TW201828655A - Environment isolation method and device resolves the problem of high complexity and incomplete isolation carried at environmental isolation during the RPC call process - Google Patents

Abstract

The invention discloses an environment isolation method comprising steps of commanding a routing address pool in the RPC (Remote Procedure Call) client to automatically refresh a preset full address according to a preset cycle, stopping the RPC client to automatically refresh the routing address pool after receiving environment isolation indication sent from an environment isolation device and replacing the current address in the routing address pool with a merged address, generating a valid target address according to the merged address in the routing address pool when the RPC client subsequently receives the service call request sent by the subscriber, sending the service call request to the RPC server corresponding to the valid target address, and feeding a business processing result returned from the RPC server back to the subscriber. Therefore, under premise of no modifying the hardware, the problem of high complexity and incomplete isolation carried at environmental isolation during the RPC call process can be resolved to ensure the safety and stability of environmental isolation.

Description

 Environmental isolation method and equipment  

The invention relates to the field of communication technologies, and in particular to an environmental isolation method. The invention also relates to an RPC client and an environmental isolation device.

RPC (Remote Procedure Call) is a decentralized client-server protocol. Because RPC can request services from remote computer programs without knowing the underlying network. Technology, so RPC is both simple and popular. The remote program call is always issued by the client to the server to perform several process requests. Using the parameters provided by the client, the server returns the execution result to the client. At present, most of the cloud computing platform's public cloud computing products provide RPC service functions, which are convenient for various language developers to use quickly.

As shown in Figure 1, it is a schematic diagram of the RPC principle. The (RPC) client and (RPC) server are interconnected in various frequency bands by means of respective transmission codes, wherein the client has an interface module and the server has an implementation module for operation. RPC can make full use of multi-processor environments with non-shared memory (for example, connecting multiple servers via LAN), which makes it easy to distribute applications across multiple servers. Applications are like running on a multiprocessor. The same on the computer. The technician can conveniently realize the process code sharing, improve the utilization of system resources, and can disperse the operation of processing a large amount of data into a cluster with strong processing capability, thereby reducing the burden on the single machine and also making better services. Processing.

In the process of applying the RPC technology, the client in the RPC framework needs to call the Server, and the server to which the request is routed has different policies and implementation manners. How to implement environmental isolation based on request routing technology is also an indispensable part of the existing RPC application process.

Environmental segregation refers to the separation of decentralized calling services and data in the test environment and production environment through certain means (in this case, request routing technology), to prevent decentralized calling services and data interference and use between different environments. The prior art generally isolates the request to the specified machine by modifying the request source flag bit (IP), or isolates the request to the specified machine or cluster by adjusting the load balancing weight configuration (there may be a problem that the isolation is not clean), Or isolate the machine into the specified group by configuring the grouping value of the hybrid route (to set the service group on the server, different from other groups).

As shown in FIG. 2, it is a schematic diagram of an isolation architecture based on request routing in the prior art. The unified access 1, configuration service 1 and notification modules are configured in advance for different APPs in the production environment, and the APP in the isolated environment is configured with a unified access 2 and a configuration service 2 different from the production environment. group. However, both the production environment and the isolated environment are managed through a unified management platform. Because the environment isolation based on request routing needs to modify the client request flag bit (IP) or modify the RPC route profile, it is bound to cause the application to be released and restarted. The operation cost is high, the isolation cannot be done dynamically, and the server needs to be configured separately. The grouping is to support the isolation operation, and these operations are very complicated, extremely error-prone, and the configuration may be caused by the problem of unclear isolation. Due to uncertainties such as fluctuations in the overall environment, it is easy to cause the service request to fail, which in turn affects security and Stability, so if you need to test and compare through environmental isolation in the prior art, you generally need to deploy a set of the same application, set different routing configurations and grouping. The separately deployed environment has a loss of authenticity and also increases the operational burden on the operator.

In the process of implementing the present invention, the inventors have found that the existing environmental isolation scheme has the following disadvantages:

(1) Invasive application

The conventional isolation technology does not need to modify the original application code, grouping, routing rule configuration, or the group configuration of the service provider's services. The intrusion to the application is very large, and the configuration is complicated and extremely error-prone. The modified version should be branched separately, and the maintenance cost in the future is also large.

(2) Risk of application stability after isolation

Once the stability of the link is isolated, it will directly lead to the situation where the upper layer depends on the system service being unavailable. The conventional isolation technology does not have the link availability check function, and does not consider the disaster recovery policy that causes the service request to fail after the isolation. Due to the mechanism, the disaster recovery cannot be performed quickly.

(3) High deployment cost

Implementing isolation through hardware routing requires the addition of additional equipment. The cost of landing deployment is extremely high. Professional use is required for use. Development and test personnel cannot operate as needed. Changing the isolation rules is complicated and error-prone. Generally, there is no need for excessive addition. Function, there is waste in use.

(4) Poor environmental immersibility after isolation

The conventional request-based routing isolation needs to modify the configuration file or deploy a separate application. Therefore, the authenticity is different from the original production environment. There are certain differences in the environment when testing or other comparison verification, and the purpose of isolation. It is directed drainage, which does not change the environment, and has the disadvantage of high maintenance cost, because the unified configuration of the production environment cannot be directly applied to the isolated β environment.

