CN115866599A - Delay optimization method and device for 5G edge cloud - Google Patents

Abstract

The invention provides a time delay optimization method and a time delay optimization device for 5G edge cloud, wherein the method comprises the following steps: forwarding an uplink data packet to a second firewall through a first switch, wherein the first switch is arranged at a user side, and the second firewall is arranged at a server side; and filtering the downlink data packet forwarded by the second switch through a first firewall, and sending the filtered downlink data to the first switch, wherein the first firewall is arranged at a user side, and the second switch is arranged at a server side. The invention provides an asymmetrical networking scheme of uplink and downlink by optimizing networking on the uplink and downlink flow paths, reduces the equipment number of forwarding planes and further reduces the forwarding time delay.

Description

Delay optimization method and device for 5G edge cloud

technical field

The present invention relates to the field of core network technology, in particular to a delay optimization method and device for 5G edge cloud.

Background technique

At present, the fifth generation mobile communication technology (5th Generation Mobile Communication Technology, referred to as 5G) is becoming a hot spot that the society and the industry pay close attention to. Its ultra-low latency is an important feature of the 5G network, and it has become a must for scenarios such as the Internet of Vehicles and telemedicine. Function.

According to the regulations of 3GPP (3rd Generation Partnership Project), in the 5G Ultra Reliable Low Latency Communication (URLCC) scenario, the end-to-end delay of the bearer plane is required to be within 10ms, which has great impact on the networking and Deployment is demanding.

At present, the 5G sinking network built by various operators generally adopts the traditional network design scheme, uses data communication equipment, builds small data centers, and completes edge cloud deployment. However, in the existing edge cloud scenario, the data forwarding delay is still high, and the traditional networking cannot meet the business requirements of 5G ultra-low delay. Therefore, there is an urgent need for a delay optimization method and device for 5G edge cloud to solve the above problems.

Contents of the invention

The present invention provides a delay optimization method and device for 5G edge cloud, which is used to solve the technical problem that too many devices pass through the forwarding plane in the edge cloud scene, resulting in increased forwarding delay.

In the first aspect, the present invention provides a delay optimization method for 5G edge cloud, including:

Forwarding the uplink data packet to the second firewall through the first switch, wherein the first switch is set at the user end, and the second firewall is set at the server end;

Through the first firewall, the downlink data packets forwarded by the second switch are filtered, and the filtered downlink data is sent to the first switch, wherein the first firewall is set at the user end, and the second switch is set on the server side.

In one embodiment, the uplink data output port of the first switch includes a first inbound interface and a first outbound interface, and the downlink data input port of the first switch includes a second inbound interface and a second outbound interface interface, the downlink data input port of the first firewall includes a third inbound interface and a third outbound interface, and the downlink data output port of the first firewall includes a fourth inbound interface and a fourth outbound interface, wherein, The first inbound interface and the fourth inbound interface are interfaces that do not receive data packets, and the second outbound interface and the third outbound interface are interfaces that do not send data packets.

In one embodiment, before filtering the downlink data packets forwarded by the second switch through the first firewall, the method further includes:

Publishing the first routing information to the server through the first firewall, so that the second switch forwards the downlink data packet to the first firewall according to the first routing information.

In one embodiment, before forwarding the uplink data packet to the second firewall through the first switch, the method further includes:

The uplink data packet forwarded by the first switch is set as a trusted service.

In a second aspect, the present invention provides a delay optimization method for 5G edge cloud, including:

Forwarding the downlink data packet to the first firewall through the second switch, wherein the second switch is set at the server end, and the first firewall is set at the user end;

Through the second firewall, the uplink data packet forwarded by the first switch is filtered, and the filtered uplink data is sent to the second switch, wherein the second firewall is set on the server side, and the first switch is set on the user side.

In one embodiment, the uplink data input port of the second switch includes a fifth inbound interface and a fifth outbound interface, and the downlink data output port of the second switch includes a sixth inbound interface and a sixth outbound interface interface, the uplink data input port of the second firewall includes a seventh inbound interface and a seventh outbound interface, and the uplink data output port of the second firewall includes an eighth inbound interface and an eighth outbound interface, wherein, The sixth inbound interface and the eighth inbound interface are interfaces that do not receive data packets, and the fifth outbound interface and the seventh outbound interface are interfaces that do not send data packets.

In one embodiment, before filtering the uplink data packets forwarded by the first switch through the second firewall, the method further includes:

Publishing second routing information to the client through the second firewall, so that the first switch forwards the uplink data packet to the second firewall according to the second routing information.

In one embodiment, before the downlink data packet is forwarded to the first firewall through the second switch, the method further includes:

Set the downlink data packet forwarded by the second switch as a trusted service.

In a third aspect, the present invention provides a delay optimization device for 5G edge cloud, including:

The uplink data forwarding module is configured to forward the uplink data packet to the second firewall through the first switch, wherein the first switch is set at the user end, and the second firewall is set at the server end;

The downlink data receiving module is configured to filter the downlink data packets forwarded by the second switch through the first firewall, and send the filtered downlink data to the first switch, wherein the first firewall is set at the user end , the second switch is set at the server end.

In a fourth aspect, the present invention provides a delay optimization device for 5G edge cloud, including:

The downlink data forwarding module is configured to forward the downlink data packet to the first firewall through the second switch, wherein the second switch is set at the server end, and the first firewall is set at the user end;

The uplink data receiving module is configured to filter the uplink data packets forwarded by the first switch through the second firewall, and send the filtered uplink data to the second switch, wherein the second firewall is set on the server side , the first switch is set at the user end.

In a fifth aspect, the present invention provides a terminal, including a memory, a transceiver, and a processor;

The memory is used to store computer programs; the transceiver is used to send and receive data under the control of the processor; the processor is used to read the computer programs in the memory and perform the following operations:

Forwarding the uplink data packet to the second firewall through the first switch, wherein the first switch is set at the user end, and the second firewall is set at the server end;

Through the first firewall, the downlink data packets forwarded by the second switch are filtered, and the filtered downlink data is sent to the first switch, wherein the first firewall is set at the user end, and the second switch is set on the server side.

In a sixth aspect, the present invention provides a network device, including a memory, a transceiver, and a processor;

The memory is used to store computer programs; the transceiver is used to send and receive data under the control of the processor; the processor is used to read the computer programs in the memory and perform the following operations:

Forwarding the downlink data packet to the first firewall through the second switch, wherein the second switch is set at the server end, and the first firewall is set at the user end;

Through the second firewall, the uplink data packet forwarded by the first switch is filtered, and the filtered uplink data is sent to the second switch, wherein the second firewall is set on the server side, and the first switch is set on the user side.

In a seventh aspect, the present invention provides an electronic device, including a memory and a memory storing a computer program, and when the processor executes the program, the delay optimization for 5G edge cloud described in the first aspect or the second aspect is implemented method steps.

In an eighth aspect, the present invention provides a processor-readable storage medium, the processor-readable storage medium stores a computer program, and the computer program is used to enable the processor to execute the program described in the first aspect or the second aspect. Steps of a latency optimization method for 5G edge cloud.

The delay optimization method and device for 5G edge cloud provided by the present invention optimize the networking of uplink and downlink traffic paths, propose an asymmetric uplink and downlink networking scheme, reduce the number of devices on the forwarding plane, and further reduce forwarding delay.

Description of drawings

In order to more clearly illustrate the present invention or the technical solutions in the prior art, the accompanying drawings that need to be used in the description of the embodiments or the prior art will be briefly introduced below. Obviously, the accompanying drawings in the following description are the present invention. For some embodiments of the invention, those skilled in the art can also obtain other drawings based on these drawings without creative effort.

FIG. 1 is a schematic diagram of an uplink and downlink symmetrical networking in the prior art;

Fig. 2 is one of the flowcharts of the delay optimization method for 5G edge cloud provided by the present invention;

Fig. 3 is the second schematic flow diagram of the delay optimization method for 5G edge cloud provided by the present invention;

FIG. 4 is a schematic diagram of the principles of the uplink and downlink asymmetric networking provided by the present invention;

FIG. 5 is one of the structural schematic diagrams of the delay optimization device for 5G edge cloud provided by the present invention;

FIG. 6 is the second structural schematic diagram of the delay optimization device for 5G edge cloud provided by the present invention;

FIG. 7 is a schematic structural diagram of a terminal provided by the present invention;

FIG. 8 is a schematic structural diagram of a network device provided by the present invention;

FIG. 9 is a schematic diagram of the physical structure of the electronic device provided by the present invention.

Detailed ways

In order to make the purpose, technical solutions and advantages of the present invention clearer, the technical solutions in the present invention will be clearly and completely described below in conjunction with the accompanying drawings in the present invention. Obviously, the described embodiments are part of the embodiments of the present invention , but not all examples. Based on the embodiments of the present invention, all other embodiments obtained by persons of ordinary skill in the art without creative efforts fall within the protection scope of the present invention.

At present, the 5G sinking network built by various operators generally adopts the traditional network design scheme, and uses data communication equipment (such as data terminals, relay equipment, switches, etc.) to build small data centers and complete edge cloud deployment. FIG. 1 is a schematic diagram of an uplink and downlink symmetric network in the prior art. Refer to FIG. 1 . In the existing symmetric network, uplink and downlink data packets have the same path, and both need to pass through devices such as switches and firewalls. Most of these devices need to perform Layer 2 and Layer 3 forwarding (switches, routers), and Layer 4 to Layer 7 packet filtering (firewall). end-to-server), the uplink data packet passes through switch A on the client side, and forwards to firewall A on the client side through switch A, and then firewall A sends the filtered uplink data packet to firewall B on the server side, and passes through firewall B In the downlink direction (from the server side to the user side), the downlink data packet is forwarded to firewall B through switch B, and then firewall B sends the filtered downlink data packet to firewall A , and finally the downlink data packet is sent to switch A after being filtered by firewall A. From the above business flow, it can be seen that the end-to-end business has gone through 4 switches and 4 firewalls. The processing and forwarding delay of the switch is 0.5ms, and the filtering and forwarding delay of the firewall is 1.0ms. The existing edge cloud data center as a whole The resulting delay is calculated as:

System delay (symmetric) = 4*switch delay+4*firewall delay=4*0.5+4*1.0=6ms;

From the above formula, it can be seen that the delay caused by only a small data center is 6ms, which accounts for more than half of the entire end-to-end delay requirement. Because too many devices pass through the forwarding plane, the forwarding delay increases. The existing network It is difficult to meet the business requirements of 5G ultra-low latency.

Figure 2 is one of the flow diagrams of the delay optimization method for 5G edge cloud provided by the present invention. As shown in Figure 2, the present invention provides a delay optimization method for 5G edge cloud, including:

Step 201, forwarding the uplink data packet to the second firewall through the first switch, wherein the first switch is set at the user end, and the second firewall is set at the server end;

Step 202, filter the downlink data packets forwarded by the second switch through the first firewall, and send the filtered downlink data to the first switch, wherein the first firewall is set at the user end, and the second switch The second switch is set on the server side.

In the present invention, the client side is used as the execution subject for description. When the client needs to send data packets to the server, the switch on the client side (i.e. the first switch) will directly forward the uplink data packets to the firewall on the server side (i.e. the second firewall). The firewall (that is, the first firewall) does not need to filter the uplink data packet forwarded by the switch on the client side, and the first switch skips the first firewall and directly forwards the uplink data packet to the server side.

Further, when the client receives the downlink data packet sent by the server, the firewall on the client side filters the downlink data packet forwarded by the switch on the server side. Instead of filtering, it directly skips the firewall on the server side and is filtered by the firewall on the user side. Through the asymmetric networking of uplink and downlink, when forwarding uplink data packets, the firewall on the client side no longer filters and forwards, and when receiving downlink data packets, the firewall on the server side no longer performs filtering and forwarding, thus reducing two forwarding devices and reducing The delay impact brought by the forwarding equipment is eliminated.

The delay optimization method for 5G edge cloud provided by the present invention proposes an asymmetric uplink and downlink networking scheme by optimizing the uplink and downlink traffic paths, reducing the number of devices on the forwarding plane, thereby reducing the forwarding delay .

On the basis of the above embodiments, the uplink data output port of the first switch includes a first inbound interface and a first outbound interface, and the downlink data input port of the first switch includes a second inbound interface and a second an outbound interface, the downlink data input port of the first firewall includes a third inbound interface and a third outbound interface, and the downlink data output port of the first firewall includes a fourth inbound interface and a fourth outbound interface, Wherein, the first inbound interface and the fourth inbound interface are interfaces that do not receive data packets, and the second outbound interface and the third outbound interface are interfaces that do not send data packets.

In the present invention, the asymmetric networking mode is obtained through the construction of the above embodiments, and the interfaces of some devices can be configured as silent interfaces. Specifically, the uplink data output port of the first switch only needs to forward uplink data packets. Therefore, For the uplink data output port of the first switch, the outbound direction (out) of the output port, that is, the first outbound direction interface is responsible for the uplink service flow, but its inbound direction (in), that is, the first inbound direction interface does not receive traffic, and also That is to say, the first inbound direction interface is configured as a silent interface, so that the interface does not receive downlink data packets; or, in another embodiment, the port configured with a silent interface only receives two packets similar to BFD (Bidirectional Forwarding Detection). Layer link detection traffic and routing update messages. Therefore, ACL (Access Control Lists) filtering policies can be configured on the inbound direction of the port to only pass BFD and routing update messages. Correspondingly, for the downlink data input port of the first switch, since the port is mainly used to receive the downlink data packet sent by the server, therefore, the outbound direction of the downlink data input port of the first switch, that is, the second outbound The direction interface is set as a silent interface.

Further, the downlink data input port of the first firewall is mainly used to receive downlink data packets, therefore, the outbound direction of the downlink data input port of the first firewall, that is, the third outbound direction interface is set as a silent interface that does not send data packets ; Correspondingly, the downlink data output port of the first firewall is mainly used for forwarding downlink data packets, therefore, the inbound direction of the downlink data input port of the first firewall, that is, the fourth inbound direction interface is set to be silent for not receiving data packets interface.

On the basis of the foregoing embodiments, before filtering the downlink data packets forwarded by the second switch through the first firewall, the method further includes:

Publishing the first routing information to the server through the first firewall, so that the second switch forwards the downlink data packet to the first firewall according to the first routing information.

In the present invention, the asymmetric networking mode is constructed through the above-mentioned embodiment. Compared with the traditional symmetrical network, since there are 2 logical links between the client and the server, the routing configuration principle at this time An asymmetric route publication method is also adopted: that is, configure the uplink traffic to be sent from the first switch to the second firewall; configure the downlink traffic to be received by the first firewall to receive the data forwarded by the second switch B. On concrete route configuration and realization, can adopt static route configuration mode; Preferably, in one embodiment, also can adopt Border Gateway Protocol (Border Gateway Protocol, be called for short BGP) or other route configuration mode, need firewall to publish externally at this moment Routing, the switch does not publish routes to the outside world, but guides the traffic sent by the other party to pass through the firewall on the local side, that is, the first firewall on the client side publishes routes to the server side, so that the second switch on the server side forwards traffic to the first firewall. firewall.

