CN115208889B - High-concurrency large-flow video safety isolation transmission method and system - Google Patents
High-concurrency large-flow video safety isolation transmission method and system Download PDFInfo
- Publication number
- CN115208889B CN115208889B CN202210512756.9A CN202210512756A CN115208889B CN 115208889 B CN115208889 B CN 115208889B CN 202210512756 A CN202210512756 A CN 202210512756A CN 115208889 B CN115208889 B CN 115208889B
- Authority
- CN
- China
- Prior art keywords
- video
- load
- module
- safety isolation
- isolation transmission
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Active
Links
- 230000005540 biological transmission Effects 0.000 title claims abstract description 168
- 238000002955 isolation Methods 0.000 title claims abstract description 165
- 238000000034 method Methods 0.000 title claims abstract description 22
- 238000001514 detection method Methods 0.000 claims abstract description 55
- 230000011664 signaling Effects 0.000 claims abstract description 54
- 238000004891 communication Methods 0.000 claims abstract description 16
- 238000012545 processing Methods 0.000 claims description 18
- 238000001914 filtration Methods 0.000 claims description 8
- 238000012544 monitoring process Methods 0.000 claims description 7
- 238000007619 statistical method Methods 0.000 claims description 6
- 230000002159 abnormal effect Effects 0.000 claims description 5
- 238000004422 calculation algorithm Methods 0.000 claims description 4
- 238000004364 calculation method Methods 0.000 claims description 3
- 238000007726 management method Methods 0.000 abstract description 3
- 238000012986 modification Methods 0.000 description 2
- 230000004048 modification Effects 0.000 description 2
- 230000009286 beneficial effect Effects 0.000 description 1
- 238000010586 diagram Methods 0.000 description 1
- 230000000694 effects Effects 0.000 description 1
- 238000005457 optimization Methods 0.000 description 1
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L67/00—Network arrangements or protocols for supporting network services or applications
- H04L67/01—Protocols
- H04L67/10—Protocols in which an application is distributed across nodes in the network
- H04L67/1001—Protocols in which an application is distributed across nodes in the network for accessing one among a plurality of replicated servers
- H04L67/1004—Server selection for load balancing
- H04L67/1008—Server selection for load balancing based on parameters of servers, e.g. available memory or workload
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/02—Network architectures or network communication protocols for network security for separating internal from external traffic, e.g. firewalls
- H04L63/0227—Filtering policies
- H04L63/0245—Filtering by information in the payload
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L67/00—Network arrangements or protocols for supporting network services or applications
- H04L67/01—Protocols
- H04L67/10—Protocols in which an application is distributed across nodes in the network
- H04L67/1001—Protocols in which an application is distributed across nodes in the network for accessing one among a plurality of replicated servers
- H04L67/1004—Server selection for load balancing
- H04L67/101—Server selection for load balancing based on network conditions
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
- H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
- H04N21/40—Client devices specifically adapted for the reception of or interaction with content, e.g. set-top-box [STB]; Operations thereof
- H04N21/47—End-user applications
- H04N21/472—End-user interface for requesting content, additional data or services; End-user interface for interacting with content, e.g. for content reservation or setting reminders, for requesting event notification, for manipulating displayed content
- H04N21/47202—End-user interface for requesting content, additional data or services; End-user interface for interacting with content, e.g. for content reservation or setting reminders, for requesting event notification, for manipulating displayed content for requesting content on demand, e.g. video on demand
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
- H04N7/00—Television systems
- H04N7/18—Closed-circuit television [CCTV] systems, i.e. systems in which the video signal is not broadcast
- H04N7/181—Closed-circuit television [CCTV] systems, i.e. systems in which the video signal is not broadcast for receiving images from a plurality of remote sources
Landscapes
- Engineering & Computer Science (AREA)
- Signal Processing (AREA)
- Computer Networks & Wireless Communication (AREA)
- Computer Hardware Design (AREA)
- General Engineering & Computer Science (AREA)
- Multimedia (AREA)
- Computer Security & Cryptography (AREA)
- Computing Systems (AREA)
- Databases & Information Systems (AREA)
- Human Computer Interaction (AREA)
- Data Exchanges In Wide-Area Networks (AREA)
Abstract
The invention discloses a high-concurrency large-flow video safety isolation transmission method and a system, wherein in the system, an external network sequentially transmits video-on-demand request signaling to an internal network through a video signaling detection module, a video load safety isolation transmission private network module and a video load safety isolation transmission public network module, and the internal network sequentially transmits video data to the external network through the video load safety isolation transmission public network module and the video load safety isolation transmission private network module; the video load safety isolation transmission private network module is in communication connection with the load detection module, the load detection module is in communication connection with the load statistics analysis module, the load statistics analysis module is in communication connection with the load forwarding control module, and the load forwarding control module is in communication connection with the video signaling detection module. The video request distribution management method and the video data distribution management system can effectively avoid congestion of video requests and video data transmission, further avoid congestion of a transmission channel and guarantee reliable transmission of video data.
Description
Technical Field
The invention relates to the technical field of video transmission safety. In particular to a video safety isolation transmission method and system with high concurrence and large flow.
Background
With the popularization of video monitoring services, a large amount of video data is distributed in all corners of a city, and a need for centralized monitoring of video data arises. How to guarantee network security is a challenge faced by centralized monitoring of video data, especially in some private networks, the network security requirement is especially severe, and at this time, the common network security transmission device cannot meet the network security requirement. Meanwhile, because the video has the characteristics of large bandwidth and high concurrency, how to ensure reliable data transmission is another challenge faced by the centralized monitoring of video data.
Disclosure of Invention
Therefore, the technical problem to be solved by the invention is to provide a high-concurrency large-flow video safety isolation transmission method and system, which can effectively avoid the congestion of video requests and video data transmission by carrying out distribution management on the video requests, further avoid the congestion of a transmission channel and ensure the reliable transmission of video data.
In order to solve the technical problems, the invention provides the following technical scheme:
the method for transmitting high concurrency large-flow video safety isolation includes that an intranet sends video-on-demand request signaling to an extranet through a video signaling monitoring module and safety isolation equipment, the video-on-demand request signaling received by the extranet sends corresponding video data to the intranet through the safety isolation equipment, and the method comprises the following steps:
step 1, after receiving a video-on-demand request signaling, a video signaling detection module deeply analyzes the video-on-demand request message, acquires 2-7 layers of network protocol information, and acquires a source MAC address, a source IP address, a source port number, a destination IP address and a destination port number in the network protocol information, wherein the video signaling detection module firstly judges whether the video-on-demand request is legal or not, blocks the video-on-demand request which does not meet the requirement, and prevents illegal access;
step 2, the video signaling detection module forwards the legal video-on-demand request to a load forwarding control module;
step 3, a load detection module monitors and collects load information of a video load safety isolation transmission private network module in the safety isolation equipment, and then sends the collected load information to a load statistics analysis module;
step 4, the load statistics analysis module calculates and analyzes the load information after receiving the load information acquired by the load detection module, obtains an analysis result of the residual load processing capacity of the video load safety isolation transmission private network module and sends the analysis result to the load forwarding control module;
step 5, the load forwarding control module manages and distributes the video request according to the analysis result and the received video on demand information, and the video stream transmission path is diverted to the video load safety isolation transmission private network module with the maximum residual load processing capacity;
and 6, the load safety isolation transmission private network module realizes unidirectional isolation transmission of the video stream, the video load safety isolation transmission public network module acquires video data from a video source, an internal safety transmission channel is adopted to send the data to the load safety isolation transmission private network module, and the load safety isolation transmission private network module sends the video data to a video monitoring center.
Further, in the step 1, the video signaling detection module deeply analyzes the video on demand request message, determines whether the message is legal, and blocks the video on demand request when there is an illegal video on demand request.
Further, in the step 2, the video signaling detection module forwards the legal video on demand request to the load forwarding control module.
Further, in the step 3, the video load security isolation transmission private network module reports load information to the load detection module at regular time, where the load information includes a CPU utilization x%, a network port bandwidth utilization y% and a concurrent connection number a.
Further, if a certain video load security isolation transmission private network module does not report load information in the reporting period, the load detection module sets the CPU utilization rate of the video load security isolation transmission private network module without reporting load information to x% = 100%.
Further, in the step 4, the load statistics analysis module calculates the remaining load processing capacity C of each video load security isolation transmission private network module according to the following algorithm n ：
C n ＝[(1-x％)*F n ]*[(1-y％)*W n ]/a
Wherein F is n The main frequency of the CPU of the equipment where the video load safety isolation transmission private network module is located;
W n the video load safety isolation transmission special network module is the maximum transmission bandwidth of the network card of the equipment where the video load safety isolation transmission special network module is located;
x%: the CPU utilization rate of the video load safety isolation transmission private network module;
y%: the network port bandwidth utilization rate of the video load safety isolation transmission private network module;
a: the video load safely isolates the concurrent connection number of the transmission private network module.
Further, when a plurality of security isolation devices are provided between the intranet and the extranet, in step 5, the load forwarding control module distributes the video request to the C with the maximum remaining load processing capacity according to the analysis result and the received vod information n The video load of the value is safely isolated and transmitted to the private network module.
Further, in step 5, the load forwarding control module performs the following step C according to the analysis result obtained by the load statistics analysis module n Managing and distributing video-on-demand requests from big to small in order of size, distributing the video stream to C n And the largest video load is safely isolated and transmitted to a private network module.
Further, in the step 5, the load forwarding control module acquires C n And the video load safety isolation transmission private network module with the largest value processes the IP address and port number of the video service stream processing port, takes the IP address and port number as the destination IP address and port number of the video stream, and sends a response message to the video monitoring center.
Further, in the step 6, the video load is sent to the video monitoring center through the unidirectional isolated internal secure transmission channel.
Further, when the video on demand request signaling received by the external network sends corresponding video data to the external network through the security isolation device, a flow filtering module is configured on a video security isolation transmission public network module in the security isolation device, and the flow filtering module is used for preventing abnormal video flow from passing through the video security isolation transmission public network module.
The invention also provides a system for video transmission by using the high-concurrency large-flow video security isolation transmission method, which comprises the following steps:
the video signaling detection module is used for analyzing and forwarding video-on-demand request signaling sent by the external network;
the safety isolation device is used for carrying out safety isolation on the external network and the internal network; the safety isolation equipment is internally provided with a video load safety isolation transmission private network module and a video load safety isolation transmission public network module;
the load detection module is used for monitoring and collecting load information of the video load safety isolation transmission private network module in the safety isolation equipment, and then sending the collected load information to the load statistics analysis module;
the load statistics analysis module is used for carrying out calculation analysis on the load information after receiving the load information acquired by the load detection module, obtaining an analysis result of the residual load processing capacity of the video load safety isolation transmission private network module and sending the analysis result to the load forwarding control module;
the load forwarding control module is used for managing and distributing video requests according to the analysis result and the received video on demand information;
the external network sequentially transmits video-on-demand request signaling to the internal network through the video signaling detection module, the video load safety isolation transmission private network module and the video load safety isolation transmission public network module, and the internal network sequentially transmits video data to the external network through the video load safety isolation transmission public network module and the video load safety isolation transmission private network module; the video load safety isolation transmission private network module is in communication connection with the load detection module, the load detection module is in communication connection with the load statistics analysis module, the load statistics analysis module is in communication connection with the load forwarding control module, and the load forwarding control module is in communication connection with the video signaling detection module.
Further, the traffic filtering module is configured on the video load safety isolation transmission public network module and is used for preventing abnormal video traffic from passing through the video safety isolation transmission public network module.
The technical scheme of the invention has the following beneficial technical effects:
1. the invention deploys different isolation transmission devices in a cluster, and solves the problem of high-flow and high-concurrency video flow transmission.
2. The invention carries out deep analysis on the video on demand request message, judges the validity of the video on demand request, and avoids the system data security problem caused by illegal video on demand request.
3. In the invention, the factors such as CPU utilization rate, CPU main frequency, bandwidth utilization rate, maximum bandwidth and the like of different isolated transmission equipment in the cluster are simultaneously considered, and the residual processing capacity of the different isolated transmission equipment in the cluster is accurately calculated, so that the transmission capacity of the system is maximized, the reliability of transmission can be ensured, the maximum utilization of the capacity of each equipment can be ensured, and the utilization efficiency of the system is improved.
