CN105338528A - Data packet redirecting method, system and AP (AccessPoint) - Google Patents

Abstract

The present invention is applicable to the technical field of wireless communication, and provides a data packet redirection method, system and AP. The method includes: the wireless network card driver processes the uplink data packet, and modifies the destination MAC of the uplink http data packet to the AP The MAC, the destination port is 9000, and the destination IP is the IP of the AP; the wireless network card driver processes the downlink data packet, and modifies the source MAC of the downlink http data packet to the original destination MAC in the uplink http data packet, and the source port is the uplink http The original destination port and source IP in the data packet are the original destination IP in the uplink http data packet. Compared with the existing method for implementing data packet redirection at the application layer, the present invention does not cause slow page data packet redirection when the number of users is large, and is more efficient than the existing method for implementing data packet redirection at the application layer. The method of packet redirection has been improved.

Description

Data packet redirection method, system and AP

technical field

The invention belongs to the technical field of wireless communication, and in particular relates to a data packet redirection method, system and AP.

Background technique

In the commercial wifi solution, the process of portal authentication for users will always involve the problem of data packet redirection. When the wireless user fails the portal authentication, the http data packet that originally accessed the Internet is redirected to the wireless access node (AccessPoint, AP), and then the AP responds to the http data packet with an error code of 302. In the response Contains the IP address of the portal server. According to the http protocol, the user will automatically access the portal server next.

However, in the process of realizing the present invention, the inventor found that the method of data packet redirection provided by the prior art is to use the iptables command to implement page data packet redirection at the application layer. When the number of users is relatively large, page data will appear. Slow packet redirection, resulting in poor user experience.

Contents of the invention

In view of this, the embodiment of the present invention provides a data packet redirection method, system and AP to solve the data packet redirection method provided by the prior art. Orientation is slow, resulting in poor user experience.

In the first aspect, a method for data packet redirection is provided. The method includes: the wireless network card driver processes the uplink data packet, and modifies the destination MAC of the uplink http data packet to be the MAC of the AP, the destination port is 9000, and the destination IP is the IP of the AP;

The wireless network card driver processes the downlink data packets, and modifies the source MAC of the downlink http data packets to the original destination MAC in the uplink http data packets, the source port to the original destination port in the uplink http data packets, and the source IP to the uplink http data packets The original destination IP in .

Further, before the destination MAC of the modified uplink http data packet is the MAC of the AP, the destination port is 9000, and the destination IP is the IP of the AP, the method also includes:

After the wireless network card driver receives the STA data packet from the air interface, the STA data packet is analyzed;

The wireless network card driver judges whether the wireless user has passed the portal authentication according to the parsing result, and if the authentication fails, then judges whether the STA data packet is a data packet in the whitelist.

Further, the source MAC of the modified downlink http data packet is the original destination MAC in the uplink http data packet, the source port is the original destination port in the uplink http data packet, and the source IP is the original destination IP in the uplink http data packet Previously, the method further included:

The wireless network card driver parses the Ethernet data frame from the wireless network card;

The wireless network card driver judges whether the wireless user has passed the portal authentication according to the parsing result, and if the authentication fails, then judges whether the Ethernet type data frame is a data packet in the whitelist.

Further, the uplink data packet is processed in the packet receiving function ieee80211_input driven by the wireless network card.

Further, the downlink data packets are processed in the packet sending function wlan_vap_send driven by the wireless network card.

In a second aspect, an AP is provided, the AP includes a wireless network card driver, and the wireless network card driver includes an uplink data packet processing unit and a downlink data packet processing unit;

The uplink data packet processing unit is configured to process the uplink data packet;

The uplink data packet processing unit includes:

The upstream modification module is used to modify the destination MAC of the upstream http data packet to be the MAC of the AP, the destination port to be 9000, and the destination IP to be the IP of the AP;

The downlink data packet processing unit is used to process downlink data packets;

The downlink data packet processing unit includes:

The downlink modification module is used to modify the source MAC of the downlink http data packet to be the original destination MAC in the uplink http data packet, the source port to be the original destination port in the uplink http data packet, and the source IP to be the original destination IP in the uplink http data packet .

