CN111478940B - Data processing method and device - Google Patents
Data processing method and device Download PDFInfo
- Publication number
- CN111478940B CN111478940B CN202010140570.6A CN202010140570A CN111478940B CN 111478940 B CN111478940 B CN 111478940B CN 202010140570 A CN202010140570 A CN 202010140570A CN 111478940 B CN111478940 B CN 111478940B
- Authority
- CN
- China
- Prior art keywords
- network
- network message
- message
- packet
- queue
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Active
Links
Images
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L67/00—Network arrangements or protocols for supporting network services or applications
- H04L67/50—Network services
- H04L67/56—Provisioning of proxy services
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L67/00—Network arrangements or protocols for supporting network services or applications
- H04L67/50—Network services
- H04L67/56—Provisioning of proxy services
- H04L67/565—Conversion or adaptation of application format or content
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
- H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
- H04N21/20—Servers specifically adapted for the distribution of content, e.g. VOD servers; Operations thereof
- H04N21/21—Server components or server architectures
- H04N21/222—Secondary servers, e.g. proxy server, cable television Head-end
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
- H04N7/00—Television systems
- H04N7/18—Closed-circuit television [CCTV] systems, i.e. systems in which the video signal is not broadcast
Landscapes
- Engineering & Computer Science (AREA)
- Signal Processing (AREA)
- Multimedia (AREA)
- Computer Networks & Wireless Communication (AREA)
- Data Exchanges In Wide-Area Networks (AREA)
Abstract
The embodiment of the invention provides a data processing method and a data processing device, wherein the method comprises the following steps: when a first network message is detected, intercepting the first network message to obtain a second network message; the first network message is a network message adopting a first communication network protocol; forwarding the second network message to a preset queue; acquiring the second network message from the preset queue by adopting the first network agent, and converting the second network message into a third network message; wherein the third network message is a network message adopting a second communication network protocol; and sending the third network message to a second terminal device through a second communication network. By the embodiment of the invention, the software platform based on the internet communication can communicate through the video network, and by introducing the video network agent, unnecessary configuration is not required to be carried out on the application program, the design is simple and safe, and the purpose of removing the IP is achieved.
Description
Technical Field
The present invention relates to the field of video networking technologies, and in particular, to a method and an apparatus for data processing.
Background
The video networking is an important milestone for network development, the structural design of the video networking radically eliminates the network security problem troubling the Internet in a structural way of independent service permission and complete isolation of equipment and user data every time, generally needs no antivirus program and firewall, avoids the attack of hackers and viruses, and provides a structural carefree security network for users.
In the prior art, when information interaction is performed on applications in the video networking, the applications still need to rely on the internet to a certain extent, so that in the transmission process, the application configuration needs to be modified for a plurality of applications in the host, the operation is complex, and the functions are single.
Disclosure of Invention
In view of the above, the present invention has been made to provide a method and apparatus for data processing that overcomes or at least partially solves the above problems, comprising:
when a first network message is detected, intercepting the first network message to obtain a second network message; the first network message is a network message adopting a first communication network protocol;
forwarding the second network message to a preset queue;
acquiring the second network message from the preset queue by adopting the first network agent, and converting the second network message into a third network message; wherein the third network message is a network message adopting a second communication network protocol;
and sending the third network message to a second terminal device through a second communication network.
Optionally, after the step of intercepting the first network packet to obtain a second network packet, the method further includes:
and after the first network agent successfully analyzes the second network message, discarding the first network message.
Optionally, before the step of intercepting the first network packet to obtain a second network packet, the method further includes:
setting a firewall rule; and the firewall rules are used for intercepting the first network message.
Optionally, the step of forwarding the second network packet to a preset queue includes:
determining a queue identifier for the second network packet according to the firewall rule;
and forwarding the second network packet to a preset queue corresponding to the queue identifier by using the queue identifier.
Optionally, the step of obtaining the second network packet from the preset queue includes:
calling a preset interface function to generate a queue handle aiming at the second network message; the queue handle comprises a queue identifier of the preset queue;
and acquiring the second network message from the preset queue by adopting the queue handle.
Optionally, the first communication protocol is an internet communication protocol, and the second communication protocol is a video internet communication protocol.
Optionally, the converting the second network packet into a third network packet includes:
and analyzing the destination IP address of the second network message, and converting the destination IP address into a video network address to obtain a third network message.
Optionally, the method further includes:
receiving a fourth network message sent by the second terminal equipment through the first network agent, wherein the fourth network message is a network message adopting a second communication network protocol;
converting the fourth network packet to a fifth network packet using the first network agent; the fifth network message is a network message adopting a first communication network protocol;
and sending the fifth network message to a corresponding application through a socket.
Optionally, the first network agent realizes protocol conversion between the first communication network packet and the second communication network packet by invoking the second communication network SDK.
Optionally, before the step of sending the fifth network packet to the corresponding application through the socket, the method further includes:
determining a port identifier corresponding to the fifth network message by using the first network agent;
the step of sending the fifth network packet to a corresponding application through a socket includes:
and sending the fifth network message to a corresponding application by adopting the port identifier.
A data processing device is applied to a first terminal device, the first terminal device is deployed with a first network agent, and the data processing device comprises:
the first network message intercepting module is used for intercepting a first network message when the first network message is detected to obtain a second network message; the first network message is a network message adopting a first communication network protocol;
the second network message forwarding module is used for forwarding the second network message to a preset queue;
the second network message conversion module is used for acquiring the second network message from the preset queue by adopting the first network agent and converting the second network message into a third network message; wherein the third network message is a network message adopting a second communication network protocol;
and the third network message sending module is used for sending the third network message to second terminal equipment through a second communication network.
An electronic device comprising a processor, a memory and a computer program stored on the memory and being executable on the processor, the computer program, when executed by the processor, implementing the steps of the method of data processing as described above.
The embodiment of the invention has the following advantages:
in the embodiment of the invention, when the first network message is detected, the first network message is intercepted to obtain the second network message, the second network message is forwarded to the preset queue, the first network agent is adopted to obtain the second network message from the preset queue, the second network message is converted into the third network message, and the third network message is sent to the second terminal equipment through the second communication network, so that the software platform based on internet communication can communicate through the internet of view, the internet of view network agent is introduced, unnecessary configuration is not needed for an application program, the design is simple and safe, and the purpose of removing the IP is achieved.
Drawings
In order to more clearly illustrate the technical solution of the present invention, the drawings needed to be used in the description of the present invention will be briefly introduced below, and it is obvious that the drawings in the following description are only some embodiments of the present invention, and it is obvious for those skilled in the art to obtain other drawings based on these drawings without inventive exercise.
Fig. 1 is a schematic networking diagram of a video network according to an embodiment of the present invention;
fig. 2 is a schematic hardware structure diagram of a node server according to an embodiment of the present invention;
fig. 3 is a schematic hardware structure diagram of an access switch according to an embodiment of the present invention;
fig. 4 is a schematic hardware structure diagram of an ethernet protocol conversion gateway according to an embodiment of the present invention;
FIG. 5 is a flow chart illustrating steps of a method for data processing according to an embodiment of the present invention;
fig. 6 is a schematic diagram of a terminal framework according to an embodiment of the present invention;
FIG. 7 is a flow chart illustrating steps of another method for data processing according to an embodiment of the present invention;
fig. 8 is a schematic diagram illustrating a data transmission flow in a system according to an embodiment of the present invention;
FIG. 9 is a flow chart of steps in another method of data processing provided by an embodiment of the invention;
FIG. 10 is a diagram illustrating a network proxy design flow according to an embodiment of the present invention;
fig. 11 is a block diagram of a data processing apparatus according to an embodiment of the present invention.
Detailed Description
In order to make the aforementioned objects, features and advantages of the present invention comprehensible, embodiments accompanied with figures are described in further detail below. It is to be understood that the embodiments described are only a few embodiments of the present invention, and not all embodiments. All other embodiments, which can be derived by a person skilled in the art from the embodiments given herein without making any creative effort, shall fall within the protection scope of the present invention.
The video networking is an important milestone for network development, is a real-time network, can realize high-definition video real-time transmission, and pushes a plurality of internet applications to high-definition video, and high-definition faces each other.
The video networking adopts a real-time high-definition video exchange technology, can integrate required services such as dozens of services of video, voice, pictures, characters, communication, data and the like on a system platform on a network platform, such as high-definition video conference, video monitoring, intelligent monitoring analysis, emergency command, digital broadcast television, delayed television, network teaching, live broadcast, VOD on demand, television mail, personal Video Recorder (PVR), intranet (self-office) channels, intelligent video broadcast control, information distribution and the like, and realizes high-definition quality video broadcast through a television or a computer.
To better understand the embodiments of the present invention, the following description refers to the internet of view:
some of the technologies applied in the video networking are as follows:
network Technology (Network Technology)
Network technology innovation in video networking has improved over traditional Ethernet (Ethernet) to face the potentially enormous video traffic on the network. Unlike pure network Packet Switching (Packet Switching) or network Circuit Switching (Circuit Switching), the Packet Switching is adopted by the technology of the video networking to meet the Streaming requirement. The video networking technology has the advantages of flexibility, simplicity and low price of packet switching, and simultaneously has the quality and safety guarantee of circuit switching, and realizes the seamless connection of a whole network switching type virtual circuit and a data format.
Switching Technology (Switching Technology)
The video network adopts two advantages of asynchronism and packet exchange of the Ethernet, eliminates the Ethernet defect on the premise of full compatibility, and has end-to-end seamless connection of the whole network, direct connection with a user terminal and direct bearing of an IP data packet. The user data does not require any format conversion across the entire network. The video networking is a higher-level form of the Ethernet, is a real-time exchange platform, can realize the real-time transmission of the whole-network large-scale high-definition video which cannot be realized by the existing Internet, and pushes a plurality of network video applications to high-definition and unification.
Server Technology (Server Technology)
The server technology on the video networking and unified video platform is different from the traditional server, the streaming media transmission of the video networking and unified video platform is established on the basis of connection orientation, the data processing capacity of the video networking and unified video platform is independent of flow and communication time, and a single network layer can contain signaling and data transmission. For voice and video services, the complexity of video networking and unified video platform streaming media processing is much simpler than that of data processing, and the efficiency is greatly improved by more than one hundred times compared with that of a traditional server.
Storage Technology (Storage Technology)
The super-high speed storage technology of the unified video platform adopts the most advanced real-time operating system in order to adapt to the media content with super-large capacity and super-large flow, the program information in the server instruction is mapped to the specific hard disk space, the media content is not passed through the server any more, and is directly sent to the user terminal instantly, and the general waiting time of the user is less than 0.2 second. The optimized sector distribution greatly reduces the mechanical motion of the magnetic head track seeking of the hard disk, the resource consumption only accounts for 20% of that of the IP internet of the same grade, but concurrent flow which is 3 times larger than that of the traditional hard disk array is generated, and the comprehensive efficiency is improved by more than 10 times.
Network Security Technology (Network Security Technology)
The structural design of the video network completely eliminates the network security problem troubling the internet structurally by the modes of independent service permission control each time, complete isolation of equipment and user data and the like, generally does not need antivirus programs and firewalls, avoids the attack of hackers and viruses, and provides a structural carefree security network for users.
Service Innovation Technology (Service Innovation Technology)
The unified video platform integrates services and transmission, and is not only automatically connected once whether a single user, a private network user or a network aggregate. The user terminal, the set-top box or the PC are directly connected to the unified video platform to obtain various multimedia video services in various forms. The unified video platform adopts a menu type configuration table mode to replace the traditional complex application programming, can realize complex application by using very few codes, and realizes infinite new service innovation.
Networking of the video network is as follows:
the video network is a centralized control network structure, and the network can be a tree network, a star network, a ring network and the like, but on the basis of the centralized control node, the whole network is controlled by the centralized control node in the network.
As shown in fig. 1, the video network is divided into an access network and a metropolitan network.
The devices of the access network part can be mainly classified into 3 types: node server, access switch, terminal (including various set-top boxes, coding boards, memories, etc.). The node server is connected to an access switch, which may be connected to a plurality of terminals and may be connected to an ethernet network.
The node server is a node which plays a centralized control function in the access network and can control the access switch and the terminal. The node server can be directly connected with the access switch or directly connected with the terminal.
Similarly, devices on the metro network part can be classified into 3 types: a metropolitan area server, a node switch and a node server. The metro server is connected to a node switch, which may be connected to a plurality of node servers.
The node server is a node server of the access network part, namely the node server belongs to both the access network part and the metropolitan area network part.
The metropolitan area server is a node which plays a centralized control function in the metropolitan area network and can control a node switch and a node server. The metropolitan area server can be directly connected with the node switch or directly connected with the node server.
Therefore, the whole video network is a network structure with layered centralized control, and the network controlled by the node server and the metropolitan area server can be in various structures such as tree, star and ring.
The access network part can form a unified video platform (the part in a dotted circle), and a plurality of unified video platforms can form a video network; each unified video platform may be interconnected via metropolitan area and wide area video networking.
1. Visio networking device classification
1.1 devices in the video network of the embodiment of the present invention can be mainly classified into 3 types: server, exchanger (including Ethernet protocol conversion gateway), terminal (including various set-top boxes, code board, memory, etc.). The video network as a whole can be divided into a metropolitan area network (or national network, global network, etc.) and an access network.
1.2 wherein the devices of the access network part can be mainly classified into 3 types: node server, access exchanger (including Ethernet protocol conversion gateway), terminal (including various set-top boxes, coding board, memory, etc.).
The specific hardware structure of each access network device is as follows:
a node server:
as shown in fig. 2, the system mainly includes a network interface module 201, a switching engine module 202, a CPU module 203, and a disk array module 204;
the packets coming from the network interface module 201, the cpu module 203 and the disk array module 204 all enter the switching engine module 202; the switching engine module 202 performs an operation of looking up the address table 205 on the incoming packet, thereby obtaining the direction information of the packet; and stores the packet in a queue of the corresponding packet buffer 206 based on the packet's steering information; if the queue of the packet buffer 206 is nearly full, it is discarded; the switching engine module 202 polls all packet buffer queues for forwarding if the following conditions are met: 1) The port send buffer is not full; 2) The queue packet counter is greater than zero. The disk array module 204 mainly implements control over the hard disk, including initialization, read-write, and other operations on the hard disk; the CPU module 203 is mainly responsible for protocol processing with an access switch and a terminal (not shown in the figure), configuring an address table 205 (including a downlink protocol packet address table, an uplink protocol packet address table, and a data packet address table), and configuring the disk array module 204.
The access switch:
as shown in fig. 3, the network interface module mainly includes a network interface module (a downlink network interface module 301 and an uplink network interface module 302), a switching engine module 303 and a CPU module 304;
wherein, the packet (uplink data) coming from the downlink network interface module 301 enters the packet detection module 305; the packet detection module 305 detects whether the Destination Address (DA), the Source Address (SA), the packet type, and the packet length of the packet meet the requirements, and if so, allocates a corresponding stream identifier (stream-id) and enters the switching engine module 303, otherwise, discards the stream identifier; the packet (downstream data) coming from the upstream network interface module 302 enters the switching engine module 303; the incoming data packet of the CPU module 304 enters the switching engine module 303; the switching engine module 303 performs an operation of looking up the address table 306 on the incoming packet, thereby obtaining the direction information of the packet; if the packet entering the switching engine module 303 is from the downstream network interface to the upstream network interface, the packet is stored in the queue of the corresponding packet buffer 307 in association with the stream-id; if the queue of the packet buffer 307 is nearly full, it is discarded; if the packet entering the switching engine module 303 is not from the downlink network interface to the uplink network interface, the data packet is stored in the queue of the corresponding packet buffer 307 according to the guiding information of the packet; if the queue of the packet buffer 307 is close to full, it is discarded.
The switching engine module 303 polls all packet buffer queues, which in this embodiment of the present invention is divided into two cases:
if the queue is from the downlink network interface to the uplink network interface, the following conditions are met for forwarding: 1) The port send buffer is not full; 2) The queued packet counter is greater than zero; 3) Obtaining a token generated by a code rate control module;
if the queue is not from the downlink network interface to the uplink network interface, the following conditions are met for forwarding: 1) The port send buffer is not full; 2) The queue packet counter is greater than zero.
The rate control module 308 is configured by the CPU module 304, and generates tokens for packet buffer queues from all downstream network interfaces to upstream network interfaces at programmable intervals to control the rate of upstream forwarding.
The CPU module 304 is mainly responsible for protocol processing with the node server, configuration of the address table 306, and configuration of the code rate control module 308.
Ethernet protocol gateway:
as shown in fig. 4, the apparatus mainly includes a network interface module (a downlink network interface module 401 and an uplink network interface module 402), a switching engine module 403, a CPU module 404, a packet detection module 405, a rate control module 408, an address table 406, a packet buffer 407, a MAC adding module 409, and a MAC deleting module 410.
Wherein, the data packet coming from the downlink network interface module 401 enters the packet detection module 405; the packet detection module 405 detects whether the ethernet MAC DA, the ethernet MAC SA, the ethernet length or frame type, the video network destination address DA, the video network source address SA, the video network packet type, and the packet length of the packet meet the requirements, and if so, allocates a corresponding stream identifier (stream-id); then, the MAC deletion module 410 subtracts MAC DA, MAC SA, length or frame type (2 byte) and enters the corresponding receiving buffer, otherwise, discards it;
the downlink network interface module 401 detects the sending buffer of the port, and if there is a packet, obtains the ethernet MAC DA of the corresponding terminal according to the destination address DA of the packet, adds the ethernet MAC DA of the terminal, the MAC SA of the ethernet protocol gateway, and the ethernet length or frame type, and sends the packet.
The other modules in the ethernet protocol gateway function similarly to the access switch.
A terminal:
the system mainly comprises a network interface module, a service processing module and a CPU module; for example, the set-top box mainly comprises a network interface module, a video and audio coding and decoding engine module and a CPU module; the coding board mainly comprises a network interface module, a video and audio coding engine module and a CPU module; the memory mainly comprises a network interface module, a CPU module and a disk array module.
1.3 devices of the metropolitan area network part can be mainly classified into 2 types: node server, node exchanger, metropolitan area server. The node switch mainly comprises a network interface module, a switching engine module and a CPU module; the metropolitan area server mainly comprises a network interface module, a switching engine module and a CPU module.
2. Video networking packet definition
2.1 Access network packet definition
The data packet of the access network mainly comprises the following parts: destination Address (DA), source Address (SA), reserved byte, payload (PDU), CRC.
As shown in the following table, the data packet of the access network mainly includes the following parts:
| DA | SA | Reserved | Payload | CRC |
wherein:
the Destination Address (DA) is composed of 8 bytes (byte), the first byte represents the type of the data packet (such as various protocol packets, multicast data packets, unicast data packets, etc.), there are 256 possibilities at most, the second byte to the sixth byte are metropolitan area network addresses, and the seventh byte and the eighth byte are access network addresses;
the Source Address (SA) is also composed of 8 bytes (byte), defined as the same as the Destination Address (DA);
the reserved byte consists of 2 bytes;
the payload part has different lengths according to the types of different datagrams, 64 bytes if various protocol packets, 32+1024=1056 bytes if single-multicast data packets, and certainly not limited to the above 2 types;
the CRC consists of 4 bytes and is calculated in accordance with the standard ethernet CRC algorithm.
2.2 metropolitan area network packet definition
The topology of a metropolitan area network is a graph and there may be 2, or even more than 2, connections between two devices, i.e., there may be more than 2 connections between a node switch and a node server, a node switch and a node switch, and a node switch and a node server. However, the metro network address of the metro network device is unique, and in order to accurately describe the connection relationship between the metro network devices, parameters are introduced in the embodiment of the present invention: a label to uniquely describe a metropolitan area network device.
In this specification, the definition of the Label is similar to that of the Label of MPLS (Multi-Protocol Label Switch), and assuming that there are two connections between the device a and the device B, there are 2 labels for the packet from the device a to the device B, and 2 labels for the packet from the device B to the device a. The label is classified into an incoming label and an outgoing label, and assuming that the label (incoming label) of the packet entering the device a is 0x0000, the label (outgoing label) of the packet leaving the device a may become 0x0001. The network access process of the metro network is a network access process under centralized control, that is, address allocation and label allocation of the metro network are both dominated by the metro server, and the node switch and the node server are all passively executed, which is different from label allocation of MPLS, which is a result of mutual negotiation between the switch and the server.
As shown in the following table, the data packet of the metro network mainly includes the following parts:
| DA | SA | Reserved | label (R) | Payload | CRC |
Namely Destination Address (DA), source Address (SA), reserved byte (Reserved), tag, payload (PDU), CRC. The format of the tag may be defined by reference to the following: the tag is 32 bits with the upper 16 bits reserved and only the lower 16 bits used, and its position is between the reserved bytes and payload of the packet.
Referring to fig. 5, a flowchart illustrating steps of a method for data processing according to an embodiment of the present invention is shown, where the method may be applied to a first terminal device, and the first terminal device may be deployed with a first network agent, and specifically may include the following steps:
as an example, the first terminal device may be a computer, in which application software, an application program, and the like may be present.
The first network agent may be a video networking network agent, and may convert using a video networking communication protocol and transmit data via the video networking after obtaining the internet data.
The first communication network Protocol may be an internet communication Protocol (TCP), or a User Datagram Protocol (UDP).
In a specific implementation, most hardware devices are designed and developed for the internet, and when the application software runs in the first terminal device, the application software may generate the first network packet by using an internet communication protocol, and communicate with the application software in other terminal devices through the first network packet.
In the operation process of the first terminal device, when the first network message is detected, the first network message can be intercepted, and the second network message is obtained.
In an embodiment of the present invention, after the step of intercepting the first network packet to obtain the second network packet, the method may further include the following steps:
and after the first network agent successfully analyzes the second network message, discarding the first network message.
After the first network packet is intercepted to obtain the second network packet, the first network agent may be used to successfully analyze the second network packet and return the NF _ DROP to the kernel, and then the kernel may discard the first network packet according to the NF _ DROP.
In practical applications, the NF _ DROP may be a return value in the program, which is equal to 0, and the kernel receives the discard instruction when the return value is 0, and may perform a discard operation on the data specified by the return value to prevent the data from being further transmitted in the network.
after the second network packet is obtained, the second network packet may be forwarded to a preset queue.
as an example, the second communication network protocol may be a video networking communication protocol.
After the second network packet is forwarded to the preset queue, the first network agent may be adopted to obtain the second network packet from the preset queue through the net _ queue, and convert the second network packet into a third network packet adopting the video networking communication protocol.
As an example, the second terminal device may be a computer, in which application software, an application program, and the like may be present.
After converting the second network packet into a third network packet, the first terminal device may send the third network packet to the second terminal device through the second communication network.
Specifically, the first network message may have a destination terminal identifier, for example, a destination terminal IP address in the internet, and the internet terminal identifier may correspond to the video network terminal identifier.
After the first network message is intercepted to obtain a second network message and the second network message is obtained by adopting the first network agent, the destination terminal identification can be read, the video network terminal identification corresponding to the destination terminal identification is determined, and the third network message is sent to the second terminal equipment after the second network message is converted into the third network message.
In an example, a second network agent may be deployed in the second terminal device, the second network agent may be a video networking network agent, and after receiving the third network packet, the second terminal device may convert the received video networking transmission data into internet data by using the second network agent, so as to send the internet data to an application in the second terminal device.
In order to enable those skilled in the art to better understand the above steps, the following is an example to illustrate the embodiments of the present invention, but it should be understood that the embodiments of the present invention are not limited thereto.
As shown in fig. 6, other applications and agents (i.e., first network agents) may be deployed in the host 1 (i.e., the first terminal device), and other applications and agents (i.e., second network agents) may also be deployed in the host 2 (i.e., the second terminal device).
In the invention, other applications in the host 1 forward the message (i.e. the second network message) to the proxy through the kernel, and after the message is obtained, the proxy can convert the TCP data (i.e. the second network message) into V2V data (i.e. the third network message) adopting a video networking communication protocol and send the V2V data to the proxy in the host 2.
The proxy in the host 1 and the proxy in the host 2 are transmitted through the video network, and in the host 2, the proxy receives the V2V data (i.e., the third network packet) sent by the host 1, can convert the V2V data into TCP data, and sends the TCP data to other applications in the host 2 through the kernel.
In the embodiment of the invention, when the first network message is detected, the first network message is intercepted to obtain the second network message, the second network message is forwarded to the preset queue, the first network agent is adopted to obtain the second network message from the preset queue, the second network message is converted into the third network message, and the third network message is sent to the second terminal equipment through the second communication network, so that the software platform based on internet communication can communicate through the internet of view, the redundant configuration is not required to be carried out on an application program through the introduction of the internet of view network agent, the design is simple and safe, and the purpose of removing the IP is achieved.
Referring to fig. 7, a flowchart illustrating steps of another data processing method according to an embodiment of the present invention is shown, where the method may be applied to a first terminal device, where the first terminal device is deployed with a first network agent and one or more first application clients, and specifically includes the following steps:
step 701, setting a firewall rule; the firewall rules are used for intercepting the first network message;
as an example, the firewall rule may be an iptables rule, and may be configured to intercept network packets of one or more first application clients, for example, the iptables is a firewall application under the Linux system, and functions are performed by the iptables rule, and the iptables rule is added to implement functions of IP interception, port interception, forwarding, and the like.
In a specific implementation, an iptables rule may be set, and a first network packet sent by one or more applications in the first terminal device may be intercepted.
in the operation process of the first terminal device, when the first network message of one or more applications is detected, the first network message can be intercepted, and the second network message is obtained.
In practical application, an iptables rule is added, and the network messages of one or more applications transmitted in the netfilter system are intercepted, so that when a first network message of one or more applications is detected, the first network message can be intercepted, and the first network message can be copied to obtain a second network message.
Specifically, the netfilter is a kernel module of Linux, and can provide a whole set of hook function management mechanism to allow a user to perform operations such as filtering, address conversion, port redirection and the like on data messages.
As shown in fig. 8, in the process of transmitting data by the netfilter system, a data packet (i.e., a first network packet) sent by an application client enters a kernel space, is transmitted to a route through a pre-routing link before the route, enters a user space from a local in after the data packet is judged to be data sent to a local machine through the first route, and is sent from a local out after the user space finishes operating the data. The added iptables rule is that data (i.e. a first network packet) is intercepted at local _ out, and then the intercepted data can be copied to obtain copied data (i.e. a second network packet).
in an example, a queue identification for the second network packet may be determined according to firewall rules, and the queue identification may be a queue number of a queue for the second network packet. After the firewall rule is set, the queue number of the queue for the second network packet may be obtained from the firewall rule.
In yet another example, the queue identifier may be adopted to forward the second network packet to a preset queue corresponding to the queue identifier, where the preset queue may be a designated queue for the second network packet, and the second network packet may be forwarded to the preset queue. After determining the queue number for the second network packet, the second network packet may be forwarded to a preset queue corresponding to the queue number according to the queue number.
For example, an iptables rule may be added, so that all network packets sent by the local machine are forwarded to a designated queue, such as iptables-a OUTPUT-s 10.1.24.11-j NFQUEUE-queue-num 0, and by the iptables rule, data packets sent by 10.1.24.11 as the source address can be forwarded to queue No. 0.
as an example, the preset interface function may be a netfilter _ queue interface function, and the queue handle may be a queue handle obtained by initialization.
In a specific implementation, a queue handle may be obtained by initializing by calling a netfilter _ queue interface function, where the queue handle may include a queue number of a preset queue for the second network packet.
For example, initialization results in a queue handle, which can bind the handle to the queue, where the queue, i.e., queue number, in the queue handle is consistent with the queue number specified in the iptables command.
in a specific implementation, a queue handle may be obtained by calling a netfilter _ queue interface function, and the queue handle is used to obtain the second network packet from the preset queue.
Specifically, the netfilter _ queue operates in a user space, after the second network packet is forwarded to the preset queue, the second network packet may be obtained from the preset queue by calling a netfilter _ queue interface function, and then the first network agent may obtain the second network packet in the preset queue through the netfilter _ queue.
after the second network message is obtained, the first network agent can be used for analyzing the destination IP address of the second network message, converting the destination IP address into the internet of view address, and further converting the second network message into a third network message adopting the internet of view communication protocol.
In practical application, the first network agent may obtain the destination IP by analyzing the second network packet, and then may perform conversion according to the video network address corresponding to the destination IP, and convert the second network packet into a third network packet using the video network communication protocol.
As an example, the second communication network may be a video networking communication network.
After converting the second network message into a third network message, the first terminal device may send the third network message to the second terminal device through the video networking communication network.
In the embodiment of the invention, by setting a firewall rule, when a first network message is detected, the first network message is intercepted to obtain a second network message, the second network message is forwarded to a preset queue, a first network agent is adopted to call a preset interface function, a queue handle aiming at the second network message is generated, the queue handle is adopted to obtain the second network message from the preset queue, a destination IP address of the second network message is analyzed and converted into a video network address to obtain a third network message, the third network message is sent to a second terminal device through a second communication network, software platform information interaction adopting video network communication is realized, the network message is intercepted and forwarded to the queue through setting an iptables rule, and then the video network agent can obtain the network message in the queue through a filter _ que to carry out video network transmission, under the condition that application program configuration is not required to be modified, the aim of removing the IP is achieved, information in the internet can be forwarded to the video network for transmission, and the security of the video network is fully exerted.
Referring to fig. 9, a flowchart illustrating steps of another data processing method according to an embodiment of the present invention is shown, where the method may be applied to a first terminal device, where the first terminal device is deployed with a first network agent, and specifically includes the following steps:
as an example, the first network agent may implement protocol conversion between the first communication network packet and the second communication network packet by invoking the second communication network SDK.
In a specific implementation, the first network agent may receive a fourth network packet that is sent by the second terminal device and that uses the second communication network protocol.
In practical application, the first network agent may perform video networking data transmission through the sdk module, that is, the first network agent may receive, through the sdk module, a network packet sent by a network agent in the second terminal device.
after the first network agent receives the fourth network packet, the fourth network packet may be converted into a fifth network packet that employs the first communication network protocol.
In practical applications, the fifth network packet may be sent through a socket, and the fifth network packet may be transmitted to a corresponding application of the second terminal device through a protocol stack.
In an example, a port identifier corresponding to the fifth network packet may be determined by using the first network agent, and the port identifier may be a destination port address for the fifth network packet. The first terminal device may use the first network agent to analyze the received network packet, and obtain a destination IP and a destination port address for network packet transmission.
In yet another example, the port identifier may be used to send the fifth network packet to the corresponding application. Because the first network agent in the first terminal device is not connected with one or more applications, when the fifth network packet is sent to a corresponding application, a destination port address needs to be designated, so that the fifth network packet is sent to the corresponding application corresponding to the designated destination port address.
For example, the first network agent may analyze the received network packet, obtain a destination port address for network packet transmission, designate the port address as the destination port address, and further transmit the network packet to a corresponding application corresponding to the destination port address.
For another example, for a received network packet, the destination IP and the destination port sent by the network packet may be obtained through parsing, that is, the application program in the first terminal device that receives the network packet may be determined, and then the network packet may be sent to the destination application program through the send function, so as to perform data processing.
In the embodiment of the invention, when a first network message is detected, the first network message is intercepted to obtain a second network message, the second network message is forwarded to a preset queue, a first network agent is adopted to obtain the second network message from the preset queue, the second network message is converted into a third network message, the third network message is sent to a second terminal device through a second communication network, a fourth network message sent by the second terminal device is received through the first network agent, the fourth network message is a network message adopting a second communication network protocol, the first network agent is utilized to convert the fourth network message into a fifth network message, and the fifth network message is sent to a corresponding application through a socket, so that a software platform based on internet communication can communicate through the internet of view, redundant configuration is not needed for an application program through the introduction of the internet of view network agent, the design is simple and safe, and the purpose of removing an IP is achieved.
In order to enable those skilled in the art to better understand the above steps, the following is an example to illustrate the embodiments of the present invention, but it should be understood that the embodiments of the present invention are not limited thereto.
As shown in fig. 10, for the sending function of the first network agent in the first terminal device, an iptables rule (i.e. a firewall rule) may be added to intercept a network packet (a first network packet) and forward the network packet (a second network packet) to the queue, and then the network packet (the second network packet) in the queue is obtained through a netfilter _ queue (a preset interface function), a destination IP of the packet is analyzed and converted into a view network address, and the network packet (a third network packet) is sent to a target host (a second terminal device) through the view network.
For the receiving function of the first network agent in the first terminal device, the network message (fourth network message) may be received through the video network, and then the network message (fifth network message) may be sent through the socket, so as to send the network message to the application program (corresponding application) on the host (first terminal device) for processing.
It should be noted that, for simplicity of description, the method embodiments are described as a series of acts or combination of acts, but those skilled in the art will recognize that the present invention is not limited by the illustrated order of acts, as some steps may occur in other orders or concurrently in accordance with the embodiments of the present invention. Further, those skilled in the art will appreciate that the embodiments described in the specification are presently preferred and that no particular act is required to implement the invention.
Referring to fig. 11, a block diagram of a data processing apparatus according to an embodiment of the present invention is shown, and the apparatus may be applied to a first terminal device, where the first terminal device is deployed with a first network agent, and the apparatus specifically includes the following modules:
a first network packet intercepting module 1101, configured to intercept a first network packet when the first network packet is detected, to obtain a second network packet; the first network message is a network message adopting a first communication network protocol;
a second network packet forwarding module 1102, configured to forward the second network packet to a preset queue;
a second network packet conversion module 1103, configured to acquire, by using the first network agent, the second network packet from the preset queue, and convert the second network packet into a third network packet; the third network message is a network message adopting a second communication network protocol;
a third network packet sending module 1104, configured to send the third network packet to a second terminal device through a second communication network.
In an embodiment of the present invention, the apparatus further includes:
and the first network message discarding module is used for discarding the first network message after the first network agent successfully analyzes the second network message.
In an embodiment of the present invention, the apparatus further includes:
the firewall rule setting module is used for setting firewall rules; and the firewall rules are used for intercepting the first network message.
In an embodiment of the present invention, the first network packet intercepting module 1101 includes:
a queue identifier determining submodule, configured to determine a queue identifier for the second network packet according to the firewall rule;
and the second network message forwarding sub-module is used for forwarding the second network message to a preset queue corresponding to the queue identifier by adopting the queue identifier.
In an embodiment of the present invention, the second network packet conversion module 1103 includes:
the queue handle generating submodule is used for calling a preset interface function and generating a queue handle aiming at the second network message; the queue handle comprises a queue identifier of the preset queue;
and the second network message acquisition submodule is used for acquiring the second network message from the preset queue by adopting the queue handle.
In an embodiment of the present invention, the first communication protocol is an internet communication protocol, and the second communication protocol is a video internet communication protocol.
In an embodiment of the present invention, the second network packet conversion module 1103 further includes:
and the video network address conversion submodule is used for analyzing the destination IP address of the second network message and converting the destination IP address into a video network address to obtain a third network message.
In an embodiment of the present invention, the apparatus further includes:
a fourth network message receiving module, configured to receive, by the first network agent, a fourth network message sent by the second terminal device, where the fourth network message is a network message using a second communication network protocol;
a fourth network packet conversion module, configured to convert the fourth network packet into a fifth network packet by using the first network agent; the fifth network message is a network message adopting a first communication network protocol;
and the fifth network message sending module is used for sending the fifth network message to a corresponding application through a socket.
In an embodiment of the present invention, the apparatus further includes:
and the port identifier determining module is used for determining the port identifier corresponding to the fifth network message by adopting the first network agent.
In an embodiment of the present invention, the fifth network packet sending module includes:
and the fifth network message sending submodule is used for sending the fifth network message to a corresponding application by adopting the port identifier.
In an embodiment of the present invention, the first network agent realizes protocol conversion between the first communication network packet and the second communication network packet by invoking the second communication network SDK.
In the embodiment of the invention, when the first network message is detected, the first network message is intercepted to obtain the second network message, the second network message is forwarded to the preset queue, the first network agent is adopted to obtain the second network message from the preset queue, the second network message is converted into the third network message, and the third network message is sent to the second terminal equipment through the second communication network, so that the software platform based on internet communication can communicate through the internet of view, the internet of view network agent is introduced, unnecessary configuration is not needed for an application program, the design is simple and safe, and the purpose of removing the IP is achieved.
An embodiment of the present invention also provides an electronic device, which may include a processor, a memory, and a computer program stored on the memory and capable of running on the processor, wherein the computer program, when executed by the processor, implements the steps of the method for processing data as described above.
An embodiment of the present invention further provides a computer-readable storage medium, on which a computer program is stored, which, when executed by a processor, implements the steps of the method of data processing as above.
For the device embodiment, since it is basically similar to the method embodiment, the description is simple, and for the relevant points, refer to the partial description of the method embodiment.
The embodiments in the present specification are described in a progressive manner, each embodiment focuses on differences from other embodiments, and the same and similar parts among the embodiments are referred to each other.
As will be appreciated by one skilled in the art, embodiments of the present invention may be provided as a method, apparatus, or computer program product. Accordingly, embodiments of the present invention may take the form of an entirely hardware embodiment, an entirely software embodiment or an embodiment combining software and hardware aspects. Furthermore, embodiments of the present invention may take the form of a computer program product embodied on one or more computer-usable storage media (including, but not limited to, disk storage, CD-ROM, optical storage, and the like) having computer-usable program code embodied therein.
Embodiments of the present invention are described with reference to flowchart illustrations and/or block diagrams of methods, terminal devices (systems), and computer program products according to embodiments of the invention. It will be understood that each flow and/or block of the flow diagrams and/or block diagrams, and combinations of flows and/or blocks in the flow diagrams and/or block diagrams, can be implemented by computer program instructions. These computer program instructions may be provided to a processor of a general purpose computer, special purpose computer, embedded processor, or other programmable data processing terminal to produce a machine, such that the instructions, which execute via the processor of the computer or other programmable data processing terminal, create means for implementing the functions specified in the flowchart flow or flows and/or block diagram block or blocks.
These computer program instructions may also be stored in a computer-readable memory that can direct a computer or other programmable data processing terminal to function in a particular manner, such that the instructions stored in the computer-readable memory produce an article of manufacture including instruction means which implement the function specified in the flowchart flow or flows and/or block diagram block or blocks.
These computer program instructions may also be loaded onto a computer or other programmable data processing terminal to cause a series of operational steps to be performed on the computer or other programmable terminal to produce a computer implemented process such that the instructions which execute on the computer or other programmable terminal provide steps for implementing the functions specified in the flowchart flow or flows and/or block diagram block or blocks.
While preferred embodiments of the present invention have been described, additional variations and modifications of these embodiments may occur to those skilled in the art once they learn of the basic inventive concepts. Therefore, it is intended that the appended claims be interpreted as including preferred embodiments and all such alterations and modifications as fall within the scope of the embodiments of the invention.
Finally, it should also be noted that, in this document, relational terms such as first and second, and the like are used solely to distinguish one entity or action from another entity or action without necessarily requiring or implying any actual such relationship or order between such entities or actions. Also, the terms "comprises," "comprising," or any other variation thereof, are intended to cover a non-exclusive inclusion, such that a process, method, article, or terminal that comprises a list of elements does not include only those elements but may include other elements not expressly listed or inherent to such process, method, article, or terminal. Without further limitation, an element defined by the phrase "comprising a … …" does not exclude the presence of another identical element in a process, method, article, or terminal apparatus that comprises the element.
The method and apparatus for data processing provided above are described in detail, and a specific example is applied herein to illustrate the principles and embodiments of the present invention, and the above description of the embodiment is only used to help understand the method and core ideas of the present invention; meanwhile, for a person skilled in the art, according to the idea of the present invention, there may be variations in the specific embodiments and the application scope, and in summary, the content of the present specification should not be construed as a limitation to the present invention.
Claims (8)
1. A data processing method is applied to a first terminal device, wherein the first terminal device is deployed with a first network agent, and the method comprises the following steps:
when a first network message is detected, intercepting the first network message to obtain a second network message; the first network message is a network message adopting a first communication network protocol;
after the first network agent successfully analyzes the second network message, discarding the first network message according to a return value NF _ DROP;
forwarding the second network message to a preset queue;
acquiring the second network message from the preset queue by adopting the first network agent, analyzing a destination IP address of the second network message, and converting the destination IP address of the second network message into a video network address to obtain a third network message; wherein the third network message is a network message adopting a second communication network protocol;
and sending the third network message to a second terminal device through a second communication network.
2. The method of claim 1, wherein prior to the step of intercepting the first network packet to obtain a second network packet, the method further comprises:
setting a firewall rule; and the firewall rules are used for intercepting the first network message.
3. The method according to claim 1, wherein the step of obtaining the second network packet from the preset queue comprises:
calling a preset interface function to generate a queue handle aiming at the second network message; the queue handle comprises a queue identifier of the preset queue;
and acquiring the second network message from the preset queue by adopting the queue handle.
4. The method of claim 1, wherein the first communication network protocol is an internet communication protocol and the second communication network protocol is a video networking communication protocol.
5. The method of claim 1, further comprising:
receiving a fourth network message sent by the second terminal equipment through the first network agent, wherein the fourth network message is a network message adopting a second communication network protocol;
converting the fourth network packet to a fifth network packet using the first network agent; the fifth network message is a network message adopting a first communication network protocol;
and sending the fifth network message to a corresponding application through a socket.
6. The method according to claim 1 or 5, wherein the first network agent performs protocol conversion between the first communication network packet and the second communication network packet by invoking the second communication network SDK.
7. A data processing apparatus, applied to a first terminal device, where a first network agent is deployed in the first terminal device, includes:
the first network message intercepting module is used for intercepting a first network message when the first network message is detected to obtain a second network message; the first network message is a network message adopting a first communication network protocol;
the second network message forwarding module is used for forwarding the second network message to a preset queue;
the second network message conversion module is used for acquiring the second network message from the preset queue by adopting the first network agent, analyzing a destination IP address of the second network message, and converting the destination IP address of the second network message into a video network address to obtain a third network message; wherein the third network message is a network message adopting a second communication network protocol;
the third network message sending module is used for sending the third network message to second terminal equipment through a second communication network;
and the first network message discarding module is used for discarding the first network message according to a return value NF _ DROP after the first network agent successfully analyzes the second network message.
8. An electronic device, comprising a processor, a memory and a computer program stored on the memory and capable of running on the processor, the computer program, when executed by the processor, implementing the steps of the method of data processing according to any one of claims 1 to 6.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202010140570.6A CN111478940B (en) | 2020-03-03 | 2020-03-03 | Data processing method and device |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202010140570.6A CN111478940B (en) | 2020-03-03 | 2020-03-03 | Data processing method and device |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN111478940A CN111478940A (en) | 2020-07-31 |
| CN111478940B true CN111478940B (en) | 2023-02-28 |
Family
ID=71747257
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN202010140570.6A Active CN111478940B (en) | 2020-03-03 | 2020-03-03 | Data processing method and device |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN111478940B (en) |
Families Citing this family (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN114513369B (en) * | 2022-04-18 | 2022-07-08 | 远江盛邦（北京）网络安全科技股份有限公司 | Deep packet inspection-based internet of things behavior analysis method and system |
Citations (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US6356529B1 (en) * | 1999-08-12 | 2002-03-12 | Converse, Ltd. | System and method for rapid wireless application protocol translation |
| CN109194660A (en) * | 2018-09-12 | 2019-01-11 | 视联动力信息技术股份有限公司 | The method of network entry and device of mobile terminal |
| CN110266638A (en) * | 2019-05-08 | 2019-09-20 | 视联动力信息技术股份有限公司 | Information processing method, device and storage medium |
| CN110650147A (en) * | 2019-09-27 | 2020-01-03 | 视联动力信息技术股份有限公司 | Data acquisition method and system |
Family Cites Families (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| TWI382717B (en) * | 2007-11-12 | 2013-01-11 | D Link Corp | A method of sharing resources by interconnecting a network terminal device of two private networks by a user agent |
-
2020
- 2020-03-03 CN CN202010140570.6A patent/CN111478940B/en active Active
Patent Citations (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US6356529B1 (en) * | 1999-08-12 | 2002-03-12 | Converse, Ltd. | System and method for rapid wireless application protocol translation |
| CN109194660A (en) * | 2018-09-12 | 2019-01-11 | 视联动力信息技术股份有限公司 | The method of network entry and device of mobile terminal |
| CN110266638A (en) * | 2019-05-08 | 2019-09-20 | 视联动力信息技术股份有限公司 | Information processing method, device and storage medium |
| CN110650147A (en) * | 2019-09-27 | 2020-01-03 | 视联动力信息技术股份有限公司 | Data acquisition method and system |
Also Published As
| Publication number | Publication date |
|---|---|
| CN111478940A (en) | 2020-07-31 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN108965040B (en) | Service monitoring method and device for video network | |
| CN109996086B (en) | Method and device for inquiring service state of video networking | |
| CN110602266B (en) | Domain name resolution method and system | |
| CN110138513B (en) | Data transmission method and video networking system | |
| CN110650147A (en) | Data acquisition method and system | |
| CN111211982B (en) | Data forwarding method and device, electronic equipment and storage medium | |
| CN111478880B (en) | Data processing method and device | |
| CN110417792B (en) | Communication method, system, gateway device and storage medium | |
| CN110446058B (en) | Video acquisition method, system, device and computer readable storage medium | |
| CN110336710B (en) | Terminal testing method, system and device and storage medium | |
| CN110493149B (en) | Message processing method and device | |
| CN109889516B (en) | Method and device for establishing session channel | |
| CN109769012B (en) | Web server access method and device | |
| CN111478940B (en) | Data processing method and device | |
| CN110572367B (en) | Method, system, server, device and storage medium for modifying terminal name | |
| CN110808896B (en) | Data transmission method and device, electronic equipment and storage medium | |
| CN110536148B (en) | Live broadcasting method and equipment based on video networking | |
| CN110493555B (en) | Request processing method, user terminal, core server, device and storage medium | |
| CN110493311B (en) | Service processing method and device | |
| CN110113563B (en) | Data processing method based on video network and video network server | |
| CN110062259B (en) | Video acquisition method, system, device and computer readable storage medium | |
| CN110120937B (en) | Resource acquisition method, system, device and computer readable storage medium | |
| CN113162910A (en) | Resource transmission method and device, electronic equipment and storage medium | |
| CN111787261A (en) | Audio and video data sending method and device, electronic equipment and storage medium | |
| CN111614536A (en) | Data forwarding method and device |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant |