KR20020060518A - Router and routing method for providing each of IP group its bandwidth service - Google Patents

Abstract

PURPOSE: A router for providing a different band width service by IP groups and its routing method are to provide a communication service differentiated by users and allot more resources and priority to users who use more important data by applying a differentiated band width by IP groups. CONSTITUTION: IP groups are set by bandwidths(S710). When a data is inputted through an external communication network(S720), the inputted data is stored(S730) to extract destination address information of the data, filters a data by the destination address information and identifies an IP group including a destination address of the corresponding data(S740). The input data is stored by selecting a queue processing the data by IP groups and outputs the corresponding data to a transmission line supporting a band width service to be applied to the queue(S750).

Description

Router and routing method for providing different bandwidth service for each IP group {Router and routing method for providing each of IP group its bandwidth service}

The present invention relates to a router and a routing method, and more particularly, to a router and a routing method for providing different bandwidth services for each IP group.

A router is a device for routing (routing) data to and from a subnetwork in order to perform data communication between various kinds of subnetworks existing on the network. Such routers typically carry data from one WAN port to one Ethernet or LAN port.

1 is an example of utilization of a router according to a conventional embodiment. Referring to FIG. 1, conventional routers are configured to support a service for one bandwidth each. That is, Company A 20 uses 256k of bandwidth service, Company B 40 uses 128k of bandwidth service, Company C 60 uses 512k of bandwidth service, In case of using the bandwidth service of T1, routers supporting the respective services are separately installed and used for each company. That is, Company A uses router 10 that supports 256k bandwidth service, Company B 40 uses router 30 that supports 128k bandwidth service, and Company C uses 60 ) Uses a router 50 supporting a bandwidth service of 512k, and the D company 80 configures a communication line using a router 70 supporting a bandwidth service of T1.

On the other hand, Figure 2 is a schematic block diagram of a router according to a conventional embodiment. Referring to FIG. 2, the conventional router 10 includes an external network interface unit (I / F) 11, a queue 12, an internal network interface unit (I / F) 13, and a controller 14. ) And a routing table 15.

The external network interface (I / F) 11 receives data transmitted from the network to the subnetwork of the network, and transmits data to be output from the subnetwork to the upper network, that is, the external network. The external network I / F 11 is generally composed of one Ethernet port and is configured to support one bandwidth service at a time.

The internal network interface unit (I / F) 13 is connected to the constituent devices constituting the sub-network, that is, communication equipment such as a computer, so that data transmitted from the external network I / F 11 can be transferred to the corresponding destination address. Routing and transmitting to the communication equipment side, and receives the data output from each communication equipment assigned an IP address in the sub-network, and transmits to the external network I / F (11).

Meanwhile, the queue 12 temporarily stores data transmitted between the external network I / F 11 and the internal network I / F 13, and the routing table 15 is input through the external network I / F 11. Routing information for transmitting the data to the destination address in the sub-network is stored, and the controller 14 controls the routing of the internal network I / F 13 based on the information stored in the routing table (15).

The conventional router having such a configuration temporarily stores data input through the external network I / F 11 in the queue 12 and then controls the controller 14 via the internal network I / F 13. The function simply transmits to the corresponding destination address of the subnetwork with one bandwidth designated as the corresponding destination address. That is, it was not possible to provide a differentiated communication service for each user.

As a result, there is a disadvantage that data of a relatively important nature cannot be effectively operated, such as being treated with the general data that is not important or severely interrupted.

Accordingly, the present invention has been made to solve the above-described problems, and a first object of the present invention includes a plurality of queues supporting services for each bandwidth in order to apply a preset bandwidth for each IP group. Is to provide a router.

In addition, a second object of the present invention is to provide a method for routing data received through one WAN port by bandwidth using the router.

1 is an exemplary diagram of utilization of a router according to a conventional embodiment;

2 is a schematic configuration diagram of a router according to a conventional embodiment;

3 is an example of utilization of a router according to an embodiment of the present invention;

4 is a schematic structural diagram of a router according to an embodiment of the present invention;

5 is a schematic structural diagram of a control unit according to an embodiment of the present invention;

6a to 6d is an exemplary diagram of a system configuration to which the router of the present invention is applied;

7 is a process flow diagram for a routing method according to one embodiment of the invention.

♣ Explanation of symbols for the main parts of the drawing ♣

100: router 110: external network I / F

120 filter unit 130 buffer unit

140: internal network I / F 150: control unit

160: routing table

The router of the present invention for achieving the first object is an external network interface for inputting data transmitted from the outside of the sub-network, and transmits the data output from the sub-network to the outside, and is input through the external network interface A routing information storage unit for transmitting data to a destination address in the sub-network, and storing a routing table for transmitting data output from the sub-network to the outside, and filtering information set differently for each IP group, and the external network interface A predetermined number of filter units for filtering data input through the unit, a predetermined number of buffer units for temporarily storing data passing through the filter unit for each IP group, and an output group of each buffer unit connected to an output terminal of each buffer unit. Bands stored by data for each IP group A predetermined number of internal network interface units for routing and outputting a transmission line of a width; the predetermined number of filter units so that data input through the external network interface unit is transmitted by a predetermined bandwidth for each IP address of the destination; And a controller for controlling the number of buffer units and the internal network interface unit.

In order to achieve the second object of the present invention, a routing method of the present invention sets a predetermined number of IP groups by grouping IP addresses of constituent devices constituting any sub-network existing on the network, and for each IP group. A first step of setting a bandwidth to be applied, a second step of identifying an IP group including a destination address of the data by filtering the data by destination address information of the data when data is input through an external communication network; Selecting a queue for processing data with a bandwidth to be applied to the IP group identified in the second process among the plurality of queues and storing the input data; and routing the stored data to a transmission line having a corresponding bandwidth and outputting the queue; It characterized in that it comprises a fourth process.

Hereinafter, an embodiment of a router and a routing method using the same according to the present invention will be described in detail with reference to the accompanying drawings.

3 is an example of utilization of a router according to an embodiment of the present invention.

Referring to FIG. 3, the router of the present invention is configured to support services for various bandwidths in one router. That is, in order to apply the bandwidth service preset for each IP group in one router, the router is configured to include a plurality of queues supporting the service for each bandwidth.

Therefore, as shown in FIG. 3, it is possible to service external data input through one Ethernet port for each of a plurality of bandwidths. That is, the A company 20 using the 256k bandwidth service provides 256k bandwidth service through the 256k transmission line l 1, and the B company 40 using the 128k bandwidth service provides the 128k transmission line ( l 2). Company C (60), which provides 128k bandwidth service through 512k bandwidth service, provides 512k bandwidth service through 512k transmission line ( l 3) to Company C (60), which uses 512k bandwidth service (40). ) Provides the corresponding bandwidth service through the T1 transmission line l 4.

That is, with one router 100 to support various types of bandwidth services as described above, a more specific configuration of the router for this purpose is shown in FIG.

4 is a schematic diagram of a router according to an embodiment of the present invention. Referring to FIG. 4, the router of the present invention may provide an external network interface unit (I / I) to route data input / output to the sub-network in order to perform data communication between various types of sub-networks existing on the network. F) 110, filter unit 120, multi-queue buffer unit 130, internal network interface unit (I / F) 140, control unit 150, routing table 160 It is configured to include.

The external network interface unit (I / F) 110 is an apparatus for inputting external data input to a sub network as in the conventional case and transmitting data in the sub network to the outside. The external network interface (I / F) 110 is generally composed of one Ethernet port, and in the present invention, data transmitted through various types of bandwidths (128k, 256k, 512k, T1) through this Ethernet port. They are all acceptable.

The filter unit 120 includes a predetermined number of filters, and the filters filter data input from the external network interface unit 110 based on filtering information set differently for each IP group. At this time, the user first sets an IP group to provide the bandwidth service for each bandwidth, and sets the IP group as filtering information of each filter.

For example, when four bandwidths of 128k, 256k, 512k, and T1 are applied, an IP group to which the respective bandwidth is applied is first set. That is, the first IP group to which bandwidth 128k is to be applied is set from '256.256.100.1' to '256.256.100.32', and the second IP group to which bandwidth 256k is to be set to '256.256.150.1' to '256.256.150.64', A third IP group to which bandwidth 512k is to be applied is set from '256.256.200.1' to '256.256.200.32', and a fourth IP group to which bandwidth T1 is to be applied is set to '256.256.250.1' to '256.256.250.32'. Then, filtering information for each filter is set according to the group. That is, in the case of the first filter 121 supporting the bandwidth 128k service, the filtering information is set from '256.256.100.1' to '256.256.100.32', and in the case of the second filter 122 supporting the bandwidth 256k service, Set the filtering information from '256.256.150.1' to '256.256.150.64', and for the third filter 123 supporting the bandwidth 512k service, set the filtering information from '256.256.200.1' to '256.256.200.32'. In case of the fourth filter 124 supporting the bandwidth T1 service, the filtering information is set from '256.256.250.1' to '256.256.250.32'.

Accordingly, all data input through one external network interface unit (I / F) 110 pass through one filter that passes a destination address included in the data among the plurality of filters 120 and the buffer unit ( 130).

The buffer unit 130 is configured to be equal to the number of filters 120, and the buffers are connected one-to-one with each filter to temporarily store data passing through the corresponding filter. In addition, the buffer unit 130 generally has the form of a queue.

Meanwhile, the internal network interface unit (I / F) 140 is configured in the same number as the buffers constituting the buffer unit 130, and is connected one-to-one with each buffer, so that the data transferred from the corresponding buffer is written. Routing and outputting the transmission line of the set bandwidth. That is, the routing information stored in the routing table 160 is routed to each transmission line supporting the bandwidth set for each of four IP groups as in the above example.

Each internal network interface unit (I / F) 140 is connected to a transmission line for supporting the bandwidth service set for each of the internal network interface unit (I / F) 140, the IP address of each IP group The same number of transmission lines are connected.

The routing table 160 transfers data input through the external network interface unit 120 to a destination address in the subnetwork, and stores a routing table for transmitting data output from the subnetwork to the outside.

The controller 150 includes the filter unit 120, the buffer unit 130, and the internal network interface unit so that data input through the external network interface unit 120 is transmitted by a preset bandwidth for each IP address of the destination. 140).

The router of the present invention having such a configuration filters the data transmitted from the external network by the destination address in the filter unit 120 and then the destination address through the corresponding buffer unit 130 and the internal network I / F 140. Route to. At this time, each data uses the bandwidth set in advance by the destination address. On the other hand, since the data of the external network that is output from the internal network already has its own IP address, that is, the bandwidth information, it is output through the external network in the same manner as the existing method by the bandwidth information.

The router of the present invention is configured in the form of a board including each functional block and a program for controlling the blocks, and can be embedded in a server system. Thus, it is possible to optionally further comprise a plurality of additional control modules.

5 is a schematic configuration diagram of a controller according to an embodiment of the present invention, and shows an example in which additional control modules are included in the controller 150 of the present invention. Referring to FIG. 5, the control unit 150 of the present invention includes a security module 151, a differential service support module 152, a dynamic routing module 153, a simple network management protocol (SNMP) support module 154, and a web-based device. A management module 155 and a multi-gate control module 156.

The security module 151 includes a firewall module, a virtual private network (VPN) module, a network address translation (NAT) module, and the like, which are frequently used on a general network. It is possible to add. At this time, the firewall module is a program located in the network gateway server, and is a module that protects the resources of the private network from users of other networks. That is, all network packets are examined and filtered to determine whether to forward them to their destination. The virtual private network (VPN) module is a module that enables individual companies or operators to use the public network as a leased line. Performs encryption / decryption on the network to protect the data transmitted / received. The Network Address Translation (NAT) module translates IP addresses, as known to the entire network, in subnetwork using different IP addresses. In other words, create a conversion table between private IP addresses in the subnetwork and public IP addresses commonly used in the entire network, and convert the public IP of all data coming into the internal network to the private IP address by using the conversion table. Protect it.

The differential service support module 152 is generally called a Quality of Service (QoS) module. The differential service support module 152 analyzes external data input through the external network interface unit, and analyzes external data inputted to each destination IP address included in the external data. Give different service levels and apply the service level differentially by that service level. That is, high level service level is given to users who deal with data of relatively important characteristics, and low level service level is given to users who do not, and different network service is provided for each service level.

The dynamic routing module 153 is a module that automatically updates the routing table to eliminate an overload in any one of the bandwidth services of the subnetwork. At this time, the service content corresponding to the IP address of the service level of a relatively high level is first processed with reference to the service level assigned by the differential service support module 152.

Simple Network Management Protocol (SNMP) support module 154 supports Simple Network Management Protocol (SNMP) and monitors Simple Network Management Protocol (SNMP) management data on the Web.

The web-based management module 155 is installed in a server system supporting a web service, so that the router of the present invention can apply the web service function of the server system to manage the router.

The multi-gate control module 156 controls to output data input through one external network interface unit through the plurality of internal network interface units as shown in the example of FIG. 4.

6a to 6d are exemplary diagrams of a system configuration to which the router of the present invention is applied.

FIG. 6A is an example of the case where the router of the present invention is applied to a network server used in a small enterprise SOHO. Referring to FIG. 6A, the router 100a of the present invention routes external data transmitted with a bandwidth of 128k to a small internal network. In this case, the router 100a may be a web server, a DNS server, or a mail server in addition to the basic routing function. And security management server.

6B illustrates an example in which the router of the present invention is applied to a network including a plurality of server systems having different service levels. That is, after connecting a multimedia server 110b, a management information system (MIS) server 120b, and a network server 130b to one router 100b, The network server 130b sets the bandwidth service of 256k, and the remaining servers 110b and 120b sets the bandwidth service of 128k. Then, the external data provided with a bandwidth of 512k is routed by the router 100b and transmitted to the corresponding server. In this case, the network server 130b may use a service with a relatively large bandwidth compared to other servers, so that data through the network server 130b may be preferentially processed than data through other servers. .

6C is an exemplary diagram of a case where a router of the present invention is connected to a sub network supporting various bandwidth services. Referring to FIG. 6C, a first sub network 110c using a bandwidth 512k service and a second sub network 120c using a bandwidth 128k service are provided in one router 100c that receives data transmitted from the outside in a bandwidth T1. The first sub-network 110c and the devices connected to the second sub-network 120c are separated into IP groups. After identifying the sub-network to which the data is to be transmitted by the IP address of the received data, the data is transmitted with the bandwidth applied to the corresponding sub-network as a result.

6D shows an example of a case where a virtual private network is configured by the router of the present invention. Referring to FIG. 6D, a subnetwork having a gateway 100d, 110d and 120d including a virtual private network module (VPN) as a gateway is configured, and the routers 100d, 110d and 120d are used to transmit data between the subnetworks. Data encryption and decryption are performed by using a virtual private network module (VPN) included in each.

6A to 6D show an example of a network configuration to which the router of the present invention is applied, and more various configurations are possible.

FIG. 7 is a flowchart illustrating a routing method according to an embodiment of the present invention, and illustrates a method for routing data received from an external network to a corresponding destination address. Referring to FIG. 7, in order to apply a preset bandwidth for each IP group, a method of routing data received through one Ethernet port for each bandwidth using a router including a plurality of queues supporting a service for each bandwidth is provided. As follows.

First, an IP group for each bandwidth is set (s710). In other words, by grouping IP addresses of the constituent devices constituting any sub-network existing on the network, a predetermined number of IP groups are set, and bandwidth to be applied for each IP group is set. That is, as described in reference to FIG. 4, four IP groups are set by the IP addresses, and then bandwidths to be applied for each IP group are set.

When data is input through an external communication network (s720), the input data is analyzed (s730) to extract destination address information of the data, and the data is filtered by the destination address information to include the destination address of the corresponding data. The identified IP group is identified (s740). That is, after extracting a destination address from data input from the outside, the IP group including the destination address is identified.

After selecting a queue for processing data for each IP group, the input data is stored (s740), and the corresponding data is output to a transmission line supporting a bandwidth service to be applied to the queue (s750). At this time, refer to the routing table previously set by the user.

On the other hand, if the network supporting the bandwidth is overloaded, the packet data transmitted by the bandwidth is identified, and the packet data having a high priority according to the priority for each kind of packet data set by the user in advance. Let's route first. For example, data representing management management information is given a higher priority than multimedia data such as video or audio data so that management management information may be preferentially transmitted when an overload occurs in a network.

At this time, in order to transfer the data received through the router to the corresponding destination address, a switching device (hereinafter, referred to as a 'hub') must be installed at the output terminal of the router, and the hub is a router. It may be built in a built-in type, or may be separately connected to the output side of a router. In addition, it is a technique known to those skilled in the art that a hub must be necessarily installed when configuring a communication network using a router. Therefore, in FIG. 1, FIG. 3, and FIG. 6 illustrating an example of a network configuration using a router, a hub connected to an output side of a router may be omitted, thereby more clearly representing a path through which data transmitted to the router is routed. It was made.

Such a router and routing method of the present invention can provide a differentiated communication service for each user by applying differential bandwidth for each IP group, thereby allocating more resources and priorities to users who use more important data. By doing so, there is an advantage that network resources can be utilized more efficiently.

In addition, the router of the present invention is configured in the form of a board including each functional block, and a program for controlling the blocks can be embedded in the server system, so that further comprises a plurality of additional control modules optionally It is possible. Therefore, network resources can be prevented from being used redundantly.

Claims (10)

In the router for routing data input and output to the sub-network in order to perform data communication between the various types of sub-networks existing on the network, An external network interface unit for inputting data transmitted from the outside of the sub-network, and transmitting data output from the sub-network to the outside; A routing information storage unit for transmitting data input through the external network interface unit to a destination address in the sub network, and storing a routing table for transmitting data output from the sub network to the outside; A predetermined number of filter units for filtering data inputted through the external network interface unit with filtering information set differently for each IP group; A predetermined number of buffer units for temporarily storing data passing through the filter unit for each IP group; A predetermined number of internal network interface units connected to an output terminal of each buffer unit for outputting data stored in each buffer unit for each IP group to a transmission line having a predetermined bandwidth for each IP group; And a controller for controlling the predetermined number of filter units, a predetermined number of buffer units, and an internal network interface unit so that data input through the external network interface unit is transmitted by a predetermined bandwidth for each IP address of the destination. Router. The method of claim 1, A router, which is mounted on a network server system. The method of claim 1, wherein the control unit And a security module for protecting the sub-network connected to the router by performing authentication on external data input through the external network interface unit. The method of claim 3, wherein the security module A firewall module for protecting the sub-network through filtering of all data input through the external network interface unit; A virtual private network (VPN) module for protecting data transmitted / received by performing encryption / decryption on the data when components of the subnetwork want to transmit / receive data through a public network; Prepare a conversion table between the private IP address in the sub-network and the public IP address commonly used on the whole network, and convert the public IP address of all data coming into the internal network into the private IP address by the conversion table. A router comprising any one or more of a network address translation (NAT) module to protect. The method of claim 1, wherein the control unit Analyzing the external data input through the external network interface unit, to give a different service level for each IP address of the destination included in the external data, and further provides a quality of service module for applying the service level differentially by the service level Router comprising a. The method of claim 1, wherein the control unit And a dynamic routing module for automatically overloading the routing table of the routing information storage unit when the overload occurs in the sub-network to eliminate the overload. The method of claim 1, wherein the control unit And a simple network management protocol support module which supports a simple network management protocol (SNMP) and monitors the simple network management protocol (SNMP) management data on a web. The method of claim 1, wherein the control unit And a web-based management module for providing a user interface for selecting and controlling the operation and function of the router on the web. In order to apply a predetermined bandwidth for each IP group, using a router including a plurality of queues to support the service for each bandwidth, routing data received through one Ethernet port for each bandwidth by bandwidth, A first step of setting a predetermined number of IP groups and setting bandwidths to be applied for each IP group by grouping IP addresses of constituent devices constituting any sub-network existing on the network; When data is input through an external communication network, a second process of filtering the data according to the destination address information of the data to identify an IP group including the destination address of the data; Selecting a queue for processing data with a bandwidth to be applied to the IP group identified in the second process among the plurality of queues, and storing the input data; And a fourth process of routing and outputting the stored data to a transmission line having a corresponding bandwidth. The method of claim 9, wherein the fourth process When the network supporting the bandwidth is overloaded, the type of packet data transmitted by the bandwidth is identified, and the priority is given to routing the packet data having high priority according to the priority of each type of the preset packet data. A routing method characterized by the above.