TWI541678B - A system that utilizes technology to access cloud database data - Google Patents

Description

System for accessing cloud database data using transparent technology

The present invention belongs to the technical field of accessing cloud database materials, and more particularly to a system for accessing cloud database data by using a transparent technology, such as TCP/IP (Transmission Control Protocol, Internet Protocol, Internet Protocol) After the format data is converted into HTTP format, it is transmitted to a servo unit through a channel, and then converted from the HTTP format back to the TCP/IP format and transmitted to the database side of the cloud to smoothly transmit data by breaking the barrier of the firewall.

Built on the master-slave architecture of ODBC, Open Data Base Connectivity provides a standard API (Application Programming Interface) to transfer SQL (Structured Query Language) instructions. The Network Layer accesses the data of the remote database. ODBC pioneered the use of open databases, and its architecture can be roughly divided into four units: Application, Driver Manager, Driver, and Data Source. The application provides a user chat interface, prepares the internal execution data and calls the ODBC program function, transmits the SQL command, and receives and displays the returned result of the database. The driver administrator and the driver are dynamically connected files, and the driver administrator assists the application to load the source driver and connect to the data source, and the driver is mainly a function of executing ODBC, and Communicate with the corresponding Data Source. When the application calls an ODBC function, such as SQLConnect or SQLDriverConnect, the driver administrator will load the relative driver and respond to the application to make the application I don't care what the source of the data is, just use the corresponding drive. The program can complete the function of the connection.

It can be seen that ODBC creates independent features between the application and the database. However, in the above-mentioned master-slave architecture, the application must keep the connection with the database uninterrupted before the job completion (Commit), return (Rollback) or timeout (Timeout). In this case, if the database is When the network security problem is hidden behind a firewall, the application will not be able to directly use the original driver to link the database. You must first use the VB6 or PHP language to edit the driver code and the driver. If the communication system is set up to set up another communication channel through the Internet Protocol (TCP/IP), the connection can be completed after the firewall is broken. This will cause difficulties and inconvenience in use. Furthermore, if the database is The cloud system further deepens the complexity of the code and functions, which in turn affects the data access quality of the database.

In order to solve the above problems, how to use the existing HTTP Tunneling, which is commonly used to break through the network firewall, to construct a channel for the application to penetrate without modifying the code and function. The firewall links the cloud database, which is the subject of the invention.

In view of the problems of the prior art, the object of the present invention is to provide a system for accessing cloud database data by using a transparent technology, which uses a Hyper-File Tunnel (HTTP Tunnel) to connect to a cloud database behind a firewall, and allows Users can access data without modifying the application code, which improves the ease of operation and satisfaction of the application.

According to the purpose of the present invention, the system for accessing the cloud database data by using the transparent technology is used in the master-slave architecture and has at least one database end of the application terminal and the cloud, so that the application terminal does not need to modify the program. The code can obtain the data from the data inventory of the firewall through the Internet, and the feature is that the application program pre-executes a first database configuration file, and the system for accessing the cloud database data by using the transparent technology Having a user channel unit and at least one channel servo unit, the user channel unit pre-executes a second database profile to obtain an address list and link the application terminal, and at least one first servo is stored in the address list a address and at least one first database address; the user channel unit receives the output of the application terminal When a notification is received, the first server address and the first database address of the HTTP data format are obtained by querying the address list according to the link notification, and the firewall is transmitted through the firewall using a super file transfer protocol tunnel (HTTP Tunnel) Linking the channel servo unit corresponding to the first servo address, transmitting a database requesting the database address of the first database address to the channel servo unit, so that the channel servo unit analyzes the database request and the HTTP data format is After the first database address is converted into one of the TCP/IP data formats, the first database address of the TCP/IP data format is linked to the database end, and the application end and the data are completed. The connection between the library ends.

The application side supports an Open Data Base Connectivity (ODBC) driver and can be connected to a plurality of database terminals at the same time, and the user channel unit and the channel servo unit utilize SOHT (Socket Over Http). Tunneling) technology establishes the Hyper File Transfer Protocol tunnel. The application side pre-executes the first database configuration file and specifies to connect to one of the user channel units to enable the user channel unit to connect to the application terminal through the connection network when receiving the connection notification. In this way, the user does not need to modify the complicated code of the application end, but can perform data access operation with the database end through the installation and execution of the configuration file.

When the database end is in a plural use mode, the system for accessing the cloud database data by using the transparent technology further includes a link management server (Connection Management Server), and the tunnel is connected through the firewall through the hyper file transfer protocol tunnel. The user channel unit. The link servo unit executes a third database profile in advance to obtain the address list and record the first server address and the first database address. When the user channel unit receives the link notification, when the link servo unit detects the usage status of each of the database terminals and learns the database end that can provide the best service, the link server unit The address list intercepts the corresponding first servo address and the first database address to form the second servo address and the second database address, respectively, and feeds back to the user channel unit for the user channel The unit outputs the database request and the second database address to the channel serving unit corresponding to the second server address through the HTTP tunnel. After the channel servant analyzes the database request and converts the second database address of the HTTP data format into one of the TCP/IP data formats, the corresponding database end is connected according to the second database address. Complete the connection between the application and the repository.

In summary, the present invention applies the current HTTP pass-through technology to the database management system, so that the user channel unit and the channel servo unit establish the HTTP tunnel and convert the data format to the HTTP format. The data is easier to break through the transmission characteristics of the firewall to transfer data to the cloud database or read data from the database. In this way, whether the cloud database is provided with the firewall for network security, the present invention allows the user to directly access the data after completing the setting of the configuration file without modifying the code of the application terminal. The library-side data ensures the security of the database network while facilitating the user's operation. Moreover, when the database end is not hidden behind the firewall, the present invention still allows the application end to directly connect to the database end through the original TCP/IP.

1‧‧‧ system

10‧‧‧Application side

100‧‧‧link notice

11‧‧‧User channel unit

110‧‧‧ address list

1100‧‧‧First servo address

1101‧‧‧First database address

1102‧‧‧Database request

1103‧‧‧Return instructions

12‧‧‧Channel SERVOPACK

13‧‧‧Database side

14‧‧‧Firewall

15‧‧‧Chain SERVOPACK

S10~S16‧‧‧Steps

S20~S27‧‧‧ steps

BRIEF DESCRIPTION OF THE DRAWINGS Figure 1 is a block diagram showing an embodiment of a preferred embodiment of the present invention.

Figure 2 is a flow chart of one embodiment of a preferred embodiment of the present invention.

Figure 3 is a diagram showing the code of a user channel unit in an embodiment of the preferred embodiment of the present invention.

Figure 4 is a schematic diagram showing the structure of the second embodiment of the preferred embodiment of the present invention.

Figure 5 is a flow chart of a second embodiment of the preferred embodiment of the present invention.

Figure 6 is a diagram showing the code of the user channel unit of the second embodiment of the preferred embodiment of the present invention.

In order for your review board to have a clear understanding of the contents of the present invention, please refer to the following description for matching drawings.

Please refer to FIG. 1 and FIG. 2, which are respectively a schematic structural diagram and a flow chart of an embodiment of a preferred embodiment of the present invention. As shown in the figure, the system 1 for accessing cloud database data is used in a master-slave architecture and has at least one application terminal 10, a user channel unit 11, at least one channel server unit 12, and a cloud. Database end 13, and the user channel unit There is a firewall 14 between the channel servo unit 11 and the channel. The application terminal 10 supports the ODBC driver and links the user channel unit 11 via TCP/IP. The user channel unit 11 and the channel servo unit 12 establish an HTTP tunnel between each other by using the SOHT technology, so as to break through the firewall 14 and connect to each other. The channel servo unit 12 connects the database terminal 13 via TCP/IP. The system 1 realizes the function of enabling the application terminal 10 to access data from the database 13 after the firewall 14 through the Internet without modifying the program code through the execution flow including the following steps.

First, in step S10, the application terminal 10 executes a first database configuration file in advance: DB_CLOUD=1

DB_CLOUDSVR=172.16.220.116:8085

DB_PTNUM=12345

DB_SVADR=127.0.0.1

DB_USRID=SYSADM to specify that one of the user channel units 11 is connected to connect: 12345. At the same time, the user channel unit 11 executes a second database profile: client.port=12345

1.soht.server= http://172.16.220.116:8085/soht/service

1.remote.db=DBSAMPL5

1.remote.address=172.16.220.114

1.remote.port=2455

1.soht.user=dbmaker

1.soht.password=1721340470790152451780431761181521391860001551 85142087242084

2.soht.server=http://127.0.0.1:8080/soht/service

2.remote.db=TESTDB

2.remote.address=172.16.220.56

2.remote.port=33557

2.soht.user=dbmaker, to know the connection of the application terminal 10 and obtain an address list 110, the address list 110 at least has a first servo address 1100, such as 172.16.220.116: 8085 and 127.0. 0.1:8080, and a first database address 1101, such as 172.16.220.114: 2455 and 172.16.220.56: 33557.

When the application terminal 10 wants to connect to the database end 13, step S11: output one of the TCP/IP data formats to link the notification 100 to the user channel unit 11, so that the user channel unit 11 executes: java -Dclouddb .properties= The 'c:/.../clouddb.properties'-jar cloud-client.jar command enters the working state.

In step S12, the user channel unit 11 is connected to the application terminal 10 through the fixed connection network after receiving the connection notification 100, and step S13: querying the location according to the connection notification 100. After obtaining the first server address 1100 and the first database address 1101 of the corresponding HTTP data format, the address list 110 is used to connect the channel servo corresponding to the first servo address 1100 through the firewall 14 by using the HTTP tunnel. Unit 12.

Next, in step S14, the user channel unit 11 transmits a database request 1102 to the channel server unit 12, and the database request 1102 is provided with the first database address 1101.

In step S15, the channel server unit 12 receives and analyzes the database request 1102 to convert the first database address 1101 of the HTTP data format into one of the TCP/IP data formats, according to the TCP/IP data. The first database address 1101 of the format is associated with the database end 13.

After the connection between the application terminal 10 and the database end 13 is completed, in step S16, the user channel unit 11 converts the data transmitted from the application terminal 10 to be transmitted to the data via the channel servo unit 12. The library terminal 13 or the library data transmitted by the channel servo unit 12 is transferred to the application terminal 10.

In the above, when the database end 13 is in a plural use mode, and further considering that each of the database end 13 has different data load, network transmission rate, and computing performance, the system 1 is as shown in the figure. A chain tube servo unit 15 is provided as shown in FIG. The chain tube servo unit 15 is also used to establish another HTTP tunnel with the user channel unit 11 by using the SOHT technology, so as to break through the firewall 14 and connect to each other. Thus, the operation flow of the system 1 will be as shown in FIG. 5.

In step S20, the application terminal 10 pre-executes the first database profile and specifies the connection port for connecting to the user channel unit 11, and the user channel unit 11 executes the second database profile to learn the link. The interface of the application terminal 10 obtains the address list 110, and the chain servo unit 15 executes a third database configuration file: 1.soht.server=http://172.16.220.116:8085/soht/ Service

1.remote.db=DBSAMPL5

1.remote.address=172.16.220.114

1.remote.port=2455

2.soht.server=http://127.0.0.1:8080/soht/service

2.remote.db=TESTDB

2.remote.address=172.16.220.56

2.remote.port=33557 to obtain the address list 110 and record the first servo address 1100 and the first database address 1101.

When the application terminal 10 wants to connect to the database end 13, step S21: output the link notification 100 to the user channel unit 11 to cause the user channel unit 11 to execute: java -Dclient .port=12345 -jar cloud-client After the .jar command, it enters the working state.

Step S22, the user channel unit 11 is connected to the application terminal 10 through the fixed connection network as shown in FIG. 6, and outputs a return command 1103 to the link servo unit 15 to make the link servo unit Step 15: Step S23: Detecting the usage status of each database end 13 to calculate the first server address 1100 and the corresponding first server address 1100 from the address list 110 after calculating the database end 13 for providing a better service. The first database address 1101 forms a second server address and a second database address, respectively, and feeds back a link data to the user channel unit 11, the link data containing a better service. a device name of the database end 13, a second database address, and the second server address, and the second database address and the second server address are HTTP data format.

Next, in step S24, the user channel unit 11 directly uses the second servo address to connect the corresponding channel serving unit 12 via the HTTP tunnel according to the link data. Moreover, in step S25, the user channel unit 11 transmits the database request 1102 to the channel server unit 12, and the database request 1102 is provided with the second database address according to the reception result of the link data. In step S26, the channel server unit 12 receives and analyzes the database request 1102 to convert the second database address of the HTTP data format into one of the TCP/IP data formats, according to the second database. The address of the database corresponds to the database end 13. After the connection between the application terminal 10 and the database end 13 is completed, in step S27, the user channel unit 11 converts the data transmitted from the application terminal 10 to be transmitted to the data via the channel servo unit 12. The library terminal 13 or the library data transmitted by the channel servo unit 12 is transferred to the application terminal 10.

In this embodiment, when the database end 13 is not hidden behind the firewall 14, the application terminal 10 can directly connect to the corresponding database end 13 by using the original TCP/IP internet link.

The above description is only illustrative of preferred embodiments and not limiting. Any equivalent modifications or alterations to the spirit and scope of the invention are intended to be included in the scope of the appended claims.

1‧‧‧ system

10‧‧‧Application side

100‧‧‧link notice

11‧‧‧User channel unit

110‧‧‧ address list

1100‧‧‧First servo address

1101‧‧‧First database address

1102‧‧‧Database request

12‧‧‧Channel SERVOPACK

13‧‧‧Database side

14‧‧‧Firewall

Claims (7)

A system for accessing cloud database data by using a transparent technology, which is used in a master-slave architecture and has at least one database end of an application end and a cloud end, so that the application end can be transmitted without modifying the code. The data collection data of the Internet from a firewall is characterized in that: the application side pre-executes a first database configuration file, and the system for accessing the cloud database data by using the transparent technology has a user channel a unit and at least one channel servo unit, the user channel unit pre-executes a second database profile to obtain an address list and link the application end, and the address list at least stores at least a first servo address and at least a first database address; the user channel unit receives the link notification outputted by the application terminal, and queries the address list according to the link notification to learn the first server address of the HTTP data format and the first a database address, and tunneling the firewall to the channel servo corresponding to the first servo address by using a Hyper-Transport Tunnel (HTTP Tunnel) Transmitting a database requesting one of the first database addresses to the channel server unit, so that the channel server unit analyzes the database request to convert the first database address of the HTTP data format into TCP/IP After one of the data formats, the first database address corresponding to the TCP/IP data format is linked to the database end, and the firewall is used to complete the connection between the application end and the database end. . For example, in the system of claim 1, the system for accessing cloud database data by using the transparent technology, wherein the application end supports an open database connection interface driver. The system for accessing the cloud database data by using the transparent technology according to the second aspect of the patent application, wherein the application end pre-executes the first database configuration file and is designated to be connected to one of the user channel units. In other words, the user channel unit connects the application terminal through the connection network when receiving the connection notification. For example, the system for accessing the cloud database data by using the transparent technology according to the third aspect of the patent application has a chain tube servo unit, and the database end is in a plural use mode, and the chain tube servo unit transmits the super The file transfer protocol tunnel connects the user channel list through the firewall The user channel unit outputs a return instruction when receiving the link notification, so that the link servo unit detects the usage status of each database end and feeds back one of the HTTP data format and the second data address. And the user channel unit outputs the database request and the second database address to the channel servant corresponding to the second server address through the HTTP tunnel, the channel serving unit analyzes the database request and HTTP After the second database address of the data format is converted into one of the TCP/IP data formats, the corresponding database end is connected according to the second database address, and the application end and the database end are completed. Connected. The system for accessing cloud database data by using a transparent technology according to claim 4, wherein the link servo unit performs a third database configuration file in advance to obtain the address list and record the first a servo address and the first database address, when the link servo unit detects the usage status of each database end and knows the database end that can provide the best service, intercepts the corresponding address list from the address list The first servo address and the first database address respectively form the second servo address and the second database address, and are fed back to the user channel unit. The system for accessing cloud database data by using a transparent technology according to claim 5, wherein the user channel unit and the channel servo unit establish the hyper file transfer protocol tunnel by using SOHT technology. The system for accessing the cloud database data by using the transparent technology according to the first aspect of the patent application, wherein when the database end is not hidden behind the firewall, the application end directly transmits the original TCP/IP link. The database side.