Further, the uplink data packet processing unit also includes:

An uplink parsing module, configured to parse the STA data packets after receiving the STA data packets from the air interface;

The uplink judging module is used to judge whether the wireless user has passed the portal authentication according to the analysis result, and if the authentication fails, judge whether the STA data packet is a data packet in the white list.

Further, the downlink data packet processing unit also includes:

The downlink parsing module is used for parsing the Ethernet type data frame from the wireless network card;

The downlink judging module is used to judge whether the wireless user has passed the portal authentication according to the parsing result, and if the authentication fails, then judge whether the Ethernet type data frame is a data packet in the whitelist.

Further, the uplink data packet processing unit processes the uplink data packet in the packet receiving function ieee80211_input driven by the wireless network card.

Further, the downlink data packet processing unit processes the downlink data packet in the packet sending function wlan_vap_send driven by the wireless network card.

In a third aspect, a data packet redirection system is provided, including a user terminal and a portal server, and the system further includes the AP as described in the second aspect.

In the embodiment of the present invention, the method for data packet redirection is implemented in the driver program of the wireless network card, so it is a method for realizing data packet redirection at the driver layer, compared to the existing implementation of data packet redirection at the application layer With the method, when the number of users is relatively large, there will be no slow phenomenon of page data packet redirection, and the efficiency is improved to a certain extent compared with the existing method of realizing data packet redirection at the application layer.

Description of drawings

Fig. 1 is the realization flowchart of the method embodiment of data packet redirection of the present invention;

Fig. 2 is in the embodiment of the method for data packet redirection of the present invention, the implementation flowchart of wireless network card driver processing uplink data packet;

Fig. 3 is in the embodiment of the method for data packet redirection of the present invention, the implementation flowchart of wireless network card driver processing downlink data packet;

FIG. 4 is a structural block diagram of an AP embodiment of the present invention;

Fig. 5 is a schematic structural diagram of a system embodiment of data packet redirection in the present invention.

detailed description

In order to make the object, technical solution and advantages of the present invention clearer, the present invention will be further described in detail below in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described here are only used to explain the present invention, not to limit the present invention.

In the embodiment of the present invention, the wireless network card driver processes the uplink data packet, and modifies the destination MAC of the uplink http data packet to be the MAC of the AP, the destination port to be 9000, and the destination IP to be the IP of the AP, so that the uplink http data packet can be repeated. Directed to the AP; the wireless network card driver processes the downlink data packet, and modifies the source MAC of the downlink http data packet to the original destination MAC in the uplink http data packet, the source port is the original destination port in the uplink http data packet, and the source IP is The original destination IP in the upstream http data packet, the user can receive the redirected http data packet.

The realization of the present invention is described in detail below in conjunction with specific embodiment:

Embodiment one

Fig. 1 shows the implementation process of the method for redirecting data packets provided by Embodiment 1 of the present invention, which is described in detail as follows:

In step S101, the wireless network card driver processes the uplink data packet, and modifies the destination MAC of the uplink http data packet to be the MAC of the AP, the destination port to be 9000, and the destination IP to be the IP of the AP.

In the embodiment of the present invention, after the receiving function ieee80211_input of the wireless network card driver of the AP receives the STA data packet from the air interface, it analyzes the STA data packet, and judges whether the wireless user has passed the portal authentication according to the analysis result. Fail, then judge whether described STA data packet is the data packet in the white list, if not, then represent that described STA data packet is http data packet, modify the destination MAC of described http data packet to be the MAC of AP, destination port is 9000, and the destination IP is the IP of the AP, so that the http data packet can be redirected to the AP.

Wherein, the data packets in the whitelist include Address Resolution Protocol (ARP, Address Resolution Protocol) data packets, Dynamic Host Configuration Protocol (DHCP, Dynamic Host Configuration Protocol) data packets and Domain Name System (DNS, Domain Name System) data packets.

Among them, the packet receiving function ieee80211_input modifies the destination MAC of the http data packet in the Ethernet header of the http data packet to be the MAC of the AP, modifies the destination port of the http data packet in the TCP header of the http data packet to 9000, and modifies the destination port of the http data packet to 9000 in the Ethernet header of the http data packet. Modify the destination IP of the http packet in the header to the IP of the AP.

