WO2017054447A1 - Network communication method, device, and network attached storage device - Google Patents

Abstract

Disclosed in the present invention is a network communication method, comprising: establishing a P2P penetration connection between a first agent of a first communicating party and a second agent of a second communicating party; by means of the first agent, a first application of the first communicating party sends first data to the second agent of the second communicating party; the second agent of the second communicating party receives the first data and sends the first data to a corresponding second application; the first agent is independent of the first application, the second agent is independent of the second application, and the first agent and the second agent are both transparent to the corresponding first application and the second application. Also disclosed in the present invention is a device.

Description

Network communication method, device and network auxiliary storage device

[Technical Field]

The present invention relates to communication technologies, and in particular, to a network communication method, device, and network attached storage device.

 【Background technique】

P2P(peer to Peer, peer-to-peer network technology makes full use of the capabilities of each computer in the network to provide services to each other. Each computer can act as a requester for network services and respond to requests from other computers, providing resources and services.

When an application in a computer needs to establish a P2P connection, it is generally necessary to add a code for establishing a P2P connection in the application. If the original application does not have this part of the code, the program needs to be modified, which is complicated and wastes resources.

 [Summary of the Invention]

In order to at least partially solve the above problems, the present invention proposes a network communication method. The network communication method includes: establishing a P2P penetration connection between a first agent of the first communication party and a second agent of the second communication party; the first application of the first communication party sends the first data to the first a second agent of the second communicating party; the second agent of the second communicating party receives the first data, and sends the first data to the corresponding second application; wherein the first agent is independent of the first application, and the second agent is independent of the first agent The second application, the first agent and the second agent are both transparent to the corresponding first application and the second application.

The step of the first application of the first communication party sending the first data to the second agent of the second communication party by using the first agent includes: sending, by the first application of the first communication party, the first data to the first communication party The first loopback port; the first agent of the first correspondent obtains the first data from the first loopback port and sends the first data to the second agent of the second party.

The step of the second agent of the second communication party receiving the first data and sending the first data to the corresponding second application comprises: after the second agent of the second communication party receives the first data, sending the first data Go to the second loopback port of the second correspondent party; the corresponding second application of the second correspondent party obtains the first data from the second loopback port.

The second application of the second communication party sends the second data to another second loopback port of the second communication party after obtaining the first data; the second proxy of the second communication party is from another second The loopback port obtains the second data and sends it to the first agent of the first correspondent party.

The step of establishing a P2P penetration connection between the first agent of the first communication party and the second agent of the second communication party means: setting the first agent and setting in the data link layer of the first communication party A P2P penetration connection is established between the second agents of the data link layer of the two communicating parties.

The step of establishing a P2P penetration connection between the first agent of the first communication party and the second agent of the second communication party includes: the first agent of the first communication party sends a first connection request to the server, the first connection request The address and port information of the first communication party are further included, and the information of the second communication party that is the opposite end of the connection to be established is included; the server receives the first connection request, and sends the address and port information of the first communication party to the second communication party. The second agent sends the address and port information of the second communication party to the first agent of the first communication party, and the address and port information of the first communication party and the second communication party are pre-stored in the server; the second communication The second agent of the party sends a second connection request to the first communication party by using the address and port information of the first communication party, and the second connection request is rejected by the network address translation NAT of the first communication party side, and the network of the second communication party side The address translation saves the address and port of the first communication party; the first agent of the first communication party initiates a third connection request to the second communication party, and the network address translation root of the second communication party side And saving the first communication party's address and port to pass the third request; the second communication party's second agent receives the third connection request to establish the first agent of the first communication party and the second agent of the second communication party P2P penetration connection between.

The first communicating party is a private cloud server, and the second communicating party is another network node outside the internal network where the private cloud server is located, or vice versa.

In order to at least partially solve the above problems, the present invention proposes a network communication method. The network communication method includes: establishing a P2P penetration connection between a first agent of the first communication party and a second agent of the second communication party; the first application of the first communication party sends the first data to the first a second agent of the second communicating party, so that the second agent of the second communicating party receives the first data, and sends the first data to the corresponding second application; wherein the first agent is independent of the first application, the second agent Independent of the second application, the first agent and the second agent are both transparent to the corresponding first application and the second application.

The step of the first application of the first communication party sending the first data to the second agent of the second communication party by using the first agent includes: sending, by the first application of the first communication party, the first data to the first communication party The first loopback port; the first agent of the first correspondent obtains the first data from the first loopback port and sends the first data to the second agent of the second party.

Wherein the first agent of the first communicating party receives the second data sent from the second agent of the second communicating party; the first agent of the first communicating party sends the second data to the other first of the first communicating party Loopback port; the first application of the first correspondent obtains the second data from the other first loopback port.

The step of establishing a P2P penetration connection between the first agent of the first communication party and the second agent of the second communication party means: setting the first agent and setting in the data link layer of the first communication party A P2P penetration connection is established between the second agents of the data link layer of the two communicating parties.

The step of establishing a P2P penetration connection between the first agent of the first communication party and the second agent of the second communication party includes: the first agent of the first communication party sends a first connection request to the server, the first connection request The address and port information of the first communication party are further included, and the information of the second communication party that is the opposite end of the connection to be established is included; the server receives the first connection request, and sends the address and port information of the first communication party to the second communication party. The second agent sends the address and port information of the second communication party to the first agent of the first communication party, and the address and port information of the first communication party and the second communication party are pre-stored in the server; the second communication The second agent of the party sends a second connection request to the first communication party by using the address and port information of the first communication party, and the second connection request is rejected by the network address translation of the first communication party side, and the network address of the second communication party side The conversion saves the address and port of the first communication party; the first agent of the first communication party initiates a third connection request to the second communication party, and the network address translation of the second communication party side is based on And storing a third connection request by the second agent of the second communication party; the second agent of the second communication party is configured to establish a first agent of the first communication party and a second agent of the second communication party P2P penetration connection between.

The first communication party is a private cloud server, or another network node outside the internal network where the private cloud server is located.

In order to at least partially solve the above problems, the present invention proposes an apparatus. The device includes: a processor and a network communication circuit; the processor is configured to run the first agent to establish a P2P penetration connection between the network communication circuit and the second agent of the opposite end; the processor is further configured to run the first application to pass The first agent outputs the first data to the network communication circuit, and the network communication circuit sends the first data to the second agent of the opposite end, so that the second agent of the opposite end receives the first data, and sends the first data to the corresponding first The application is independent of the first application, the second agent is independent of the second application, and the first agent and the second agent are both transparent to the corresponding first application and the second application.

The processor is specifically configured to run the first application to send the first data to the first loopback port, and then run the first proxy to obtain the first data from the first loopback port, and output the data to the network communication circuit to implement The first application is controlled to output the first data to the network communication circuit through the first agent.

Wherein the processor is further configured to run the first agent to receive the second data sent from the second agent of the peer end through the network communication circuit, and then run the first agent to send the second data to the other first loopback port, The first application is then run to obtain second data from another first loopback port.

The device is a private cloud server or another network node outside the internal network where the private cloud server is located.

In order to at least partially solve the above problems, the present invention proposes a network attached storage device. The network attached storage device includes: a processor, a hard disk, and a routing circuit, wherein the hard disk and the routing circuit are respectively connected to the processor; the processor is configured to run the first agent to establish a P2P penetration connection between the routing circuit and the second agent of the peer end; The processor is further configured to run the first application to output the first data to the routing circuit by using the first proxy, and the routing circuit sends the first data to the second proxy of the peer end, so that the second proxy of the peer end receives the first data, And sending the first data to the corresponding second application; wherein the first agent is independent of the first application, the second agent is independent of the second application, and the first agent and the second agent are both for the corresponding first application and the second Application transparency.

The invention has the beneficial effects that: P2P connections are established between devices running on different intranets through independently running agents, and applications on different devices send and receive data through the proxy, so that the application can establish with other network nodes through the proxy without modifying the code. P2P connection saves system resources.

 [Description of the Drawings]

1 is a flow chart of implementing network communication in an embodiment of a network communication method according to the present invention;

2 is a flow chart of transmitting data by a second communication party in a first communication direction according to an embodiment of the network communication method of the present invention;

3 is a flow chart of transmitting data by a first communication party in a second communication direction according to an embodiment of the network communication method of the present invention;

4 is a schematic diagram of establishing a P2P penetration connection in an embodiment of a network communication method according to the present invention;

Figure 5 is a schematic view of an embodiment of the apparatus of the present invention;

Figure 6 is a schematic illustration of the use of two loopback ports in one embodiment of the apparatus of the present invention;

FIG. 7 is a schematic structural diagram of an embodiment of a network attached storage device according to the present invention.

【detailed description】

The invention will now be described in detail in conjunction with the drawings and embodiments.

As shown in FIG. 1, the first embodiment of the network communication method of the present invention includes:

S110. Establish a P2P penetration connection between the first agent of the first communication party and the second agent of the second communication party.

The first agent is independent of the first application, and the second agent is independent of the second application, and the first agent and the second agent are both transparent to the corresponding first application and the second application.

The first agent and the second agent are independent running programs, which are bridges and mediations for P2P penetration between the various programs of the machine and other devices. Of course, it can also be understood as a communication interface. The programs of the first agent and the second agent can be designed according to requirements, the local system environment, and the like. The first agent and the second agent may be called by the native program to establish a P2P connection with the agent on the other device, and provide transparent data distribution and reception for the native application; the first communication party and the second communication party may be in two Different intranets can also be in the intranet and one on the public network.

Establishing a P2P connection means that different devices are connected and establish a peer-to-peer P2P network. In a P2P network, devices connected to each other are in an equal position, with no master or slave. Each device in the network can act as both a requester for the network service and a request to other computers, providing resources, services, and content for direct access by other computers in the network without going through intermediate entities.

S120. The first application of the first communication party sends the first data to the second agent of the second communication party by using the first proxy.

The first data may be a communication request, text information, a web page, an audio and video media, a file, etc., and the transfer between different devices is performed by an agent.

S130. The second agent of the second communication party receives the first data, and sends the first data to the corresponding second application.

The second application of the second communication party receives the first data, and completes a process in which the first application of the first communication party sends the first data to the second application of the second communication party.

Through the implementation of the foregoing embodiment, P2P connections are not established between devices of the same intranet through independently running agents, and applications on different devices send and receive data through the proxy, so that the application can pass the proxy and other devices without modifying the code. P2P data transmission is performed to save system resources.

Referring to FIG. 2, a second embodiment of the network communication method of the present invention includes:

S210. The first agent of the first communication party establishes a P2P penetration connection with the second agent of the second communication party.

S220. The first application of the first communication party sends the first data to the first loopback port of the first communication party.

S230, the first agent of the first communication party obtains the first data from the first loopback port, and sends the first data to the second agent of the second communication party;

S240. After receiving the first data, the second proxy of the second communication party sends the first data to the second loopback port of the second communication party.

S250. The corresponding second application of the second communication party obtains the first data from the second loopback port, and completes the first communication direction to send data to the second communication party.

The loopback port is a virtual port on the device. The address range is 127.0.0.1 to 127.255.255.254. The data sent to the loopback port does not pass through the external network interface. The agent on each device completes the reception and transmission of data with the native application through the local loopback port.

As shown in FIG. 3, in a third embodiment of the network communication method of the present invention, the first application of the first communication party sends the first data to the corresponding second application of the second communication party (refer to the first embodiment or the second The description of the embodiment) includes the following steps:

S310. The second application of the second communication party sends the second data to another second loopback port of the second communication party.

The second data may be feedback information, text information, audio and video media, files, etc., sent by the second application.

S320, the second agent of the second communication party obtains the second data from another second loopback port, and sends the second data to the first agent of the first communication party;

Another second loopback port is used by the application of the second communication party to send data to the second agent, using an address different from the second loopback port address used by the application of the second party in the second embodiment to receive data in the second embodiment. .

S330, the first agent of the first communication party sends the second data and sends it to another first loopback port of the first communication party;

The other first loopback port is used by the application of the first correspondent party to receive data from the first proxy, using an address different from the first loopback port address used by the application of the first correspondent party in the second embodiment to transmit data.

S340. The first application of the first communication party obtains the second data from another first loopback port.

The process of receiving data from the second application of the second communication party by the first application of the first communication party is completed.

After the first application of the first communication party sends the first data to the second application of the second communication party, the first application of the second communication party receives the second data returned by the second application of the second communication party, and implements P2P data mutual data. transmission.

For the P2P connection established by the first communication party and the second communication party, the address of the second loopback port and the second second loopback port used by the first communication party and the first loopback port used by the first communication party The address of the other first loopback port may be the same or different. If at least two applications of the first communication party are simultaneously connected to the application in the second communication party, each application sends data to the first proxy through the first loopback port, and from the first loopback port through the first The agent receives the data returned by the second communicating party and vice versa.

In addition, the first communication party can establish a P2P connection with multiple network nodes at the same time, each connection occupies two loopback ports for data reception and transmission between the application and the proxy, and the loopback port address used by different connections. Different. Similarly, the case where the second communication party establishes a P2P connection with multiple network nodes can be introduced.

In one embodiment of the invention, the first agent is disposed at a data link layer of the first correspondent party and the second agent is disposed at a data link layer of the second correspondent party.

In one embodiment of the invention, the first correspondent party is a private cloud server, and the second correspondent party is another network node outside the intranet where the private cloud server is located; or vice versa. In network attached storage (NAS, Network attached Adding a routing circuit to the device can be an embodiment of the device of the present invention. The network attached storage device includes a processor, a hard disk, and a routing circuit, wherein a separate operating system can be run in the processor. Further, in the present invention, the network attached storage device is used as a private cloud server. The private cloud server is located in a gateway in the home network, and the computer in the home, the mobile terminal, etc. are connected to the private cloud server. Although the private cloud server is located in the gateway of the home network, if the home network uses the cell shared broadband, the private cloud server is located in the intranet; even if broadband or dial-up networking is used, the IP address of the private cloud is generally dynamically allocated. Get the IP address directly. Therefore, when a user accesses a private cloud server on a network node outside the home network, it is still necessary to establish a P2P connection.

It is also possible to add a processor, a hard disk, and a network interface as a private cloud server to a router in the home network, where the processor runs a separate operating system, and the network interface is directly connected to one LAN port of the router. A private cloud server does not have its own public IP address, but is located on the same internal network as a computer or mobile terminal in the home. Therefore, when a user accesses a private cloud server on a network node other than the home network, a P2P connection needs to be established.

In addition to providing traditional data storage and sharing and web browsing services, the private cloud server can also integrate smart home appliances to control home appliances. For example, the first communication party is a private cloud server, and the second communication party is a terminal device outside the home network, and the terminal device may have its own public network IP or may be located in another internal network. The user can establish a P2P connection with the private cloud server through the proxy on the terminal device, so that the application in the terminal device and the program of the private cloud server transmit data, for example, accessing the smart home appliance in the private cloud server through an application in the terminal device. Controls to achieve remote control of the home appliances. Or conversely, the first communication party is a terminal device located outside the home network, and the second communication party is a private cloud server.

Network Address Translation (Network Address Translation, NAT) is a widely used network technology for isolating internal networks and external networks (Internet), protecting internal network security and addressing the problem of insufficient IPv4 addresses. When an internal host initiates a connection to an external host, the NAT device assigns it a unique port number. NAT allows the information sent by the external host that has communicated with the internal host of the NAT to enter the internal network, and the information sent directly by the external host that has not communicated with the internal host is directly discarded. This protects the security of the internal network, but it also limits the security. P2P application.

Referring to FIG. 4, a process in which two nodes located in different intranets establish a P2P penetration connection through the server S is illustrated. In an embodiment of the present invention, the first communication party 1 is located in the intranet of the NAT device A, the public network IP of A is 155.99.25.11, and the second communication party 2 is located in the intranet of the NAT device B. The network IP is 138.76.29.7.

The first communication party 1 sends a message to the server S, and the NAT device A assigns a port 62000 to the first communication party 1, and the server S records the address and port information of the first communication party 1, where the address and port are observed by the server S. The public network IP of the first correspondent party 1 and the port assigned to it by the NAT device A, that is, 155.99.25.1:62000, instead of the address of the first correspondent party 1 in the internal network. Similarly, the server S will record the address and port information of the second party 2, 138.76.29.7: 31000.

The first agent 101 of the first communication party 1 sends a first connection request to the server S, including the address and port information of the first communication party 1, and the information of the second communication party 2, which is the opposite end of the connection to be established; Receiving the first connection request, transmitting the recorded address and port information of the first communication party 1 (155.99.25.11:62000) to the second agent 201 of the second communication party 2, and the address and port of the second communication party 2 The information (138.76.29.7: 31000) is sent to the first agent 101 of the first correspondent party 1.

The second agent 201 of the second communication party 2 sends a second connection request to the first communication party 1 (155.99.25.11:62000), since the second communication party 2 is an external host that has not communicated with the internal host, the second connection request Rejected by NAT device A. Although the connection was not successful, the NAT device B saved the address and port information of the first correspondent 1 (155.99.25.11:62000) and the information that the second correspondent 2 in the intranet initiated the connection to it.

The first agent 101 of the first communication party 1 initiates a third connection request to the second communication party 2, because the NAT device B stores the address and port information of the first communication party 1 and the second communication party 2 to the first communication party 1 Initiating the connection request information, the first communication party 1 is regarded as an external host that has communicated with the NAT device B internal host (second communication party 2), and the third connection request is allowed to pass by the NAT device B. The second agent 201 of the second communication party 2 accepts the third connection request and establishes a P2P penetration connection between the first agent 101 of the first communication party 1 and the second agent 201 of the second communication party 2.

If the first communication party is located in the internal network and the second communication party is located on the public network, the first communication party may directly send a request to establish a connection to the second communication party after obtaining the address of the second communication party. If the first communication party is located on the public network and the second communication party is located in the internal network, the first communication direction server sends a connection request, and the server sends the address and port information of the first communication party to the second communication party, and the second communication direction is A communicating party requests to establish a connection, and the first communicating party accepts the request to establish a connection with the second communicating party.

As shown in FIG. 5, in a first embodiment of the apparatus of the present invention (as a first communication party), comprising a processor and a network communication circuit, the processor is connected to the network communication circuit; the processor runs the first agent 30 to pass A P2P penetration connection is established between the network communication circuit and the second agent of the opposite end (second communication party); the processor further runs the first application 40 to send the first data to the first loopback port 51, and the processor further Controlling the first agent 30 to obtain the first data from the first loopback port 51 and output it to the network communication circuit, the network communication circuit transmitting the first data to the second agent of the opposite end, so that the second agent of the opposite end receives the first Data, and the first data is sent to the corresponding second application; wherein the first agent 30 is independent of the first application 40, the second agent is independent of the second application, and the first agent 30 and the second agent are both corresponding to the first An application 40 and a second application are transparent.

The local loopback port is a virtual port with an address range of 127.0.0.1 to 127.255.255.254. The data sent to the loopback port does not pass through the network communication circuit.

Through the implementation of the foregoing embodiment, the device establishes a P2P connection with other network nodes that are not in the same intranet through the independently running agent, and the application on the device transmits data through the agent and other network node applications, so that the application does not need to modify the code. P2P data transmission can be performed through agents and other devices, saving system resources.

As shown in FIG. 6, in the second embodiment of the apparatus of the present invention, the processor further controls the first proxy 30 to receive the second data sent from the second proxy of the peer end through the network communication circuit, and send the second data to The other first loopback port 52, the processor further controls the first application 40 to obtain the second data from the other first loopback port 52, and completes the process of the first application 40 receiving data from the corresponding second application of the peer end.

The application on the device completes the sending and receiving of data with the agent through the local loopback port. The address of the first loopback port 51 and the other first loopback port 52 are different, for example, 127.0.0.1 is used as the address of the first loopback port 51, and 127.0.0.10 is used as the address of the other first loopback port 52. . If at least two applications running in the device are simultaneously connected to the peer application, each application sends data to the first agent 30 through the first loopback port 51, and from the first agent 30 through the other first loopback port 52. Receive the data returned by the peer. If the device establishes a P2P connection with multiple network nodes at the same time, the connection with each network node uses two independent loopback ports as interfaces for data transmission and reception between the application and the first agent 30, and multiple used The addresses of the loopback ports are different.

In an embodiment of the apparatus of the present invention, the network attached storage device includes a processor, a hard disk, and a routing circuit, wherein a separate operating system can be run in the processor, and further, the network attached storage device is used as a private cloud server in the present invention. . The private cloud server is located in a gateway in the home network, and the computer in the home, the mobile terminal, etc. are connected to the private cloud server. Although the private cloud server is located in the gateway of the home network, if the home network uses the cell shared broadband, the private cloud server is located in the intranet; even if broadband or dial-up networking is used, the IP address of the private cloud is generally dynamically allocated. Get the IP address directly. Therefore, when a user accesses a private cloud server on a network node outside the home network, it is still necessary to establish a P2P connection.

It is also possible to add a processor, a hard disk, and a network interface as a private cloud server to a router in the home network, where the processor runs a separate operating system, and the network interface is directly connected to one LAN port of the router. A private cloud server does not have its own public IP address, but is located on the same internal network as a computer or mobile terminal in the home. Therefore, when a user accesses a private cloud server on a network node other than the home network, a P2P connection needs to be established.

In addition to providing traditional data storage and sharing and web browsing services, the private cloud server can also integrate smart home appliances to control home appliances. For example, the device is a private cloud server, and the peer end is a terminal device outside the home network. The peer end may have its own public network IP or may be located in another internal network. The user can establish a P2P connection with the private cloud server through the proxy on the peer end, so that the application in the terminal device and the program of the private cloud server transmit data, for example, accessing the smart home appliance in the private cloud server through an application in the terminal device. Controls to achieve remote control of the home appliances. Or, conversely, the device is a terminal device located in another intranet outside the home network, and the peer end is a private cloud server.

In an embodiment of the network attached storage of the present invention, the processor 710, the hard disk 720 and the routing circuit 730 are included, and the hard disk 720 and the routing circuit 730 are respectively connected to the processor 710. The WAN interface of the routing circuit 730 is connected to the Internet, and the LAN interface is respectively connected to the intranet device, and the transmission of the data packet between the processor 710 and the corresponding interface is completed. The processor 710 is configured to exchange routing information, look up a routing table, and forward a data packet, and cooperate with the routing circuit 730 to implement routing functions such as interconnection of a local area network and a wide area network, processing and distribution of data, and flow control. The processor 710 is further configured to run a first proxy to establish a P2P penetration connection with the second proxy of the peer end, and the processor 710 is further configured to run the first application to output the first data to the routing circuit by using the first proxy 730, the routing circuit 730 sends the first data to the second proxy of the peer end, so that the second proxy of the peer end receives the first data, and sends the first data to the corresponding second application, where the first proxy is independent of the first In one application, the second agent is independent of the second application, and the first agent and the second agent are both transparent to the corresponding first application and the second application. Network attached storage can act as a private cloud server in a home network.

The network attached storage establishes a P2P connection with other network nodes not on the same intranet through the independently running agent. The application on the network attached storage transmits data through the agent and other network node applications, so that the application can pass the code without modifying the code. The agent performs P2P data transmission with other devices to save system resources.

The above is only the embodiment of the present invention, and is not intended to limit the scope of the invention, and the equivalent structure or equivalent process transformations made by the description of the invention and the drawings are directly or indirectly applied to other related technologies. The fields are all included in the scope of patent protection of the present invention.

Claims (18)

1. A network communication method, including:

   Establishing a P2P penetration connection between the first agent of the first communication party and the second agent of the second communication party;

   The first application of the first communication party sends the first data to the second agent of the second communication party by using the first proxy;

   Receiving, by the second agent of the second communication party, the first data, and sending the first data to a corresponding second application;

   The first agent is independent of the first application, the second agent is independent of the second application, and the first agent and the second agent are both corresponding to the first application and the second application. Transparent.
2. The method of claim 1 wherein

   The step of the first application of the first communication party sending the first data to the second agent of the second communication party by using the first proxy includes:

   The first application of the first communication party sends the first data to a first loopback port of the first communication party;

   The first agent of the first communication party obtains the first data from the first loopback port and sends the first data to the second agent of the second communication party.
3. The method of claim 1 wherein

   The step of the second agent of the second communication party receiving the first data and sending the first data to the corresponding second application includes:

   After receiving the first data, the second agent of the second communication party sends the first data to a second loopback port of the second communication party;

   The corresponding second application of the second communication party obtains the first data from the second loopback port.
4. The method of claim 1 wherein the method further comprises:

   After the first data is obtained, the second application of the second communication party sends the second data to another second loopback port of the second communication party;

   The second agent of the second communication party obtains the second data from the another second loopback port and sends the second data to the first agent of the first communication party.
5. The method of claim 1 wherein

   The step of establishing a P2P penetration connection between the first agent of the first communication party and the second agent of the second communication party means: setting the first agent and setting of the data link layer of the first communication party A P2P tunneling connection is established between the second agents of the data link layer of the second correspondent party.
6. The method of claim 1 wherein

   The step of establishing a P2P penetration connection between the first agent of the first communication party and the second agent of the second communication party includes:

   The first agent of the first communication party sends a first connection request to the server, where the first connection request includes address and port information of the first communication party, and the opposite end of the connection to be established, that is, the second communication party Information;

   Receiving, by the server, the first connection request, sending the address and port information of the first communication party to the second agent of the second communication party, and sending the address and port information of the second communication party Providing, to the first agent of the first communication party, the address and port information of the first communication party and the second communication party are pre-stored in the server;

   The second agent of the second communication party sends a second connection request to the first communication party by using the address and port information of the first communication party, where the second connection request is on the first communication side The network address translation NAT rejects, and the network address translation of the second communication party side saves the address and port of the first communication party;

   The first agent of the first communication party initiates a third connection request to the second communication party, and the network address translation of the second communication party side is based on the saved address and port of the first communication party. Passing the third request;

   The second agent of the second communication party receives the third connection request to establish a P2P penetration connection between the first agent of the first communication party and the second agent of the second communication party.
7. The method of claim 1 wherein

   The first communication party is a private cloud server, and the second communication party is another network node outside the internal network where the private cloud server is located, or vice versa.
8. A network communication method, including:

   Establishing a P2P penetration connection between the first agent of the first communication party and the second agent of the second communication party;

   The first application of the first communication party sends the first data to the second agent of the second communication party by the first agent, so that the second agent of the second communication party receives the first Data, and sending the first data to a corresponding second application;

   The first agent is independent of the first application, the second agent is independent of the second application, and the first agent and the second agent are both corresponding to the first application and the second application. Transparent.
9. The method of claim 8 wherein

   The step of the first application of the first communication party sending the first data to the second agent of the second communication party by using the first proxy includes:

   The first application of the first communication party sends the first data to a first loopback port of the first communication party;

   The first agent of the first communication party obtains the first data from the first loopback port and sends the first data to the second agent of the second communication party.
10. The method of claim 8 wherein the method further comprises:

    The first agent of the first communication party receives the second data sent from the second agent of the second communication party;

    Transmitting, by the first agent of the first communication party, the second data to another first loopback port of the first communication party;

    The first application of the first communication party obtains the second data from the another first loopback port.
11. The method of claim 8 wherein

    The step of establishing a P2P penetration connection between the first agent of the first communication party and the second agent of the second communication party means: setting the first agent and setting of the data link layer of the first communication party A P2P tunneling connection is established between the second agents of the data link layer of the second correspondent party.
12. The method of claim 8 wherein

    The step of establishing a P2P penetration connection between the first agent of the first communication party and the second agent of the second communication party includes:

    The first agent of the first communication party sends a first connection request to the server, where the first connection request includes address and port information of the first communication party, and the opposite end of the connection to be established, that is, the second communication party Information;

    Receiving, by the server, the first connection request, sending the address and port information of the first communication party to the second agent of the second communication party, and sending the address and port information of the second communication party Providing, to the first agent of the first communication party, the address and port information of the first communication party and the second communication party are pre-stored in the server;

    The second agent of the second communication party sends a second connection request to the first communication party by using the address and port information of the first communication party, where the second connection request is on the first communication side The network address translation is rejected, and the network address translation on the second communication side saves the address and port of the first communication party;

    The first agent of the first communication party initiates a third connection request to the second communication party, and the network address translation of the second communication party side is based on the saved address and port of the first communication party. Passing the third request;

    The second agent of the second communication party receives the third connection request to establish a P2P penetration connection between the first agent of the first communication party and the second agent of the second communication party.
13. The method of claim 8 wherein

    The first communication party is a private cloud server, or another network node outside the internal network where the private cloud server is located.
14. A device comprising:

    Processor and network communication circuit;

    The processor is configured to run a first proxy to establish a P2P penetration connection between the network communication circuit and a second proxy of the peer end;

    The processor is further configured to run a first application to output first data to the network communication circuit by the first proxy, the network communication circuit sending the first data to a second of the opposite end a proxy, so that the second proxy of the peer end receives the first data, and sends the first data to a corresponding second application;

    The first agent is independent of the first application, the second agent is independent of the second application, and the first agent and the second agent are both corresponding to the first application and the second application. Transparent.
15. The apparatus according to claim 14, wherein

    The processor is specifically configured to run the first application to send the first data to a first loopback port, and then run the first proxy to obtain the first data from the first loopback port. And outputting to the network communication circuit to control the first application to output the first data to the network communication circuit by the first agent.
16. The device according to claim 14, wherein

    The processor is further configured to run the first agent to receive second data sent by the second agent of the peer end through the network communication circuit, and then run the first agent to send the second data Sending to another first loopback port and then running the first application to obtain the second data from the other first loopback port.
17. The apparatus according to claim 14, wherein

    The device is a private cloud server, or another network node outside the intranet where the private cloud server is located.
18. A network attached storage device, including:

    a processor, a hard disk, and a routing circuit, wherein the hard disk and the routing circuit are respectively connected to the processor;

    The processor is configured to run a first proxy to establish a P2P penetration connection between the routing circuit and a second proxy of the peer end;

    The processor is further configured to run the first application to output first data to the routing circuit by the first proxy, and the routing circuit sends the first data to a second of the opposite end a proxy, so that the second proxy of the peer end receives the first data, and sends the first data to a corresponding second application;

    The first agent is independent of the first application, the second agent is independent of the second application, and the first agent and the second agent are both corresponding to the first application and the second application. Transparent.