WO2015067036A1

WO2015067036A1 - Remote access configuration method, remote access method, apparatus, and system

Info

Publication number: WO2015067036A1
Application number: PCT/CN2014/078477
Authority: WO
Inventors: 张占军; 琚列丹
Original assignee: 华为技术有限公司
Priority date: 2013-11-06
Filing date: 2014-05-27
Publication date: 2015-05-14
Also published as: CN104639497A; CN104639497B

Abstract

The present invention relates to the field of the Internet, and disclosed are a remote access configuration method, and a remote access method, apparatus, and system. The method comprises: receiving an acquisition request sent by an access terminal and used for acquiring public network information of a virtual machine, the acquisition request carrying an identifier of the virtual machine; acquiring, according to the identifier of the virtual machine, private network information of the virtual machine from a private network host carrying the virtual machine; acquiring public network information corresponding to the private network information; sending a mapping configuration request to a gateway to which the private network host belongs; and feeding back the public network information to the access terminal, so that the access terminal remotely accesses the virtual machine by using the public network information of the virtual machine. The present invention solves the problems in the prior art that maintenance workload is large and large-scale deployment of VNCs is not suitable due to manual configuration on information such as a port number and an IP address, and achieves the effects of automatically acquiring and configuring the information such as the port number and the IP address and facilitating large-scale deployment of VNCs.

Description

Remote access configuration method, remote access method, device and system

This application claims priority to Chinese Patent Application No. 201310544443.2, entitled "Remote Access Configuration Method, Remote Access Method, Apparatus and System", filed on November 06, 2013, the entire contents of which are hereby incorporated by reference. Combined in this application. Technical field

The present invention relates to the field of the Internet, and in particular, to a remote access configuration method, a remote access method, apparatus, and system. Background technique

VNC (Virtual Network Computing) is a remote control tool software commonly used to maintain virtual machines inside the data center. VNC usually consists of two parts: one is the VNC client and the other is the VNC server. The access terminal with the VNC client is connected to any virtual machine hosted by the private network host on which the VNC server is installed to implement remote access and remote control of the private network host.

The access terminal uses the public network IP (Internet Protocol, the protocol for interconnection between networks), and the private network host uses the private network IP and the private network host allocates different private network IP addresses and port numbers to different virtual machines. Therefore, in order to establish a connection between the terminal and any virtual machine on the private network host, you need to obtain the private network IP address and port number of the virtual machine, and use the firewall NAT (Network Address Translate) to perform the corresponding The connection can be established only after the network port address is translated.

The existing technical solution is to manually configure the private network IP address and port number of the virtual machine to the firewall NAT, and manually configure the corresponding public network IP address and port number, and then form the private network IP address and port number of the virtual machine through the firewall NAT. The mapping between the IP address and the port number of the public network is used to implement the connection between the access terminal and the virtual machine. Firewall NAT actually acts as a gateway.

After the VM is restarted, the private network host usually assigns a new private network IP address and port number to the VM. Therefore, after the VM restarts, you need to manually configure the VM's new private IP address and port number to the firewall. on. Because the existing technical solution is to manually configure the port number and IP address, the maintenance work is large, and it is not suitable for large-scale deployment of VNC. Summary of the invention

In order to solve the problem that the port number and the IP address are manually configured in the prior art, which causes a large maintenance work and is not suitable for large-scale deployment of the VNC, the embodiment of the present invention provides a remote access configuration method, a remote access method, an apparatus, and a system. The technical solution is as follows:

In a first aspect, a remote access configuration method is provided, where the method includes:

Receiving, by the access terminal, an acquisition request for acquiring public network information of the virtual machine, where the acquisition request carries an identifier of the virtual machine;

Obtaining private network information of the virtual machine from a private network host that carries the virtual machine according to the identifier of the virtual machine;

Obtaining public network information corresponding to the private network information;

Sending a mapping configuration request to the gateway to which the private network host belongs, where the mapping configuration request is used to trigger the gateway to configure a mapping relationship between the private network information and the public network information;

And feeding back the public network information to the access terminal, so that the access terminal remotely accesses the virtual machine by using public network information of the virtual machine.

In a first possible implementation manner of the first aspect, the obtaining the private network information of the virtual machine from the private network host that carries the virtual machine according to the identifier of the virtual machine includes:

Logging in to the private network host hosting the virtual machine through a predetermined interface;

Locating the identifier of the virtual machine on the private network host to query private network information corresponding to the identifier of the virtual machine;

Obtaining the private network information of the virtual machine that is queried.

With reference to the first possible implementation manner of the first aspect, in the second possible implementation manner, the logging in the private network host that carries the virtual machine by using the predetermined interface includes:

Logging in to the private network host through an interface of the TCP control protocol set in advance; or

The private network host is logged in through an interface of the hypertext transfer protocol HTTP format set in advance. With reference to the first aspect, the first possible implementation manner of the first aspect, or the second possible implementation manner of the first aspect, in a third possible implementation manner, the obtaining corresponds to the private network information Public network information, including:

Obtaining at least one group of public network information of the gateway to which the private network host belongs;

Selecting a group of public network information from the at least one group of public network information as the private network information Corresponding public network information.

In a second aspect, a remote access method is provided, the method comprising:

Sending, to the controller, an acquisition request for acquiring public network information of the virtual machine, where the acquisition request carries an identifier of the virtual machine;

Receiving the public network information of the virtual machine sent by the controller, where the public network information of the virtual machine is obtained by the controller from the private network host that carries the virtual machine according to the identifier of the virtual machine The information corresponding to the private network information generated by the private network information of the virtual machine, and the public network information of the virtual machine is triggered by the controller to establish a virtual machine with the gateway to which the private network host belongs. Mapping between private network information;

The virtual machine is remotely accessed through the public network information of the virtual machine.

In a third aspect, a remote access configuration apparatus is provided, the apparatus comprising:

a request receiving module, configured to receive an acquisition request sent by the access terminal for acquiring public network information of the virtual machine, where the obtaining request carries an identifier of the virtual machine;

An information obtaining module, configured to acquire private network information of the virtual machine from a private network host that carries the virtual machine according to the identifier of the virtual machine;

The information obtaining module is configured to obtain the public network information corresponding to the private network information, and the mapping configuration module is configured to send a mapping configuration request to the gateway to which the private network host belongs, where the mapping configuration request is used to trigger the The gateway configures a mapping relationship between the private network information and the public network information;

The information feedback module is configured to feed back the public network information to the access terminal, so that the access terminal remotely accesses the virtual machine by using public network information of the virtual machine.

In a first possible implementation manner of the third aspect, the information acquiring module includes: a host login unit, an information query unit, and an information acquiring unit;

The host login unit is configured to log in to the private network host that carries the virtual machine by using a predetermined interface;

The information querying unit is configured to query, on the private network host, the private network information corresponding to the identifier of the virtual machine according to the identifier of the virtual machine;

The information acquiring unit is configured to obtain the private network information of the queried virtual machine.

With reference to the first possible implementation manner of the third aspect, in a second possible implementation, the host login unit includes: a first login subunit; or a second login subunit; the first login Subunit, used for pre-set transmission control protocol TCP form The interface is logged in to the private network host; or

The second login subunit is configured to log in to the private network host by using an interface of a hypertext transfer protocol HTTP format set in advance.

With reference to the third aspect, the first possible implementation manner of the third aspect, or the second possible implementation manner of the third aspect, in a third possible implementation manner, the information obtaining module includes: And information selection unit;

The information obtaining unit is configured to acquire at least one group of public network information of a gateway to which the private network host belongs;

The information selecting unit is configured to select a group of public network information from the at least one group of public network information as the public network information corresponding to the private network information.

In a fourth aspect, a remote access device is provided, the device comprising:

a request sending module, configured to send, to the controller, an obtaining request for acquiring public network information of the virtual machine, where the obtaining request carries an identifier of the virtual machine;

An information receiving module, configured to receive public network information of the virtual machine that is sent by the controller, where the public network information of the virtual machine is from the virtual machine that is carried by the controller according to the identifier of the virtual machine After the private network host obtains the private network information of the virtual machine, the information corresponding to the private network information is generated, and the public network information of the virtual machine is triggered by the controller to the gateway to which the private network host belongs. Establishing a mapping relationship with the private network information of the virtual machine;

a remote access module, configured to remotely access the virtual machine by using public network information of the virtual machine. A fifth aspect provides a remote access system, where the system includes: a private network host carrying at least one virtual machine, a gateway and a controller connected to the private network host, and the gateway and the controller Each of the access terminals, wherein the controller is further connected to the gateway; the controller includes the remote access configuration device as described in the third aspect or the various possible implementation manners of the third aspect;

The access terminal includes the remote access device as described in the fourth aspect.

In a sixth aspect, a controller is provided for implementing a controller in a remote access system, the controller comprising: a processor, a memory, a transmitter, and a receiver;

The processor is configured to control, by the receiver, an acquisition request that is sent by the access terminal to obtain public network information of the virtual machine, where the acquisition request carries an identifier of the virtual machine;

The processor is further configured to obtain private network information of the virtual machine from a private network host that carries the virtual machine according to the identifier of the virtual machine; The processor is further configured to acquire public network information corresponding to the private network information, where the processor is further configured to control the sender to send a mapping configuration request to a gateway to which the private network host belongs. The mapping configuration request is used to trigger the gateway to configure a mapping relationship between the private network information and the public network information;

The processor is further configured to control the sender to feed back the public network information to the access terminal, so that the access terminal remotely accesses the virtual machine by using public network information of the virtual machine.

In a first possible implementation of the sixth aspect,

The processor is further configured to log in to the private network host that carries the virtual machine by using a predetermined interface. The processor is further configured to query, on the private network host, the virtual machine according to the identifier of the virtual machine. Corresponding private network information;

The processor is further configured to obtain the private network information of the queried virtual machine.

With reference to the first possible implementation manner of the sixth aspect, in a second possible implementation, the processor is further configured to log in to the private network host by using an interface in a form of a preset transmission control protocol TCP; or ,

The processor is further configured to log in to the private network host by using an interface of a hypertext transfer protocol HTTP format set in advance.

With reference to the sixth aspect, the first possible implementation manner of the sixth aspect, or the second possible implementation manner of the sixth aspect, in a third possible implementation manner,

The processor is further configured to acquire at least one group of public network information of a gateway to which the private network host belongs;

The processor is further configured to select a group of public network information from the at least one group of public network information as public network information corresponding to the private network information.

According to a seventh aspect, an access terminal is provided for implementing an access terminal in a remote access system, where the access terminal includes: a receiver, a transmitter, a processor, and a memory;

The processor is configured to send, by the sender, an acquisition request for acquiring public network information of the virtual machine to the controller, where the acquisition request carries an identifier of the virtual machine;

The processor is further configured to control the receiver to receive public network information of the virtual machine that is sent by the controller, where public network information of the virtual machine is determined by the controller according to the identifier of the virtual machine Obtaining information corresponding to the private network information generated after the private network information of the virtual machine is obtained from the private network host of the virtual machine, and the public network information of the virtual machine is triggered by the controller Mapping between the gateway to which the private network host belongs and the private network information of the virtual machine Department

The processor is further configured to remotely access the virtual machine by using public network information of the virtual machine. According to an eighth aspect, a remote access system is provided, where the system includes: a private network host carrying at least one virtual machine, a gateway and a controller connected to the private network host, and the gateway and the controller a controller that is connected to each other, wherein the controller is further connected to the gateway; the controller is the controller according to any of the sixth aspect and the sixth aspect, the possible implementation manner;

The access terminal is an access terminal as described in the seventh aspect.

The beneficial effects brought by the technical solutions provided by the embodiments of the present invention are:

After receiving the acquisition request for acquiring the public network information of the virtual machine, the private network information of the virtual machine is obtained from the private network host that hosts the virtual machine according to the identifier of the virtual machine carried in the acquisition request. After the public network information corresponding to the private network information is obtained, the mapping configuration request is sent to the gateway to which the private network host belongs, and the mapping configuration request is used to trigger the mapping between the private network information and the public network information. The public network information is fed back to the access terminal, so that the access terminal remotely accesses the virtual machine through the public network information of the virtual machine; the information of manually configuring the port number and the IP address in the prior art is solved, resulting in large maintenance work and being unsuitable for large-scale operation. The problem of deploying VNC is achieved. The automatic acquisition and configuration of port numbers and IP addresses are achieved, which is beneficial to the large-scale deployment of VNC. DRAWINGS

In order to more clearly illustrate the technical solutions in the embodiments of the present invention, the drawings used in the description of the embodiments will be briefly described. It is obvious that the drawings in the following description are only some embodiments of the present invention. Other drawings may also be obtained from those of ordinary skill in the art in view of the drawings.

1 is a schematic structural diagram of an implementation environment involved in a remote access configuration method and a remote access method according to various embodiments of the present invention;

2 is a flowchart of a method for remote access configuration according to an embodiment of the present invention; FIG. 3 is a flowchart of a method for remote access according to another embodiment of the present invention; FIG. 4 is a remote manner according to still another embodiment of the present invention. FIG. 5 is a block diagram showing the structure of a remote access configuration apparatus according to an embodiment of the present invention; FIG. 6 is a block diagram showing the structure of a remote access apparatus according to another embodiment of the present invention; FIG. 8 is a structural block diagram of a remote access system according to an embodiment of the present invention; FIG. 8 is a schematic structural diagram of a controller according to an embodiment of the present invention;

FIG. 9 is a schematic structural diagram of an access terminal according to an embodiment of the present invention;

FIG. 10 is a structural block diagram of a remote access system according to an embodiment of the present invention. detailed description

The embodiments of the present invention will be further described in detail below with reference to the accompanying drawings.

Referring to FIG. 1, FIG. 1 is a schematic structural diagram of an implementation environment involved in a remote access configuration method and a remote access method according to various embodiments of the present invention. The implementation environment includes: access terminal 120, private network host 140, and controller 160.

The access terminal 120 can be an electronic device running a VNC client, which can be a laptop portable computer and a desktop computer or the like. The access terminal 120 uses the public network.

The access terminal 120 and the private network host 140 can be connected via a wireless network or a wired network. Or a server cluster consisting of several servers, or a cloud computing service center. The private network host 140 uses the private network IP. The private network host 140 carries at least one virtual machine (not shown) and allocates different private network information to different virtual machines.

The controller 160 may be a logical component that runs on the VNC control terminal. The controller 160 may be disposed in a separate computer, or may be disposed in the private network host 140, or may be disposed in the access terminal 120. As shown in FIG. 1, when the controller 160 is disposed in a separate computer, the computer can be connected to the access terminal 120 and the private network host 140 via a wireless network or a wired network.

The controller 160 automatically obtains the private network information of the virtual machine through the VNC control end, and automatically configures the mapping between the private network information of the virtual machine and the public network information of the virtual machine on the gateway 170. The private network information refers to the private network IP address of the virtual machine or the private network IP address and port number of the virtual machine. The public network information refers to the public network IP address of the virtual machine or the public network IP address and port number of the virtual machine. Referring to FIG. 2, a flow chart of a method for configuring a remote access according to an embodiment of the present invention is shown. This embodiment is applied to the implementation environment shown in FIG. 1 by using the remote access configuration method. The controller side is an example. The remote access configuration method includes:

Step 202: Receive an access request sent by the access terminal to obtain public network information of the virtual machine, and obtain an identifier that the request carries the virtual machine.

With reference to FIG. 1, when the remote access configuration method provided in this embodiment is applied to the controller side in the implementation environment shown in FIG. 1, the step is to receive the public network for acquiring the virtual machine sent by the access terminal. The information acquisition request, the acquisition request carries the identifier of the virtual machine.

Step 204: Obtain private network information of the virtual machine from the private network host that hosts the virtual machine according to the identifier of the virtual machine.

The controller obtains the private network information of the virtual machine from the private network host that hosts the virtual machine according to the identifier of the virtual machine.

Step 206: Obtain public network information corresponding to private network information.

The controller obtains public network information corresponding to the private network information.

Step 208: Send a mapping configuration request to the gateway to which the private network host belongs, where the mapping configuration request is used to trigger the mapping between the private network information and the public network information.

The controller sends a mapping configuration request to the gateway to which the private network host belongs. The mapping configuration request is used to trigger the mapping between the private network information and the public network information.

Step 210: The public network information is fed back to the access terminal, so that the access terminal remotely accesses the virtual machine through the public network information of the virtual machine.

The controller feeds back the public network information to the access terminal, so that the access terminal remotely accesses the virtual machine through the public network information of the virtual machine.

In summary, the remote access configuration method provided by the embodiment, after receiving the acquisition request for acquiring the public network information of the virtual machine sent by the access terminal, according to the identifier of the virtual machine carried in the acquisition request Obtaining the private network information of the virtual machine from the private network host that hosts the virtual machine, and after obtaining the public network information corresponding to the private network information, sending a mapping configuration request to the gateway to which the private network host belongs, and the mapping configuration request is used for The triggering gateway configures the mapping between the private network information and the public network information, and finally feeds the public network information to the access terminal, so that the access terminal remotely accesses the virtual machine through the public network information of the virtual machine; Information such as the number and IP address, which causes large maintenance and is not suitable for large-scale deployment of VNC. It achieves the automatic acquisition and configuration of port number and IP address, which is beneficial to the large-scale deployment of VNC. Please refer to FIG. 3, which is a flowchart of a method for remote access method according to another embodiment of the present invention. This embodiment is exemplified by the remote access method applied to the access terminal side in the implementation environment shown in FIG. 1. The remote access method includes:

Step 302: Send an acquisition request for acquiring public network information of the virtual machine to the controller, where the acquisition request carries the identifier of the virtual machine.

With reference to FIG. 1, when the remote access configuration method provided in this embodiment is applied to the access terminal side in the implementation environment shown in FIG. 1, this step is to send the public network information for acquiring the virtual machine to the controller. The acquisition request, the acquisition request carries the identifier of the virtual machine.

Step 304: Receive public network information of the virtual machine sent by the controller, where the public network information of the virtual machine is generated by the controller, after obtaining the private network information of the virtual machine from the private network host hosting the virtual machine according to the identifier of the virtual machine. The information corresponding to the private network information, and the public network information of the virtual machine is triggered by the controller to establish a mapping relationship with the private network information of the virtual machine.

The access terminal receives the public network information of the virtual machine sent by the controller. The public network information of the virtual machine is generated by the controller after obtaining the private network information of the virtual machine from the private network host hosting the virtual machine according to the identifier of the virtual machine. The information corresponding to the network information, and the public network information of the virtual machine is triggered by the controller to establish a mapping relationship with the private network information of the virtual machine.

Step 306: Remotely access the virtual machine by using public network information of the virtual machine.

The access terminal remotely accesses the virtual machine through the public network information of the virtual machine.

In summary, in the remote access method provided by the embodiment, after the access terminal sends an acquisition request for acquiring the public network information of the virtual machine to the controller, the controller performs the private operation of the virtual machine according to the identifier of the virtual machine. After obtaining the private network information of the virtual machine, the network host obtains the public network information corresponding to the private network information, and the controller sends a mapping configuration request to the gateway to which the private network host belongs. The mapping configuration request is used to trigger the gateway configuration private. The mapping relationship between the network information and the public network information, and then the access terminal remotely accesses the virtual machine through the public network information of the virtual machine after receiving the public network information of the virtual machine sent by the controller; Information such as the number and IP address, which causes large maintenance and is not suitable for large-scale deployment of VNC. It achieves the automatic acquisition and configuration of port number and IP address, which is beneficial to the large-scale deployment of VNC. Please refer to FIG. 4, which is a flowchart of a method for remote access method according to still another embodiment of the present invention. This embodiment is exemplified by applying the remote access method to the implementation environment shown in FIG. 1. The remote access method includes: Step 401: The access terminal sends an acquisition request for acquiring the public network information of the virtual machine to the controller, where the acquisition request carries the identifier of the virtual machine.

The identity of the virtual machine is used to distinguish between different virtual machines. The access terminal sends an acquisition request for acquiring the public network information of the virtual machine to the controller, and the acquisition request carries the identifier of the virtual machine, that is, it is used to inform the controller which virtual machine to establish a connection with.

The access terminal establishes a connection with any virtual machine hosted by the private network host to remotely access the virtual machine, thereby implementing access and control to the private network host. To establish a connection between an access terminal and any virtual machine, you need to obtain the public network information of the virtual machine. The public network information usually includes the public network IP address and port number of the virtual machine.

Correspondingly, the controller receives an access request sent by the access terminal for acquiring public network information of the virtual machine.

Step 402: The controller logs in to the private network host that hosts the virtual machine through the predetermined interface.

The controller can log in to the private network host through the interface in the form of the Transmission Control Protocol (TCP). You can also log in to the private network host through the interface of the HTTP (Hyper Text Transfer Protocol) format. .

Step 403: The controller queries the private network host for the private network information corresponding to the identifier of the virtual machine according to the identifier of the virtual machine.

After the controller logs in to the private network host, it can invoke a preset script to query the private network information corresponding to the identifier of the virtual machine.

Step 404: The controller acquires private network information of the queried virtual machine.

The controller queries the private network information such as the private network IP address and port number of the virtual machine through the script program. Step 405: The controller acquires at least one group of public network information of the gateway to which the private network host belongs.

The gateway is usually a NAPT (Network Address Port Translate) gateway, which can be implemented by a firewall NAT. The gateway can be set up on a separate computer with NAT service function, or can be set on the access terminal, or can be set on the private network host. The gateway provides at least one set of public network information for the controller to select.

Taking the public network information of the virtual machine as the public network IP and port number as an example, the controller can pre-store the five sets of public IP and port numbers that the NAPT gateway can provide, for example: 209.100.20.1/5800,

209.100.20.1/5801, 209.100.20.2/5800, 209.100.20.3/5800 and 209.100.20.4/5800. After obtaining the private network information of the virtual machine, the controller queries which of the five public network IP addresses and port numbers that are pre-stored are in an idle state, and selects the public IP address and port number of the group. For example, 209.100.20.1/5800 is used as the public network IP and port number of the virtual machine.

Step 406: The controller selects a group of public network information from at least one group of public network information as the public network information corresponding to the private network information.

The controller queries which of the five public IP addresses and port numbers that are pre-stored are in an idle state. The specific process of selecting the public IP address and port number of the group is: according to the pre-stored five sets of public IP and port numbers. The query is performed one by one. When the query obtains the public IP address and port number of the first group in the idle state, the public network IP address and port number of the group are selected as the public network IP address and port number corresponding to the private network IP address and port number. The specific process may also be: querying all the public network IPs and port numbers in the idle state in the pre-stored five sets of public network IP and port numbers, and then selecting the public network IP and port in the idle state with the largest bandwidth. The number is the public IP and port number corresponding to the private network IP and port number.

Assuming that the controller obtains the private network IP address and port number of the virtual machine is 192.168.200.1/5900, the controller generates a public network IP and port number between 209.100.20.1/5800 and the private network IP and port number 192.168.200.1/5900. Correspondence.

Step 407: The controller sends a mapping configuration request carrying the private network information and the public network information to the gateway.

The controller sends a configuration request to the NAPT gateway to configure a mapping relationship between the public network IP and the port number 209.100.20.1/5800 and the private network IP and the port number 192.168.200.1/5900.

Correspondingly, the gateway receives the mapping configuration request sent by the controller and carries the private network information and the public network information.

Step 408: The gateway configures a mapping relationship between the private network information and the public network information.

After receiving the configuration request, the NAPT gateway configures the mapping between the public network IP and the port number 209.100.20.1/5800 and the private network IP and the port number 192.168.200.1/5900, and stores the mapping relationship. Afterwards, the access terminal can remotely access the virtual machine through the NAPT gateway, thereby implementing remote control of the private network host corresponding to the virtual machine.

Step 409: The gateway feeds back a configuration completion response to the controller.

After the NAPT gateway completes the configuration of the mapping relationship, the configuration completion response is fed back to the controller. Correspondingly, the controller receives a configuration completion response fed back by the gateway.

Step 410: The controller feeds back public network information to the access terminal.

After the mapping between the private network information and the public network information is established on the NAPT gateway, the controller feeds back the public network information to the access terminal, and informs the access terminal to use the public network information to access the virtual machine that needs to be accessed. Correspondingly, the access terminal receives the public network information of the virtual machine sent by the controller.

Step 411: The access terminal accesses the virtual machine remotely through the public network information of the virtual machine.

Specifically, the access terminal sends a service request packet carrying the public network IP address and port number of the virtual machine to the NAPT gateway. After receiving the service request packet, the NAPT gateway modifies the public network IP address and port number in the service request packet to the private network IP address and port according to the mapping between the stored private IP address and port number and the public network IP address and port number. Number, and then forward the service request packet carrying the private network IP and port number to the virtual machine.

At this point, the access terminal implements remote access to the virtual machine, and thus can remotely control the private network host corresponding to the virtual machine. The service transmission between the access terminal and the virtual machine requires the conversion of the IP address and port number through the NAPT gateway.

In summary, in the remote access method provided by the embodiment, after the access terminal sends an acquisition request for acquiring the public network information of the virtual machine to the controller, the controller performs the private operation of the virtual machine according to the identifier of the virtual machine. After obtaining the private network information of the virtual machine, the network host obtains the public network information corresponding to the private network information, and the controller sends a mapping configuration request to the gateway to which the private network host belongs. The mapping configuration request is used to trigger the gateway configuration private. The mapping relationship between the network information and the public network information, and then the access terminal remotely accesses the virtual machine through the public network information of the virtual machine after receiving the public network information of the virtual machine sent by the controller; Information such as the number and IP address, which causes large maintenance and is not suitable for large-scale deployment of VNC. It achieves the automatic acquisition and configuration of port number and IP address, which is beneficial to the large-scale deployment of VNC.

In the remote access method provided by the embodiment, the controller also obtains the private network information of the virtual machine by using the interface of the TCP format or the interface of the HTTP format, and the controller also sends the private network information to the gateway. The mapping configuration request of the public network information establishes a mapping relationship between the private network information and the public network information on the gateway; realizes automatic configuration and dynamic configuration of the mapping relationship, and improves the efficiency of remote access. The following is an embodiment of the apparatus of the present invention, which can be used to carry out embodiments of the method of the present invention. For details not disclosed in the embodiment of the device of the present invention, please refer to the method embodiment of the present invention.

Please refer to FIG. 5, which is a structural block diagram of a remote access configuration apparatus according to an embodiment of the present invention. The remote access configuration apparatus may be implemented as a whole or a part of a controller by software, hardware, or a combination of both. The remote access configuration device includes: a request receiving module 510, an information obtaining module 520, an information obtaining module 530, a mapping configuration module 540, and information Feedback module 550.

The request receiving module 510 is configured to receive an acquisition request sent by the access terminal for acquiring public network information of the virtual machine, where the acquisition request carries the identifier of the virtual machine.

The information obtaining module 520 is configured to obtain private network information of the virtual machine from a private network host that hosts the virtual machine according to the identifier of the virtual machine.

The information obtaining module 530 is configured to obtain public network information corresponding to the private network information. The mapping configuration module 540 is configured to send a mapping configuration request to the gateway to which the private network host belongs, where the mapping configuration request is used to trigger the gateway to configure a mapping relationship between the private network information and the public network information.

The information feedback module 550 is configured to feed back the public network information to the access terminal, so that the access terminal remotely accesses the virtual machine by using public network information of the virtual machine.

In summary, the access information configuration apparatus provided by the embodiment, after receiving the acquisition request of the public network for acquiring the virtual machine sent by the access terminal, according to the identifier of the virtual machine carried in the acquisition request Obtaining the private network information of the virtual machine from the private network host that hosts the virtual machine, and after obtaining the public network information corresponding to the private network information, sending a mapping configuration request to the gateway to which the private network host belongs, and the mapping configuration request is used for The triggering gateway configures the mapping between the private network information and the public network information, and finally feeds the public network information to the access terminal, so that the access terminal remotely accesses the virtual machine through the public network information of the virtual machine; Information such as the number and IP address, which causes large maintenance and is not suitable for large-scale deployment of VNC. It achieves the automatic acquisition and configuration of port number and IP address, which is beneficial to the large-scale deployment of VNC. Referring to FIG. 6, a structural block diagram of a remote access device according to another embodiment of the present invention is shown. The remote access device can be implemented as all or part of an access terminal by software, hardware, or a combination of both. The remote access device includes: a request sending module 610, an information receiving module 620, and a remote access module 630.

The request sending module 610 is configured to send, to the controller, an obtaining request for acquiring public network information of the virtual machine, where the obtaining request carries an identifier of the virtual machine.

The information receiving module 620 is configured to receive the public network information of the virtual machine that is sent by the controller, where the public network information of the virtual machine is from the virtual machine by the controller according to the identifier of the virtual machine. After obtaining the private network information of the virtual machine on the private network host, the generated private network The information corresponding to the information, and the public network information of the virtual machine is triggered by the controller to establish a mapping relationship between the gateway to which the private network host belongs and the private network information of the virtual machine.

The remote access module 630 is configured to remotely access the virtual machine by using public network information of the virtual machine.

In summary, the remote access device provided by the embodiment, after the access terminal sends the acquisition request for acquiring the public network information of the virtual machine to the controller, the controller controls the virtual machine from the virtual machine according to the identifier of the virtual machine. After obtaining the private network information of the virtual machine, the network host obtains the public network information corresponding to the private network information, and the controller sends a mapping configuration request to the gateway to which the private network host belongs. The mapping configuration request is used to trigger the gateway configuration private. The mapping relationship between the network information and the public network information, and then the access terminal remotely accesses the virtual machine through the public network information of the virtual machine after receiving the public network information of the virtual machine sent by the controller; Information such as the number and IP address, which causes large maintenance and is not suitable for large-scale deployment of VNC. It achieves the automatic acquisition and configuration of port number and IP address, which is beneficial to the large-scale deployment of VNC. Please refer to FIG. 7, which is a structural block diagram of a remote access system according to an embodiment of the present invention. The remote access system includes a controller 500 and an access terminal 600. The controller 500 and the access terminal 600 are connected by a wired network or wirelessly. The network is connected, or the controller 500 is implemented as part of the access terminal 600.

Controller 500 can include a remote access configuration device that can be implemented in software, hardware, or a combination of both. The remote access configuration device includes: a request receiving module 510, an information obtaining module 520, an information obtaining module 530, a mapping configuration module 540, and an information feedback module 550.

Specifically, the information obtaining module 520 includes: a host login unit 520a, an information query unit 520b, and an information acquisition unit 520c.

The host login unit 520a is configured to log in to the private network host that carries the virtual machine through a predetermined interface.

The host login unit 520a includes: a first login subunit 520al; or, a second The subunit 520a2 is registered.

The first login sub-unit 520al is configured to log in to the private network host through an interface in the form of a TCP control protocol set in advance; or the second login sub-unit 520a2 is configured to pass a preset hypertext transfer protocol. An HTTP interface is used to log in to the private network host.

The information querying unit 520b is configured to query the private network host for private network information corresponding to the identifier of the virtual machine according to the identifier of the virtual machine.

The information obtaining unit 520c is configured to obtain the private network information of the queried virtual machine. The information obtaining module 530 is configured to generate public network information corresponding to the private network information.

Specifically, the information obtaining module 530 includes: an information obtaining unit 530a and an information selecting unit 530b.

The information obtaining unit 530a is configured to obtain at least one group of public network information of the gateway to which the private network host belongs.

The information selecting unit 530b is configured to select a group of public network information from the at least one group of public network information as the public network information corresponding to the private network information.

The mapping configuration module 540 is configured to send a mapping configuration request to the gateway to which the private network host belongs, where the mapping configuration request is used to trigger the gateway to configure a mapping relationship between the private network information and the public network information.

Access terminal 600 can include a remote access device that can be implemented in software, hardware, or a combination of both. The remote access device includes: a request sending module 610, an information receiving module 620, and a remote access module 630.

The information receiving module 620 is configured to receive the public network information of the virtual machine that is sent by the controller, where the public network information of the virtual machine is from the virtual machine by the controller according to the identifier of the virtual machine. After the private network host obtains the private network information of the virtual machine, the information corresponding to the private network information is generated, and the public network information of the virtual machine is triggered by the controller to belong to the private network host. The gateway establishes a mapping relationship with the private network information of the virtual machine.

The remote access module 630 is configured to remotely access the virtual machine by using public network information of the virtual machine. In summary, the remote access system provided by the embodiment, after the access terminal sends the acquisition request for acquiring the public network information of the virtual machine to the controller, the controller uses the private identifier of the virtual machine according to the identifier of the virtual machine. After obtaining the private network information of the virtual machine, the network host obtains the public network information corresponding to the private network information, and the controller sends a mapping configuration request to the gateway to which the private network host belongs. The mapping configuration request is used to trigger the gateway configuration private. The mapping relationship between the network information and the public network information, and then the access terminal remotely accesses the virtual machine through the public network information of the virtual machine after receiving the public network information of the virtual machine sent by the controller; Information such as the number and IP address, which causes large maintenance and is not suitable for large-scale deployment of VNC. It achieves the automatic acquisition and configuration of port number and IP address, which is beneficial to the large-scale deployment of VNC.

In the remote access system provided by the embodiment, the controller also logs in to the private network host to obtain the private network information of the virtual machine through the interface of the TCP format or the interface of the HTTP format. The controller also sends the private network information to the gateway. The mapping configuration request of the public network information establishes a mapping relationship between the private network information and the public network information on the gateway; realizes automatic configuration and dynamic configuration of the mapping relationship, and improves the efficiency of remote access. Please refer to FIG. 8 , which is a schematic structural diagram of a controller according to an embodiment of the present invention. The controller is configured to be implemented as a controller in a remote access system, where the controller includes: a processor 820 , a memory 840 , and a sending 860 and receiver 880.

The processor 820 is configured to control the receiver 880 to receive an acquisition request for acquiring the public network information of the virtual machine that is sent by the access terminal, where the acquisition request carries the identifier of the virtual machine; And obtaining, according to the identifier of the virtual machine, private network information of the virtual machine from a private network host that carries the virtual machine;

The processor 820 is further configured to acquire public network information corresponding to the private network information. The processor 820 is further configured to control the sender 860 to send a mapping configuration to a gateway to which the private network host belongs. The mapping configuration request is used to trigger the gateway to configure a mapping relationship between the private network information and the public network information;

The processor 820 is further configured to control the sender 860 to feed back the public network information to the access terminal, so that the access terminal remotely accesses the virtual machine by using public network information of the virtual machine.

In a more preferred embodiment, the processor 820 is further configured to log in to the private network host that carries the virtual machine by using a predetermined interface. The processor 820 is further configured to query, on the private network host, the private network information corresponding to the identifier of the virtual machine according to the identifier of the virtual machine;

The processor 820 is further configured to obtain the private network information of the queried virtual machine.

In a further preferred embodiment, the processor 820 is further configured to log in to the private network host by using an interface of a transmission control protocol TCP format set in advance; or

The processor 820 is further configured to log in to the private network host by using an interface of a hypertext transfer protocol HTTP format set in advance.

In a further preferred embodiment, the processor 820 is further configured to acquire at least one group of public network information of a gateway to which the private network host belongs;

The processor 820 is further configured to select a group of public network information from the at least one group of public network information as the public network information corresponding to the private network information.

In summary, the controller provided by the embodiment, after the access terminal sends the acquisition request for acquiring the public network information of the virtual machine to the controller, the controller uses the private network carrying the virtual machine according to the identifier of the virtual machine. After obtaining the private network information of the virtual machine, the host obtains the public network information corresponding to the private network information, and the controller sends a mapping configuration request to the gateway to which the private network host belongs. The mapping configuration request is used to trigger the gateway to configure the private network. The mapping relationship between the information and the public network information, and then the access terminal remotely accesses the virtual machine through the public network information of the virtual machine after receiving the public network information of the virtual machine sent by the controller; Information such as the IP address and the IP address are not suitable for large-scale deployment of VNC. The automatic acquisition and configuration of port numbers and _IP addresses are beneficial to the large-scale deployment of VNC.

The controller provided in this embodiment also obtains the private network information of the virtual machine by using the interface of the TCP format or the interface of the HTTP format, and also sends the mapping of the private network information and the public network information to the gateway. The configuration request establishes a mapping relationship between the private network information and the public network information on the gateway. The automatic configuration and dynamic configuration of the mapping relationship are implemented, and the efficiency of remote access is improved. Please refer to FIG. 9 , which is a schematic structural diagram of an access terminal according to an embodiment of the present invention. The access terminal is configured to be implemented as an access terminal in a remote access system, where the access terminal includes: a receiver 920 and a transmitter 940. , processor 960 and memory 980.

The processor 960 is configured to control the sender 940 to send an acquisition request for acquiring public network information of the virtual machine to the controller, where the acquisition request carries an identifier of the virtual machine; The processor 960 is further configured to control the receiver 920 to receive public network information of the virtual machine that is sent by the controller, where public network information of the virtual machine is determined by the controller according to the virtual machine. The information corresponding to the private network information generated after the private network information of the virtual machine is obtained from the private network host that carries the virtual machine, and the public network information of the virtual machine is used by the controller. The mapping between the private network information of the virtual machine and the gateway to which the private network host belongs is triggered;

The processor 960 is further configured to remotely access the virtual machine by using public network information of the virtual machine.

In summary, after the access terminal sends the acquisition request for acquiring the public network information of the virtual machine to the controller, the access terminal obtains the private network of the virtual machine according to the identifier of the virtual machine. After obtaining the private network information of the virtual machine, the host obtains the public network information corresponding to the private network information, and the controller sends a mapping configuration request to the gateway to which the private network host belongs. The mapping configuration request is used to trigger the gateway to configure the private network. The mapping relationship between the information and the public network information, and then the access terminal remotely accesses the virtual machine through the public network information of the virtual machine after receiving the public network information of the virtual machine sent by the controller; Information such as the IP address and the IP address are not suitable for large-scale deployment of VNC. The automatic acquisition and configuration of port numbers and _IP addresses are beneficial to the large-scale deployment of VNC. Please refer to FIG. 10, which shows a structural block diagram of a remote access system according to an embodiment of the present invention. The remote access system includes: a private network host 1010 carrying at least one virtual machine, a gateway 1020 connected to the private network host 1010, and a controller 1030, and an access terminal 1040 connected to the gateway 1020 and the controller 1030, wherein the controller 1030 is also coupled to gateway 1020.

The controller 1030 is a controller as described in the more preferred embodiment of the embodiment shown in FIG. 8 and the embodiment shown in FIG. 8;

The access terminal 1040 is an access terminal as described in the embodiment shown in FIG.

Through the description of the above embodiments, it will be apparent to those skilled in the art that the present invention can be implemented in hardware, firmware implementation, or a combination thereof. When implemented in software, the functions described above may be stored in or transmitted as one or more instructions or code on a computer readable medium. Computer readable media includes both computer storage media and communication media including any medium that facilitates transfer of a computer program from one location to another. A storage medium may be any available media that can be accessed by a computer. By way of example and not limitation, computer readable media may comprise RAM, ROM, EEPROM, CD-ROM or other optical disk storage, disk storage media or other magnetic storage device, or can be used for carrying or storing in the form of an instruction or data structure. The desired program code and any other medium that can be accessed by the computer. Also. Any connection may suitably be a computer readable medium. For example, if the software is transmitted from a website, server, or other remote source using coaxial cable, fiber optic cable, twisted pair, digital subscriber line (DSL), or wireless technologies such as infrared, radio, and microwave, then the coaxial cable , fiber optic cable, twisted pair, DSL, or wireless technologies such as infrared, wireless, and microwaves are included in the fixing of the associated media. As used in the present invention, a disk and a disc include a compact disc (CD), a laser disc, a disc, a digital versatile disc (DVD), a floppy disk, and a Blu-ray disc, wherein the disc is usually magnetically copied, and the disc is The laser is used to optically replicate the data. Combinations of the above should also be included within the scope of the computer readable media. It should be noted that: the remote access configuration device and the remote access device provided by the foregoing embodiments are only illustrated by the division of the foregoing functional modules when performing remote access configuration and remote access. In actual applications, the foregoing may be performed as needed. The function assignment is performed by different functional modules, that is, the internal structure of the remote access configuration device and the remote access device are divided into different functional modules to complete all or part of the functions described above. In addition, the remote access configuration device, the remote access device, the remote access configuration method, and the remote access method are provided in the same embodiment. For details, refer to the method embodiment, and details are not described herein. It should be understood that the singular forms "a", "an", "the", "the" and "the" are intended to include the plural. It should also be understood that "and/or" as used herein is meant to include any and all possible combinations of one or more of the associated listed items. The serial numbers of the embodiments of the present invention are merely for the description, and do not represent the advantages and disadvantages of the embodiments.

A person skilled in the art may understand that all or part of the steps of implementing the above embodiments may be completed by hardware, or may be instructed by a program to execute related hardware, and the program may be stored in a computer readable storage medium. The storage medium mentioned may be a read only memory, a magnetic disk or an optical disk or the like. The above is only the preferred embodiment of the present invention, and is not intended to limit the present invention. Any modifications, equivalent substitutions, improvements, etc., which are within the spirit and scope of the present invention, should be included in the protection of the present invention. Within the scope.

Claims

Rights request

1. A remote access configuration method, characterized in that the method includes:

Receive an acquisition request sent by the access terminal for obtaining the public network information of the virtual machine, where the acquisition request carries the identification of the virtual machine;

Obtain the private network information of the virtual machine from the private network host hosting the virtual machine according to the identifier of the virtual machine;

Obtain public network information corresponding to the private network information;

Send a mapping configuration request to the gateway to which the private network host belongs, where the mapping configuration request is used to trigger the gateway to configure the mapping relationship between the private network information and the public network information;

The public network information is fed back to the access terminal so that the access terminal remotely accesses the virtual machine through the public network information of the virtual machine.

2. The method according to claim 1, characterized in that: obtaining the private network information of the virtual machine from the private network host hosting the virtual machine according to the identifier of the virtual machine includes: through a predetermined interface Log in to the private network host hosting the virtual machine;

Using the identifier of the virtual machine, query the private network information corresponding to the identifier of the virtual machine on the private network host;

Obtain the queried private network information of the virtual machine.

3. The method according to claim 2, characterized in that logging in to the private network host hosting the virtual machine through a predetermined interface includes:

Log in to the private network host through the preset transmission control protocol TCP interface; or,

Log in to the private network host through a preset hypertext transfer protocol HTTP interface.

4. The method according to any one of claims 1 to 3, characterized in that the obtaining the public network information corresponding to the private network information includes:

Obtain at least one set of public network information of the gateway to which the private network host belongs;

Select a set of public network information from the at least one set of public network information as the public network information corresponding to the private network information.

5. A remote access method, characterized in that the method includes: sending an acquisition request for obtaining the public network information of the virtual machine to the controller, the acquisition request carrying the identifier of the virtual machine;

Receive the public network information of the virtual machine sent by the controller. The public network information of the virtual machine is obtained by the controller from the private network host hosting the virtual machine according to the identification of the virtual machine. Information corresponding to the private network information generated after the private network information of the virtual machine is generated, and the public network information of the virtual machine is triggered by the controller to establish a gateway to which the private network host belongs to establish a connection with the virtual machine. The mapping relationship between private network information;

Remotely access the virtual machine through the public network information of the virtual machine.

6. A remote access configuration device, characterized in that the device includes:

A request receiving module, configured to receive an acquisition request sent by the access terminal for obtaining the public network information of the virtual machine, where the acquisition request carries the identifier of the virtual machine;

An information acquisition module, configured to obtain the private network information of the virtual machine from the private network host hosting the virtual machine according to the identifier of the virtual machine;

The information obtaining module is used to obtain the public network information corresponding to the private network information; the mapping configuration module is used to send a mapping configuration request to the gateway to which the private network host belongs, and the mapping configuration request is used to trigger the The gateway configures a mapping relationship between the private network information and the public network information;

An information feedback module is configured to feed back the public network information to the access terminal, so that the access terminal remotely accesses the virtual machine through the public network information of the virtual machine.

7. The device according to claim 6, characterized in that the information acquisition module includes: a host login unit, an information query unit and an information acquisition unit;

The host login unit is used to log in to the private network host hosting the virtual machine through a predetermined interface;

The information query unit is configured to query the private network information corresponding to the identity of the virtual machine on the private network host according to the identity of the virtual machine;

The information obtaining unit is used to obtain the queried private network information of the virtual machine.

8. The device according to claim 7, wherein the host login unit includes: a first login subunit; or a second login subunit;

The first login subunit is used to log in to the private network host through a preset transmission control protocol TCP interface; or,

The second login subunit is used to log in to the private network host through a preset interface in the form of Hypertext Transfer Protocol HTTP.

9. The device according to any one of claims 6 to 8, characterized in that the information obtaining module includes: an information obtaining unit and an information selecting unit;

The information obtaining unit is used to obtain at least a set of public network information of the gateway to which the private network host belongs;

The information selection unit is configured to select a set of public network information from the at least one set of public network information as the public network information corresponding to the private network information.

10. A remote access device, characterized in that the device includes:

A request sending module, configured to send an acquisition request for obtaining the public network information of the virtual machine to the controller, where the acquisition request carries the identification of the virtual machine;

An information receiving module, configured to receive the public network information of the virtual machine sent by the controller. The public network information of the virtual machine is obtained by the controller from the server hosting the virtual machine according to the identification of the virtual machine. Information corresponding to the private network information generated after the private network host obtains the private network information of the virtual machine, and the public network information of the virtual machine is triggered by the controller to the gateway to which the private network host belongs Establish a mapping relationship with the private network information of the virtual machine;

A remote access module, configured to remotely access the virtual machine through the public network information of the virtual machine.

11. A remote access system, characterized in that the system includes: a private network host hosting at least one virtual machine, a gateway and a controller connected to the private network host, and a remote access system connected to the gateway and the controller. The access terminals are all connected, wherein the controller is also connected to the gateway; the controller includes the remote access configuration device as claimed in any one of claims 6 to 9; the access terminal includes the remote access configuration device as claimed in claim 10 The remote access device described above.