Specifically, the flow of the wireless network card driver processing the STA data packets from the air interface is shown in FIG. 2 . In Figure 2, after the wireless network card driver receives the STA data packet from the air interface, it first judges whether the portal authentication of the wireless user passes, if it passes, then does not perform subsequent processing, if not, then judges whether the STA data packet is It is a data packet in the whitelist, if it is, no subsequent processing will be performed, if not, it means that the STA data packet is an http data packet, and the destination MAC of the http data packet can be modified in the Ethernet header of the http data packet to be AP MAC, modify the destination port of the http data packet in the TCP header of the http data packet to 9000, modify the destination IP of the http data packet in the IP header of the http data packet to the IP of the AP, and continue the original wireless network card driver Receiving process.

In step S102, the wireless network card driver processes the downlink data packet, modifying the source MAC of the downlink http data packet to be the original destination MAC in the uplink http data packet, and the source port to be the original destination port and source IP in the uplink http data packet It is the original destination IP in the uplink http data packet.

In the embodiment of the present invention, the packet sending function wlan_vap_send of the wireless network card driver of the AP analyzes the Ethernet type data frame from the wireless network card, and judges whether the wireless user has passed the portal authentication according to the analysis result, and if the authentication fails, then judges whether the Ethernet type data frame is a data packet in the white list, if not, it means that the Ethernet type data frame is an http data packet, and the source MAC of the http data packet is modified to be the original destination MAC and source port in the uplink data packet The original destination port and source IP in the uplink data packet are the original destination IP in the uplink data packet, so that the wireless user can receive the redirected http data packet.

Wherein, the original destination MAC, original destination port and original destination IP are extracted from the uplink http data packet during the process of processing the uplink data packet, and the relevant information is saved and recorded according to the wireless user.

Specifically, the flow of the wireless network card driver processing the Ethernet data frame is shown in FIG. 3 . In Fig. 3, after the wireless network card driver receives the Ethernet type data frame from the wireless network card, it first judges whether the portal authentication of the wireless user passes, if it passes, then does not perform subsequent processing, if not, then judges the Ethernet type Whether the data frame is a data packet in the whitelist, if yes, no subsequent processing is performed, if not, it means that the ether type data frame is an http data packet, and the http data packet can be modified in the ether header of the http data packet The source MAC is the original destination MAC in the uplink http data packet, the source port is the original destination port in the uplink http data packet, the source IP is the original destination IP in the uplink http data packet, and continue the packet sending process of the original wireless network card driver , so that wireless users can receive redirected http data packets.

In this embodiment, the method for data packet redirection is implemented in the driver program of the wireless network card, so it is a method for realizing data packet redirection at the driver layer, compared to the existing method for realizing data packet redirection at the application layer , when the number of users is relatively large, there will be no slow phenomenon of page data packet redirection, and the efficiency is improved compared with the existing method of realizing data packet redirection at the application layer.

It should be understood that in the embodiment of the present invention, the sequence numbers of the above-mentioned processes do not mean the order of execution, and the execution order of each process should be determined by its function and internal logic, rather than the implementation process of the embodiment of the present invention. constitute any limitation.

Those of ordinary skill in the art can understand that all or part of the steps in the methods of the above-mentioned embodiments can be completed by instructing related hardware through a program, and the corresponding program can be stored in a computer-readable storage medium. Media, such as ROM/RAM, magnetic disk or optical disk, etc.

Embodiment two

FIG. 4 shows a specific structural block diagram of an AP provided in Embodiment 2 of the present invention. For ease of description, only parts related to the embodiment of the present invention are shown. The AP4 includes: a wireless network card driver 41 , and the wireless network card driver 41 includes: an uplink data packet processing unit 411 and a downlink data packet processing unit 412 .

Wherein, the uplink data packet processing unit 411 is configured to process the uplink data packet;

The uplink data packet processing unit 411 includes:

The upstream modification module is used to modify the destination MAC of the upstream http data packet to be the MAC of the AP, the destination port to be 9000, and the destination IP to be the IP of the AP;

The downlink data packet processing unit 412 is configured to process the downlink data packet;

The downlink data packet processing unit 412 includes:

The downlink modification module is used to modify the source MAC of the downlink http data packet to be the original destination MAC in the uplink http data packet, the source port to be the original destination port in the uplink http data packet, and the source IP to be the original destination IP in the uplink http data packet .

Further, the uplink data packet processing unit 411 also includes:

An uplink parsing module, configured to parse the STA data packets after receiving the STA data packets from the air interface;

The uplink judging module is used to judge whether the wireless user has passed the portal authentication according to the analysis result, if the authentication fails, then judge whether the STA data packet is a data packet in the whitelist, if the STA data packet is not the data in the whitelist package, then it can be determined that the STA data packet is an http data packet, and the uplink modification module can be called to modify the destination MAC of the uplink http data packet to be the MAC of the AP, the destination port to be 9000, and the destination IP to be the IP of the AP.

Further, the downlink data packet processing unit 412 also includes:

The downlink parsing module is used for parsing the Ethernet type data frame from the wireless network card;

The downlink judging module is used to judge whether the wireless user has passed the portal authentication according to the analysis result, if the authentication fails, then judge whether the Ethernet type data frame is a packet in the whitelist, if the Ethernet type data frame is not in the whitelist data packet, then it can be determined that the Ethernet type data frame is an http data packet, and the downlink modification module can be called to modify the source MAC of the downlink http data packet to be the original destination MAC in the uplink http data packet, and the source port is in the uplink http data packet The original destination port and source IP are the original destination IP in the uplink http data packet.

Further, the uplink data packet processing unit 411 processes the uplink data packet in the packet receiving function ieee80211_input driven by the wireless network card.

Further, the downlink data packet processing unit 412 processes the downlink data packet in the packet sending function wlan_vap_send driven by the wireless network card.

The AP provided in this embodiment of the present invention may be applied in the foregoing first corresponding method embodiment. For details, refer to the description of the foregoing first embodiment, which will not be repeated here.

Embodiment three

FIG. 5 shows a schematic structural diagram of a data packet redirection system provided by Embodiment 3 of the present invention. For ease of description, only parts related to the embodiment of the present invention are shown. The data packet redirection system includes a user terminal station and a portal server, and also includes the AP described in the second embodiment. When the wireless user portal authentication fails, modify the TCP header, IP header, and Ethernet header of the wireless user's uplink and downlink data in the AP's wireless network card driver. In this way, the http data that originally accessed the Internet is redirected to the AP, and then The AP responds to the http with an error code of 302, which contains the IP address of the portal server. According to the http protocol, the wireless user will automatically access the portal server next, thus realizing the common use in commercial wifi solutions. The function of popping up the portal page on the user terminal.

The data packet redirection system provided by the embodiment of the present invention can be applied in the aforementioned first corresponding method embodiment. For details, refer to the description of the aforementioned first embodiment, which will not be repeated here.

Those skilled in the art can appreciate that the units and algorithm steps of the examples described in conjunction with the embodiments disclosed herein can be implemented by electronic hardware, or a combination of computer software and electronic hardware. Whether these functions are executed by hardware or software depends on the specific application and design constraints of the technical solution. Those skilled in the art may use different methods to implement the described functions for each specific application, but such implementation should not be regarded as exceeding the scope of the present invention.

Those skilled in the art can clearly understand that for the convenience and brevity of the description, the specific working process of the above-described system, device and unit can refer to the corresponding process in the foregoing method embodiment, which will not be repeated here.

In the several embodiments provided in this application, it should be understood that the disclosed systems, devices and methods may be implemented in other ways. For example, the device embodiments described above are only illustrative. For example, the division of the units is only a logical function division. In actual implementation, there may be other division methods. For example, multiple units or components can be combined or May be integrated into another system, or some features may be ignored, or not implemented. In another point, the mutual coupling or direct coupling or communication connection shown or discussed may be through some interfaces, and the indirect coupling or communication connection of devices or units may be in electrical, mechanical or other forms.

The units described as separate components may or may not be physically separated, and the components shown as units may or may not be physical units, that is, they may be located in one place, or may be distributed to multiple network units. Part or all of the units can be selected according to actual needs to achieve the purpose of the solution of this embodiment.

In addition, each functional unit in each embodiment of the present invention may be integrated into one processing unit, each unit may exist separately physically, or two or more units may be integrated into one unit.

If the functions described above are realized in the form of software function units and sold or used as independent products, they can be stored in a computer-readable storage medium. Based on this understanding, the essence of the technical solution of the present invention or the part that contributes to the prior art or the part of the technical solution can be embodied in the form of a software product, and the computer software product is stored in a storage medium, including Several instructions are used to make a computer device (which may be a personal computer, a server, or a network device, etc.) execute all or part of the steps of the methods described in various embodiments of the present invention. The aforementioned storage medium includes: U disk, mobile hard disk, read-only memory (ROM, Read-OnlyMemory), random access memory (RAM, RandomAccessMemory), magnetic disk or optical disk and other media that can store program codes.

The above is only a specific embodiment of the present invention, but the scope of protection of the present invention is not limited thereto. Anyone skilled in the art can easily think of changes or substitutions within the technical scope disclosed in the present invention. Should be covered within the protection scope of the present invention. Therefore, the protection scope of the present invention should be based on the protection scope of the claims.

Claims (11)

1. the method that packet is redirected, it is characterized in that, described method comprises:

WLAN Device Driver processes upstream data bag, and the object MAC revising up http packet is the MAC of AP, destination interface is 9000, object IP is the IP of AP;

WLAN Device Driver processes downlink data packet, and the source MAC revising descending http packet is former object MAC in up http packet, source port is former destination interface in up http packet, source IP is former object IP in up http packet.

2. the method for claim 1, is characterized in that, the object MAC of the up http packet of described amendment be the MAC of AP, before destination interface is 9000, object IP is the IP of AP, described method also comprises:

WLAN Device Driver receives from after the STA packet of eating dishes without rice or wine, and resolves described STA packet;

According to analysis result, WLAN Device Driver judges that whether wireless user is by portal certification, if certification is not passed through, then judge that whether described STA packet is the packet in white list.

3. the method for claim 1, it is characterized in that, the source MAC of described amendment descending http packet be former object MAC in up http packet, before source port is former destination interface in up http packet, source IP is the former object IP in up http packet, described method also comprises:

WLAN Device Driver is resolved the EtherType Frame from wireless network card;

According to analysis result, WLAN Device Driver judges that whether wireless user is by portal certification, if certification is not passed through, then judge that whether described EtherType Frame is the packet in white list.

4. method as claimed in claim 2, is characterized in that, processes in the packet receiving function ieee80211_input that wireless network card drives to upstream data bag.

5. method as claimed in claim 3, is characterized in that, processes in the function wlan_vap_send that gives out a contract for a project that wireless network card drives to downlink data packet.

6. an AP, is characterized in that, described AP comprises WLAN Device Driver, and described WLAN Device Driver comprises upstream data bag processing unit and downlink data packet processing unit;

Described upstream data bag processing unit, for processing upstream data bag;

Described upstream data bag processing unit comprises:

Up modified module, for revising MAC that the object MAC of up http packet is AP, destination interface is 9000, object IP is the IP of AP;

Described downlink data packet processing unit, for processing downlink data packet;

Described downlink data packet processing unit comprises:

Descending modified module, for revising, the source MAC of descending http packet is former object MAC in up http packet, source port is former destination interface in up http packet, source IP is former object IP in up http packet.

7. AP as claimed in claim 6, it is characterized in that, described upstream data bag processing unit also comprises:

Up parsing module, for receiving from after the STA packet of eating dishes without rice or wine, resolves described STA packet;

Up judge module, for judging that according to analysis result whether wireless user is by portal certification, if certification is not passed through, then judges that whether described STA packet is the packet in white list.

8. AP as claimed in claim 6, it is characterized in that, described downlink data packet processing unit also comprises:

Descending parsing module, for resolving the EtherType Frame from wireless network card;

Descending judge module, for judging that according to analysis result whether wireless user is by portal certification, if certification is not passed through, then judges that whether described EtherType Frame is the packet in white list.

9. AP as claimed in claim 7, is characterized in that, processes in the packet receiving function ieee80211_input that described upstream data bag processing unit drives at wireless network card to upstream data bag.

10. AP as claimed in claim 8, is characterized in that, processes in the function wlan_vap_send that gives out a contract for a project that described downlink data packet processing unit drives at wireless network card to downlink data packet.

The system that 11. 1 kinds of packets are redirected, comprise user terminal and portal server, it is characterized in that, described system also comprises the AP as described in any one of claim 5 to 10.