4. According to the invention, through the load data reported by different isolated transmission devices in the cluster at regular time, if a certain device does not report the load data in a certain period, the CPU utilization rate is considered to be 100%, so that the residual load is zero, the isolated transmission device in a non-working state can be ensured not to process video traffic, and the reliable transmission of the data is ensured to the greatest extent.
5. In the invention, video data is transmitted through the video load safety isolation transmission public network module and the video load safety isolation transmission private network module, and the data transmission is carried out between the video load safety isolation transmission public network module and the video load safety isolation transmission private network module by adopting a special isolation card, so that the physical isolation of the data transmission is realized, and the private network safety is ensured.
6. In the invention, when video data is transmitted through the video load safety isolation transmission public network module, the flow filtering strategy is configured on the module, so that illegal flow can be filtered, and the network is ensured not to be attacked by abnormal flow.
Drawings
Fig. 1 is a schematic diagram of a system for video transmission by using a high-concurrency high-traffic video security isolation transmission method according to the present invention.
Detailed Description
As shown in fig. 1, a system for video transmission by using a high-concurrency high-traffic video security isolation transmission method comprises a video signaling detection module, a security isolation device, a load detection module, a load statistical analysis module and a load forwarding control module;
the video signaling detection module is used for analyzing and forwarding video-on-demand request signaling sent by the external network; the safety isolation device is used for carrying out safety isolation on the external network and the internal network; the safety isolation equipment is internally provided with a video load safety isolation transmission private network module and a video load safety isolation transmission public network module; the load detection module is used for safely isolating and transmitting the load information of the private network module by the video load in the safety isolation equipment, collecting the load information and then sending the collected load information to the load statistical analysis module; the load statistical analysis module is used for carrying out calculation analysis on the load information after receiving the load information acquired by the load detection module, obtaining an analysis result of the residual load processing capacity of the video load safety isolation transmission private network module and sending the analysis result to the load forwarding control module; and the load forwarding control module is used for managing and distributing the video request according to the analysis result and the received video on demand information.
The external network sequentially transmits video-on-demand request signaling to the internal network through the video signaling detection module, the video load safety isolation transmission private network module and the video load safety isolation transmission public network module, and the internal network sequentially transmits video data to the external network through the video load safety isolation transmission public network module and the video load safety isolation transmission private network module; the video load safety isolation transmission private network module is in communication connection with the load detection module, the load detection module is in communication connection with the load statistics analysis module, the load statistics analysis module is in communication connection with the load forwarding control module, and the load forwarding control module is in communication connection with the video signaling detection module.
In this embodiment, a traffic filtering module is configured on a video load security isolation transmission public network module, where the traffic filtering module is configured to prevent abnormal video traffic from passing through the video security isolation transmission public network module, so that the number of security isolation devices for sending video data to an external network by a plurality of video devices in an intranet is the same as the number of video devices, or a video load security isolation transmission private network module and a video load security isolation transmission public network module, the number of which is the same as the number of video devices, are arranged in a single security device.
In the process that the intranet sends a video-on-demand request to the extranet and the extranet sends corresponding video data to the intranet, the following steps are executed:
1) The intranet sends a video-on-demand request signaling to the video signaling detection module;
2) After receiving the video on demand request signaling, the video on demand request signaling detection module analyzes the video on demand request signaling to obtain video on demand information and sends the corresponding information to the load forwarding control module, and simultaneously sends the video on demand request signaling to a video load safety isolation transmission private network module in the safety isolation equipment;
after receiving a video-on-demand request signaling, a video signaling detection module deeply analyzes the video-on-demand request message, acquires 2-7 layers of network protocol information, and acquires a source MAC address, a source IP address, a source port number, a destination IP address and a destination port number in the network protocol information, wherein the video signaling detection module firstly judges whether the video-on-demand request is legal or not, blocks the video-on-demand request which does not meet the requirement, and prevents illegal access;
the video signaling detection module forwards the legal video-on-demand request to the load forwarding control module;
3) The video load safety isolation transmission private network module in the safety isolation equipment sends the received video on demand request signaling to the video load safety isolation transmission public network module in the same safety isolation equipment;
4) The video load safety isolation transmission public network module in the safety isolation equipment sends the received video on demand request signaling to the external network;
5) After receiving the video on demand request signaling, the external network sends the video on demand request signaling to the security isolation equipment and sends the video on demand request signaling to the internal network through the video load security isolation transmission public network module and the video load security isolation transmission private network module;
6) The load detection module monitors load information of a video load safety isolation transmission private network module in the safety isolation equipment, collects the load information, and then sends the collected load information to the load statistics analysis module;
7) The load statistical analysis module calculates and analyzes the load information after receiving the load information acquired by the load detection module, obtains an analysis result of the residual load processing capacity of the video load safety isolation transmission private network module and sends the analysis result to the load forwarding control module;
8) The load forwarding control module manages and distributes video requests according to the analysis result and the received video on demand information, and the video streaming transmission path is diverted to the video load safety isolation transmission private network module with the maximum residual load processing capacity;
9) The load safety isolation transmission private network module realizes unidirectional isolation transmission of video streams, the video load safety isolation transmission public network module obtains video data from a video source, an internal safety transmission channel is adopted to send the data to the load safety isolation transmission private network module, and the load safety isolation transmission private network module sends the video data to a video monitoring center.
When a plurality of security isolation devices are arranged between the intranet and the extranet, in step 8), the load forwarding control module distributes video requests to C with the maximum residual load processing capacity according to the analysis result and the received video on demand information n The video load of the value is safely isolated and transmitted to the private network module.
In step 6), the video load safety isolation transmission private network module reports load information to the load detection module at regular time, wherein the load information comprises CPU utilization rate x%, network port bandwidth utilization rate y% and concurrent connection number a. If a certain video load safety isolation transmission private network module does not report load information in the reporting period, the load detection module sets the CPU utilization rate of the video load safety isolation transmission private network module as x% = 100%.
In step 7), the load statistics analysis module calculates the remaining load handling capacity C of each video load security isolation transport private network module according to the following algorithm n ：
C n ＝[(1-x％)*F n ]*[(1-y％)*W n ]/a
Wherein F is n The main frequency of the CPU of the equipment where the video load safety isolation transmission private network module is located;
W n the video load safety isolation transmission special network module is the maximum transmission bandwidth of the network card of the equipment where the video load safety isolation transmission special network module is located;
x%: the CPU utilization rate of the video load safety isolation transmission private network module;
y%: the network port bandwidth utilization rate of the video load safety isolation transmission private network module;
a: the video load safely isolates the concurrent connection number of the transmission private network module.
In step 8), the load forwarding control module performs the following steps according to C according to the analysis result obtained by the load statistics analysis module n The video on demand requests are managed and distributed from big to small in order of size.
Transmitting the remaining load handling capacity C of private network modules by securely isolating individual video loads n And C n Selecting proper video load safety isolation transmission private network module according to the size sequence of the video load safety isolation transmission private network module, avoiding the congestion at one video load safety isolation transmission private network module in the video data transmission process, and simultaneously according to the video on demand information in the video on demand request signaling and the residual load processing capacity C of each video load safety isolation transmission private network module n The size of the video load safety isolation transmission private network module is selected to be suitable, the optimization of the distribution of the video load safety isolation transmission private network module can be realized, the utilization rate of the transmission capacity of the video load safety isolation transmission private network module can be maximized, meanwhile, the congestion phenomenon caused by overlarge load of a certain video load safety isolation transmission private network module can be effectively avoided, and the safe and reliable transmission of high-concurrency large-flow videos is realized.
It is apparent that the above examples are given by way of illustration only and are not limiting of the embodiments. Other variations or modifications of the above teachings will be apparent to those of ordinary skill in the art. It is not necessary here nor is it exhaustive of all embodiments. While the obvious variations or modifications which are extended therefrom remain within the scope of the claims of this patent application.
Claims (9)
1. The method is characterized in that an intranet sends video-on-demand request signaling to an external network through a video signaling detection module and a safety isolation device, the video-on-demand request signaling received by the external network sends corresponding video data to the internal network through the safety isolation device, and the following steps are executed in the process:
step 1, after receiving a video-on-demand request signaling, a video signaling detection module deeply analyzes the video-on-demand request message, acquires 2-7 layers of network protocol information, and acquires a source MAC address, a source IP address, a source port number, a destination IP address and a destination port number in the network protocol information, wherein the video signaling detection module firstly judges whether the video-on-demand request is legal or not, blocks the video-on-demand request which does not meet the requirement, and prevents illegal access;
step 2, the video signaling detection module forwards the legal video-on-demand request to a load forwarding control module;
step 3, a load detection module monitors and collects load information of a video load safety isolation transmission private network module in the safety isolation equipment, and then sends the collected load information to a load statistics analysis module;
step 4, the load statistics analysis module calculates and analyzes the load information after receiving the load information acquired by the load detection module, obtains an analysis result of the residual load processing capacity of the video load safety isolation transmission private network module and sends the analysis result to the load forwarding control module; the load information comprises CPU utilization rate x%, network port bandwidth utilization rate y% and concurrent connection number a, and the load statistical analysis module calculates the residual load processing capacity C of each video load safety isolation transmission private network module according to the following algorithm n ：
C n ＝[(1-x％)*F n ]*[(1-y％)*W n ]/a
Wherein F is n The main frequency of the CPU of the equipment where the video load safety isolation transmission private network module is located;
W n the video load safety isolation transmission special network module is the maximum transmission bandwidth of the network card of the equipment where the video load safety isolation transmission special network module is located;
x%: the CPU utilization rate of the video load safety isolation transmission private network module;
y%: the network port bandwidth utilization rate of the video load safety isolation transmission private network module;
a: the concurrent connection number of the video load safety isolation transmission private network module;
step 5, the load forwarding control module manages and distributes the video request according to the analysis result and the received video on demand information, and the video stream transmission path is diverted to the video load safety isolation transmission private network module with the maximum residual load processing capacity;
and 6, the load safety isolation transmission private network module realizes unidirectional isolation transmission of the video stream, the video load safety isolation transmission public network module acquires video data from a video source, an internal safety transmission channel is adopted to send the data to the load safety isolation transmission private network module, and the load safety isolation transmission private network module sends the video data to a video monitoring center.
2. The method according to claim 1, wherein in the step 1, the video signaling detection module deep analyzes the video on demand request message, determines whether the message is legal, and blocks the video on demand request when there is an illegal video on demand request.
3. The method according to claim 1, wherein in step 2, the video signaling detection module forwards legal video on demand requests to the load forwarding control module.
4. The method according to claim 1, wherein in the step 3, the video load security isolation transmission private network module reports load information to the load detection module at regular time, the load information includes CPU utilization x%, network port bandwidth utilization y% and concurrent connection number a.
5. The method for transmitting high-concurrency and high-traffic video security isolation according to claim 4, wherein if a certain video load security isolation transmission private network module does not report load information in a reporting period, the load detection module sets the CPU utilization of the video load security isolation transmission private network module not reporting load information to x% = 100%.
6. The method according to claim 1, wherein when a plurality of the security isolation devices are provided between the intranet and the extranet, in step 5, the load forwarding control module distributes the video request to the maximum C of remaining load processing capacity according to the analysis result and the received vod information n The video load of the value is safely isolated and transmitted to the private network module.
7. The method according to claim 6, wherein in step 5, the load forwarding control module performs the following step C according to the analysis result obtained by the load statistics analysis module n Managing and distributing video-on-demand requests from big to small in order of size, distributing the video stream to C n And the largest video load is safely isolated and transmitted to a private network module.