(5) The operation is complicated and the immediacy is poor. The conventional request-based routing isolation scheme, due to the modification of the application and configuration, will inevitably result in redeployment or restart of the application. The overall operation link is long and takes a long time to be effective immediately. There are many configurations to be prepared, and the maintenance configuration cost is high. .

It can be seen that how to achieve environmental isolation under the premise of ensuring security and stability, and at the same time reducing the cost of isolation and the complexity of isolation operation, has become a technical problem to be solved by those skilled in the art.

The invention discloses an environmental isolation method for minimizing the labor and hardware costs of environmental isolation under the premise of improving the immediacy, safety and stability of environmental isolation. The method is applied to the RPC client, and the environment isolation device connected to the RPC client is preset. The routing address pool in the RPC client automatically refreshes the preset full address according to a preset period, and the method further includes: the RPC The client receives the environment isolation indication sent by the environment isolation device; the RPC client stops automatically refreshing the routing address pool, and replaces the current address in the routing address pool with a merged address, where the merged address is the RPC client. The current address in the routing address pool and the address in the preset manual address list are combined; when the RPC client receives the service invocation request sent by the user, a valid target address is generated according to the merged address in the routing address pool; The RPC client sends the service invocation request to the RPC server corresponding to the target address, and returns the service processing result returned by the RPC server to the user.

Preferably, the manual address list is composed of an RPC client participating in the environment isolation and an address of the RPC server, and the RPC client replaces the current address in the routing address pool with the merged address, specifically: filtering from the manual address list The first sub-address that can be used for address merging; the address in the routing address pool after the auto-refresh is stopped as the second sub-address; and the first sub-address and the second sub-address are performed according to a preset address merging algorithm The merged address is merged; the current address in the routing address pool is deleted, and the merged address is added to the routing address pool.

Preferably, the RPC client generates a valid target address according to the merged address in the routing address pool, specifically: querying a preset routing rule, and querying the available device address in the routing address pool; according to the routing rule The device address is queried for filtering; if there is a device address that meets the routing rule, the device address is used as the target address; if there is no device address that meets the routing rule, a response to the call failure is returned to the user.

Preferably, after the RPC client replaces the current address in the routing address pool with the merged address, the method further includes: returning an environmental isolation success response to the environmental isolation device; and receiving an isolation status check indication sent by the environmental isolation device The interface between the query itself and each downstream RPC server is normal, and the query result is sent to the environment isolation device, so that the environment isolation device feeds back the query result to the user.

Preferably, after the RPC client replaces the current address in the routing address pool with the merged address, the method further includes: if receiving the environment isolation cancellation indication sent by the environment isolation device, refreshing the merged address in the routing address pool For the full address, and the routing address pool automatically refreshes the preset full address according to a preset period.

Correspondingly, the present invention also provides an environment isolation method, which is applied to an environment isolation device, and the environment isolation device is connected to the RPC client, and the method includes: determining, according to the address information carried in the environment isolation request sent by the user. An RPC client that needs to be quarantined. The routing address pool in the RPC client automatically refreshes the preset full address according to a preset period. The environment isolation indication is sent to the RPC client, so that the RPC client stops automatically refreshing. The routing address pool and the current address in the routing address pool are replaced by a merged address, and the merged address is generated by combining the current address in the routing address pool and the address in the preset manual address list by the RPC client.

Preferably, the address information is specifically a source IP address and a target IP address, and the RPC client that needs to be isolated by the environment is determined according to the address information carried in the environment isolation request sent by the user, specifically: extracting the environment isolation request from the environment isolation request The address information is obtained by querying the interface of the RPC server to obtain an environment isolation service. The RPC client corresponding to the source IP address is used as the RPC client that needs to be isolated by the environment.

Preferably, after the sending the environment isolation indication to the RPC client, the method further includes: sending an isolation status check indication to the RPC client, and returning the RPC client, after receiving the environmental isolation success response sent by the RPC client. The query result is fed back to the user; the status check indication is used to make the interface between the RPC client query itself and each downstream RPC server normal, and send the query result to the environment isolation device.

Preferably, after the sending the environment isolation indication to the RPC client, the method further includes: if the environment isolation success response sent by the RPC client is received, detecting whether the status of each downstream RPC server of the RPC client is normal, and determining the route Whether the merged address in the address pool is empty after being filtered by the default route rule. If the downstream RPC server is abnormal, or the merged address in the route address pool is filtered after the preset route rule is filtered, it is empty. Send a downstream survival security alert to the user.

Preferably, after the environment isolation indication is sent to the RPC client, the method further includes: when receiving the environment isolation cancellation request sent by the user, sending an environment isolation cancellation indication to the RPC client, so that the RPC client The merged address in the routing address pool is refreshed to the full address, and the routing address pool automatically refreshes the preset full address according to a preset period.

Correspondingly, the present invention also provides an RPC client, where the RPC client is connected to a preset environment isolation device, and the routing address pool in the RPC client automatically refreshes the preset full address according to a preset period, the RPC. The client further includes: a receiving module, receiving an environment isolation indication sent by the environment isolation device; and replacing the module, the RPC client stops automatically refreshing the routing address pool, and replaces the current address in the routing address pool with a merge address. The merged address is generated by the RPC client according to the current address in the routing address pool and the address in the preset manual address list; generating a module, when the receiving module receives the service call request sent by the user, according to the The merged address in the routing address pool generates a valid target address; the sending module sends the service invoking request to the RPC server corresponding to the target address, and feeds back the service processing result returned by the RPC server to the user. .

Preferably, the manual address list is composed of an RPC client participating in the environment isolation and an address of the RPC server, and the replacement module replaces the current address in the routing address pool with a merged address, specifically: filtering from the manual address list The first sub-address that can be used for address merging; the address in the routing address pool after the auto-refresh is stopped as the second sub-address; and the first sub-address and the second sub-address are performed according to a preset address merging algorithm The merged address is merged; the current address in the routing address pool is deleted, and the merged address is added to the routing address pool.

Preferably, the generating module is configured to: query a preset routing rule, and query an available device address in the routing address pool; filter the queried device address according to the routing rule; if the routing rule is met The device address, the device address is used as the target address; if there is no device address that conforms to the routing rule, the user is returned with a call failure response.

Preferably, the method further includes: responding to the module, returning an environmental isolation success response to the environmental isolation device; and querying the module, when receiving the isolation status check indication sent by the environmental isolation device, querying between itself and each downstream RPC server Whether the interface is normal, and the query result is sent to the environment isolation device, so that the environment isolation device returns the query result to the user.

Preferably, the method further includes: the revocation module, when receiving the environmental isolation cancellation indication sent by the environmental isolation device, refreshing the merged address in the routing address pool to the full address, and automatically routing the routing address pool according to a preset period Refresh the preset full address.

Correspondingly, the present invention also provides an environment isolation device, which is connected to the RPC client, and the environment isolation device includes: a determination module, which is determined according to the address information carried in the environmental isolation request sent by the user. The RPC client in the environment isolates the routing address pool in the RPC client to automatically refresh the preset full address according to a preset period; the sending module sends an environment isolation indication to the RPC client to stop the RPC client. Automatically refreshing the routing address pool and replacing the current address in the routing address pool with a merged address, where the merged address is generated by the RPC client according to the current address in the routing address pool and the address in the preset manual address list. .

Preferably, the address information is specifically a source IP address and a target IP address, and the determining module is specifically configured to: extract the address information from the environment isolation request; and obtain an environment isolation service by querying an interface of the RPC server; The RPC client corresponding to the source IP address serves as the RPC client that needs to be isolated by the environment.

Preferably, the method further includes: sending, by the first detecting module, an isolation status check indication to the RPC client when receiving the environmental isolation success response sent by the RPC client, and feeding back the query result returned by the RPC client to the The user check indicates that the RPC client queries the interface between itself and each downstream RPC server as normal, and sends the query result to the environment isolation device.

Preferably, the method further includes: detecting, by the second detecting module, whether the status of each downstream RPC server of the RPC client is normal, and determining a merged address in the routing address pool, when receiving the environmental isolation success response sent by the RPC client Whether it is empty after being filtered by a preset routing rule, and is sent to the user when the downstream RPC server or the merged address in the routing address pool is empty after being filtered by the preset routing rule. Downstream survival security alert.

Preferably, the method further includes: the revocation module, when receiving the environmental isolation cancellation request sent by the user, sending an environment isolation cancellation indication to the RPC client, so that the RPC client refreshes the merged address in the routing address pool to The full address and the routing address pool automatically refresh the preset full address according to a preset period.

It can be seen that, by applying the technical solution of the present invention, the routing address pool in the RPC client is automatically refreshed according to a preset period to automatically refresh the preset full address, and the RPC client stops receiving the environment isolation indication sent by the environment isolation device and stops automatically. The routing address pool is refreshed, and the current address in the routing address pool is replaced with the merged address. When the RPC client receives the service invocation request sent by the user, the RPC client generates a valid destination address according to the merged address in the routing address pool. The call request is sent to the RPC server corresponding to the target address, and the service processing result returned by the RPC server is fed back to the user. Therefore, without modifying the hardware, the problem of high complexity and incomplete isolation caused by environmental isolation during the RPC call process is solved, and the security and stability of the environment isolation are ensured.

810‧‧‧ receiving module

820‧‧‧Replacement module

830‧‧‧ generating module

840‧‧‧Transmission module

910‧‧‧Determining modules

920‧‧‧Transmission module

1 is a schematic diagram of an RPC principle in the prior art; FIG. 2 is a schematic diagram of an isolation architecture based on request routing in the prior art; FIG. 3 is a schematic flowchart of an environment isolation method according to the present invention; FIG. 5 is a schematic flowchart of another environment isolation method according to the present invention; FIG. 6 is a schematic flowchart of isolation in a specific embodiment of the present invention; FIG. 7 is an overall architecture of isolation according to an embodiment of the present invention; FIG. 8 is a schematic structural diagram of an RPC client according to the present invention. FIG. 9 is a schematic structural diagram of an environment isolation device according to the present invention.

In view of the problems in the background art, the inventor refers to the existing request routing based isolation model in the process of implementing the technical solution of the present invention, and proposes an environment isolation method for the existing RPC request routing model, which is applied to the RPC. The client additionally provides an environmental isolation device connected to the RPC client in order to implement environmental isolation for the RPC client. In a preferred embodiment of the present invention, the environment isolation device can be combined with a visualization platform. The function is set to isolate the console, which can visually display the upstream and downstream relationship and status between the RPC client and the RPC server, and provide an isolated call operation to the user (technician). In addition, since the routing address pool in the RPC client is used to obtain the address, the technical solution of the present invention sets the routing address pool to automatically refresh the preset full address according to the preset period (in the existing RPC client). The address in the routing address pool is fixed and cannot be modified). The full address is pre-set and fixed for the application and the addresses on all current devices (including devices participating in the isolation and devices not participating in the isolation).

FIG. 3 is a schematic flowchart diagram of an environment isolation method according to the present invention, including the following steps:

S301. The RPC client receives an environmental isolation indication sent by the environment isolation device.

In order to maintain the authenticity and security of the isolated environment, when the user needs to initiate the environment isolation, the user sends the request to the environment isolation device, and after the environment isolation device determines the corresponding RPC client according to the address information carried in the request, Send an environmental isolation indication to the RPC client.

S302: The RPC client stops automatically refreshing the routing address pool, and replaces the current address in the routing address pool with a merged address.

Different from the traditional isolation, the routing rule is modified. The technical solution of the present invention is mainly for improving the routing address pool of the RPC client. To this end, the technical solution of the present invention presets a manual address list, which is composed of an RPC client participating in the environment isolation and an address of the RPC server. The manual address list can be set by the environment isolation device, and the technician can also be isolated by the environment. The device modifies it.

Based on the current address in the RPC client routing address pool and the address in the preset manual address list, the RPC client combines the two to generate a merged address, and replaces the merged address with the original address in the routing address pool, in the present invention. In a preferred embodiment, the specific steps are as follows: step a) filtering the first sub-address available for address merging from the manual address list; and step b) taking the address in the routing address pool after stopping the auto-refresh as the second Sub-address; step c) merging the first sub-address and the second sub-address into the merged address according to a preset address merge algorithm; and step d) deleting the current address in the routing address pool, and The merged address is added to the routing address pool.

The above steps complete the fast and effective combination of the manually set address and the automatically refreshed full address by the address merge algorithm, and the merged does not affect the grouping situation. After the merged address is obtained, the subsequent environment isolation based on the RPC request routing function is completed, and the operation is simple. The degree of modification is small, and the routing layer file is not touched to avoid errors.

After the above steps are performed, in order to make the user aware of the current environmental isolation progress, the preferred embodiment of the present invention causes the RPC client to return an environmental isolation success response to the environmental isolation device. After receiving the environmental isolation success response, the environmental isolation device feeds back to the user on the one hand, and instructs the RPC client to check the isolation status on the other hand to ensure the stability of the isolation environment. Therefore, when the RPC client receives the isolation status check indication sent by the environment isolation device, it queries whether the interface between itself and each downstream RPC server is normal, and sends the query result to the environment isolation device to isolate the environment. The device returns the query result to the user.

S303. When the RPC client receives the service invocation request sent by the user, generating a valid target address according to the merged address in the routing address pool.

A number of merged addresses may exist in the routing address pool, and different routing rules are required according to the actual application scenario. The routing rules are generally stored in the client. The technician needs to perform the update. The IP address is not one-by-one. Corresponding, but there are some general matching rules with the IP address. Therefore, in the process of obtaining a valid target address by merging the address, the merged address needs to be filtered by using a preset routing rule. Specifically, the preferred embodiment of the present invention first queries a preset routing rule, and queries the available address of the device in the routing address pool, and then filters the queried device address according to the routing rule, if there is a matching rule. The device address, the device address is used as the target address; if there is no device address that meets the routing rule, the user returns a call failure response.

Referring to the schematic diagram of the isolation optimization scheme shown in FIG. 4, the isolation optimization scheme of the specific embodiment is as follows:

Step a) The client initiates a service request to the RPC client. The RPC client queries the merged address and routing rules available in the routing address pool.

Step b) If the user opens the isolation through the environmental isolation device in advance, the RPC client's routing address pool will be turned off before the automatic refresh and read by manually reading the address list, and the manually set address list and routing address pool as of The full address to the automatic refresh stop is quickly merged by the address merge algorithm. At this time, the merged address in the routing address pool is filtered by various routing rules to obtain a valid target address, or the condition may not be satisfied (the downstream application does not exist), and the merged address is empty.

S304: The RPC client sends the service call request to the RPC server corresponding to the target address, and feeds back the service processing result returned by the RPC server to the user.

The environmental isolation optimization scheme of S301-S304 effectively improves the immediacy, security, stability and isolation of the authenticity of the isolation, while reducing costs and simplifying operations. When the user needs to cancel the isolation, the user also sends an environmental isolation cancellation indication to the RPC client through the environmental isolation device. Correspondingly, after receiving the environmental isolation cancellation indication sent by the environmental isolation device, the RPC client refreshes the merged address in the routing address pool to the full address, and automatically refreshes the preset address in the routing address pool according to a preset period. The full address.

In the specific embodiment of S303, after determining the valid target address, the RPC client sends a request to the server, and receives the result feedback from the server to complete the service call of the user. If the user needs to cancel the isolation, then only the automatic refresh of the address pool needs to be restored, and the original address will be refreshed to the full address, so that the next request will not be directed. In other words, there is no need to do any cleaning work in the environmental isolation cancellation operation, which is simple and efficient.

The above embodiment elaborates on the specific implementation manner and details of the environment isolation from the perspective of the RPC client. In addition, the present invention also proposes another environment isolation method from the perspective of an environmental isolation device, which is applied to an environmental isolation device, and needs to ensure that the environmental isolation device is connected to the RPC client (physical connection or logical connection). As shown in FIG. 5, the method includes the following steps:

S501: The RPC client that needs to be quarantined according to the address information carried in the quarantine request sent by the user, and the routing address pool in the RPC client automatically refreshes the preset full address according to a preset period.

In a preferred embodiment of the present invention, the address information may be specifically a source IP address and a target IP address. Based on the two detailed IP addresses, the step first extracts the address information from the environment isolation request, and then queries the RPC service. The interface of the interface obtains the service that needs to be isolated from the environment. The RPC client corresponding to the source IP address is used as the RPC client that needs to be isolated from the environment.

S502: Send an environment isolation indication to the RPC client, so that the RPC client stops automatically refreshing the routing address pool and replaces the current address in the routing address pool with a merged address, where the merged address is the RPC client. The current address in the routing address pool and the address in the default manual address list are combined.

Under normal circumstances, the RPC client in the present invention returns a response to the environmental isolation device after the initial completion of the environmental isolation. Therefore, in order to ensure the stability after the environmental isolation, the environmental isolation device can initiate an isolation status check and a downstream service available check. The process is as follows:

(1) Isolation status check

If the quarantine success response sent by the RPC client is received, the quarantine status check indication is sent to the RPC client, and the query result returned by the RPC client is fed back to the user; the status check indication is used to make the RPC client The interface between the query itself and each downstream RPC server is normal, and the query result is sent to the environment isolation device.

(2) Downstream service available inspection

If the RP is sent to the RPC client, the status of the downstream RPC server is normal, and whether the merged address in the routing address pool is empty after being filtered by the preset routing rule. If the downstream RPC server is in the abnormal state, or the merged address in the routing address pool is empty after being filtered by the preset routing rule, the downstream security alarm is sent to the user.

Finally, when the user needs to cancel the environment isolation, the user sends an environmental isolation cancellation request to the environmental isolation device. When the environmental isolation device receives the environmental isolation cancellation request sent by the user, the environment isolation cancellation instruction is sent to the RPC client. Therefore, the RPC client refreshes the merged address in the routing address pool to the full address, and causes the routing address pool to automatically refresh the preset full address according to a preset period.

It should be noted that the request isolation and the indicated delivery in the above isolation process can generally be performed through the REST protocol. However, in these processes the password is likely to be hijacked by a malicious user, sending a malicious quarantine request. Therefore, the preferred embodiment of the present invention sets the expiration time by 30 seconds in the Digest digest authentication mode (this time can be adjusted according to the actual situation), thereby effectively preventing the password plaintext transmission, replay attack, supporting the client to verify the server, and having certain defenses. Tampering ability, at the same time encrypting the user password to avoid the user's loss caused by the password being stolen. The Response encryption algorithm is as follows:

1.HA1=MD5(A1)=MD5(username:realm:password)

2.HA2=MD5(A2)=MD5(method:digestURI:MD5(entityBody))

3.Response=MD5(HA1:nonce:nonceCount:clientNonce:qop:HA2)

The foregoing embodiment describes how the environment isolation device is configured to implement the environment isolation and the environment isolation of the RPC client, and how to implement the service invocation request of the user. To further illustrate the technical idea of the present invention, the specific application scenario shown in FIG. The technical solution of the invention is explained:

Step 1. The user initiates an isolation request to the isolation console through the browser, and provides the isolation source IP and target IP to the isolation console.

Step 2. The isolated console obtains the service to be isolated by querying the server interface through the source IP address and the target IP address, and then initiates an isolation request to the RPC client where the source IP is located according to the source IP address, and delivers the target IP parameter.

Step 3. After the RPC client obtains the destination IP address delivered in the previous step, it stops the automatic refresh of the address pool and modifies the address in the routing address pool. Specifically, the address in the manually set address list and the address in the original address pool are effectively merged by the address merge algorithm.

Step 4. After the previous step is completed, the Quarantine Console will send a response to the user's success or failure.

Step 5. If the RPC client successfully performs the request routing direction, the console will enable the isolation status check and the downstream survival security check. The isolation status check can feedback the link isolation status, such as enabling isolation, shutting down the isolation or abnormal status, and surviving downstream. The security check monitors the downstream machine restart or the final address is empty after filtering by the routing rules to prevent upstream stability problems caused by downstream unavailability and affect the end user.

Step 6. The first five steps have completed the environment isolation. At this time, the client can initiate a request to the RPC client. The RPC client obtains the merged address by querying the routing address pool, and then filters through the filtering rules of the center, the unit, and the same computer room to obtain the final result. A valid destination address (may also be null after the merge), sending the RPC client's service request to the specified RPC server.

Step 7. The RPC server processes the request sent by the client, and after completing the service processing, returns the processing result to the RPC client.

Step 8. The RPC client presents the results to the user.

Step 9. When the user wants to cancel the quarantine, the quarantine request is sent to the quarantine console. The quarantine console sends a quarantine request to the RPC client where the source IP address is based on the source IP address.

Step 10. After receiving the cancellation request, the RPC client resumes refreshing the machine address pool and returns the execution result to the quarantine console.

Step 11. After the execution of the previous step, the Quarantine Console will send a response to the client's success or failure.

Based on the above process, the overall architecture of the specific embodiment is as shown in the above figure, and the features are as follows: 1. No modification is required to the application; 2. No separate deployment and operation are required; 3. Immediate effect; 4. REST data transmission adopts standard Digest Digest authentication, expiration time 30 seconds, effectively prevent password plaintext transmission, replay attack, support client to server verification, have certain tamper resistance; 5. Service status and downstream survival security check, high stability; 6. Deployment Low cost, no special routing hardware support is required; 7. Simple operation, technicians can operate through console visualization, or can directly initiate requests through REST protocol; 8. Isolation and de-isolation are convenient, and no isolation is required. Any cleanup work.

To achieve the above technical purpose, the present invention also provides an RPC client. As shown in FIG. 8, the RPC client is connected to a preset environment isolation device, and the routing address pool in the RPC client is automatically according to a preset period. Refreshing the preset full address, the RPC client further includes: a receiving module 810, receiving an environment isolation indication sent by the environment isolation device; replacing the module 820, the RPC client stops automatically refreshing the routing address pool, and the The current address in the routing address pool is replaced by a merged address, and the merged address is generated by combining the current address in the routing address pool and the address in the preset manual address list by the RPC client; generating a module 830, when the receiving When receiving the service invocation request sent by the user, the module generates a valid target address according to the merged address in the routing address pool; the sending module 840 sends the service invoking request to the RPC server corresponding to the target address, and The service processing result returned by the RPC server is fed back to the user.

In a specific application scenario, the manual address list is composed of an RPC client that participates in the environment isolation and an address of the RPC server. The replacement module replaces the current address in the routing address pool with the merged address, specifically: from the manual The address list is used to filter the first sub-address that can be used for address merging; the address in the routing address pool after the auto-refresh is stopped as the second sub-address; according to the preset address merging algorithm, the first sub-address and the The second sub-address is merged into the merged address; the current address in the routing address pool is deleted, and the merged address is added to the routing address pool.

In a specific application scenario, the generating module is specifically configured to: query a preset routing rule, and query an available device address in the routing address pool; and filter the queried device address according to the routing rule; The device address that meets the routing rule is used as the target address; if there is no device address that meets the routing rule, the user is returned with a call failure response.

In a specific application scenario, the method further includes: responding to the module, returning an environmental isolation success response to the environmental isolation device; and querying the module, querying itself and each downstream RPC service when receiving the isolation status check indication sent by the environmental isolation device Whether the interface between the terminals is normal, and the query result is sent to the environment isolation device, so that the environment isolation device feeds back the query result to the user.

In a specific application scenario, the method further includes: revoking a module, and refreshing the merged address in the routing address pool to the full address when receiving the environmental isolation cancellation indication sent by the environmental isolation device, and making the routing address pool according to the pre-preparation The set period automatically refreshes the preset full address.

Correspondingly, the present invention also provides an environment isolation device. As shown in FIG. 9, the environment isolation device is connected to an RPC client, and the environment isolation device includes: a determination module 910, which is carried according to an environment isolation request sent by the user. The address information determines the RPC client that needs to be quarantined. The routing address pool in the RPC client automatically refreshes the preset full address according to a preset period; the sending module 920 sends an environment isolation indication to the RPC client. The RPC client stops automatically refreshing the routing address pool and replaces the current address in the routing address pool with a merged address, where the merged address is the current address of the RPC client according to the routing address pool and a preset manual The addresses in the address list are merged to produce.

In a specific application scenario, the address information is specifically a source IP address and a target IP address, and the determining module is specifically configured to: extract the address information from the environment isolation request; and obtain an environment isolation by querying an interface of the RPC server. The RPC client corresponding to the source IP address is used as the RPC client that needs to be isolated by the environment.

In a specific application scenario, the first detection module sends an isolation status check indication to the RPC client when receiving the environmental isolation success response sent by the RPC client, and returns the query returned by the RPC client. The result is fed back to the user; the status check indication is used to make the interface between the RPC client query itself and each downstream RPC server normal, and send the query result to the environment isolation device.

In a specific application scenario, the method further includes: detecting, by the second detecting module, whether the status of each downstream RPC server of the RPC client is normal, and determining the routing address pool when receiving the environmental isolation success response sent by the RPC client If the merged address in the downstream RPC server or the merged address in the routing address pool is empty after being filtered by the preset routing rule, Send a downstream survival security alert to the user.

In a specific application scenario, the method includes: revoking a module, and sending an environment isolation cancellation indication to the RPC client when receiving the environment isolation cancellation request sent by the user, so that the RPC client in the routing address pool The merged address is refreshed to the full address, and the routing address pool automatically refreshes the preset full address according to a preset period.

By applying the technical solution of the present invention, the routing address pool in the RPC client is automatically refreshed according to a preset period to automatically refresh the preset full address. The RPC client stops receiving the automatic isolation routing address pool after receiving the environment isolation indication sent by the environment isolation device. And replacing the current address in the routing address pool with the merged address. When the RPC client receives the service call request sent by the user, the RPC client generates a valid target address according to the merged address in the routing address pool, and sends a service call request to the RPC client. The RPC server corresponding to the target address returns the service processing result returned by the RPC server to the user. Therefore, without modifying the hardware, the problem of high complexity and incomplete isolation caused by environmental isolation during the RPC call process is solved, and the security and stability of the environment isolation are ensured.

Through the description of the above embodiments, those skilled in the art can clearly understand that the present invention can be implemented by hardware, or by means of a software plus a necessary universal hardware platform. Based on the understanding, the technical solution of the present invention can be embodied in the form of a software product, which can be stored in a non-volatile storage medium (which may be a CD-ROM, a flash drive, a mobile hard disk, etc.), including several The instructions are for causing a computer device (which may be a personal computer, a server, or a network device, etc.) to perform the method of various embodiments of the present invention.

Those skilled in the art can understand that the drawings are only a schematic diagram of a preferred implementation scenario, and the modules or processes in the drawings are not necessarily required to implement the present invention.

Those skilled in the art can understand that the modules in the device in the implementation scenario may be distributed in the device that implements the scenario according to the implementation scenario description, or may be correspondingly changed in one or more devices different from the implementation scenario. The modules of the above implementation scenarios may be combined into one module, or may be further split into multiple sub-modules.

The above-mentioned serial numbers of the present invention are merely for description, and do not represent the advantages and disadvantages of the implementation scenario.

The above disclosure is only a few specific implementation scenarios of the present invention, but the present invention is not limited thereto, and any changes that can be made by those skilled in the art should fall within the protection scope of the present invention.

Claims (20)

 An environment isolation method is applied to an RPC client, and the environment isolation device connected to the RPC client is preset, and the routing address pool in the RPC client automatically refreshes the preset full address according to a preset period. The method further includes: receiving, by the RPC client, an environment isolation indication sent by the environment isolation device; the RPC client stops automatically refreshing the routing address pool, and replaces the current address in the routing address pool with a merge address, the merge address The RPC client is generated according to the current address in the routing address pool and the address in the preset manual address list; when the RPC client receives the service invocation request sent by the user, according to the merge in the routing address pool The address generates a valid target address; the RPC client sends the service call request to the RPC server corresponding to the target address, and returns the service processing result returned by the RPC server to the user.    The method of claim 1, wherein the manual address list is composed of an RPC client participating in the environment isolation and an address of the RPC server, and the RPC client replaces the current address in the routing address pool with the merge address. Specifically, the first sub-address that can be used for address merging is filtered from the manual address list; the address in the routing address pool after the automatic refresh is stopped is used as the second sub-address; according to the preset address merging algorithm, The first sub-address and the second sub-address are merged into the merged address; the current address in the routing address pool is deleted, and the merged address is added to the routing address pool.    The method of claim 1, wherein the RPC client generates a valid target address according to the merged address in the routing address pool, specifically: querying a preset routing rule, and in the routing address pool. Query the available device address; filter the queried device address according to the routing rule; if there is a device address that meets the routing rule, the device address is used as the target address; if there is no device address that meets the routing rule, The user returns a response to the call failure.    The method of claim 1, wherein after the RPC client replaces the current address in the routing address pool with the merged address, the method further includes: returning an environmental isolation success response to the environmental isolation device; When the quarantine status check indication sent by the quarantine device is sent, the interface between the querier and the downstream RPC server is queried, and the query result is sent to the quarantine device, so that the quarantine device feeds the user to the quarantine device. search result.    The method of claim 1, wherein after the RPC client replaces the current address in the routing address pool with the merged address, the method further includes: receiving an environmental isolation cancellation indication sent by the environmental isolation device The merged address in the routing address pool is refreshed to the full address, and the routing address pool automatically refreshes the preset full address according to a preset period.    An environment isolation method, the method is applied to an environment isolation device, and the environment isolation device is connected to the RPC client, and the method includes: determining, according to the address information carried in the environment isolation request sent by the user, that the environment is isolated. The RPC client, the routing address pool in the RPC client automatically refreshes the preset full address according to a preset period; and sends an environment isolation indication to the RPC client, so that the RPC client stops automatically refreshing the routing address pool. And replacing the current address in the routing address pool with a merged address, where the merged address is generated by combining the current address in the routing address pool and the address in the preset manual address list by the RPC client.    The method of claim 6, wherein the address information is specifically a source IP address and a destination IP address, and the RPC client that needs to be isolated by the environment is determined according to the address information carried in the environmental isolation request sent by the user. Specifically, the address information is extracted from the quarantine request; the RPC client that needs to be quarantined is obtained by querying the interface of the RPC server; and the RPC client corresponding to the source IP address is used as the RPC client that needs to be isolated by the environment.    The method of claim 6, wherein after the sending the environment isolation indication to the RPC client, the method further includes: sending an isolation to the RPC client if the environment isolation success response sent by the RPC client is received The status check indicates that the query result returned by the RPC client is fed back to the user; the status check indication is used to make the interface between the RPC client query itself and each downstream RPC server normal, and send the query result. Isolation of the device to the environment.    The method of claim 6, wherein after the sending the environment isolation indication to the RPC client, the method further includes: detecting an environmental isolation success response sent by the RPC client, detecting each downstream of the RPC client Whether the status of the RPC server is normal, and whether the merged address in the routing address pool is empty after being filtered by a preset routing rule; if there is a downstream RPC server whose status is abnormal, or a merged address in the routing address pool After being filtered by the preset routing rule, it is empty, and sends a downstream survival security alert to the user.    The method of claim 6, wherein after the sending the environment isolation indication to the RPC client, the method further includes: sending an environmental isolation to the RPC client when receiving the environmental isolation cancellation request sent by the user The indication is canceled, so that the RPC client refreshes the merged address in the routing address pool to the full address, and causes the routing address pool to automatically refresh the preset full address according to a preset period.    An RPC client, wherein the RPC client is connected to a preset environment isolation device, and the routing address pool in the RPC client automatically refreshes the preset full address according to a preset period, and the RPC client further includes Receiving a module, receiving an environment isolation indication sent by the environment isolation device; replacing the module, the RPC client stops automatically refreshing the routing address pool, and replaces the current address in the routing address pool with a merge address, the merge address Generating, for the RPC client, according to the current address in the routing address pool and the address in the preset manual address list; generating a module, when the receiving module receives the service invocation request sent by the user, according to the routing address pool The merged address in the middle generates a valid target address; the sending module sends the service call request to the RPC server corresponding to the target address, and feeds back the service processing result returned by the RPC server to the user.    The RPC client according to claim 11, wherein the manual address list is composed of an RPC client participating in the environment isolation and an address of the RPC server, and the replacement module replaces the current address in the routing address pool with The merged address is specifically: the first sub-address that can be used for address merging is filtered from the manual address list; the address in the routing address pool after the auto-refresh is stopped as the second sub-address; the merging algorithm is performed according to the preset address The first sub-address and the second sub-address are merged into the merged address; the current address in the routing address pool is deleted, and the merged address is added to the routing address pool.    The RPC client of claim 11, wherein the generating module is specifically configured to: query a preset routing rule, and query an available device address in the routing address pool; query the routing rule according to the routing rule. The device address to be filtered is filtered; if there is a device address that meets the routing rule, the device address is used as the target address; if there is no device address that meets the routing rule, a response to the call failure is returned to the user.    The RPC client according to claim 11, wherein the method further includes: a response module, returning an environmental isolation success response to the environmental isolation device; and querying the module, receiving an isolation status check sent by the environmental isolation device If the interface between the query and the downstream RPC server is normal, the query result is sent to the environment isolation device, so that the environment isolation device feeds back the query result to the user.    The RPC client according to claim 11, wherein the method further includes: an undo module, and refreshing the merged address in the routing address pool to the full amount when receiving the environmental isolation cancellation indication sent by the environmental isolation device The address and the routing address pool automatically refresh the preset full address according to a preset period.    An environment isolation device is characterized in that the environment isolation device is connected to an RPC client, and the environment isolation device includes: a determination module, and determining an RPC client that needs to be isolated according to the address information carried in the environmental isolation request sent by the user. The routing address pool in the RPC client automatically refreshes the preset full address according to a preset period; the sending module sends an environment isolation indication to the RPC client, so that the RPC client stops automatically refreshing the routing address. The pool replaces the current address in the routing address pool with a merged address, and the merged address is generated by the RPC client according to the current address in the routing address pool and the address in the preset manual address list.    The environmental isolation device of claim 16, wherein the address information is specifically a source IP address and a target IP address, and the determining module is specifically configured to: extract the address information from the environment isolation request; The interface of the RPC server obtains the service that needs to be quarantined by the environment. The RPC client corresponding to the source IP address is used as the RPC client that needs to be isolated by the environment.    The environmental isolation device of claim 16, wherein the method further includes: a first detection module, sending an isolation status check indication to the RPC client when receiving an environmental isolation success response sent by the RPC client, Returning the query result returned by the RPC client to the user; the status check indication is used to make the interface between the RPC client query itself and each downstream RPC server normal, and send the query result to the environment. Isolation device.    The environmental isolation device of claim 16, wherein the method further includes: detecting, by the second detection module, the status of each downstream RPC server of the RPC client when receiving the environmental isolation success response sent by the RPC client Whether it is normal, and whether the merged address in the routing address pool is empty after being filtered by the preset routing rule, and the merged address in the downstream RPC server or the routing address pool in the existing state is abnormal. When the routing rule is empty, the downstream security alarm is sent to the user.    The environmental isolation device of claim 16, wherein the method further includes: an undo module, sending an environmental isolation cancellation instruction to the RPC client when receiving the environmental isolation cancellation request sent by the user, so that the RPC is The client refreshes the merged address in the routing address pool to the full address, and causes the routing address pool to automatically refresh the preset full address according to a preset period.