WO2017020597A1

WO2017020597A1 - Resource cache method and apparatus

Info

Publication number: WO2017020597A1
Application number: PCT/CN2016/077876
Authority: WO
Inventors: 黄凌云
Original assignee: 华为技术有限公司
Priority date: 2015-07-31
Filing date: 2016-03-30
Publication date: 2017-02-09
Also published as: CN106411978A; CN106411978B

Abstract

Provided is a resource cache method. The method comprises: after receiving a resource returned by a resource server to terminal equipment, a Web cache apparatus determining that the resource satisfies a first cache condition; sending a parse request to a parse server, wherein the parse request carries a domain name in a URL of the resource; receiving an identifier of the server obtained by the parse server according to the domain name in the URL of the resource; when the parsed identifier of the server is an identifier of the resource server, caching the resource, wherein caching the resource comprises caching the resource in the Web cache apparatus for providing same to terminal equipment that accesses the resource. The present invention can prevent a Web cache apparatus from caching a malicious resource so as to prevent same from providing the malicious resource, as a source server resource, to other terminal equipment users.

Description

Resource buffering method and device

The present application claims priority to Chinese Patent Application No. 20151046472, filed on Jul. 31, 2015, the entire disclosure of which is incorporated herein by reference. .

Technical field

The present invention relates to the field of communications, and in particular, to a resource caching method and apparatus.

Background technique

With the rapid development of the Internet, the rapid growth of network traffic has brought enormous challenges to network operators. The network infrastructure expansion investment is huge, and it is difficult to match the growth rate of user traffic. The Internet Cache (Web Cache) system is one of the effective ways to solve this problem. Most of the current network traffic comes from the Hyper Text Transfer Protocol (HTTP), which mainly includes video, file download, web browsing, etc. Since HTTP is based on client/server (C/S) mode, When users access resources, they need to obtain the same data from the source server. The more people access the same resources, the larger the duplicate data traffic generated.

Based on the idea of storing bandwidth and traffic localization, Web Cache caches hot resources to the local area and directly provides services for terminal device users. This greatly reduces the traffic to the upper-level network and saves network operators' investment, such as network infrastructure. Facilities construction and inter-network settlement fees, etc., also reduce the delay in responding to terminal equipment access and improve the user experience.

The transparent cache is an implementation of the Web Cache. The transparent cache technology uses the Web server address to interact with the terminal device and interacts with the Web server using the terminal device address, so that the terminal device and the Web server have no perception of the cache system. Generally, the transparent cache determines the source server IP address according to the target Internet Protocol (IP) address in the request packet of the Transmission Control Protocol (TCP) connection, and if the packet is maliciously forged by the terminal device. Or pointing to a malicious website, which may cause Web Cache to cache malicious content locally and provide it as source server content to other terminal device users. For example, after the terminal device establishes a TCP connection with a malicious website through a transparent cache, the access request is accessed. Pseudo-created Get http://www.baidu.com/20150619qq_setup.exe is sent to the malicious website through the transparent cache, the malicious website returns the Trojan virus to the terminal device through the transparent cache, if the transparent cache determines http://www.baidu The resource indicated by .com/20150619qq_setup.exe is a hot resource, and the Trojan virus returned by the malicious website will be cached locally, and used by other terminals. When the user obtains the real resource indicated by http://www.baidu.com/20150619qq_setup.exe, the transparent cache will return the Trojan virus to other terminal devices.

Summary of the invention

Embodiments of the present invention provide a resource caching method and apparatus, which can prevent an Internet caching device from caching malicious resources, thereby preventing it from providing malicious resources as source server resources to other terminal device users.

The first aspect provides a resource caching method, where the method includes: after receiving the resource returned by the resource server to the terminal device, the Internet cache device determines that the resource satisfies the first cache condition; and the Internet cache device sends the parsing Requesting to the resolution server, the parsing request carrying the domain name in the Uniform Resource Locator URL of the resource; the Internet cache device receiving the identifier of the server obtained by the parsing server according to the domain name in the URL of the resource When the identifier of the server obtained by the parsing is an identifier of the resource server, the internet caching device caches the resource, and the caching the resource includes caching the resource in the internet caching device to Provided to the terminal device accessing the resource.

In conjunction with the implementation of the first aspect, in a first possible implementation manner of the first aspect, before the receiving the resource returned by the resource server to the terminal device, the method further includes: the Internet cache device receiving the a connection request sent by the terminal device to establish a connection with the resource server, where the connection request carries an identifier of the terminal device and an identifier of the resource server; and the Internet cache device establishes the terminal device and the resource a connection of the server; the Internet cache device receives an access request for the resource sent by the terminal device, where the access request carries a domain name in a URL of the resource; and the Internet cache device is configured according to the Determining, by the terminal device, a connection with the resource server, sending the access request to the resource server; and the Internet cache device receiving the resource returned by the resource server.

With reference to the first aspect, the first possible implementation manner of the first aspect, in a second possible implementation manner, when the identifier of the server obtained by the parsing is not the identifier of the resource server, the internet cache The device does not cache the resource.

With reference to the first aspect, the first to the second possible implementation manners of the first aspect, in a third possible implementation manner, the establishing, by the Internet cache device, the connection between the terminal device and the resource server includes: The Internet cache device establishes a connection between the terminal device and the resource server by using an identifier of the terminal device, where the identifier of the terminal device includes an Internet Protocol IP address of the terminal device.

With reference to the first aspect, the first to third possible implementation manners of the first aspect, in a fourth possible implementation manner, the Internet cache device further sends the resource to the terminal device, the Internet The cache device sends the resource to the terminal device by using an identifier of the resource server, where the identifier of the resource server includes an IP address of the resource server.

With reference to the first aspect, the first to fourth possible implementation manners of the first aspect, in a fifth possible implementation manner, the connection request includes a transmission control protocol TCP connection request, where the resource is The access request includes a hypertext transfer protocol HTTP request, and the resolution server includes a domain name system DNS server.

With reference to the first aspect, the first to fifth possible implementation manners of the first aspect, in a sixth possible implementation manner, the determining that the resource meets the first cache condition comprises determining that the resource satisfies resource access According to the heat statistics condition, the resource access heat statistics include statistics on the frequency of accessing the same resource in a certain period of time.

The second aspect provides a resource cache device, including a processing module, a sending module, a receiving module, and a cache module: the processing module is configured to determine, after the receiving module receives the resource returned by the resource server to the terminal device, The sending module satisfies a first cache condition; the sending module is configured to send a parsing request to a parsing server, where the parsing request carries a domain name in a uniform resource locator URL of the resource; and the receiving module is configured to receive the The identifier of the server obtained by parsing the server according to the domain name in the URL of the resource; the cache module is configured to cache the resource when the identifier of the server obtained by the parsing is an identifier of the resource server, The caching the resource includes caching the resource in the cache module to provide to a terminal device accessing the resource.

With the implementation of the second aspect, in a first possible implementation manner of the second aspect, the receiving module is further configured to: before receiving the resource that the resource server returns to the terminal device, receive the sending by the terminal device Establishing a connection request for the connection with the resource server, where the connection request carries an identifier of the terminal device and an identifier of the resource server; the processing module is further configured to establish the terminal device and the resource server The receiving module is further configured to receive an access request for the resource sent by the terminal device, where the access request carries a domain name in a URL of the resource; the sending module is further configured to establish according to the The terminal device is connected to the resource server, and sends the access request to the resource server; the receiving module is further configured to receive the resource returned by the resource server.

With reference to the second aspect, the first possible implementation manner of the second aspect, in a second possible implementation manner, the cache module is further configured to: when the identifier of the server obtained by the parsing is not the resource server The resource is not cached when it is identified.

With reference to the second aspect, the first to the second possible implementation manners of the second aspect, in a third possible implementation manner, the processing module is further configured to establish a connection between the terminal device and the resource server The processing module is further configured to establish, by using an identifier of the terminal device, a connection between the terminal device and the resource server, where the identifier of the terminal device includes an Internet Protocol IP address of the terminal device.

With reference to the second aspect, the first to the third possible implementation manners of the second aspect, in a fourth possible implementation manner, the sending module is further configured to send the resource to the terminal device, The sending module sends the resource to the terminal device by using an identifier of the resource server, where the identifier of the resource server includes an IP address of the resource server.

With reference to the second aspect, the first to fourth possible implementation manners of the second aspect, in a fifth possible implementation manner, the connection request includes a transmission control protocol TCP connection request, where the resource is The access request includes a hypertext transfer protocol HTTP request, and the resolution server includes a domain name system DNS server.

With reference to the second aspect, the first to fifth possible implementation manners of the second aspect, in a sixth possible implementation manner, the determining that the resource meets the first cache condition comprises determining that the resource satisfies resource access According to the heat statistics condition, the resource access heat statistics include statistics on the frequency of accessing the same resource in a certain period of time.

According to the technical solution provided by the embodiment of the present invention, after receiving the resource returned by the resource server to the terminal device, determining that the resource meets the first cache condition, sending the parsing request to the parsing server, where the parsing request carries the resource And the domain name of the server that is obtained by the parsing server according to the domain name of the resource, and when the identifier of the server obtained by the parsing is the identifier of the resource server, the resource is cached. The resource includes caching the resource in the internet cache device to provide a terminal device accessing the resource, and can prevent the internet cache device from caching malicious resources, thereby preventing the malicious resource from being provided as a source server resource to other terminals. user.

DRAWINGS

In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings used in the embodiments or the description of the prior art will be briefly described below. Obviously, the drawings in the following description are only It is a certain embodiment of the present invention, and other drawings can be obtained from those skilled in the art without any creative work.

1 is a schematic diagram of a network architecture applied to an embodiment of the present invention;

2 is an exemplary flowchart of a resource caching method according to an embodiment of the present invention;

3 is an exemplary signaling diagram of a resource caching method in accordance with an embodiment of the present invention;

4 is an exemplary signaling diagram of a resource caching method in accordance with another embodiment of the present invention;

FIG. 5 is a schematic diagram showing the hardware structure of a general-purpose computer structure according to an embodiment of the present invention; FIG.

FIG. 6 is a schematic structural diagram of a resource cache apparatus according to an embodiment of the invention.

detailed description

In the following description, for purposes of illustration and description, reference However, it will be apparent to those skilled in the art that the present invention can be implemented in other embodiments without these specific details. Bright. In other instances, detailed descriptions of well-known devices, circuits, and methods are omitted so as not to obscure the description of the invention.

FIG. 1 is a schematic diagram of a network architecture of a resource caching method according to an embodiment of the invention.

The Internet cache device 102 is deployed between the terminal device 101 and the resource server 104, and monitors the resource access request sent by the terminal device 101. The copy of the response returned by the resource server 104 can be saved locally. The response returned by the resource server 104 can be For example, but not limited to, at least one of a Hyper Text Markup Language (HTML) web page, a picture, a video, and a file download. Upon subsequent receipt of a request by the terminal device 101 or other terminal device to access the same resource, the Internet caching device 102 returns the response to the user using the locally saved copy of the response, thereby eliminating the need to request the resource server 104 again.

The resolution server 103 may be, for example, but not limited to, a Domain Name System (DNS) server, which is a distributed database that is mapped to each other as a domain name and an IP address on the Internet. The host name is used to obtain the IP address corresponding to the host name. The process is called domain name resolution, or host name resolution. The DNS is described in RFC 2181, RFC 2136, and RFC 2308 documents in the Request For Comments (RFC) with Internet standards.

In the network architecture of the resource caching method according to an embodiment of the present invention, the terminal device 101 sends a resource access request to the Internet cache device 102, and the Internet cache device 102 forwards the resource access request to the corresponding resource server 104, and the resource server 104 returns to the terminal. The device 101 requests the accessed resource to the Internet caching device 102, and the Internet caching device 102 forwards the resource to the terminal device 101. The Internet cache device 102 determines whether the resource needs to be cached. When it is determined that the resource needs to be cached, the request resolution server 103 parses the domain name in the Uniform Resource Locator (URL) of the resource to obtain the server identifier. If the obtained server identifier is the same as the identifier of the resource server 104, the resource is cached; otherwise, the resource is not cached.

In an implementation manner of the embodiment of the present invention, the Internet cache device is an independent physical device, and may also be set as a functional entity in other devices, and may have other names.

2 is an exemplary flow diagram of a resource caching method 200 in accordance with an embodiment of the present invention. In a specific implementation process, the resource caching method 200 may be performed by, for example, but not limited to, an internet caching device, which may be, for example, but not limited to, a transparent cache. A resource server is an implementation of a web server.

S202. After receiving the resource returned by the resource server to the terminal device, the Internet cache device determines that the resource meets the first cache condition.

In an implementation manner of the embodiment of the present invention, the determining that the resource meets the first cache condition comprises determining that the resource meets a resource access heat statistics condition, where the resource access heat statistics include accessing the same resource in a certain period of time. Frequency statistics.

In an implementation manner of the embodiment of the present invention, before receiving the resource returned by the resource server to the terminal device:

The Internet cache device receives a connection request that is established by the terminal device to establish a connection with the resource server, where the connection request carries an identifier of the terminal device and an identifier of the resource server;

The internet caching device establishes a connection between the terminal device and the resource server;

The Internet cache device receives an access request for the resource sent by the terminal device, where the access request carries a domain name in a URL of the resource;

The Internet cache device sends the access request to the resource server according to the established connection between the terminal device and the resource server;

The internet caching device receives the resource returned by the resource server.

In an implementation manner of the embodiment of the present invention, the connection request may be, for example, but not limited to, a Transmission Control Protocol (TCP) connection request, and the access request for the resource may be, for example, but not limited to, an HTTP request.

In an implementation manner of the embodiment of the present invention, the Internet cache device establishes a connection between the terminal device and the resource server by using the identifier of the terminal device, and the Internet cache device sends the access request to the resource by using the identifier of the terminal device. The server, wherein the identifier of the terminal device includes an IP address of the terminal device.

In an implementation manner of the embodiment of the present invention, the Internet cache device sends the resource returned by the resource server to the terminal device by using the identifier of the resource server, where the identifier of the resource server includes an IP address of the resource server.

Specifically, the resource returned by the resource server may be at least one of, for example, but not limited to, an HTML webpage, a picture, a video, and a file download.

S204. The Internet cache device sends a parsing request to a parsing server, where the parsing request carries a domain name in a URL of the resource.

S206. The Internet cache device receives an identifier of a server that is obtained by the parsing server according to a domain name in a URL of the resource.

In S204 and S206, in an implementation manner of the embodiment of the present invention, the resolution server includes a DNS server. The parsing request is used to request the DNS server to resolve the domain name in the URL of the resource. The result of the parsing indicates the IP address of the server.

S208. When the identifier of the server obtained by the parsing is an identifier of the resource server, the Internet cache device caches the resource, and the caching the resource includes caching the resource in the Internet cache device. To provide access to the terminal device of the resource.

The terminal device provided for accessing the resource includes other terminal devices that are provided for accessing the resource, and the terminal device that is provided for accessing the resource again.

In an implementation manner of the embodiment of the present invention, when the identifier of the parsed server is not the identifier of the resource server, the Internet cache device does not cache the resource.

In an implementation manner of the embodiment of the present invention, when the identifier of the server obtained by the parsing is an IP address of the resource server, the Internet cache device caches the resource locally. when When the identifier of the parsed server is not the IP address of the resource server, the Internet cache device does not cache the resource locally.

In an implementation manner of the embodiment of the present invention, when at least the following two conditions are met, the Internet cache device caches the resource locally:

1. When the statistical conditions for resource access are met,

2. When the server identifier obtained by the parsing is the resource server identifier.

In addition, after receiving the resource returned by the resource server to the terminal device, the Internet cache device may further determine whether the resource needs to be cached according to the size and type of the resource.

According to the technical solution provided by the embodiment of the present invention, after receiving the resource returned by the resource server to the terminal device, after determining that the resource meets the first cache condition, sending the parsing request to the parsing server, where the parsing request carries the The domain name of the resource, the identifier of the server obtained by the parsing server according to the domain name of the resource, and when the identifier of the server obtained by the parsing is the identifier of the resource server, the resource is cached. The resource includes caching the resource in the internet cache device to provide a terminal device accessing the resource, and can prevent the internet cache device from caching malicious resources, thereby preventing the malicious resource from being provided as a source server resource to other resources. End user.

3 is an exemplary signaling diagram of a resource caching method in accordance with an embodiment of the present invention. In a particular implementation, the resource caching method 300 can be performed by, for example, but not limited to, an internet caching device. In this embodiment, the Internet caching device may be, for example but not limited to, a transparent cache, and the parsing server may be, for example, but not limited to, a DNS server. A resource server is an implementation of a web server.

S301. The terminal device sends a TCP connection request established to the resource server to the transparent cache, where the IP address of the terminal device and the IP address of the resource server are carried.

S302. The transparent cache establishes a TCP connection to the resource server by using an IP address of the terminal device.

S303. The transparent cache receives an HTTP access request sent by the terminal device to the resource server.

S304. The transparent cache sends the HTTP access request to the resource server by using an IP address of the terminal device.

S305. The resource server returns a resource that the terminal device requests to access to the transparent cache.

S306. The transparent cache returns the resource returned by the resource server to the terminal device by using the IP address of the resource server.

S307. The transparent cache determines, according to the resource access popularity statistics, that the resource needs to be cached.

S308. The transparent cache request resolution server performs domain name resolution on the domain name in the URL of the resource in the access request. The transparent cache sends a DNS resolution request to the DNS server, where the domain name in the URL of the resource is carried, and the DNS server is requested to resolve the domain name in the URL.

S309. The DNS server performs DNS resolution on the domain name in the URL of the resource, and obtains an analysis result indicating the IP address of the server.

S310. The DNS server sends the parsing result to the transparent cache.

S311. The transparent cache performs server IP address verification. The transparent cache determines whether the IP address of the server is the IP address of the resource server. If yes, the resource is cached locally; otherwise, the resource is not cached.

According to the technical solution provided by the embodiment of the present invention, after receiving the resource returned by the resource server to the terminal device, after determining that the resource meets the first cache condition, sending the parsing request to the parsing server, where the parsing request carries the The domain name of the resource is received by the parsing server according to the domain name of the resource, and when the identifier of the server obtained by the parsing is the identifier of the resource server, the resource is cached. The resource includes buffering the resource in the internet cache device to provide a terminal device accessing the resource, and can prevent the internet cache device from caching malicious resources, thereby preventing the malicious resource from being provided as a source server resource. Other end users.

4 is an exemplary signaling diagram of a resource caching method in accordance with another embodiment of the present invention. In a particular implementation, the resource caching method 400 can be performed by, for example, but not limited to, an internet caching device. In this embodiment, the Internet caching device may be, for example but not limited to, a transparent cache, and the parsing server may be, for example, but not limited to, a DNS server. A resource server is an implementation of a web server.

S401. The terminal device sends a TCP connection request established to the first resource server to the transparent cache, where the IP address of the terminal device and the IP address of the first resource server are carried.

S402. The transparent cache establishes a TCP connection to the first resource server by using an IP address of the terminal device.

S403. The transparent cache receives an HTTP access request sent by the terminal device to the first resource server.

S404. The transparent cache requests the resolution server to perform domain name resolution on the domain name in the URL of the resource in the access request for each received access request. The transparent cache sends a DNS resolution request to the DNS server, where the domain name in the URL of the resource to be accessed by the HTTP access request is carried, and the DNS server is requested to resolve the domain name in the URL.

S405. The DNS server performs DNS resolution on the domain name in the URL of the resource, and obtains an analysis result indicating the IP address of the server.

S406. The DNS server sends the parsing result to the transparent cache.

S407. The transparent cache performs server IP address verification. The transparent cache determines whether the IP address of the server indicated by the parsing result is the IP address of the first resource server. When the IP address of the server is the IP address of the first resource server, S408 to S410 are performed; when the IP address of the server is the second When the IP address of the resource server is used, S411 to S413 are executed.

S408. The transparent cache sends the HTTP access request to the first resource server by using an IP address of the terminal device.

S409. The first resource server returns a resource that the terminal device requests to access to the transparent cache.

S410. The transparent cache returns the resource returned by the first resource server to the terminal device by using an IP address of the first resource server.

S411. The transparent cache disconnects the TCP connection to the first resource server.

S412. The transparent cache establishes a TCP connection to the second resource server by using an IP address of the terminal device.

S413. The transparent cache sends the HTTP access request to the second resource server by using an IP address of the terminal device.

Thereafter, the transparent cache returns the resources returned by the second resource server to the terminal device using the IP address of the first resource server.

In an implementation manner of the embodiment of the present invention, after the resource is returned to the terminal device, the transparent cache determines whether the resource needs to be cached, and if necessary, caches the resource locally; otherwise, it does not cache.

In another implementation manner of the embodiment of the present invention, the transparent cache determines whether the resource needs to be cached before returning the resource to the terminal device, and caches the resource locally if necessary; otherwise, does not cache.

According to the technical solution provided by the embodiment of the present invention, before the resource returned by the resource server is sent to the terminal device, the parsing request is sent to the parsing server, where the parsing request carries the domain name in the URL of the resource, and receives the basis returned by the parsing server. The identifier of the server obtained by parsing the domain name in the URL of the resource, and when the identifier of the server obtained by the parsing is the identifier of the first resource server, the resource is cached, and the identifier of the server obtained by the parsing is the identifier of the second resource server. When the connection with the first resource server is disconnected, the connection with the second resource server is established, and the resource returned by the second resource server is sent to the terminal device, which can prevent the Internet cache device from caching malicious resources, thereby preventing the malicious resource from being treated as a malicious resource. Source server resources are provided to other end users.

It should be noted that the technical solutions provided by the embodiment of FIG. 2, the embodiment of FIG. 3, and the embodiment of FIG. 4 can prevent the Internet cache device from caching malicious resources, thereby preventing malicious resources from being provided as source server resources. Other terminal users, but the technical solution provided by the embodiment of FIG. 4, when the analysis result is not the first resource server, the Internet cache device needs to re-establish the connection with the second resource server, and this process greatly increases the waiting of the terminal device user. time. Moreover, in the technical solution provided by the embodiment of FIG. 4, the Internet cache device requests the resolution server to perform domain name resolution for each resource access request received, and performs server identity verification, thereby increasing the processing load of the resolution server. And response delay.

Compared with the technical solution provided by the embodiment of FIG. 4, the technical solution provided by the embodiment of FIG. 2 and the embodiment of FIG. 4 reduces the number of domain name resolutions and the number of server identification verifications by the resolution server, and reduces the number of times. The overhead of the Internet caching device avoids the process of re-establishing the connection after the parsing result is not the target resource server, thereby avoiding the response delay of the terminal device request thus introduced.

In addition, in the implementation of the embodiment of the present invention, in an implementation manner of the embodiment of the present invention, in S202, after receiving the resource returned by the resource server to the terminal device, the Internet cache device sends the resource to the terminal device, and then determines After the resource satisfies the first cache condition, S204 to S208 are performed. This implementation minimizes the response delay to the terminal device request and minimizes the waiting time of the terminal device user.

For the implementation of the embodiment of the present invention, in another implementation manner of the embodiment of the present invention, the Internet cache device may send the resource to the terminal device after performing S202 to S208. Although the response delay of the terminal device request is increased relative to the previous implementation manner, the technical solution provided by the embodiment of FIG. 4 is only satisfied for the first cache condition. The resource performs domain name resolution, and also avoids the process of re-establishing the connection after the result of the analysis is not the target resource server. Therefore, compared with the technical solution provided by the embodiment of FIG. 4, the number of times of resolving the domain name resolution server and the server are also reduced. The number of times of verification verification reduces the system overhead of the Internet cache device and also reduces the response delay to the terminal device request.

FIG. 5 is a block diagram showing the hardware structure of a general purpose computer architecture 500 in accordance with an embodiment of the present invention. As shown in FIG. 5, a general purpose computer architecture 500 includes a processor 502, a memory 504, a communication interface 506, and a bus 508. Among them, the processor 502, the memory 504, and the communication interface 506 implement a communication connection with each other through the bus 508.

The processor 502 can be a general-purpose central processing unit (CPU), a microprocessor, an application specific integrated circuit (ASIC), or one or more integrated circuits for executing related programs. The technical solution provided by the embodiment of the present invention is implemented.

The memory 504 may be a read only memory (ROM), a static storage device, a dynamic storage device, or a random access memory (RAM). Memory 504 can store operating system 5041 and other applications 5042. When the technical solution provided by the embodiment of the present invention is implemented by software or firmware, the program code for implementing the technical solution provided by the embodiment of the present invention is saved in the memory 504 and executed by the processor 502.

Communication interface 506 implements communication with other devices or communication networks using transceivers such as, but not limited to, transceivers.

Bus 508 can include a path for communicating information between various components (e.g., processor 502, memory 504, input and communication interface 506).

As shown in FIG. 6, when the data processing apparatus includes the general purpose computer architecture 500 described above, the general purpose computer architecture 500 further includes a processing module 602 for resource caching, a transmitting module 604, a receiving module 606, and a caching module 608. These modules can be implemented in hardware, software implementation, or software in combination with hardware. The modules, which are software, are stored in the memory 504 of the general purpose computer architecture 500 and may be used together as a separate program or as separate programs. As an optional implementation, these software modules can also be respectively, or one It is part of the application 5042 or is part of the operating system 5041.

The processing module 602 is configured to determine, after the receiving module receives the resource returned by the resource server to the terminal device, that the resource meets the first cache condition.

The sending module 604 is configured to send a parsing request to the parsing server, where the parsing request carries a domain name in a URL of the resource.

The receiving module 606 is configured to receive an identifier of the server that is obtained by the parsing server according to the domain name in the URL of the resource.

The cache module 608 is configured to cache the resource when the identifier of the server obtained by the parsing is an identifier of the resource server, where the caching the resource comprises caching the resource in the cache module to provide Give the terminal device accessing the resource.

Among them, the resource server is an implementation of the web server.

In an implementation manner of the embodiment of the present invention, the receiving module 606 is further configured to: before the receiving the resource returned by the resource server to the terminal device, receive the connection established by the terminal device and establishing the connection with the resource server. a connection request, where the connection request carries an identifier of the terminal device and an identifier of the resource server;

The processing module 602 is further configured to establish a connection between the terminal device and the resource server;

The receiving module 606 is further configured to receive an access request for the resource sent by the terminal device, where the access request carries a domain name in a URL of the resource;

The sending module 604 is further configured to send the access request to the resource server according to the established connection between the terminal device and the resource server;

The receiving module 606 is further configured to receive the resource returned by the resource server.

In an implementation manner of the embodiment of the present invention, the cache module 608 is further configured to not cache the resource when the identifier of the server obtained by the parsing is not the identifier of the resource server.

In an implementation manner of the embodiment of the present invention, the processing module 602 is further configured to establish the connection between the terminal device and the resource server, where the processing module 602 is further configured to establish, by using the identifier of the terminal device The terminal device is connected to the resource server, and the identifier of the terminal device includes an internet protocol IP address of the terminal device.

In an implementation manner of the embodiment of the present invention, the sending module 604 is further configured to send the resource to the terminal device, where the sending module 604 sends the resource to the terminal by using an identifier of the resource server. The device, the identifier of the resource server includes an IP address of the resource server.

According to the technical solution provided by the embodiment of the present invention, after receiving the resource returned by the resource server to the terminal device, determining that the resource meets the first cache condition, sending the parsing request to the parsing server, where the parsing request carries the resource The domain name in the URL is received by the resolution server according to the domain name in the URL of the resource. Identifying, when the identifier of the server obtained by the parsing is an identifier of the resource server, caching the resource, and the caching the resource comprises caching the resource in the internet caching device to provide to the access station The terminal device of the resource can prevent the Internet cache device from caching malicious resources, thereby preventing the malicious resource from being provided as a source server resource to other terminal users.

It should be noted that although the general purpose computer structure 500 shown in FIG. 5 only shows the processor 502, the memory 504, the communication interface 506, and the bus 508, in the specific implementation process, those skilled in the art should understand that the above resource buffer device It also contains other devices necessary to get it running. At the same time, according to specific needs, those skilled in the art should understand that the above resource buffering device may also include hardware devices that implement other additional functions. Moreover, those skilled in the art will appreciate that the above-described resource buffering device may also only include the devices necessary to implement the embodiments of the present invention, and does not necessarily include all of the devices shown in FIG.

In addition, each functional unit in each embodiment of the present invention may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit. The above integrated unit can be implemented in the form of hardware or in the form of a software functional unit.

The integrated unit, if implemented in the form of a software functional unit and sold or used as a standalone product, may be stored in a computer readable storage medium. Based on such understanding, the technical solution of the present invention, which is essential or contributes to the prior art, or all or part of the technical solution, may be embodied in the form of a software product stored in a storage medium. A number of instructions are included to cause a computer device (which may be a personal computer, server, or network device, etc.) or a processor to perform all or part of the steps of the methods described in various embodiments of the present invention. The foregoing storage medium includes: a U disk, a mobile hard disk, a read-only memory (ROM), a random access memory (RAM), a magnetic disk, or an optical disk, and the like. .

The above is only a specific embodiment of the present invention, but the scope of the present invention is not limited thereto, and any person skilled in the art can easily think of changes or substitutions within the technical scope of the present invention. It should be covered by the scope of the present invention. Therefore, the scope of the invention should be determined by the scope of the appended claims.

Claims

A resource caching method, comprising the steps of:

After receiving the resource returned by the resource server to the terminal device, the Internet cache device determines that the resource meets the first cache condition;

The Internet cache device sends a parsing request to the parsing server, where the parsing request carries the domain name in the Uniform Resource Locator URL of the resource;

The Internet cache device receives an identifier of a server that is parsed by the parsing server according to a domain name in a URL of the resource;

And when the identifier of the server obtained by the parsing is an identifier of the resource server, the internet caching device caches the resource, and the caching the resource includes caching the resource in the internet caching device to provide Give the terminal device accessing the resource.
The method of claim 1, wherein before the receiving the resource returned by the resource server to the terminal device, the method further comprises:

The Internet cache device receives a connection request that is established by the terminal device to establish a connection with the resource server, where the connection request carries an identifier of the terminal device and an identifier of the resource server;

The internet caching device establishes a connection between the terminal device and the resource server;

The Internet cache device receives an access request for the resource sent by the terminal device, where the access request carries a domain name in a URL of the resource;

The Internet cache device sends the access request to the resource server according to the established connection between the terminal device and the resource server;

The internet caching device receives the resource returned by the resource server.
The method according to claim 1 or 2, wherein the Internet cache device does not cache the resource when the identifier of the server obtained by the parsing is not the identifier of the resource server.
A method according to claim 2 or 3, wherein

The establishing, by the Internet cache device, the connection between the terminal device and the resource server, the Internet cache device establishes a connection between the terminal device and the resource server by using an identifier of the terminal device, and the identifier of the terminal device The internet protocol IP address of the terminal device is included.
The method according to any one of claims 1 to 4, wherein the internet caching device further transmits the resource to the terminal device, and the internet caching device passes The identifier of the resource server sends the resource to the terminal device, where the identifier of the resource server includes an IP address of the resource server.
The method according to any one of claims 2 to 5, wherein the connection request comprises a transmission control protocol TCP connection request, and the access request to the resource comprises a hypertext transfer protocol HTTP request, the parsing The server includes a domain name system DNS server.
The method according to any one of claims 1 to 6, wherein the determining that the resource satisfies the first cache condition comprises determining that the resource satisfies a resource access heat statistics condition, and the resource access heat statistics include a certain time Statistics on the frequency of accessing the same resource.
A resource cache device, comprising: a processing module, a sending module, a receiving module and a cache module:

The processing module is configured to: after the receiving module receives the resource returned by the resource server to the terminal device, determine that the resource meets the first cache condition;

The sending module is configured to send a parsing request to the parsing server, where the parsing request carries a domain name in a uniform resource locator URL of the resource;

The receiving module is configured to receive, by the parsing server, an identifier of a server that is parsed according to a domain name in a URL of the resource;

The cache module is configured to cache the resource when the identifier of the server obtained by the parsing is an identifier of the resource server, where the buffering the resource includes caching the resource in the cache module, Provided to the terminal device accessing the resource.
The apparatus according to claim 8, wherein the receiving module is further configured to: before the receiving the resource returned by the resource server to the terminal device, receiving the connection established by the terminal device and establishing the connection with the resource server a connection request, where the connection request carries an identifier of the terminal device and an identifier of the resource server;

The processing module is further configured to establish a connection between the terminal device and the resource server;

The receiving module is further configured to receive an access request for the resource sent by the terminal device, where the access request carries a domain name in a URL of the resource;

The sending module is further configured to send the access request to the resource server according to the established connection between the terminal device and the resource server;

The receiving module is further configured to receive the resource returned by the resource server.
The device according to claim 8 or 9, wherein the cache module is further configured to not cache the resource when the identifier of the server obtained by the parsing is not the identifier of the resource server.
A device according to claim 9 or 10, wherein

The processing module is further configured to establish a connection between the terminal device and the resource server, where the processing module is further configured to establish, by using an identifier of the terminal device, a connection between the terminal device and the resource server, The identity of the terminal device includes an internet protocol IP address of the terminal device.
The device according to any one of claims 8 to 11, wherein the sending module is further configured to send the resource to the terminal device, and the sending module sends the resource by using an identifier of the resource server. And to the terminal device, the identifier of the resource server includes an IP address of the resource server.
The apparatus according to any one of claims 9 to 12, wherein the connection request comprises a transmission control protocol TCP connection request, and the access request to the resource comprises a hypertext transfer protocol HTTP request, the parsing The server includes a domain name system DNS server.
The device according to any one of claims 8 to 13, wherein the determining that the resource satisfies the first cache condition comprises determining that the resource satisfies a resource access heat statistics condition, and the resource access heat statistics include a certain time Statistics on the frequency of accessing the same resource.