CN114338595B - Distributed processing method and device for message, storage medium and processor - Google Patents

Distributed processing method and device for message, storage medium and processor Download PDF

Info

Publication number
CN114338595B
CN114338595B CN202111680021.9A CN202111680021A CN114338595B CN 114338595 B CN114338595 B CN 114338595B CN 202111680021 A CN202111680021 A CN 202111680021A CN 114338595 B CN114338595 B CN 114338595B
Authority
CN
China
Prior art keywords
target
address
message
mapping
state
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Active
Application number
CN202111680021.9A
Other languages
Chinese (zh)
Other versions
CN114338595A (en
Inventor
孙甲辉
刘爽
张作涛
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Hillstone Networks Co Ltd
Original Assignee
Hillstone Networks Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Hillstone Networks Co Ltd filed Critical Hillstone Networks Co Ltd
Priority to CN202111680021.9A priority Critical patent/CN114338595B/en
Publication of CN114338595A publication Critical patent/CN114338595A/en
Application granted granted Critical
Publication of CN114338595B publication Critical patent/CN114338595B/en
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Landscapes

  • Data Exchanges In Wide-Area Networks (AREA)

Abstract

The application discloses a distributed processing method, a distributed processing device, a storage medium and a distributed processing processor for messages. The method comprises the following steps: the IP address in the response message is acquired through the target equipment, wherein the target equipment at least comprises: the target control processor and the plurality of target service processors respond to the message request sent by the target client by the target DNS server; determining, by the target control processor, a target mapping configuration according to the IP address, wherein the target mapping configuration includes at least: the mapping relation between the IP address and the target IP address, wherein the target IP address is a virtual IP address with the hidden IP address; and transmitting message data in each target service processor according to the target mapping configuration, wherein the message data is data to be sent to the target webpage server. By the method and the device, the problem of access flow cutoff caused by the fact that the message request and the actual service flow are not processed by the same CPU in the related technology is solved.

Description

Distributed processing method and device for message, storage medium and processor
Technical Field
The present invention relates to the field of data transmission processing technologies, and in particular, to a method and apparatus for distributed processing of a packet, a storage medium, and a processor.
Background
In the intranet isolation scenario, the internal network accesses a website, and needs to query the domain name server for the domain name IP address. For network security reasons, the real IP of the external network needs to be hidden from the internal network. The DNS rewrite function is used to solve this problem, and is used to modify the IP address in the domain name resolution packet returned by the domain name server, and replace the IP address with the virtual IP address specified by the user, so as to achieve the purpose of hiding the external network location from the internal network, where the implementation manner in the prior art cannot meet the requirement of the distributed scenario, the DNS request and the actual service traffic are not necessarily processed by the same CPU, and each CPU alone establishes a mapping relationship, which causes the traffic to have a difference in the behavior of different CPUs, and causes the access traffic to flow break.
Aiming at the problem that access traffic is cut off when a message request and actual traffic are not processed by the same CPU in the related art, no effective solution is proposed at present.
Disclosure of Invention
The main purpose of the present application is to provide a method, an apparatus, a storage medium, and a processor for processing a message in a distributed manner, so as to solve the problem of access traffic interruption caused when a message request and an actual traffic are not processed by the same CPU in the related art.
In order to achieve the above object, according to one aspect of the present application, a method for distributed processing of a message is provided. The method comprises the following steps: the IP address in the response message is acquired through the target equipment, wherein the target equipment at least comprises: the target control processor and the plurality of target service processors respond to the message request sent by the target client by the target DNS server; determining, by the target control processor, a target mapping configuration according to the IP address, wherein the target mapping configuration includes at least: the mapping relation between the IP address and the target IP address, wherein the target IP address is a virtual IP address with the hidden IP address; and transmitting message data in each target service processor according to the target mapping configuration, wherein the message data is data to be sent to the target webpage server.
Further, before the IP address in the response message is acquired by the target device, the method further includes: the target client sends a message request to a target DNS server; the target DNS server receives the message request and sends a response message to the target device.
Further, before the target control processor determines the target mapping configuration according to the IP address, the method further includes: each target service processor acquires an IP address; determining a target configuration requirement corresponding to the IP address, wherein the target configuration requirement is a target IP address required by the IP address; the target configuration requirements are sent to the target control processor.
Further, after each target service processor receives the IP address, the method further comprises: if the current acquired IP address is the same as the corresponding IP address when the state information of the target mapping relation in the historical target configuration requirement is the first target state, storing a response message corresponding to the current acquired IP address into a target linked list, wherein the target linked list comprises a plurality of response messages with the same IP address, and the first target state is in resource allocation; and determining a target IP address corresponding to the currently acquired IP address according to the target mapping relation.
Further, determining, by the target control processor, the target mapping configuration from the IP address includes: matching the IP address with a target rule according to a target configuration requirement by a target control processor to obtain a matching result; and determining target mapping configuration according to the matching result, wherein the target mapping configuration comprises a mapping relation between the IP address and the target IP address.
Further, after determining, by the target control processor, the target mapping configuration from the IP address, the method further comprises: obtaining a mapping relation in target mapping configuration in a target control processor; and synchronizing the mapping relation to each target service processor so that each target service processor contains the mapping relation.
Further, after the target control processor determines the target mapping configuration from the IP address, the method further comprises: determining target state information of each mapping relation in the target mapping configuration according to the state machine, wherein the target state information comprises at least one of the following: invalid state, resource allocation, state to be validated, validated state, deleted state, state to be deleted.
Further, transmitting the message data in each target service processor according to the target mapping configuration includes: if the state information of the mapping relation in each target service processor is a second target state, transmitting the message data according to the target mapping configuration, wherein the second target state comprises at least one of the following: a state to be validated, and a state to be deleted.
Further, before transmitting the message data according to the target mapping configuration in each target service processor, the method further includes: modifying the IP address according to the target mapping configuration to obtain a modified IP address; and determining the modified IP address as a target IP address.
In order to achieve the above object, according to another aspect of the present application, a distributed processing apparatus for a packet is provided. The device comprises: the first obtaining unit is configured to obtain, by using the target device, an IP address in the response packet, where the target device at least includes: the target control processor and the plurality of target service processors respond to the message request sent by the target client by the target DNS server; a first determining unit, configured to determine, by a target control processor, a target mapping configuration according to the IP address, where the target mapping configuration at least includes: the mapping relation between the IP address and the target IP address, wherein the target IP address is a virtual IP address with the hidden IP address; and the transmission unit is used for transmitting the message data in each target service processor according to the target mapping configuration, wherein the message data is the data to be sent to the target webpage server.
Further, the apparatus further comprises: the first sending unit is used for sending a message request to the target DNS server by the target client before the IP address in the response message is acquired by the target device; and the receiving unit is used for receiving the message request by the target DNS server and sending a response message to the target equipment.
Further, the apparatus further comprises: a second obtaining unit, configured to obtain an IP address by each target service processor before the target control processor determines a target mapping configuration according to the IP address; the second determining unit is used for determining a target configuration requirement corresponding to the IP address, wherein the target configuration requirement is a target IP address required by the IP address; and the second sending unit is used for sending the target configuration requirement to the target control processor.
Further, the apparatus further comprises: the storage unit is used for storing a response message corresponding to the current acquired IP address into a target linked list after each target service processor receives the IP address if the current acquired IP address is the same as the corresponding IP address when the state information of the target mapping relation in the historical target configuration requirement is in a first target state, wherein the target linked list comprises a plurality of response messages with the same IP address, and the first target state is in resource allocation; and the third determining unit is used for determining a target IP address corresponding to the currently acquired IP address according to the target mapping relation.
Further, the first determination unit includes: the matching module is used for matching the IP address with the target rule according to the target configuration requirement through the target control processor to obtain a matching result; and the determining module is used for determining target mapping configuration according to the matching result, wherein the target mapping configuration comprises a mapping relation between the IP address and the target IP address.
Further, the apparatus further comprises: a third obtaining unit, configured to obtain, after determining, by the target control processor, a mapping relationship in the target mapping configuration in the target control processor according to the IP address; and the synchronization unit is used for synchronizing the mapping relation to each target service processor so that each target service processor contains the mapping relation.
Further, the apparatus further comprises: a fourth determining unit, configured to determine, according to the state machine, target state information of each mapping relationship in the target mapping configuration after the target control processor determines the target mapping configuration according to the IP address, where the target state information includes at least one of: invalid state, resource allocation, state to be validated, validated state, deleted state, state to be deleted.
Further, the transmission unit includes: the transmission module is configured to transmit the message data according to the target mapping configuration if the state information of the mapping relationship in each target service processor is a second target state, where the second target state includes at least one of the following: a state to be validated, and a state to be deleted.
Further, the apparatus further comprises: the modifying unit is used for modifying the IP address according to the target mapping configuration before the message data is transmitted according to the target mapping configuration in each target service processor, so as to obtain a modified IP address; and a fifth determining unit, configured to determine the modified IP address as the target IP address.
According to another aspect of the embodiments of the present application, there is also provided a processor, configured to execute a program, where the program executes the method of any one of the above.
According to another aspect of the embodiments of the present application, there is also provided a computer-readable storage medium having stored thereon a computer program/instruction which, when executed by a processor, performs the method of any of the above.
Through the application, the following steps are adopted: the IP address in the response message is acquired through the target equipment, wherein the target equipment at least comprises: the target control processor and the plurality of target service processors respond to the message request sent by the target client by the target DNS server; determining, by the target control processor, a target mapping configuration according to the IP address, wherein the target mapping configuration includes at least: the mapping relation between the IP address and the target IP address, wherein the target IP address is a virtual IP address with the hidden IP address; and transmitting message data in each target service processor according to the target mapping configuration, wherein the message data is data to be sent to the target webpage server. The method solves the problem of flow interruption of access flow caused by the fact that the message request and the actual service flow are not processed by the same CPU in the related technology. By transmitting the message data in each target service processor according to the target mapping configuration, the effect that the access flow is not cut off when the message request and the actual service flow are not processed by the same CPU is achieved.
Drawings
The accompanying drawings, which are included to provide a further understanding of the application, illustrate and explain the application and are not to be construed as limiting the application. In the drawings:
FIG. 1 is a flow chart of a method for distributed processing of messages provided in accordance with an embodiment of the present application;
fig. 2 is a schematic diagram of a distributed device hardware structure of a method for processing a message according to an embodiment of the present application;
FIG. 3 is a schematic diagram of a DNS rewrite function of a method for distributed processing of a message according to an embodiment of the present application;
FIG. 4 is a schematic diagram of a configured DNS rewrite rule of a method for distributed processing of a message according to an embodiment of the present application;
fig. 5 is a schematic diagram of an intranet user webpage access message interaction process of the distributed processing method of the message according to the embodiment of the present application;
FIG. 6 is a schematic diagram of a DNS request IP and a DNS response IP mapping representation of a method for distributed processing of messages according to an embodiment of the present application;
fig. 7 is a schematic diagram illustrating the state transition of the main control card entry of the distributed processing method of the packet according to the embodiment of the present application;
fig. 8 is a schematic diagram illustrating service card entry state migration of a distributed processing method of a packet according to an embodiment of the present application;
FIG. 9 is a schematic diagram of a message structure when an Entry of a method for distributed processing of a message according to an embodiment of the present application carries a message;
fig. 10 is an overall operation schematic diagram of a method for distributed processing of a packet according to an embodiment of the present application;
FIG. 11 is a schematic diagram of an asynchronous message update flow overwrite failure in a distributed scenario of a method for distributed processing of messages according to an embodiment of the present application;
FIG. 12 is a schematic diagram I of a distributed processing apparatus for messages according to an embodiment of the present application;
fig. 13 is a schematic diagram of a distributed processing apparatus for a packet according to an embodiment of the present application.
Detailed Description
It should be noted that, in the case of no conflict, the embodiments and features in the embodiments may be combined with each other. The present application will be described in detail below with reference to the accompanying drawings in conjunction with embodiments.
In order to make the present application solution better understood by those skilled in the art, the following description will be made in detail and with reference to the accompanying drawings in the embodiments of the present application, it is apparent that the described embodiments are only some embodiments of the present application, not all embodiments. All other embodiments, which can be made by one of ordinary skill in the art based on the embodiments herein without making any inventive effort, shall fall within the scope of the present application.
It should be noted that the terms "first," "second," and the like in the description and claims of the present application and the above figures are used for distinguishing between similar objects and not necessarily for describing a particular sequential or chronological order. It is to be understood that the data so used may be interchanged where appropriate in order to describe the embodiments of the present application described herein. Furthermore, the terms "comprises," "comprising," and "having," and any variations thereof, are intended to cover a non-exclusive inclusion, such that a process, method, system, article, or apparatus that comprises a list of steps or elements is not necessarily limited to those steps or elements expressly listed but may include other steps or elements not expressly listed or inherent to such process, method, article, or apparatus.
According to an embodiment of the application, a distributed processing method of a message is provided.
Fig. 1 is a flow chart of a method of distributed processing of messages according to an embodiment of the present application. As shown in fig. 1, the method comprises the steps of:
step S101, obtaining an IP address in a response message through target equipment, wherein the target equipment at least comprises: the target control processor and the plurality of target service processors respond to the message request sent by the target client by the target DNS server.
Specifically, the target device may be a network security device, after the intranet client (corresponding to the target client in the application, the following description is the same) sends a web page request to the DNS server, the DNS server responds to a message request sent by the intranet client, and obtains an IP address in a response message, where, as shown in fig. 2, there are multiple boards in the network security device, and each board includes a CPU. One board is generally used as a master Control card (corresponding to a target Control processor in the present application, hereinafter referred to as a Control card) to manage configuration, and the remaining boards are used as service cards (corresponding to a target service processor in the present application, hereinafter referred to as a Working card) to handle service traffic.
Optionally, in the method for distributed processing of a message provided in the embodiment of the present application, before the IP address in the response message is acquired by the target device, the method further includes: the target client sends a message request to a target DNS server; the target DNS server receives the message request and sends a response message to the target device.
Specifically, as shown in fig. 3, an intranet Client (corresponding to a target Client in the application) accesses a website www.aaa.com, initiates a DNS domain name resolution request to a DNS server (corresponding to a target DNS server in the application), the request message reaches the DNS server through an ISP network by using a network security device (FW), the DNS server queries and fills in a DNS reply message (corresponding to a response message in the application), and before the request message is sent to the intranet Client, the request message needs to be processed and transmitted through the network security device, so that the security of data transmission processing is improved.
Step S102, determining, by the target control processor, a target mapping configuration according to the IP address, wherein the target mapping configuration at least comprises: and the mapping relation between the IP address and the target IP address, wherein the target IP address is a virtual IP address with the hidden IP address.
Step S103, transmitting message data in each target service processor according to the target mapping configuration, wherein the message data is the data to be sent to the target webpage server.
Specifically, before determining, by the target control processor, the target mapping configuration according to the IP address, the IP address needs to be matched with a target rule, and specifically, the target rule may be a DNS rewrite rule as shown in fig. 4.
Optionally, in the method for distributed processing of a message provided in the embodiment of the present application, before the target control processor determines the target mapping configuration according to the IP address, the method further includes: each target service processor acquires an IP address; determining a target configuration requirement corresponding to the IP address, wherein the target configuration requirement is a target IP address required by the IP address; the target configuration requirements are sent to the target control processor.
Specifically, after the target service processor in the network security device acquires the IP address included in the response message, the target service processor sends up a request IP resource message (corresponding to the target configuration requirement in the application) to the target control processor.
Optionally, in the method for distributed processing of a packet provided in the embodiment of the present application, after each target service processor receives an IP address, the method further includes: if the current acquired IP address is the same as the corresponding IP address when the state information of the target mapping relation in the historical target configuration requirement is the first target state, storing a response message corresponding to the current acquired IP address into a target linked list, wherein the target linked list comprises a plurality of response messages with the same IP address, and the first target state is in resource allocation; and determining a target IP address corresponding to the currently acquired IP address according to the target mapping relation.
Specifically, if a plurality of request messages of the same reply IP reach the service card, and the service card has requested the IP resource message, and the mapping relation state under the IP resource message is in resource allocation, then a response message corresponding to the currently acquired IP address is put into a linked list queue, and according to the target mapping relation in the current message linked list, the target IP address corresponding to the currently acquired IP address is determined, so that the resources of a target control processor are further saved, the number of times of message interaction between cards is reduced, and the working efficiency is improved.
Optionally, in the method for distributed processing of a packet provided in the embodiment of the present application, determining, by the target control processor, a target mapping configuration according to the IP address includes: matching the IP address with a target rule according to a target configuration requirement by a target control processor to obtain a matching result; and determining target mapping configuration according to the matching result, wherein the target mapping configuration comprises a mapping relation between the IP address and the target IP address.
Specifically, as shown in fig. 5, the target client sends a message request to the DNS server, after the DNS server replies a response message, the response message is processed by the network security device (i.e., FW, the same applies hereinafter), and then sent to the intranet client, specifically in FW, the real IP 150.1.1.10 in the reply message matches the IP address with the target rule in the main control card, if the matching result is 192.168.1.20 (modified intranet IP), which represents that the matching is successful, the mapping relationship in the current target mapping configuration is 150.1.1.10-192.168.1.20 according to the matching result, and the mapping relationship between the real IP and the response IP is created in the network security device, so that the client has higher efficiency when sending traffic.
For example, the main control card respectively allocates the modified IP addresses to the service cards according to the IP resource message request reported by the service cards and the target rule, where a mapping relationship exists between the modified IP addresses and the IP addresses included in the response message, for example, the mapping relationship may be mapping table information as shown in fig. 6, where the mapping relationship may be rsponase IP (real IP in DNS reply message): 200.1.1.10-rewriteip (modified intranet IP): 192.168.1.10; rsponse IP (real IP in DNS reply message): 200.1.1.20-rewriteip (modified intranet IP): 192.168.1.20; and forming a target mapping configuration according to the plurality of mapping relations, and integrating the plurality of mapping relations in the target mapping configuration to enable the client to have higher efficiency when sending the traffic.
Optionally, in the method for distributed processing of a packet provided in the embodiment of the present application, after determining, by the target control processor, a target mapping configuration according to an IP address, the method further includes: obtaining a mapping relation in target mapping configuration in a target control processor; and synchronizing the mapping relation to each target service processor so that each target service processor contains the mapping relation.
For example, if the main control card allocates the target IP address resource to the current service card, then synchronizes the mapping relationship corresponding to the target IP address to all the remaining service cards except the current service card, so that each service card includes the mapping relationship in the current service card, and by synchronizing the mapping relationship to the other service cards, when the message request and the actual service traffic are not processed by the same CPU, the access traffic will not be interrupted, and the application adopts the distributed processing technology, so that the application has higher efficiency.
Optionally, in the method for distributed processing of a message provided in the embodiment of the present application, after the target control processor determines the target mapping configuration according to the IP address, the method further includes: determining target state information of each mapping relation in the target mapping configuration according to the state machine, wherein the target state information comprises at least one of the following: invalid state, resource allocation, state to be validated, validated state, deleted state, state to be deleted.
Specifically, mapping table information is managed by using a state machine, mapping tables of all cards are updated by using the state machine, target state information of each mapping relation in target mapping configuration is determined according to the state machine, and one IP mapping relation in the mapping table of each service card is referred to as an Entry, wherein the Entry has a plurality of states. Specifically as shown in table 1:
TABLE 1
The internet surfing behavior of the user in table 1 can be divided into two phases, wherein the first phase is a DNS request to obtain the IP of the website, and the second phase is the traffic flow interacting with the IP; the first stage safety equipment takes out the IP address of the DNS reply message, compares the IP address with the DNS rewrite rule of the user, modifies the IP address into the rewrite IP of the rule if the IP address accords with the rule, and establishes an IP mapping relation; the second stage user initiates a communication request to the website IP, after the equipment receives the request, the equipment checks the destination IP, accords with the mapping relation established in the first step, and changes the destination address into the real website IP. PENDING VALID and PENDING DELETE, the two states realize that the intermediate state can normally process traffic in the transition process of the Entry state, and ensure that services in two stages of DNS analysis and internet traffic can be seamlessly connected on the device.
Specifically, the main control card Entry state transition diagram is shown in fig. 7, the service card Entry state transition diagram is shown in fig. 8, and a message buffer queuing mechanism is introduced in the Entry establishment process, so that the message processing load of the main control card is reduced. After the business card establishes an Entry request to the main control card, the Entry is firstly established locally, and the state is ALLOCATING. And adds the message to one message linked list (corresponding to the target linked list in the application) of the Entry, specifically as shown in fig. 9, one message linked list of the Entry may carry a plurality of messages to be converted.
It should be noted that, in the localization state introduced in the present application, if the response packet arrives at the target device, the target device does not have a corresponding Entry, the Entry in the localization state may be established first, the response packet is cached locally, and after the main control card allocates the IP resource and implements synchronization, the IP address included in the response packet is modified and sent out. The DNS reply message (namely the response message) received in any state can be processed by the target equipment, so that the occurrence of packet loss is avoided.
Optionally, in the method for distributed processing of a message provided in the embodiment of the present application, before transmitting, in each target service processor, message data according to a target mapping configuration, the method further includes: modifying the IP address according to the target mapping configuration to obtain a modified IP address; and determining the modified IP address as a target IP address.
Specifically, before the client initiates a request for converting the traffic flow (corresponding to the message data in the present application) in the second stage according to the target IP address, if the state information of the mapping relationship is in an effective state, the Entry in the state is used to modify the IP address included in the DNS reply message (corresponding to the first stage described above).
For example, if the Entry state is changed to VALID, checking a message linked list of the Entry, if there is a message, acquiring a corresponding relation of the Entry in the target mapping configuration, modifying the IP address into a target IP address (i.e., modified intranet IP) according to the corresponding relation of the Entry, and then sending the target IP address to the intranet user client via FW.
Specifically, as shown in fig. 10, after the response message arrives at the service card message buffer queue, the service card creates an Entry locally, and adds the message into the message linked list of the Entry, where the Entry state allocates resources for the waiting host control card. The main control card controls the service card to generate an Entry, when the Entry state is changed into VALID, the message in the message linked list of the Entry is modified, and after the intranet user client obtains the target IP address (modified IP) sent by the service card, the intranet user client sends the internet surfing flow (i.e. message data) to the target IP address (modified IP) replied by the DNS, and the internet surfing flow is distributed to the target service processor for transmission.
Optionally, in the method for distributed processing of a message provided in the embodiment of the present application, transmitting, in each target service processor, message data according to a target mapping configuration includes: if the state information of the mapping relation in each target service processor is a second target state, transmitting the message data according to the target mapping configuration, wherein the second target state comprises at least one of the following: a state to be validated, and a state to be deleted.
Specifically, as shown in fig. 10, the master card synchronizes the Entry established in the service card 1 to the service card, if the service card 1 is VALID, and the service card 2 has not yet received the update message, the state is PENDING VALID (to be validated). The service card 1 can process the DNS request message and the client initiates access to the modified IP. The traffic access message in the second stage reaches the service card 2, although the Entry is PENDING VALID, the access traffic can be processed, and the service traffic (corresponding to the message data in the application) will not be interrupted, so that the scenario as shown in fig. 11 is further avoided: at time T1, the device receives the reply message sent by the DNS server, the service card requests the main control card to establish the Entry, the main control card establishes the Entry and synchronizes the Entry to the service card 2, and the service card 2 sends back the rewritten DNS reply message at T2. At the time T3, the client sends the internet traffic to the converted IP, the traffic is distributed to the service card 1 for processing, but the service card 1 is not synchronized to the Entry at the time T3, the destination IP of the traffic cannot be converted into a correct real website IP according to the Entry relationship, the traffic can be blocked by a security policy, and the problem of user internet access failure is caused. Similarly, in the scenario of deleting Entry of the service card 1 in fig. 11, the DNS reply traffic is distributed to the service card 2 that has not been deleted, and the user traffic cannot process the message data when reaching the service card 1 deleted by Entry, so as to solve the above scenario problem, in the same way, the application introduces a PENDING DELETE (to be deleted) state, so as to ensure that the service card that has not received the deletion notification can still process the internet traffic.
Specifically, according to step S101-step S104, by synchronizing the mapping relationship to other service cards and configuring the state corresponding to the mapping relationship, when the message request and the actual service traffic are not processed by the same CPU, the access traffic will not be interrupted, and the application adopts the distributed processing technology, so that the application has higher efficiency.
In summary, in the method for distributed processing of a message provided in the embodiments of the present application, an IP address in a response message is obtained by a target device, where the target device at least includes: the target control processor and the plurality of target service processors respond to the message request sent by the target client by the target DNS server; determining, by the target control processor, a target mapping configuration according to the IP address, wherein the target mapping configuration includes at least: the mapping relation between the IP address and the target IP address, wherein the target IP address is a virtual IP address with the hidden IP address; and transmitting message data in each target service processor according to the target mapping configuration, wherein the message data is data to be sent to the target webpage server. The method solves the problem of flow interruption of access flow caused by the fact that the message request and the actual service flow are not processed by the same CPU in the related technology. By transmitting the message data in each target service processor according to the target mapping configuration, the effect that the access flow is not cut off when the message request and the actual service flow are not processed by the same CPU is achieved.
It should be noted that the steps illustrated in the flowcharts of the figures may be performed in a computer system such as a set of computer executable instructions, and that although a logical order is illustrated in the flowcharts, in some cases the steps illustrated or described may be performed in an order other than that illustrated herein.
The embodiment of the application also provides a distributed processing device for the message, and it should be noted that the distributed processing device for the message in the embodiment of the application can be used for executing the distributed processing method for the message provided in the embodiment of the application. The following describes a distributed processing apparatus for a packet provided in an embodiment of the present application.
Fig. 12 is a schematic diagram of a distributed processing apparatus for a packet according to an embodiment of the present application. As shown in fig. 12, the apparatus includes: a first acquisition unit 1201, a first determination unit 1202, a transmission unit 1203.
Specifically, the first obtaining unit 1201 is configured to obtain, by the target device, the IP address in the response message, where the target device at least includes: the target control processor and the plurality of target service processors respond to the message request sent by the target client by the target DNS server;
A first determining unit 1202, configured to determine, by the target control processor, a target mapping configuration according to the IP address, where the target mapping configuration at least includes: the mapping relation between the IP address and the target IP address, wherein the target IP address is a virtual IP address with the hidden IP address;
and the transmission unit 1203 is configured to transmit, in each target service processor, the message data according to the target mapping configuration, where the message data is data to be sent to the target web server.
In summary, in the distributed processing apparatus for a packet provided in the embodiment of the present application, the first obtaining unit 1201 obtains, by a target device, an IP address in a response packet, where the target device at least includes: the target control processor and the plurality of target service processors respond to the message request sent by the target client by the target DNS server; the first determining unit 1202 determines, by the target control processor, a target mapping configuration according to the IP address, where the target mapping configuration includes at least: the mapping relation between the IP address and the target IP address, wherein the target IP address is a virtual IP address with the hidden IP address; the transmission unit 1203 transmits the message data in each target service processor according to the target mapping configuration, where the message data is the data to be sent to the target web server, so as to solve the problem of access traffic interruption caused when the message request and the actual service traffic are not processed by the same CPU in the related art. By transmitting the message data in each target service processor according to the target mapping configuration, the effect that the access flow is not cut off when the message request and the actual service flow are not processed by the same CPU is achieved.
Optionally, in the distributed processing apparatus for a packet provided in the embodiment of the present application, the apparatus further includes: the first sending unit is used for sending a message request to the target DNS server by the target client before the IP address in the response message is acquired by the target device; and the receiving unit is used for receiving the message request by the target DNS server and sending a response message to the target equipment.
Optionally, in the distributed processing apparatus for a packet provided in the embodiment of the present application, the apparatus further includes: a second obtaining unit, configured to obtain an IP address by each target service processor before the target control processor determines a target mapping configuration according to the IP address; the second determining unit is used for determining a target configuration requirement corresponding to the IP address, wherein the target configuration requirement is a target IP address required by the IP address; and the second sending unit is used for sending the target configuration requirement to the target control processor.
Optionally, in the distributed processing device for a message provided in the embodiment of the present application, the device further includes: the storage unit is used for storing a response message corresponding to the current acquired IP address into a target linked list after each target service processor receives the IP address if the current acquired IP address is the same as the corresponding IP address when the state information of the target mapping relation in the historical target configuration requirement is in a first target state, wherein the target linked list comprises a plurality of response messages with the same IP address, and the first target state is in resource allocation; and the third determining unit is used for determining a target IP address corresponding to the currently acquired IP address according to the target mapping relation.
Optionally, in the distributed processing apparatus for a packet provided in the embodiment of the present application, the first determining unit includes: the matching module is used for matching the IP address with the target rule according to the target configuration requirement through the target control processor to obtain a matching result; and the determining module is used for determining target mapping configuration according to the matching result, wherein the target mapping configuration comprises a mapping relation between the IP address and the target IP address.
Optionally, in the distributed processing apparatus for a packet provided in the embodiment of the present application, the apparatus further includes: a third obtaining unit, configured to obtain, after determining, by the target control processor, a mapping relationship in the target mapping configuration in the target control processor according to the IP address; and the synchronization unit is used for synchronizing the mapping relation to each target service processor so that each target service processor contains the mapping relation.
Optionally, in the distributed processing apparatus for a packet provided in the embodiment of the present application, the apparatus further includes: a fourth determining unit, configured to determine, according to the state machine, target state information of each mapping relationship in the target mapping configuration after the target control processor determines the target mapping configuration according to the IP address, where the target state information includes at least one of: invalid state, resource allocation, state to be validated, validated state, deleted state, state to be deleted.
Optionally, in the distributed processing apparatus for a packet provided in the embodiment of the present application, the transmission unit includes: the transmission module is configured to transmit the message data according to the target mapping configuration if the state information of the mapping relationship in each target service processor is a second target state, where the second target state includes at least one of the following: a state to be validated, and a state to be deleted.
Optionally, in the distributed processing apparatus for a packet provided in the embodiment of the present application, the apparatus further includes: the modifying unit is used for modifying the IP address according to the target mapping configuration before the message data is transmitted according to the target mapping configuration in each target service processor, so as to obtain a modified IP address; and a fifth determining unit, configured to determine the modified IP address as the target IP address.
Optionally, fig. 13 is a schematic diagram two of a distributed processing apparatus for a message provided according to an embodiment of the present application, as shown in fig. 13, where a main control card mapping table management module and a service card mapping table management module are coordinated to manage a mapping relationship. The main control card sends message to inform the service card to operate the mapping relation, including the establishment, modification and deletion of the mapping table.
The distributed processing apparatus for a packet includes a processor and a memory, where the first acquiring unit 1201, the first determining unit 1202, the transmitting unit 1203, and the like are stored as program units, and the processor executes the program units stored in the memory to implement corresponding functions.
The processor includes a kernel, and the kernel fetches the corresponding program unit from the memory. The kernel can be provided with one or more than one, and the distributed processing of the message is performed by adjusting kernel parameters.
The memory may include volatile memory, random Access Memory (RAM), and/or nonvolatile memory, such as Read Only Memory (ROM) or flash memory (flash RAM), among other forms in computer readable media, the memory including at least one memory chip.
The embodiment of the invention provides a storage medium, on which a program is stored, which when executed by a processor, implements a distributed processing method for a message.
The embodiment of the invention provides a processor which is used for running a program, wherein the program runs a distributed processing method for executing messages.
The embodiment of the invention provides equipment, which comprises a processor, a memory and a program stored in the memory and capable of running on the processor, wherein the processor realizes the following steps when executing the program: the IP address in the response message is acquired through the target equipment, wherein the target equipment at least comprises: the target control processor and the plurality of target service processors respond to the message request sent by the target client by the target DNS server; determining, by the target control processor, a target mapping configuration according to the IP address, wherein the target mapping configuration includes at least: the mapping relation between the IP address and the target IP address, wherein the target IP address is a virtual IP address with the hidden IP address; and transmitting message data in each target service processor according to the target mapping configuration, wherein the message data is data to be sent to the target webpage server.
The processor also realizes the following steps when executing the program: before the IP address in the response message is acquired through the target equipment, the target client sends a message request to the target DNS server; the target DNS server receives the message request and sends a response message to the target device.
The processor also realizes the following steps when executing the program: before the target control processor determines target mapping configuration according to the IP address, each target service processor acquires the IP address; determining a target configuration requirement corresponding to the IP address, wherein the target configuration requirement is a target IP address required by the IP address; the target configuration requirements are sent to the target control processor.
The processor also realizes the following steps when executing the program: after each target service processor receives the IP address, if the IP address which is obtained currently is the same as the corresponding IP address when the state information of the target mapping relation in the historical target configuration requirement is the first target state, storing a response message which corresponds to the IP address which is obtained currently into a target linked list, wherein the target linked list comprises a plurality of response messages with the same IP address, and the first target state is in resource allocation; and determining a target IP address corresponding to the currently acquired IP address according to the target mapping relation.
The processor also realizes the following steps when executing the program: matching the IP address with a target rule according to a target configuration requirement by a target control processor to obtain a matching result; and determining target mapping configuration according to the matching result, wherein the target mapping configuration comprises a mapping relation between the IP address and the target IP address.
The processor also realizes the following steps when executing the program: after determining a target mapping configuration according to the IP address by the target control processor, acquiring a mapping relation in the target mapping configuration in the target control processor; and synchronizing the mapping relation to each target service processor so that each target service processor contains the mapping relation.
The processor also realizes the following steps when executing the program: after the target control processor determines the target mapping configuration according to the IP address, determining target state information of each mapping relation in the target mapping configuration according to a state machine, wherein the target state information comprises at least one of the following: invalid state, resource allocation, state to be validated, validated state, deleted state, state to be deleted.
The processor also realizes the following steps when executing the program: if the state information of the mapping relation in each target service processor is a second target state, transmitting the message data according to the target mapping configuration, wherein the second target state comprises at least one of the following: a state to be validated, and a state to be deleted.
The processor also realizes the following steps when executing the program: before transmitting message data according to the target mapping configuration in each target service processor, modifying the IP address according to the target mapping configuration to obtain a modified IP address; and determining the modified IP address as a target IP address.
The device herein may be a server, PC, PAD, cell phone, etc.
The present application also provides a computer program product adapted to perform, when executed on a data processing device, a program initialized with the method steps of: the IP address in the response message is acquired through the target equipment, wherein the target equipment at least comprises: the target control processor and the plurality of target service processors respond to the message request sent by the target client by the target DNS server; determining, by the target control processor, a target mapping configuration according to the IP address, wherein the target mapping configuration includes at least: the mapping relation between the IP address and the target IP address, wherein the target IP address is a virtual IP address with the hidden IP address; and transmitting message data in each target service processor according to the target mapping configuration, wherein the message data is data to be sent to the target webpage server.
When executed on a data processing device, is further adapted to carry out a program initialized with the method steps of: before the IP address in the response message is acquired through the target equipment, the target client sends a message request to the target DNS server; the target DNS server receives the message request and sends a response message to the target device.
When executed on a data processing device, is further adapted to carry out a program initialized with the method steps of: before the target control processor determines target mapping configuration according to the IP address, each target service processor acquires the IP address; determining a target configuration requirement corresponding to the IP address, wherein the target configuration requirement is a target IP address required by the IP address; the target configuration requirements are sent to the target control processor.
When executed on a data processing device, is further adapted to carry out a program initialized with the method steps of: after each target service processor receives the IP address, if the IP address which is obtained currently is the same as the corresponding IP address when the state information of the target mapping relation in the historical target configuration requirement is the first target state, storing a response message which corresponds to the IP address which is obtained currently into a target linked list, wherein the target linked list comprises a plurality of response messages with the same IP address, and the first target state is in resource allocation; and determining a target IP address corresponding to the currently acquired IP address according to the target mapping relation.
When executed on a data processing device, is further adapted to carry out a program initialized with the method steps of: matching the IP address with a target rule according to a target configuration requirement by a target control processor to obtain a matching result; and determining target mapping configuration according to the matching result, wherein the target mapping configuration comprises a mapping relation between the IP address and the target IP address.
When executed on a data processing device, is further adapted to carry out a program initialized with the method steps of: after determining a target mapping configuration according to the IP address by the target control processor, acquiring a mapping relation in the target mapping configuration in the target control processor; and synchronizing the mapping relation to each target service processor so that each target service processor contains the mapping relation.
When executed on a data processing device, is further adapted to carry out a program initialized with the method steps of: after the target control processor determines the target mapping configuration according to the IP address, determining target state information of each mapping relation in the target mapping configuration according to a state machine, wherein the target state information comprises at least one of the following: invalid state, resource allocation, state to be validated, validated state, deleted state, state to be deleted.
When executed on a data processing device, is further adapted to carry out a program initialized with the method steps of: if the state information of the mapping relation in each target service processor is a second target state, transmitting the message data according to the target mapping configuration, wherein the second target state comprises at least one of the following: a state to be validated, and a state to be deleted.
When executed on a data processing device, is further adapted to carry out a program initialized with the method steps of: before transmitting message data according to the target mapping configuration in each target service processor, modifying the IP address according to the target mapping configuration to obtain a modified IP address; and determining the modified IP address as a target IP address.
It will be appreciated by those skilled in the art that embodiments of the present application may be provided as a method, system, or computer program product. Accordingly, the present application may take the form of an entirely hardware embodiment, an entirely software embodiment, or an embodiment combining software and hardware aspects. Furthermore, the present application may take the form of a computer program product embodied on one or more computer-usable storage media (including, but not limited to, disk storage, CD-ROM, optical storage, and the like) having computer-usable program code embodied therein.
The present application is described with reference to flowchart illustrations and/or block diagrams of methods, apparatus (systems) and computer program products according to embodiments of the application. It will be understood that each flow and/or block of the flowchart illustrations and/or block diagrams, and combinations of flows and/or blocks in the flowchart illustrations and/or block diagrams, can be implemented by computer program instructions. These computer program instructions may be provided to a processor of a general purpose computer, special purpose computer, embedded processor, or other programmable data processing apparatus to produce a machine, such that the instructions, which execute via the processor of the computer or other programmable data processing apparatus, create means for implementing the functions specified in the flowchart flow or flows and/or block diagram block or blocks.
These computer program instructions may also be stored in a computer-readable memory that can direct a computer or other programmable data processing apparatus to function in a particular manner, such that the instructions stored in the computer-readable memory produce an article of manufacture including instruction means which implement the function specified in the flowchart flow or flows and/or block diagram block or blocks.
These computer program instructions may also be loaded onto a computer or other programmable data processing apparatus to cause a series of operational steps to be performed on the computer or other programmable apparatus to produce a computer implemented process such that the instructions which execute on the computer or other programmable apparatus provide steps for implementing the functions specified in the flowchart flow or flows and/or block diagram block or blocks.
In one typical configuration, a computing device includes one or more processors (CPUs), input/output interfaces, network interfaces, and memory.
The memory may include volatile memory in a computer-readable medium, random Access Memory (RAM) and/or nonvolatile memory, etc., such as Read Only Memory (ROM) or flash RAM. Memory is an example of a computer-readable medium.
Computer readable media, including both non-transitory and non-transitory, removable and non-removable media, may implement information storage by any method or technology. The information may be computer readable instructions, data structures, modules of a program, or other data. Examples of storage media for a computer include, but are not limited to, phase change memory (PRAM), static Random Access Memory (SRAM), dynamic Random Access Memory (DRAM), other types of Random Access Memory (RAM), read Only Memory (ROM), electrically Erasable Programmable Read Only Memory (EEPROM), flash memory or other memory technology, compact disc read only memory (CD-ROM), digital Versatile Discs (DVD) or other optical storage, magnetic cassettes, magnetic tape magnetic disk storage or other magnetic storage devices, or any other non-transmission medium, which can be used to store information that can be accessed by a computing device. Computer-readable media, as defined herein, does not include transitory computer-readable media (transmission media), such as modulated data signals and carrier waves.
It should also be noted that the terms "comprises," "comprising," or any other variation thereof, are intended to cover a non-exclusive inclusion, such that a process, method, article, or apparatus that comprises a list of elements does not include only those elements but may include other elements not expressly listed or inherent to such process, method, article, or apparatus. Without further limitation, an element defined by the phrase "comprising one … …" does not exclude the presence of other like elements in a process, method, article or apparatus that comprises an element.
It will be appreciated by those skilled in the art that embodiments of the present application may be provided as a method, system, or computer program product. Accordingly, the present application may take the form of an entirely hardware embodiment, an entirely software embodiment or an embodiment combining software and hardware aspects. Furthermore, the present application may take the form of a computer program product embodied on one or more computer-usable storage media (including, but not limited to, disk storage, CD-ROM, optical storage, and the like) having computer-usable program code embodied therein.
The foregoing is merely exemplary of the present application and is not intended to limit the present application. Various modifications and changes may be made to the present application by those skilled in the art. Any modifications, equivalent substitutions, improvements, etc. which are within the spirit and principles of the present application are intended to be included within the scope of the claims of the present application.

Claims (11)

1. The distributed processing method of the message is characterized by comprising the following steps:
the IP address in the response message is acquired through target equipment, wherein the target equipment at least comprises: the target control processor and the plurality of target service processors, wherein the response message is a message for responding to a message request sent by the target client side by the target DNS server;
determining, by the target control processor, a target mapping configuration according to the IP address, where the target mapping configuration includes at least: the mapping relation between the IP address and the target IP address, wherein the target IP address is a virtual IP address of which the IP address is hidden;
transmitting message data in each target service processor according to the target mapping configuration, wherein the message data is data to be sent to a target webpage server;
wherein after determining, by the target control processor, a target mapping configuration from the IP address, the method further comprises: acquiring the mapping relation in the target mapping configuration in the target control processor; and synchronizing the mapping relation to each target service processor, so that each target service processor contains the mapping relation.
2. The method of claim 1, wherein prior to obtaining, by the target device, the IP address in the response message, the method further comprises:
the target client sends a message request to the target DNS server;
and the target DNS server receives the message request and sends the response message to the target equipment.
3. The method of claim 1, wherein prior to the target control processor determining a target mapping configuration from the IP address, the method further comprises:
each target service processor acquires the IP address;
determining a target configuration requirement corresponding to the IP address, wherein the target configuration requirement is a target IP address required by the IP address;
and sending the target configuration requirement to the target control processor.
4. A method according to claim 3, wherein after each of the target traffic processors receives the IP address, the method further comprises:
if the current acquired IP address is the same as the corresponding IP address when the state information of the target mapping relation in the historical target configuration requirement is the first target state, storing a response message corresponding to the current acquired IP address into a target linked list, wherein the target linked list comprises a plurality of response messages with the same IP address, and the first target state is in resource allocation;
And determining a target IP address corresponding to the currently acquired IP address according to the target mapping relation.
5. The method of claim 3, wherein determining, by the target control processor, a target mapping configuration from the IP address comprises:
matching the IP address with a target rule by the target control processor according to the target configuration requirement to obtain a matching result;
and determining the target mapping configuration according to the matching result, wherein the target mapping configuration comprises the mapping relation between the IP address and the target IP address.
6. The method of claim 1, wherein after the target control processor determines a target mapping configuration from the IP address, the method further comprises:
determining target state information of each mapping relation in the target mapping configuration according to a state machine, wherein the target state information comprises at least one of the following: invalid state, resource allocation, state to be validated, validated state, deleted state, state to be deleted.
7. The method of claim 6, wherein transmitting the message data in each target traffic processor according to the target mapping configuration comprises:
If the state information of the mapping relation in each target service processor is a second target state, transmitting the message data according to the target mapping configuration, wherein the second target state comprises at least one of the following: the state to be validated, the validation state and the state to be deleted.
8. The method of claim 1, wherein prior to transmitting the message data in each target traffic processor according to the target mapping configuration, the method further comprises:
modifying the IP address according to the target mapping configuration to obtain a modified IP address;
and determining the modified IP address as the target IP address.
9. A distributed processing apparatus for a message, comprising:
the first obtaining unit is configured to obtain, by using a target device, an IP address in a response packet, where the target device at least includes: the target control processor and the plurality of target service processors, wherein the response message is a message for responding to a message request sent by the target client side by the target DNS server;
a first determining unit, configured to determine, by the target control processor, a target mapping configuration according to the IP address, where the target mapping configuration at least includes: the mapping relation between the IP address and the target IP address, wherein the target IP address is a virtual IP address of which the IP address is hidden;
The transmission unit is used for transmitting message data in each target service processor according to the target mapping configuration, wherein the message data are data to be sent to a target webpage server;
wherein the apparatus further comprises: a third obtaining unit, configured to obtain, after determining, by the target control processor, a target mapping configuration according to the IP address, the mapping relationship in the target mapping configuration in the target control processor; and the synchronization unit is used for synchronizing the mapping relation to each target service processor so that each target service processor contains the mapping relation.
10. A processor, characterized in that the processor is configured to run a program, wherein the program when run performs the distributed processing method of a message according to any of claims 1 to 8.
11. A computer-readable storage medium storing a program, wherein the program performs the distributed processing method of a message according to any one of claims 1 to 8.
CN202111680021.9A 2021-12-31 2021-12-31 Distributed processing method and device for message, storage medium and processor Active CN114338595B (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN202111680021.9A CN114338595B (en) 2021-12-31 2021-12-31 Distributed processing method and device for message, storage medium and processor

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN202111680021.9A CN114338595B (en) 2021-12-31 2021-12-31 Distributed processing method and device for message, storage medium and processor

Publications (2)

Publication Number Publication Date
CN114338595A CN114338595A (en) 2022-04-12
CN114338595B true CN114338595B (en) 2024-02-02

Family

ID=81023263

Family Applications (1)

Application Number Title Priority Date Filing Date
CN202111680021.9A Active CN114338595B (en) 2021-12-31 2021-12-31 Distributed processing method and device for message, storage medium and processor

Country Status (1)

Country Link
CN (1) CN114338595B (en)

Citations (14)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JP2007259408A (en) * 2006-02-21 2007-10-04 Klab Inc Access method for network by mobile telephone terminal
WO2009006843A1 (en) * 2007-07-10 2009-01-15 Huawei Technologies Co., Ltd. Data backup system, main control board and data backup method
CN103078814A (en) * 2013-02-06 2013-05-01 杭州华三通信技术有限公司 Address resolution protocol (ARP) table entry synchronization method and business processing method and equipment
CN103107906A (en) * 2012-11-15 2013-05-15 瑞斯康达科技发展股份有限公司 Communication method between media boards, media boards and communication machine frame device
CN105721315A (en) * 2016-04-06 2016-06-29 烽火通信科技股份有限公司 Control method for centralized mac address learning
WO2016141808A1 (en) * 2015-03-06 2016-09-15 阿里巴巴集团控股有限公司 Security management method and apparatus for server
CN106161249A (en) * 2016-06-07 2016-11-23 杭州迪普科技有限公司 The processing method and processing device of PPPoE message
CN108173982A (en) * 2018-03-26 2018-06-15 深圳市风云实业有限公司 The NAT processing method and processing devices of straddle message
CN109218229A (en) * 2017-06-30 2019-01-15 华为技术有限公司 A kind of message processing method, the network equipment and storage medium
CN111385156A (en) * 2020-03-23 2020-07-07 杭州迪普信息技术有限公司 sFlow flow sampling method, device and system
CN111585835A (en) * 2020-04-20 2020-08-25 深圳市信锐网科技术有限公司 Control method and device for out-of-band management system and storage medium
CN111865655A (en) * 2020-06-04 2020-10-30 烽火通信科技股份有限公司 ARP table configuration method and system for service board card
CN111884902A (en) * 2020-06-16 2020-11-03 四川速宝网络科技有限公司 VPN scene network shunting method and device
CN112887229A (en) * 2021-01-11 2021-06-01 杭州迪普科技股份有限公司 Session information synchronization method and device

Family Cites Families (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN106470191B (en) * 2015-08-19 2019-12-10 国基电子(上海)有限公司 system, method and device for filtering HTTPS transmission content
CN107040393B (en) * 2015-08-21 2020-10-09 新华三技术有限公司 Route management method and equipment

Patent Citations (14)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JP2007259408A (en) * 2006-02-21 2007-10-04 Klab Inc Access method for network by mobile telephone terminal
WO2009006843A1 (en) * 2007-07-10 2009-01-15 Huawei Technologies Co., Ltd. Data backup system, main control board and data backup method
CN103107906A (en) * 2012-11-15 2013-05-15 瑞斯康达科技发展股份有限公司 Communication method between media boards, media boards and communication machine frame device
CN103078814A (en) * 2013-02-06 2013-05-01 杭州华三通信技术有限公司 Address resolution protocol (ARP) table entry synchronization method and business processing method and equipment
WO2016141808A1 (en) * 2015-03-06 2016-09-15 阿里巴巴集团控股有限公司 Security management method and apparatus for server
CN105721315A (en) * 2016-04-06 2016-06-29 烽火通信科技股份有限公司 Control method for centralized mac address learning
CN106161249A (en) * 2016-06-07 2016-11-23 杭州迪普科技有限公司 The processing method and processing device of PPPoE message
CN109218229A (en) * 2017-06-30 2019-01-15 华为技术有限公司 A kind of message processing method, the network equipment and storage medium
CN108173982A (en) * 2018-03-26 2018-06-15 深圳市风云实业有限公司 The NAT processing method and processing devices of straddle message
CN111385156A (en) * 2020-03-23 2020-07-07 杭州迪普信息技术有限公司 sFlow flow sampling method, device and system
CN111585835A (en) * 2020-04-20 2020-08-25 深圳市信锐网科技术有限公司 Control method and device for out-of-band management system and storage medium
CN111865655A (en) * 2020-06-04 2020-10-30 烽火通信科技股份有限公司 ARP table configuration method and system for service board card
CN111884902A (en) * 2020-06-16 2020-11-03 四川速宝网络科技有限公司 VPN scene network shunting method and device
CN112887229A (en) * 2021-01-11 2021-06-01 杭州迪普科技股份有限公司 Session information synchronization method and device

Non-Patent Citations (1)

* Cited by examiner, † Cited by third party
Title
交换机中报文三层转发的分布式处理研究与实现;张琳;丁晓明;;铁道通信信号(12);全文 *

Also Published As

Publication number Publication date
CN114338595A (en) 2022-04-12

Similar Documents

Publication Publication Date Title
EP3391627B1 (en) Shared multi-tenant domain name system (dns) server for virtual networks and corresponding method
US11409719B2 (en) Co-locating microservice persistence containers within tenant-specific database
CN103856569A (en) Method and device for synchronizing domain name system resource information
CN111327668B (en) Network management method, device, equipment and storage medium
US9021478B1 (en) Provisioning virtual machines from template by splitting and building index for locating content portions via content-centric network
CN112333017B (en) Service configuration method, device, equipment and storage medium
CN107135242B (en) Mongodb cluster access method, device and system
CN108243079A (en) A kind of method and apparatus that network access is carried out based on VPC
US20220318071A1 (en) Load balancing method and related device
US20210096926A1 (en) Cloud computing platform that executes third-party code in a distributed cloud computing network and uses a distributed data store
WO2017095820A1 (en) Methods and devices for acquiring data using virtual machine and host machine
CN111966482A (en) Edge computing system
CN115086330A (en) Cross-cluster load balancing system
CN113079098A (en) Method, device, equipment and computer readable medium for updating route
US8972604B1 (en) Network address retention and assignment
CN114338595B (en) Distributed processing method and device for message, storage medium and processor
US20200099631A1 (en) Method and device for performing traffic control on user equipment
CN109005071B (en) Decision deployment method and scheduling equipment
CN114070637B (en) Access control method, system, electronic equipment and storage medium based on attribute tag
CN112532666A (en) Reverse proxy method, apparatus, storage medium, and device
US10791088B1 (en) Methods for disaggregating subscribers via DHCP address translation and devices thereof
US11652746B1 (en) Resilient consistent hashing for a distributed cache
WO2021232860A1 (en) Communication method, apparatus and system
CN116954810A (en) Method, system, storage medium and program product for creating container application instance
US11416448B1 (en) Asynchronous searching of protected areas of a provider network

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination
GR01 Patent grant
GR01 Patent grant