CN111818194A - Domain name based access system and method - Google Patents
Domain name based access system and method Download PDFInfo
- Publication number
- CN111818194A CN111818194A CN202010620591.8A CN202010620591A CN111818194A CN 111818194 A CN111818194 A CN 111818194A CN 202010620591 A CN202010620591 A CN 202010620591A CN 111818194 A CN111818194 A CN 111818194A
- Authority
- CN
- China
- Prior art keywords
- service
- domain name
- address
- computer
- internal
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Pending
Links
- 238000000034 method Methods 0.000 title claims abstract description 39
- 238000013507 mapping Methods 0.000 claims description 26
- 238000004590 computer program Methods 0.000 claims description 9
- 239000000126 substance Substances 0.000 claims 1
- 230000001131 transforming effect Effects 0.000 abstract 1
- 238000010586 diagram Methods 0.000 description 14
- 238000004891 communication Methods 0.000 description 9
- 230000006870 function Effects 0.000 description 8
- 230000003287 optical effect Effects 0.000 description 4
- 238000005516 engineering process Methods 0.000 description 3
- 230000004048 modification Effects 0.000 description 3
- 238000012986 modification Methods 0.000 description 3
- 230000008569 process Effects 0.000 description 3
- 238000012545 processing Methods 0.000 description 3
- 230000000694 effects Effects 0.000 description 2
- 238000007726 management method Methods 0.000 description 2
- 230000007246 mechanism Effects 0.000 description 2
- 230000000644 propagated effect Effects 0.000 description 2
- 239000004065 semiconductor Substances 0.000 description 2
- 230000009286 beneficial effect Effects 0.000 description 1
- 238000010276 construction Methods 0.000 description 1
- 230000008602 contraction Effects 0.000 description 1
- 238000013500 data storage Methods 0.000 description 1
- 238000013461 design Methods 0.000 description 1
- 239000000835 fiber Substances 0.000 description 1
- 230000006872 improvement Effects 0.000 description 1
- 238000002955 isolation Methods 0.000 description 1
- 239000004973 liquid crystal related substance Substances 0.000 description 1
- 238000012423 maintenance Methods 0.000 description 1
- 230000007935 neutral effect Effects 0.000 description 1
- 239000013307 optical fiber Substances 0.000 description 1
- 238000006467 substitution reaction Methods 0.000 description 1
Images
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L61/00—Network arrangements, protocols or services for addressing or naming
- H04L61/45—Network directories; Name-to-address mapping
- H04L61/4505—Network directories; Name-to-address mapping using standardised directories; using standardised directory access protocols
- H04L61/4511—Network directories; Name-to-address mapping using standardised directories; using standardised directory access protocols using domain name system [DNS]
Landscapes
- Engineering & Computer Science (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- Data Exchanges In Wide-Area Networks (AREA)
Abstract
The invention discloses a domain name based access system and method, and relates to the technical field of computers. One embodiment of the method comprises: when a first service in a plurality of computer clusters wants to access a second service, the first service sends a domain name resolution request carrying a domain name of the second service to an internal DNS module in the computer cluster where the first service is located; the internal DNS module sends an IP acquisition request carrying a second service domain name to an external DNS server when judging that the second service domain name is not stored locally; after receiving the IP acquisition request, the external DNS server determines an IP address corresponding to a second service domain name and returns the IP address to the internal DNS module; the internal DNS module returns the received IP address to the first service so that the first service sends an access request to the second service according to the IP address. The embodiment can realize the domain name access between the cluster internal and external services on the premise of not largely transforming the existing system.
Description
Technical Field
The invention relates to the technical field of computers, in particular to a domain name based access system and method.
Background
Kubernets is an application for managing, orchestrating, and scheduling containers in multiple hosts. Because Kubernets have the characteristics of simple and efficient application deployment and operation and maintenance, many newly-built systems are deployed on the basis of the Kubernets at present, but Kubernets have the effect of natural network isolation, namely, all services in the clusters can be automatically accessed through domain names, and the domain names cannot identify the services outside the clusters. That is, the service inside and outside the cluster cannot identify the domain name of the other party, and thus cannot directly access through the domain name.
Meanwhile, a plurality of non-kubernets clusters exist in a specific scene (namely, the clusters are not deployed through kubernets), and when access is performed between the kubernets clusters and the non-kubernets clusters, the existing system can only be modified in the prior art, so that huge workload is formed.
Disclosure of Invention
In view of this, embodiments of the present invention provide a domain name based access system and method, which can implement domain name access between internal and external services of a cluster without largely modifying the existing system.
