KR102131083B1 - System and method for cloud based hosting service - Google Patents

Abstract

Embodiments of the present invention, the virtual server generation unit for generating a virtual server at the request of the virtual server administrator, set the domain name and the private network IP address of the generated virtual server and associate the domain name with the private network IP address to register in the database A virtual server management unit, a connection request reception unit for receiving connection request information including a domain name for a virtual server from a client, a virtual server search unit for searching the private network IP address associated with the received domain name from the database, and the searched private network It provides a cloud-based hosting system including a communication mediator that mediates communication between a virtual server corresponding to an IP address and the client.
Accordingly, embodiments of the present invention can provide a variety of services, such as HTTP, HTTPS, MySQL, Mariadb, RDP, etc. to the client without allocating the public network IP address to the virtual server, and only the proxy server is assigned the public network IP address. Security of the private network to which it belongs may be strengthened. In addition, since the public network IP address may not be used for the virtual server, the number of virtual servers is not limited and the cost can be reduced.

Description

Cloud-based hosting system and method{SYSTEM AND METHOD FOR CLOUD BASED HOSTING SERVICE}

The present invention relates to a cloud-based hosting system and method, and more particularly, to a cloud-based hosting system and method for providing a hosting service to a virtual server with no public network IP address set.

Cloud-based hosting can mean a service that hosts a website or development environment, etc. through a virtual server, so that users can use computing resources easily and scalable when users need from a network of physical servers in a cloud computing environment. have.

Here, the virtual server may mean a virtual machine equipped with a server function, and the virtual machine may mean a computer environment emulated software, that is, software emulating a computer, and an operating system on the virtual machine. I can install and run the application.

Meanwhile, the hypervisor may be computer software, firmware, or hardware that creates and runs a virtual machine (virtual server). The hypervisor may provide a virtual operating platform to the operating system of one or more virtual machines (virtual servers) and manage the execution of the operating system of the virtual machine (virtual servers).

Let's look at the related art.

Korean Registered Patent No. 10-1680702 relates to a cloud-based web hosting system, builds a cloud infrastructure to manage hardware resources based on an open source platform, cloud stack, and manages the resources of the cloud infrastructure to manage web hosting services or A host device running an administrator program that provides a cloud service; Connect to the host device and transmit a VM usage request signal for a virtual machine (VM) so that hardware resources are controlled by a hypervisor through authentication. When a VM creation completion signal is transmitted from the host device, a web hosting environment At least one client terminal provided with a service through a cloud virtual machine suitable for; And a function server for setting DNS by using a web domain name service (DNS) auto-configuration function and a public IP auto-allocation function through the VM use application signal in cooperation with the host device. .

As such, the prior art assigns public network (public) IP addresses to all virtual servers when performing cloud-based web hosting.

However, since the number of public network IP addresses is limited, the number of virtual servers that can be serviced in the prior art may be limited and the cost may be increased by using multiple public network IP addresses.

In order to solve the above-described problems, embodiments of the present invention have an object to provide a cloud-based hosting system capable of providing a virtual server service to a client without giving a public IP address to the virtual server.

In addition, embodiments of the present invention have an object to provide a cloud-based hosting system that dynamically allocates a private network IP address to a virtual server.

In addition, embodiments of the present invention has an object to provide a cloud-based hosting system that transmits corresponding connection response information according to the system environment of the virtual server.

In addition, embodiments of the present invention have an object to provide a cloud-based hosting system for efficiently setting the domain name of the virtual server.

One embodiment of the present invention for achieving the above object is a virtual server generating unit for generating a virtual server at the request of the virtual server administrator; A virtual server management unit that sets a domain name and a private network IP address of the generated virtual server and associates the domain name with the private network IP address to register in the database; A connection request receiving unit for receiving connection request information including a domain name for a virtual server from a client; A virtual server search unit searching for a private network IP address associated with the received domain name from the database; And it provides a cloud-based hosting system including a communication medium for mediating communication between the virtual server corresponding to the searched private network IP address and the client.

In one embodiment, the virtual server management unit registers the virtual server port number corresponding to the generated service type and service type of the virtual server in the database by associating it with the domain name, and the connection request receiving unit is a virtual server from a client. Receive connection request information including a service type for, the virtual server search unit retrieves the virtual server port number corresponding to the received service type from the database, and the communication medium uses the searched virtual server port number By doing so, it is possible to mediate communication between the virtual server and the client.

In one embodiment, the virtual server management unit may register the change in the database when the domain name, private network IP address, service type, or virtual server port number corresponding to the service type of the created virtual server is changed.

In one embodiment, the virtual server management unit sets the domain name of the created virtual server and stores it in a database, and the virtual server search unit cannot retrieve a private network IP address associated with the received domain name from the database or When the generated virtual server wants to communicate through a private network or a public network, it can set the private network IP address of the created virtual server and associate the stored domain name with the private network IP address to register in the database.

In one embodiment, the virtual server management unit may retrieve the private network IP address set in the virtual server when the virtual server does not communicate for a specific time.

In one embodiment, the connection request receiving unit receives connection request information that does not include the domain name for the virtual server from the client, and the connection request information is distinguished according to the system environment of the virtual server to which the client is connected, and the cloud The base hosting system may include a connection request counter that transmits connection response information corresponding to the received connection request information to a client according to the system environment of the virtual server to be accessed.

In one embodiment, the upper domain name of the created virtual server may be set identically.

In addition, another embodiment of the present invention for achieving the above object is a virtual server generating step of generating a virtual server at the request of the virtual server administrator; A virtual server registration step of setting a domain name and a private network IP address of the generated virtual server and associating the domain name with the private network IP address in the database; A connection request reception step of receiving connection request information including a domain name for a virtual server from a client; A virtual server search step of searching for a private network IP address associated with the received domain name from the database; And a communication mediating step of mediating communication between the virtual server corresponding to the searched private network IP address and the client.

As described above, embodiments of the present invention, the virtual server generation unit for generating a virtual server at the request of the virtual server administrator, set the domain name and private network IP address of the generated virtual server and associate the domain name with the private network IP address Virtual server management unit to register in the database, connection request receiving unit to receive connection request information including the domain name for the virtual server from the client, virtual server search unit to retrieve the private network IP address associated with the received domain name from the database And by providing a cloud-based hosting system including a communication medium for mediating communication between the virtual server corresponding to the searched private network IP address and the client, the virtual server may not use the public network IP address, so the number of virtual servers You can save money without being limited. In addition, it is possible to provide various services such as HTTP, HTTPS, MySQL, Mariadb, RDP, etc. to clients even without assigning the public network IP address to the virtual server, and only the proxy server is assigned the public network IP address. Can be strengthened.

In addition, in the embodiments of the present invention, the virtual server management unit registers a virtual server port number corresponding to the service type and service type of the generated virtual server with a domain name and registers it in a database, and the connection request receiving unit connects the virtual server with The connection request information including the service type is received, the virtual server search unit searches the virtual server port number corresponding to the service type received from the database, and the communication media unit uses the searched virtual server port number to determine the connection between the virtual server and the client. By mediating the communication, the public IP address of the virtual server may not be used, so the number of virtual servers is not limited and the cost can be reduced.

In addition, embodiments of the present invention, the virtual server management unit registers the changes in the database when the virtual server port number corresponding to the domain name, private network IP address, service type or service type of the generated virtual server is changed, thereby enabling the virtual server. Since the public network IP address may not be used, the number of virtual servers is not limited and the cost can be reduced.

In addition, in the embodiments of the present invention, the virtual server management unit sets the domain name of the generated virtual server and stores it in the database, and the virtual server search unit fails to retrieve the private network IP address associated with the domain name received from the database or creates the virtual When a server wants to communicate through a private network or a public network, by setting the private network IP address of the created virtual server and associating the saved domain name with the private network IP address in the database, the number of private network IP addresses is limited and the virtual server It can solve the problem that the number is limited.

In addition, in the embodiments of the present invention, the virtual server management unit recovers the private network IP address set in the virtual server when the virtual server does not communicate for a specific time, thereby limiting the number of private network IP addresses and limiting the number of virtual servers. Can solve the problem.

In addition, embodiments of the present invention receive connection request information that does not include the domain name for the virtual server from the client, the connection request information is distinguished according to the system environment of the virtual server to which the client is connected, and the received connection request information By sending the corresponding connection response information to the client according to the system environment of the virtual server to be connected to, the connection between the virtual server and the client according to the system environment of the virtual server to be specified even before the virtual server is specified through the domain name. This can be done properly and to provide various services according to various system environments of the virtual server 120.

In addition, according to embodiments of the present invention, by setting the upper domain name of the generated virtual server to be the same, it is possible to save the cost associated with domain name registration and to quickly search the public network IP address of the proxy server 140.

In addition, embodiments of the present invention, a virtual server generation step of generating a virtual server at the request of a virtual server administrator, the domain name and the private network IP address of the generated virtual server is set, and the domain name and the private network IP address are associated with the database. Virtual server registration step to register, a connection request reception step to receive connection request information including a domain name for a virtual server from a client, and a virtual server search step to search a private network IP address associated with the received domain name from the database And by providing a cloud-based hosting method comprising a communication mediation step of mediating communication between the virtual server corresponding to the searched private network IP address and the client, the public server IP address may not be used for the virtual server, so the number of virtual servers Is not limited and can save money.

It is not limited to the above-mentioned effects, and other effects not mentioned can be clearly understood by those skilled in the art from the following description.

1 is a view showing an example of a cloud-based hosting system according to the present invention by way of example.
2 is a block diagram illustrating an example of a cloud-based hosting system according to the present invention.
3 is a diagram illustrating an example of a database data structure according to the present invention.
4 is a diagram illustrating an example of a cloud-based hosting method according to the present invention.
5 is a diagram illustrating an example of the operation of the cloud-based hosting system according to the present invention.
6 is a diagram illustrating another example of the operation of the cloud-based hosting system according to the present invention.
7 is a diagram showing another example of the operation of the cloud-based hosting system according to the present invention by way of example.
8 is a diagram illustrating an example of providing an http service.
9 is a diagram showing an example of providing http and https services by way of example.
10 is a view showing an example of a proxy server according to the present invention by way of example.

Since the description of the present invention is merely embodiments for structural or functional description, the scope of the present invention should not be interpreted as being limited by the embodiments described in the text. That is, since the present embodiments can be variously changed and have various forms, it should be understood that the scope of the present invention includes equivalents capable of realizing technical ideas.

In addition, the purpose or effect presented in the present invention does not mean that a specific embodiment should include all of them or only such an effect, and the scope of the present invention should not be understood as being limited thereby.

In addition, the accompanying drawings are provided to help understanding of the present invention, and provide embodiments with detailed description. However, the technical features of the present invention are not limited to specific drawings, and the features disclosed in each drawing may be combined with each other to form a new embodiment.

The cloud-based hosting system disclosed in the following embodiments will be described in more detail with reference to each drawing.

1 is a view showing an example of a cloud-based hosting system according to the present invention by way of example.

Referring to FIG. 1, the cloud-based hosting system 100 according to an embodiment may include a cloud manager 110, a virtual server 120, a database 130, and a proxy server 140.

In addition, the cloud manager 110, the virtual server 120, the database 130 and the proxy server 140 may communicate with each other through a private network. Here, a private network may refer to a network using a private IP address space in the Internet addressing architecture.

In addition, the cloud manager 110 may communicate with the virtual server manager terminal 200 through the public network, and the proxy server 140 may communicate with the client terminal 300 through the public network.

Here, the virtual server manager may mean a subject that creates or manages the virtual server 120 to use the cloud-based hosting service, and the client refers to a service such as a website or development environment provided by the virtual server 120. It may mean a subject who wants to access the virtual server 120 for use.

When the virtual server manager creates the virtual server 120, the virtual server manager may mean a tenant in the sense that some of the computing power of one physical server is used through the virtual server 120. Here, the tenant may mean a group of virtual server administrators who can use the same virtual server 120.

Meanwhile, the multi-tenant may mean splitting the computing power of one physical server into multiple virtual servers 120 so that multiple tenants can independently use one physical server.

Hereinafter, the virtual server manager and the virtual server manager terminal 200 are used interchangeably, and the client and the client terminal 300 are used interchangeably.

In addition, here, the terminal is one of a desktop, laptop, mobile phone, smart phone (2G/3G/4G/LET, smart phone), PMP (Portable Media Player), PDA (Personal Digital Assistant) and tablet PC (Tablet PC) Can be

Also, here, the public network may refer to a network using a public IP address space in the Internet addressing architecture.

2 is a block diagram illustrating an example of a cloud-based hosting system according to the present invention.

Referring to FIG. 2, the cloud-based hosting system 100 according to an embodiment includes a cloud manager 110, a virtual server 120, a database 130, and a proxy server 140 as shown in FIG. 1. Can be configured.

The cloud manager 110 may be connected to the virtual server 120, may communicate with the database 130 through a private network, and may communicate with the virtual server manager terminal 200 through a public network. The cloud manager 110 may include a virtual server manager interface 112, a virtual server creation unit 114, and a virtual server management unit 116.

The virtual server manager interface 112 may provide a communication interface so that the virtual server manager terminal 120 can communicate with the cloud manager 110 or the virtual server 120 through a public network. Here, the communication interface may include a hardware interface for data transmission and reception or a software protocol interface.

For example, the virtual server manager interface 112 may provide a web server function so that the virtual server manager 200 can communicate with the cloud manager 110 or the virtual server 120 using a web browser.

On the other hand, the virtual server manager 200 can directly connect to and communicate with the virtual server 120 without going through the virtual server manager interface 112 to manage the virtual server 120 or use a service provided by the virtual server 120. have.

The virtual server generating unit 114 may generate the virtual server 120 at the request of the virtual server manager 200 and assign a virtual server identifier to the generated virtual server 120.

The virtual server management unit 116 may manage the virtual server 120. Specifically, the domain name and the private network IP address of the generated virtual server 120 are set, and the domain name and the private network IP address are associated and registered in the database 130, or the domain name and the virtual server identifier are associated with the database 130. It can be registered or registered in the database 130 by associating a domain name with a private network IP address and a virtual server identifier.

Here, the domain name may mean a name registered in a domain name database constituting a domain name system (DNS) as a host name that identifies a computer on a network.

Specifically, the virtual server management unit 116 may set the domain name designated by the virtual server manager 200 as the domain name of the virtual server 120 and use any one of the available private network IP addresses as the private network IP of the virtual server 120 Can be set by address.

At this time, the virtual server management unit 116 may set the private network IP address immediately after the virtual server 120 is created, or the virtual server 120 may need to actually communicate through the public or private network. 120) can also set the private network IP address. The latter is related to FIG. 6.

In addition, the virtual server management unit 116 associates the virtual server port number corresponding to the service type and service type of the generated virtual server 120 with the domain name or virtual server identifier of the virtual server 120 to the database 130. You can register.

Here, the service type is a web service such as Hypertext Transfer Protocol (HTTP), Hypertext Transfer Protocol Secure (HTTPS), Remote Desktop Protocol (RDP) service, RDP service based on Secure Sockets Layer (SSL), MySQL or SSL based MySQL service, It can mean SSL-based PostgreSQL service, etc., and the service type can be expressed by the service port number where the service is provided. For example, since HTTP service is generally provided at port 80 of the web server, it can be expressed as port number 80. HTTPS service is generally provided at port 443 of the web server, so it can be expressed as port 443. RDP service is generally provided on port 443 of the RDP server, so it can be expressed as port number 3389.

In addition, here, the virtual server port number may mean a port number actually used by the virtual server 120 for a service type serviced by the virtual server 120. For example, for the HTTP service (No. 80), the virtual server 120 may use 8080 as the virtual server port number.

In addition, the virtual server management unit 116 may register the change in the database 130 when the domain name of the virtual server 120, the private network IP address, the service server or the virtual server port number corresponding to the service type is changed. .

3 is a diagram illustrating an example of a database data structure according to the present invention.

Referring to FIG. 3, the database 130 according to an embodiment includes a virtual server identifier, a domain name of the virtual server 120, a service port (service type), a private network IP address, and a virtual server port number corresponding to the service type. Can be saved.

Here, it will be described whether the virtual server identifier should be stored in the database 130.

The virtual server identifier is not necessarily stored in the database 130. Specifically, when the virtual server 120 can be identified by the domain name or the private network IP address set in the virtual server 120, the domain server or the private network IP address can replace the virtual server identifier, so the virtual server identifier database ( 130). However, in this case, the domain name or the private network IP address should be stored in the database 130.

On the other hand, when the private network IP address of the virtual server 120 is dynamically allocated, since the virtual server 120 cannot be identified by the private network IP address, it may be necessary to store the virtual server identifier in the database 130. However, even in this case, if the virtual server 120 can be identified by the domain name, there is no need to store the virtual server identifier in the database 130. Here, the case where the virtual server 120 can be identified by the domain name may mean a case where there is no duplicate virtual server 120 for the same domain name.

The dynamic allocation of the private network IP address is described in FIG. 6.

The virtual server 120 may be configured on the cloud manager 110 and one physical server or may be configured on a physically separate server.

The virtual server 120 may be generated by the virtual server creation unit 114 of the cloud manager 110 at the request of the virtual server manager 200 and managed by the virtual server management unit 116 of the cloud manager 110. .

In addition, the virtual server 120 may include a virtual server identifier, a domain name, a private network IP address, a service type, and a virtual server port number corresponding to the service type to provide a service to the client 300.

In addition, the virtual server 120 is the virtual server manager 200 connected to the cloud manager 100 or the virtual server 120 through the virtual server manager interface 112 of the cloud manager 110, operating system or application program. Can be managed by installing and running.

As shown in FIG. 3, the database 130 displays a virtual server identifier, a domain name of the virtual server 120, a service port (service type), a private network IP address, or a virtual server port number corresponding to a service port (service type). Can be saved.

The database 130 is a concept including a computer-readable recording medium, and includes not only a consultative database, but also a database having a broad meaning including data recording based on a file system. If the data can be extracted, it is included in the scope of the database referred to in the present invention.

The proxy server 140 may include a connection request receiving unit 142, a virtual server searching unit 144, a communication mediator 146, and a connection request counterpart 148.

The connection request receiving unit 142 may receive connection request information including a domain name for the virtual server 120 or a domain name and a service type from the client 300.

At this time, the domain name of the virtual server 120 may be included in the header of the HTTP message, and when using SSL/TLS (Transport Layer Security) such as HTTPS or SSL-based RDP, the SNI extension of the TLS Client Hello message is used. Can be included.

Here, SNI (Server Name Indication) is an extension of TLS, which is a computer network protocol, so that in the TLS handshaking process, a host having a hostname connected to a server can be transmitted to the server. SNI allows proxy servers with the same IP address and TCP port number to use multiple different certificates depending on the host name. Therefore, all servers that provide services through the proxy server perform on TLS without using the same certificate. It is possible to operate services of multiple servers.

Also, the connection request receiving unit 142 may receive connection request information that does not include the domain name for the virtual server 120 from the client 300. At this time, the connection request information may be distinguished according to the system environment of the virtual server 120 to which the client 300 intends to access. In this regard, the connection request counterpart 148, which will be described later, looks at it.

The virtual server search unit 144 may search the database 130 for a private network IP address associated with the domain name received by the connection request receiving unit 142.

Also, the virtual server search unit 144 may search the database 130 for a virtual server port number corresponding to the service type received by the connection request receiving unit 142.

In addition, the virtual server search unit 144, if the private network IP address associated with the domain name received from the connection request receiving unit 142 is not found in the database 130, the virtual server identifier corresponding to the received domain name database ( 130, the virtual server identifier transmitted from and received from the cloud manager 110 may be requested to set the private network IP address to the virtual server 120 having the virtual server identifier.

On the other hand, if the virtual server 120 can be identified as a domain name as described above, the virtual server identifier is unnecessary, so the virtual server search unit 144 is a private network IP associated with the domain name received from the connection request receiving unit 142. When the address is not retrieved from the database 130, the received domain name may be transmitted to the cloud manager 110 to request the virtual server 120 having the domain name to set the private network IP address.

The communication mediation unit 146 may mediate communication between the virtual server 120 and the client 300 corresponding to the searched private network IP address.

In addition, the communication mediation unit 146 may mediate communication between the virtual server 120 and the client 300 using the searched virtual server port number.

Specifically, the communication medium 146 establishes a connection with the service port of the virtual server 120 corresponding to the searched private network IP address and the searched virtual server port number, and receives the packet received from the client 300 in the virtual server 120 ) To the service port and forward the packet received from the service port of the virtual server 120 to the client 300.

The connection request response unit 148 may store connection response information corresponding to the connection request information according to the system environment of the virtual server 120 in advance.

In addition, the connection request correspondence unit 148 is the connection request information received from the connection request receiving unit 142 to the system environment of the virtual server 120 that the client 300 wants to connect to the connection request information that does not include a domain name. Accordingly, corresponding connection response information may be obtained using the stored information and may be transmitted to the client 300. Here, the system environment may mean an operating system, a server program, or environment setting values of the virtual server 120.

For example, the client 300 accesses the virtual server 120 k installed with the WINDOWS 7 operating system and receives the RDP service from the public server IP address of the proxy server 140 and the virtual servers 120 installed with the WINDOWS 7 operating system. RDP connection request information may be transmitted to the RDP port number a assigned to the RDP.

At this time, since the RDP connection request information does not include the domain name of the virtual server 120 k, the virtual server 120 cannot be specified as k, so the proxy server 140 sets the client 300 to the virtual server 120 k You cannot connect with.

However, since the proxy server 140 can know that the system environment of the virtual server 120 k to which the client 300 wants to access is WINDOWS 7 from the port number a included in the RDP connection request information, the connection of the proxy server 140 The request response unit 148 may transmit the RDP connection response information to be transmitted by the virtual server 120 k having the WINDOWS 7 operating system to the client 300 in place of the virtual server 120 k in response to the RDP connection request information.

On the other hand, since the above-mentioned matter is only one example, the system environment is not limited to the operating system, and information that allows the client 300 to distinguish the system environment of the virtual server 120 to be accessed is not limited to the port number. . In addition, this method can be applied to other services such as MySQL as well as RDP.

In this regard, it will be described in detail in FIG. 7.

4 is a diagram illustrating an example of a cloud-based hosting method according to the present invention.

4, the cloud-based hosting method 400 according to an embodiment includes a virtual server creation step (S410), a virtual server registration step (S420), a connection request reception step (S430), and a virtual server search step (S440). And it may be configured to include a communication mediation step (S450).

5 is a diagram illustrating an example of the operation of the cloud-based hosting system according to the present invention.

5, the cloud manager 110, the virtual server 120, the database 130, the proxy server 140, the virtual server manager terminal 200 and the client terminal 300 communicate with each other to the client 300 To each service, and each step may be matched with each step (S410 to S450) of FIG. 4.

4 and 5 in connection with the cloud-based hosting method 400.

In the virtual server creation step (S410 ), the cloud-based hosting system 100 may generate the virtual server 120 at the request of the virtual server manager 200. Specifically, the cloud manager 110 may generate the virtual server 120 by receiving the virtual server creation request information of the virtual server manager 200 including the domain name.

In the virtual server registration step (S420), the cloud-based hosting system 100 sets the domain name and the private network IP address of the generated virtual server 120 and associates the domain name with the private network IP address to register in the database 130. Can.

Specifically, the cloud manager 110 of the cloud-based hosting system 100 can set the domain name included in the virtual server creation request information as the domain name of the virtual server 120 and virtually use any one of the available private network IP addresses. It can be set to the private network IP address of the server 120.

At this time, the cloud manager 110 may set the private network IP address immediately after the virtual server 120 is created, or the virtual server 120 at a time when the virtual server 120 needs to actually communicate through the public network or the private network. ) Can also set the private network IP address. The latter is related to FIG. 6.

In addition, the cloud manager 110 may register the virtual server port number corresponding to the generated service type and service type of the virtual server 120 with the domain name of the virtual server 120 and register it in the database 130.

In addition, the cloud manager 110 may register the domain name and the public network IP address of the proxy server 140 together with the DNS server to convert the domain name into the public network IP address of the proxy server 140. However, if the domain name corresponds to a sub-domain of a domain name already registered to be converted to the public network IP address of the proxy server 140, registration with the DNS server may not be necessary.

In the connection request reception step (S430 ), the cloud-based hosting system 100 may receive connection request information including the domain name for the virtual server from the client 300. Specifically, the proxy server 140 of the cloud-based hosting system 100 is a port number that is generally used for the public network IP address and service type of the proxy server 140, and includes the domain name of the virtual server 120. Request information can be received.

However, if the client 300 does not know the public network IP address of the proxy server 140, the public network IP of the proxy server 140 registered in association with the domain name of the virtual server 120 from a domain name server (DNS) server. You can get the address first.

In the virtual server search step (S440 ), the cloud-based hosting system 100 may search the database 130 for the private network IP address associated with the domain name received in the connection request receiver 142.

In addition, the cloud-based hosting system 100 may search the database 130 for the virtual server port number corresponding to the service type received from the connection request receiving unit 142.

Specifically, the proxy server 140 displays the private network IP address and port number of the virtual server 120 corresponding to the domain name and service type included in the connection request information received from the connection request receiving unit 142 from the database 130. Can be obtained.

In the communication mediation step (S450), the cloud-based hosting system 100 may mediate communication between the virtual server corresponding to the searched private network IP address and the client.

In addition, the cloud-based hosting system 100 may mediate communication between the virtual server 120 and the client 300 using the searched virtual server port number.

Specifically, the cloud-based hosting system 100 establishes a connection with the service port of the virtual server 120 corresponding to the searched private network IP address and the searched virtual server port number, and receives packets received from the client 300 from the virtual server ( Forwarding to the service port of 120) and the packet received from the service port of the virtual server 120 may be forwarded to the client (300).

As described above, the cloud-based hosting system 100 gives the virtual server 120 a private network IP address rather than a public network IP address, and the proxy server 140 uses the domain name of the virtual server 120 to obtain a public network client 300 ) And mediating the communication between the virtual servers 120, the number of virtual servers 120 is not limited and cost can be reduced.

In addition, even if a public network IP address is not assigned to the virtual server 120, various services such as HTTP, HTTPS, MySQL, Mariadb, RDP, etc. can be provided to the client 300, and the public server IP address is assigned only to the proxy server. 120) Security of the private network to which it belongs may be strengthened.

6 is a diagram illustrating another example of the operation of the cloud-based hosting system according to the present invention.

Referring to FIG. 6, the cloud manager 110, the virtual server 120, the database 130, the proxy server 140, the virtual server manager terminal 200, and the client terminal 300 communicate with each other to communicate with the client 300 Service provider and the IP address of the private network of the virtual server 120 can be dynamically allocated. Referring to Figure 6 compared to Figure 5 is as follows.

In FIG. 6, the virtual server management unit 116 of the cloud manager 110 does not set the private network IP address of the virtual server 120, but sets the domain name only, in contrast to FIG. 5 in the virtual server registration step (S420). 120) can be generated and associated with the assigned virtual server identifier and the domain name while creating the virtual server 120 and stored in the database 130.

6, unlike FIG. 5, in the virtual server search step (S440), the virtual server search unit 144 of the proxy server 140 records the private network IP address associated with the domain name received from the connection request receiving unit 112. If the search fails in 130, the virtual server search unit 144 receives the virtual server identifier corresponding to the received domain name from the database 130 and transmits the received virtual server identifier to the cloud manager 110 in the private network. You can request to set an IP address.

The virtual server management unit 116 of the cloud manager 110 sets the private network IP address for the virtual server 120 having the received virtual server identifier, and associates the virtual server identifier of the virtual server 120 with the set private network IP address. It is possible to register in the database 130 and transmit the private network IP address of the configured virtual server 120 to the proxy server 140.

In FIG. 6, the communication mediation step (S450 ), which is a step after the virtual server search step (S440 ), is the same as FIG. 5.

Meanwhile, unlike FIG. 6, when a virtual server can be identified by a domain name, a domain name may be used instead of the virtual server identifier.

In addition, unlike FIG. 6, the virtual server management unit 116 of the cloud manager 110 may use the virtual server 120 when the virtual server 120, in which the private network IP address is not set, communicates through the private network or the public network. It is also possible to set a private network IP address and associate the virtual server identifier of the virtual server 120 with the set private network IP address to register in the database.

Meanwhile, the virtual server management unit 116 of the cloud manager 110 may retrieve the private network IP address set in the virtual server 120 when the virtual server 120 does not communicate for a specific time. Here, the number of times may mean that the private network IP address of the virtual server 120 is not set and the stored private network IP address associated with the domain name of the virtual server 120 is deleted from the database.

In this way, the cloud manager 110 can solve the problem that the number of virtual servers is limited because the number of private network IP addresses is limited by dynamically allocating the private network IP address of the virtual server 120.

7 is a diagram showing another example of the operation of the cloud-based hosting system according to the present invention by way of example.

Referring to FIG. 7, the virtual server 120, the database 130, the proxy server 140 and the client terminal 300 communicate with each other to provide an SSL-based RDP service to the client 300.

At this time, unlike the TLS Client Hello message, the RDP negotiation request message does not include the domain name of the virtual server 120, so the proxy server 140 cannot identify the virtual server 120 by the domain name, so the RDP negotiation request message RDP negotiation response message corresponding to the received from the virtual server 120 is unable to forward to the client (300).

In this regard, it will be described in detail with reference to FIGS. 5 and 7 as follows.

Unlike FIG. 7, in FIG. 5, since the request message transmitted from the client terminal 300 to the proxy server 140 includes the domain name, the proxy server 140 stores the virtual server 120 corresponding to the domain name in the database 130 ), so that the virtual server 120 can be specified, forwards the request message received from the client terminal 300 to the virtual server 120, receives the response message from the virtual server 120, and forwards it to the client 300 can do.

However, since the proxy server 140 in FIG. 7 cannot specify the virtual server 120 because the domain name is not included in the request message (RDP negotiation request), the virtual server immediately after receiving the request message (RDP negotiation request) ( It is not possible to send a request message (RDP negotiation request) to 120), and therefore, a response message (RDP negotiation response) cannot be received from the virtual server 120.

In FIG. 7, the proxy server 140 receives the TLS Client Hello message including the domain name after RDP negotiation and searches the database 130 to specify the virtual server 120 before the RDP negotiation request message is sent to the virtual server 120. ).

However, according to the RDP protocol, if the proxy server 140 does not transmit the RDP negotiation response message to the client terminal 300 immediately after receiving the RDP negotiation request message as shown in FIG. 7, the client 300 receives RDP service. Can't.

Therefore, the proxy server 140 must predict and transmit the RDP negotiation response message to be transmitted by the virtual server 120 to be specified in the future through the domain name included in the TLS Client Hello message.

At this time, if a value such as selectedProtocol included in the RDP negotiation response message to be transmitted by the virtual server 120 to be specified in the future is affected only by the same value as requestedProtocols included in the RDP negotiation request message, the proxy server 140 performs RDP negotiation. The RDP negotiation response can be easily predicted and transmitted to the client 300 only with the value of the request.

However, the selectedProtocol value included in the RDP negotiation message may vary depending on the system environment such as the operating system of the virtual server 120.

Specifically, for the RDP negotiation request of the client terminal 300 having the same WINDOWS 10 operating system installed, the selectedProtocol values included in the RDP negotiation response of the WINDOWS 2012 and the virtual server 120 installed with the WINDOWS 7 operating system are 8 and 2, respectively. .

Therefore, the proxy server 140 should predict the RDP negotiation response corresponding to the RDP negotiation request and transmit it to the client 300 according to the system environment of the virtual server 120 to which the client 300 wants to access.

That is, the proxy server 140 should be able to distinguish the system environment of the virtual server 120 to which the client 300 wants to access from connection request information such as RDP negotiation request, and according to the system environment of the distinguished virtual server 120. Connection response information such as a predetermined RDP negotiation response should be able to be transmitted to the client 300.

For example, in order for the proxy server 140 to distinguish the system environment of the virtual server 120 to which the client 300 wants to access from connection request information such as an RDP negotiation request, for example, the client 300 wants to access the virtual server to connect to. Depending on the system environment of (120), connection request information such as an RDP negotiation request may be transmitted to different port numbers, or a special value may be set and transmitted to the connection request information.

Here, the method of using different port numbers according to the system environment of the virtual server 120 to which the client 300 wants to connect is as described above in the connection request counterpart 148.

The method described with reference to FIG. 7 can be applied to various services in which the domain name is not included in connection request information in addition to the RDP service.

In this way, the proxy server 140 does not include the domain name for the virtual server 120 from the client 300, and the connection request information distinguished according to the system environment of the virtual server 120 to which the client 300 wants to access is received. When received, the proxy server 140 transmits corresponding connection response information to the client 300 according to the system environment of the virtual server 120 to connect to the received connection request information, so that the virtual server 120 is a domain. Depending on the system environment of the virtual server 120 to be specified later even before being specified through the name, the connection between the virtual server 120 and the client 300 can be made properly, and various system environments of the virtual server 120 can be made. We can provide various services according to your needs.

Meanwhile, the cloud manager 110 may limit the input of the virtual server manager 200 so that the upper domain name of the generated virtual server 120 is set identically. Here, the upper domain name may refer to the domain name a1.dom.com to dom.com as the latter part of the domain name.

If the upper domain name is set to be the same, the domain name of the virtual server 120 may be different only from the (most) lower domain name, for example, a1.dom.com, a2.dom.com.

As such, by setting the upper domain name of the virtual server 120 to be the same, the cost of domain name registration can be saved, and the IP address of the proxy server 140 can be retrieved from the DNS server using only the upper domain name. Therefore, the public network IP address of the proxy server 140 can be quickly searched.

8 is a diagram illustrating an example of providing an http service.

Referring to FIG. 8, when two client terminals 200 request http services with different domain names a1.dom.com and a2.dom.com, the proxy server 140 requests service based on the domain name. By categorizing, service requests can be forwarded to the virtual servers A1 and VB with the corresponding domain names.

9 is a diagram showing an example of providing http and https services by way of example.

Referring to FIG. 9, when one client terminal 200 requests http and https services with the same domain name a1.dom.com, the proxy server 140 is divided into service types, and the http service is virtual of the virtual server A1. The server port number 80, the https service may forward the service request to the virtual server port number 443 of the virtual server A1.

10 is a view showing an example of a proxy server according to the present invention by way of example.

Referring to FIG. 10, the proxy server 140 according to an embodiment may be configured to include the database 130 as described above. Therefore, the proxy server 140 may provide a forwarding information update service so that the cloud manager 110 can access the database 130 and change information about the virtual server 120, and the forwarding information update service is provided with port number 1440. It can be provided to the cloud manager 110 through the burn.

In addition, in Fig. 10, the proxy server 140 is a client terminal 300 for the http (port number 80), https (port number 443), MySQL (port number 3306) and RDP (port number 3389) service ) And the virtual server 120.

As described above, although described with reference to preferred embodiments of the present application, those skilled in the art variously modify the present application without departing from the spirit and scope of the present invention described in the following claims. And can be changed.

100: cloud-based hosting system
110: cloud manager 112: virtual server administrator interface
114: virtual server generation unit 116: virtual server management unit
120: virtual server 130: database
140: proxy server 142: connection request receiving unit
144: virtual server search unit 146: communication media unit
200: virtual server manager terminal 300: client terminal
400: cloud-based hosting method

Claims (8)

A virtual server using a part of the physical server;
A cloud manager for creating and managing the virtual server;
It consists of a proxy server that connects the client and the virtual server.
The cloud manager,
A virtual server generating unit generating a virtual server at the request of the virtual server administrator; And
Includes a virtual server management unit that sets the private network IP address of the created virtual server and registers it in the database.
The proxy server,
A connection request receiving unit that receives connection request information for a virtual server from a client;
A virtual server search unit searching for a private network IP address associated with the received domain name from the database;
A communication mediator for mediating communication between the virtual server corresponding to the searched private network IP address and the client; And
It includes a connection request response unit for transmitting the connection response information corresponding to the connection request information to the client,
The connection request receiving unit receives connection request information that does not include the domain name for the virtual server from the client,
The connection request information is distinguished according to the system environment of the virtual server to which the client intends to access,
The connection request response unit pre-stores a plurality of connection response information, classifies a system environment of a virtual server to be accessed based on the connection request information, and connects the stored connection response information corresponding to the system environment of the classified virtual server. A cloud-based hosting system that selects information and transmits it to clients.
According to claim 1,
The virtual server management unit registers the virtual server port number corresponding to the service type and service type of the generated virtual server in the database by associating it with the domain name,
The connection request receiving unit receives connection request information including a service type for a virtual server from a client,
The virtual server search unit searches the virtual server port number corresponding to the received service type from the database,
The communication medium is a cloud-based hosting system that mediates communication between the virtual server and the client using the searched virtual server port number.
According to claim 2,
The virtual server management unit is a cloud-based hosting system that registers the changes to the database when the virtual server port number corresponding to the domain name, private network IP address, service type or service type of the generated virtual server is changed.
According to claim 1,
The virtual server management unit,
Set the domain name of the created virtual server and store it in the database,
If the virtual server search unit is unable to retrieve the private network IP address associated with the received domain name from the database, or if the generated virtual server wishes to communicate through a private network or a public network,
A cloud-based hosting system that sets the private network IP address of the created virtual server and associates the stored domain name with the private network IP address to register in the database.
According to claim 1,
The virtual server management unit,
Cloud-based hosting system that retrieves the private network IP address set in the virtual server when the virtual server does not communicate for a specific time.
delete According to claim 1,
A cloud-based hosting system in which the upper domain name of the created virtual server is set identically.
delete

Images