116 results about "Traffic shaping" patented technology

The invention relates to an industrial control system security policy adaptive configuration method and device and a readable storage medium. According to the method, a control instruction stream, a process variable sampling value and link layer message metadata are synchronously collected, an association hypergraph fusing network semantics, control semantics and physical semantics is constructed to represent a system state, and a sampling period is divided into a plurality of time slots with fixed lengths. In each time slot, self-supervised learning is utilized to extract a topology embedded vector group, and a system operation rule is represented. A robustness envelope interval is generated by calculating a statistical distance between a current time slot and a historical baseline, and is used for driving a reinforcement learning model to generate a security policy parameter set. And executing corresponding access control, traffic shaping and integrity verification operations in the next time slot, generating receipt vector feedback model update according to an execution result, outputting a micro-policy patch with a hash signature and a timestamp, and sending the micro-policy patch to the edge security gateway to realize deployment, thereby realizing closed-loop adaptive optimization of the security policy in the dynamic environment.

The invention relates to a Decision Transform-based website fingerprint defense method, and solves the problems that a traditional defense method mainly adopts a traffic shaping or fixed mode data packet filling strategy, only aims at static traffic characteristics to interfere, and cannot realize data packet filling; a time sequence analysis mode of an attacker is difficult to model effectively; and a defense rule is solidified and is easy to suffer from adaptive attacks. The method comprises the following steps: generating a defense track data set; training a DT decision model; monitoring a network fingerprint attack; and defending the website fingerprints. According to the method, time sequence behavior characteristics of network flow are extracted, a long-term dependency relationship of flow interaction is modeled by adopting a Transform architecture, and a virtual data packet sequence matched with real service flow time-space characteristics is generated by utilizing a Decision Transform; according to the method, the defense strategy is dynamically optimized through the reinforcement learning framework, intelligent evolution of defense rules in the confrontation environment is achieved, flow feature analysis of attackers is effectively confused, and the defense success rate of website fingerprint attacks is remarkably increased.

The invention discloses a traffic shaping scheduling method and device, electronic equipment and a storage medium. The method comprises the following steps: determining a target service type of a first data stream at a first time, and obtaining a second data stream at a second time corresponding to the target service type; the second time is before the first time and comprises flow data of a plurality of time periods; determining flow characteristic data of a third data stream at a third time according to the second data stream; the flow characteristic data is used for describing the flow rate and the burst degree of the third data flow; and determining a control instruction of a token bucket shaper of the flow queue based on the flow characteristic data, and adding a token to the token bucket shaper based on the control instruction to meet the flow transmission of the third data flow. According to the invention, through real-time adjustment of the token bucket parameters, accurate control of network congestion is realized.

A service flow scheduling method and apparatus, and a system. When transmission quality of a service flow with a higher priority does not meet a service level requirement corresponding to the service flow, a first network device adjusts, to a first threshold, a transmission rate threshold of an HQoS model for a service flow with a lower priority, where the first threshold is less than a current data transmission rate of the service flow with a lower priority. By performing traffic shaping on the service flow with a lower priority, a bandwidth resource of a downlink port of the first network device may give way to the service flow with a higher priority, to ensure that the service flow with a higher priority meets the service level requirement of the service flow with a higher priority.

The invention discloses a communication method and electronic equipment, and relates to the technical field of communication, and the method adopts a two-stage QoS control strategy, and combines a bottom layer hierarchical token bucket algorithm with a top layer deficit polling algorithm. And the bottom layer QoS adopts a hierarchical token bucket to realize bandwidth allocation and traffic shaping based on traffic categories. The top layer distributes bandwidth resources by adopting deficit polling on the basis of functions, so that the problem that the waiting time of data packets in transmission queues of other functions is too long due to the fact that large data packet transmission of a certain function occupies more bandwidth in function scheduling can be solved. According to the method, end-to-end QoS guarantee can be realized, and bandwidth requirements of different traffic categories and functions are considered, so that under the scene of cross-domain sharing of PCIe equipment, the hardware resource utilization rate is maximized, fine bandwidth allocation and traffic control are performed, efficient transmission and scheduling are ensured, and bandwidth fluctuation caused by burst cross-domain access is smoothly processed.

Systems, methods, and instrumentalities are described herein associated with multi-flow prioritization and shaping. Per packet treatment for traffic shaping (e.g., UL traffic shaping) may be performed. Per packet treatment for traffic shaping may be performed based on a characteristic / condition associated with a data packet. Per packet treatment for traffic shaping may be performed based on a network signaling. Exclusion from traffic shaping may be determined, for example, on a per packet basis (e.g., based on a characteristic / condition associated with a data packet).

The invention discloses a data transmission method based on low-delay optimization, which comprises the following steps of data preprocessing, data classification, partitioning, compression and encryption preprocessing operation, transmission scheduling, multi-path selection, priority scheduling and flow shaping function realization, network transmission, actual data packet sending and receiving processing and basic transmission control. According to the data transmission method and system based on low-delay optimization and the computer readable storage medium, through real-time network awareness and machine learning technologies, the system can dynamically adjust a transmission strategy and adapt to diversified network environments, and the data transmission efficiency is improved. And a multi-dimensional priority model and an intelligent scheduling algorithm ensure that key data obtains an optimal transmission path and resources.

The invention discloses a network data transmission deterministic time delay guarantee method of a spatial characteristic enhanced Informer model, which comprises the following steps of: 1, predicting a time sequence of key service traffic based on the Informer model, and extracting a long-period time characteristic and a future traffic trend through a Prob sparse self-attention mechanism; 2, a graph neural network is introduced into the model to perform modeling on an underground switch topological structure, the defect that Informer only depends on time characteristics and neglects network topological information is improved, and a spatial state matrix is generated and is combined with a future flow trend to realize enhancement of spatial characteristics; 3, an asynchronous scheduling mechanism is designed, prediction calculation and short-period scheduling execution are decoupled, and real-time performance is guaranteed; and 4, generating an optimal step traffic shaper parameter by using the spatio-temporal characteristics to smooth burst traffic, allocate bandwidth and reduce delay jitter, and meanwhile, combining burst detection and redundancy scheduling protection to guarantee deterministic delay. The method is suitable for industrial networks with high real-time requirements such as coal mines and rail transit.

This disclosure provides systems, methods and apparatus, including computer programs encoded on computer storage media, for use case aware network traffic shaping techniques for power reduction. An AR device may align a set of transmission periodicities associated with a set of transmission types to a common periodicity corresponding to a master transmission type of the set of transmission types based on a modification to at least one transmission periodicity of the set of transmission periodicities. A UE may align a set of transmission periodicities associated with a set of transmission types to a common periodicity, where a packet size associated with a transmission type may be based on a latency threshold associated with the transmission type. The UE may buffer one or more transmissions of a set of transmissions corresponding to the set of transmission types prior to performing packetization associated with at least one transmission.

The invention discloses a secure data transmission method based on multi-thread control, and relates to the technical field of network information security, and the method comprises the following steps: extracting a sensitivity identifier from a data packet header, adopting a lookup algorithm to match a preset sensitivity grading table, dividing data into a high-sensitivity type, a medium-sensitivity type and a low-sensitivity type, determining a priority queue distribution proportion according to the sensitivity, obtaining an initial flow shaping parameter, obtaining current network flow data according to the initial flow shaping parameter, analyzing a preset congestion detection threshold value and a historical transmission record, judging a network congestion degree by adopting a token bucket algorithm, and if the congestion degree is higher than the preset congestion detection threshold value, sending the current network flow data to the priority queue; if yes, the token generation rate of the high-sensitivity data is adjusted, and an adjusted traffic shaping strategy is obtained; according to the secure data transmission method based on multi-thread control, the network transmission efficiency can be effectively improved while the data security is ensured, and the method is particularly suitable for a complex network environment in which data with different sensitivities needs to be processed at the same time.

This disclosure provides systems, methods and apparatus, including computer programs encoded on computer storage media, for use case aware network traffic shaping techniques for power reduction. An AR device may align a set of transmission periodicities associated with a set of transmission types to a common periodicity corresponding to a master transmission type of the set of transmission types based on a modification to at least one transmission periodicity of the set of transmission periodicities. A UE may align a set of transmission periodicities associated with a set of transmission types to a common periodicity, where a packet size associated with a transmission type may be based on a latency threshold associated with the transmission type. The UE may buffer one or more transmissions of a set of transmissions corresponding to the set of transmission types prior to performing packetization associated with at least one transmission.

The invention discloses a dynamic working condition-oriented data-real fusion test consistency guarantee method, which comprises the following steps of: carrying out dynamic working condition sensing and data stream preprocessing, sensing network load and physical node states in real time, and preferentially processing high-timeliness data by adopting a self-adaptive traffic shaping mechanism; the method comprises the following steps: constructing an attention-enhanced distributed multi-agent Actor-Critic network architecture based on deep reinforcement learning, and carrying out collaborative decision making by taking a communication node as an independent agent; strategy iteration training is carried out in a digital twin training environment mapped with a physical environment, key state features are extracted by using a self-attention mechanism, and scheduling behaviors are optimized through a multi-target reward function comprehensively balancing delay jitter, multi-source data consistency and network load balance; and converting the global optimization strategy into a dynamic flow scheduling table and issuing the dynamic flow scheduling table to a physical node for execution. According to the method, the problems of time delay fluctuation and consistency deviation of a data-real fusion test in a dynamic network environment are solved.