On the basis of the above embodiments, before forwarding the uplink data packet to the second firewall through the first switch, the method further includes:

The uplink data packet forwarded by the first switch is set as a trusted service.

In the present invention, when the client sends a data packet to the server, the device on the client side regards the data packet to be sent as a trusted service, so that the data packet does not pass through the firewall on this side (i.e. the first firewall) Instead, it is quickly forwarded directly. Afterwards, the data packet is filtered by the firewall on the server side (that is, the second firewall), and is allowed or rejected according to business rules, which can realize security prevention and control and respective topology hiding.

Figure 3 is the second schematic flow diagram of the delay optimization method for 5G edge cloud provided by the present invention. As shown in Figure 3, the present invention provides a delay optimization method for 5G edge cloud, including:

Step 301, forwarding the downlink data packet to the first firewall through the second switch, wherein the second switch is set at the server end, and the first firewall is set at the user end;

Step 302, filter the uplink data packet forwarded by the first switch through the second firewall, and send the filtered uplink data to the second switch, wherein the second firewall is set on the server side, and the second A switch is set at the user end.

In the present invention, the server side is used as the execution subject for description. When the server needs to send data packets to the client, the switch on the server side (i.e. the second switch) will directly forward the downlink data packet to the firewall on the client side (i.e. the first firewall). The firewall (that is, the second firewall) does not need to filter the downlink data packets forwarded by the switch on the server side, and the second switch skips the second firewall and directly forwards the downlink data packets to the client.

Further, when the server receives the uplink data packet sent by the client, the firewall on the server side filters the uplink data packet forwarded by the switch on the client side. Instead of filtering, it directly skips the firewall on the client side and is filtered by the firewall on the server side. Through the uplink and downlink asymmetric networking, when forwarding downlink data packets, the server-side firewall no longer performs filtering and forwarding, and when receiving uplink data packets, the user-side firewall no longer performs filtering and forwarding, thereby reducing two forwarding devices and reducing The delay impact brought by the forwarding equipment is eliminated.

The delay optimization method for 5G edge cloud provided by the present invention proposes an asymmetric uplink and downlink networking scheme by optimizing the uplink and downlink traffic paths, reducing the number of devices on the forwarding plane, thereby reducing the forwarding delay .

On the basis of the above embodiment, the uplink data input port of the second switch includes the fifth inbound interface and the fifth outbound interface, and the downlink data output port of the second switch includes the sixth inbound interface and the sixth outbound interface. an outbound interface, the uplink data input port of the second firewall includes a seventh inbound interface and a seventh outbound interface, and the uplink data output port of the second firewall includes an eighth inbound interface and an eighth outbound interface, Wherein, the sixth inbound interface and the eighth inbound interface are interfaces that do not receive data packets, and the fifth outbound interface and the seventh outbound interface are interfaces that do not send data packets.

In the present invention, the asymmetric networking mode is obtained through the construction of the above embodiments, and the interfaces of some devices can be configured as silent interfaces. Specifically, the downlink data output port of the second switch only needs to forward the downlink data packets. Therefore, For the downlink data output port of the second switch, the outbound direction (out) of the output port, that is, the sixth outbound direction interface is responsible for downlink traffic, but its inbound direction (in), that is, the sixth inbound direction interface does not receive traffic, and also That is to say, the sixth inbound interface is configured as a silent interface, so that the interface does not receive uplink data packets; or, in another embodiment, the port configured with a silent interface only receives Layer 2 link detection traffic similar to BFD and routing update messages. Therefore, an ACL filtering policy can be configured on the inbound direction of this port to only pass BFD and routing update messages. Correspondingly, for the uplink data input port of the second switch, since this port is mainly used to receive the uplink data packet sent by the user end, the outbound direction of the uplink data input port of the second switch, that is, the fifth outbound The direction interface is set as a silent interface.

Further, the uplink data input port of the second firewall is mainly used to receive uplink data packets, therefore, the outbound direction of the uplink data input port of the second firewall, that is, the seventh outbound interface is set as a silent interface that does not send data packets ; Correspondingly, the uplink data output port of the second firewall is mainly used for forwarding uplink data packets, therefore, the inbound direction of the uplink data input port of the second firewall, that is, the eighth inbound direction interface is set to a silent state that does not receive data packets interface.

On the basis of the foregoing embodiments, before filtering the uplink data packets forwarded by the first switch through the second firewall, the method further includes:

Publishing second routing information to the client through the second firewall, so that the first switch forwards the uplink data packet to the second firewall according to the second routing information.

In the present invention, the firewall on the server side is required to publish routes to the outside world, and the switch does not publish routes to the outside world, and guides the traffic sent by the client to pass through the firewall on this side, that is, the second firewall on the server side side publishes routes to the user end, so that the user end The first switch on one side forwards the traffic to the second firewall.

On the basis of the above embodiments, before the downlink data packet is forwarded to the first firewall through the second switch, the method further includes:

Set the downlink data packet forwarded by the second switch as a trusted service.

