CN105472018A - Flow detection method, load balancer, detection server and flow detection system - Google Patents
Flow detection method, load balancer, detection server and flow detection system Download PDFInfo
- Publication number
- CN105472018A CN105472018A CN201510981734.7A CN201510981734A CN105472018A CN 105472018 A CN105472018 A CN 105472018A CN 201510981734 A CN201510981734 A CN 201510981734A CN 105472018 A CN105472018 A CN 105472018A
- Authority
- CN
- China
- Prior art keywords
- load
- detection
- detection server
- server
- flow
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Pending
Links
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L67/00—Network arrangements or protocols for supporting network services or applications
- H04L67/01—Protocols
- H04L67/10—Protocols in which an application is distributed across nodes in the network
- H04L67/1001—Protocols in which an application is distributed across nodes in the network for accessing one among a plurality of replicated servers
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L43/00—Arrangements for monitoring or testing data switching networks
- H04L43/08—Monitoring or testing based on specific metrics, e.g. QoS, energy consumption or environmental parameters
Landscapes
- Engineering & Computer Science (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- Environmental & Geological Engineering (AREA)
- Data Exchanges In Wide-Area Networks (AREA)
Abstract
The invention provides a flow detection method, a load balancer, a detection server and a flow detection system, and belongs to the technical field of computers. The method comprises the following steps: acquiring flow data; determining load of each detection server; selecting the detection server with the least load from all of the detection servers; and sending the flow data to the detection server with the least load to enable the detection server with the least load to perform flow detection on first flow data. According to the method, after the flow data are acquired, the detection server with the least load is selected from the all detection servers, then the flow data are sent to the detection server with the least load to enable the detection server with the least load to perform flow detection on the first flow data, and the least the load is, the best the processing state of the detection server is, so that a performance bottleneck problem during operation of a selected detection server is avoided by selecting the detection server with the best processing state to detect the flow data, and the throughput is improved.
Description
Technical field
The present invention relates to field of computer technology, particularly relate to the method for flow detection, load equalizer, detection server and system.
Background technology
Along with network security problem takes place frequently, carry out abnormal traffic detection by detection server and receive much concern.The current network bandwidth constantly increases, and detects the limited capacity of server, needs the concurrent collaborative work of multiple detection servers, corresponding detection server can be selected to carry out abnormal traffic detection for data on flows by load equalizer.
The method of existing flow detection, after load equalizer gets data on flows, polling mode or random fashion is adopted to select one to detect server, the data on flows got is sent to the detection server of selection, by the detection server selected, abnormal traffic detection is carried out to the data on flows got.Wherein, poll selects the method detecting server to be that order wheel turns the detection server selecting process data on flows in the server.Stochastic choice detect the method for server be in the server randomly, the equiprobable detection server selecting process flow.
Above-mentioned two kinds of method polls or random selection detect server, but in actual applications, need data on flows to be processed different, shared resource is different at every turn, makes to detect the actual available resources of server different.Therefore, the detection server selected by said method load equalizer may be one and process busy server, such as CPU or memory usage are very high, to such an extent as to carry out abnormal traffic detection face performance bottleneck problem by the detection server selected, cause the throughput of whole system to decline.
Summary of the invention
For solving the problem, the embodiment of the present invention proposes a kind of method of flow detection, load equalizer, detection server and system.
First aspect, embodiments provides a kind of method of flow detection, comprising:
Obtain first flow data;
Determine the load of each detection server;
The detection server of least-loaded is selected from the load of each detection server;
Described first flow data are sent to the detection server of described least-loaded, to make the detection server of described least-loaded, flow detection are carried out to described first flow data.
Preferably, the described load determining each detection server, comprising:
The load information reported according to each detection server determines the load of each detection server, and described load information comprises following at least one: session number, processed flow bag, central processor CPU utilance, memory usage, the response speed connected, transmission rate.
Preferably, the described load information reported according to each detection server also comprises before determining the load of each detection server:
Receive the load information of each detection server periodic report.
Preferably, the described load information reported according to each detection server determines the load of each detection server, comprising:
Determine the influence coefficient of each load information, the influence coefficient sum of described each load information is 1;
The load value of each detection server is determined according to following formula:
Using the load of the load value of each detection server as each detection server.
Second aspect, embodiments provides a kind of load equalizer, comprising:
Acquisition module, for obtaining first flow data;
Determination module, for determining the load of each detection server;
Select module, for selecting the detection server of least-loaded in the load of each detection server determined from determination module;
Sending module, the first flow data for being obtained by described acquisition module are sent to the detection server of the least-loaded of described selection model choice, carry out flow detection to make the detection server of described least-loaded to described first flow data.
Preferably, described determination module, the load information reported for receiving each detection server determines the load of each detection server, and described load information comprises following at least one: session number, processed flow bag, central processor CPU utilance, memory usage, the response speed connected, transmission rate.
Preferably, described load equalizer, also comprises:
Receiver module, for receiving the load information of each detection server periodic report.
Preferably, described determination module, comprising:
First determines subelement, and for determining the influence coefficient of each load information, the influence coefficient sum of described each load information is 1;
Second determines subelement, for determining the load value of each detection server according to following formula:
3rd determines subelement, for determining the load of load value as each detection server of each detection server that subelement is determined using described second.
The third aspect, embodiments provides a kind of method of flow detection, comprising:
Cycle obtains load information;
Load information is reported to load equalizer, to make described load equalizer according to the detection server detecting the load information selection process first flow data that server sends, the detection server that described first flow data are sent to selection is carried out flow detection.
Preferably, the described cycle also comprises before obtaining load information:
Detect and memory load information, described load information comprises following at least one: session number, processed flow bag, central processor CPU utilance, memory usage, the response speed connected, transmission rate.
Preferably, perform described detection and before memory load information Step, also comprise:
Determine whether the second data on flows receiving load equalizer transmission;
After determining to receive described second data on flows, perform described detection and memory load information Step.
Preferably, described load information is reported to load equalizer after, also comprise:
Receive the first flow data that described load equalizer sends;
Flow detection is carried out to described first flow data.
Fourth aspect, embodiments provides a kind of detection server, comprising:
Acquisition module, obtains load information for the cycle;
Periodic report module, load information for being obtained by described acquisition module reports to load equalizer, to make described load equalizer according to the detection server detecting the load information selection process first flow data that server sends, the detection server that described first flow data are sent to selection is carried out flow detection.
Preferably, described detection server, also comprises:
Detect memory module, detect and memory load information, described load information comprises following at least one: session number, processed flow bag, central processor CPU utilance, memory usage, the response speed connected, transmission rate.
Preferably, described detection server, also comprises:
Determination module, for determining whether the second data on flows receiving load equalizer transmission;
Described detection memory module, for determine to receive described second data on flows when determination module after, detects and memory load information.
Preferably, described detection server, also comprises:
Receiver module, for receiving the first flow data that described load equalizer sends;
Flow detection module, carries out flow detection for the first flow data received described receiver module.
5th aspect, embodiments provides a kind of system of flow detection, comprising: load equalizer and multiple detection server;
Wherein, the load equalizer that described load equalizer provides as above-mentioned second aspect, the detection server that described detection server provides as above-mentioned fourth aspect.
Beneficial effect is as follows:
After obtaining data on flows, from the load of each detection server, select the detection server of least-loaded; Data on flows is sent to the detection server of least-loaded, to make the detection server of least-loaded, flow detection is carried out to first flow data, and load is less, the treatment state detecting server is more excellent, therefore, the present embodiment selects the detection server for the treatment of state optimum to detect data on flows, and the detection server avoided by selecting carries out operating faced performance bottleneck problem, promotes throughput
Accompanying drawing explanation
Below with reference to accompanying drawings specific embodiments of the invention are described, wherein:
Fig. 1 shows the implementation environment schematic diagram of the method for a kind of flow detection provided in an embodiment of the present invention;
Fig. 2 shows the schematic flow sheet of the method for the first flow detection provided in the another kind of embodiment of the present invention;
Fig. 3 shows the schematic flow sheet of the method for the second flow detection provided in the another kind of embodiment of the present invention;
Fig. 4 shows the schematic flow sheet of the method for the third flow detection provided in the another kind of embodiment of the present invention;
A kind of load equalizer that Fig. 5 shows to be provided in the another kind of embodiment of the present invention receives the schematic flow sheet of the load information of each detection server periodic report;
A kind of load equalizer that Fig. 6 shows to be provided in the another kind of embodiment of the present invention is selected to detect the schematic flow sheet that server detects data on flows;
Fig. 7 shows the structural representation of a kind of load equalizer provided in the another kind of embodiment of the present invention;
Fig. 8 shows the structural representation of the another kind of load equalizer provided in the another kind of embodiment of the present invention;
Fig. 9 shows the structural representation of a kind of determination module provided in the another kind of embodiment of the present invention;
Figure 10 shows the structural representation of the first the detection server provided in the another kind of embodiment of the present invention;
The second that Figure 11 shows to be provided in the another kind of embodiment of the present invention detects the structural representation of server;
Figure 12 shows the structural representation of the third detection server provided in the another kind of embodiment of the present invention;
Figure 13 shows the structural representation of the 4th kind of detection server provided in the another kind of embodiment of the present invention;
Figure 14 shows the structural representation of the system of a kind of flow detection provided in the another kind of embodiment of the present invention.
Embodiment
Clearly understand to make technical scheme of the present invention and advantage, below in conjunction with accompanying drawing, exemplary embodiment of the present invention is described in more detail, obviously, described embodiment is only a part of embodiment of the present invention, instead of all embodiments is exhaustive.And when not conflicting, the embodiment in this explanation and the feature in embodiment can be combined with each other.
See Fig. 1, the implementation environment schematic diagram of the method for the flow detection provided for the embodiment of the present invention.This implementation environment comprises load equalizer 101 and multiple detection server 102.
Wherein, load equalizer 101 can apply the method for the load equalizer that the embodiment of the present invention provides after acquisition data on flows, the detection server of least-loaded is selected from the load of each detection server 102, data on flows is sent to the detection server of this least-loaded, to make the detection server of least-loaded, flow detection is carried out to data on flows;
Detect server 102 and obtain load information for the cycle, and load information is reported to load equalizer.And after the data on flows receiving load equalizer 101 transmission, flow detection is carried out to data on flows.
In conjunction with above-mentioned implementation environment, embodiment shown in Figure 2, present embodiments provides a kind of method of flow detection, and the method flow that the present embodiment provides is specific as follows:
201: obtain first flow data;
202: the load determining each detection server;
Alternatively, determine the load of each detection server, comprising:
The load information reported according to each detection server determines the load of each detection server, and load information comprises following at least one: session number, processed flow bag, central processor CPU utilance, memory usage, the response speed connected, transmission rate.
Alternatively, the load information reported according to each detection server also comprises before determining the load of each detection server:
Receive the load information of each detection server periodic report.
Alternatively, the load information reported according to each detection server determines the load of each detection server, comprising:
Determine the influence coefficient of each load information, the influence coefficient sum of each load information is 1;
The load value of each detection server is determined according to following formula:
Using the load of the load value of each detection server as each detection server.
203: the detection server selecting least-loaded from the load of each detection server;
204: detection server first flow data being sent to least-loaded, to make the detection server of least-loaded, flow detection is carried out to first flow data.
The present embodiment additionally provides the method for another kind of flow detection, and see Fig. 3, the method flow that the present embodiment provides is specific as follows:
301: the cycle obtains load information;
Alternatively, the cycle also comprises before obtaining load information:
Detect and memory load information, load information comprises following at least one: session number, processed flow bag, central processor CPU utilance, memory usage, the response speed connected, transmission rate.
Alternatively, perform detection and before memory load information Step, also comprise:
Determine whether the second data on flows receiving load equalizer transmission;
After determining to receive the second data on flows, perform and detect and memory load information Step.
302: load information is reported to load equalizer, to make load equalizer according to the detection server detecting the load information selection process first flow data that server sends, detection server first flow data being sent to selection carries out flow detection.
Alternatively, after load information is reported to load equalizer, also comprise:
The first flow data that balancing received load device sends;
Flow detection is carried out to first flow data.
Beneficial effect:
After obtaining data on flows, from the load of each detection server, select the detection server of least-loaded; Data on flows is sent to the detection server of least-loaded, to make the detection server of least-loaded, flow detection is carried out to first flow data, and load is less, the treatment state detecting server is more excellent, therefore, the present embodiment selects the detection server for the treatment of state optimum to detect data on flows, and the detection server avoided by selecting carries out operating faced performance bottleneck problem, promotes throughput.
In conjunction with above-mentioned implementation environment, embodiment shown in Figure 2, present embodiments provides a kind of method of flow detection, and the method flow that the present embodiment provides is specific as follows:
401: detect server and detect and memory load information;
Wherein, load information describes the disposal ability detecting server.
The particular content of load information takes the circumstances into consideration to determine according to practical situations, as long as the disposal ability detecting server can be described, include but not limited to following at least one: session number, processed flow bag, CPU (CentralProcessingUnit, central processing unit) utilance, memory usage, the response speed connected, transmission rate.When data on flows is file type, the contents such as the file size of residue detection can also be added.
