CN108259237A

CN108259237A - Network access accelerated method, cloud dns server, CE and cloud IP accelerate network system

Info

Publication number: CN108259237A
Application number: CN201810016890.3A
Authority: CN
Inventors: 不公告发明人
Original assignee: Individual
Current assignee: Individual
Priority date: 2018-01-05
Filing date: 2018-01-05
Publication date: 2018-07-06

Abstract

The invention discloses a kind of network access accelerated method, cloud dns server, CE and cloud IP to accelerate network system, belongs to the communications field, to accelerate network access speed.The method includes：CE receives domain name access request；The CE determines whether the corresponding domain name of domain name access request is designated domain name；The CE sends network access request when it is the designated domain name to determine domain name, to the cloud dns server；The cloud dns server is according to the network access request, intended gateway is determined from the multiple cloud access gateway, and determine the corresponding target ip address of the network access request, wherein, the intended gateway will establish the gateway of tunnel connection for the CE therewith；The cloud dns server sends the mark of the intended gateway and the target ip address to the CE；The CE forms routing using the mark of the intended gateway and the target ip address, to access the target network.The present invention is used for network access.

Description

Network access acceleration method, cloud DNS (Domain name Server), CE (customer edge) and cloud IP (Internet protocol) acceleration network system

Technical Field

The present invention relates to the field of communications, and in particular, to a network access acceleration method, a cloud Domain Name System (DNS) server, a Customer Edge device (CE), and a cloud IP acceleration network System.

Background

With the rapid development of Chinese economy, more and more international companies choose to develop business in China; meanwhile, more and more Chinese companies choose to open branch companies abroad. Under the background, the demand for efficient domestic and international internet access is becoming stronger.

In the related art, when a user needs to access the internet, it is often dependent on an international operator cooperating with a domestic operator to realize network access. However, the path followed by such an international operator-based network access method is often not the optimal path for implementing network access, thereby reducing the speed of network access.

Disclosure of Invention

The embodiment of the invention provides a network access acceleration method, a DNS (domain name system) server, a CE (customer edge) and a cloud IP (Internet protocol) acceleration network system, which are used for accelerating the network access speed.

A network access acceleration method is applied to a cloud IP acceleration network, the cloud IP acceleration network comprises a cloud DNS server and a plurality of cloud access gateways, one end of the cloud IP acceleration network is connected with a CE, and the other end of the cloud IP acceleration network is connected with a target network to be accessed by the CE, and the method comprises the following steps:

the cloud DNS server receives a network access request from the CE;

the cloud DNS server determines a target gateway from the plurality of cloud access gateways according to the network access request and determines a target IP address corresponding to the network access request, wherein the target gateway is a gateway with which the CE is to establish tunnel connection;

the cloud DNS server sends the identification of the target gateway and the target IP address to the CE; wherein the identification of the target gateway and the target IP address are used to form a route.

Optionally, in an embodiment, the determining, by the cloud DNS server according to the network access request, a target gateway from the plurality of cloud access gateways includes:

the cloud DNS server sends a connection parameter obtaining instruction to the plurality of cloud access gateways, where the connection parameter obtaining instruction is used to instruct the plurality of cloud access gateways to obtain at least one of connection parameters between the plurality of cloud access gateways and the CE, and the connection parameter includes: whether a current gateway and a network where the CE is located belong to the same operator, a relation between available bandwidth of the current gateway and total bandwidth of the network where the CE is located, link delay from the current gateway to the CE, link jitter from the current gateway to the CE, and packet loss rate from the current gateway to the CE;

the cloud DNS server receives at least one item of connection parameter fed back by at least one cloud access gateway in the plurality of cloud access gateways;

and the DNS determines a target gateway from the at least one cloud access gateway according to the at least one connection parameter.

Optionally, in an embodiment, the connection parameters received by the cloud DNS server include the following five items: whether a current gateway and a network where the CE is located belong to the same operator, a relation between available bandwidth of the current gateway and total bandwidth of the network where the CE is located, link delay from the current gateway to the CE, link jitter from the current gateway to the CE, and packet loss rate from the current gateway to the CE;

the DNS determines a target gateway from the at least one cloud access gateway according to the at least one connection parameter, and the method comprises the following steps:

calculating the score of each gateway in the at least one cloud access gateway according to the weight occupied by each item in the connection parameters;

determining the target gateway according to the scores of the gateways;

whether the network where the current gateway and the CE are located belongs to the same operator accounts for 40% of the score, the relation between the available bandwidth of the current gateway and the total bandwidth of the network where the CE is located accounts for 20% of the score, the packet loss rate from the current gateway to the CE accounts for 20% of the score, and the link delay from the current gateway to the CE and the link jitter from the current gateway to the CE respectively account for 10% of the score;

when the current gateway and the network where the CE is located belong to the same operator, obtaining all weight scores; when the current gateway and the network where the CE is located do not belong to the same operator, the score of 0 is obtained;

when the available bandwidth of the current gateway exceeds 1 time of the total bandwidth of the network where the CE is located, obtaining all weight scores; when the available bandwidth of the current gateway exceeds 0.5 times of the total bandwidth of the network where the CE is located, obtaining a half weight score; when the available bandwidth of the current gateway does not exceed 0.5 times of the total bandwidth of the network where the CE is located, 0 point is obtained;