In the present invention, when the data packet sent by the server end to the user end, the equipment on the server end side regards the data packet to be sent out as a trusted service, so that the data packet does not pass through the firewall of this side (i.e. the second firewall) Instead, it is quickly forwarded directly. Afterwards, the data packet is filtered by the firewall on the client side (that is, the first firewall), and is allowed or rejected according to business rules, which can realize security prevention and control and respective topology hiding.

In one embodiment, the delay optimization method for 5G edge cloud provided by the present invention is described as a whole. Figure 4 is a schematic diagram of the principle of the uplink and downlink asymmetric networking provided by the present invention, as shown in Figure 4, from the perspective of the user end, for the uplink business: the uplink data packet sent by the user end passes through switch A (i.e. the first switch ), it is directly sent to the firewall B on the server side (that is, the second firewall), and does not need to be detected and filtered by the firewall A (that is, the first firewall) on the local side. This is mainly because: the client is in the trusted zone (trust) of firewall A , while the server is in an untrusted zone (untrust). Since the data flow is sent from the internal network to the public network (from the trunst zone to the untrust zone), there is no need for filtering and detection in the internal network. For downlink business: the downlink data packet sent by the server end is directly sent to the firewall A of the user end after passing through the switch B (that is, the second switch), and is filtered and detected in the firewall A, and then enters the downlink channel after passing through the switch A.

According to the above analysis, the uplink route is: switch A (outbound direction of interface 2) to firewall B (inbound direction of interface 6, outbound direction of interface 7), and then to switch B (inbound direction of interface 8); the downlink route is: Switch B (outbound direction of interface 9) to firewall A (inbound direction of interface 5, outbound direction of interface 4), and then to switch A (inbound direction of interface 3). At this time, the number of forwarding hops brought by the edge cloud small data center is 4 switches and 2 firewalls. The overall delay calculation caused by the edge cloud data center based on the asymmetric networking mode is as follows:

System delay (asymmetric) = 4*switch delay+2*firewall delay=4*0.5+2*1.0=4ms;

Therefore, compared with the existing symmetrical uplink and downlink solutions, the asymmetric networking solution provided by the present invention can bring about 2 milliseconds of delay optimization, and the overall delay is shortened by 33%.

Further, in the asymmetric networking mode provided by the present invention, the interfaces of some devices can be configured as silent interfaces, as shown in Figure 4, mainly including interfaces 2 to 9, a total of 8 interfaces, for example: for interface 2, The outgoing direction (out) of this interface is responsible for the upstream business flow, but its incoming direction (in) does not accept traffic. Preferably, this interface 2 only receives BFD-like layer 2 link detection traffic and routing update messages. In the inbound direction, configure an ACL filtering policy to pass only BFD and routing update messages. Similarly, the inbound directions of interface 2, interface 4, interface 7, and interface 9 are configured as silent interfaces; the outbound directions of interface 3, interface 5, interface 6, and interface 8 are configured as silent interfaces.

For the routing configuration of the asymmetric networking model, compared with the existing symmetric network, as shown in Figure 4, since there are two logical links in the area A of the user end and the area B of the server end, at this time, the principle of routing configuration is also Use the asymmetric route publishing method: configure uplink traffic to be sent from switch A to firewall B (interface 2 to interface 6); configure downlink traffic to be sent from switch B to firewall A (interface 9 to interface 5). In terms of specific route configuration and implementation, static route configuration mode can be used, and the next route can be configured on switch A and switch B; BGP or other route configuration methods can also be used. The switch on the local side does not advertise routes, but guides the traffic from the peer end to pass through the firewall on the local side.

Further, for the data packet sent from the user end, the device on the user end regards the data packet as a trusted service, and directly and quickly forwards it without passing through the firewall on the local side; afterward, it is filtered by the server-side firewall (firewall B), and according to the business rules Make a pass or deny. The data packet sent from the server side is regarded as a trusted task by the device on the server side, and it is not directly forwarded through the firewall on the local side; at this time, it is filtered by the firewall A on the user side, and is allowed or rejected according to the business rules. Through the configuration of the above security policies, combined with routing and port settings, security prevention and control and respective topology hiding can be realized.

The uplink and downlink asymmetric edge cloud small data center networking mode provided by the present invention optimizes the end-to-end delay of 5G services.

The delay optimization device for 5G edge cloud provided by the present invention is described below, and the delay optimization device for 5G edge cloud described below and the delay optimization method for 5G edge cloud described above can be referred to each other .

Figure 5 is one of the structural schematic diagrams of the delay optimization device for 5G edge cloud provided by the present invention. As shown in Figure 5, the present invention provides a delay optimization device for 5G edge cloud, including uplink data forwarding Module 501 and downlink data receiving module 502, wherein the uplink data forwarding module 501 is used to forward the uplink data packet to the second firewall through the first switch, wherein the first switch is set at the user end, and the second firewall Set on the server side; the downlink data receiving module 502 is used to filter the downlink data packets forwarded by the second switch through the first firewall, and send the filtered downlink data to the first switch, wherein the first The firewall is set at the user end, and the second switch is set at the server end.

The delay optimization device for 5G edge cloud provided by the present invention proposes an asymmetric uplink and downlink networking scheme by optimizing the uplink and downlink traffic paths, reducing the number of devices on the forwarding plane, thereby reducing the forwarding delay .

