Network flux classification processing method and apparatus

Abstract

The present invention discloses a network flow assorting and processing method which comprises the steps as follows: building a service tree that is corresponding with the service assorted structure; allocating the parameters that matches with flow making either node of the service tree relating to the flow attribution of corresponding service; allocating the executing strategy, wherein any executing strategy comprises a plurality of strategy rules and each strategy rule defines a processing action of a service node; as for the received net flow, executing the matching that matches with the flow matching parameters and invoking corresponding executing strategy to process according to matching result and the structure of the service tree. The present invention also discloses a net flow assorted processing device. The present invention can reduce the allocating workload of managing the net flow and increase the transplant performance of the net flow management. Besides, the net flow management can be more efficiency and flexible.

Description

technical field [0001] The invention relates to the communication field, in particular to a network traffic classification processing method and a network traffic classification processing device. Background technique [0002] Classifying and monitoring network traffic is an important means to analyze network traffic, understand service performance, and locate network bottlenecks. In the prior art, traffic is generally classified and monitored directly based on application layer protocols. [0003] The most commonly used solution for traffic classification and monitoring based on application layer protocols is hierarchical flow topology technology, including: [0004] (1) Create a classification tree for traffic classification. Each node on the tree is used to define a traffic matching parameter based on a protocol with certain traffic characteristics, so as to divide network traffic into large and small traffic classifications, As shown in accompanying drawing 1; And, defi...

AI Technical Summary

Problems solved by technology

[0008](1) Poor portability; because the number of application layer protocols is very considerable, and the layered flow topology of each interface is different; The administrator uniformly distributes the configuration of the classification tree, but needs to use the specific traffic on the interface as a model, and create it in real time according to the actual traffic of each interface; at the same time, this kind of traffic monitoring based on the interface also leads to too fragmented traffic statistics. The defect that it is difficult to obtain traffic statistics information of the entire device;

[0009](2) The configuration workload is heavy: the so-called configuration includes two meanings; one is the configuration of the matching rules of the classification tree, and the other is the configuration of the execution strategy

Obviously, for the number of nodes that can easily be in the thousands or tens of thousands, it takes a huge amount of work to configure them one by one

[0010] To sum up, if the number of configuration objects can be effectively reduced, the manufacturer or administrator can pre-set the classification tree to get rid of the dependence on actual traffic , to avoid a lot of configuration work for users in actual use; but there is no similar technical solution in the prior art

Images