when the packet loss rate from the current gateway to the CE is less than 0.3%, obtaining all weight scores; when the packet loss rate from the current gateway to the CE is not less than 0.3% but less than 0.7%, obtaining a half weight score; when the packet loss rate from the current gateway to the CE is not less than 0.7%, obtaining 0 point;

obtaining all weight scores when a link delay from a current gateway to the CE is not greater than 4 milliseconds; obtaining a half weight score when a link delay of a current gateway to the CE is greater than 4 milliseconds but less than 10 milliseconds; when the link delay from the current gateway to the CE is not less than 10 milliseconds, obtaining 0 point;

when the link jitter from the current gateway to the CE is less than 1%, obtaining all weight scores; obtaining a half weight score when the link jitter of the current gateway to the CE is not less than 1% but less than 10%; and when the link jitter of the current gateway to the CE is not less than 10%, obtaining 0 point.

Optionally, in an embodiment, the determining, by the cloud DNS server according to the network access request, a target IP address corresponding to the network access request includes:

the cloud DNS server sends an IP address test instruction to the target gateway, wherein the IP address test instruction is used for indicating the cloud access gateway to test a plurality of IP addresses corresponding to the network access request one by one;

the cloud DNS server receives at least one item of test parameters fed back by the target gateway based on the IP address test instruction, wherein the test parameters comprise: the link delay from the cloud access gateway to a test IP address, the link jitter from the cloud access gateway to the test IP address, and the packet loss rate from the cloud access gateway to the test IP address, wherein the test IP address is any one of the IP addresses;

and the cloud DNS server determines a target IP address from the plurality of IP addresses corresponding to the network access request according to at least one item of test parameter.

Optionally, in an embodiment, the test parameters received by the cloud DNS server include the following three items: the link delay from the cloud access gateway to a test IP address, the link jitter from the cloud access gateway to the test IP address and the packet loss rate from the cloud access gateway to the test IP address;

the cloud DNS server calculates the score of each IP address in the plurality of IP addresses according to the weight occupied by each item in the received test parameters;

determining the target IP address according to the score of each IP address;

the link delay from the cloud access gateway to a test IP address accounts for 40% of the score, the link jitter from the cloud access gateway to the test IP address accounts for 30% of the score, and the packet loss rate from the cloud access gateway to the test IP address accounts for 30% of the score;

when the link delay from the cloud access gateway to the test IP address is smaller than a link delay reference value, obtaining all weight scores; when the link delay from the cloud access gateway to the test IP address is not less than the link delay reference value but not more than 1.2 times of the reference value, obtaining a general weight score; when the link delay from the cloud access gateway to the test IP address is not less than 1.2 times of the reference value of the link delay, 0 point is obtained;

when the link jitter from the cloud access gateway to the test IP address does not exceed a link jitter reference value, obtaining all weight scores; when the link jitter from the cloud access gateway to the test IP address exceeds a link jitter reference value but is less than 1.2 times of the link jitter reference value, obtaining a half weight score; when the link jitter from the cloud access gateway to the test IP address is not less than 1.2 times of the reference value of the link jitter, 0 point is obtained;

when the packet loss rate from the cloud access gateway to the test IP address does not exceed a packet loss rate reference value, obtaining all weight scores; when the packet loss rate from the cloud access gateway to the test IP address exceeds the packet loss rate reference value but is less than 1.2 times of the packet loss rate reference value, obtaining a half weight score; and when the packet loss rate from the cloud access gateway to the test IP address is not less than 1.2 times of the reference value of the packet loss rate, obtaining 0 point.

Optionally, in this embodiment of the present invention, the target network to be accessed by the CE is an international network, a cross-operator network, or a cross-regional network, the international network is a network belonging to a different country from a network in which the CE is located, the cross-operator network is a network belonging to a different operator from the network in which the CE is located, and the cross-regional network is a network belonging to a different region of the same country from the network in which the CE is located.

Optionally, in the embodiment of the present invention, network resources of multiple operators are stored in advance on the cloud DNS server.

In a second aspect, a network access acceleration method is provided, the method including:

the CE receives a domain name access request;

the CE determines the domain name corresponding to the domain name access request as an appointed domain name;

when the CE determines that the domain name is the designated domain name, the CE sends a network access request to a cloud access network, wherein the cloud access network comprises a cloud DNS server and a plurality of cloud access gateways, one end of the cloud IP acceleration network is connected with the CE, and the other end of the cloud IP acceleration network is connected with a target network to be accessed by the CE;

the CE receives an identifier of a target gateway and a target IP address corresponding to the network access request, wherein the target gateway is a gateway with which the CE is to establish tunnel connection;

and the CE forms a route by using the identification of the target gateway and the target IP address and accesses the target network.

Optionally, in an embodiment, before the sending the network access request to the cloud access network, the method further includes:

the CE performs a first network address translation;

the sending the network access request to the cloud access network comprises: and the CE sends the network access request to the cloud access network by using the address converted by the first network address.

Optionally, in this embodiment of the present invention, the target network is an international network, a cross-operator network, or a cross-regional network, the international network is a network that belongs to a different country from a network in which the CE is located, the cross-operator network is a network that belongs to a different operator from the network in which the CE is located, and the cross-regional network is a network that belongs to a different region of the same country from the network in which the CE is located.

Optionally, in this embodiment of the present invention, the determining, by the CE, that the domain name corresponding to the domain name access request is the specified domain name includes:

the CE determines whether the domain name corresponding to the domain name access request is in a set white list or not;

when the domain name corresponding to the domain name access request is in the white list, the CE determines the domain name to be the specified domain name;

or,

the determining, by the CE, that the domain name corresponding to the domain name access request is the specified domain name includes:

the CE determines whether the domain name corresponding to the domain name access request is in a set blacklist;

and when the domain name corresponding to the domain name access request is not in the blacklist, the CE determines the domain name to be the specified domain name.

In a third aspect, a network access acceleration method is provided, where the method is applied to a cloud IP acceleration network, the cloud IP acceleration network includes a cloud DNS server and a plurality of cloud access gateways, one end of the cloud IP acceleration network is connected to a CE, and the other end of the cloud IP acceleration network is connected to a target network to be accessed by the CE, and the method includes:

the CE receives a domain name access request;

the CE determines whether the domain name corresponding to the domain name access request is a specified domain name;

when the CE determines that the domain name is the designated domain name, the CE sends a network access request to the cloud DNS server;

the cloud DNS server sends the identification of the target gateway and the target IP address to the CE;

the CE forms a route using the identification of the target gateway and the target IP address to access the target network.

Optionally, in this embodiment of the present invention, a network access request sent by the CE to the cloud IP acceleration network is used by the CE to perform first network address translation; a network access request sent by the target gateway to the target IP address is subjected to a second network address translation by the target gateway.

In a fourth aspect, a DNS server is provided, the DNS server including: one or more processors, and a memory; the memory has stored thereon a computer program which, when executed by the processor, performs any of the network access acceleration methods performed by the DNS server above.

In a fifth aspect, there is provided a CE, comprising: one or more processors, and a memory; the memory has stored thereon a computer program which, when executed by the processor, performs any of the network access acceleration methods performed by the CE above.

In a sixth aspect, a cloud IP acceleration network system is provided, which includes: the system comprises a cloud DNS server and a plurality of cloud access gateways; wherein the cloud DNS server comprises: one or more processors, and a memory; the memory has stored thereon a computer program which, when executed by the processor, performs any of the network access acceleration methods performed by the DNS server above.

In a seventh aspect, there is also provided a storage medium, such as a non-transitory storage medium, for storing a program, the program comprising computer instructions which, when executed, perform any of the network access acceleration methods performed by the DNS server or the CE above.

According to the network access acceleration method, the DNS server, the CE and the cloud IP acceleration network system provided by the embodiment of the invention, when the cloud IP acceleration network is accessed, the path planning of network access is realized by determining the target gateway and the target IP address with which the CE is to establish tunnel connection, so that the network access speed can be accelerated.

Drawings

In order to more clearly illustrate the technical solutions in the embodiments of the present invention, the drawings needed to be used in the description of the embodiments will be briefly introduced below, and it is obvious that the drawings in the following description are only some embodiments of the present invention, and it is obvious for those skilled in the art to obtain other drawings based on these drawings without creative efforts.

FIG. 1 is a schematic illustration of an implementation environment provided by an embodiment of the invention;

fig. 2 is a flowchart of a network access acceleration method according to an embodiment of the present invention;

fig. 3 is a flowchart of a network access acceleration method according to an embodiment of the present invention;

fig. 4 is a schematic diagram of a network access acceleration method according to an embodiment of the present invention;

FIG. 5 is a block diagram of a CE according to an embodiment of the present invention;

fig. 6 is a block diagram of a cloud DNS server according to an embodiment of the present invention.

Detailed Description

In order to make the objects, technical solutions and advantages of the present invention more apparent, embodiments of the present invention will be described in detail with reference to the accompanying drawings.

The embodiment of the invention provides a network access acceleration method which can be applied to a cloud IP acceleration network. FIG. 1 is a schematic diagram of an implementation environment provided by an embodiment of the invention. Referring to fig. 1, the cloud IP acceleration network may include a cloud DNS server 120 and a plurality of cloud access gateways (e.g., a cloud access gateway 131 and a cloud access gateway 133 in the figure), and the cloud IP acceleration network is connected to a CE110 at one end and a target network (e.g., the internet or the internet) to be accessed by the CE at the other end. Where CE110 may be a router. The CE110 may be connected to the terminal device 112 through the switch 111, and of course, in the embodiment of the present invention, the CE110 may also be directly connected to a plurality of terminal devices 112. In fig. 1, CE110 and cloud access gateway 131 may be connected via a Virtual Private Network (VPN) tunnel, in addition to the internet. The target network to be accessed by the CE110 may be, for example, an international network or a national network, which may be a cross-operator network or a cross-regional network. The international network is a network belonging to a different country from the network in which the CE is located, the cross-operator network is a network belonging to a different operator from the network in which the CE is located, and the cross-regional network is a network belonging to a different region of the same country from the network in which the CE is located.

In the embodiment of the present invention, the cloud IP acceleration network may not have its own public network IP address and autonomous system number (AS), or may not have a Border Gateway Protocol (BGP) routing Protocol running. The cloud IP acceleration network in the embodiment of the invention relies on multi-operator and circuit provider resource construction (internet and private line), and utilizes a standard internet protocol security (IPsec) point-to-point encryption tunnel and a static routing technology to construct a point-to-point fully interconnected IP network covering the global range to bear user traffic. Any one cloud IP acceleration network node has local full-operator internet access resources, and all the cloud IP acceleration network nodes are fully interconnected.

The cloud IP acceleration network can provide end-to-end SLA guarantee, and when any backbone node fails, other nodes can automatically establish connection with nearby suboptimal nodes, so that millisecond-level switching is realized.

In the embodiment of the present invention, the bottom layer of the CE110 may employ an X86 architecture server (e.g., DELL brand server), and an Operating System (OS) may be installed on the CE 110. The acceleration OS can integrate a white list mechanism inside, and a user can define a white list according to a default rule (the white list is automatically issued but does not support user definition) or a user-defined mode (the white list needs to be manually added by the user one by one).

In the embodiment of the present invention, when the terminal device 112 accesses the domain name in the white list, using the cloud IP acceleration service, other traffic will still be forwarded via the local internet.

In the embodiment of the present invention, a Terminal device may also be referred to as a User Equipment (User Equipment, abbreviated as "UE"), a Mobile Station (Mobile Station, abbreviated as "MS"), a Mobile Terminal (Mobile Terminal), and the like, and the Terminal device may be, for example, a Mobile phone (or referred to as a "cellular" phone), a computer with a Mobile Terminal, and the like, and for example, the Terminal device may also be a portable, pocket, hand-held, computer-embedded, or vehicle-mounted Mobile device, which may exchange languages and/or data with a radio access network. The terminal device provided by the embodiment of the present invention may typically be a device such as a portable terminal, a mobile phone, a mobile pad, a server, a tablet computer, a computer, or a Personal Digital Assistant (PDA).

Fig. 2 is a flowchart of a network access acceleration method according to an embodiment of the present invention. Referring to fig. 2, a network access acceleration method provided by the embodiment of the present invention includes:

21. the CE receives a domain name access request.

22. And the CE determines whether the domain name corresponding to the domain name access request is a specified domain name.

Specifically, this step may determine whether the domain name corresponding to the domain name access request is the specified domain name in various ways.

One way of determining is: the CE determines whether the domain name corresponding to the domain name access request is in a set white list or not; when the domain name corresponding to the domain name access request is in the white list, the CE determines the domain name to be the specified domain name;

another determination method is as follows: the CE determines whether the domain name corresponding to the domain name access request is in a set blacklist; and when the domain name corresponding to the domain name access request is not in the blacklist, the CE determines the domain name to be the specified domain name.

23. The CE sends a network access request to a cloud access network when determining that the domain name is the designated domain name;

the cloud access network comprises a cloud DNS server and a plurality of cloud access gateways, one end of the cloud IP acceleration network is connected with the CE, and the other end of the cloud IP acceleration network is connected with a target network to be accessed by the CE.

The target network may be an international network, a cross-operator network or a cross-regional network, the international network is a network belonging to a different country from the network where the CE is located, the cross-operator network is a network belonging to a different operator from the network where the CE is located, and the cross-regional network is a network belonging to a different region of the same country from the network where the CE is located

In this step, the CE performs network address translation before sending a network access request to the cloud access network. After the network address translation is completed, the address translated by the first network address is used for sending a network access request to the cloud access network.

After a cloud DNS server in a cloud access network acquires a network access request, a target IP address corresponding to the network access request is determined, and a target gateway is determined from the plurality of cloud access gateways.

24. The CE receives an identifier of a target gateway and a target IP address corresponding to the network access request, wherein the target gateway is a gateway with which the CE is to establish tunnel connection;

25. and the CE forms a route by using the identification of the target gateway and the target IP address and accesses the target network.

In the embodiment of the invention, a user can purchase corresponding acceleration bandwidth according to own requirements (the acceleration bandwidth cannot exceed the outlet capacity of the local internet because the cloud IP acceleration network is based on the local internet), and the acceleration CE equipment can be given as a part of acceleration service along with a package.

The acceleration CE in the embodiment of the invention can access the domestic Internet. The acceleration CE equipment supports both a serial mode and a bypass mode, the deployment principle is that the expected accelerated flow must be subjected to white list matching verification through the acceleration CE equipment, if the accelerated flow is completely matched, the accelerated flow can enter a cloud IP acceleration network through an internet protocol security (IPsec) channel automatically established by the acceleration CE and a cloud access gateway, and if the accelerated flow is not matched, the accelerated flow directly enters an operator network through a local gateway.

The acceleration CE equipment provides a friendly user interaction interface, and after the equipment is logged in through a user manual, a user only needs to set a white list mode (automatically or manually set a white list). If the selection is automatic, plug and play can be realized for the user; if manual operation is selected, the user is required to manually add the domain name which needs to be accelerated, and for the domain name which is used frequently, a manual auditing mode is adopted, and an auditing result is fed back to the user within 24 hours, so that the risk of violating laws and regulations is avoided to the maximum extent. The above is a white list mode as an example, and a black list mode can be similarly obtained.

According to the network access acceleration method provided by the embodiment of the invention, when the cloud IP acceleration network is accessed, the path planning of network access is realized by determining the target gateway and the target IP address with which the CE is to establish tunnel connection, so that the network access speed can be accelerated.

Fig. 3 is a flowchart of a network access acceleration method according to an embodiment of the present invention. Referring to fig. 2, the network access acceleration method provided by the embodiment of the present invention is applied to a cloud IP acceleration network, where the cloud IP acceleration network includes a cloud DNS server and a plurality of cloud access gateways, and one end of the cloud IP acceleration network is connected to a CE, and the other end of the cloud IP acceleration network is connected to a target network to be accessed by the CE. The target network to be accessed by the CE may be an international network, a cross-operator network or a cross-regional network, the international network is a network belonging to a different country from the network where the CE is located, the cross-operator network is a network belonging to a different operator from the network where the CE is located, and the cross-regional network is a network belonging to a different region of the same country from the network where the CE is located, and the method may include:

31. the cloud DNS server receives a network access request from the CE.

The cloud DNS server may store network resources of a plurality of operators in advance.

32. And the cloud DNS server determines a target gateway from the plurality of cloud access gateways according to the network access request and determines a target IP address corresponding to the network access request, wherein the target gateway is a gateway with which the CE is to establish tunnel connection.

In this embodiment of the present invention, the determining, by the cloud DNS server, a target gateway from the plurality of cloud access gateways according to the network access request may include: the cloud DNS server sends a connection parameter obtaining instruction to the plurality of cloud access gateways, where the connection parameter obtaining instruction is used to instruct the plurality of cloud access gateways to obtain at least one of connection parameters between the plurality of cloud access gateways and the CE, and the connection parameter includes: whether a current gateway and a network where the CE is located belong to the same operator, a relation between available bandwidth of the current gateway and total bandwidth of the network where the CE is located, link delay from the current gateway to the CE, link jitter from the current gateway to the CE, and packet loss rate from the current gateway to the CE; the cloud DNS server receives at least one item of connection parameter fed back by at least one cloud access gateway in the plurality of cloud access gateways; and the DNS determines a target gateway from the at least one cloud access gateway according to the at least one connection parameter.

Optionally, the connection parameters received at the cloud DNS server include the following five items: when the network where the current gateway and the CE are located belong to the same operator, a relationship between an available bandwidth of the current gateway and a total bandwidth of the network where the CE is located, a link delay from the current gateway to the CE, a link jitter from the current gateway to the CE, and a packet loss rate from the current gateway to the CE, the determining, by the DNS, a target gateway from the at least one cloud access gateway according to the at least one connection parameter includes:

calculating the score of each gateway in the at least one cloud access gateway according to the weight occupied by each item in the connection parameters; determining the target gateway according to the scores of the gateways;

In this embodiment of the present invention, the determining, by the cloud DNS server according to the network access request, the target IP address corresponding to the network access request may include: the cloud DNS server sends an IP address test instruction to the target gateway, wherein the IP address test instruction is used for indicating the cloud access gateway to test a plurality of IP addresses corresponding to the network access request one by one; the cloud DNS server receives at least one item of test parameters fed back by the target gateway based on the IP address test instruction, wherein the test parameters comprise: the link delay from the cloud access gateway to a test IP address, the link jitter from the cloud access gateway to the test IP address, and the packet loss rate from the cloud access gateway to the test IP address, wherein the test IP address is any one of the IP addresses; and the cloud DNS server determines a target IP address from the plurality of IP addresses corresponding to the network access request according to at least one item of test parameter.

Optionally, the test parameters received at the cloud DNS server include the following three items: when the link delay from the cloud access gateway to a test IP address, the link jitter from the cloud access gateway to the test IP address, and the packet loss rate from the cloud access gateway to the test IP address are reached, the determining, by the cloud DNS server, a target IP address from the plurality of IP addresses corresponding to the network access request according to at least one item of the test parameter includes:

the cloud DNS server calculates the score of each IP address in the plurality of IP addresses according to the weight occupied by each item in the received test parameters; determining the target IP address according to the score of each IP address;

33. The cloud DNS server sends the identification of the target gateway and the target IP address to the CE; wherein the identification of the target gateway and the target IP address are used to form a route.

Fig. 4 is a schematic diagram of a network access acceleration method according to an embodiment of the present invention. Referring to fig. 4, a network access acceleration method provided in an embodiment of the present invention may include:

41. the end device sends a domain name access request to the CE, via for example the switch or directly.

42. And the CE determines whether the domain name corresponding to the domain name access request is a specified domain name.

Optionally, in this step, when determining whether the domain name corresponding to the domain name access request is a specified domain name, the CE may determine whether the domain name corresponding to the domain name access request is in a set white list; and when the domain name corresponding to the domain name access request is in the white list, the CE determines the domain name to be the specified domain name.

Optionally, in this step, when determining whether the domain name corresponding to the domain name access request is the specified domain name, the CE determines whether the domain name corresponding to the domain name access request is in a set blacklist; and when the domain name corresponding to the domain name access request is not in the blacklist, the CE determines the domain name to be the specified domain name.

43. And the CE sends a network access request to the cloud DNS server when determining that the domain name is the specified domain name.

It is pointed out here that, when the CE determines that the domain name corresponding to the domain name access request is the specified domain name, the flow is introduced to the cloud IP acceleration network through the local gateway; when the CE determines that the domain name is not the specified domain name, it processes the domain name in a conventional network access manner, for example, it may process a network access request by using a local internet gateway, and directly transmit traffic to an operator network by using the local gateway, that is, the traffic reaches a target server through the operator network.

In this embodiment of the present invention, optionally, a network access request sent by the CE to the cloud IP acceleration network may be subjected to first network address translation by the CE. Therefore, the internal unified network address can be used to accelerate the transmission efficiency when the internal transmission of the cloud IP acceleration network is carried out, and the network address under the target network is used when the internal unified network address is transmitted to the target network.

44. And the cloud DNS server determines a target gateway from the plurality of cloud access gateways according to the network access request and determines a target IP address corresponding to the network access request. The target gateway is a gateway with which the CE is to establish tunnel connection, and the target gateway may be an international gateway or a domestic gateway. The cloud DNS server is pre-stored with network resources of a plurality of operators.

In this step, the process of determining the target gateway and determining the target IP address corresponding to the network access request by the cloud DNS server may refer to the foregoing description, and is not described herein again.

According to the embodiment of the invention, the domain name requested by the user is intelligently compared through the cloud DNS server, so that the IP address with the best current network quality can be obtained. Such as user request www.google.com, intelligently probed with the DNS server, may return an IP address corresponding to www.google.hk or www.google.sg, which has better network quality.

45. And the cloud DNS server sends the identification of the target gateway and the target IP address to the CE.

46. The CE automatically forms a route using the identification of the target gateway and the target IP address to access the target network. The destination of the route is a target server, and the next hop is a target gateway in the cloud IP acceleration network.

In the embodiment of the invention, each node in the cloud IP acceleration network transmits according to the route so as to send the user request data packet to the target gateway of the cloud IP acceleration network.

Optionally, when the data packet reaches the target gateway of the cloud IP acceleration network, the target gateway may perform second network address translation on the data packet addressed to the target IP address to translate into an IP address of the same operator as the target IP address and the corresponding target server, and finally send the data packet to the target server corresponding to the target IP address.

When receiving the data packet and responding, the target server can send the response data packet to a target gateway in the cloud IP acceleration network according to the local routing table, and the target gateway can convert the target IP address into the IP address of the user-side acceleration CE (namely, the third network address conversion) according to the local NAT table and perform IP routing according to the routing table. After the response packet arrives at the acceleration CE, the CE matches the local NAT table again, and converts the destination IP into the IP address of the requesting terminal device (i.e., the fourth network address conversion) and routes the IP address.

It should be noted that, in the embodiment of the present invention, the cloud IP acceleration network is used to help the user of the terminal device to optimize the access efficiency of the internet in China and abroad, and the original request/response message of the user is not changed in the forwarding process in the cloud IP acceleration network, so that the communication efficiency is high. Meanwhile, the cloud IP acceleration network may provide a layer 3-based tunnel encryption technology by relying on an internet protocol security (IPsec) encryption tunnel technology.

In the embodiment of the invention, the cloud IP acceleration network service is used, so that efficient access to domestic cross-regional (such as cross-province) and cross-operator can be provided for the user of the terminal equipment. For example, if a node where a user is located uses a connected internet line, efficient access to a page of a Qinghua university is required, and the cloud IP is used for accelerating network service, so that the delay is linearly reduced from 20ms to 4ms, and the communication efficiency of different operators in the same city is greatly improved. For another example, a node across company users in Beijing has a strong demand for efficient access to the United states headquarters (e.g., the West coast) and the German research and development center. By using cloud IP to speed up network services, the IPsec connection for the user becomes more stable and efficient, mainly because the packet loss is reduced from the previous 5-8% to less than 0.5%, and the delay is reduced from 295ms and 312ms to 152ms and 140 ms. The working efficiency of the user is greatly improved (namely, the user can be converted from the near-unavailable use to the better use).

Fig. 5 is a block diagram of a CE according to an embodiment of the present invention. Referring to fig. 5, a CE 500 provided in an embodiment of the present invention includes: at least one processor 501, memory 502, communication interface 503, and a bus. The processor 501, the memory 502 and the communication interface 503 are connected by a bus and perform communication with each other. The bus may be an Industry Standard Architecture (ISA) bus, a Peripheral Component Interconnect (PCI) bus, an Extended ISA (enhanced Industry Standard Architecture) bus, or the like. The bus may be divided into an address bus, a data bus, a control bus, etc. For ease of illustration, only one thick line is shown in FIG. 5, but this is not intended to represent only one bus or type of bus. Wherein:

the memory 502 is used to store executable program code, including computer operating instructions. The memory 502 may be a high-speed RAM memory, and may also be a non-volatile memory (non-volatile memory), such as at least one disk memory.

In one embodiment, the processor 501 runs a program corresponding to an executable program code stored in the memory 502 by reading the executable program code for: any of the network access acceleration methods described above as being performed by the CE is performed.

Fig. 6 is a block diagram of a cloud DNS server according to an embodiment of the present invention. Referring to fig. 6, a DNS server 600 according to an embodiment of the present invention includes: at least one processor 601, memory 602, communication interface 603, and a bus. The processor 601, the memory 602, and the communication interface 603 are connected via a bus and communicate with each other. The bus may be an Industry Standard Architecture (ISA) bus, a Peripheral Component Interconnect (PCI) bus, an Extended ISA (enhanced Industry Standard Architecture) bus, or the like. The bus may be divided into an address bus, a data bus, a control bus, etc. For ease of illustration, only one thick line is shown in FIG. 6, but this is not intended to represent only one bus or type of bus. Wherein:

the memory 602 is used to store executable program code, including computer operating instructions. The memory 602 may be a high-speed RAM memory or may be a non-volatile memory (non-volatile memory), such as at least one disk memory.

In one embodiment, the processor 601 runs a program corresponding to the executable program code stored in the memory 602 by reading the executable program code for: any of the network access acceleration methods described above as being performed by the cloud DNS server is performed.

In addition, an embodiment of the present invention further provides a cloud IP acceleration network system, where the cloud IP acceleration network system includes: a cloud DNS server and a plurality of cloud access gateways shown in fig. 6.

It should be noted that: in addition, the CE, the cloud DNS server, and the network access acceleration method provided in the above embodiments belong to the same concept, and specific implementation processes thereof are described in detail in the method embodiments and are not described herein again.

It should be noted that, in the present specification, the embodiments are all described in a progressive manner, each embodiment focuses on differences from other embodiments, and the same and similar parts among the embodiments may be referred to each other. For the device class embodiment, since it is basically similar to the method embodiment, the description is simple, and for the relevant points, refer to the partial description of the method embodiment.

It should be noted that, for simplicity of description, the above-mentioned method embodiments are described as a series of acts or combination of acts, but those skilled in the art will recognize that the present invention is not limited by the order of acts, as some steps may occur in other orders or concurrently in accordance with the invention. Further, those skilled in the art should also appreciate that the embodiments described in the specification are preferred embodiments and that the acts and modules referred to are not necessarily required by the invention.

While the invention has been described in connection with various embodiments, other variations to the disclosed embodiments can be understood and effected by those skilled in the art in practicing the claimed invention, from a review of the drawings, the disclosure, and the appended claims. In the claims, the word "comprising" does not exclude other elements or steps, and the word "a" or "an" does not exclude a plurality. A single processor or other unit may fulfill the functions of several items recited in the claims. The mere fact that certain measures are recited in mutually different dependent claims does not indicate that a combination of these measures cannot be used to advantage.

As will be appreciated by one skilled in the art, embodiments of the present invention may be provided as a method, apparatus (device), or computer program product. Accordingly, the present invention may take the form of an entirely hardware embodiment, an entirely software embodiment or an embodiment combining software and hardware aspects. Furthermore, the present invention may take the form of a computer program product embodied on one or more computer-usable storage media (including, but not limited to, disk storage, CD-ROM, optical storage, and the like) having computer-usable program code embodied therein. A computer program stored/distributed on a suitable medium supplied together with or as part of other hardware, may also take other distributed forms, such as via the internet or other wired or wireless telecommunication systems.

The present invention has been described with reference to flowchart illustrations and/or block diagrams of methods, apparatus (devices) and computer program products according to embodiments of the invention. It will be understood that each flow and/or block of the flow diagrams and/or block diagrams, and combinations of flows and/or blocks in the flow diagrams and/or block diagrams, can be implemented by computer program instructions. These computer program instructions may be provided to a processor of a general purpose computer, special purpose computer, embedded processor, or other programmable document processing apparatus to produce a machine, such that the instructions, which execute via the processor of the computer or other programmable document processing apparatus, create means for implementing the functions specified in the flowchart flow or flows and/or block diagram block or blocks.

These computer program instructions may also be stored in a computer-readable memory that can direct a computer or other programmable document processing apparatus to function in a particular manner, such that the instructions stored in the computer-readable memory produce an article of manufacture including instruction means which implement the function specified in the flowchart flow or flows and/or block diagram block or blocks.

These computer program instructions may also be loaded onto a computer or other programmable document processing apparatus to cause a series of operational steps to be performed on the computer or other programmable apparatus to produce a computer implemented process such that the instructions which execute on the computer or other programmable apparatus provide steps for implementing the functions specified in the flowchart flow or flows and/or block diagram block or blocks.

While the invention has been described in conjunction with specific features and embodiments thereof, it will be apparent that various modifications and combinations can be made therein without departing from the scope of the invention. Accordingly, the specification and figures are merely exemplary of the invention as defined in the appended claims and are intended to cover any and all modifications, variations, combinations, or equivalents within the scope of the invention. It will be apparent to those skilled in the art that various modifications and variations can be made in the present invention without departing from the scope of the invention. Thus, if such modifications and variations of the present invention fall within the scope of the claims of the present invention and their equivalents, the present invention is also intended to include such modifications and variations.

Claims

1. A network access acceleration method is applied to a cloud IP acceleration network, the cloud IP acceleration network comprises a cloud Domain Name System (DNS) server and a plurality of cloud access gateways, one end of the cloud IP acceleration network is connected with a user network edge (CE), and the other end of the cloud IP acceleration network is connected with a target network to be accessed by the CE, and the method comprises the following steps:

the cloud DNS server receives a network access request from the CE;

2. The method of claim 1, wherein the cloud DNS server determining a target gateway from the plurality of cloud access gateways based on the network access request comprises:

3. The method of claim 2, wherein the connection parameters received by the cloud DNS server include the following five items: whether a current gateway and a network where the CE is located belong to the same operator, a relation between available bandwidth of the current gateway and total bandwidth of the network where the CE is located, link delay from the current gateway to the CE, link jitter from the current gateway to the CE, and packet loss rate from the current gateway to the CE;

determining the target gateway according to the scores of the gateways;

4. The method of claim 1, wherein the determining, by the cloud DNS server and according to the network access request, a target IP address corresponding to the network access request comprises:

5. The method of claim 4, wherein the test parameters received by the cloud DNS server include the following three items: the link delay from the cloud access gateway to a test IP address, the link jitter from the cloud access gateway to the test IP address and the packet loss rate from the cloud access gateway to the test IP address; the cloud DNS server determining a target IP address from the plurality of IP addresses corresponding to the network access request according to at least one item of test parameter comprises:

determining the target IP address according to the score of each IP address;

6. The method according to any of claims 1-5, wherein the target network to be accessed by the CE is an international network, a cross-operator network or a cross-regional network, the international network is a network belonging to a different country from the network where the CE is located, the cross-operator network is a network belonging to a different operator from the network where the CE is located, and the cross-regional network is a network belonging to a different region of the same country from the network where the CE is located.

7. The method according to any one of claims 1 to 5, wherein network resources of a plurality of operators are pre-stored on the cloud DNS server.

8. A network access acceleration method, the method comprising:

a user network edge (CE) receives a domain name access request;

when the CE determines that the domain name is the designated domain name, the CE sends a network access request to a cloud access network, wherein the cloud access network comprises a cloud Domain Name System (DNS) server and a plurality of cloud access gateways, one end of the cloud IP acceleration network is connected with the CE, and the other end of the cloud IP acceleration network is connected with a target network to be accessed by the CE;

9. The method of claim 8, wherein prior to sending the network access request to the cloud access network, the method further comprises:

the CE performs a first network address translation;

10. The method of claim 8, wherein the target network is an international network, a cross-operator network, or a cross-regional network, wherein the international network is a network belonging to a different country from a network in which the CE is located, wherein the cross-operator network is a network belonging to a different operator from the network in which the CE is located, and wherein the cross-regional network is a network belonging to a different region of a same country from the network in which the CE is located.

11. The method according to any of claims 8-10, wherein the determining, by the CE, that the domain name corresponding to the domain name access request is a specified domain name comprises:

or,

12. A network access acceleration method is applied to a cloud IP acceleration network, the cloud IP acceleration network comprises a cloud Domain Name System (DNS) server and a plurality of cloud access gateways, one end of the cloud IP acceleration network is connected with a user network edge (CE), and the other end of the cloud IP acceleration network is connected with a target network to be accessed by the CE, and the method comprises the following steps:

the CE receives a domain name access request;

13. The method of claim 12, wherein the target network is an international network, a cross-operator network, or a cross-regional network, wherein the international network is a network belonging to a different country from a network in which the CE is located, wherein the cross-operator network is a network belonging to a different operator from the network in which the CE is located, and wherein the cross-regional network is a network belonging to a different region of a same country from the network in which the CE is located.

14. The method of claim 12, wherein a network access request sent by the CE to the cloud IP acceleration network is subject to a first network address translation by the CE; a network access request sent by the target gateway to the target IP address is subjected to a second network address translation by the target gateway.

15. The method of claim 12, wherein the cloud DNS server has network resources of multiple operators pre-stored thereon.

16. A cloud Domain Name System (DNS) server, the cloud DNS server comprising: one or more processors, and a memory; the memory has stored thereon a computer program which, when executed by the processor, performs the method according to any of claims 1-7.

17. A customer network edge device, CE, the CE comprising: one or more processors, and a memory; the memory has stored thereon a computer program which, when executed by the processor, performs the method according to any of claims 8-11.

18. A cloud IP acceleration network system, the cloud IP acceleration network system comprising: the system comprises a cloud DNS server and a plurality of cloud access gateways;

wherein the cloud DNS server comprises: one or more processors, and a memory; the memory has stored thereon a computer program which, when executed by the processor, performs the method according to any of claims 1-7.