Technologies for programming flexible accelerated network pipelines include a comping device with a network controller. The computing device loads a program binary file that includes a packet processing program and a requested hint section. The binary file may be an executable and linkable format (ELF) file with an extended Berkeley packet filter (eBPF) program. The computing device determines a hardware configuration for the network controller based on the requested offload hints and programs the network controller. The network controller processes network packets with the requested offloads, such as packet classification, hashing, checksums, traffic shaping, or other offloads. The network controller returns results of the offloads as hints in metadata. The packet processing program performs actions based on the metadata, such as forwarding, dropping, packet modification, or other actions. The computing device may compile an eBPF source file to generate the binary file. Other embodiments are described and claimed.

This application provides a traffic scheduling method, apparatus, and electronic device, relating to the field of communication technology. The method includes: when a target channel group determined from a shaping group and a non-shaping group is a shaping group, determining a first target channel from the shaping group based on a filtering rule that uses the channel corresponding to the highest credit value as the target channel, and determining whether it meets preset shaping conditions; if it does, scheduling the traffic of the first target channel, adjusting the credit values ​​of the first target channel and other first channels according to a preset credit value adjustment rule, and continuing to schedule the shaping group; if all channels in the shaping group have been scheduled at least once or the preset shaping conditions are not met, re-determining the target channel group. The non-shaping group is scheduled using a round-robin scheduling method. This can alleviate the problem of uneven traffic distribution among channels with traffic shaping enabled when some channels have traffic shaping enabled and others do not.

The invention relates to the technical field of communication, and discloses a traffic shaping method and device and a storage medium, the traffic shaping device comprises a message receiving module, a plurality of cache units, a message forwarding module and a token management module, and the token management module comprises a token supplementing unit and a token deduction unit. And the token deduction unit is used for determining a corresponding deduction multiplying power coefficient according to the priority of the message to be forwarded when the message forwarding module forwards the message to be forwarded, and deducting a corresponding number of tokens from the token bucket corresponding to the cache unit in which the message to be forwarded is located. According to the invention, the differentiated deduction multiplying power coefficients are set for the messages with different priorities, so that the overall forwarding efficiency and the service quality adaptability of the system in a multi-service complex environment are improved.

The invention provides a distributed network bandwidth control system, and aims to solve the problems of coarse granularity, difficult management, poor dynamic adjustment and weak integration of a traditional bandwidth control scheme. The system adopts an architecture of a central control platform and a distributed agent program module, the central control platform provides a Web interface and an API interface, and centralized storage and issuing of an IP speed limiting strategy (including IP, uplink and downlink bandwidth and priority) and agent program state monitoring are realized; a proxy program is deployed at a network exit node, a Linux TC tool is called to realize single-IP fine-grained traffic shaping, and a heartbeat synchronization state is sent at regular time, so that strategy feedback is performed on a proxy program module and related nodes in the process, and a complete control closed loop is formed.

The application discloses an edge computing network architecture providing deterministic quality of service, which mainly comprises a service provider, a user terminal, a base station, a router and an edge computing node, wherein the service provider receives a task of the user terminal and feeds back relevant configuration parameters for processing the task to the user terminal and relevant equipment on a task transmission / processing path, the base station receives the task of the user terminal and forwards the task to the router, and the router receives the task sent by the base station and forwards the task to the edge computing node; a three-part domain deployment mode is adopted, including three independent domains of a wireless domain, a wired transmission domain and a computing domain, and an inter-domain traffic shaping mechanism is adopted. The method transplants the deterministic network technology into the edge computing network, solves the problem that the traditional deterministic network technology cannot be adapted to a heterogeneous medium scene, and can provide deterministic quality of service in a dynamic and unpredictable environment.

Systems, methods, and apparatuses, including network interface controllers and computer-readable media, for traffic shaping offload. A network computing device can receive data packets for transmission and implement a traffic policy that includes transmitting at least some data packets without delay to their intended destination. Confirmation tokens for non-delayed packets can be queued in a time-indexed data structure and dequeued according to a traffic shaping policy. Confirmation tokens can be generated and stored independent of the time at which corresponding packets for the tokens are transmitted. Dequeued confirmation tokens can cause the network computing device to receive additional packets for transmission. The device can flag at least some packets for transmission without delay according to aspects of the disclosure, while un-flagged packets can be shaped according to a different traffic shaping policy.

The invention discloses a traffic shaping method and system for an AXI bus, a storage medium and electronic equipment, and the method comprises the steps: collecting the traffic performance data of all main equipment on the AXI bus in real time, and obtaining a real-time monitoring data set; based on the real-time monitoring data set, predicting the flow trend of each master device in a future time window through a long short-term memory network to obtain a prediction result; according to the prediction result and the real-time monitoring data set, calculating a weight adjustment strategy of each master device through a reinforcement learning algorithm to obtain a decision instruction; and performing real-time traffic shaping control on the AXI bus according to the decision instruction. According to the invention, the utilization efficiency of the bus bandwidth and the overall performance of the system can be improved on the premise of ensuring the real-time performance of the key task.

The embodiment of the invention provides a traffic scheduling algorithm switching method and device, equipment and a storage medium, and relates to the technical field of traffic forwarding of data communication, and the method comprises the steps: obtaining an exit speed limit value corresponding to a traffic shaping function configured by a port, and configuring a traffic supervision function for the port according to the exit speed limit value; acquiring a queue speed limit value corresponding to a traffic shaping function configured by a hardware sending queue of the port, configuring a traffic monitoring function for the hardware sending queue according to the queue speed limit value, and forbidding the traffic shaping function of the port and the traffic shaping function of the traffic queue; switching the traffic scheduling algorithm of the port into a target traffic scheduling algorithm in the configuration command, and emptying the cache of the hardware sending queue; and starting a traffic shaping function of the port and a traffic shaping function of the hardware transmit queue, and forbidding a traffic supervision function of the port and a traffic supervision function of the hardware transmit queue, so that the target traffic scheduling algorithm takes effect. According to the invention, the traffic scheduling algorithm can take effect quickly after being switched.

The invention relates to the technical field of data security, in particular to a security operation method and system based on multi-agent collaboration, and the method comprises the steps: intercepting and capturing a TLS length and a time interval sequence of an encrypted session by using an edge-aware agent, constructing a spatio-temporal topology embedding vector based on a linear visibility criterion and a graph attention mechanism, and constructing a spatial-temporal topology embedding vector; and the flow agent maps the vector into a Gaussian distribution parameter to generate a token adjustment coefficient, dynamically adjusts the token bucket frequency and executes asynchronous delay shaping by using a time wheel, and the reflection agent combines a flow confusion escape rate and a processing delay index to carry out closed-loop updating on model parameters through a strategy gradient algorithm. According to the invention, adaptive defense of the encrypted covert channel is realized through dynamic traffic shaping.

The invention discloses a message delay analysis method for ARINC664 terminal traffic shaping. The method comprises the following steps: calculating an arrival curve of each message; adding the arrival curves of the messages to obtain a message frame stream aggregation arrival curve alpha w of all frameflowi in the sub virtual link queue; calculating a strict service curve beta < w > (t) of the sub-virtual link; and taking the maximum horizontal distance between the aggregation arrival curve and the strict service curve as the maximum delay of sub-virtual link traffic shaping, and taking the maximum value of the maximum delay of all sub-virtual link traffic shaping as the maximum delay of virtual link traffic shaping. The method can be used as a basis for deterministic analysis of the ARINC664 network.

A network device for the exchange, routing and / or gatewaying of data between different subnets of a communication network, comprising: a central processing unit; one or more data ingress ports and one or more data egress ports for exchanging data with another network device of the communication network; a plurality of co-processors, including one or more frame normalization co-processors, one or more ingress queuing co-processors, one or more filtering and policing co-processors, one or more intermediate queuing co-processors, at least one gateway co-processor, one or more egress queuing co-processors and at least one traffic shaping co-processor; the central processing unit being adapted to configure and control the one or more data ingress ports, the one or more data egress ports and the plurality of co-processors to implement one or more data processing paths in parallel and / or pipelined between the one or more ingress ports and the one or more egress ports.

The invention relates to a VxWorks hybrid message transmission method based on dual-channel isolation and dynamic traffic shaping, and belongs to the technical field of embedded real-time operating system communication. According to the transmission method of the mixed message in the VxWorks system, the UDP message delay jitter and the UDP message packet loss rate are effectively reduced, the bandwidth utilization rate of the TCP message is improved, and a standardized solution of mixed flow cooperative transmission is provided for the VxWorks system.

The application discloses a kind of vehicle-mounted Ethernet dynamic flow scheduling method and system, it is related to vehicle communication field, comprising: T1, the data stream feature registration and global view management of the equipment of access vehicle-mounted network are carried out;T2, time window is taken as scheduling unit, multiple time slots are divided in time window, and hierarchical time slot scheduling model is constructed;T3, based on flow quota, network data is monitored and flow shaping in real time, and burst flow is inhibited;T4, according to the trigger of high priority emergency data stream, time slot preemption and time window dynamic reconstruction are executed;T5, according to network transmission quality feedback, the bandwidth quota of each data stream is adaptively adjusted.Through the above scheme, time window and three-level time slot physically isolate burst flow, ensure that safety data bandwidth such as braking, steering is monopolized, significantly reduce the packet loss rate, realize key business strong guarantee.

One or more embodiments of the invention provide a cross-location traffic shaping method, a model training method and related equipment. The method comprises the following steps: collecting downlink traffic generated by successfully accessing an agent hiding service through an onion routing client; identifying a burst segment in the downlink flow according to a preset judgment condition; simulating bottom packaging logic of an onion routing protocol, and performing burst reconstruction on the burst segment to obtain a reconstructed burst segment; and replacing the burst segment with the reconstructed burst segment to realize feature alignment of the reconstructed downlink traffic and a target downlink traffic, the target downlink traffic being a downlink traffic generated by successfully accessing a target hidden service through an onion routing client. Through the technical scheme of the invention, the consistency expression capability of cross-position traffic can be improved. Training and testing of a traffic fingerprint identification model are carried out based on the cross-position traffic with the consistent expression capability, and the performance of the traffic fingerprint identification model can be further improved.

Systems and methods for dynamically metering network access in a vehicle network are disclosed. An exemplary method includes periodically receiving one or more performance metrics for one or more communication links, the one or more communication links supporting wireless communication of one or more networked computing devices onboard a vehicle, where the one or more performance metrics fluctuate over time; periodically determining a link quality indicator based on the one or more performance metrics; and periodically communicating the link quality indicator to a traffic shaper system such that the traffic shaper system dynamically allocates bandwidth between the one or more networked computing devices based on the link quality indicator.

The application discloses an Ethernet and serial communication conversion device and method for semiconductor equipment, which comprises a hardware system and a software system, the hardware system contains an industrial-grade main controller, a plurality of independent configurable serial communication interfaces, an Ethernet interface, a state indication and alarm module and the like; the software system runs on the main controller and comprises a bidirectional protocol conversion module, a data priority processing and flow control module and a state monitoring and fault diagnosis module. The data priority processing and flow control module is internally provided with a data processing mechanism based on static priority, or adopts an adaptive priority dynamic re-marking and flow shaping method based on process stage sensing and queue pressure prediction, and the priority of a data frame and a token bucket injection rate are dynamically adjusted. The application can adapt to the harsh environment of a semiconductor factory, realize high-reliability and low-delay bidirectional conversion of a multi-protocol serial device and an Ethernet, and has perfect state monitoring and fault automatic recovery functions.

The invention discloses a peer-to-peer distributed excitation system based on ATS and DDS fusion. The peer-to-peer distributed excitation system comprises a five-layer architecture and a redundancy control module, wherein a driving layer provides a hardware resource access interface; the network layer supports a physical network protocol and a communication link; the transmission layer realizes distributed data exchange through cross-layer fusion of ATS asynchronous traffic shaping and DDS data distribution service; the control layer dynamically coordinates multi-node resources and executes cross-layer strategy adjustment; the application layer deploys an excitation control and limit protection algorithm; the redundancy module adopts a full redundancy mode and comprises a heartbeat probing mechanism and fault switching of a main controller and a standby controller; the method aims to improve the reliability of the system, and eliminates the single-point fault risk through a completely peer-to-peer distributed architecture. Real-time data transmission is optimized; ATS and DDS are fused to realize microsecond deterministic communication; and the distributed cooperative control of the adjusting cabinet, the power cabinet and the field suppression cabinet is supported, and each controller has an independent priority and a seamless switching function.

The application discloses an AXI bus traffic shaping method, a system, a storage medium and an electronic device, wherein the AXI bus traffic shaping method comprises the following steps: collecting traffic performance data of each master device on an AXI bus in real time to obtain a real-time monitoring data set; predicting the traffic trend of each master device in a future time window through a long short-term memory network based on the real-time monitoring data set to obtain a prediction result; calculating a weight adjustment strategy of each master device through a reinforcement learning algorithm according to the prediction result and the real-time monitoring data set to obtain a decision instruction; and performing real-time traffic shaping control on the AXI bus according to the decision instruction. The application can improve the bus bandwidth utilization efficiency and the overall system performance on the premise of guaranteeing the real-time performance of key tasks.