In addition, the present embodiment does not limit the concrete grammar of memory load information, such as:
Alternatively, perform and detect and before memory load information Step, also comprise: detect server maintenance load information table, by the load information that detects stored in load information table.
It should be noted that, the non-step that at every turn all will perform of this step.Only when the load information detecting server changes, or just perform step 401 detection and memory load information after reaching predetermined period of time, the up-to-date disposal ability of this detection server can be reflected to make the load information of storage.
The present embodiment does not limit triggering the actual conditions performing step 401, such as: determine whether the second data on flows receiving load equalizer transmission; After determining to receive the second data on flows, perform step 401 and detect and memory load information Step.Again such as, perform step 401 every preset duration to detect and memory load information Step.
402: detect server cycle acquisition load information, load information is reported to load equalizer;
Wherein, load information is for making load equalizer according to the detection server detecting the load information selection process first flow data that server sends, and detection server first flow data being sent to selection carries out flow detection.
The present embodiment does not limit the concrete grammar that the cycle obtains load information.If the load information that each time detects by detection server is in step 401 stored in load information table, then this step cycle reads the up-to-date load information in load information table.
The step that this step neither all will perform at every turn, when can work as report cycle arrival, perform step 402, the cycle obtains load information, and load information is reported to load equalizer.If load equalizer sends to each detection server cycle and detects trigger message, then detect after server receives this detection trigger message and perform step 402, the cycle obtains load information, and load information is reported to load equalizer.The present embodiment does not limit triggering the actual conditions performing step 402.
403: load equalizer receives the load information of each detection server periodic report;
The step that this step neither all will perform at every turn, only just triggers when detecting when server performs step 402 periodic report load information the load information that the reception of execution step 403 detects server periodic report.
If multiple detection server reports the cycle of respective load information different, then, whenever having detection server load information reporting, equal trigger load equalizer performs step 403 and receives its load information reported.
In addition, after the load information receiving each detection server periodic report, the load information of each detection server periodic report can also be stored.Concrete storage means includes but not limited to: safeguard a load information table, is all stored in this load information table by the load information of each detection server periodic report.
Fig. 5 shows a kind of concrete condition performing step 403, when there being load information to arrive, detecting its load information, being updated in load information table by the load information detected.
404: load equalizer obtains first flow data;
This step can be realized by existing flow acquisition methods, and the present embodiment does not limit the concrete methods of realizing obtaining first flow data.
405: load equalizer determines the load of each detection server;
Concrete, load equalizer determines the load of each detection server according to the load information that each detection server reports.
When the load information reported according to each detection server determines that the step of the load of each detection server is specifically implemented, can be realized by following three steps.
Step one: the influence coefficient determining each load information;
Wherein, influence coefficient describes the influence degree of load information to detection server processes ability, and the influence coefficient sum of each load information is 1.
The influence coefficient of each load information should according to concrete traffic environment by experiment analysis and comparison determine.
Step 2: the load value determining each detection server according to following formula (that is, load function L (n)):
Wherein, load value describes the treatment state detecting server, and load value is less, and the treatment state detecting server is more excellent.If load equalizer performs repeatedly step 403 and receives the repeatedly load information that same detection server reports at different time, then the value of the load information in this step is the value of the load information of up-to-date acquisition.
In addition, to determine the implementation of the load value of each detection server in order to clearer description according to the value of the load information of each detection server, be session number below with load information, processed flow bag number, CPU usage, memory usage be described for example.
If the session number detecting the up-to-date moment t of server n is S (n, t);
The processed flow bag number detecting server n t of up-to-date moment is P (n, t);
The CPU usage detecting the up-to-date moment t of server n is U (n, t);
The memory usage detecting the up-to-date moment t of server n is M (n, t);
Load information is the influence coefficient of session number is a1, and the influence coefficient of processed flow bag number is a2, and the influence coefficient of CPU usage is a3, and the influence coefficient of memory usage is a4, then:
Load function L (n, t)=a1*S (n, t)+a2*P (n, t)+a3*U (n, t)+a4*M (n, t).
In addition, for the ease of management with search, can by the load value of each detection server determined stored in load information table.
Step 3: using the load of the load value of each detection server as each detection server.
406: load equalizer selects the detection server of least-loaded from the load of each detection server;
Concrete, select the detection server that L (n, t) is minimum.
Due to load value L (n, t) treatment state detecting server can be described, and load value is less, the treatment state detecting server is more excellent, therefore L (n, t) minimum detection server is also the detection server for the treatment of state optimum, and then the detection server avoided by selecting carries out operating faced performance bottleneck problem, causes throughput to decline.
407: first flow data are sent to the detection server of least-loaded by load equalizer;
Fig. 6 shows the implementation of load equalizer.
1, determined whether that data on flows to be detected arrives?
2, when there being data on flows to be detected to arrive, then travel through load information table, obtain load information value lowest number I;
3, data on flows to be detected is sent to No. 1 and detects server.
408: detect the first flow data that server balancing received load device sends, and flow detection is carried out to first flow data.
The implementation method of this step is existing method, is not described in detail at this.
Beneficial effect:
After obtaining data on flows, from the load of each detection server, select the detection server of least-loaded; Data on flows is sent to the detection server of least-loaded, to make the detection server of least-loaded, flow detection is carried out to first flow data, and load is less, the treatment state detecting server is more excellent, therefore, the present embodiment selects the detection server for the treatment of state optimum to detect data on flows, and the detection server avoided by selecting carries out operating faced performance bottleneck problem, promotes throughput.
Based on same inventive concept, embodiment shown in Figure 7, present embodiments provides a kind of load equalizer, and the principle of dealing with problems due to load equalizer is similar to a kind of method of flow detection, therefore the enforcement of load equalizer see the enforcement of method, can repeat part and repeats no more.
See Fig. 7, this load equalizer, comprising:
Acquisition module 701, for obtaining first flow data;
Determination module 702, for determining the load of each detection server;
Select module 703, for selecting the detection server of least-loaded in the load of each detection server determined from determination module 702;
Sending module 704, the first flow data for being obtained by acquisition module 701 are sent to the detection server of the least-loaded selecting module 703 to select, and carry out flow detection to make the detection server of least-loaded to first flow data.
Preferably, determination module 702, the load information reported for receiving each detection server determines the load of each detection server, and load information comprises following at least one: session number, processed flow bag, central processor CPU utilance, memory usage, the response speed connected, transmission rate.
See Fig. 8, this load equalizer, also comprises:
Receiver module 705, for receiving the load information of each detection server periodic report.
See Fig. 9, determination module 702, comprising:
First determines subelement 7021, and for determining the influence coefficient of each load information, the influence coefficient sum of each load information is 1;
Second determines subelement 7022, for determining the load value of each detection server according to following formula:
3rd determines subelement 7023, for determining the load of load value as each detection server of each detection server that subelement 7022 is determined using second.
Beneficial effect is as follows:
Load equalizer selects the detection server of least-loaded after obtaining data on flows from the load of each detection server; Data on flows is sent to the detection server of least-loaded, to make the detection server of least-loaded, flow detection is carried out to first flow data, and load is less, the treatment state detecting server is more excellent, therefore, the present embodiment selects the detection server for the treatment of state optimum to detect data on flows, and the detection server avoided by selecting carries out operating faced performance bottleneck problem, promotes throughput.
Based on same inventive concept, embodiment shown in Figure 10, present embodiments provide a kind of detection server, the principle of dealing with problems due to detection server is similar to a kind of method of flow detection, therefore the enforcement detecting server see the enforcement of method, can repeat part and repeats no more.
See Figure 10, this detection server, comprising:
Acquisition module 1001, obtains load information for the cycle;
Periodic report module 1002, load information for being obtained by acquisition module 1001 reports to load equalizer, to make load equalizer according to the detection server detecting the load information selection process first flow data that server sends, detection server first flow data being sent to selection carries out flow detection.
See Figure 11, this detection server, also comprises:
Detect memory module 1003, detect and memory load information, load information comprises following at least one: session number, processed flow bag, central processor CPU utilance, memory usage, the response speed connected, transmission rate.
See Figure 12, this detection server, also comprises:
Determination module 1004, for determining whether the second data on flows receiving load equalizer transmission;
Wherein, detect memory module 1003, after determining to receive the second data on flows when determination module 1004, detect and memory load information.
See Figure 13, this detection server, also comprises:
Receiver module 1005, for the first flow data that balancing received load device sends;
Flow detection module 1006, carries out flow detection for the first flow data received receiver module 1005.
Beneficial effect is as follows:
Cycle obtains load information, and load information is reported to load equalizer, after obtaining data on flows, selects the detection server of least-loaded from the load of each detection server to make load equalizer; Detection server data on flows being sent to least-loaded carries out flow detection, and load is less, the treatment state detecting server is more excellent, therefore, the present embodiment selects the detection server for the treatment of state optimum to detect data on flows, the detection server avoided by selecting carries out operating faced performance bottleneck problem, promotes throughput.
Based on same inventive concept, embodiment shown in Figure 14, present embodiments provides a kind of system of flow detection, the method for flow detection of this system for performing above-described embodiment and providing, and this system comprises:
Load equalizer 1401 and multiple detection server 1402;
Wherein, the load equalizer that the embodiment of load equalizer 1401 as shown in above-mentioned Fig. 7, Fig. 8 or Fig. 9 provides, refers to the embodiment shown in above-mentioned Fig. 7, Fig. 8 or Fig. 9;
Detect the load equalizer that the embodiment of server 1402 as shown in above-mentioned Figure 10, Figure 11, Figure 12 or Figure 13 provides, refer to the embodiment shown in above-mentioned Figure 10, Figure 11, Figure 12 or Figure 13.
Beneficial effect is as follows:
After obtaining data on flows, from the load of each detection server, select the detection server of least-loaded; Data on flows is sent to the detection server of least-loaded, to make the detection server of least-loaded, flow detection is carried out to first flow data, and load is less, the treatment state detecting server is more excellent, therefore, the present embodiment selects the detection server for the treatment of state optimum to detect data on flows, and the detection server avoided by selecting carries out operating faced performance bottleneck problem, promotes throughput.
In above-described embodiment, existing Functional Unit device blocks all can be adopted to implement.Such as, processing module can adopt existing data processing components and parts, at least, the location-server adopted just possesses realize this Functional Unit device in existing location technology; As for receiver module, be then the components and parts that equipment that any one possesses signal transfer functions all possesses; Meanwhile, what A, n calculation of parameter, intensity adjustment etc. that processing module is carried out adopted is all existing technological means, and those skilled in the art design and develop can realize through accordingly.
For convenience of description, each several part of the above device is divided into various module or unit to describe respectively with function.Certainly, the function of each module or unit can be realized in same or multiple software or hardware when implementing of the present invention.
Those skilled in the art should understand, embodiments of the invention can be provided as method, system or computer program.Therefore, the present invention can adopt the form of complete hardware embodiment, completely software implementation or the embodiment in conjunction with software and hardware aspect.And the present invention can adopt in one or more form wherein including the upper computer program implemented of computer-usable storage medium (including but not limited to magnetic disc store, CD-ROM, optical memory etc.) of computer usable program code.
The present invention describes with reference to according to the flow chart of the method for the embodiment of the present invention, equipment (system) and computer program and/or block diagram.Should understand can by the combination of the flow process in each flow process in computer program instructions realization flow figure and/or block diagram and/or square frame and flow chart and/or block diagram and/or square frame.These computer program instructions can being provided to the processor of all-purpose computer, special-purpose computer, Embedded Processor or other programmable data processing device to produce a machine, making the instruction performed by the processor of computer or other programmable data processing device produce device for realizing the function of specifying in flow chart flow process or multiple flow process and/or block diagram square frame or multiple square frame.
These computer program instructions also can be stored in can in the computer-readable memory that works in a specific way of vectoring computer or other programmable data processing device, the instruction making to be stored in this computer-readable memory produces the manufacture comprising command device, and this command device realizes the function of specifying in flow chart flow process or multiple flow process and/or block diagram square frame or multiple square frame.
These computer program instructions also can be loaded in computer or other programmable data processing device, make on computer or other programmable devices, to perform sequence of operations step to produce computer implemented process, thus the instruction performed on computer or other programmable devices is provided for the step realizing the function of specifying in flow chart flow process or multiple flow process and/or block diagram square frame or multiple square frame.
Although describe the preferred embodiments of the present invention, those skilled in the art once obtain the basic creative concept of cicada, then can make other change and amendment to these embodiments.So claims are intended to be interpreted as comprising preferred embodiment and falling into all changes and the amendment of the scope of the invention.
Claims (17)
1. a method for flow detection, is characterized in that, comprising:
Obtain first flow data;
Determine the load of each detection server;
The detection server of least-loaded is selected from the load of each detection server;
Described first flow data are sent to the detection server of described least-loaded, to make the detection server of described least-loaded, flow detection are carried out to described first flow data.
2. method according to claim 1, is characterized in that, the described load determining each detection server, comprising:
The load information reported according to each detection server determines the load of each detection server, and described load information comprises following at least one: session number, processed flow bag, central processor CPU utilance, memory usage, the response speed connected, transmission rate.
3. method according to claim 2, is characterized in that, the described load information reported according to each detection server also comprises before determining the load of each detection server:
Receive the load information of each detection server periodic report.
4. method according to claim 2, is characterized in that, the described load information reported according to each detection server determines the load of each detection server, comprising:
Determine the influence coefficient of each load information, the influence coefficient sum of described each load information is 1;
The load value of each detection server is determined according to following formula:
Using the load of the load value of each detection server as each detection server.
5. a load equalizer, is characterized in that, comprising:
Acquisition module, for obtaining first flow data;
Determination module, for determining the load of each detection server;
Select module, for selecting the detection server of least-loaded in the load of each detection server determined from determination module;
Sending module, the first flow data for being obtained by described acquisition module are sent to the detection server of the least-loaded of described selection model choice, carry out flow detection to make the detection server of described least-loaded to described first flow data.
6. load equalizer according to claim 5, it is characterized in that, described determination module, the load information reported for receiving each detection server determines the load of each detection server, and described load information comprises following at least one: session number, processed flow bag, central processor CPU utilance, memory usage, the response speed connected, transmission rate.
7. load equalizer according to claim 6, is characterized in that, described load equalizer, also comprises:
Receiver module, for receiving the load information of each detection server periodic report.
8. load equalizer according to claim 6, is characterized in that, described determination module, comprising:
First determines subelement, and for determining the influence coefficient of each load information, the influence coefficient sum of described each load information is 1;
Second determines subelement, for determining the load value of each detection server according to following formula:
3rd determines subelement, for determining the load of load value as each detection server of each detection server that subelement is determined using described second.
9. a method for flow detection, is characterized in that, comprising:
Cycle obtains load information;
Load information is reported to load equalizer, to make described load equalizer according to the detection server detecting the load information selection process first flow data that server sends, the detection server that described first flow data are sent to selection is carried out flow detection.
10. method according to claim 9, is characterized in that, the described cycle also comprises before obtaining load information:
Detect and memory load information, described load information comprises following at least one: session number, processed flow bag, central processor CPU utilance, memory usage, the response speed connected, transmission rate.
11. methods according to claim 9, is characterized in that, perform described detection and before memory load information Step, also comprise:
Determine whether the second data on flows receiving load equalizer transmission;
After determining to receive described second data on flows, perform described detection and memory load information Step.
12. methods according to claim 11, is characterized in that, described load information is reported to load equalizer after, also comprise:
Receive the first flow data that described load equalizer sends;
Flow detection is carried out to described first flow data.
13. 1 kinds are detected server, it is characterized in that, comprising:
Acquisition module, obtains load information for the cycle;
Periodic report module, load information for being obtained by described acquisition module reports to load equalizer, to make described load equalizer according to the detection server detecting the load information selection process first flow data that server sends, the detection server that described first flow data are sent to selection is carried out flow detection.
14. detection servers according to claim 13, is characterized in that, described detection server, also comprises:
Detect memory module, detect and memory load information, described load information comprises following at least one: session number, processed flow bag, central processor CPU utilance, memory usage, the response speed connected, transmission rate.
15. detection servers according to claim 13, is characterized in that, described detection server, also comprises:
Determination module, for determining whether the second data on flows receiving load equalizer transmission;
Described detection memory module, for determine to receive described second data on flows when determination module after, detects and memory load information.
16. detection servers according to claim 15, is characterized in that, described detection server, also comprises:
Receiver module, for receiving the first flow data that described load equalizer sends;
Flow detection module, carries out flow detection for the first flow data received described receiver module.
The system of 17. 1 kinds of flow detection, is characterized in that, comprising: load equalizer and multiple detection server;
Wherein, the load equalizer of described load equalizer as described in claim arbitrary in claim 5 to 8, the detection server of described detection server as described in claim arbitrary in claim 13 to 16.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201510981734.7A CN105472018A (en) | 2015-12-22 | 2015-12-22 | Flow detection method, load balancer, detection server and flow detection system |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201510981734.7A CN105472018A (en) | 2015-12-22 | 2015-12-22 | Flow detection method, load balancer, detection server and flow detection system |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| CN105472018A true CN105472018A (en) | 2016-04-06 |
Family
ID=55609281
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201510981734.7A Pending CN105472018A (en) | 2015-12-22 | 2015-12-22 | Flow detection method, load balancer, detection server and flow detection system |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN105472018A (en) |
Cited By (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN109495351A (en) * | 2018-12-26 | 2019-03-19 | 网易（杭州）网络有限公司 | A kind of determining server system data processing capacity method and apparatus |
Citations (6)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN1403934A (en) * | 2001-09-06 | 2003-03-19 | 华为技术有限公司 | Load balancing method and equipment for convective medium server |
| CN101335709A (en) * | 2008-08-07 | 2008-12-31 | 杭州华三通信技术有限公司 | Method for implementing load sharing among flow analysis servers and shunting equipment |
| CN102185759A (en) * | 2011-04-12 | 2011-09-14 | 田文洪 | Multi-physical server load equalizing method and device capable of meeting requirement characteristic |
| CN103036979A (en) * | 2012-12-12 | 2013-04-10 | 广州尚融网络科技有限公司 | Server loading balancing method and loading balancer |
| US20130173784A1 (en) * | 2007-10-09 | 2013-07-04 | Bing Wang | Monitoring server load balancing |
| CN104902453A (en) * | 2015-06-30 | 2015-09-09 | 北京奇虎科技有限公司 | Mobile terminal and method for controlling network access permission of mobile terminal |
-
2015
- 2015-12-22 CN CN201510981734.7A patent/CN105472018A/en active Pending
Patent Citations (6)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN1403934A (en) * | 2001-09-06 | 2003-03-19 | 华为技术有限公司 | Load balancing method and equipment for convective medium server |
| US20130173784A1 (en) * | 2007-10-09 | 2013-07-04 | Bing Wang | Monitoring server load balancing |
| CN101335709A (en) * | 2008-08-07 | 2008-12-31 | 杭州华三通信技术有限公司 | Method for implementing load sharing among flow analysis servers and shunting equipment |
| CN102185759A (en) * | 2011-04-12 | 2011-09-14 | 田文洪 | Multi-physical server load equalizing method and device capable of meeting requirement characteristic |
| CN103036979A (en) * | 2012-12-12 | 2013-04-10 | 广州尚融网络科技有限公司 | Server loading balancing method and loading balancer |
| CN104902453A (en) * | 2015-06-30 | 2015-09-09 | 北京奇虎科技有限公司 | Mobile terminal and method for controlling network access permission of mobile terminal |
Cited By (2)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN109495351A (en) * | 2018-12-26 | 2019-03-19 | 网易（杭州）网络有限公司 | A kind of determining server system data processing capacity method and apparatus |
| CN109495351B (en) * | 2018-12-26 | 2021-01-12 | 网易（杭州）网络有限公司 | Method and device for determining data processing capacity of server system, electronic equipment and storage medium |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN112261094B (en) | Message processing method and proxy server | |
| CN101710856B (en) | Method and equipment for detection processing of loopback of aggregation link | |
| CN104980472A (en) | Network traffic control method and device | |
| CN103237060A (en) | Method, device and system for data object acquisition | |
| US10219133B2 (en) | Notification message transmission method and device, and computer storage medium | |
| CN103873597A (en) | Distributed webpage downloading method and system | |
| RU2014148333A (en) | METHODS FOR ADAPTIVE CONTROLLED LIGHTING BASED ON TRANSPORT FLOW IN EXTERIOR LIGHTING NETWORKS | |
| CN104270287A (en) | Message disorder detecting method and device | |
| CN103678364A (en) | Dynamic detection method and device for URL redirection endless loop | |
| CN112887173B (en) | Storage network detection method, device, equipment and readable storage medium | |
| CN102271067A (en) | network detecting method, device and system | |
| CN114401258A (en) | Short message sending method, device, electronic device and storage medium | |
| CN105472018A (en) | Flow detection method, load balancer, detection server and flow detection system | |
| CN104636103A (en) | Keyboard data transmission method and device | |
| CN107592361B (en) | Data transmission method, device and equipment based on dual IB network | |
| CN107132990B (en) | Read IO scheduling method and device based on super-fusion storage | |
| EP2988476A1 (en) | Method and apparatus for processing operation on endpoint peripheral | |
| CN109391707B (en) | Domain name resolution method, device, equipment and storage medium | |
| CN111193805B (en) | Resource discovery method and device | |
| CN109062642B (en) | Control message notification method and device | |
| CN107948989A (en) | A kind of computational methods and device of mobile terminal networking duration | |
| CN113596105A (en) | Content acquisition method, edge node and computer-readable storage medium | |
| US10459776B2 (en) | Transmission of large messages in computer systems | |
| CN111106977A (en) | Data stream detection method, device and storage medium | |
| CN106850245B (en) | Diagnostic test message processing method and device |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| C06 | Publication | ||
| PB01 | Publication | ||
| C10 | Entry into substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| RJ01 | Rejection of invention patent application after publication | ||
| RJ01 | Rejection of invention patent application after publication |
Application publication date: 20160406 |