Figure 6 is the second structural schematic diagram of the delay optimization device for 5G edge cloud provided by the present invention. As shown in Figure 6, the present invention provides a delay optimization device for 5G edge cloud, including downlink data forwarding Module 601 and uplink data receiving module 602, wherein the downlink data forwarding module 601 is used to forward the downlink data packet to the first firewall through the second switch, wherein the second switch is set at the server end, and the first firewall Set at the user end; the uplink data receiving module 602 is configured to filter the uplink data packets forwarded by the first switch through the second firewall, and send the filtered uplink data to the second switch, wherein the second The firewall is set at the server end, and the first switch is set at the user end.

The delay optimization device for 5G edge cloud provided by the present invention proposes an asymmetric uplink and downlink networking scheme by optimizing the uplink and downlink traffic paths, reducing the number of devices on the forwarding plane, thereby reducing the forwarding delay .

The terminal involved in the present invention may be a device that provides voice and/or data connectivity to users, a handheld device with a wireless connection function, or other processing devices connected to a wireless modem. In different systems, the names of the terminal equipment may be different. For example, in a 5G system, the terminal equipment may be called user equipment (User Equipment, UE).

The network equipment involved in the present invention may be a base station, and the base station may include multiple cells providing services for terminals. Depending on the specific application, the base station can also be called an access point, or it can be a device in the access network that communicates with the wireless terminal device through one or more sectors on the air interface, or other names.

FIG. 7 is a schematic structural diagram of a terminal provided by the present invention. As shown in FIG. 7 , the present invention also provides a terminal, which may include: a memory 710, a transceiver 720, and a processor 730;

The memory 710 is used to store computer programs; the transceiver 720 is used to send and receive data under the control of the processor 730; the processor 730 is used to read the computer programs in the memory 710 and perform the following operations:

Forwarding the uplink data packet to the second firewall through the first switch, wherein the first switch is set at the user end, and the second firewall is set at the server end;

Through the first firewall, the downlink data packets forwarded by the second switch are filtered, and the filtered downlink data is sent to the first switch, wherein the first firewall is set at the user end, and the second switch is set on the server side.

Wherein, in FIG. 7 , the bus architecture may include any number of interconnected buses and bridges, specifically one or more processors represented by the processor 730 and various circuits of the memory represented by the memory 710 are linked together. The bus architecture can also link together various other circuits such as peripherals, voltage regulators, and power management circuits, etc., which are well known in the art and thus will not be further described herein. The bus interface provides the interface. Transceiver 720 may be a plurality of elements, including a transmitter and a receiver, providing a means for communicating with various other devices over transmission media. For different user equipments, the user interface 740 may also be an interface capable of connecting externally and internally to required equipment.

The processor 730 is responsible for managing the bus architecture and general processing, and the memory 710 may store data used by the processor 730 when performing operations.

The processor 730 is configured to execute any one of the methods provided by the present invention according to the obtained executable instructions by calling the computer program stored in the memory 710 . The processor and memory may also be physically separated.

FIG. 8 is a schematic structural diagram of a network device provided by the present invention. As shown in FIG. 8 , the present invention also provides a network device, which may include: a memory 810, a transceiver 820, and a processor 830;

The memory 810 is used to store computer programs; the transceiver 820 is used to send and receive data under the control of the processor 830; the processor 830 is used to read the computer programs in the memory 810 and perform the following operations:

Forwarding the downlink data packet to the first firewall through the second switch, wherein the second switch is set at the server end, and the first firewall is set at the user end;

Through the second firewall, the uplink data packet forwarded by the first switch is filtered, and the filtered uplink data is sent to the second switch, wherein the second firewall is set on the server side, and the first switch is set on the user side.

Wherein, in FIG. 8 , the bus architecture may include any number of interconnected buses and bridges, specifically one or more processors represented by the processor 830 and various circuits of the memory represented by the memory 810 are linked together. The bus architecture can also link together various other circuits such as peripherals, voltage regulators, and power management circuits, etc., which are well known in the art and thus will not be further described herein. The bus interface provides the interface. Transceiver 820 may be a plurality of elements, including a transmitter and a receiver, providing a means for communicating with various other devices over transmission media. The processor 830 is responsible for managing the bus architecture and general processing, and the memory 810 may store data used by the processor 830 when performing operations.

What needs to be explained here is that the terminal and network equipment provided by the present invention can implement all the method steps implemented by the above method embodiments, and can achieve the same technical effect. The part and the beneficial effect are described in detail.

FIG. 9 is a schematic diagram of the physical structure of the electronic device provided by the present invention. As shown in FIG. 9, the electronic device may include: a processor (processor) 910, a communication interface (Communication Interface) 920, a memory (memory) 930 and a communication bus 940 , wherein, the processor 910 , the communication interface 920 , and the memory 930 communicate with each other through the communication bus 940 . The processor 910 may call the computer program in the memory 930 to execute the steps of the delay optimization method for 5G edge cloud, for example, including: forwarding the uplink data packet to the second firewall through the first switch, wherein the first A switch is set at the user end, and the second firewall is set at the server end; through the first firewall, the downlink data packets forwarded by the second switch are filtered, and the filtered downlink data is sent to the first switch, wherein , the first firewall is set at the user end, and the second switch is set at the server end;

Or, forward the downlink data packet to the first firewall through the second switch, wherein the second switch is set at the server end, and the first firewall is set at the user end; through the second switch, forward the first switch The uplink data packets are filtered, and the filtered uplink data is sent to the second switch, wherein the second firewall is set at the server end, and the first switch is set at the user end.

In addition, the above-mentioned logic instructions in the memory 930 may be implemented in the form of software function units and be stored in a computer-readable storage medium when sold or used as an independent product. Based on this understanding, the essence of the technical solution of the present invention or the part that contributes to the prior art or the part of the technical solution can be embodied in the form of a software product, and the computer software product is stored in a storage medium, including Several instructions are used to make a computer device (which may be a personal computer, a server, or a network device, etc.) execute all or part of the steps of the methods described in various embodiments of the present invention. The aforementioned storage medium includes: U disk, mobile hard disk, read-only memory (ROM, Read-Only Memory), random access memory (RAM, Random Access Memory), magnetic disk or optical disk and other media that can store program codes. .

On the other hand, the present invention also provides a computer program product, the computer program product includes a computer program stored on a non-transitory computer-readable storage medium, the computer program includes program instructions, and when the program instructions are executed by a computer When executing, the computer can execute the steps of the delay optimization method for 5G edge cloud provided by the above methods, for example, including: forwarding the uplink data packet to the second firewall through the first switch, wherein the first switch It is set at the user end, and the second firewall is set at the server end; through the first firewall, the downlink data packets forwarded by the second switch are filtered, and the filtered downlink data is sent to the first switch, wherein the The first firewall is set at the user end, and the second switch is set at the server end;

Or, forward the downlink data packet to the first firewall through the second switch, wherein the second switch is set at the server end, and the first firewall is set at the user end; through the second switch, forward the first switch The uplink data packets are filtered, and the filtered uplink data is sent to the second switch, wherein the second firewall is set at the server end, and the first switch is set at the user end.

On the other hand, the present invention also provides a processor-readable storage medium, the processor-readable storage medium stores a computer program, and the computer program is used to make the processor execute the methods provided by the above-mentioned embodiments. The steps include, for example: forwarding the uplink data packet to the second firewall through the first switch, wherein the first switch is set at the user end, and the second firewall is set at the server end; filtering the downlink data packets forwarded by the switch, and sending the filtered downlink data to the first switch, wherein the first firewall is set at the user end, and the second switch is set at the server end;

Or, forward the downlink data packet to the first firewall through the second switch, wherein the second switch is set at the server end, and the first firewall is set at the user end; through the second switch, forward the first switch The uplink data packets are filtered, and the filtered uplink data is sent to the second switch, wherein the second firewall is set at the server end, and the first switch is set at the user end.

The processor-readable storage medium can be any available medium or data storage device that can be accessed by a processor, including but not limited to magnetic storage (e.g., floppy disk, hard disk, magnetic tape, magneto-optical disk (MO), etc.), optical storage (e.g., CD, DVD, BD, HVD, etc.), and semiconductor memory (such as ROM, EPROM, EEPROM, non-volatile memory (NANDFLASH), solid-state disk (SSD)), etc.

The device embodiments described above are only illustrative, and the units described as separate components may or may not be physically separated, and the components shown as units may or may not be physical units, that is, they may be located in One place, or it can be distributed to multiple network elements. Part or all of the modules can be selected according to actual needs to achieve the purpose of the solution of this embodiment. It can be understood and implemented by those skilled in the art without any creative effort.

Through the above description of the implementations, those skilled in the art can clearly understand that each implementation can be implemented by means of software plus a necessary general hardware platform, and of course also by hardware. Based on this understanding, the essence of the above technical solution or the part that contributes to the prior art can be embodied in the form of software products, and the computer software products can be stored in computer-readable storage media, such as ROM/RAM, magnetic discs, optical discs, etc., including several instructions to make a computer device (which may be a personal computer, server, or network device, etc.) execute the methods described in various embodiments or some parts of the embodiments.

Finally, it should be noted that: the above embodiments are only used to illustrate the technical solutions of the present invention, rather than to limit them; although the present invention has been described in detail with reference to the foregoing embodiments, those of ordinary skill in the art should understand that: it can still be Modifications are made to the technical solutions described in the foregoing embodiments, or equivalent replacements are made to some of the technical features; and these modifications or replacements do not make the essence of the corresponding technical solutions deviate from the spirit and scope of the technical solutions of the various embodiments of the present invention.

Claims (14)

1. A delay optimization method for 5G edge cloud, characterized in that, comprising: Forwarding the uplink data packet to the second firewall through the first switch, wherein the first switch is set at the user end, and the second firewall is set at the server end; Through the first firewall, the downlink data packets forwarded by the second switch are filtered, and the filtered downlink data is sent to the first switch, wherein the first firewall is set at the user end, and the second switch is set on the server side. 2. The delay optimization method for 5G edge cloud according to claim 1, wherein the uplink data output port of the first switch includes a first inbound interface and a first outbound interface, and the first outbound interface The downlink data input port of a switch includes a second inbound interface and a second outbound interface, the downlink data input port of the first firewall includes a third inbound interface and a third outbound interface, and the downlink data port of the first firewall includes a third inbound interface and a third outbound interface. The data output port includes a fourth inbound interface and a fourth outbound interface, wherein the first inbound interface and the fourth inbound interface are interfaces that do not receive data packets, and the second outbound interface and the fourth inbound interface are interfaces that do not receive data packets. The third outgoing interface is an interface that does not send data packets. 3. The delay optimization method for 5G edge cloud according to claim 1, characterized in that, before the downlink data packet forwarded by the second switch is filtered through the first firewall, the method further comprises : Publishing the first routing information to the server through the first firewall, so that the second switch forwards the downlink data packet to the first firewall according to the first routing information. 4. The delay optimization method for 5G edge cloud according to claim 1, characterized in that, before the uplink data packet is forwarded to the second firewall by the first switch, the method further comprises: The uplink data packet forwarded by the first switch is set as a trusted service. 5. A delay optimization method for 5G edge cloud, characterized in that, comprising: Forwarding the downlink data packet to the first firewall through the second switch, wherein the second switch is set at the server end, and the first firewall is set at the user end; Through the second firewall, the uplink data packet forwarded by the first switch is filtered, and the filtered uplink data is sent to the second switch, wherein the second firewall is set on the server side, and the first switch is set on the user side. 6. The delay optimization method for 5G edge cloud according to claim 5, wherein the uplink data input port of the second switch includes a fifth inbound interface and a fifth outbound interface, and the first The downlink data output port of the second switch includes the sixth inbound interface and the sixth outbound interface, the uplink data input port of the second firewall includes the seventh inbound interface and the seventh outbound interface, and the uplink of the second firewall The data output port includes an eighth inbound interface and an eighth outbound interface, wherein the sixth inbound interface and the eighth inbound interface are interfaces that do not receive data packets, and the fifth outbound interface and the eighth inbound interface are interfaces that do not receive data packets. The seventh outbound interface is an interface that does not send data packets. 7. The delay optimization method for 5G edge cloud according to claim 5, characterized in that, before the uplink data packet forwarded by the first switch is filtered through the second firewall, the method further comprises : Publishing second routing information to the client through the second firewall, so that the first switch forwards the uplink data packet to the second firewall according to the second routing information. 8. The delay optimization method for 5G edge cloud according to claim 5, wherein, before the downlink data packet is forwarded to the first firewall by the second switch, the method further comprises: Set the downlink data packet forwarded by the second switch as a trusted service. 9. A delay optimization device for 5G edge cloud, characterized in that it comprises: The uplink data forwarding module is configured to forward the uplink data packet to the second firewall through the first switch, wherein the first switch is set at the user end, and the second firewall is set at the server end; The downlink data receiving module is configured to filter the downlink data packets forwarded by the second switch through the first firewall, and send the filtered downlink data to the first switch, wherein the first firewall is set at the user end , the second switch is set at the server end. 10. A delay optimization device for 5G edge cloud, characterized in that it comprises: The downlink data forwarding module is configured to forward the downlink data packet to the first firewall through the second switch, wherein the second switch is set at the server end, and the first firewall is set at the user end; The uplink data receiving module is configured to filter the uplink data packets forwarded by the first switch through the second firewall, and send the filtered uplink data to the second switch, wherein the second firewall is set on the server side , the first switch is set at the user end. 11. A terminal, characterized in that it includes a memory, a transceiver, and a processor; The memory is used to store computer programs; the transceiver is used to send and receive data under the control of the processor; the processor is used to read the computer programs in the memory and perform the following operations: Forwarding the uplink data packet to the second firewall through the first switch, wherein the first switch is set at the user end, and the second firewall is set at the server end; Through the first firewall, the downlink data packets forwarded by the second switch are filtered, and the filtered downlink data is sent to the first switch, wherein the first firewall is set at the user end, and the second switch is set on the server side. 12. A network device, comprising a memory, a transceiver, and a processor; The memory is used to store computer programs; the transceiver is used to send and receive data under the control of the processor; the processor is used to read the computer programs in the memory and perform the following operations: Forwarding the downlink data packet to the first firewall through the second switch, wherein the second switch is set at the server end, and the first firewall is set at the user end; Through the second firewall, the uplink data packet forwarded by the first switch is filtered, and the filtered uplink data is sent to the second switch, wherein the second firewall is set on the server side, and the first switch is set on the user side. 13. An electronic device, comprising a processor and a memory storing a computer program, characterized in that, when the processor executes the computer program, the 5G edge cloud system according to any one of claims 1 to 4 is implemented The steps of the delay optimization method, or the steps of realizing the delay optimization method for 5G edge cloud described in any one of claims 5 to 8. 14. A non-transitory computer-readable storage medium on which a computer program is stored, characterized in that, when the computer program is executed by a processor, it implements the 5G edge cloud as described in any one of claims 1 to 8. The steps of the delay optimization method.

Images