CN114679370B - Server hosting method, device, system and storage medium - Google Patents
Server hosting method, device, system and storage medium Download PDFInfo
- Publication number
- CN114679370B CN114679370B CN202110555356.1A CN202110555356A CN114679370B CN 114679370 B CN114679370 B CN 114679370B CN 202110555356 A CN202110555356 A CN 202110555356A CN 114679370 B CN114679370 B CN 114679370B
- Authority
- CN
- China
- Prior art keywords
- network
- gateway device
- server
- hosting
- internet protocol
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Active
Links
- 238000000034 method Methods 0.000 title claims abstract description 79
- 238000004891 communication Methods 0.000 claims abstract description 182
- 238000004590 computer program Methods 0.000 claims description 15
- 238000002955 isolation Methods 0.000 abstract description 10
- 238000007726 management method Methods 0.000 description 21
- 238000013519 translation Methods 0.000 description 20
- 238000006243 chemical reaction Methods 0.000 description 14
- 238000012545 processing Methods 0.000 description 13
- 238000010586 diagram Methods 0.000 description 12
- 230000006870 function Effects 0.000 description 10
- 230000003993 interaction Effects 0.000 description 6
- 238000005538 encapsulation Methods 0.000 description 3
- 238000012986 modification Methods 0.000 description 2
- 230000004048 modification Effects 0.000 description 2
- 239000007787 solid Substances 0.000 description 2
- 230000006978 adaptation Effects 0.000 description 1
- 238000013500 data storage Methods 0.000 description 1
- 238000005516 engineering process Methods 0.000 description 1
- 239000000835 fiber Substances 0.000 description 1
- 230000010354 integration Effects 0.000 description 1
- 230000003287 optical effect Effects 0.000 description 1
- 239000004065 semiconductor Substances 0.000 description 1
- 238000006467 substitution reaction Methods 0.000 description 1
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
- H04L41/04—Network management architectures or arrangements
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L12/00—Data switching networks
- H04L12/66—Arrangements for connecting between networks having differing types of switching systems, e.g. gateways
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/02—Network architectures or network communication protocols for network security for separating internal from external traffic, e.g. firewalls
- H04L63/0272—Virtual private networks
Landscapes
- Engineering & Computer Science (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- Computer Hardware Design (AREA)
- Computer Security & Cryptography (AREA)
- Computing Systems (AREA)
- General Engineering & Computer Science (AREA)
- Data Exchanges In Wide-Area Networks (AREA)
Abstract
The application discloses a server hosting method, a server hosting device, a server hosting system and a storage medium. The server hosting method comprises the following steps: receiving first communication information sent by a hosting server, wherein the first communication information carries a first internet protocol address of a first network device for receiving the first communication information, the hosting server is hosted to a first virtual private network of a first tenant, and the first network device corresponds to a second virtual private network of a second tenant; searching a second internet protocol address of a second gateway device corresponding to the first network device identified by the first internet protocol address, wherein the second gateway device is located in a second virtual private network of a second tenant; the first communication is sent to the first network device via a second gateway device identified by a second internet protocol address. By the method, multi-tenant isolation can be realized on the basis of cost reduction.
Description
Technical Field
The present disclosure relates to the field of communications technologies, and in particular, to a server hosting method, device, system, and storage medium.
Background
Server hosting is a form of service provided by internet data center (Internet Data Center, IDC for short) service providers or cloud service providers, which allows tenants to host their own servers in the machine room of IDC service providers or cloud service providers. If the tenant has an isolation requirement, the multi-tenant isolation is realized by adopting a mode of exclusive network equipment, so that the cost is higher.
Disclosure of Invention
The application discloses a server hosting method, a server hosting device, a server hosting system and a storage medium, which can realize multi-tenant isolation on the basis of reducing cost.
In a first aspect, an embodiment of the present application provides a server hosting method, where the method is applied to a first gateway device, a server hosting system to which the first gateway device belongs includes at least a hosting server, the first gateway device, a second gateway device, and a first network device, where the hosting server is hosted to a first virtual private network of a first tenant, the first virtual private network includes at least the first gateway device, the first network device corresponds to a second virtual private network of a second tenant, and the second virtual private network includes at least the second gateway device, where the method includes:
receiving first communication information sent by a hosting server, wherein the first communication information carries a first internet protocol address of a first network device for receiving the first communication information;
Searching a second internet protocol address of a second gateway device corresponding to the first network device identified by the first internet protocol address;
the first communication is sent to the first network device via a second gateway device identified by a second internet protocol address.
In a second aspect, an embodiment of the present application provides a server hosting method, where the method is applied to a first gateway device, a server hosting system to which the first gateway device belongs includes at least a hosting server, the first gateway device, and a second network device, where the hosting server is hosted to a first virtual private network of a first tenant, the first virtual private network includes at least the first gateway device, and the second network device corresponds to the first virtual private network, and the method includes:
receiving second communication information sent by the hosting server, wherein the second communication information carries a third internet protocol address of second network equipment for receiving the second communication information;
the second communication information is sent to the second network device.
In a third aspect, an embodiment of the present application provides a server hosting method, where the method is applied to a first gateway device, a server hosting system to which the first gateway device belongs includes at least a hosting server and the first gateway device, the hosting server is hosted to a first virtual private network of a first tenant, and the first virtual private network includes at least the first gateway device, and the method includes:
Receiving third communication information sent by the hosting server, wherein the third communication information carries a network address of the Internet;
and sending the third communication information to each network device in the Internet identified by the network address.
In a fourth aspect, an embodiment of the present application provides a server hosting system, including at least a hosting server, a first gateway device, a second gateway device, and a first network device, where the hosting server is hosted to a first virtual private network of a first tenant, the first virtual private network includes at least the first gateway device, the first network device corresponds to a second virtual private network of a second tenant, and the second virtual private network includes at least the second gateway device, where:
the hosting server sends first communication information to the first gateway device, wherein the first communication information carries a first Internet protocol address of the first network device;
the first gateway device searches a second internet protocol address of a second gateway device corresponding to the first network device identified by the first internet protocol address;
the first gateway device sending the first communication information to a second gateway device identified by a second internet protocol address;
The second gateway device sends the first communication to the first network device identified by the first internet protocol address.
In a fifth aspect, embodiments of the present application provide a server hosting apparatus, where the server hosting apparatus may be a first gateway device, or may be an apparatus in the first gateway device. The server hosting system to which the first gateway device belongs at least comprises a hosting server, the first gateway device, the second gateway device and the first network device, wherein the hosting server is hosted to a first virtual private network of a first tenant, the first virtual private network at least comprises the first gateway device, the first network device corresponds to a second virtual private network of a second tenant, and the second virtual private network at least comprises the second gateway device. The device comprises:
the receiving unit is used for receiving the first communication information sent by the hosting server, wherein the first communication information carries a first internet protocol address of first network equipment used for receiving the first communication information;
the processing unit is used for searching a second internet protocol address of a second gateway device corresponding to the first network device identified by the first internet protocol address;
And the sending unit is used for sending the first communication information to the first network device through the second gateway device identified by the second internet protocol address.
In a sixth aspect, embodiments of the present application provide a server hosting apparatus, where the server hosting apparatus may be a first gateway device, or may be an apparatus in the first gateway device. The server hosting system to which the first gateway device belongs at least comprises a hosting server, the first gateway device and a second network device, wherein the hosting server is hosted to a first virtual private network of a first tenant, the first virtual private network at least comprises the first gateway device, and the second network device corresponds to the first virtual private network. The device comprises:
the receiving unit is used for receiving second communication information sent by the hosting server, wherein the second communication information carries a third Internet protocol address of second network equipment for receiving the second communication information;
and the sending unit is used for sending the second communication information to the second network equipment.
In a seventh aspect, embodiments of the present application provide a server hosting apparatus, where the server hosting apparatus may be a first gateway device, or may be an apparatus in the first gateway device. The server hosting system to which the first gateway device belongs at least comprises a hosting server and the first gateway device, wherein the hosting server is hosted to a first virtual private network of a first tenant, and the first virtual private network at least comprises the first gateway device. The device comprises:
The receiving unit is used for receiving third communication information sent by the hosting server, wherein the third communication information carries a network address of the Internet;
and the sending unit is used for sending the third communication information to each network device in the Internet identified by the network address.
In an eighth aspect, an embodiment of the present application provides a gateway device, including a processor, and a memory, where the memory is configured to store a computer program, where the computer program is executed by the processor to implement a server hosting method as described in the first aspect.
In a ninth aspect, an embodiment of the present application provides a gateway device, including a processor and a memory, where the memory is configured to store a computer program, where the computer program is executed by the processor to implement a server hosting method as described in the second aspect.
In a tenth aspect, an embodiment of the present application provides a gateway device, including a processor, and a memory, where the memory is configured to store a computer program, where the computer program is executed by the processor to implement a server hosting method as described in the third aspect.
In an eleventh aspect, embodiments of the present application provide a computer-readable storage medium storing one or more instructions that when executed by a processor implement a server hosting method as described in the first aspect.
In a twelfth aspect, embodiments of the present application provide a computer-readable storage medium storing one or more instructions that when executed by a processor implement a server hosting method as described in the second aspect.
In a thirteenth aspect, embodiments of the present application provide a computer-readable storage medium storing one or more instructions that when executed by a processor implement a server hosting method as described in the third aspect.
In this embodiment of the present application, a server hosting system to which a first gateway device belongs includes at least a hosting server, a first gateway device, a second gateway device, and a first network device, where the hosting server is hosted to a first virtual private network of a first tenant, the first virtual private network includes at least the first gateway device, the first network device corresponds to a second virtual private network of a second tenant, and the second virtual private network includes at least the second gateway device. The first gateway device may receive first communication information sent by the hosting server, where the first communication information carries a first internet protocol address of a first network device for receiving the first communication information; searching a second internet protocol address of a second gateway device corresponding to the first network device identified by the first internet protocol address; the first communication is sent to the first network device via a second gateway device identified by a second internet protocol address. According to the method, multi-tenant isolation can be achieved based on gateway equipment in the virtual private network, the method does not need exclusive network equipment, and the hosting server can interact with first network equipment corresponding to the second virtual private network through first gateway equipment in the first virtual private network and second gateway equipment in the second virtual private network, so that cost can be reduced. That is, the embodiment of the application can realize multi-tenant isolation on the basis of reducing cost.
Drawings
In order to more clearly illustrate the technical solutions of the embodiments of the present application, the drawings needed in the description of the embodiments will be briefly introduced below, and it is obvious that the drawings in the following description are some embodiments of the present application, and other drawings may be obtained according to these drawings without inventive effort for a person skilled in the art.
Fig. 1 is a schematic diagram of a server hosting system according to an embodiment of the present application;
fig. 2 is a flow chart of a server hosting method according to an embodiment of the present application;
FIG. 3 is a schematic diagram of another server hosting system provided in an embodiment of the present application;
FIG. 4 is a schematic diagram of another server hosting system provided in an embodiment of the present application;
fig. 5 is a flow chart of another server hosting method according to an embodiment of the present application;
FIG. 6 is a schematic diagram of another server hosting system provided in an embodiment of the present application;
fig. 7 is a flow chart of another server hosting method according to an embodiment of the present application;
fig. 8 is a schematic unit diagram of a server hosting device according to an embodiment of the present application;
fig. 9 is a simplified schematic diagram of an entity structure of a gateway device according to an embodiment of the present application.
Detailed Description
Referring to fig. 1, fig. 1 is a schematic diagram of a server hosting system according to an embodiment of the present application. As shown in fig. 1, the server hosting system includes at least a hosting server 113, a first gateway device 111, a second gateway device 121, and a first network device, where the first network device may be a network device corresponding to a second virtual private network (Virtual Private Cloud, VPC) 120, such as a hosting server 124. The hosting server 113 is hosted to a first virtual private network 110, the first virtual private network 110 comprising at least a first gateway device 111, and the second virtual private network 120 comprising at least a second gateway device 121.
The virtual private network may be a dedicated network space constructed by the tenant on the cloud, and provides network services for the tenant's resources on the cloud, and there is a property of complete logic isolation between different virtual private networks. As shown in fig. 1, the first vpn 110 is a vpn established by a first tenant on a public cloud, and the second vpn 120 is a vpn established by a second tenant on the public cloud, and the first vpn 110 and the second vpn 120 are completely logically isolated from each other. The first gateway device 111 may be a designated gateway device of the hosting server 113, and the hosting server 113 corresponding to the first virtual private network 110 may access the first network device corresponding to the second virtual private network 120 through the first gateway device 111, that is, the hosting server 113 may access the hosting server 124 through the first gateway device 111.
As shown in fig. 1, the first network device may be a hosting server 124 hosted to the second virtual private network 120, and during access of the hosting server 124 by the hosting server 113, the hosting server 113 may send first communication information to the first gateway device 111, wherein the first communication information carries a first internet protocol address (Internet Protocol Address, IP address) of the hosting server 124. The first gateway device 111 may look up the second internet protocol address of the second gateway device 121 corresponding to the hosting server 124 identified by the first internet protocol address. Next, the first gateway device 111 may send the first communication information to the second gateway device 121 identified by the second internet protocol address. Finally, the second gateway device 121 may send the first communication to the hosting server 124 identified by the first internet protocol address.
The second gateway device in the server hosting system in the embodiment of the present application may be a gateway device similar to the first gateway device in the first virtual private network, and the hosting server in the second virtual private network may be hosted to the second gateway device. Optionally, the first network device may be a Virtual Machine in the second Virtual private network, and then the second gateway device in the server hosting system may be a Virtual Machine (VM) management device of a Virtual Machine, where the Virtual Machine may be a cloud Virtual Machine (Cloud Virtual Machine, CVM), and the Virtual Machine management device may be a parent Machine corresponding to the cloud Virtual Machine.
The server may be an independent physical server, a server cluster or a distributed system formed by a plurality of physical servers, or a cloud server providing cloud services, cloud databases, cloud computing, cloud functions, cloud storage, network services, cloud communication, middleware services, domain name services, security services, CDNs, basic cloud computing services such as big data and artificial intelligent platforms. The terminal may be, but is not limited to, a smart phone, a tablet computer, a notebook computer, a desktop computer, a smart speaker, a smart watch, etc. The terminal and the server may be directly or indirectly connected through wired or wireless communication, which is not limited herein.
The server hosting method provided by the embodiment of the application can be applied to a server hosting device, and the server hosting device can be a first gateway device running in a server hosting system or a device in the first gateway device. The first gateway device may be implemented in various forms, for example, the first gateway device described in the present application may include an intersystem connection device such as a data gateway, a security gateway, or the like.
Referring to fig. 2, fig. 2 is a flowchart of a server hosting method provided in an embodiment of the present application, where the method may be applied to a first gateway device, a server hosting system to which the first gateway device belongs at least includes a hosting server, a first gateway device, a second gateway device, and a first network device, the hosting server is hosted to a first virtual private network of a first tenant, the first virtual private network includes at least the first gateway device, the first network device corresponds to a second virtual private network of a second tenant, and the second virtual private network includes at least the second gateway device. As shown in fig. 2, the server hosting method includes:
210. the hosting server sends the first communication information to the first gateway device.
The hosting server may send the first communication to the first gateway device, wherein the first communication carries a first internet protocol address of a first network device for receiving the first communication. The first network device may be a network device corresponding to a second virtual private network, such as a hosting server hosted to the second virtual private network or a virtual machine in the second virtual private network. If the first tenant has a server hosting requirement for the hosting server, the first tenant may host the hosting server to the IDC facilitator or the cloud facilitator. The first gateway device may be a designated gateway device of the hosting server, and the hosting server may access the first virtual private network of the first tenant through the first gateway device, that is, the hosting server may be hosted to the first virtual private network, such that the hosting server may be keyed to the public cloud network. Similarly, when the first network device is the hosting server of the second tenant, the second tenant may host the first network device to the IDC service provider or the cloud service provider, and then the first network device may be hosted to the second virtual private network of the second tenant, such that the first network device may be keyed into the public cloud network.
For example, as shown in fig. 1, if the first tenant has a server hosting requirement for the hosting server 113, the first tenant may host the hosting server 113 to an IDC service provider or a cloud service provider. The hosting server 113 may access the first virtual private network 110 of the first tenant through the first gateway device 111, that is, the hosting server 113 may be hosted to the first virtual private network 110, such that the hosting server 113 may be keyed into the public cloud network. When the first network device is the hosting server 124, if the second tenant has a server hosting requirement on the hosting server 124, the second tenant may host the hosting server 124 to the IDC server or the cloud service provider, and the hosting server 124 may access the second virtual private network 120 of the second tenant through the second gateway device 121, that is, the hosting server 124 may be hosted to the second virtual private network 120, so that the hosting server 124 may be keyed to the public cloud network. The hosting server 113 may send the first communication to the first gateway device 111, wherein the first communication carries a first internet protocol address of a first network device for receiving the first communication, that is, when the first network device is the hosting server 124, the first communication carries a first internet protocol address of the hosting server 124 for receiving the first communication.
220. The first gateway device looks up a second internet protocol address of the second gateway device.
After receiving the first communication information sent by the hosting server, the first gateway device may search the control plane information for a second internet protocol address of a second gateway device corresponding to the first network device identified by the first internet protocol address. When the first network device is a hosting server hosted to the second virtual private network, the second gateway device corresponding to the first network device may be a designated gateway device of the hosting server of the second tenant, which may be a gateway device similar to the first gateway device. When the first network device is a virtual machine in the second virtual private network, the second gateway device corresponding to the first network device may be a virtual machine management device, where the virtual machine may be a cloud virtual machine, and the virtual machine management device may be a parent machine of the cloud virtual machine. For example, as shown in fig. 1, taking the first network device as the hosting server 124 as an example, after the first gateway device 111 receives the first communication information sent by the hosting server 113, the first gateway device 111 may find a second internet protocol address of a second gateway device 121 corresponding to the hosting server 124, where the second gateway device 121 is located in the second virtual private network 120.
Optionally, the first gateway device may receive control plane information sent by the controller in the first vpn before looking up the second ip address of the second gateway device. The controller may be a virtual private network object store (VPC Object Storage Service, VPC OSS) responsible for sending control plane information to respective gateway devices in the affiliated virtual private network, e.g. a VPC OSS in a first virtual private network may send control plane information to a first gateway device in the first virtual private network, etc. The control plane information includes network identifiers of each virtual private network, internet protocol addresses of gateway devices in each virtual private network, internet protocol addresses of network devices corresponding to each virtual private network, and the like. As shown in fig. 1, the first gateway device 111 may receive control plane information sent by the VPC OSS112 in the first virtual private network 110, where the control plane information includes se:Sub>A network identifier of se:Sub>A virtual private network corresponding to the first network device, se:Sub>A gateway device corresponding to the first network device, and the like, where the network identifiers of the first virtual private network 110 and the second virtual private network 120 may be VPC-se:Sub>A and VPC-B, respectively. When the first network device is the hosting server 124, the control plane information includes the network identifier VPC-A, VPC-B and the correspondence between the hosting server 124 and the second gateway device 121. As shown in table 1, table 1 is a one-to-one correspondence between each network device and each gateway device, where the network device may be a hosting server hosted in a virtual private network or a virtual machine in the virtual private network, then the gateway device may be a designated gateway device of the hosting server or a virtual machine management device, where the virtual machine may be a cloud virtual machine, and the virtual machine management device may be a parent machine of the cloud virtual machine.
TABLE 1
In one possible implementation manner, the first gateway device may search the control plane information for a network identifier of a virtual private network corresponding to the first network device identified by the first internet protocol address, and obtain, in the control plane information, a second internet protocol address of the second gateway device in the virtual private network identified by the searched network identifier. As shown in Table 1, the network identity of the first virtual private network may be VPC-A and the network identity of the second virtual private network may be VPC-B. When the first internet protocol address of the first network device is 192.168.254.22, the first gateway device may find, in the control plane information, the network identifier corresponding to the first internet protocol address 192.168.255.22 as VPC-B, that is, the first gateway device may find, according to the control plane information, the network identifier of the virtual private network corresponding to the first network device identified by the first internet protocol address as VPC-B. The first gateway device may obtain a one-to-one correspondence between each network device corresponding to the second virtual private network and each gateway device according to the network identifier VPC-B of the second virtual private network, as shown in table 1, where the gateway device IP corresponding to the first internet protocol address 192.168.255.22 of the first network device is 172.30.254.21, and then the first gateway device may obtain, in the control plane information, that the second internet protocol address of the second gateway device in the virtual private network identified by the network identifier VPC-B is 172.30.254.21.
230. The first gateway device sends the first communication information to the second gateway device.
The first gateway device may send the first communication information to the second gateway device according to a second internet protocol address of the second gateway device corresponding to the first network device identified by the first internet protocol address. As shown in fig. 1, the first gateway device 111 may send the first communication information to the second gateway device 121 via the second internet protocol address of the second gateway device 121.
Optionally, before the first gateway device sends the first communication information, the first gateway device may encapsulate the first communication information, where the encapsulation may be an Overlay (Overlay) encapsulation, that is, the first gateway device may increase the carrying information of the first communication information, so that the first communication information carries the second internet protocol address of the second gateway device.
240. The second gateway device sends the first communication information to the first network device.
The second gateway device may send the first communication information to the first network device according to the control plane information after receiving the first communication information sent by the first gateway device. For example, as shown in fig. 1, when the first network device is the hosting server 124, the second gateway device 121 may send the first communication information to the hosting server 124 after receiving the first communication information sent by the first gateway device 111.
Optionally, the first network device may send fourth communication information to the second gateway device, the second gateway device may send the fourth communication information to the first gateway device according to the control plane information, and then the first gateway device may send the fourth communication information to the hosting server, so as to finally implement interaction between the hosting server and the first network device, where the fourth communication information carries a sixth internet protocol address of the hosting server for receiving the fourth communication information. It may be appreciated that the access procedure of the first network device to the hosting server is similar to the access procedure of the hosting server to the first network device in the above embodiment, and specific implementation procedures may refer to the related descriptions of the above embodiment and will not be repeated here.
According to the method, multi-tenant isolation can be achieved based on the first gateway equipment, the method does not need to monopolize the network equipment, the managed server corresponding to the first virtual private network can interact with the first network equipment corresponding to the second virtual private network through the first gateway equipment in the first virtual private network and the second gateway equipment in the second virtual private network, and cost can be reduced. That is, the embodiment of the application can realize multi-tenant isolation on the basis of reducing cost.
Referring to fig. 3, fig. 3 is a schematic diagram of another server hosting system provided in the embodiment of the present application, and as shown in fig. 3, the server hosting system at least includes a hosting server 313, a first gateway device 311, and a second network device, where the second network device may be a network device, such as a hosting server 314, corresponding to a first virtual private network, except for the hosting server 313, and the hosting server 313 is hosted to the first virtual private network 310. Optionally, the server hosting system may further include an access Switch (Switch) 315, where the access Switch 315 may implement two-layer virtual local area network (Virtual Local Area Network, VLAN) isolation, that is, the server hosting method may implement interactions between network devices belonging to different VLANs when the hosting server 313 interacts with the hosting server 314 through the first gateway device.
Optionally, when the second network device is a virtual machine, the hosting server system may further include a virtual machine management device, where the virtual machine may be a cloud virtual machine, and then the virtual machine management device may be a parent machine corresponding to the cloud virtual machine. For example, fig. 4 is a schematic diagram of another server hosting system provided in the embodiment of the present application, and as shown in fig. 4, when the second network device is a cloud virtual machine 416, the server hosting system at least includes a hosting server 413, a first gateway device 411, the cloud virtual machine 416, a parent machine 415 corresponding to the cloud virtual machine 416, and so on. Wherein cloud virtual machine 416 is located in first virtual private network 410, hosting server 413 is hosted to first virtual private network device 410. The hosting server 413 can interact with the cloud virtual machine 416 through the first gateway device 411 and the parent machine 415 corresponding to the cloud virtual machine 416, that is, the server hosting method can achieve that the hosting server is connected to a public cloud network in a one-key mode.
Referring to fig. 5, fig. 5 is a flowchart of another server hosting method provided in the embodiment of the present application, where the method may be applied to a first gateway device, a server hosting system to which the first gateway device belongs includes at least a hosting server, the first gateway device, and a second network device, the hosting server is hosted to a first virtual private network of a first tenant, the first virtual private network includes at least the first gateway device, and the second network device corresponds to the first virtual private network. As shown in fig. 5, the server hosting method includes:
510. the hosting server sends the second communication information to the first gateway device.
The hosting server may send second communication information to the first gateway device, wherein the second communication information carries a third internet protocol address of a second network device for receiving the second communication information. The second network device may be a network device other than the hosting server described above that accesses the first gateway device, as shown in fig. 3, the second network device may be a hosting server 314 that accesses the first gateway device, and the hosting server 313 may send the second communication information to the first gateway device 311, then the second communication information carries a third internet protocol address of the hosting server 314 for receiving the second communication information.
In one possible implementation, as shown in fig. 3, the second network device may be the hosting server 314, then the hosting server 313 may send an address resolution protocol (Address Resolution Protocol, ARP) request for a physical address (Media Access Control, MAC address) of the hosting server 314 before sending the second communication information to the first gateway device. Since different ports on the access switch 315 all belong to different virtual local area networks, the hosting server 314 will not receive the ARP request of the hosting server 313, and the first gateway device 311 may perform ARP reply, that is, the first gateway device 311 may respond to the hosting server 313 with its own MAC address. The hosting server 313 may then send the second communication information encapsulating the MAC address of the first gateway device 311 to the first gateway device 311, that is, the second communication information sent by the hosting server 313 to the first gateway device 311 may also carry the MAC address of the first gateway device 311.
In one possible implementation, the second network device may be a virtual machine, where the virtual machine may be a cloud virtual machine, as shown in fig. 4, the second network device may be a cloud virtual machine 416, and the hosting server 413 may send the second communication information to the first gateway device 411, then the second communication information carries a third internet protocol address of the cloud virtual machine 416 for receiving the second communication information.
520. The first gateway device sends the second communication information to the second network device.
The first gateway device may send the second communication information to the second network device after receiving the second communication information sent by the hosting server. As shown in fig. 3, the second network device may be a hosting server 314, and then the first gateway device 311 may send the second communication information to the hosting server 314.
In one possible implementation, before the first gateway device sends the second communication information to the second network device, the first gateway device may further obtain, through an ARP command, a MAC address corresponding to the third internet protocol address of the hosting server 314, and encapsulate the second communication information, so that the second communication information may carry the MAC address of the hosting server 314.
In one possible implementation manner, the second network device may be a virtual machine, and then the first gateway device may acquire a fourth internet protocol address of a virtual machine management device corresponding to the virtual machine in the control plane information, and send the second communication information to the second network device through the virtual machine management device identified by the fourth internet protocol address. The virtual machine includes, but is not limited to, a cloud virtual machine, and when the virtual machine is a cloud virtual machine, the virtual machine management device corresponding to the virtual machine may be a parent machine of the cloud virtual machine. As shown in fig. 4, the second network device may be a cloud virtual machine 416, and then the first gateway device 411 may obtain, in the control plane information, a fourth internet protocol address of a parent machine 415 corresponding to the cloud virtual machine 416. For example, as shown in table 1, the internet protocol address of the cloud virtual machine 416 may be 10.1.1.1, and then according to the network identifier of the virtual private network in the control plane information and the correspondence between each network device and each gateway device, that is, according to the network identifier of the first virtual private network corresponding to the second network device in the control plane information being VPC-se:Sub>A and the internet protocol address 10.1.1.1 matching the network identifier VPC-se:Sub>A being in se:Sub>A one-to-one correspondence with the internet protocol address 172.16.20.1, the first gateway device may obtain, in the control plane information, the fourth internet protocol address 172.16.20.1 of the parent machine 415 corresponding to the cloud virtual machine 416, and send the second communication information to the cloud virtual machine 416 through the parent machine 415 identified by the fourth internet protocol address.
Optionally, before the first gateway device obtains the fourth internet protocol address of the virtual machine management device corresponding to the virtual machine in the control plane information, the first gateway device may further receive the control plane information sent by the VPC OSS 412.
In one possible implementation manner, after the first gateway device obtains the fourth internet protocol address of the virtual machine management device corresponding to the virtual machine in the control plane information, the first gateway device may perform Overlay encapsulation on the second communication information, that is, the first gateway device may enable the second communication information to carry the fourth internet protocol address of the virtual machine management device corresponding to the virtual machine, and send the second communication information to the virtual machine management device identified by the fourth internet protocol address. Then, the virtual machine management device may perform decapsulation processing on the received second communication information, and send the second communication information to the virtual machine. As shown in fig. 4, the virtual machine may be a cloud virtual machine 416, and the virtual machine management device may be a parent machine 415 corresponding to the cloud virtual machine 416. The second network device 411 may Overlay package the second communication information sent by the hosting server 413, that is, the first gateway device 411 may make the second communication information carry a fourth internet protocol address of the host 415 corresponding to the cloud virtual machine 416, and send the second communication information to the host 415 identified by the fourth internet protocol address. Then, the master 415 may perform decapsulation processing on the received second communication information, and send the second communication information to the cloud virtual machine 416 according to the control plane information.
Optionally, the second network device may send the fifth communication information to the first gateway device, and then the second gateway device may send the fifth communication information to the hosting server, and finally, the mutual access between the hosting server and the second network device is achieved, where the fifth communication information carries a sixth internet protocol address of the hosting server for receiving the fifth communication information. As shown in fig. 3, the second network device may be a hosting server 314, then the hosting server 314 may send the fifth communication to the first gateway device 311, and then the first gateway device 311 may send the fifth communication to the hosting server 313. As shown in fig. 4, the second network device may be a cloud virtual machine 416, and then the cloud virtual machine 416 may send the fifth communication information to a parent machine 416 corresponding to the cloud virtual machine 416, and then the parent machine may send the fifth communication information to the first gateway device 411 according to the control plane information sent by the VPC OSS412, and then the first gateway device 411 may send the fifth communication information to the hosting server 413. It may be appreciated that the access procedure of the second network device to the hosting server is similar to the access procedure of the hosting server to the second network device, and the specific implementation procedure may be referred to the related description of the above embodiment, which is not repeated here.
By the method, interaction between the hosting server and the second network device can be realized based on the first gateway device, and the second network device can be network devices which are accessed to the first gateway device and are not the hosting server, or can be cloud virtual machines and the like. By the method, interaction between the hosting server and network equipment in VLANs except the VLAN to which the hosting server belongs can be realized. According to the method, the hosting server can be connected to the public cloud network in a one-key mode, a private line is not needed to be connected to a cloud service provider, the cost of the hosting server for connecting to the public cloud network is low, and the hosting server can have the product function of the public cloud CVM through interaction of the hosting server and the cloud virtual machine, so that the hosting server is more convenient and efficient. In the cloud loading process of the tenant, the tenant can be enabled to be familiar with public cloud products quickly by using the hosting server, and the cloud loading speed of the tenant is increased. The cloud on the tenant can be understood as: the server of the tenant is hosted to a virtual private network.
Referring to fig. 6, fig. 6 is a schematic diagram of another server hosting system provided in an embodiment of the present application, and as shown in fig. 6, the server hosting system at least includes a hosting server 613, a first gateway device 611, and the like. Wherein the hosting server 613 is hosted to the first virtual private network 610, the first gateway device 611 is located in the first virtual private network 610. The hosting server 613 may interact with the internet 616 through the first gateway device 611, that is, the server hosting method may enable the hosting server to interact with the internet.
Referring to fig. 7, fig. 7 is a flowchart of another server hosting method provided in the embodiment of the present application, where the method may be applied to a first gateway device, a server hosting system to which the first gateway device belongs at least includes a hosting server and the first gateway device, the hosting server is hosted to a first virtual private network of a first tenant, and the first virtual private network includes at least the first gateway device. As shown in fig. 7, the server hosting method includes:
710. the hosting server sends third communication information to the first gateway device.
The hosting server may send third communication information to the first gateway device, wherein the third communication information carries a network address of the internet. As shown in fig. 6, the escrow server 613 may send third communication information to the first gateway device 611, the third communication information carrying a network address of the internet 616.
720. The first gateway device sends third communication information to each network device in the internet identified by the network address.
The first gateway device may send the third communication information to each network device in the internet identified by the network address after receiving the third communication information sent by the hosting server. As shown in fig. 6, the first gateway device 611 may send third communication information to each network device in the internet 616 identified by the network address.
In one possible implementation, the first gateway device may obtain the fifth internet protocol address of the address translation device in the control plane information, and send the third communication information to each network device in the internet identified by the network address through the address translation device identified by the fifth internet protocol address, where the address translation device may be a resilient public network internet protocol address (Elastic IP Address, EIP) cluster, a load balancing (Cloud Load Balancer, CLB) or a network address translation gateway (Network Address Translation Gateway, NATGW), and so on. As shown in fig. 6, the first gateway device 611 may acquire the fifth internet protocol address of the address translation device 615 in the control plane information transmitted by the VPC OSS612 and transmit the third communication information to the address translation device 615, and then the address translation device 615 may transmit the third communication information to each network device in the internet 616.
In one possible implementation, the third communication information carries a sixth internet protocol address of the hosting server, the sixth internet protocol address being a private network IP address. After the address conversion device receives the third communication information sent by the first gateway device, the address conversion device may convert a private network IP address carried by the third communication information into a public network IP address, that is, the address conversion device may convert a sixth internet protocol address of the hosting server carried by the third communication information into a public network IP address. Then, the address conversion device may send the third communication information to each network device in the internet identified by the network address through the correspondence between the public network IP address and the public network IP address of each network device in the internet identified by the network address. For example, as shown in fig. 6, the third communication information carries the sixth internet protocol address of the escrow server 613, that is, the third communication information carries the private network IP address of the escrow server 613. After the address conversion device 615 receives the third communication information sent by the first gateway device 611, the address conversion device 615 may convert a private network IP address carried by the third communication information into a public network IP address, that is, the address conversion device may convert a sixth internet protocol address of the hosting server 613 carried by the third communication information into a public network IP address. Then, the address conversion device 615 may send the third communication information to each network device in the internet 616 identified by the network address through the correspondence between the public network IP address and the public network IP address of each network device in the internet 616.
Optionally, the address translation device may translate the private network IP address to the public network IP address according to a translation rule, where the translation rule is sent to the address translation device by the VPC OSS in advance. For example, as shown in fig. 6, the VPC OSS612 may send the conversion rule to the address conversion device 615 in advance, and when the address conversion device receives the third communication information sent by the first gateway device 611, the address conversion device 615 may convert the private network IP address carried by the third communication information into the public network IP address according to the conversion rule.
Optionally, each network device in the internet may send the sixth communication information to the address translation device, and the address translation device may perform destination address translation (Destination Network Address Translation, DNAT) from a public network IP address to a private network IP address on a public network IP address carried by the sixth communication information, and send the sixth communication information to the first gateway device. The first gateway device may send the sixth communication information to the hosting server after receiving the sixth communication information sent by the address translation device. It may be appreciated that the access procedure of each network device in the internet identified by the network address to the hosting server is similar to the access procedure of each network device in the internet identified by the network address by the hosting server, and the specific implementation procedure may be referred to the relevant description of the above embodiment, which is not repeated herein.
Through the method, the hosting server can realize interaction with the Internet through the first gateway device.
Referring to fig. 8, fig. 8 is a schematic unit diagram of a server hosting device according to an embodiment of the present application. The server hosting device shown in fig. 8 may be used to perform some or all of the functions described above in the method embodiment depicted in fig. 2. The server hosting device may be the first gateway apparatus or may be a device in the first gateway apparatus. The server hosting system to which the first gateway device belongs at least comprises a hosting server, the first gateway device, the second gateway device and the first network device, wherein the hosting server is hosted to a first virtual private network of a first tenant, the first virtual private network at least comprises the first gateway device, the first network device corresponds to a second virtual private network of a second tenant, and the second virtual private network at least comprises the second gateway device. The logic structure of the device may include: a receiving unit 810, a processing unit 820, and a transmitting unit 830. Wherein:
a receiving unit 810, configured to receive first communication information sent by the hosting server, where the first communication information carries a first internet protocol address of a first network device used for receiving the first communication information;
A processing unit 820, configured to find a second internet protocol address of a second gateway device corresponding to the first network device identified by the first internet protocol address;
a transmitting unit 830, configured to transmit the first communication information to the first network device through the second gateway device identified by the second internet protocol address.
In a possible implementation manner, the receiving unit 810 is further configured to receive control plane information sent by a controller in a first virtual private network, where the control plane information includes network identifiers of each virtual private network, an internet protocol address of a gateway device in each virtual private network, and an internet protocol address of a network device corresponding to each virtual private network; the processing unit 820 is configured to, when looking up the second internet protocol address of the second gateway device corresponding to the first network device identified by the first internet protocol address: searching the network identification of the virtual private network corresponding to the first network equipment identified by the first Internet protocol address in the control plane information; and acquiring a second internet protocol address of a second gateway device in the virtual private network identified by the network identification in the control plane information.
In another embodiment, the server hosting device shown in FIG. 8 may be used to perform some or all of the functions described above in the method embodiment depicted in FIG. 5. The server hosting device may be the first gateway apparatus or may be a device in the first gateway apparatus. The server hosting system to which the first gateway device belongs at least comprises a hosting server, the first gateway device and a second network device, wherein the hosting server is hosted to a first virtual private network of a first tenant, the first virtual private network at least comprises the first gateway device, and the second network device corresponds to the first virtual private network. The logic structure of the device may include: the receiving unit 810 and the transmitting unit 830. Wherein:
a receiving unit 810, configured to receive second communication information sent by the hosting server, where the second communication information carries a third internet protocol address of a second network device used for receiving the second communication information;
a sending unit 830, configured to send the second communication information to the second network device.
In one possible implementation, the apparatus may further include a processing unit 820; the second network device is a virtual machine; the processing unit 820 is configured to obtain a fourth internet protocol address of a virtual machine management device corresponding to the virtual machine from the control plane information; the sending unit 830, when sending the second communication information to the second network device, is configured to: and sending the second communication information to the second network device through the virtual machine management device identified by the fourth internet protocol address.
In another embodiment, the server hosting device shown in FIG. 8 may be used to perform some or all of the functions described above in the method embodiment depicted in FIG. 7. The server hosting device may be the first gateway apparatus or may be a device in the first gateway apparatus. The server hosting system to which the first gateway device belongs at least comprises a hosting server and the first gateway device, wherein the hosting server is hosted to a first virtual private network of a first tenant, and the first virtual private network at least comprises the first gateway device. The logic structure of the device may include: the receiving unit 810 and the transmitting unit 830. Wherein:
a receiving unit 810, configured to receive third communication information sent by the hosting server, where the third communication information carries a network address of the internet;
and a sending unit 830, configured to send the third communication information to each network device in the internet identified by the network address.
In one possible implementation, the apparatus may further include a processing unit 820; the processing unit 820 is configured to obtain a fifth internet protocol address of the address translation device from the control plane information; the sending unit 830 is configured to, when sending the third communication information to each network device in the internet identified by the network address, send the third communication information to: and sending the third communication information to each network device in the Internet through the address conversion device identified by the fifth Internet protocol address.
It may be understood that the functions of each functional unit of the server hosting device in the embodiments of the present application may be specifically implemented according to the method in the embodiments of the method, and the specific implementation process may refer to the related description of the embodiments of the method, which is not repeated herein.
Referring to fig. 9, fig. 9 is a simplified schematic diagram of an entity structure of a gateway device 900 according to an embodiment of the present application, where the gateway device 900 includes a processor 910, a memory 920, an input interface 930, and an output interface 940, and the processor 910, the memory 920, the input interface 930, and the output interface 940 are connected by one or more communication buses.
The processor 910 is configured to support performing the corresponding functions of the first gateway device in the method embodiment of fig. 2. The processor 910 may be a central processing unit (central processing unit, CPU), a network processor (network processor, NP), a hardware chip, or any combination thereof.
The memory 920 is used for storing program codes and the like. Memory 920 may include volatile memory (RAM), such as random access memory (random access memory); the memory 920 may also include a non-volatile memory (non-volatile memory), such as a read-only memory (ROM), a flash memory (flash memory), a hard disk (HDD) or a Solid State Drive (SSD); memory 920 may also include combinations of the above types of memory.
The input interface 930 is used to receive data, information, messages, etc., and may also be described as a receiver, receiving circuitry, etc. Input interface 930 may include a standard wired interface or a wireless interface, etc., and may be controlled by processor 910 to receive data; for example, the input interface 930 is used to receive the first communication information and the like sent by the hosting server.
Output interface 940 is used to send data, information, messages, etc., and may be controlled by processor 910 to send information; for example, the output interface 940 is used to send the first communication information to the first network device via the second gateway device identified by the second internet protocol address.
In this embodiment of the present application, the server hosting system to which the gateway device 900 belongs includes at least a hosting server, the gateway device 900, a second gateway device, and a first network device, where the hosting server is hosted to a first virtual private network of a first tenant, the first virtual private network includes at least the gateway device 900, the first network device corresponds to a second virtual private network of a second tenant, the second virtual private network includes at least the second gateway device, and the processor 910 may call the program code stored in the memory 920 to perform the following operations:
Receiving first communication information sent by the hosting server through the input interface 930, wherein the first communication information carries a first internet protocol address of a first network device for receiving the first communication information;
searching a second internet protocol address of a second gateway device corresponding to the first network device identified by the first internet protocol address;
the first communication is sent to the first network device via the output interface 940 via the second gateway device identified by the second internet protocol address.
In one possible implementation, the processor 910 may also call program code stored in the memory 920 to:
receiving control plane information sent by a controller in a first vpn through the input interface 910, where the control plane information includes network identities of vpn's, ip addresses of gateway devices in vpn's and ip addresses of network devices corresponding to vpn's;
the processor 910 may specifically perform the following operations when looking up the second internet protocol address of the second gateway device corresponding to the first network device identified by the first internet protocol address:
Searching the network identification of the virtual private network corresponding to the first network equipment identified by the first Internet protocol address in the control plane information; and acquiring a second internet protocol address of a second gateway device in the virtual private network identified by the network identification in the control plane information.
In another embodiment, the processor 910 in the gateway device 900 shown in fig. 9 is configured to support performing the corresponding functions of the first gateway device in the method embodiment of fig. 5. The server hosting system to which the gateway device 900 belongs at least includes a hosting server, the gateway device 900 and a second network device, the hosting server is hosted to a first virtual private network of a first tenant, the first virtual private network includes at least the gateway device 900, and the second network device corresponds to the first virtual private network. The processor 910 may also call program code stored in the memory 920 to:
receiving second communication information sent by the hosting server through the input interface 930, wherein the second communication information carries a third internet protocol address of a second network device for receiving the second communication information;
the second communication information is sent to the second network device via the output interface 940.
In one possible implementation, the second network device is a virtual machine; the processor 910 may also call program code stored in the memory 920 to:
acquiring a fourth internet protocol address of virtual machine management equipment corresponding to the virtual machine from the control plane information;
the processor 910 may specifically perform the following operations when sending the second communication information to the second network device through the output interface 940: and sending the second communication information to the second network device through the virtual machine management device identified by the fourth internet protocol address.
In another embodiment, the processor 910 in the gateway device 900 shown in fig. 9 is configured to support performing the corresponding functions of the first gateway device in the method embodiment of fig. 7. The server hosting system to which the gateway device 900 belongs includes at least a hosting server and the gateway device 900, the hosting server is hosted to a first virtual private network of a first tenant, the first virtual private network includes at least the gateway device 900, and the processor 910 may further invoke program code stored in the memory 920 to:
receiving third communication information sent by the hosting server through the input interface 930, wherein the third communication information carries a network address of the internet;
The third communication information is sent to each network device in the internet identified by the network address through the output interface 940.
In one possible implementation, the processor 910 may also call program code stored in the memory 920 to: acquiring a fifth internet protocol address of the address translation equipment from the control plane information; when the third communication information is transmitted to each network device in the internet identified by the network address through the output interface 940, the third communication information is transmitted to each network device in the internet through the address translation device identified by the fifth internet protocol address.
In the foregoing embodiments, the descriptions of the embodiments are focused on, and for those portions of one embodiment that are not described in detail, reference may be made to the related descriptions of other embodiments.
The steps in the method of the embodiment of the application can be sequentially adjusted, combined and deleted according to actual needs.
The units in the processing device of the embodiment of the application can be combined, divided and deleted according to actual needs.
In the above embodiments, it may be implemented in whole or in part by software, hardware, firmware, or any combination thereof. When implemented in software, may be implemented in whole or in part in the form of a computer program product. The computer program product includes one or more computer instructions. When the computer program instructions are loaded and executed on a computer, the processes or functions in accordance with embodiments of the present application are produced in whole or in part. The computer may be a general purpose computer, a special purpose computer, a network of computers, or other programmable devices. The computer instructions may be stored in a computer-readable storage medium or transmitted from one computer-readable storage medium to another computer-readable storage medium, for example, the computer instructions may be transmitted from one website, computer, server, or data center to another website, computer, server, or data center by a wired (e.g., coaxial cable, fiber optic, digital subscriber line), or wireless (e.g., infrared, wireless, microwave, etc.). Computer readable storage media can be any available media that can be accessed by a computer or data storage devices, such as servers, data centers, etc., that contain an integration of one or more available media. Usable media may be magnetic media (e.g., floppy disks, storage disks, magnetic tape), optical media (e.g., DVD), or semiconductor media (e.g., solid State Disk (SSD)), among others.
The present application also provides a computer storage medium having stored thereon a computer program which, when executed by a processor, implements the steps of the method as described above.
The present embodiments also provide a computer program product comprising computer program code which, when run on a computer, causes the computer to perform the method as described in the various possible embodiments above.
The embodiment of the application also provides a chip, which comprises a memory and a processor, wherein the memory is used for storing a computer program, and the processor is used for calling and running the computer program from the memory, so that a device provided with the chip executes the method in the various possible embodiments.
Other embodiments of the present application will be apparent to those skilled in the art from consideration of the specification and practice of the application disclosed herein. The embodiments of the present application are intended to cover any variations, uses, or adaptations of the application following, in general, the principles of the application and including such departures from the present disclosure as come within known or customary practice within the art to which the application pertains. It is intended that the specification and examples be considered as exemplary only, with a true scope and spirit of the application being indicated by the following claims.
It is to be understood that the present application is not limited to the precise arrangements and instrumentalities shown in the drawings, which have been described above, and that various modifications and changes may be effected without departing from the scope thereof. The scope of the application is limited only by the appended claims.
Finally, it should be noted that: the above embodiments are only for illustrating the technical solution of the present application, and not for limiting the same; although the present application has been described in detail with reference to the foregoing embodiments, it should be understood by those of ordinary skill in the art that: the technical scheme described in the foregoing embodiments can be modified or some or all of the technical features thereof can be replaced by equivalents; such modifications and substitutions do not depart from the spirit of the corresponding technical solutions from the scope of the technical solutions of the embodiments of the present application.
Claims (6)
1. A server hosting method, wherein the method is applied to a first gateway device, a server hosting system to which the first gateway device belongs includes at least a hosting server, the first gateway device, a second gateway device, and a first network device, the hosting server is hosted to a first virtual private network of a first tenant, the first virtual private network includes at least the first gateway device, the first network device corresponds to a second virtual private network of a second tenant, and the second virtual private network includes at least the second gateway device, the method includes:
Receiving first communication information sent by a hosting server, wherein the first communication information carries a first internet protocol address of first network equipment for receiving the first communication information;
searching a second internet protocol address of a second gateway device corresponding to the first network device identified by the first internet protocol address;
and sending the first communication information to the first network device through a second gateway device identified by the second internet protocol address.
2. The method according to claim 1, wherein the method further comprises:
receiving control plane information sent by a controller in the first virtual private network, wherein the control plane information comprises network identifications of all virtual private networks, and an internet protocol address of gateway equipment in each virtual private network and an internet protocol address of network equipment corresponding to each virtual private network;
the searching for the second internet protocol address of the second gateway device corresponding to the first network device identified by the first internet protocol address includes:
searching the network identification of the virtual private network corresponding to the first network equipment identified by the first Internet protocol address in the control plane information;
And acquiring a second internet protocol address of a second gateway device in the virtual private network identified by the network identification in the control plane information.
3. A server hosting system, the system comprising at least a hosting server, a first gateway device, a second gateway device, and a first network device, the hosting server being hosted to a first virtual private network of a first tenant, the first virtual private network comprising at least the first gateway device, the first network device corresponding to a second virtual private network of a second tenant, the second virtual private network comprising at least the second gateway device, wherein:
the hosting server sends first communication information to the first gateway device, wherein the first communication information carries a first internet protocol address of the first network device;
the first gateway device searches a second internet protocol address of a second gateway device corresponding to the first network device identified by the first internet protocol address;
the first gateway device sends the first communication information to a second gateway device identified by the second internet protocol address;
The second gateway device sends the first communication to a first network device identified by the first internet protocol address.
4. Server hosting device, characterized by comprising means for performing the method of claim 1 or 2.
5. A gateway device comprising a processor, a memory, wherein the memory is configured to store a computer program which, when executed by the processor, implements the method of claim 1 or 2.
6. A computer readable storage medium storing one or more instructions which when executed by a processor implement the method of claim 1 or 2.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202110555356.1A CN114679370B (en) | 2021-05-20 | 2021-05-20 | Server hosting method, device, system and storage medium |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202110555356.1A CN114679370B (en) | 2021-05-20 | 2021-05-20 | Server hosting method, device, system and storage medium |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN114679370A CN114679370A (en) | 2022-06-28 |
| CN114679370B true CN114679370B (en) | 2024-01-12 |
Family
ID=82070774
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN202110555356.1A Active CN114679370B (en) | 2021-05-20 | 2021-05-20 | Server hosting method, device, system and storage medium |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN114679370B (en) |
Families Citing this family (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN117896424A (en) * | 2022-10-09 | 2024-04-16 | 华为云计算技术有限公司 | System, method and device for configuring server-free function |
Citations (13)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| WO2011103840A2 (en) * | 2011-04-19 | 2011-09-01 | 华为技术有限公司 | Virtual private cloud connection method and tunnel proxy server |
| CN103563329A (en) * | 2011-06-07 | 2014-02-05 | 惠普发展公司，有限责任合伙企业 | Scalable multi-tenant network architecture for virtualized datacenters |
| CN103581277A (en) * | 2012-08-09 | 2014-02-12 | 中兴通讯股份有限公司 | Distributing method and system of data center virtualization network address and directory server |
| CN103916492A (en) * | 2014-04-11 | 2014-07-09 | 深信服网络科技（深圳）有限公司 | Network device access control method and device |
| WO2014186957A1 (en) * | 2013-05-22 | 2014-11-27 | 运软网络科技(上海)有限公司 | Multi-tenant network system |
| US9813303B1 (en) * | 2017-03-30 | 2017-11-07 | IP Company 8, LLC | Enabling cross-realm authentication between tenant and cloud service provider |
| CN107342895A (en) * | 2017-06-26 | 2017-11-10 | 网宿科技股份有限公司 | A kind of network optimized approach of multi-tenant, system, computing device and storage medium |
| CN107872542A (en) * | 2016-09-27 | 2018-04-03 | 阿里巴巴集团控股有限公司 | The method and the network equipment of a kind of data transfer |
| CN108566445A (en) * | 2018-03-15 | 2018-09-21 | 华为技术有限公司 | A kind of message transmitting method and device |
| CN108933702A (en) * | 2018-08-01 | 2018-12-04 | 长沙龙生光启新材料科技有限公司 | A method of remote service is provided |
| CN109245984A (en) * | 2018-07-13 | 2019-01-18 | 华为技术有限公司 | A kind of message transmitting method, a kind of information processing method and its relevant device |
| CN109412924A (en) * | 2009-11-06 | 2019-03-01 | 微软技术许可有限责任公司 | Using the covering for protecting the connection of across a network |
| CN110336730A (en) * | 2019-07-09 | 2019-10-15 | 腾讯科技（深圳）有限公司 | A kind of network system and data transmission method |
Family Cites Families (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US10044678B2 (en) * | 2011-08-31 | 2018-08-07 | At&T Intellectual Property I, L.P. | Methods and apparatus to configure virtual private mobile networks with virtual private networks |
-
2021
- 2021-05-20 CN CN202110555356.1A patent/CN114679370B/en active Active
Patent Citations (13)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN109412924A (en) * | 2009-11-06 | 2019-03-01 | 微软技术许可有限责任公司 | Using the covering for protecting the connection of across a network |
| WO2011103840A2 (en) * | 2011-04-19 | 2011-09-01 | 华为技术有限公司 | Virtual private cloud connection method and tunnel proxy server |
| CN103563329A (en) * | 2011-06-07 | 2014-02-05 | 惠普发展公司，有限责任合伙企业 | Scalable multi-tenant network architecture for virtualized datacenters |
| CN103581277A (en) * | 2012-08-09 | 2014-02-12 | 中兴通讯股份有限公司 | Distributing method and system of data center virtualization network address and directory server |
| WO2014186957A1 (en) * | 2013-05-22 | 2014-11-27 | 运软网络科技(上海)有限公司 | Multi-tenant network system |
| CN103916492A (en) * | 2014-04-11 | 2014-07-09 | 深信服网络科技（深圳）有限公司 | Network device access control method and device |
| CN107872542A (en) * | 2016-09-27 | 2018-04-03 | 阿里巴巴集团控股有限公司 | The method and the network equipment of a kind of data transfer |
| US9813303B1 (en) * | 2017-03-30 | 2017-11-07 | IP Company 8, LLC | Enabling cross-realm authentication between tenant and cloud service provider |
| CN107342895A (en) * | 2017-06-26 | 2017-11-10 | 网宿科技股份有限公司 | A kind of network optimized approach of multi-tenant, system, computing device and storage medium |
| CN108566445A (en) * | 2018-03-15 | 2018-09-21 | 华为技术有限公司 | A kind of message transmitting method and device |
| CN109245984A (en) * | 2018-07-13 | 2019-01-18 | 华为技术有限公司 | A kind of message transmitting method, a kind of information processing method and its relevant device |
| CN108933702A (en) * | 2018-08-01 | 2018-12-04 | 长沙龙生光启新材料科技有限公司 | A method of remote service is provided |
| CN110336730A (en) * | 2019-07-09 | 2019-10-15 | 腾讯科技（深圳）有限公司 | A kind of network system and data transmission method |
Non-Patent Citations (4)
| Title |
|---|
| Design and Implementation of an Enhanced VPN Isolation Gateway;Lin Shaofeng;《2017 International Conference on Robots & Intelligent System (ICRIS)》;全文 * |
| Windows中的网络连接和数据传输管理研究;卿斯汉;;信息网络安全(第05期);全文 * |
| 基于私有云计算的信息交互模型研究;苗壮;王亚平;;电子设计工程(第18期);全文 * |
| 面向租户的虚拟机定制化组网技术;庄子睿;王敬宇;徐童;;电信科学(第10期);全文 * |
Also Published As
| Publication number | Publication date |
|---|---|
| CN114679370A (en) | 2022-06-28 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| US11659441B2 (en) | Load balance method and apparatus thereof | |
| US10547463B2 (en) | Multicast helper to link virtual extensible LANs | |
| CN107070691B (en) | Cross-host communication method and system of Docker container | |
| CN108566445B (en) | Message transmission method and device | |
| CN107872542B (en) | Data transmission method and network equipment | |
| US9274825B2 (en) | Virtualization gateway between virtualized and non-virtualized networks | |
| CN111865621B (en) | Method and device for accessing gateway | |
| US9832136B1 (en) | Streaming software to multiple virtual machines in different subnets | |
| CN107094110B (en) | DHCP message forwarding method and device | |
| US11265244B2 (en) | Data transmission method, PNF SDN controller, VNF SDN controller, and data transmission system | |
| CN110012118B (en) | Method and controller for providing Network Address Translation (NAT) service | |
| CN109474713B (en) | Message forwarding method and device | |
| CN112968965B (en) | Metadata service method, server and storage medium for NFV network node | |
| CN112583655A (en) | Data transmission method and device, electronic equipment and readable storage medium | |
| CN115442100A (en) | Data access method based on multi-node zero-trust gateway and related equipment | |
| CN114679370B (en) | Server hosting method, device, system and storage medium | |
| CN109450768B (en) | Method for interconnecting containers and system for interconnecting containers | |
| CN114025009A (en) | Method, system, proxy server and device for forwarding request | |
| CN104426816A (en) | Virtual machine communication method and device | |
| CN114157632B (en) | Network isolation method, device, equipment and storage medium | |
| CN110875884B (en) | Traffic migration system, data processing method and device | |
| CN105591922A (en) | Message transmission method and device | |
| CN116582516B (en) | Data transmission method, device, system, medium and program product | |
| US12095663B2 (en) | Concurrently supporting internet protocol version 6 (IPv6) and internet protocol version 4 (IPv4) in a cloud-managed wireless telecommunication network | |
| US20230328590A1 (en) | Systems and methods for a pass-through edge data center (p-edc) in a wireless telecommunication network |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant |