CN112437167A

CN112437167A - Method and device for creating transmission channel, storage medium and electronic equipment

Info

Publication number: CN112437167A
Application number: CN202011257605.0A
Authority: CN
Inventors: 王郡; 姜超; 罗元
Original assignee: Beijing Topsec Technology Co Ltd; Beijing Topsec Network Security Technology Co Ltd; Beijing Topsec Software Co Ltd
Current assignee: Beijing Topsec Technology Co Ltd; Beijing Topsec Network Security Technology Co Ltd; Beijing Topsec Software Co Ltd
Priority date: 2020-11-11
Filing date: 2020-11-11
Publication date: 2021-03-02
Anticipated expiration: 2040-11-11
Also published as: CN112437167B

Abstract

The embodiment of the application provides a method, a device, a storage medium and an electronic device for creating a transmission channel, wherein the method comprises the following steps: receiving a creation request which is sent by gateway equipment and carries a preset IP address field, wherein the creation request is used for requesting to create a transmission channel; splitting a preset IP address segment into a plurality of target IP address segments according to an address splitting strategy; determining a subnet mask corresponding to each target IP address field in the target IP address fields according to the target IP address fields; and creating a transmission channel corresponding to each target IP address field according to the plurality of target IP address fields and the subnet mask corresponding to each target IP address field. By means of the technical scheme, the embodiment of the application can ensure that each transmission channel only allows the IP address in the corresponding target IP address field to pass through, thereby ensuring the safety and reliability of data transmission.

Description

Method and device for creating transmission channel, storage medium and electronic equipment

Technical Field

The present application relates to the field of network security technologies, and in particular, to a method and an apparatus for creating a transmission channel, a storage medium, and an electronic device.

Background

At present, when a gateway configures resources, a relevant IP address, a subnet mask, and the like need to be added to the configured resources, and if the added IP address is an IP address field, a transmission channel can be set directly in an overall coverage manner.

For example, when the resource address is configured, in the case that the added IP address is an IP address field and the IP address field is 192.168.74.32-192.168.80.32 at this time, the subnet mask configured at this time is 255.255.255.0, so that the requirement that the entire IP address field transmits data through one transmission channel can be satisfied.

In the process of implementing the invention, the inventor finds that the following problems exist in the prior art: in the case of configuring a transmission channel by using a subnet mask corresponding to an IP segment, a situation may occur in which other IP addresses that are not in the IP address segment may also pass through the transmission channel.

Disclosure of Invention

An object of the embodiments of the present application is to provide a method, an apparatus, a storage medium, and an electronic device for creating a transmission channel, so as to solve a problem in the prior art that other IP addresses that are not in the present IP address field may also pass through the transmission channel.

In a first aspect, an embodiment of the present application provides a method for creating a transmission channel, where the method includes: receiving a creation request which is sent by gateway equipment and carries a preset IP address field, wherein the creation request is used for requesting to create a transmission channel; splitting a preset IP address segment into a plurality of target IP address segments according to an address splitting strategy; determining a subnet mask corresponding to each target IP address field in the target IP address fields according to the target IP address fields; and creating a transmission channel corresponding to each target IP address field according to the plurality of target IP address fields and the subnet mask corresponding to each target IP address field.

Therefore, according to the embodiment of the application, the preset IP address field is reasonably split, and the special subnet mask is allocated to each split target IP address field, so that a plurality of transmission channels can be created by using each target IP address field and the corresponding subnet mask thereof, and each transmission channel is ensured to only allow the IP address in the corresponding target IP address field to pass through, thereby ensuring the safety and reliability of data transmission.

In one possible embodiment, the preset IP address segment includes a first starting IP address and a first terminating IP address, each of the first starting IP address and the first terminating IP address includes four fields, and the splitting of the preset IP address segment into a plurality of target IP address segments according to the address splitting policy includes: under the condition that the nth field of the first starting IP address and the first terminating IP address start to be different, splitting a preset IP address field into a first target IP address field, a second target IP address field and a third target IP address field, wherein n is an integer from 1 to 3; the second starting IP address of the first target IP address field and the second ending IP address of the first target IP address field are IP addresses with different beginning of the (n + 1) th field, the third starting IP address of the third target IP address field and the third ending IP address of the third target IP address field are IP addresses with different beginning of the (n + 1) th field, and the second target IP address field is an IP address field between the first target IP address field and the third target IP address field.

Therefore, by means of the technical scheme, the address can be conveniently and quickly split.

In one possible embodiment, splitting the preset IP address segment into a plurality of target IP address segments according to the address splitting policy further includes: and splitting the first target IP address segment, the second target IP address segment or the third target IP address segment according to the address splitting strategy.

Therefore, the embodiment of the application can continue to split the first target IP address field, the second target IP address field or the third target IP address field, so that the cyclic splitting can be realized until the splitting cannot be finished.

In one possible embodiment, the splitting of the preset IP address segment into a plurality of target IP address segments according to the address splitting policy includes: under the condition that the fourth fields of the first starting IP address and the first terminating IP address are different in beginning, calculating the field difference value of the fourth field of the first terminating IP address and the fourth field of the first starting IP address; and splitting the preset IP address section into a plurality of target IP address sections according to the field difference.

Therefore, by means of the technical scheme, the splitting can be performed according to the longest section capable of being split, so that the splitting progress can be accelerated, the number of the transmission channels can be reduced, and the speed of each transmission channel for accessing the resources is accelerated.

In a second aspect, an embodiment of the present application provides an apparatus for creating a transmission channel, where the apparatus includes: the gateway equipment comprises a receiving module, a sending module and a receiving module, wherein the receiving module is used for receiving a creation request which is sent by the gateway equipment and carries a preset IP address field, and the creation request is used for requesting to create a transmission channel; the splitting module is used for splitting a preset IP address segment into a plurality of target IP address segments according to the address splitting strategy; the determining module is used for determining a subnet mask corresponding to each target IP address field in the target IP address fields according to the target IP address fields; and the creating module is used for creating a transmission channel corresponding to each target IP address field according to the plurality of target IP address fields and the subnet mask corresponding to each target IP address field.

In one possible embodiment, the preset IP address segment includes a first starting IP address and a first terminating IP address, both the first starting IP address and the first terminating IP address include four fields, the splitting module is specifically configured to split the preset IP address segment into a first target IP address segment, a second target IP address segment, and a third target IP address segment under the condition that it is determined that the nth fields of the first starting IP address and the first terminating IP address start differently, n is an integer from 1 to 3; the second starting IP address of the first target IP address field and the second ending IP address of the first target IP address field are IP addresses with different beginning of the (n + 1) th field, the third starting IP address of the third target IP address field and the third ending IP address of the third target IP address field are IP addresses with different beginning of the (n + 1) th field, and the second target IP address field is an IP address field between the first target IP address field and the third target IP address field.

In a possible embodiment, the splitting module is specifically configured to split the first target IP address segment, the second target IP address segment, or the third target IP address segment according to an address splitting policy.

In one possible embodiment, the preset IP address segment includes a first starting IP address and a first terminating IP address, the first starting IP address and the terminating IP address both include four fields, and the splitting module is specifically configured to: under the condition that the fourth fields of the first starting IP address and the first terminating IP address are different in beginning, calculating the field difference value of the fourth field of the first terminating IP address and the fourth field of the first starting IP address; and splitting the preset IP address section into a plurality of target IP address sections according to the field difference.

In one possible embodiment, the subnet mask includes a target field for identifying the number of IP addresses in the corresponding target IP address segment, and the splitting module is specifically configured to split the preset IP address segment into a plurality of target IP address segments according to the field difference and the target field.

In a third aspect, an embodiment of the present application discloses a computer-readable storage medium, on which a computer program is stored, and the computer program performs the steps as in the first aspect or the first aspect when executed by a processor.

In a fourth aspect, an embodiment of the present application discloses an electronic device, which includes a processor and a memory, where the memory stores computer-readable instructions, and the computer-readable instructions, when executed by the processor, perform the steps as in the first aspect or the first aspect.

In a fifth aspect, the present application provides a computer program product which, when run on a computer, causes the computer to perform the method of the first aspect or any possible implementation manner of the first aspect.

In order to make the aforementioned and other objects, features and advantages of the present invention comprehensible, preferred embodiments accompanied with figures are described in detail below.

Drawings

In order to more clearly illustrate the technical solutions of the embodiments of the present application, the drawings that are required to be used in the embodiments of the present application will be briefly described below, it should be understood that the following drawings only illustrate some embodiments of the present application and therefore should not be considered as limiting the scope, and that those skilled in the art can also obtain other related drawings based on the drawings without inventive efforts.

Fig. 1 is a schematic diagram illustrating an application scenario provided in an embodiment of the present application;

fig. 2 is a flowchart illustrating a method for creating a transmission channel according to an embodiment of the present application;

fig. 3 is a flowchart illustrating a method for splitting an IP address segment according to an embodiment of the present application;

fig. 4 shows a block diagram of an apparatus for creating a transmission channel according to an embodiment of the present application;

fig. 5 is a block diagram of an electronic device according to an embodiment of the present disclosure.

Detailed Description

The technical solutions in the embodiments of the present application will be described below with reference to the drawings in the embodiments of the present application.

It should be noted that: like reference numbers and letters refer to like items in the following figures, and thus, once an item is defined in one figure, it need not be further defined and explained in subsequent figures. Meanwhile, in the description of the present application, the terms "first", "second", and the like are used only for distinguishing the description, and are not to be construed as indicating or implying relative importance.

At present, in the case of configuring a transmission channel by using a subnet mask corresponding to an IP segment, a situation may occur in which other IP addresses that are not in the IP address segment may also pass through the transmission channel. For example, since the subnet mask 255.255.255.0 corresponds to the IP addresses 192.0.0.0-223.255.255.255, even other IP addresses not within the IP address segment 192.168.74.32-192.168.80.32 can pass through.

In order to solve the problem that other IP addresses that are not in the IP address field can also access the resource address in the prior art, an embodiment of the present application provides a scheme for creating a transmission channel, where a creation request that is sent by a gateway device and carries a preset IP address field is received, where the creation request is used to request creation of the transmission channel, and the preset IP address field is split into a plurality of target IP address fields according to an address splitting policy, and a subnet mask corresponding to each target IP address field in the plurality of target IP address fields is determined according to the plurality of target IP address fields, and a transmission channel corresponding to each target IP address field is created according to the plurality of target IP address fields and the subnet mask corresponding to each target IP address field.

In order to facilitate understanding of the embodiments of the present application, some terms in the embodiments of the present application are first explained below:

"subnet mask": it is a bit mask that is used to indicate which bits of an IP address identify the subnet where the host is located and which bits identify the host. And, it cannot exist alone, it must be used in conjunction with an IP address. And, the subnet mask has only one role, namely, dividing a certain IP address into two parts, a network address and a host address. Subnet masks are virtual lP techniques that are created to address lP address assignments in the context of IPv4 address resource scarcity.

Referring to fig. 1, fig. 1 is a schematic diagram illustrating an application scenario provided in an embodiment of the present application. The application scenario includes: client 110, gateway device 120, and server 130.

It should be understood that the client 110 may be a mobile phone, a notebook, a desktop, etc. That is, the specific device of the client 110 may be set according to actual requirements, and the embodiment of the present application is not limited thereto.

It should also be understood that gateway device 120 may be a router, a switch, a firewall, etc. That is, the specific apparatus of the gateway device 120 may be set according to actual requirements, and the embodiment of the present application is not limited thereto.

It should also be understood that the server 130 may be a single server, a cluster of servers, etc. That is, the specific device of the server 130 may be set according to actual needs, and the embodiment of the present application is not limited thereto.

It should be noted that, the method for creating a transmission channel in the embodiment of the present application may be executed by a client side, and may also be executed by a server side, and the embodiment of the present application is not limited to this.

In order to facilitate understanding of the embodiments of the present application, the following description will be given by way of specific examples.

Specifically, the client 110 receives a creation request carrying a preset IP address segment sent by the gateway device 120, then the client 110 splits the preset IP address segment into a plurality of target IP address segments according to an address splitting policy, then the client 110 determines a subnet mask corresponding to each target IP address segment in the plurality of target IP address segments according to the plurality of target IP address segments, and finally the client 110 creates a transmission channel corresponding to each target IP address segment according to the plurality of target IP address segments and the subnet mask corresponding to each target IP address segment. Wherein, the transmission channel may be a transmission channel between the client 110 and the server 130.

It should be noted here that the scheme for creating a transmission channel provided in the embodiment of the present application may be further extended to other suitable application scenarios, and is not limited to the application scenario shown in fig. 1.

Referring to fig. 2, fig. 2 is a flowchart illustrating a method for creating a transmission channel according to an embodiment of the present application. It should be understood that the method shown in fig. 2 may be performed by an apparatus for creating a transmission channel, which may correspond to the apparatus for creating a transmission channel shown in fig. 4 below, and the apparatus may be various devices capable of performing the method, such as a personal computer, a server, or a network device, for example, and the embodiments of the present application are not limited thereto. The method for creating a transmission channel as shown in fig. 2 includes:

step S210, receiving a creation request carrying a preset IP address field sent by the gateway device. Wherein the creation request is for requesting creation of a transmission channel.

It should be understood that the IP address range corresponding to the preset IP address segment may be set according to actual requirements, and the embodiment of the present application is not limited thereto.

For example, the preset IP address field may be 192.168.74.32-192.168.80.32.

Step S220, splitting the preset IP address segment into a plurality of target IP address segments according to the address splitting policy.

It should be understood that the specific policy of the address splitting policy may be set according to actual requirements, and the embodiment of the present application is not limited thereto.

For example, in a case where the IP address includes four fields (e.g., the IP address is (a.b.c.d), the four fields of the IP address may be an a field, a B field, a C field, and a D field, respectively), the address splitting policy may be a policy determined according to the first three fields (e.g., the a field, the B field, and the C field) of the four fields, or may be a policy determined according to the last field (e.g., the D field) of the four fields.

Referring to fig. 3, fig. 3 is a flowchart illustrating a method for splitting an IP address segment according to an embodiment of the present application. The splitting method shown in fig. 3 includes:

in step S310, in the case that the current IP address field (e.g., the preset IP address field) includes the first starting IP address and the first terminating IP address, it is determined from which field the first starting IP address and the first terminating IP address are different. The first starting IP address and the first ending IP address refer to IP addresses on two sides of the current IP address field.

And, in case the first start IP address and the first end IP address are changed from the first field (i.e., a field), performing step S320; in case that the first start IP address and the first end IP address are changed from the second field (i.e., the B field), step S330 is performed; in case that the first start IP address and the first end IP address are changed from the third field (i.e., the C field), step S340 is performed; in case that the first start IP address and the first end IP address are changed from the fourth field (i.e., the D field), step S350 is performed.

For example, in the case where the current IP address segment is 192.168.74.32-192.168.80.32, the first starting IP address of the IP address segment may be 192.168.74.32 and the first terminating IP address of the IP address segment is 192.168.80.32. Wherein, for the first starting IP address, the a field is 192, the B field is 168, the C field is 74, and the D field is 32; for the first terminating IP address, the a field is 192, the B field is 168, the C field is 80, and the D field is 32. The first starting IP address and the first terminating IP address of the current IP address field are changed from the third field (i.e., the C field).

It should be noted that, since the IP address includes four fields, the subnet mask also includes four fields, and the subnet masks controlled by the fields a, B, and C in the IP address are different, the related influence is generated, so that the accuracy of the IP address field cannot be ensured. Therefore, it is necessary to ensure that 3 fields of the subnet mask are fixed, and only one field of the subnet mask can be changed, so that the splitting operation of the address field needs to be performed on the IP address field.

Step S320, according to the difference of the first field, the current IP address segment is divided into three target IP address segments.

The three target IP address fields may be a first type IP address field (i.e., a type address) and two second type IP address fields (i.e., a type B address), the first type IP address field may be a first field (i.e., a field) from which a start IP address of the IP address field and an end IP address of the IP address field are different, the second type IP address field is that the start IP address of the IP address field and the end IP address of the IP address field are different from a second field (i.e., a field B), that is, splitting is performed according to a difference in address change of each IP field, splitting the start IP address and the end IP address of each type of address into lower level IP address fields, and dividing the remaining IP address fields of the IP address field into one IP address field.

For example, in the current IP address field is (A)₁.B₁.C₁.D₁—A₂.B₂.C₂.D₂) In the case where the A1 field and A2 field start differently, the current IP address segment may be split into two class B addresses and one class A address. Wherein, the two B-type addresses can be respectively (A)₁.B₁.C₁.D₁—A₁255.0.0) and (A)₂.0.0.0—A₂.B₂.C₂.D₂) A class A address may be (A)₁+1.0.0.0—A₂-1.0.0.0)。

That is, in the case where it is determined that the 1 st field of the first start IP address of the current IP address field and the first end IP address of the current IP address field start to be different, the current IP address field is split into a first destination IP address field, a second destination IP address field, and a third destination IP address field. The first destination IP address field and the third destination IP address field herein correspond to the second type of IP address field, and the second destination IP address field herein corresponds to the first type of IP address field.

For step S320, the second starting IP address of the first target IP address segment (e.g., the second starting IP address may be (a)₁.B₁.C₁.D₁) Etc.) and a second terminating IP address of the first destination IP address segment (e.g., the second terminating IP address may be (a)₁255.0.0), etc.) as the 2 nd field begins a different IP address, a third starting IP address of a third destination IP address field (e.g., the third starting IP address may be (a)₂0.0.0), etc.) and a third terminating IP address of a third destination IP address segment (e.g., the third terminating I)The P address may be (A)₂.B₂.C₂.D₂) Etc.) begins a different IP address for the 2 nd field, and a second destination IP address field (e.g., the second destination IP address field may be (a)₁+1.0.0.0—A₂-1.0.0.0), etc.) is an IP address field between the first destination IP address field and the third destination IP address field.

And step S330, splitting the current IP address segment into three target IP address segments according to the difference of the second fields.

The three target IP address fields may be a second-type IP address field (i.e., a class B address) and two third-type IP address fields (i.e., a class C address), the second-type IP address field may be that a start IP address of the IP address field and an end IP address of the IP address field are different from the second field (i.e., a field B), the third-type IP address field is that a start IP address of the IP address field and an end IP address of the IP address field are different from the third field (i.e., a field C), that is, splitting is performed according to a difference in address change of each IP field, splitting the start IP address and the end IP address of each type of address into lower-level IP address fields, and then dividing the remaining IP address fields of the IP address field into one IP address field.

That is, in the case where it is determined that the 2 nd field of the first start IP address of the current IP address field and the first end IP address of the current IP address field start to be different, the current IP address field is split into a first destination IP address field, a second destination IP address field, and a third destination IP address field. The first destination IP address field and the third destination IP address field herein correspond to the third type of IP address field, and the second destination IP address field herein corresponds to the second type of IP address field.

For step S330, the second starting IP address of the first target IP address field and the second ending IP address of the first target IP address field are IP addresses whose beginning of the 3 rd field is different, the third starting IP address of the third target IP address field and the third ending IP address of the third target IP address field are IP addresses whose beginning of the 3 rd field is different, and the second target IP address field is an IP address field between the first target IP address field and the third target IP address field.

And step S340, splitting the current IP address segment into three target IP address segments according to the difference of the third fields.

The three target IP address fields may be a third-type IP address field (i.e., a C-type address) and two fourth-type IP address fields (i.e., a D-type address), the third-type IP address field may be that the start IP address of the IP address field and the end IP address of the IP address field are different from the third field (i.e., the C-field), the fourth-type IP address field is that the start IP address of the IP address field and the end IP address of the IP address field are different from the fourth field (i.e., the D-field), that is, splitting is performed according to the difference of the address change of each IP field, splitting the start IP address and the end IP address of each type of address into lower-level IP address fields, and then dividing the remaining IP address fields of the IP address field into one IP address field.

For example, in the case where the current IP address segment is 192.168.74.32-192.168.80.32, the IP address segment may be split into one C-class address and two D-class addresses. Wherein, the two D-type addresses are 192.168.74.32-192.168.74.255 and 192.168.80.1-192.168.80.32 respectively, and the C-type address is 192.168.75.1-192.168.79.255.

That is, in the case where it is determined that the first starting IP address of the current IP address segment and the 3 rd segment of the first terminating IP address of the current IP address segment start to be different, the current IP address segment is split into a first destination IP address segment, a second destination IP address segment, and a third destination IP address segment. The first destination IP address field and the third destination IP address field herein correspond to the fourth type of IP address field, and the second destination IP address field herein corresponds to the third type of IP address field.

For step S340, the second starting IP address (e.g., the second starting IP address may be 192.168.74.32, etc.) of the first target IP address segment and the second ending IP address (e.g., the second ending IP address may be 192.168.74.255, etc.) of the first target IP address segment are IP addresses different from the beginning of the 4 th segment, the third starting IP address (e.g., the third starting IP address may be 192.168.80.1, etc.) of the third target IP address segment and the third ending IP address (e.g., the third ending IP address may be 192.168.80.32, etc.) of the third target IP address segment are IP addresses different from the beginning of the 4 th segment, and the second target IP address segment (e.g., the second target IP address segment may be 192.168.75.1-192.168.79.255, etc.) is an IP address segment between the first target IP address segment and the third target IP address segment.

Step S350, under the condition that the fourth fields are different, splitting the preset IP address segment into a plurality of target IP address segments according to a field difference between the fourth field of the first terminating IP address and the fourth field of the first starting IP address.

Specifically, in a case where it is determined that the first start IP address and the fourth field of the first end IP address start differently, a field difference value of the fourth field of the first end IP address and the fourth field of the first start IP address is calculated, and the subnet mask includes a target field for identifying the number of IP addresses in the corresponding target IP address field, so that the preset IP address field can be split into a plurality of target IP address fields according to the field difference value and the target field.

It should be noted that, because it is necessary to ensure that the delivered resources can reach the virtual network interface card, and the IP addresses that are not in the corresponding IP address field cannot reach the virtual network interface card, it is necessary to limit whether the access directions of each IP address are consistent or not by means of the subnet mask.

In addition, the target fields of the subnet mask in the embodiment of the present application may be divided into 9 types, and the number of IP addresses that each type of target field can control is different, which may be specifically referred to in table 1 below.

TABLE 1

Object field	Controlling the number of IP addresses
		255	1
254	2
		252	4
248	8
		240	16
224	32
		192	64
128	128
		0	256

As shown in table 1, in the case that the destination field is 255, it can control 1 IP address; in case that the destination field is 254, it can control 2 IP addresses; in case the destination field is 252, it can control 4 IP addresses; in case the destination field is 248, it can control 8 IP addresses; in case the destination field is 240, it can control 16 IP addresses; in case the destination field is 224, it can control 32 IP addresses; in the case that the destination field is 192, it can control 64 IP addresses; in case the destination field is 128, it can control 128 IP addresses; in case that the destination field is 0, it can control 256 IP addresses.

Therefore, the splitting of the address can be performed according to the field difference between the fourth field of the first terminating IP address and the fourth field of the first starting IP address, and since it cannot be guaranteed that each field difference can just meet the requirement that the number of the target field control IP addresses is consistent, the splitting operation of the IP address segments is performed here, and is performed according to the maximum splitting mode that each IP address segment can be split.

For example, in the case that the current IP address segment is 192.168.74.32-192.168.74.41, so that the existing subnet mask corresponding to the IP address segment can be determined to be 255.255.255.0, the embodiment of the present application can set the fourth field (i.e., the D field, here 0) of the existing subnet mask as the target field. And the field difference between the fourth field of the start IP address of the IP address segment and the fourth field of the end IP address of the IP address segment is 10, and it can be determined by looking up table 1 that the IP address segment can be split into two segments, which can be an 8-bit IP address (corresponding to the destination field 248) and a 2-bit IP address (corresponding to the destination field 254), respectively, i.e., 192.168.74.32-192.168.74.41 can be split into 192.168.74.32-192.168.74.33 and 192.168.74.34-192.168.74.41. And the subnet mask corresponding to 192.168.74.32-192.168.74.33 is 255.255.255.254 and the subnet mask corresponding to 192.168.74.34-192.168.74.41 is 255.255.255.248.

And step S360, judging whether the split IP address field can be continuously split or not.

If it is determined that the split IP address segment can be further split, the process returns to step S310; in the case where it is determined that the split IP address segment cannot be continuously split, step S370 may be performed.

For example, in a case that it is determined that the split IP address segment can be further split, the process may return to step S310 to continue splitting the first target IP address segment, the second target IP address segment, or the third target IP address segment according to the address splitting policy.

Specifically, it may be determined whether the split IP address field can be split, and if the split IP address field can also be split, the step S310 is returned to split again until the split IP address field can not be split any more.

In addition, according to the address splitting policy, it can be calculated that each splitting can be split into 8 segments at most, and each type of IP address can be split once, so that the whole IP address segment can be split into 120 segments at most, and therefore, only 120 transmission channels (or routes) are generated at most. However, a general IP segment is not split into 8 segments at most when the fourth field begins to have a different IP address segment, the third field begins to have a different IP address segment, the second field begins to have a different IP address segment, the first field begins to have a different IP address segment, and the first field begins to have a different IP address segment, the second field begins to have a different IP address segment, the first field.

Step S370, end.

Specifically, in the case where the address segment can no longer be split, the loop is stopped.

In order to facilitate understanding of the embodiments of the present application, the following description may be given by way of specific examples.

For example, in the case that the preset IP address segment is 192.168.74.32-192.168.80.32, see table 2, where table 2 shows the final splitting result of the preset IP address and its corresponding subnet mask.

TABLE 2

It should be noted that, as shown in table 2 above, although the subnet masks corresponding to the different split target IP address segments are the same (for example, the subnet masks corresponding to the two target IP address segments, "192.168.80.1-192.168.80.1" and "192.168.80.32-192.168.80.32" are both "255.255.255.255"), this setting manner can ensure that other IP addresses that are not in the current IP address segment cannot pass through the current transmission channel.

That is, the subnet mask is not seen separately in the embodiment of the present application, but the subnet mask is seen according to the IP address field, and when the transmission channel is created, the transmission channel is created according to both the IP address field and the subnet mask. And subsequently judging whether the current IP address can pass through the current transmission channel according to the network bit.

For example, it may first calculate the target network bits using the current target IP address field and the corresponding subnet mask. And under the condition that the data of the current IP address is about to pass through the current transmission channel, calculating a first network bit by utilizing the subnet mask corresponding to the current target IP address field and the current IP address. If the first network bit is the same as the target network bit, determining that the data of the current IP address can pass through the current transmission channel; and if the first network bit is different from the target network bit, determining that the data of the current IP address can not pass through the current transmission channel.

Step S230, determining a subnet mask corresponding to each target IP address field in the plurality of target IP address fields according to the plurality of target IP address fields.

It should be noted that, according to the multiple target IP address segments, the specific process of determining the subnet mask corresponding to each target IP address segment in the multiple target IP address segments may refer to the above related description, and details are not repeated herein.

Step S240, creating a transmission channel corresponding to each target IP address field according to the plurality of target IP address fields and the subnet mask corresponding to each target IP address field.

That is, a transmission channel may be created using each target IP address segment and its corresponding subnet mask, and the number of transmission channels and the number of target IP address segments are identical.

It should be understood that, according to the plurality of target IP address segments and the subnet mask corresponding to each target IP address segment, the specific process of creating the transmission channel corresponding to each target IP address segment may be set according to actual requirements, and the embodiment of the present application is not limited thereto.

In addition, when the preset IP address section allowing the resources to be accessed is arranged in the gateway, the preset IP address section is split, so that the accuracy of the IP address of the visitor during the resource access is realized, and a more comprehensive and accurate IP resource access method is realized.

In addition, the splitting method of the IP address field in the embodiment of the present application is more convenient and faster than splitting methods of other IP address fields, and because the splitting method of the IP address field in the embodiment of the present application ensures that the IP address field can be split according to the longest segment that can be split when splitting, and the split IP address field is not split again, the splitting method of the IP address field in the embodiment of the present application can be split into 120 segments at most, that is, 120 transmission channels are generated at most. The splitting method of the IP address field in the embodiment of the application accelerates the whole splitting progress, reduces the number of routes and accelerates the speed of accessing resources by each route.

It should be understood that the above method for creating a transmission channel is only exemplary, and those skilled in the art can make various modifications according to the above method, and the solution after the modification is also within the protection scope of the embodiments of the present application.

For example, in the embodiment of the present application, multiple steps may be combined into one step to be executed (for example, although fig. 2 is described with two steps, i.e., step S220 and step S230, since the corresponding subnet mask can be calculated when the IP address field is split, step S220 and step S230 may also be combined into one step), or one step may be decomposed into multiple steps to be executed.

Referring to fig. 4, fig. 4 shows a block diagram of an apparatus 400 for creating a transmission channel according to an embodiment of the present application, it should be understood that the apparatus 400 is capable of performing the steps of the above method embodiment, and specific functions of the apparatus 400 may be referred to the above description, and a detailed description is appropriately omitted herein to avoid redundancy. The device 400 includes at least one software function module that can be stored in a memory in the form of software or firmware (firmware) or solidified in an Operating System (OS) of the device 400. Specifically, the apparatus 400 includes:

a receiving module 410, configured to receive a creation request carrying a preset IP address field sent by a gateway device, where the creation request is used to request to create a transmission channel; the splitting module 420 is configured to split the preset IP address segment into a plurality of target IP address segments according to the address splitting policy; a determining module 430, configured to determine, according to the multiple target IP address segments, a subnet mask corresponding to each target IP address segment in the multiple target IP address segments; the creating module 440 is configured to create a transmission channel corresponding to each target IP address field according to the plurality of target IP address fields and the subnet mask corresponding to each target IP address field.

In one possible embodiment, the preset IP address segment includes a first starting IP address and a first terminating IP address, both the first starting IP address and the first terminating IP address include four fields, and the splitting module 420 is specifically configured to split the preset IP address segment into a first target IP address segment, a second target IP address segment, and a third target IP address segment under the condition that it is determined that the nth field of the first starting IP address and the first terminating IP address starts to be different, where n is an integer from 1 to 3; the second starting IP address of the first target IP address field and the second ending IP address of the first target IP address field are IP addresses with different beginning of the (n + 1) th field, the third starting IP address of the third target IP address field and the third ending IP address of the third target IP address field are IP addresses with different beginning of the (n + 1) th field, and the second target IP address field is an IP address field between the first target IP address field and the third target IP address field.

In a possible embodiment, the splitting module 420 is specifically configured to split the first target IP address segment, the second target IP address segment, or the third target IP address segment according to an address splitting policy.

In a possible embodiment, the preset IP address segment includes a first starting IP address and a first terminating IP address, where the first starting IP address and the terminating IP address both include four fields, and the splitting module 420 is specifically configured to: under the condition that the fourth fields of the first starting IP address and the first terminating IP address are different in beginning, calculating the field difference value of the fourth field of the first terminating IP address and the fourth field of the first starting IP address; and splitting the preset IP address section into a plurality of target IP address sections according to the field difference.

In a possible embodiment, the subnet mask includes a target field for identifying the number of IP addresses in the corresponding target IP address field, and the splitting module 420 is specifically configured to split the preset IP address field into a plurality of target IP address fields according to the field difference and the target field.

It is clear to those skilled in the art that, for convenience and brevity of description, the specific working process of the apparatus described above may refer to the corresponding process in the foregoing method, and will not be described in too much detail herein.

Referring to fig. 5, fig. 5 is a block diagram of an electronic device 500 according to an embodiment of the present disclosure. Electronic device 500 may include a processor 510, a communication interface 520, a memory 530, and at least one communication bus 540. Wherein the communication bus 540 is used for realizing direct connection communication of these components. The communication interface 520 in the embodiment of the present application is used for communicating signaling or data with other devices. Processor 510 may be an integrated circuit chip having signal processing capabilities. The Processor 510 may be a general-purpose Processor, and includes a Central Processing Unit (CPU), a Network Processor (NP), and the like; but may also be a Digital Signal Processor (DSP), an Application Specific Integrated Circuit (ASIC), an off-the-shelf programmable gate array (FPGA) or other programmable logic device, discrete gate or transistor logic, discrete hardware components. The various methods, steps, and logic blocks disclosed in the embodiments of the present application may be implemented or performed. A general purpose processor may be a microprocessor or the processor 510 may be any conventional processor or the like.

The Memory 530 may be, but is not limited to, a Random Access Memory (RAM), a Read Only Memory (ROM), a Programmable Read-Only Memory (PROM), an Erasable Read-Only Memory (EPROM), an electrically Erasable Read-Only Memory (EEPROM), and the like. The memory 530 stores computer readable instructions, which when executed by the processor 510, the electronic device 500 may perform the steps of the above-described method embodiments.

The electronic device 500 may further include a memory controller, an input-output unit, an audio unit, and a display unit.

The memory 530, the memory controller, the processor 510, the peripheral interface, the input/output unit, the audio unit, and the display unit are electrically connected to each other directly or indirectly to realize data transmission or interaction. For example, these elements may be electrically coupled to each other via one or more communication buses 540. The processor 510 is adapted to execute executable modules stored in the memory 530, such as software functional modules or computer programs comprised by the electronic device 500.

The input and output unit is used for providing input data for a user to realize the interaction of the user and the server (or the local terminal). The input/output unit may be, but is not limited to, a mouse, a keyboard, and the like.

The audio unit provides an audio interface to the user, which may include one or more microphones, one or more speakers, and audio circuitry.

The display unit provides an interactive interface (e.g. a user interface) between the electronic device and a user or for displaying image data to a user reference. In this embodiment, the display unit may be a liquid crystal display or a touch display. In the case of a touch display, the display can be a capacitive touch screen or a resistive touch screen, which supports single-point and multi-point touch operations. The support of single-point and multi-point touch operations means that the touch display can sense touch operations simultaneously generated from one or more positions on the touch display, and the sensed touch operations are sent to the processor for calculation and processing.

It will be appreciated that the configuration shown in FIG. 5 is merely illustrative and that the electronic device 500 may include more or fewer components than shown in FIG. 5 or may have a different configuration than shown in FIG. 5. The components shown in fig. 5 may be implemented in hardware, software, or a combination thereof.

The present application also provides a storage medium having a computer program stored thereon, which, when executed by a processor, performs the method of the method embodiments.

The present application also provides a computer program product which, when run on a computer, causes the computer to perform the method of the method embodiments.

It can be clearly understood by those skilled in the art that, for convenience and brevity of description, the specific working process of the system described above may refer to the corresponding process in the foregoing method, and will not be described in too much detail herein.

It should be noted that, in the present specification, the embodiments are all described in a progressive manner, each embodiment focuses on differences from other embodiments, and the same and similar parts among the embodiments may be referred to each other. For the device-like embodiment, since it is basically similar to the method embodiment, the description is simple, and for the relevant points, reference may be made to the partial description of the method embodiment.

In the embodiments provided in the present application, it should be understood that the disclosed apparatus and method can be implemented in other ways. The apparatus embodiments described above are merely illustrative, and for example, the flowchart and block diagrams in the figures illustrate the architecture, functionality, and operation of possible implementations of apparatus, methods and computer program products according to various embodiments of the present application. In this regard, each block in the flowchart or block diagrams may represent a module, segment, or portion of code, which comprises one or more executable instructions for implementing the specified logical function(s). It should also be noted that, in some alternative implementations, the functions noted in the block may occur out of the order noted in the figures. For example, two blocks shown in succession may, in fact, be executed substantially concurrently, or the blocks may sometimes be executed in the reverse order, depending upon the functionality involved. It will also be noted that each block of the block diagrams and/or flowchart illustration, and combinations of blocks in the block diagrams and/or flowchart illustration, can be implemented by special purpose hardware-based systems which perform the specified functions or acts, or combinations of special purpose hardware and computer instructions.

In addition, functional modules in the embodiments of the present application may be integrated together to form an independent part, or each module may exist separately, or two or more modules may be integrated to form an independent part.

The functions, if implemented in the form of software functional modules and sold or used as a stand-alone product, may be stored in a computer readable storage medium. Based on such understanding, the technical solution of the present application or portions thereof that substantially contribute to the prior art may be embodied in the form of a software product stored in a storage medium and including instructions for causing a computer device (which may be a personal computer, a server, or a network device) to execute all or part of the steps of the method according to the embodiments of the present application. And the aforementioned storage medium includes: a U-disk, a removable hard disk, a Read-Only Memory (ROM), a Random Access Memory (RAM), a magnetic disk or an optical disk, and other various media capable of storing program codes. It is noted that, herein, relational terms such as first and second, and the like may be used solely to distinguish one entity or action from another entity or action without necessarily requiring or implying any actual such relationship or order between such entities or actions. Also, the terms "comprises," "comprising," or any other variation thereof, are intended to cover a non-exclusive inclusion, such that a process, method, article, or apparatus that comprises a list of elements does not include only those elements but may include other elements not expressly listed or inherent to such process, method, article, or apparatus. Without further limitation, an element defined by the phrase "comprising an … …" does not exclude the presence of other identical elements in a process, method, article, or apparatus that comprises the element.

The above description is only a preferred embodiment of the present application and is not intended to limit the present application, and various modifications and changes may be made by those skilled in the art. Any modification, equivalent replacement, improvement and the like made within the spirit and principle of the present application shall be included in the protection scope of the present application. It should be noted that: like reference numbers and letters refer to like items in the following figures, and thus, once an item is defined in one figure, it need not be further defined and explained in subsequent figures.

The above description is only for the specific embodiments of the present application, but the scope of the present application is not limited thereto, and any person skilled in the art can easily conceive of the changes or substitutions within the technical scope of the present application, and shall be covered by the scope of the present application. Therefore, the protection scope of the present application shall be subject to the protection scope of the claims.

Claims

1. A method of creating a transmission channel, comprising:

receiving a creation request which is sent by gateway equipment and carries a preset IP address field, wherein the creation request is used for requesting to create the transmission channel;

splitting the preset IP address segment into a plurality of target IP address segments according to an address splitting strategy;

determining a subnet mask corresponding to each target IP address field in the target IP address fields according to the target IP address fields;

and creating a transmission channel corresponding to each target IP address field according to the plurality of target IP address fields and the subnet mask corresponding to each target IP address field.

2. The method of claim 1, wherein the preset IP address segment comprises a first starting IP address and a first terminating IP address, wherein the first starting IP address and the first terminating IP address each comprise four fields, and wherein splitting the preset IP address segment into a plurality of target IP address segments according to an address splitting policy comprises:

under the condition that the nth field of the first starting IP address and the first terminating IP address are different, splitting the preset IP address field into a first target IP address field, a second target IP address field and a third target IP address field, wherein n is an integer from 1 to 3;

the second starting IP address of the first target IP address field and the second ending IP address of the first target IP address field are IP addresses with different starting times of the (n + 1) th field, the third starting IP address of the third target IP address field and the third ending IP address of the third target IP address field are IP addresses with different starting times of the (n + 1) th field, and the second target IP address field is an IP address field between the first target IP address field and the third target IP address field.

3. The method of claim 2, wherein the splitting the preset IP address segment into a plurality of target IP address segments according to an address splitting policy further comprises:

and splitting the first target IP address segment, the second target IP address segment or the third target IP address segment according to the address splitting strategy.

4. The method of claim 1, wherein the preset IP address segment comprises a first starting IP address and a first terminating IP address, wherein the first starting IP address and the terminating IP address each comprise four fields, and wherein splitting the preset IP address segment into a plurality of target IP address segments according to an address splitting policy comprises:

in the event that it is determined that the first starting IP address and the fourth field of the first terminating IP address begin differently, calculating a field difference for the fourth field of the first terminating IP address and the fourth field of the first starting IP address;

and splitting the preset IP address section into a plurality of target IP address sections according to the field difference.

5. The method of claim 4, wherein the subnet mask comprises a target field for identifying a number of IP addresses in a corresponding target IP address segment, and wherein splitting the preset IP address segment into a plurality of target IP address segments according to the field difference comprises:

and splitting the preset IP address section into a plurality of target IP address sections according to the field difference and the target field.

6. An apparatus for creating a transmission channel, comprising:

the receiving module is used for receiving a creation request which is sent by gateway equipment and carries a preset IP address field, wherein the creation request is used for requesting to create the transmission channel;

the splitting module is used for splitting the preset IP address segment into a plurality of target IP address segments according to an address splitting strategy;

a determining module, configured to determine, according to the multiple target IP address segments, a subnet mask corresponding to each target IP address segment in the multiple target IP address segments;

and the creating module is used for creating a transmission channel corresponding to each target IP address field according to the plurality of target IP address fields and the subnet mask corresponding to each target IP address field.

7. The apparatus according to claim 6, wherein the preset IP address segment includes a first starting IP address and a first terminating IP address, each of the first starting IP address and the first terminating IP address includes four fields, the splitting module is specifically configured to split the preset IP address segment into a first target IP address segment, a second target IP address segment, and a third target IP address segment if it is determined that an nth field of the first starting IP address and the first terminating IP address starts differently, n is an integer from 1 to 3;

8. The apparatus of claim 7, wherein the splitting module is specifically configured to split the first target IP address segment, the second target IP address segment, or the third target IP address segment according to the address splitting policy.

9. The apparatus according to claim 6, wherein the preset IP address segment includes a first starting IP address and a first terminating IP address, each of the first starting IP address and the terminating IP address includes four fields, and the splitting module is specifically configured to: in the event that it is determined that the first starting IP address and the fourth field of the first terminating IP address begin differently, calculating a field difference for the fourth field of the first terminating IP address and the fourth field of the first starting IP address; and splitting the preset IP address section into a plurality of target IP address sections according to the field difference.

10. The apparatus according to claim 9, wherein the subnet mask includes a target field for identifying a number of IP addresses in a corresponding target IP address segment, and the splitting module is specifically configured to split the preset IP address segment into a plurality of target IP address segments according to the field difference and the target field.

11. A storage medium, characterized in that the storage medium has stored thereon a computer program which, when being executed by a processor, carries out the method of creating a transmission channel according to any one of claims 1 to 5.

12. An electronic device, comprising: a processor, a memory and a bus, the memory storing machine-readable instructions executable by the processor, the processor and the memory communicating over the bus when the electronic device is operating, the machine-readable instructions when executed by the processor performing the method of creating a transmission channel of any of claims 1-5.