8. A system for video transmission using the high concurrency high traffic video security isolation transmission method of any one of claims 1-7, comprising:
the video signaling detection module is used for analyzing and forwarding video-on-demand request signaling sent by the external network;
the safety isolation device is used for carrying out safety isolation on the external network and the internal network; the safety isolation equipment is internally provided with a video load safety isolation transmission private network module and a video load safety isolation transmission public network module;
the load detection module is used for monitoring and collecting load information of the video load safety isolation transmission private network module in the safety isolation equipment, and then sending the collected load information to the load statistics analysis module;
the load statistics analysis module is used for carrying out calculation analysis on the load information after receiving the load information acquired by the load detection module, obtaining an analysis result of the residual load processing capacity of the video load safety isolation transmission private network module and sending the analysis result to the load forwarding control module; the load information comprises CPU utilization rate x%, network port bandwidth utilization rate y% and concurrent connection number a, and the load statistical analysis module calculates the residual load processing capacity C of each video load safety isolation transmission private network module according to the following algorithm n ：
C n ＝[(1-x％)*F n ]*[(1-y％)*W n ]/a
Wherein F is n The main frequency of the CPU of the equipment where the video load safety isolation transmission private network module is located;
W n the video load safety isolation transmission special network module is the maximum transmission bandwidth of the network card of the equipment where the video load safety isolation transmission special network module is located;
x%: the CPU utilization rate of the video load safety isolation transmission private network module;
y%: the network port bandwidth utilization rate of the video load safety isolation transmission private network module;
a: the concurrent connection number of the video load safety isolation transmission private network module;
the load forwarding control module is used for managing and distributing video requests according to the analysis result and the received video on demand information;
the external network sequentially transmits video-on-demand request signaling to the internal network through the video signaling detection module, the video load safety isolation transmission private network module and the video load safety isolation transmission public network module, and the internal network sequentially transmits video data to the external network through the video load safety isolation transmission public network module and the video load safety isolation transmission private network module; the video load safety isolation transmission private network module is in communication connection with the load detection module, the load detection module is in communication connection with the load statistics analysis module, the load statistics analysis module is in communication connection with the load forwarding control module, and the load forwarding control module is in communication connection with the video signaling detection module.
9. The system of claim 8, wherein the video load security isolation transmission public network module is configured with a traffic filtering module, the traffic filtering module being configured to prevent abnormal video traffic from passing through the video security isolation transmission public network module.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202210512756.9A CN115208889B (en) | 2022-05-12 | 2022-05-12 | High-concurrency large-flow video safety isolation transmission method and system |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202210512756.9A CN115208889B (en) | 2022-05-12 | 2022-05-12 | High-concurrency large-flow video safety isolation transmission method and system |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN115208889A CN115208889A (en) | 2022-10-18 |
| CN115208889B true CN115208889B (en) | 2023-11-28 |
Family
ID=83575168
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN202210512756.9A Active CN115208889B (en) | 2022-05-12 | 2022-05-12 | High-concurrency large-flow video safety isolation transmission method and system |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN115208889B (en) |
Families Citing this family (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN115277257A (en) * | 2022-09-27 | 2022-11-01 | 北京安盟信息技术股份有限公司 | High-concurrency high-flow video safety isolation transmission method and system |
Citations (8)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| EP2389030A1 (en) * | 2010-05-21 | 2011-11-23 | Vodafone Group PLC | Reducing signalling load in a network controller |
| CN108337527A (en) * | 2017-12-18 | 2018-07-27 | 武汉烽火众智智慧之星科技有限公司 | A kind of access gateway and a kind of cut-in method |
| CN109714648A (en) * | 2018-12-03 | 2019-05-03 | 南方电网科学研究院有限责任公司 | A kind of video flow load balancing method and device |
| CN110149395A (en) * | 2019-05-20 | 2019-08-20 | 华南理工大学 | One kind is based on dynamic load balancing method in the case of mass small documents high concurrent |
| CN110971628A (en) * | 2018-09-29 | 2020-04-07 | 杭州阿启视科技有限公司 | Cloud video data acquisition method |
| CN111930511A (en) * | 2020-08-24 | 2020-11-13 | 北京工业大学 | Identifier resolution node load balancing device based on machine learning |
| CN112732408A (en) * | 2021-01-18 | 2021-04-30 | 浪潮云信息技术股份公司 | Method for computing node resource optimization |
| CN113473218A (en) * | 2021-07-08 | 2021-10-01 | 北京安盟信息技术股份有限公司 | Platform cascade video balancing method and system |
-
2022
- 2022-05-12 CN CN202210512756.9A patent/CN115208889B/en active Active
Patent Citations (8)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| EP2389030A1 (en) * | 2010-05-21 | 2011-11-23 | Vodafone Group PLC | Reducing signalling load in a network controller |
| CN108337527A (en) * | 2017-12-18 | 2018-07-27 | 武汉烽火众智智慧之星科技有限公司 | A kind of access gateway and a kind of cut-in method |
| CN110971628A (en) * | 2018-09-29 | 2020-04-07 | 杭州阿启视科技有限公司 | Cloud video data acquisition method |
| CN109714648A (en) * | 2018-12-03 | 2019-05-03 | 南方电网科学研究院有限责任公司 | A kind of video flow load balancing method and device |
| CN110149395A (en) * | 2019-05-20 | 2019-08-20 | 华南理工大学 | One kind is based on dynamic load balancing method in the case of mass small documents high concurrent |
| CN111930511A (en) * | 2020-08-24 | 2020-11-13 | 北京工业大学 | Identifier resolution node load balancing device based on machine learning |
| CN112732408A (en) * | 2021-01-18 | 2021-04-30 | 浪潮云信息技术股份公司 | Method for computing node resource optimization |
| CN113473218A (en) * | 2021-07-08 | 2021-10-01 | 北京安盟信息技术股份有限公司 | Platform cascade video balancing method and system |
Non-Patent Citations (3)
| Title |
|---|
| "云中心基于Nginx的动态权重负载均衡算法";谭畅、谭歆、胡磊、熊炜;《重庆邮电大学学报(自然科学版)》;第33卷(第6期);第991-998页 * |
| "基于电信运营级手机视频监控业务的设计与实现";傅安;《信息科技》(第5期);全文 * |
| Hao Li、Dawei Xiang、Xingwu Yang、Xinyu Zhang."Compressed Sensing Method for IGBT High-Speed Switching Time On-Line Monitoring".2018,第69卷(第4期),全文. * |
Also Published As
| Publication number | Publication date |
|---|---|
| CN115208889A (en) | 2022-10-18 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN1123164C (en) | Method and communication system for processing alarms using management network involving several layers of management | |
| US9807460B2 (en) | Optimal provisioning and management of bandwidth in a video-on-demand services architecture | |
| CN101505270B (en) | Method for aggregated link rapid convergence of distributed switch | |
| US7286471B2 (en) | Dynamic bandwidth allocation for wide area networks | |
| CN103095568B (en) | Rack switching equipment realizes stacking system and method | |
| CN1848767A (en) | Filtering frames for link aggregation marker protocol | |
| CN115208889B (en) | High-concurrency large-flow video safety isolation transmission method and system | |
| CN102394925B (en) | Communication method and device for remote monitoring diagnosis center and area regulation center | |
| CN101175078A (en) | Identification of potential network threats using a distributed threshold random walk | |
| JP2012513707A (en) | Method and apparatus for distributing fault information in a large-scale communication network system | |
| WO2009152702A1 (en) | Flow control method, system and bearer layer equipment thereof | |
| CN107547416A (en) | A kind of processing method and processing device of protocol massages | |
| CN106685962B (en) | Defense system and method for reflective DDOS attack flow | |
| CN112822128B (en) | PON system message mirroring method and PON system | |
| US8325617B2 (en) | Method and apparatus for selective recovery from branch isolation in very large VoIP networks | |
| CN104618491A (en) | Proxy server and data forwarding method | |
| CN102480471B (en) | Method for realizing QoS (quality of service) processing in monitoring RRPP (rapid ring protection protocol) ring and network node | |
| CN101695049A (en) | Method and device for processing businesses in monitoring system | |
| CN109067663B (en) | System and method for controlling request response rate in application program | |
| CN115277257A (en) | High-concurrency high-flow video safety isolation transmission method and system | |
| CN101267681A (en) | An access device and multicast control method for passive optical network | |
| KR102486638B1 (en) | Method for detecting abnormality of iptv service, network apparatus and monitoring server | |
| CN115378926A (en) | Emergency broadcast pushing method under mobile terminal equipment | |
| US7971247B2 (en) | Methods and apparatus for prevention of excessive control message traffic in a digital networking system | |
| CN103780444A (en) | Loop automatic detection device and method in EoC network |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant |