CN112929414A - Upgrade package downloading method and device, electronic equipment and storage medium - Google Patents

Upgrade package downloading method and device, electronic equipment and storage medium Download PDF

Info

Publication number
CN112929414A
CN112929414A CN202110087636.4A CN202110087636A CN112929414A CN 112929414 A CN112929414 A CN 112929414A CN 202110087636 A CN202110087636 A CN 202110087636A CN 112929414 A CN112929414 A CN 112929414A
Authority
CN
China
Prior art keywords
patch
upgrade
user terminal
upgrade package
proxy server
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Pending
Application number
CN202110087636.4A
Other languages
Chinese (zh)
Inventor
林皓
吴振芳
杨泳
梁宝珠
党艳平
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Beijing North Source Software Co ltd
Beijing VRV Software Corp Ltd
Original Assignee
Beijing North Source Software Co ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Beijing North Source Software Co ltd filed Critical Beijing North Source Software Co ltd
Priority to CN202110087636.4A priority Critical patent/CN112929414A/en
Publication of CN112929414A publication Critical patent/CN112929414A/en
Pending legal-status Critical Current

Links

Images

Classifications

    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L67/00Network arrangements or protocols for supporting network services or applications
    • H04L67/34Network arrangements or protocols for supporting network services or applications involving the movement of software or configuration parameters 
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L67/00Network arrangements or protocols for supporting network services or applications
    • H04L67/01Protocols
    • H04L67/06Protocols specially adapted for file transfer, e.g. file transfer protocol [FTP]
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L67/00Network arrangements or protocols for supporting network services or applications
    • H04L67/01Protocols
    • H04L67/10Protocols in which an application is distributed across nodes in the network
    • H04L67/1097Protocols in which an application is distributed across nodes in the network for distributed storage of data in networks, e.g. transport arrangements for network file system [NFS], storage area networks [SAN] or network attached storage [NAS]

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Information Transfer Between Computers (AREA)

Abstract

The embodiment of the invention provides an upgrade package downloading method and device, electronic equipment and a storage medium. The upgrade package downloading method comprises the following steps: sending an update notification to the user terminal; receiving an upgrade package download address request sent by a user terminal based on an update notification; and based on the upgrade patch download address request, sending an address of a proxy server to the user terminal so that the user terminal can obtain a patch upgrade patch and/or a vulnerability upgrade patch pre-stored in the distributed file system through the proxy server, wherein the proxy server is pre-configured with a current limiting strategy so as to control download flow of the patch upgrade patch and/or the vulnerability upgrade patch for the user terminal. According to the embodiment of the invention, by limiting the lower current-carrying capacity and the downloading quantity during the distribution of the upgrade package, the phenomena of network congestion and network blockage in an enterprise caused by simultaneous downloading of a large number of user terminals in the enterprise can be avoided, and the downloading experience of the upgrade package is improved.

Description

Upgrade package downloading method and device, electronic equipment and storage medium
Technical Field
The invention relates to the technical field of internet, in particular to an upgrade package downloading method and device, electronic equipment and a storage medium.
Background
Today, information security is very important when internet technology is popularized, and patches and vulnerability upgrade packages of some systems are often produced. The computers of the enterprise typically need to uniformly upgrade these patches and bug upgrade packages. In this business context patches are distributed to system applications. And uploading the system patch and the vulnerability upgrade package on a management end and a system administrator in a unified way. And then, issuing a strategy to the client, informing the client to download the patch and the vulnerability upgrade package, and installing. In an enterprise, there are a large number of computer devices. If a large number of computer devices download at the same time, the intranet of an enterprise is blocked and jammed, and further, the downloading experience of patches is influenced.
Disclosure of Invention
To solve the problems in the prior art, embodiments of the present invention provide an upgrade package downloading method and apparatus, an electronic device, and a storage medium.
Specifically, the embodiment of the invention provides the following technical scheme:
in a first aspect, an embodiment of the present invention provides an upgrade package downloading method, including:
sending an update notification to the user terminal;
receiving an upgrade package download address request sent by the user terminal based on the update notification;
based on the upgrade package download address request, sending the address of a proxy server to the user terminal so that the user terminal can obtain a patch upgrade package and/or a vulnerability upgrade package pre-stored in the distributed file system through the proxy server,
and the proxy server is pre-configured with a current limiting strategy so as to control the download flow of the patch upgrade patch and/or the vulnerability upgrade patch for the user terminal.
Further, the current limiting policy includes a request number limiting policy in unit time and/or a connection number limiting policy at the same time, where the request number limiting policy in unit time is used to limit the number of requests sent by the user terminal in unit time, and the connection number limiting policy at the same time is used to limit the number of connections of the user terminal at the same time.
Further, the sending an address of a proxy server to the user terminal based on the upgrade package download address request, so that the user terminal obtains a patch upgrade package and/or a vulnerability upgrade package pre-stored in the distributed file system through the proxy server, includes:
and acquiring an address of the proxy server, and sending the address of the proxy server to the user terminal so that the user terminal can acquire the patch upgrade patch and/or the vulnerability upgrade patch through the proxy server, wherein the proxy server is used for acquiring the patch upgrade patch and/or the vulnerability upgrade patch from the distributed file system, converting the patch upgrade patch and/or the vulnerability upgrade patch into a file stream, and sending the file stream to the user terminal.
Further, the proxy server is a nginx cluster.
Further, the address of the proxy server includes a public key and/or a timestamp, wherein the public key is used for verifying the downloading security of the patch upgrade patch and/or the vulnerability upgrade patch, and the timestamp is used for verifying the downloading timeliness of the patch upgrade patch and/or the vulnerability upgrade patch.
Further, before sending the update notification to the user terminal, the method further includes: and uploading the patch upgrade patch and/or vulnerability upgrade patch to the distributed file system.
In a second aspect, an embodiment of the present invention further provides an upgrade package downloading apparatus, including:
a sending module, configured to send an update notification to a user terminal;
a receiving module, configured to receive an upgrade package download address request sent by the user terminal based on the update notification;
and the download control module is used for sending the address of the proxy server to the user terminal based on the upgrade patch download address request so that the user terminal can obtain a patch upgrade patch and/or a vulnerability upgrade patch which is stored in a distributed file system in advance through the proxy server, wherein a current limiting strategy is configured in the proxy server in advance so as to control the download flow of the patch upgrade patch and/or the vulnerability upgrade patch for the user terminal.
In a third aspect, an embodiment of the present invention further provides an electronic device, which includes a memory, a processor, and a computer program stored in the memory and executable on the processor, where the processor implements the steps of the upgrade package downloading method according to the first aspect when executing the program.
In a fourth aspect, an embodiment of the present invention further provides a non-transitory computer-readable storage medium, on which a computer program is stored, where the computer program, when executed by a processor, implements the steps of the upgrade package downloading method according to the first aspect.
In a fifth aspect, an embodiment of the present invention further provides a computer program product, where the computer program product includes a computer program, and when the computer program is executed by a processor, the steps of the upgrade package downloading method according to the first aspect are implemented.
According to the technical scheme, the upgrade package downloading method, the upgrade package downloading device, the electronic equipment and the storage medium provided by the embodiment of the invention have the advantages that by limiting the current-carrying capacity and the downloading quantity during the distribution of the upgrade package, the phenomena of network congestion and blocking in an enterprise caused by simultaneous downloading of a large number of user terminals in the enterprise can be avoided, and the downloading experience of the upgrade package is improved.
Drawings
In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings used in the description of the embodiments or the prior art will be briefly described below, and it is obvious that the drawings in the following description are some embodiments of the present invention, and those skilled in the art can also obtain other drawings according to the drawings without creative efforts.
Fig. 1 is a flowchart of an upgrade package downloading method according to an embodiment of the present invention;
fig. 2 is a timing diagram illustrating an upgrade package downloading method according to an embodiment of the present invention;
fig. 3 is a block diagram of an upgrade package downloading apparatus according to an embodiment of the present invention;
fig. 4 is a schematic structural diagram of an electronic device according to an embodiment of the present invention.
Detailed Description
In order to make the objects, technical solutions and advantages of the embodiments of the present invention clearer, the technical solutions in the embodiments of the present invention will be clearly and completely described below with reference to the drawings in the embodiments of the present invention, and it is obvious that the described embodiments are some, but not all, embodiments of the present invention. All other embodiments, which can be derived by a person skilled in the art from the embodiments given herein without making any creative effort, shall fall within the protection scope of the present invention.
Fig. 1 shows a flowchart of an upgrade package downloading method provided by an embodiment of the present invention. As shown in fig. 1, the upgrade package downloading method provided in the embodiment of the present invention includes the following steps:
step 101: and sending an update notification to the user terminal.
As shown in fig. 2, the update notification may be sent to the user terminal through a specific service, such as an upload-download service or an upload-download interface configured on the server. For example: when a new upgrade patch such as a patch upgrade patch and/or a vulnerability upgrade patch is stored in the distributed file system (FastDFS), the upload and download server may send an update notification to the user terminal at this time, so as to remind the user terminal to download the patch upgrade patch and/or the vulnerability upgrade patch for system update. Of course, the upload and download service may also periodically send update notification of the upgrade package to the user terminal.
In an embodiment of the present invention, as shown in fig. 2, the upload and download service may perform an update notification such as a patch upgrade patch and/or a bug upgrade patch to a User terminal, i.e., a client, through a UDP (User Datagram Protocol) notification service. That is, the upload and download service invokes the UDP service to notify the client of the patch and/or bug updates, which are notified to the client by the UDP service.
In the above description, the user terminal is, but not limited to, a computer. For example: computers of employees in the enterprise. The distributed file system (FastDFS) is an open source lightweight distributed file system that manages files, and includes: file storage, file synchronization, file access (file upload, file download), etc., solving the problems of large-capacity storage and load balancing. The method is particularly suitable for online services taking files as carriers, such as photo album websites, video websites and the like.
The FastDFS is customized for the Internet, mechanisms such as redundancy backup, load balance and linear expansion are fully considered, indexes such as high availability and high performance are emphasized, and a set of high-performance file server cluster can be easily built by using the FastDFS to provide services such as file uploading and downloading.
The FastDFS server has two roles: trackers (tracker) and storage nodes (storage). The tracker mainly performs scheduling work and plays a role in load balancing on access.
The storage node stores files and completes all functions of file management: it is this storage, synchronization, and access interface that FastDFS manages metadata for a file at the same time. Meta data of a file is related attributes of the file, and is expressed in a key value pair (key value) manner, for example: and the width is 1024, the key is the width, and the value is 1024. The file metadata is a file attribute list, and may contain a plurality of key-value pairs.
Both the tracker and the storage node may be constituted by one or more servers. Servers in both the tracker and storage nodes can be added or removed from the line at any time without affecting the online service. Where all servers in the tracker are peer-to-peer, they may increase or decrease at any time depending on the server's stress.
To support large capacity, storage nodes (servers) adopt an organization mode of split volumes (or groups). The storage system is composed of one or more volumes, the files between the volumes are independent, and the accumulation of the file capacity of all the volumes is the file capacity in the whole storage system. A volume can be composed of one or more storage servers, files in the storage servers under the volume are the same, and the storage servers in the volume play roles in redundant backup and load balancing.
When the server is added in the volume, the system automatically completes the synchronization of the existing files, and after the synchronization is completed, the system automatically switches the newly added server to the online service.
Volumes may be added dynamically when storage space is scarce or is about to run out. Only one or more servers need to be added and configured as a new volume, thus enlarging the capacity of the storage system.
Step 102: and receiving an upgrade package download address request sent by the user terminal based on the update notification.
After the user terminal receives the update notification sent by the upload and download service, if the update notification is updated, the user terminal can access the upload and download service and send an upgrade package download address request to the upload and download service, namely: the user terminal inquires the download address of the patch and/or bug upgrade package from the uploading and downloading service.
Step 103: and based on the upgrade patch download address request, sending an address of a proxy server to the user terminal so that the user terminal can obtain a patch upgrade patch and/or a vulnerability upgrade patch pre-stored in the distributed file system through the proxy server, wherein the proxy server is pre-configured with a current limiting strategy so as to control download flow of the patch upgrade patch and/or the vulnerability upgrade patch for the user terminal.
Wherein the throttling policy may limit the number of connections and the number of requests. For example, the current limitation policy includes a request number per unit time limitation policy and/or a connection number at the same time limitation policy, where the request number per unit time limitation policy is used to limit the number of requests sent by the user terminal per unit time, and the connection number at the same time limitation policy is used to limit the number of connections of the user terminal at the same time.
In an embodiment of the present invention, sending an address of a proxy server to a user terminal based on an upgrade package download address request, so that the user terminal obtains a patch upgrade package and/or a vulnerability upgrade package pre-stored in a distributed file system through the proxy server, includes: the method comprises the steps of obtaining an address of a proxy server, and sending the address of the proxy server to a user terminal so that the user terminal can obtain a patch upgrade patch and/or a vulnerability upgrade patch through the proxy server, wherein the proxy server is used for obtaining the patch upgrade patch and/or the vulnerability upgrade patch from a distributed file system, converting the patch upgrade patch and/or the vulnerability upgrade patch into a file stream, and sending the file stream to the user terminal.
In this example, the proxy server is, but not limited to, a nginx cluster.
Specifically, as shown in fig. 2, the proxy server takes the Nginx cluster as an example, the address of the proxy server is the Nginx address, the user terminal directly accesses the Nginx address, the Nginx cluster acquires a file (i.e., a patch upgrade package and/or a vulnerability upgrade package) on the distributed file system and converts the file into a file stream, and the Nginx returns the file stream to the user terminal, so that the user terminal obtains the patch upgrade package and/or the vulnerability upgrade package, and can perform the update operation of the system. For example: for implementation of current limiting, the configuration may be performed in the nginx cluster in advance, for example, the following configuration is performed in the nginx: the limit _ req _ zone is used to limit the number of requests per unit time, i.e. rate limit, and the adopted leaky bucket algorithm is, for example, "leak bucket"; the limit _ req _ conn is used to limit the number of connections at the same time, i.e. concurrency limit. That is, the limit _ req _ zone built in nginx is used to limit the number of requests per unit time, and the limit _ req _ conn is used to limit the number of connections at the same time, that is, concurrency limitation. To achieve the purpose of flow control.
In addition, a nginx cluster is introduced, and is used for proxying file addresses on the distributed file system. Load balance and download speed when using nginx control to, a plurality of user terminal download simultaneously when having solved upgrade package distribution lead to download speed slow, the emergence of network blocking, through the control of download flow, can avoid like the interior network jam of enterprise that a large amount of user terminal download simultaneously lead to in the enterprise, the download experience of promotion patch.
According to the upgrade package downloading method provided by the embodiment of the invention, by limiting the download flow and the download quantity during the distribution of the upgrade package, the phenomena of network congestion and network blockage in an enterprise caused by simultaneous downloading of a large number of user terminals in the enterprise can be avoided, and the downloading experience of the upgrade package is improved.
In an embodiment of the present invention, the address of the proxy server includes a public key and/or a timestamp, where the public key is used to verify the download security of the patch upgrade package and/or the vulnerability upgrade package, and the timestamp is used to verify the download timeliness of the patch upgrade package and/or the vulnerability upgrade package. For example: and setting the secret-key, so that the server returns the download path to the client side with the secret-key and the time stamp. secret-key solves the safety problem of downloading and the time stamp solves the time effect problem of downloading. Therefore, the downloading safety and the effectiveness of the upgrade package can be improved. And the anonymous user is prevented from invading to carry out malicious downloading, and the safety and reliability of the intranet of the enterprise are ensured.
Wherein, the key: keytool is a management tool for Java data certificates, and stores keys (keys) and certificates (certifies) in a file called a keystore, and contains two kinds of data in the keystore: key entity-Key (secret Key) or private Key and public Key pair (asymmetric encryption)
Secret key: (1) digital signature of secret key (2) digital signature of public key (public key) ethernet is one of the most widely used networking modes today, and a local area network formed by ethernet generally comprises several workstations and a HUB (HUB), and the workstations are connected to the HUB through an ethernet card and a special cable.
Secret Key: when a sender wants to send a file, he uses a Secret Key to convert the plaintext in the file into ciphertext and sends the ciphertext, and when the receiver receives the ciphertext, the receiver uses the same Secret Key to convert the ciphertext into plaintext.
Secret key: algorithms used to encrypt and decrypt data fall into two broad categories, key (secret key) or symmetric cryptography, where curiosity about the privacy of encryption and hidden information are features of all human societies. With the advent of computing power and the development of advanced mathematical techniques, systems have become very complex, and it is now possible to construct passwords that are difficult to crack efficiently. secret-key: sk, secret key.
In an embodiment of the present invention, as shown in fig. 2, before sending the update notification to the user terminal, the method further includes: and uploading the patch upgrade patch and/or vulnerability upgrade patch to the distributed file system. For example: and the user accesses the uploading and downloading service through the management application and uploads the upgrade package to the distributed file system through the uploading and downloading service.
Fig. 3 is a schematic structural diagram illustrating an upgrade package downloading apparatus according to an embodiment of the present invention. As shown in fig. 3, the upgrade package downloading apparatus provided in this embodiment includes: a sending module 310, a receiving module 320, and a download control module 330, wherein:
a sending module 310, configured to send an update notification to a user terminal;
a receiving module 320, configured to receive an upgrade package download address request sent by the user terminal based on the update notification;
and the download control module 330 is configured to send an address of a proxy server to the user terminal based on the upgrade patch download address request, so that the user terminal obtains a patch upgrade patch and/or a vulnerability upgrade patch pre-stored in the distributed file system through the proxy server, where a current limiting policy is pre-configured in the proxy server to control download traffic of the patch upgrade patch and/or the vulnerability upgrade patch for the user terminal.
According to the upgrade package downloading device provided by the embodiment of the invention, by limiting the download flow and the download quantity during the distribution of the upgrade package, the phenomena of network congestion and network blockage in an enterprise caused by simultaneous downloading of a large number of user terminals in the enterprise can be avoided, and the downloading experience of the upgrade package is improved.
Since the upgrade package downloading device provided by the embodiment of the present invention can be used to execute the upgrade package downloading method described in the above embodiment, and the working principle and the beneficial effect are similar, detailed descriptions are omitted here, and specific contents may refer to the description of the above embodiment.
In this embodiment, it should be noted that each module in the apparatus according to the embodiment of the present invention may be integrated into a whole or may be separately disposed. The modules can be combined into one module, and can also be further split into a plurality of sub-modules.
Based on the same inventive concept, another embodiment of the present invention provides an electronic device, which specifically includes the following components, with reference to fig. 4: a processor 301, a memory 302, a communication interface 303, and a communication bus 304;
the processor 301, the memory 302 and the communication interface 303 complete mutual communication through the communication bus 304;
the processor 301 is configured to call a computer program in the memory 302, and when the processor executes the computer program, the processor implements all the steps of the upgrade package downloading method, for example, when the processor executes the computer program, the processor implements the following processes: sending an update notification to the user terminal; receiving an upgrade package download address request sent by the user terminal based on the update notification; and sending an address of a proxy server to the user terminal based on the upgrade patch download address request so that the user terminal can obtain a patch upgrade patch and/or a vulnerability upgrade patch pre-stored in a distributed file system through the proxy server, wherein a current limiting strategy is pre-configured in the proxy server so as to control download flow of the patch upgrade patch and/or the vulnerability upgrade patch for the user terminal.
It will be appreciated that the detailed functions and extended functions that the computer program may perform may be as described with reference to the above embodiments.
Based on the same inventive concept, another embodiment of the present invention provides a non-transitory computer-readable storage medium, on which a computer program is stored, which, when executed by a processor, implements all the steps of the above-mentioned upgrade package downloading method, for example, the processor implements the following processes when executing the computer program: sending an update notification to the user terminal; receiving an upgrade package download address request sent by the user terminal based on the update notification; and sending an address of a proxy server to the user terminal based on the upgrade patch download address request so that the user terminal can obtain a patch upgrade patch and/or a vulnerability upgrade patch pre-stored in a distributed file system through the proxy server, wherein a current limiting strategy is pre-configured in the proxy server so as to control download flow of the patch upgrade patch and/or the vulnerability upgrade patch for the user terminal.
It will be appreciated that the detailed functions and extended functions that the computer program may perform may be as described with reference to the above embodiments.
Based on the same inventive concept, another embodiment of the present invention provides a computer program product, which includes a computer program, and when the computer program is executed by a processor, the computer program implements all the steps of the above upgrade package downloading method, for example, when the processor executes the computer program, the processor implements the following processes: sending an update notification to the user terminal; receiving an upgrade package download address request sent by the user terminal based on the update notification; and sending an address of a proxy server to the user terminal based on the upgrade patch download address request so that the user terminal can obtain a patch upgrade patch and/or a vulnerability upgrade patch pre-stored in a distributed file system through the proxy server, wherein a current limiting strategy is pre-configured in the proxy server so as to control download flow of the patch upgrade patch and/or the vulnerability upgrade patch for the user terminal.
It will be appreciated that the detailed functions and extended functions that the computer program may perform may be as described with reference to the above embodiments.
In addition, the logic instructions in the memory may be implemented in the form of software functional units and may be stored in a computer readable storage medium when sold or used as a stand-alone product. Based on such understanding, the technical solution of the present invention may be embodied in the form of a software product, which is stored in a storage medium and includes instructions for causing a computer device (which may be a personal computer, a server, or a network device) to execute all or part of the steps of the method according to the embodiments of the present invention. And the aforementioned storage medium includes: a U-disk, a removable hard disk, a Read-Only Memory (ROM), a Random Access Memory (RAM), a magnetic disk or an optical disk, and other various media capable of storing program codes.
The above-described embodiments of the apparatus are merely illustrative, and the units described as separate parts may or may not be physically separate, and parts displayed as units may or may not be physical units, may be located in one place, or may be distributed on a plurality of network units. Some or all of the modules may be selected according to actual needs to achieve the purpose of the solution of the embodiment of the present invention. One of ordinary skill in the art can understand and implement it without inventive effort.
Through the above description of the embodiments, those skilled in the art will clearly understand that each embodiment can be implemented by software plus a necessary general hardware platform, and certainly can also be implemented by hardware. Based on such understanding, the above technical solutions may be essentially or partially implemented in the form of software products, which may be stored in a computer-readable storage medium, such as ROM/RAM, magnetic disk, optical disk, etc., and include instructions for causing a computer device (which may be a personal computer, a server, or a network device, etc.) to execute the traffic auditing method according to various embodiments or some parts of embodiments.
Moreover, in the present invention, relational terms such as first and second, and the like may be used solely to distinguish one entity or action from another entity or action without necessarily requiring or implying any actual such relationship or order between such entities or actions. Also, the terms "comprises," "comprising," or any other variation thereof, are intended to cover a non-exclusive inclusion, such that a process, method, article, or apparatus that comprises a list of elements does not include only those elements but may include other elements not expressly listed or inherent to such process, method, article, or apparatus. Without further limitation, an element defined by the phrase "comprising an … …" does not exclude the presence of other identical elements in a process, method, article, or apparatus that comprises the element.
Furthermore, in the present disclosure, reference to the description of the terms "one embodiment," "some embodiments," "an example," "a specific example," or "some examples" or the like means that a particular feature, structure, material, or characteristic described in connection with the embodiment or example is included in at least one embodiment or example of the present disclosure. In this specification, the schematic representations of the terms used above are not necessarily intended to refer to the same embodiment or example. Furthermore, the particular features, structures, materials, or characteristics described may be combined in any suitable manner in any one or more embodiments or examples. Furthermore, various embodiments or examples and features of different embodiments or examples described in this specification can be combined and combined by one skilled in the art without contradiction.
Finally, it should be noted that: the above examples are only intended to illustrate the technical solution of the present invention, but not to limit it; although the present invention has been described in detail with reference to the foregoing embodiments, it will be understood by those of ordinary skill in the art that: the technical solutions described in the foregoing embodiments may still be modified, or some technical features may be equivalently replaced; and such modifications or substitutions do not depart from the spirit and scope of the corresponding technical solutions of the embodiments of the present invention.

Claims (10)

1. An upgrade package downloading method, comprising:
sending an update notification to the user terminal;
receiving an upgrade package download address request sent by the user terminal based on the update notification;
based on the upgrade package download address request, sending the address of a proxy server to the user terminal so that the user terminal can obtain a patch upgrade package and/or a vulnerability upgrade package pre-stored in the distributed file system through the proxy server,
and the proxy server is pre-configured with a current limiting strategy so as to control the download flow of the patch upgrade patch and/or the vulnerability upgrade patch for the user terminal.
2. The upgrade package downloading method according to claim 1, wherein the current limiting policy includes a request number limit policy per unit time and/or a connection number limit policy per time, wherein the request number limit policy per unit time is used to limit the number of requests sent by the ue per unit time, and the connection number limit policy per time is used to limit the number of connections of the ue per time.
3. The upgrade package downloading method according to claim 1, wherein the sending, to the user terminal, an address of a proxy server based on the upgrade package downloading address request, so that the user terminal obtains a patch upgrade package and/or a vulnerability upgrade package pre-stored in a distributed file system through the proxy server, includes:
and acquiring an address of the proxy server, and sending the address of the proxy server to the user terminal so that the user terminal can acquire the patch upgrade patch and/or the vulnerability upgrade patch through the proxy server, wherein the proxy server is used for acquiring the patch upgrade patch and/or the vulnerability upgrade patch from the distributed file system, converting the patch upgrade patch and/or the vulnerability upgrade patch into a file stream, and sending the file stream to the user terminal.
4. The upgrade package download method according to any one of claims 1 to 3, wherein the proxy server is a nginx cluster.
5. The upgrade package downloading method according to claim 1, wherein the address of the proxy server includes a public key and/or a timestamp, wherein the public key is used to verify the downloading security of the patch upgrade package and/or the vulnerability upgrade package, and the timestamp is used to verify the downloading timeliness of the patch upgrade package and/or the vulnerability upgrade package.
6. The upgrade package downloading method according to claim 1, further comprising, before sending the update notification to the user terminal: and uploading the patch upgrade patch and/or vulnerability upgrade patch to the distributed file system.
7. An upgrade package downloading apparatus, comprising:
a sending module, configured to send an update notification to a user terminal;
a receiving module, configured to receive an upgrade package download address request sent by the user terminal based on the update notification;
and the download control module is used for sending the address of the proxy server to the user terminal based on the upgrade patch download address request so that the user terminal can obtain a patch upgrade patch and/or a vulnerability upgrade patch which is stored in a distributed file system in advance through the proxy server, wherein a current limiting strategy is configured in the proxy server in advance so as to control the download flow of the patch upgrade patch and/or the vulnerability upgrade patch for the user terminal.
8. An electronic device comprising a memory, a processor and a computer program stored on the memory and executable on the processor, wherein the steps of the upgrade package download method according to any one of claims 1 to 6 are implemented when the processor executes the program.
9. A non-transitory computer readable storage medium having a computer program stored thereon, wherein the computer program, when executed by a processor, implements the steps of the upgrade package download method according to any one of claims 1 to 6.
10. A computer program product comprising a computer program, characterized in that the computer program, when being executed by a processor, carries out the steps of the upgrade package download method according to any one of claims 1 to 6.
CN202110087636.4A 2021-01-22 2021-01-22 Upgrade package downloading method and device, electronic equipment and storage medium Pending CN112929414A (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN202110087636.4A CN112929414A (en) 2021-01-22 2021-01-22 Upgrade package downloading method and device, electronic equipment and storage medium

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN202110087636.4A CN112929414A (en) 2021-01-22 2021-01-22 Upgrade package downloading method and device, electronic equipment and storage medium

Publications (1)

Publication Number Publication Date
CN112929414A true CN112929414A (en) 2021-06-08

Family

ID=76164746

Family Applications (1)

Application Number Title Priority Date Filing Date
CN202110087636.4A Pending CN112929414A (en) 2021-01-22 2021-01-22 Upgrade package downloading method and device, electronic equipment and storage medium

Country Status (1)

Country Link
CN (1) CN112929414A (en)

Cited By (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN114125915A (en) * 2022-01-26 2022-03-01 舟谱数据技术南京有限公司 Positioning thermal repair system and method for setting terminal APP
CN114443581A (en) * 2022-04-11 2022-05-06 苏州浪潮智能科技有限公司 Download control method, device, equipment and storage medium
CN114615073A (en) * 2022-03-22 2022-06-10 广州方硅信息技术有限公司 Access flow control method, device, equipment and medium
CN115473853A (en) * 2022-08-19 2022-12-13 智己汽车科技有限公司 Method and device for preventing software upgrading package downloading of vehicle from blocking

Citations (7)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN102377743A (en) * 2010-08-18 2012-03-14 国基电子(上海)有限公司 Communication terminal equipment and certification updating method thereof
CN102571959A (en) * 2012-01-11 2012-07-11 北京奇虎科技有限公司 System and method for downloading data
CN102624689A (en) * 2011-11-28 2012-08-01 苏州奇可思信息科技有限公司 Client proxy internet surfing method capable of realizing cache priority of local files of server
CN102664938A (en) * 2012-04-12 2012-09-12 北京蓝汛通信技术有限责任公司 Method and device for controlling downloading of resources
JP2014120045A (en) * 2012-12-18 2014-06-30 Saxa Inc Update information distribution system and distribution management server device
CN106161554A (en) * 2015-04-17 2016-11-23 腾讯科技(深圳)有限公司 AKU method for down loading and download system
CN110244963A (en) * 2019-05-24 2019-09-17 深圳市明源云科技有限公司 Data-updating method, device and terminal device

Patent Citations (7)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN102377743A (en) * 2010-08-18 2012-03-14 国基电子(上海)有限公司 Communication terminal equipment and certification updating method thereof
CN102624689A (en) * 2011-11-28 2012-08-01 苏州奇可思信息科技有限公司 Client proxy internet surfing method capable of realizing cache priority of local files of server
CN102571959A (en) * 2012-01-11 2012-07-11 北京奇虎科技有限公司 System and method for downloading data
CN102664938A (en) * 2012-04-12 2012-09-12 北京蓝汛通信技术有限责任公司 Method and device for controlling downloading of resources
JP2014120045A (en) * 2012-12-18 2014-06-30 Saxa Inc Update information distribution system and distribution management server device
CN106161554A (en) * 2015-04-17 2016-11-23 腾讯科技(深圳)有限公司 AKU method for down loading and download system
CN110244963A (en) * 2019-05-24 2019-09-17 深圳市明源云科技有限公司 Data-updating method, device and terminal device

Cited By (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN114125915A (en) * 2022-01-26 2022-03-01 舟谱数据技术南京有限公司 Positioning thermal repair system and method for setting terminal APP
CN114125915B (en) * 2022-01-26 2022-04-12 舟谱数据技术南京有限公司 Positioning thermal repair system and method for setting terminal APP
CN114615073A (en) * 2022-03-22 2022-06-10 广州方硅信息技术有限公司 Access flow control method, device, equipment and medium
CN114443581A (en) * 2022-04-11 2022-05-06 苏州浪潮智能科技有限公司 Download control method, device, equipment and storage medium
CN114443581B (en) * 2022-04-11 2022-06-17 苏州浪潮智能科技有限公司 Download control method, device, equipment and storage medium
CN115473853A (en) * 2022-08-19 2022-12-13 智己汽车科技有限公司 Method and device for preventing software upgrading package downloading of vehicle from blocking

Similar Documents

Publication Publication Date Title
US11411944B2 (en) Session synchronization across multiple devices in an identity cloud service
US10530578B2 (en) Key store service
US10581820B2 (en) Key generation and rollover
CN112929414A (en) Upgrade package downloading method and device, electronic equipment and storage medium
US9065835B2 (en) Redirecting web content
US10341118B2 (en) SSL gateway with integrated hardware security module
CA2936956C (en) An entity handle registry to support traffic policy enforcement
US10218686B2 (en) Dynamically managing, from a centralized service, valid cipher suites allowed for secured sessions
JP2009506455A (en) Distributed caching of files in the network
US10021195B2 (en) Cross-device synchronization system for account-level information
EP2521311A1 (en) Resource control method, apparatus and system in peer-to-peer network
US9888038B2 (en) Method and apparatus for providing mobile and social services via virtual individual servers
US10291607B1 (en) Providing real-time events to applications
WO2022068394A1 (en) Certificate loading method, server, medium, system and electronic device
JP5659016B2 (en) How to download files in parallel
US20240015135A1 (en) Domain management and synchronization system
US11895227B1 (en) Distributed key management system with a key lookup service
WO2008033532A2 (en) Enterprise data protection management for providing secure communication in a network
US11271968B2 (en) Zero round trip time transmission for anticipatory request messages
US8639750B2 (en) Orchestration of web notifications
CN113419878B (en) Data operation method and device
Wang et al. NCDN: A Node‐Failure Resilient CDN Solution with Reinforcement Learning Optimization
CN114510742B (en) Mixed cloud data migration method and system based on privacy security
US11546411B1 (en) Backing up confidential data to user devices on the same local network
Aazam et al. Media inter-cloud architecture and storage efficiency challenge

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination
RJ01 Rejection of invention patent application after publication

Application publication date: 20210608

RJ01 Rejection of invention patent application after publication