined.

[0024] In this way, the bandwidth demand prediction value corresponding to each ONU can be accurately determined through the regression model, which makes it easier to distinguish between rogue ONUs and normal ONUs in the PON network.

[0025] Furthermore, the formula for calculating the slope of the regression model obtained using the least squares method is as follows:

[0026] In the formula, m ONU Let S be the slope, ONU(i) be the i-th ONU, Load(i) be the i-th actual load, and N be the number of ONUs.

[0027] Furthermore, the formula for calculating the intercept of the regression model based on the slope is as follows:

[0028] In the formula, C ONU Let m be the intercept, Load(i) be the i-th actual load, and m be the load. ONU Let S be the slope, ONU(i) be the i-th ONU, and N be the number of ONUs.

[0029] Furthermore, the step of allocating bandwidth evenly to the rogue ONUs according to the average allocation demand to obtain the remaining bandwidth specifically involves:

[0030] Obtain the bandwidth requirements of each ONU under the traffic category;

[0031] The average allocation requirement is determined based on the bandwidth requirement and the number of ONUs.

[0032] The bandwidth is then evenly distributed to the rogue ONUs according to the average allocation demand, resulting in the remaining bandwidth.

[0033] This approach limits the bandwidth allocation of rogue ONUs to the average bandwidth requirements of other ONUs and ensures that no excessive bandwidth is allocated to rogue ONUs in the future, thereby increasing the bandwidth allocation for other ONUs and ensuring reasonable bandwidth distribution.

[0034] Secondly, this application provides a dynamic bandwidth allocation system, including: an acquisition module, a differentiation module, and an allocation module;

[0035] The acquisition module is used to acquire each ONU and its corresponding actual load in the current PON network.

[0036] The differentiation module is used to determine rogue ONUs and normal ONUs in the PON network based on each ONU and the actual load.

[0037] The allocation module is used to allocate bandwidth to the rogue ONUs on an average basis according to the average allocation requirements, obtain the remaining bandwidth, and then distribute the remaining bandwidth equally to the normal ONUs.

[0038] This application embodiment accurately obtains the actual load of all ONUs in the current PON network by acquiring the actual load of each ONU and its corresponding data. This facilitates the subsequent differentiation between rogue ONUs and normal ONUs based on the actual load. By distinguishing between rogue and normal ONUs in the PON network based on each ONU and its actual load, it facilitates subsequent bandwidth allocation between them. By limiting the bandwidth allocation of rogue ONUs to the average bandwidth requirement of other ONUs and ensuring that no excessive bandwidth is allocated to them, the bandwidth allocation for other ONUs increases, ensuring reasonable bandwidth allocation. Compared with existing technologies, this application, by limiting the bandwidth allocation of rogue ONUs to the average bandwidth requirement of other ONUs, increases the bandwidth allocation for other ONUs, ensuring reasonable bandwidth allocation and thus mitigating the impact of DDoS attacks.

[0039] Thirdly, this application provides a terminal device, including: one or more processors; a memory coupled to the processors for storing one or more programs; when the one or more programs are executed by the one or more processors, the one or more processors implement the dynamic bandwidth allocation method as described in this application.

[0040] Fourthly, this application provides a computer-readable storage medium having a computer program stored thereon, characterized in that the computer program, when executed by a processor, implements the dynamic bandwidth allocation method as described in this application. Attached Figure Description

[0041] Figure 1 is a schematic diagram of the GONP system provided in this application being subjected to a DoS attack;

[0042] Figure 2 is a flowchart illustrating an embodiment of the dynamic bandwidth allocation method provided in this application;

[0043] Figure 3 is a schematic diagram of step S102 in Figure 2 provided in this application;

[0044] Figure 4 is a trend chart of the bandwidth requirements and predicted bandwidth requirements of each ONU under different loads provided in this application;

[0045] Figure 5 is a schematic diagram of an embodiment of the dynamic bandwidth allocation system provided in this application;

[0046] Figure 6 is a hardware structure diagram of the terminal device provided in this application. Detailed Implementation

[0047] The technical solutions of the embodiments of this application will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of this application, and not all embodiments. Based on the embodiments of this application, all other embodiments obtained by those of ordinary skill in the art without creative effort are within the scope of protection of this application.

[0048] It should be understood that the step numbers used in the text are for ease of description only and are not intended to limit the order in which the steps are performed.

[0049] It should be understood that the terminology used in this specification is for the purpose of describing particular embodiments only and is not intended to limit the invention. As used in this specification and the appended claims, the singular forms “a,” “an,” and “the” are intended to include the plural forms unless the context clearly indicates otherwise.

[0050] The terms “comprising” and “including” indicate the presence of the described feature, whole, step, operation, element and / or component, but do not exclude the presence or addition of one or more other features, wholes, steps, operations, elements, components and / or collections thereof.

[0051] The term “and / or” refers to any combination of one or more of the associated listed items, as well as all possible combinations, and includes these combinations.

[0052] With the development of information technology, the cybersecurity situation is becoming increasingly severe. The number of cyberattacks is constantly increasing, and these attacks are diverse in type and have varying impacts. Among them, DoS attacks are particularly prominent, exhausting the target's resources by sending a large number of invalid requests, leading to network crashes or reduced availability. The variant of DoS attacks, Distributed Denial of Service (DDoS) attacks, is even more serious and difficult to prevent. It is launched from multiple sources towards a specific ONU, and by sending massive amounts of packets to the target network node, it may cause a complete interruption of services.

[0053] Currently, PON networks mainly use the standard Dynamic Bandwidth Allocation (DBA) scheme, but security requirements are not fully considered. DDoS attacks can cause a surge in PON network traffic, and the attacked ONU may consume a large amount of bandwidth. Since bandwidth resources in a PON network are limited, when one ONU consumes a large amount of bandwidth, the bandwidth share available to other normally functioning ONUs will be reduced accordingly, which may even lead to a significant degrade in the performance of the uplink US link.

[0054] Next, the terms used in this application will be explained:

[0055] An Optical Network Unit (ONU) is a terminal device for fiber optic access. It acts as the terminator of the fiber optic cable in a fiber optic access network and provides multiple service interfaces to users. As a terminal device for fiber optic access, it should be used in conjunction with an Optical Line Terminal (OLT). The OLT is typically stored in the ISP's central office, while the ONU is deployed at the user's location.

[0056] Passive Optical Network (PON) is a novel access network topology based on optical fiber, offering high bandwidth. It accesses users in a point-to-multipoint tree topology, where the root of the tree is the Fiber Optic Terminal (OLT). A simple optical splitter (OS) connects to the root via optical fiber, splitting the optical signal from a single fiber into multiple fiber points that connect to Optical Network Units (ONUs).

[0057] Dynamically allocated bandwidth (DBA) is a mechanism that dynamically allocates uplink bandwidth within microsecond or millisecond time intervals. It dynamically allocates bandwidth according to service needs, significantly improving bandwidth utilization and enabling different service priority settings for communication at different service levels. DBA is primarily used in PON (Passive Optical Network) systems, especially EPON (Ethernet Passive Optical Network) systems. In PON systems, DBA is a dynamic allocation protocol between the OLT (Optical Line Terminal) and ONU (Optical Network Unit).

[0058] Based on this, the embodiments of this application provide a dynamic bandwidth allocation method and system. By limiting the bandwidth allocation of rogue ONUs to the average bandwidth demand of other ONUs, the bandwidth allocation of other ONUs can be increased, ensuring reasonable bandwidth allocation and thus mitigating the impact of DDoS attacks.

[0059] This application provides a dynamic bandwidth allocation method and system, which will be specifically described through the following embodiments. First, the dynamic bandwidth allocation method in this application embodiment is described.

[0060] The dynamic bandwidth allocation method provided in this application relates to the field of power system communication. This method can be applied to a terminal, a server, or software running on either a terminal or a server. In some embodiments, the terminal can be a smartphone, tablet, laptop, desktop computer, etc.; the server can be configured as an independent physical server, a server cluster or distributed system composed of multiple physical servers, or a cloud server providing basic cloud computing services such as cloud services, cloud databases, cloud computing, cloud functions, cloud storage, network services, cloud communication, middleware services, domain name services, security services, CDN, and big data and artificial intelligence platforms; the software can be an application implementing the dynamic bandwidth allocation method, but is not limited to the above forms.

[0061] This application can also be used in numerous general-purpose or special-purpose computer system environments or configurations. Examples include: personal computers, server computers, handheld or portable devices, tablet devices, multiprocessor systems, microprocessor-based systems, set-top boxes, programmable consumer electronics devices, network PCs, minicomputers, mainframe computers, and distributed computing environments including any of the above systems or devices. This application can be described in the general context of computer-executable instructions executed by a computer, such as program modules. Generally, program modules include routines, programs, objects, components, data structures, etc., that perform specific tasks or implement specific abstract data types. This application can also be practiced in distributed computing environments where tasks are performed by remote processing devices connected via a communication network. In distributed computing environments, program modules can reside in local and remote computer storage media, including storage devices.

[0062] Please refer to Figure 1, which is a schematic diagram of a GONP system under a DoS attack. In the GPON (Gigabit Passive Optical Network) system, the passive optical network (PON) is a new type of access network topology based on optical fiber. It has high bandwidth and accesses users in a point-to-multipoint tree topology structure. The root of the tree is the optical fiber terminal (OLT), and the simple optical splitter (OS) is connected to the optical fiber terminal (OLT) through optical fiber. The GPON system splits the optical signal of a single optical fiber into multiple optical fiber points and optical network units (ONUs). When a user is attacked, the traffic rate (λ) of the downstream (DS) link (from OLT to ONUs) and upstream (US) link (from ONUs to OLT) of the PON will increase significantly. At this time, the attacked ONU (hereinafter referred to as the rogue ONU) will send a large number of invalid or redundant data packets, trying to exhaust the bandwidth resources of the shared link. Since the bandwidth resources in the PON network are limited, when a certain ONU occupies a large amount of bandwidth, the bandwidth share that other normally functioning ONUs can obtain will be reduced accordingly, which may even lead to a significant reduction in the performance of the uplink US link.

[0063] Please refer to Figure 2, which is a flowchart of an embodiment of the dynamic bandwidth allocation method provided in this application, including steps S101 to S103.

[0064] Step S101: Obtain each ONU and its corresponding actual load in the current PON network;

[0065] Understandably, firstly, the number of ONUs in the PON network is determined, and vector variables are initialized based on this number. Specifically, a vector variable with the number of ONUs as its length needs to be created, and all elements are initialized to 0. Secondly, each ONU in the PON network is traversed to obtain a buffer occupancy report for each ONU under a traffic category. The traffic categories include T-CONT Type2 (T2), T-CONT Type3 (T3), and T-CONT... Type4(T4) specifically involves creating a loop that iterates from the first ONU to the last ONU. During each loop, it retrieves the buffer usage reports for the current ONU under traffic categories T2, T3, and T4. Finally, it adds the buffer usage reports for each ONU under traffic categories T2, T3, and T4 to the previously initialized vector variables to obtain the actual load. The relevant formulas are: Load(ONU) += T2_buffer_usage; Load(ONU) += T3_buffer_usage; Load(ONU) += T4_buffer_usage, where T2_buffer_usage, T3_buffer_usage, and T4_buffer_usage represent the buffer usage reports for each ONU under traffic categories T2, T3, and T4, respectively, and Load is a variable.

[0066] It should be noted that T-CONT includes five types: T-CONT Type 1 (T1), fixed bandwidth and fixed time slots, suitable for latency-sensitive services such as voice services; T-CONT Type 2 (T2), fixed bandwidth but not fixed time slots, suitable for services with low jitter requirements such as video-on-demand services; T-CONT Type 3 (T3), with a minimum bandwidth guarantee and the ability to dynamically share remaining bandwidth, and with a maximum bandwidth constraint, suitable for services with service guarantee requirements and large bursts of traffic such as download services; T-CONT Type 4 (T4), no bandwidth guarantee, suitable for services with low latency and jitter requirements such as web browsing services; and T-CONT Type 5 (T5), a combined type that allocates additional bandwidth as best as possible after allocating guaranteed and non-guaranteed bandwidth. Among these, T-CONT Type 2 (T2), T-CONT Type 3 (T3), and T-CONT Type 4 (T4) belong to traffic categories.

[0067] By obtaining the buffer occupancy report under the traffic category in the current PON network and accumulating the buffer occupancy report into the vector variable, the actual load can be obtained. This allows for accurate acquisition of the actual load of all ONUs in the current PON network, facilitating the subsequent differentiation between rogue ONUs and normal ONUs based on the actual load.

[0068] Step S102: Based on each ONU and the actual load, determine the rogue ONUs and normal ONUs in the PON network;

[0069] Once the individual ONUs and their corresponding actual loads are obtained, it becomes possible to distinguish between rogue ONUs and legitimate ONUs in the PON network. It is understood that, referring to Figure 3, in some embodiments, step S102 may include, but is not limited to, steps S301 to S303:

[0070] Step S301: Input each ONU and the actual load into a preset regression model to obtain the bandwidth demand prediction value corresponding to each ONU;

[0071] Understandably, firstly, based on each ONU and the actual load Load(i), the slope m corresponding to the regression model is obtained using the least squares method. ONU The slope m is obtained from this. ONU The calculation formula is:

[0072] In the formula, m ONU Let S be the slope, ONU(i) be the i-th ONU, Load(i) be the i-th actual load, and N be the number of ONUs.

[0073] When the slope m corresponding to the regression model is obtained ONU Next, it is necessary to base the slope m ONU The intercept C of the regression model is determined by considering each ONU and the actual load Load(i). ONU Determine the intercept C corresponding to the regression model. ONU The calculation formula is as follows:

[0074] In the formula, C ONU Let m be the intercept, Load(i) be the i-th actual load, and m be the load. ONU Let S be the slope, ONU(i) be the i-th ONU, and N be the number of ONUs.

[0075] Finally, based on the slope m ONU and the intercept C ONU Determine the predicted bandwidth demand for each ONU, wherein the slope m of the regression model is determined. ONU and intercept C ONU Then, the regression model can be determined to be D. p (i)=m ONU ★i+C ONU In the formula, D p(i) represents the predicted bandwidth demand, m ONU C represents the slope of the regression model. ONU The intercept of the regression model is used to determine the bandwidth demand forecast value D for each ONU based on the regression model. p (i), where the trend of bandwidth demand and bandwidth demand prediction of each ONU under different loads is shown in Figure 4. ONUs that suffer from DOS attacks (such as ONU3 and ONU12) have very high bandwidth demand compared to other ONUs, which makes their error vector always positive and very high.

[0076] In this way, the bandwidth demand prediction value corresponding to each ONU can be accurately determined through the regression model, which makes it easier to distinguish between rogue ONUs and normal ONUs in the PON network.

[0077] Step S302: Based on the predicted bandwidth demand and the actual load, obtain the error vector corresponding to each ONU;

[0078] It is understandable that when the bandwidth demand prediction value D is obtained... p (i) After that, the bandwidth demand forecast value D can be calculated. p (i) The difference between the actual load Load(i) and the error vector Err(i) is used to obtain the error vector Err(i) for each ONU, wherein the formula for calculating the error vector Err(i) is: In the formula, Err(i) is the error vector, Load(i) is the actual load, and D p (i) represents the predicted bandwidth demand value.

[0079] Step S303: Determine whether the error vector meets the preset error threshold. If it meets the preset error threshold, the ONU that meets the preset error threshold is identified as a rogue ONU in the PON network; otherwise, it is a normal ONU.

[0080] It is understandable that when the bandwidth demand prediction value D is obtained... p (i) After that, it is necessary to determine the error vector D p (i) Whether a preset error threshold is met. If the preset error threshold is met, the ONU that meets the preset error threshold is identified as a rogue ONU in the PON network; otherwise, it is a normal ONU. It should be noted that the preset threshold can be set freely, and this application does not impose any restrictions.

[0081] This allows for the differentiation between rogue ONUs and normal ONUs in the PON network based on each ONU and the actual load, facilitating subsequent bandwidth allocation between them.

[0082] Step S103: Distribute bandwidth evenly to the rogue ONUs according to the average allocation requirements to obtain the remaining bandwidth, and then distribute the remaining bandwidth evenly to the normal ONUs.

[0083] Understandably, when an ONU is under DDoS attack, bandwidth allocation to rogue ONUs cannot be directly stopped because the ONU user and service provider have signed a Service Level Agreement (SLA) that must be adhered to. Before allocating bandwidth, rogue ONUs can be detected through the steps mentioned above, or a pre-defined list of rogue ONUs can be traversed using a computer programming language to determine if the current ONU is a rogue ONU. If it is a rogue ONU, it needs to be guaranteed bandwidth allocation first, and the remaining bandwidth is then evenly distributed to normal ONUs. If it is not a rogue ONU, the bandwidth can be directly evenly distributed to all ONUs.

[0084] When rogue ONUs are present, firstly, the bandwidth requirements of each ONU under each traffic category are obtained from the queue report received in the previous service interval, and the bandwidth requirements of each ONU are summed to obtain the total bandwidth requirement. The traffic categories include T-CONT Type2 (T2), T-CONT Type3 (T3), and T-CONT Type4 (T4). Secondly, the corresponding average allocation requirement is determined based on the total bandwidth requirement and the number of ONUs. That is, the total bandwidth requirement is divided by the number of ONUs to obtain the average requirement. However, when determining the average allocation requirement, it is also necessary to consider the sudden situation and assign a certain weight, such as 1.2, 1.3, etc., to the calculated average requirement to obtain the average allocation requirement. Finally, the bandwidth is evenly allocated to the rogue ONUs according to the average allocation requirement to obtain the remaining bandwidth. The remaining bandwidth is calculated as: Total bandwidth - Average allocation bandwidth = Remaining bandwidth.

[0085] Once the remaining bandwidth is obtained, it is necessary to ensure that no excess bandwidth is allocated to rogue ONUs. That is, the remaining bandwidth needs to be evenly distributed among all normal ONUs. The corresponding formula is: Bandwidth allocated to a single normal ONU = Remaining bandwidth / (NN) 流氓ONU In the formula, N is the total number of ONUs. 流氓ONU The number of rogue ONUs.

[0086] This approach limits the bandwidth allocation of rogue ONUs to the average bandwidth requirements of other ONUs and ensures that no excessive bandwidth is allocated to rogue ONUs in the future, thereby increasing the bandwidth allocation for other ONUs and ensuring reasonable bandwidth distribution.

[0087] This application embodiment accurately obtains the actual load of all ONUs in the current PON network by acquiring the actual load of each ONU and its corresponding data. This facilitates the subsequent differentiation between rogue ONUs and normal ONUs based on the actual load. By distinguishing between rogue and normal ONUs in the PON network based on each ONU and its actual load, it facilitates subsequent bandwidth allocation between them. By limiting the bandwidth allocation of rogue ONUs to the average bandwidth requirement of other ONUs and ensuring that no excessive bandwidth is allocated to them, the bandwidth allocation for other ONUs increases, ensuring reasonable bandwidth allocation. Compared with existing technologies, this application, by limiting the bandwidth allocation of rogue ONUs to the average bandwidth requirement of other ONUs, increases the bandwidth allocation for other ONUs, ensuring reasonable bandwidth allocation and thus mitigating the impact of DDoS attacks.

[0088] Please refer to Figure 5, which is a schematic diagram of an embodiment of the dynamic bandwidth allocation system provided in this application, including an acquisition module 100, a differentiation module 200, and an allocation module 300.

[0089] The acquisition module 100 is used to acquire each ONU and its corresponding actual load in the current PON network.

[0090] The differentiation module 200 is used to determine rogue ONUs and normal ONUs in the PON network based on each ONU and the actual load;

[0091] The allocation module 300 is used to allocate bandwidth to the rogue ONUs on an average basis according to the average allocation requirements, obtain the remaining bandwidth, and then allocate the remaining bandwidth to the normal ONUs on an average basis.

[0092] The information interaction and execution process between the modules in the above-mentioned dynamic bandwidth allocation system are based on the same concept as the embodiment of the dynamic bandwidth allocation method of the first aspect of the present invention, and the technical effects achieved are basically the same. For details, please refer to the description in the first embodiment of the method of the present invention, which will not be repeated here.

[0093] Please refer to Figure 6, which illustrates the hardware structure of a terminal device according to another embodiment. The terminal device includes:

[0094] The processor 601 can be implemented using a general-purpose CPU (Central Processing Unit), microprocessor, application-specific integrated circuit (ASIC), or one or more integrated circuits, and is used to execute relevant programs to implement the technical solutions provided in the embodiments of this application.

[0095] The memory 602 can be implemented as a read-only memory (ROM), a static storage device, a dynamic storage device, or a random access memory (RAM). The memory 602 can store the operating system and other applications. When the technical solutions provided in the embodiments of this specification are implemented through software or firmware, the relevant program code is stored in the memory 602 and is called and executed by the processor 601 using the dynamic bandwidth allocation method of the embodiments of this application.

[0096] The input / output interface 603 is used to implement information input and output;

[0097] The communication interface 604 is used to enable communication and interaction between this device and other devices. Communication can be achieved through wired means (such as USB, Ethernet cable, etc.) or wireless means (such as mobile network, WIFI, Bluetooth, etc.).

[0098] Bus 605 transmits information between various components of the device (e.g., processor 601, memory 602, input / output interface 603, and communication interface 604);

[0099] The processor 601, memory 602, input / output interface 603, and communication interface 604 are connected to each other within the device via bus 605.

[0100] The present invention also provides a computer-readable storage medium having a computer program stored thereon, wherein when the computer program is executed by a processor, it implements the dynamic bandwidth allocation method as described in Embodiment 1 above.

[0101] Those skilled in the art will understand that all or part of the processes in the above embodiments can be implemented by a computer program instructing related hardware. The program can be stored in a computer-readable storage medium, and when executed, it can include the processes of the embodiments of the above methods. The storage medium can be a magnetic disk, optical disk, read-only memory (ROM), or random access memory (RAM), etc.

[0102] The specific embodiments described above further illustrate the purpose, technical solution, and beneficial effects of this application. It should be understood that the above descriptions are merely specific embodiments of this application and are not intended to limit the scope of protection of this application.

[0103] In particular, it should be noted that any modifications, equivalent substitutions, improvements, etc., made within the spirit and principles of this application should be included within the scope of protection of this application for those skilled in the art.

Claims

1. A dynamic bandwidth allocation method, characterized by, include: Obtain the ONUs and their corresponding actual loads in the current PON network; Based on each ONU and the actual load, identify the rogue ONUs and normal ONUs in the PON network; The bandwidth is allocated equally to the rogue ONUs according to the average allocation demand, and the remaining bandwidth is then evenly distributed to the normal ONUs.

2. The dynamic bandwidth allocation method of claim 1, wherein, The specific steps for obtaining each ONU and its corresponding actual load in the current PON network are as follows: Determine the number of ONUs in the PON network, and initialize vector variables based on the number of ONUs; Traverse each ONU in the PON network and obtain the buffer occupancy report of each ONU under the traffic category; The buffer occupancy reports are accumulated into the vector variables to obtain the actual load.

3. The dynamic bandwidth allocation method of claim 1, wherein, The process of determining rogue ONUs and legitimate ONUs in the PON network based on each ONU and the actual load is as follows: By inputting each ONU and the actual load into a preset regression model, the bandwidth demand prediction value corresponding to each ONU is obtained; Based on the predicted bandwidth demand and the actual load, an error vector is obtained for each ONU. Determine whether the error vector meets a preset error threshold. If it does, the ONU that meets the preset error threshold is identified as a rogue ONU in the PON network; otherwise, it is a normal ONU.

4. The dynamic bandwidth allocation method of claim 3, wherein, The step of inputting each ONU and the actual load into a preset regression model to obtain the bandwidth demand prediction value corresponding to each ONU is as follows: Based on each ONU and the actual load, the slope corresponding to the regression model is obtained according to the least squares method, and the intercept corresponding to the regression model is determined based on the slope. Based on the slope and the intercept, the predicted bandwidth demand value corresponding to each ONU is determined.

5. The dynamic bandwidth allocation method of claim 4, wherein, The calculation formula of the slope corresponding to the regression model according to the least square method is specifically: In the formula, m ONU is the slope, ONU(i) is the ith ONU, Load(i) is the ith actual load, and N is the number of ONUs.

6. The dynamic bandwidth allocation method of claim 4, wherein, The calculation formula of the intercept corresponding to the regression model is determined based on the slope, and is specifically: where C ONU is the intercept, Load(i) is the ith actual load, m ONU is the slope, ONU(i) is the ith ONU, and N is the number of ONUs.

7. The dynamic bandwidth allocation method of claim 2, wherein, The process of allocating bandwidth evenly to the rogue ONUs according to the average allocation demand to obtain the remaining bandwidth is as follows: Obtain the bandwidth requirements of each ONU under the traffic category; The average allocation requirement is determined based on the bandwidth requirement and the number of ONUs. The bandwidth is then evenly distributed to the rogue ONUs according to the average allocation demand, resulting in the remaining bandwidth.

8. A dynamic bandwidth allocation system characterized by, include: Acquire modules, differentiate modules, and allocate modules; The acquisition module is used to acquire each ONU and its corresponding actual load in the current PON network. The differentiation module is used to determine rogue ONUs and normal ONUs in the PON network based on each ONU and the actual load. The allocation module is used to allocate bandwidth to the rogue ONUs on an average basis according to the average allocation requirements, obtain the remaining bandwidth, and then distribute the remaining bandwidth equally to the normal ONUs.

9. A terminal device, comprising: include: One or more processors; A memory, coupled to the processor, for storing one or more programs; When the one or more programs are executed by the one or more processors, the one or more processors implement the dynamic bandwidth allocation method as described in any one of claims 1-7.

10. A computer-readable storage medium having stored thereon a computer program, characterized in that, When the computer program is executed by the processor, it implements the dynamic bandwidth allocation method as described in any one of claims 1-7.

Images