To achieve the above object, according to one aspect of the present invention, there is provided a domain name based access system.
The access system based on the domain name comprises a plurality of computer clusters and an external DNS server, wherein each computer cluster comprises an internal DNS module; the external DNS server stores the mapping relation between the domain name and the IP address of the service provided to the outside in each computer cluster, and each internal DNS module stores the mapping relation between the domain name and the IP address of each service in the computer cluster where the internal DNS module is located; when a first service in the plurality of computer clusters wants to access a second service, the first service sends a domain name resolution request carrying a domain name of the second service to an internal DNS module in the computer cluster where the first service is located; the internal DNS module sends an IP acquisition request carrying a second service domain name to the external DNS server when judging that the second service domain name is not stored locally; after receiving the IP acquisition request, the external DNS server determines an IP address corresponding to a second service domain name and returns the IP address to the internal DNS module; the internal DNS module returns the received IP address to the first service so that the first service sends an access request to the second service according to the IP address.
Optionally, after the first service sends the domain name resolution request to an internal DNS module in the computer cluster where the first service is located: and if the internal DNS module judges that the second service domain name is locally stored, determining an IP address corresponding to the second service domain name and returning the IP address to the first service, and the first service sends an access request to the second service according to the IP address.
Optionally, the internal DNS module in any computer cluster accesses the external DNS server according to an IP address of the external DNS server pre-stored in the computer cluster.
Optionally, the plurality of computer clusters are based on a service oriented architecture, SOA, or a micro-service architecture.
Optionally, the plurality of computer clusters includes kubernets clusters and non-kubernets clusters.
To achieve the above object, according to another aspect of the present invention, there is provided a domain name based access method.
The access method based on the domain name is applied to a system comprising a plurality of computer clusters and an external DNS server; the external DNS server stores the mapping relation between the domain name and the IP address of the service provided to the outside in each computer cluster, each computer cluster comprises an internal DNS module, and each internal DNS module stores the mapping relation between the domain name and the IP address of each service in the computer cluster where the internal DNS module is located; the method may include: when a first service in the plurality of computer clusters wants to access a second service, the first service sends a domain name resolution request carrying a domain name of the second service to an internal DNS module in the computer cluster where the first service is located; the internal DNS module sends an IP acquisition request carrying a second service domain name to the external DNS server when judging that the second service domain name is not stored locally; after receiving the IP acquisition request, the external DNS server determines an IP address corresponding to a second service domain name and returns the IP address to the internal DNS module; the internal DNS module returns the received IP address to the first service so that the first service sends an access request to the second service according to the IP address.
Optionally, the method further comprises: after the first service sends the domain name resolution request to an internal DNS module in the computer cluster where the first service is located: and if the internal DNS module judges that the second service domain name is locally stored, determining an IP address corresponding to the second service domain name and returning the IP address to the first service, and the first service sends an access request to the second service according to the IP address.
Optionally, each computer cluster stores an IP address of the external DNS server in advance; and when judging that the second service domain name is not stored locally, the internal DNS module sends an IP acquisition request carrying the second service domain name to the external DNS server, and the method comprises the following steps: and the internal DNS module sends the IP acquisition request to the external DNS according to the IP address of the external DNS prestored in the computer cluster where the internal DNS module is positioned.
Optionally, the plurality of computer clusters are based on a service oriented architecture, SOA, or a micro-service architecture.
Optionally, the plurality of computer clusters includes kubernets clusters and non-kubernets clusters.
To achieve the above object, according to still another aspect of the present invention, there is provided an electronic apparatus.
An electronic device of the present invention includes: one or more processors; and the storage device is used for storing one or more programs, and when the one or more programs are executed by the one or more processors, the one or more processors realize the domain name-based access method provided by the invention.
To achieve the above object, according to still another aspect of the present invention, there is provided a computer-readable storage medium.
A computer-readable storage medium of the present invention has stored thereon a computer program which, when executed by a processor, implements the domain name based access method provided by the present invention.
According to the technical scheme of the invention, the embodiment of the invention has the following advantages or beneficial effects: an internal DNS module is arranged in each computer cluster to store the mapping relation between the domain name and the IP address of each service in the cluster, an external DNS server is arranged for all the computer clusters to store the mapping relation between the domain name and the IP address of the service provided outwards, and when the services in the clusters access each other, the IP address corresponding to the service domain name can be obtained through the internal DNS module in the cluster; when the services among different clusters access each other, the internal DNS module can request the IP address of the corresponding service to the external DNS server, thereby successfully realizing the domain name access of the services inside the clusters and among the clusters without greatly changing the existing system.
Further effects of the above-mentioned non-conventional alternatives will be described below in connection with the embodiments.
Drawings
The drawings are included to provide a better understanding of the invention and are not to be construed as unduly limiting the invention. Wherein:
FIG. 1 is a schematic diagram of components of a domain name based access system in an embodiment of the invention;
FIG. 2 is a diagram illustrating the main steps of a domain name based access method according to an embodiment of the present invention;
fig. 3 is a schematic diagram illustrating specific steps performed in the domain name based access method according to an embodiment of the present invention;
fig. 4 is a schematic structural diagram of an electronic device for implementing the domain name based access method in the embodiment of the present invention.
Detailed Description
Exemplary embodiments of the present invention are described below with reference to the accompanying drawings, in which various details of embodiments of the invention are included to assist understanding, and which are to be considered as merely exemplary. Accordingly, those of ordinary skill in the art will recognize that various changes and modifications of the embodiments described herein can be made without departing from the scope and spirit of the invention. Also, descriptions of well-known functions and constructions are omitted in the following description for clarity and conciseness.
It is to be understood that the terms "first," "second," and the like as used herein are used herein to describe various objects, but these objects are not limited by the above terms. The above terms are used only to distinguish one object from another. For example, without departing from the scope of the present invention, a first service may be referred to as a second service, or a second service may be referred to as a first service, where the first service and the second service are both services, but not the same service. It should be noted that the embodiments of the present invention and the technical features of the embodiments may be combined with each other without conflict.
Fig. 1 is a schematic diagram of components of a domain name based access system in accordance with an embodiment of the present invention.
As shown in fig. 1, a domain name based access system of an embodiment of the present invention may include a plurality of computer clusters and an external DNS server capable of communicating with each computer cluster. The DNS is a Domain name system (Domain NameSystem) for converting a Domain name into an IP address, and the IP represents an Internet Protocol (Internet Protocol). In practical applications, the plurality of computer clusters may be a cluster based on an SOA (Service Oriented Architecture) or a cluster based on a microservice Architecture, and the computer clusters may include a plurality of services therein. For example, in FIG. 1, a computer cluster 1 includes services 1 and 2, and a computer cluster 2 includes services 3 and 4.
In the field of computer technology, an SOA is a component model that can link different functional units (i.e., services) of an application through well-defined interfaces and contracts between the services. The interface is defined in a neutral manner that can be independent of the hardware platform, operating system, and programming language in which the service is implemented. This allows services built into various systems to interact in a uniform and versatile manner. A microservice architecture is a method for developing a single application as a set of small services, each running in its own process and communicating with a lightweight mechanism. These services are built around business functions and can be deployed independently through a fully automated deployment mechanism. These services are less centrally managed, can be written in different programming languages, and use different data storage technologies.
In an embodiment of the present invention, the plurality of computer clusters may include a kubernets cluster and a non-kubernets cluster. Kubernetes is an open-source container cluster management system, and provides a series of complete functions such as deployment and operation, resource scheduling, service discovery, dynamic expansion and contraction and the like for containerized applications on the basis of Docker (an application container engine) technology, so that the convenience of large-scale container cluster management is improved. In the prior art, the services of the kubernets cluster and the services of the non-kubernets cluster are difficult to communicate through a domain name, and the services in different kubernets clusters and the services in different non-kubernets clusters are also difficult to communicate through the domain name.
In the embodiment of the present invention, each computer cluster may include an internal DNS module, where the internal DNS module stores a mapping relationship between a domain name and an IP address of each service in the computer cluster where the internal DNS module is located, and implements publishing and discovery of a service domain name in the computer cluster. Similarly, the mapping relationship between the domain name and the IP address of the service provided to the outside in each computer cluster can be stored in the external DNS server. In some embodiments, the external DNS server may also store the domain name of each computer cluster in order to communicate with each computer cluster. Generally, when a service is newly added in a certain computer cluster, the mapping relationship between the domain name and the IP address of the service needs to be recorded to an internal DNS module in the computer cluster; when a new service provided outside is added to a certain computer cluster, the mapping relationship between the domain name and the IP address of the service needs to be recorded to the external DNS server.
In practice, communication between different services may be achieved in the following manner. When a first service in the plurality of computer clusters wants to access a second service, the first service sends a domain name resolution request carrying a domain name of the second service to an internal DNS module in the computer cluster where the first service is located. The internal DNS module first determines whether a second service domain name is stored locally: if the first service is the cluster internal service, the second service is indicated to be the cluster internal service, the IP address corresponding to the second service domain name is determined according to the mapping relation between the locally stored service domain name and the IP address, then the IP address is returned to the first service, and the first service can send an access request to the second service according to the IP address.
If the internal DNS module determines that the second service domain name is not stored locally, it indicates that the second service is a service of another cluster, and at this time, the internal DNS module may send an IP acquisition request carrying the second service domain name to the external DNS server. As a preferred scheme, each computer cluster stores an IP address of an external DNS server in advance, and the internal DNS module can access the external DNS server according to the IP address of the external DNS server stored in the cluster. After receiving the IP acquisition request, the external DNS server may determine an IP address corresponding to the second service domain name according to a mapping relationship between the locally stored service domain name and the IP address, and return the IP address to the internal DNS module. After receiving the IP address, the internal DNS module may return the IP address to the first service, so that the first service may send an access request to the second service according to the IP address. It can be understood that, in a specific application, after obtaining the IP address of the second service, the first service may access the second service according to a port number known in advance.
Through the arrangement, the domain name access can be carried out on the services in the computer clusters and in different computer clusters, so that the communication among the services in the clusters, particularly across the clusters, can be realized on the premise of not greatly changing the existing system. It should be noted that the inter-service communication method provided by the present invention is not limited to kubernets and non-kubernets, and can be applied to any computer cluster and any computer cluster.
According to the technical scheme of the embodiment of the invention, an internal DNS module is arranged in each computer cluster to store the mapping relation between the domain name and the IP address of each service in the cluster, an external DNS server is arranged for all the computer clusters to store the mapping relation between the domain name and the IP address of the service provided outwards, and when the services in the clusters access each other, the IP address corresponding to the service domain name can be obtained through the internal DNS module in the cluster; when the services among different clusters access each other, the internal DNS module can request the IP address of the corresponding service to the external DNS server, thereby successfully realizing the domain name access of the services inside the clusters and among the clusters without greatly changing the existing system.
Fig. 2 is a schematic diagram illustrating main steps of a domain name based access method in an embodiment of the present invention, and as shown in fig. 2, the domain name based access method in the embodiment of the present invention may be applied to a system including a plurality of computer clusters and an external DNS server; the external DNS server stores the mapping relation between the domain name and the IP address of the service provided to the outside in each computer cluster, each computer cluster comprises an internal DNS module, and each internal DNS module stores the mapping relation between the domain name and the IP address of each service in the computer cluster where the internal DNS module is located. The domain name-based access method according to the embodiment of the present invention may be specifically executed according to the following steps.
Step S201: when a first service in the plurality of computer clusters wants to access a second service, the first service sends a domain name resolution request carrying a domain name of the second service to an internal DNS module in the computer cluster where the first service is located; and the internal DNS module sends an IP acquisition request carrying the second service domain name to the external DNS server when judging that the second service domain name is not stored locally.
Step S202: after receiving the IP acquisition request, the external DNS server determines an IP address corresponding to a second service domain name and returns the IP address to the internal DNS module; the internal DNS module returns the received IP address to the first service so that the first service sends an access request to the second service according to the IP address.
Preferably, in an embodiment of the present invention, the method may further include: after the first service sends the domain name resolution request to an internal DNS module in the computer cluster where the first service is located: and if the internal DNS module judges that the second service domain name is locally stored, determining an IP address corresponding to the second service domain name and returning the IP address to the first service, and the first service sends an access request to the second service according to the IP address.
As a preferred scheme, each computer cluster stores in advance an IP address of the external DNS server; and when judging that the second service domain name is not stored locally, the internal DNS module sends an IP acquisition request carrying the second service domain name to the external DNS server, and the method comprises the following steps: and the internal DNS module sends the IP acquisition request to the external DNS according to the IP address of the external DNS prestored in the computer cluster where the internal DNS module is positioned.
In addition, in the embodiment of the present invention, the plurality of computer clusters are based on a service oriented architecture SOA or a micro-service architecture, and the plurality of computer clusters include a kubernets cluster and a non-kubernets cluster.
Fig. 3 is a schematic diagram of specific steps executed in the domain name based access method in the embodiment of the present invention, and as shown in fig. 3, in step S301, the first service sends a domain name resolution request to an internal DNS module of the same computer cluster. In step S302, the internal DNS module determines a second service domain name. In step S303, the internal DNS module determines whether a second service domain name is locally stored: if so, executing step S304; if not, step S307 is executed. In step S304, the internal DNS module determines an IP address corresponding to the second service domain name according to a mapping relationship between the locally stored service domain name and the IP address. In step S305, the internal DNS module returns the determined IP address to the first service. In step S306, the first service accesses the second service according to the IP address and the predetermined port, thereby implementing communication between the first service and the second service. In step S307, the internal DNS module sends an IP acquisition request to the external DNS server according to the IP address of the external DNS server stored in advance in the computer cluster. In step S308, the external DNS server receives the IP acquisition request, and determines an IP address corresponding to the second service domain name according to a mapping relationship between the locally stored service domain name and the IP address. In step S309, the external DNS server returns the determined IP address to the internal DNS module. In step S310, the internal DNS module returns the IP address to the first service. In step S311, the first service accesses the second service according to the IP address and the preset port, thereby implementing communication between the first service and the second service.
According to the technical scheme of the embodiment of the invention, an internal DNS module is arranged in each computer cluster to store the mapping relation between the domain name and the IP address of each service in the cluster, an external DNS server is arranged for all the computer clusters to store the mapping relation between the domain name and the IP address of the service provided outwards, and when the services in the clusters access each other, the IP address corresponding to the service domain name can be obtained through the internal DNS module in the cluster; when the services among different clusters access each other, the internal DNS module can request the IP address of the corresponding service to the external DNS server, thereby successfully realizing the domain name access of the services inside the clusters and among the clusters without greatly changing the existing system.
The invention also provides the electronic equipment. The electronic device of the embodiment of the invention comprises: one or more processors; and the storage device is used for storing one or more programs, and when the one or more programs are executed by the one or more processors, the one or more processors realize the domain name-based access method provided by the invention.
Referring now to FIG. 4, a block diagram of a computer system 400 suitable for use with the electronic device implementing an embodiment of the invention is shown. The electronic device shown in fig. 4 is only an example, and should not bring any limitation to the functions and the scope of use of the embodiments of the present invention.
As shown in fig. 4, the computer system 400 includes a Central Processing Unit (CPU)401 that can perform various appropriate actions and processes in accordance with a program stored in a Read Only Memory (ROM)402 or a program loaded from a storage section 408 into a Random Access Memory (RAM) 403. In the RAM403, various programs and data necessary for the operation of the computer system 400 are also stored. The CPU401, ROM 402, and RAM403 are connected to each other via a bus 404. An input/output (I/O) interface 405 is also connected to bus 404.
The following components are connected to the I/O interface 405: an input section 406 including a keyboard, a mouse, and the like; an output section 407 including a display device such as a Cathode Ray Tube (CRT), a Liquid Crystal Display (LCD), and the like, and a speaker; a storage section 408 including a hard disk and the like; and a communication section 409 including a network interface card such as a LAN card, a modem, or the like. The communication section 409 performs communication processing via a network such as the internet. A driver 410 is also connected to the I/O interface 405 as needed. A removable medium 411 such as a magnetic disk, an optical disk, a magneto-optical disk, a semiconductor memory, or the like is mounted on the drive 410 as necessary, so that a computer program read out therefrom is mounted into the storage section 408 as necessary.
In particular, the processes described in the main step diagrams above may be implemented as computer software programs, according to embodiments of the present disclosure. For example, embodiments of the invention include a computer program product comprising a computer program embodied on a computer readable medium, the computer program comprising program code for performing the method illustrated in the main step diagram. In the above-described embodiment, the computer program can be downloaded and installed from a network through the communication section 409, and/or installed from the removable medium 411. The computer program performs the above-described functions defined in the system of the present invention when executed by the central processing unit 401.
It should be noted that the computer readable medium shown in the present invention can be a computer readable signal medium or a computer readable storage medium or any combination of the two. A computer readable storage medium may be, for example, but not limited to, an electronic, magnetic, optical, electromagnetic, infrared, or semiconductor system, apparatus, or device, or any combination of the foregoing. More specific examples of the computer readable storage medium may include, but are not limited to: an electrical connection having one or more wires, a portable computer diskette, a hard disk, a Random Access Memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disc read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the foregoing. In the present invention, a computer readable storage medium may be any tangible medium that can contain, or store a program for use by or in connection with an instruction execution system, apparatus, or device. In the present invention, a computer readable signal medium may include a propagated data signal with computer readable program code embodied therein, for example, in baseband or as part of a carrier wave. Such a propagated data signal may take many forms, including, but not limited to, electro-magnetic, optical, or any suitable combination thereof. A computer readable signal medium may also be any computer readable medium that is not a computer readable storage medium and that can communicate, propagate, or transport a program for use by or in connection with an instruction execution system, apparatus, or device. Program code embodied on a computer readable medium may be transmitted using any appropriate medium, including but not limited to: wireless, wire, fiber optic cable, RF, etc., or any suitable combination of the foregoing.
The flowchart and block diagrams in the figures illustrate the architecture, functionality, and operation of possible implementations of systems, methods and computer program products according to various embodiments of the present invention. In this regard, each block in the flowchart or block diagrams may represent a module, segment, or portion of code, which comprises one or more executable instructions for implementing the specified logical function(s). It should also be noted that, in some alternative implementations, the functions noted in the block may occur out of the order noted in the figures. For example, two blocks shown in succession may, in fact, be executed substantially concurrently, or the blocks may sometimes be executed in the reverse order, depending upon the functionality involved. It will also be noted that each block of the block diagrams or flowchart illustration, and combinations of blocks in the block diagrams or flowchart illustration, can be implemented by special purpose hardware-based systems which perform the specified functions or acts, or combinations of special purpose hardware and computer instructions.
The units described in the embodiments of the present invention may be implemented by software or hardware.
As another aspect, the present invention also provides a computer-readable medium that may be contained in the apparatus described in the above embodiments; or may be separate and not incorporated into the device. The computer readable medium carries one or more programs which, when executed by the apparatus, cause the apparatus to perform steps comprising: when a first service in a plurality of computer clusters wants to access a second service, the first service sends a domain name resolution request carrying a domain name of the second service to an internal DNS module in the computer cluster where the first service is located; the internal DNS module sends an IP acquisition request carrying a second service domain name to an external DNS server when judging that the second service domain name is not stored locally; after receiving the IP acquisition request, the external DNS server determines an IP address corresponding to the second service domain name and returns the IP address to the internal DNS module; the internal DNS module returns the received IP address to the first service so that the first service sends an access request to the second service according to the IP address.
According to the technical scheme of the embodiment of the invention, an internal DNS module is arranged in each computer cluster to store the mapping relation between the domain name and the IP address of each service in the cluster, an external DNS server is arranged for all the computer clusters to store the mapping relation between the domain name and the IP address of the service provided outwards, and when the services in the clusters access each other, the IP address corresponding to the service domain name can be obtained through the internal DNS module in the cluster; when the services among different clusters access each other, the internal DNS module can request the IP address of the corresponding service to the external DNS server, thereby successfully realizing the domain name access of the services inside the clusters and among the clusters without greatly changing the existing system.
The above-described embodiments should not be construed as limiting the scope of the invention. Those skilled in the art will appreciate that various modifications, combinations, sub-combinations, and substitutions can occur, depending on design requirements and other factors. Any modification, equivalent replacement, and improvement made within the spirit and principle of the present invention should be included in the protection scope of the present invention.
Claims (12)
1. A domain name based access system is characterized in that the system comprises a plurality of computer clusters and an external DNS server, wherein each computer cluster comprises an internal DNS module;
the external DNS server stores the mapping relation between the domain name and the IP address of the service provided to the outside in each computer cluster, and each internal DNS module stores the mapping relation between the domain name and the IP address of each service in the computer cluster where the internal DNS module is located;
when a first service in the plurality of computer clusters wants to access a second service, the first service sends a domain name resolution request carrying a domain name of the second service to an internal DNS module in the computer cluster where the first service is located; the internal DNS module sends an IP acquisition request carrying a second service domain name to the external DNS server when judging that the second service domain name is not stored locally;
after receiving the IP acquisition request, the external DNS server determines an IP address corresponding to a second service domain name and returns the IP address to the internal DNS module; the internal DNS module returns the received IP address to the first service so that the first service sends an access request to the second service according to the IP address.
2. The system of claim 1, wherein after the first service sends the domain name resolution request to an internal DNS module in the cluster of computers in which the first service is located: and if the internal DNS module judges that the second service domain name is locally stored, determining an IP address corresponding to the second service domain name and returning the IP address to the first service, and the first service sends an access request to the second service according to the IP address.
3. The system of claim 2, wherein the internal DNS module in any computer cluster accesses the external DNS server according to the IP address of the external DNS server pre-stored in the computer cluster.
4. The system of claim 1, wherein the plurality of computer clusters are based on a Service Oriented Architecture (SOA) or a microservice architecture.
5. The system of any one of claims 1-4, wherein said plurality of computer clusters comprises a Kubernets cluster and a non-Kubernets cluster.
6. A domain name based access method applied to a system comprising a plurality of computer clusters and an external DNS server; wherein the content of the first and second substances,
the external DNS server stores the mapping relation between the domain name and the IP address of the service provided to the outside in each computer cluster, each computer cluster comprises an internal DNS module, and each internal DNS module stores the mapping relation between the domain name and the IP address of each service in the computer cluster where the internal DNS module is located;
the method comprises the following steps:
when a first service in the plurality of computer clusters wants to access a second service, the first service sends a domain name resolution request carrying a domain name of the second service to an internal DNS module in the computer cluster where the first service is located; the internal DNS module sends an IP acquisition request carrying a second service domain name to the external DNS server when judging that the second service domain name is not stored locally;
after receiving the IP acquisition request, the external DNS server determines an IP address corresponding to a second service domain name and returns the IP address to the internal DNS module; the internal DNS module returns the received IP address to the first service so that the first service sends an access request to the second service according to the IP address.
7. The method of claim 6, further comprising:
after the first service sends the domain name resolution request to an internal DNS module in the computer cluster where the first service is located: and if the internal DNS module judges that the second service domain name is locally stored, determining an IP address corresponding to the second service domain name and returning the IP address to the first service, and the first service sends an access request to the second service according to the IP address.
8. The method of claim 7, wherein each computer cluster pre-stores an IP address of the external DNS server; and when judging that the second service domain name is not stored locally, the internal DNS module sends an IP acquisition request carrying the second service domain name to the external DNS server, and the method comprises the following steps:
and the internal DNS module sends the IP acquisition request to the external DNS according to the IP address of the external DNS prestored in the computer cluster where the internal DNS module is positioned.
9. The method of claim 6, wherein the plurality of computer clusters are based on a Service Oriented Architecture (SOA) or a microservice architecture.
10. The method of any one of claims 6-9, wherein the plurality of computer clusters comprises a kubernets cluster and a non-kubernets cluster.
11. An electronic device, comprising:
one or more processors;
a storage device for storing one or more programs,
when executed by the one or more processors, cause the one or more processors to implement the method of any one of claims 6-10.
12. A computer-readable storage medium, on which a computer program is stored, which, when being executed by a processor, carries out the method according to any one of claims 6-10.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202010620591.8A CN111818194A (en) | 2020-07-01 | 2020-07-01 | Domain name based access system and method |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202010620591.8A CN111818194A (en) | 2020-07-01 | 2020-07-01 | Domain name based access system and method |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| CN111818194A true CN111818194A (en) | 2020-10-23 |
Family
ID=72856855
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN202010620591.8A Pending CN111818194A (en) | 2020-07-01 | 2020-07-01 | Domain name based access system and method |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN111818194A (en) |
Cited By (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN112671860A (en) * | 2020-12-15 | 2021-04-16 | 杭州溪塔科技有限公司 | Service access method, system, electronic device and medium for kubernets cluster |
| CN113067860A (en) * | 2021-03-16 | 2021-07-02 | 北京百度网讯科技有限公司 | Method, apparatus, device, medium and product for synchronizing information |
| CN113438307A (en) * | 2021-06-22 | 2021-09-24 | 北京金山安全软件有限公司 | Domain name resolution method, server, system and storage medium |
| CN114089917A (en) * | 2021-11-19 | 2022-02-25 | 中国电信集团系统集成有限责任公司 | Distributed object storage cluster, capacity expansion method and device thereof, and electronic equipment |
| CN114125051A (en) * | 2022-01-26 | 2022-03-01 | 飞狐信息技术（天津）有限公司 | Agent method and device for dynamic service discovery |
Citations (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN106067890A (en) * | 2016-03-29 | 2016-11-02 | 北京肇煜宏泰信息科技有限公司 | A kind of domain name analytic method, Apparatus and system |
| CN106921699A (en) * | 2015-12-25 | 2017-07-04 | 北京奇虎科技有限公司 | A kind of Network Access Method, device and system |
| WO2019028683A1 (en) * | 2017-08-08 | 2019-02-14 | 深圳前海达闼云端智能科技有限公司 | Method and system for acquiring and collecting client local dns server |
| CN111182089A (en) * | 2019-12-31 | 2020-05-19 | 北京金山云网络技术有限公司 | Container cluster system, method and device for accessing big data assembly and server |
-
2020
- 2020-07-01 CN CN202010620591.8A patent/CN111818194A/en active Pending
Patent Citations (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN106921699A (en) * | 2015-12-25 | 2017-07-04 | 北京奇虎科技有限公司 | A kind of Network Access Method, device and system |
| CN106067890A (en) * | 2016-03-29 | 2016-11-02 | 北京肇煜宏泰信息科技有限公司 | A kind of domain name analytic method, Apparatus and system |
| WO2019028683A1 (en) * | 2017-08-08 | 2019-02-14 | 深圳前海达闼云端智能科技有限公司 | Method and system for acquiring and collecting client local dns server |
| CN111182089A (en) * | 2019-12-31 | 2020-05-19 | 北京金山云网络技术有限公司 | Container cluster system, method and device for accessing big data assembly and server |
Cited By (7)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN112671860A (en) * | 2020-12-15 | 2021-04-16 | 杭州溪塔科技有限公司 | Service access method, system, electronic device and medium for kubernets cluster |
| CN113067860A (en) * | 2021-03-16 | 2021-07-02 | 北京百度网讯科技有限公司 | Method, apparatus, device, medium and product for synchronizing information |
| CN113067860B (en) * | 2021-03-16 | 2022-11-11 | 北京百度网讯科技有限公司 | Method, apparatus, device, medium and product for synchronizing information |
| CN113438307A (en) * | 2021-06-22 | 2021-09-24 | 北京金山安全软件有限公司 | Domain name resolution method, server, system and storage medium |
| CN114089917A (en) * | 2021-11-19 | 2022-02-25 | 中国电信集团系统集成有限责任公司 | Distributed object storage cluster, capacity expansion method and device thereof, and electronic equipment |
| CN114125051A (en) * | 2022-01-26 | 2022-03-01 | 飞狐信息技术（天津）有限公司 | Agent method and device for dynamic service discovery |
| CN114125051B (en) * | 2022-01-26 | 2022-05-27 | 飞狐信息技术（天津）有限公司 | Agent method and device for dynamic service discovery |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN111818194A (en) | Domain name based access system and method | |
| CN113489772B (en) | Network request processing method and device and electronic equipment | |
| CN110391938B (en) | Method and apparatus for deploying services | |
| CN111221572B (en) | Method, device, medium and equipment for automatically adapting to running environment | |
| CN109117252A (en) | Method, system and the container cluster management system of task processing based on container | |
| CN110658794A (en) | Manufacturing execution system | |
| CN111427701A (en) | Workflow engine system and business processing method | |
| CN109104368B (en) | Connection request method, device, server and computer readable storage medium | |
| CN107291481A (en) | A kind of component update method, device and system | |
| CN110083341A (en) | A kind of front end development platform, front end development approach and page display method | |
| EP4060496A2 (en) | Method, apparatus, device and storage medium for running inference service platform | |
| CN113821352A (en) | Remote service calling method and device | |
| CN111309304B (en) | Method, device, medium and electronic equipment for generating IDL file | |
| CN117112122A (en) | Cluster deployment method and device | |
| CN112394907A (en) | Container-based delivery system construction method, application delivery method and delivery system | |
| CN113760638A (en) | Log service method and device based on kubernets cluster | |
| CN113342457A (en) | Kubernetes scheduling method based on registration and discovery of Eureka service | |
| US7454764B2 (en) | Method and system for on-demand programming model transformation | |
| CN113204425B (en) | Method, device, electronic equipment and storage medium for process management internal thread | |
| CN109005250A (en) | Method and apparatus for accessing server-side | |
| CN112559001A (en) | Method and device for updating application | |
| CN111625326A (en) | Task pipeline execution method and device and electronic equipment | |
| CN110221854A (en) | A kind of multi-process data-updating method, device, medium and electronic equipment | |
| CN113452670B (en) | Phishing blocking method, device, equipment and medium based on SDN network | |
| CN116319322B (en) | Power equipment node communication connection method, device, equipment and computer medium |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| TA01 | Transfer of patent application right |
Effective date of registration: 20220922 Address after: 25 Financial Street, Xicheng District, Beijing 100033 Applicant after: CHINA CONSTRUCTION BANK Corp. Address before: 25 Financial Street, Xicheng District, Beijing 100033 Applicant before: CHINA CONSTRUCTION BANK Corp. Applicant before: Jianxin Financial Science and Technology Co.,Ltd. |
|
| TA01 | Transfer of patent application right | ||
| RJ01 | Rejection of invention patent application after publication |
Application publication date: 20201023 |
|
| RJ01 | Rejection of invention patent application after publication |