CN112671939A - Method for distinguishing NAT deletion and NAT unbinding elastic public network IP - Google Patents

Abstract

The invention provides a method for distinguishing NAT deletion and NAT unbinding elastic public network IP, which comprises an SNAT deletion unbinding method and a DNAT deletion unbinding method, and is characterized in that the SNAT deletion unbinding method comprises the following steps: s1, deleting the SNAT, firstly inquiring whether the key is delete-SNAT-dnat { snatId } in the cache; s2, obtaining the eipId and natId of the SNAT; s3, removing the cache Key value as the snatId to be deleted in the eip-unbound-nat; s4, inquiring whether the caching Key value is eip-unbound-nat or not according to the obtained eipId, wherein the { eipId } contains the number of snat and dnat which is greater than 0; s5, if equal to 0, EIP unbinding is successful. The method for distinguishing the NAT deletion and the NAT unbinding elastic public network IP can accurately distinguish the NAT deletion operation or the NAT unbinding EIP operation through deleting the SNAT or DNAT rule at the bottom layer.

Description

Method for distinguishing NAT deletion and NAT unbinding elastic public network IP

Technical Field

The invention belongs to the technical field of elastic public network IP, and particularly relates to a method for distinguishing NAT deletion and NAT unbinding elastic public network IP.

Background

A NAT (Network Address Translation Gateway) is an enterprise-level public Network Gateway, and provides NAT agents (SNAT and DNAT) to translate an IP Address in an IP data packet header to another IP Address. In practical applications, NAT is mainly applied to an edge device connecting two networks, and is used for the purpose of allowing an internal network user to access an external public network and allowing the external public network to access a part of internal network resources (such as an internal elastic cloud host, a GPU, and the like). The NAT gateway can bind a plurality of EIPs, issues SNAT and DNAT rules under the EIPs, does not issue configuration when the NAT binds the EIPs, only issues the SNAT or DNAT rules, and asynchronously notifies an upper layer after successful issuing. The method is characterized in that SNAT and DNAT rules are deleted when the NAT gateway is deleted or the NAT gateway unbinds the EIP, configuration issuing and asynchronous callback are involved, but the deletion result of the SNAT or the DNAT which is asynchronously notified by the bottom layer by the upper layer cannot distinguish whether NAT deletion is successful or EIP unbinding is successful.

Disclosure of Invention

In view of this, the present invention is directed to a method for distinguishing NAT deletion from NAT unbinding for an elastic public network IP, where the distinction between NAT deletion and NAT unbinding EIP is made by using a flag bit in a cache.

In order to achieve the purpose, the technical scheme of the invention is realized as follows:

a method for distinguishing NAT deletion and NAT unbinding elastic public network IP comprises a SNAT deletion unbinding method and a DNAT deletion unbinding method, wherein the SNAT deletion unbinding method comprises the following steps:

s1, deleting the SNAT, firstly inquiring whether the key is delete-SNAT-dnat { snatId } in the cache;

s2, obtaining the eipId and natId of the SNAT;

s3, removing the cache Key value as the snatId to be deleted in the eip-unbound-nat;

s4, inquiring whether the caching Key value is eip-unbound-nat or not according to the obtained eipId, wherein the { eipId } contains the number of snat and dnat which is greater than 0;

s5, if equal to 0, EIP unbinding is successful;

s6, removing the cache Key value as the snatId to be deleted in delete-nat { natId };

s7, inquiring whether the number of snat and dnat contained in the cache Key value is delete-nat { nat Id } is more than 0 according to the acquired nat Id;

s8, if equal to 0, deleting SNAT successfully.

Further, the DNAT deletion unbinding method comprises the following steps:

a1, deleting DNAT, firstly, inquiring whether key is delete-snat-DNAT { dnatId } exists in a cache;

a2, obtaining eipId and natId of the DNAT;

a3, removing the buffer Key value as the dnatId to be deleted in the eip-unbound-nat;

a4, inquiring whether the caching Key value is eip-unbound-nat or not according to the obtained eipId, wherein the { eipId } contains the number of snat and dnat which is greater than 0;

a5, if equal to 0, EIP unbinding is successful;

a6, removing the dnateD to be deleted in the cache Key value of delete-nat: { natId };

a7, inquiring whether the number of snat and dnat contained in the cache Key value is delete-nat { nat Id } is more than 0 according to the acquired nat Id;

a8, if equal to 0, then the deletion of DNAT was successful.

Compared with the prior art, the method for distinguishing the NAT deletion and the NAT unbinding elastic public network IP has the following advantages that:

the method for distinguishing the NAT deletion and the NAT unbinding elastic public network IP can accurately distinguish the NAT deletion operation or the NAT unbinding EIP operation through deleting the SNAT or DNAT rule at the bottom layer.

Drawings

The accompanying drawings, which are incorporated in and constitute a part of this specification, illustrate an embodiment of the invention and, together with the description, serve to explain the invention and not to limit the invention. In the drawings:

fig. 1 is a flowchart illustrating steps of a method for distinguishing NAT deletion from NAT unbinding an elastic public network IP according to an embodiment of the present invention.

Detailed Description

It should be noted that the embodiments and features of the embodiments may be combined with each other without conflict.

In the description of the present invention, it is to be understood that the terms "center", "longitudinal", "lateral", "up", "down", "front", "back", "left", "right", "vertical", "horizontal", "top", "bottom", "inner", "outer", and the like, indicate orientations or positional relationships based on those shown in the drawings, and are used only for convenience in describing the present invention and for simplicity in description, and do not indicate or imply that the referenced devices or elements must have a particular orientation, be constructed and operated in a particular orientation, and thus, are not to be construed as limiting the present invention. Furthermore, the terms "first", "second", etc. are used for descriptive purposes only and are not to be construed as indicating or implying relative importance or implicitly indicating the number of technical features indicated. Thus, a feature defined as "first," "second," etc. may explicitly or implicitly include one or more of that feature. In the description of the present invention, "a plurality" means two or more unless otherwise specified.

In the description of the present invention, it should be noted that, unless otherwise explicitly specified or limited, the terms "mounted," "connected," and "connected" are to be construed broadly, e.g., as meaning either a fixed connection, a removable connection, or an integral connection; can be mechanically or electrically connected; they may be connected directly or indirectly through intervening media, or they may be interconnected between two elements. The specific meaning of the above terms in the present invention can be understood by those of ordinary skill in the art through specific situations.

The present invention will be described in detail below with reference to the embodiments with reference to the attached drawings.

As shown in fig. 1, a method for distinguishing NAT deletion from NAT unbinding of an elastic public network IP includes a SNAT deletion unbinding method and a DNAT deletion unbinding method, where the SNAT deletion unbinding method includes the following steps:

s1, deleting the SNAT, firstly inquiring whether the key is delete-SNAT-dnat { snatId } in the cache;

s2, obtaining the eipId and natId of the SNAT;

s3, removing the cache Key value as the snatId to be deleted in the eip-unbound-nat;

s4, inquiring whether the caching Key value is eip-unbound-nat or not according to the obtained eipId, wherein the { eipId } contains the number of snat and dnat which is greater than 0;

s5, if equal to 0, EIP unbinding is successful;

s6, removing the cache Key value as the snatId to be deleted in delete-nat { natId };

s7, inquiring whether the number of snat and dnat contained in the cache Key value is delete-nat { nat Id } is more than 0 according to the acquired nat Id;

s8, if equal to 0, deleting SNAT successfully.

The DNAT deletion unbinding method comprises the following steps:

a1, deleting DNAT, firstly, inquiring whether key is delete-snat-DNAT { dnatId } exists in a cache;

a2, obtaining eipId and natId of the DNAT;

a3, removing the buffer Key value as the dnatId to be deleted in the eip-unbound-nat;

a4, inquiring whether the caching Key value is eip-unbound-nat or not according to the obtained eipId, wherein the { eipId } contains the number of snat and dnat which is greater than 0;

a5, if equal to 0, EIP unbinding is successful;

a6, removing the dnateD to be deleted in the cache Key value of delete-nat: { natId };

a7, inquiring whether the number of snat and dnat contained in the cache Key value is delete-nat { nat Id } is more than 0 according to the acquired nat Id;

a8, if equal to 0, then the deletion of DNAT was successful.

In a specific implementation process, the invention provides a method for accurately distinguishing whether NAT deletion is successful or EIP unbinding is successful by deleting SNAT or DNAT results of bottom layer asynchronous notification under a public cloud platform, and in order to achieve the purpose, the invention provides the following technical scheme:

1. when the NAT is deleted, all SNAT and DNAT rules below the NAT are deleted, and key values of delete-NAT in the cache are stored in instance Id of SNAT and DNAT to be deleted under the NAT;

2. when the EIP unbinds the NAT, the SNAT and DNAT rules related to the EIP under the NAT are deleted, the Key value in the cache is EIP-unbound-NAT: { eipId } is stored into the instance Id of the SNAT and the DNAT to be deleted, the Key value is delete-SNAT-NAT: { snatId } is stored into the eipId and natId which the SNAT to be deleted belongs to, and the Key value is delete-SNAT-NAT: { dnatId } is stored into the eipId and natId which the DNAT to be deleted belongs to;

3. distinguishing through the flag bits in the cache;

the specific operation steps are as follows:

the flow of deleting the SNAT and DNAT rules is the same, taking deleting the SNAT as an example:

1. deleting the SNAT, firstly inquiring whether key is delete-SNAT-dnat { snatId } exists in a cache;

2. obtaining the eipId and natId of the SNAT;

3. removing the SnatId to be deleted in the caching Key value of eip-unbound-nat: { eipId };

4. according to the obtained eipID, inquiring whether the caching Key value is eip-unbound-nat, wherein the quantity of snat and dnat contained in { eipID } is more than 0;

5. if equal to 0, EIP unbinding is successful;

6. removing the snatId to be deleted in the delete-nat { natId } of the caching Key value;

7. inquiring whether the number of snat and dnat contained in { natId } is greater than 0 according to the acquired natId, wherein the caching Key value is delete-nat;

8. if the NAT is equal to 0, deleting the NAT successfully;

the above description is only for the purpose of illustrating the preferred embodiments of the present invention and is not to be construed as limiting the invention, and any modifications, equivalents, improvements and the like that fall within the spirit and principle of the present invention are intended to be included therein.

Claims (2)

1. A method for distinguishing NAT deletion and NAT unbinding elastic public network IP is characterized by comprising an SNAT deletion unbinding method, and comprising the following steps:

s1, deleting the SNAT, firstly inquiring whether the key is delete-SNAT-dnat { snatId } in the cache;

s2, obtaining the eipId and natId of the SNAT;

s3, removing the cache Key value as the snatId to be deleted in the eip-unbound-nat;

s4, inquiring whether the caching Key value is eip-unbound-nat or not according to the obtained eipId, wherein the { eipId } contains the number of snat and dnat which is greater than 0;

s5, if equal to 0, EIP unbinding is successful;

s6, removing the cache Key value as the snatId to be deleted in delete-nat { natId };

s7, inquiring whether the number of snat and dnat contained in the cache Key value is delete-nat { nat Id } is more than 0 according to the acquired nat Id;

s8, if equal to 0, deleting SNAT successfully.

2. The method for distinguishing the NAT deletion and NAT unbinding elastic public network IP according to claim 1, further comprising a DNAT deletion unbinding method, comprising the steps of:

a1, deleting DNAT, firstly, inquiring whether key is delete-snat-DNAT { dnatId } exists in a cache;

a2, obtaining eipId and natId of the DNAT;

a3, removing the buffer Key value as the dnatId to be deleted in the eip-unbound-nat;

a4, inquiring whether the caching Key value is eip-unbound-nat or not according to the obtained eipId, wherein the { eipId } contains the number of snat and dnat which is greater than 0;

a5, if equal to 0, EIP unbinding is successful;

a6, removing the dnateD to be deleted in the cache Key value of delete-nat: { natId };

a7, inquiring whether the number of snat and dnat contained in the cache Key value is delete-nat { nat Id } is more than 0 according to the acquired nat Id;

a8, if equal to 0, then the deletion of DNAT was successful.

Images