WO2018014434A1 - 网络系统、代理服务器及其应用的数据处理方法及系统 - Google Patents

网络系统、代理服务器及其应用的数据处理方法及系统 Download PDF

Info

Publication number
WO2018014434A1
WO2018014434A1 PCT/CN2016/097829 CN2016097829W WO2018014434A1 WO 2018014434 A1 WO2018014434 A1 WO 2018014434A1 CN 2016097829 W CN2016097829 W CN 2016097829W WO 2018014434 A1 WO2018014434 A1 WO 2018014434A1
Authority
WO
WIPO (PCT)
Prior art keywords
address
server
client
data packet
mac address
Prior art date
Application number
PCT/CN2016/097829
Other languages
English (en)
French (fr)
Inventor
刘成彦
陈凯林
柳小鹏
Original Assignee
网宿科技股份有限公司
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by 网宿科技股份有限公司 filed Critical 网宿科技股份有限公司
Publication of WO2018014434A1 publication Critical patent/WO2018014434A1/zh

Links

Images

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L67/00—Network arrangements or protocols for supporting network services or applications
    • H04L67/50—Network services
    • H04L67/56—Provisioning of proxy services
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L61/00—Network arrangements, protocols or services for addressing or naming
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L61/00—Network arrangements, protocols or services for addressing or naming
    • H04L61/09—Mapping addresses
    • H04L61/10—Mapping addresses of different types
    • H04L61/103—Mapping addresses of different types across network layers, e.g. resolution of network layer into physical layer addresses or address resolution protocol [ARP]
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L61/00—Network arrangements, protocols or services for addressing or naming
    • H04L61/09—Mapping addresses
    • H04L61/25—Mapping addresses of the same type
    • H04L61/2503—Translation of Internet protocol [IP] addresses
    • H04L61/256—NAT traversal
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L61/00—Network arrangements, protocols or services for addressing or naming
    • H04L61/50—Address allocation
    • H04L61/5007—Internet protocol [IP] addresses

Definitions

  • the present invention relates to the field of data processing, and in particular, to a network system, a proxy server, and a data processing method and system thereof.
  • the topology of the existing proxy scheme is shown in Figure 1.
  • the proxy server 11 hooks the traffic of the client 10 to the server 12 to the application layer, and then accesses the server 12 by the program agent of the application layer.
  • a connection is established between the client 10 and the proxy server 11, and another connection is established between the proxy server 11 and the server 12.
  • the proxy server 11 For the client 10, the IP it sees is still the IP of the server 12; for the server 12, the IP it sees is the IP of the proxy 11.
  • the proxy server 11 itself needs to occupy more IP. In the case that the redundant IP is not reserved before, the IP shortage may occur, and the redundant IP cannot be provided for the proxy server 11 to use, which makes the deployment of the proxy environment difficult.
  • an object of the present invention is to provide a data processing method and system for a network system, a proxy server, and an application thereof, which are used to solve the problem that the proxy server itself needs to occupy a public network IP in the prior art.
  • the client's IP cannot be transparent to the server.
  • the present invention provides a data processing method, including: connecting to a client through a first network port, and connecting to a server through a second network port;
  • the second network port is bridged to form a bridge interface, and a private network IP address is configured for the bridge interface; respectively, obtaining an IP address and a MAC address of the client and the server; and configuring a routing table to Defining a round-trip route between the client and the server, so that the server obtains the first custom private network IP address, the client obtains the second custom private network IP address, and mapping the first self Defining a private network IP address to be mapped to the MAC address of the server, mapping: mapping the second custom private network IP address to the MAC address of the client; when receiving the received from the client When the data packet is sent to the server, the source IP address of the data packet is translated into the IP address of the client according to a preset source IP address translation rule, and the IP address is determined according to the first custom private network. Transmitting
  • the method when the received data packet sent from the client is sent to the server, the method further includes: according to the preset source MAC address translation rule, the data packet Source MAC address translated into the Transmitting, by the MAC address of the client, the data packet whose source MAC address is the MAC address of the client to the server according to the mapping relationship between the first custom private network IP address and the MAC address of the server.
  • the source IP address of the data packet is determined according to a preset source IP address translation rule. Translating into the IP address of the server, and transmitting, according to the mapping relationship between the second custom private network IP address and the MAC address of the client, the data packet whose source IP address is the IP address of the server to the server Said client.
  • the step of acquiring the IP address and the MAC address of the client and the server respectively includes: sending, by the first network port, the captured from the client to the The data packet of the server is analyzed to obtain the IP address and the MAC address of the client and the server respectively, or the IP address and the MAC address of the client and the server through the custom configuration are respectively obtained.
  • the present invention further provides a data processing system, including: a configuration module, configured to connect to a client through a first network port, and connect to a server through a second network port;
  • the first network port is bridged with the second network port to form a bridge interface, and a private network IP address is configured for the bridge interface; and an IP address and a MAC address of the client and the server are respectively obtained.
  • a routing table to define a round-trip route between the client and the server, so that the server obtains the first custom private network IP address, and the client obtains the second custom private network IP address, and performs
  • the mapping maps the first custom private network IP address to the MAC address of the server, and maps the second custom private network IP address to the MAC address of the client;
  • the processing module is configured to: When the received data packet sent from the client is sent to the server, the source IP address of the data packet is converted into the IP address of the client according to a preset source IP address translation rule.
  • the processing module is further configured to: when the received data packet sent from the client is sent to the server, further comprising: converting according to the preset source MAC address a rule, converting a source MAC address of the data packet to a MAC address of the client, and setting a source MAC address as the client according to a mapping relationship between the first custom private network IP address and a MAC address of the server The data packet of the MAC address of the end is transmitted to the server.
  • the processing module is further configured to: when the received data packet sent from the server is sent to the client, according to a preset source IP address translation rule, The source IP address of the data packet is translated into the IP address of the server, and the source IP address is the IP address of the server according to the mapping relationship between the second custom private network IP address and the MAC address of the client.
  • the data packet is transmitted to the client.
  • the manner in which the configuration module obtains the IP address and the MAC address of the client and the server respectively includes: sending, by the first network port, the crawling from the client to the The data packet of the server is analyzed to obtain the IP address and the MAC address of the client and the server respectively, or obtain the IP address and the MAC address of the client and the server through the custom configuration.
  • the present invention also provides a proxy server, comprising the data processing system of any of the above.
  • the present invention further provides a network system, including the proxy server as described above, further comprising a client connected to the proxy server through the first network port and through the second network port The server connected to the proxy server.
  • the network system, the proxy server, and the data processing method and system thereof of the present invention pre-set the private network IP address for the proxy server, and the proxy server may not need to occupy the public network IP address, when the received slave
  • the source IP address of the data packet is translated into the IP address of the client according to a preset source IP address translation rule, and according to the first
  • the mapping between the private IP address and the MAC address of the server is used to transmit the data packet whose source IP address is the IP address of the client to the server.
  • the proxy server since the proxy server only needs to configure the private network IP, and the effect of the transparent proxy is achieved by configuring the round-trip routing, the IP-MAC mapping, and the SNAT rule, the proxy server does not need to occupy the public network IP, and the proxy server receives the When the data sent by the client forwarded by the proxy server can clearly know the IP information of the client, the information interaction is more transparent.
  • FIG. 1 is a schematic structural diagram of a network system according to an embodiment of the prior art.
  • FIG. 2 is a block diagram showing the structure of a network system of the present invention in a specific embodiment.
  • FIG. 3 is a flow chart showing a data processing method of the present invention in a specific embodiment.
  • FIG. 4 is a block diagram showing a module of a data processing system of the present invention in a specific embodiment.
  • FIG. 5 is a schematic structural diagram of a network system according to a specific embodiment of the present invention.
  • a structure as shown in FIG. 1 is employed, including a client 10, a proxy server 11, and a server 12.
  • the proxy server 11 hooks the traffic of the client 10 to the server 12 to the application layer, and then accesses the server 12 by the program agent of the application layer.
  • a connection is established between the client 10 and the proxy server 11, and another connection is established between the proxy server 11 and the server 12.
  • the IP it sees is still the IP of the server 12; for the server 12, the IP it sees is the IP of the proxy 11.
  • the IP address of the client is IP1
  • the MAC address of the client is MAC1
  • the IP address of the proxy server 11 is IP2
  • the MAC address of the proxy server 11 is MAC2
  • the IP address of the server 12 is IP3, and the server 12
  • the MAC address is MAC3.
  • the IP address of the data available to the server 12 is the IP address IP2 of the proxy server 11, when the proxy server 11 Will be connected from the server 12
  • the IP address sent by the client 10 is the IP address IP3 of the server 12, wherein the IP2 is a public network IP, and the proxy server 11 needs to occupy a public network. IP.
  • the disadvantage of this proxy scheme is that the proxy server itself needs to occupy a public IP address.
  • the redundant public IP address is not reserved before, the public network IP may be scarce, and the redundant public IP address cannot be provided. Used by the proxy server, the deployment of the proxy environment is difficult, and the server 12 cannot obtain the IP address or MAC address of the client 10.
  • the present invention employs a method of transparent proxy based on the above disadvantages.
  • the topology of the network system to which the present invention is applied is as shown in FIG. 2.
  • the network system includes a client 20, a proxy server 21, and a server 22, and the overall topology is similar to that of FIG. 1, except that the proxy server 21 uses the document.
  • the method converts the IP and Mac addresses, and the IP address of the proxy server 21 is the private network IP address IP2' is the private network IP address.
  • IP3 IP of the server 22
  • IP1 IP of the client 20
  • IP1 Private network IP
  • IP2' Private network IP
  • FIG. 3 is a flow chart showing the data processing method of the present invention in a specific embodiment.
  • the data processing method is applied to the proxy server 21, and includes:
  • S31 Bridging the first network port with the second network port to form a bridge interface, and configuring a private network IP address for the bridge interface;
  • the IP address and the MAC address of the client 20 are connected to the proxy server 21 through the first network port.
  • the IP address of the device and the MAC address, and the IP address of the client 20 may be a public network IP or a private network IP.
  • the IP address and the MAC address of the server 22 are the IP address and MAC address of the device connected to the proxy server 21 through the second network port, and the IP address of the server 22 may be public IP or private. Network IP.
  • the client 20 is, for example, a smart device such as a smart phone, a tablet computer, or a desktop computer.
  • S33 Configure a routing table to define a round-trip route between the client 20 and the server 22, so that the server 22 obtains the first custom private network IP address, and the client 20 obtains the second custom private network IP.
  • a custom private network IP address and a second custom private network IP address are virtual IPs and are not configured on any device. However, the private network IP address of the bridge interface must be in the same network segment.
  • the source IP address of the data packet is converted into the client according to a preset source IP address translation rule.
  • the method when the received data packet sent from the client 20 is sent to the server 22, the method further includes: according to the preset source MAC address translation rule, The source MAC address of the data packet is translated into the MAC address of the client 20, and the source MAC address is the client according to the mapping relationship between the first custom private network IP address and the MAC address of the server 22 The data packet of the MAC address of 20 is transmitted to the server 22.
  • the source of the data packet is determined according to a preset source IP address translation rule.
  • the IP address is translated into the IP address of the server 22, and the source IP address is the IP address of the server 22 according to the mapping relationship between the second custom private network IP address and the MAC address of the client 20.
  • the data packet is transmitted to the client 20.
  • the method when the received data packet sent from the server 22 is sent to the client 20, the method further includes: according to a preset source MAC address translation rule, the data packet The source MAC address is translated into the MAC address of the server 22, and the source MAC address is the server 22 according to the mapping relationship between the second custom private network IP address and the MAC address of the client 20.
  • the data packet of the MAC address is transmitted to the client 20.
  • the step of acquiring the IP address and the MAC address of the client 20 and the server 22 respectively includes: obtaining, by the first network port, the client from the client 20
  • the data packet sent to the server 22 is analyzed to obtain the IP address and the MAC address of the client 20 and the server 22 respectively; or the IP address of the client 20 and the server 22 through the custom configuration are respectively acquired.
  • the MAC address is a registered trademark of Cisco Systems, Inc.
  • FIG. 4 is a block diagram showing a data processing system of the present invention in a specific embodiment.
  • the data processing system 4 includes a configuration module 40 and a processing module 41.
  • the data processing system 4 is applied to the proxy server 21 shown in FIG. 2, specifically:
  • the configuration module 40 is configured to be connected to the client 20 through the first network port, and connected to the server 22 through the second network port; and the first network port and the second network port are bridged to form a bridge interface, and configuring a private network IP address for the bridge interface; and acquiring an IP address and a MAC address of the client 20 and the server 22 respectively; configuring a routing table to define the client 20 and the service Round-trip routing between the ends 22, the server 22 obtains the first custom private a network IP address, the client 20 obtains a second custom private network IP address, and maps the first custom private network IP address with the MAC address of the server 22, and the second customization The private network IP address is mapped to the MAC address of the client 20; wherein the IP address and the MAC address of the client 20 are IP addresses and MAC addresses of devices connected to the proxy server 21 through the first network port.
  • the IP address of the client 20 may be a public network IP or a private network IP.
  • the IP address and the MAC address of the server 22 are the IP address and MAC address of the device connected to the proxy server 21 through the second network port, and the IP address of the server 22 may be public IP or private.
  • Network IP In a specific application, the client 20 is, for example, a smart device such as a smart phone, a tablet computer, or a desktop computer.
  • the processing module 41 is configured to: when the received data packet sent from the client 20 is sent to the server 22, source IP address of the data packet according to a preset source IP address translation rule. Converting to the IP address of the client 20, and setting the source IP address to the IP address of the client 20 according to the mapping relationship between the first custom private network IP address and the MAC address of the server 22
  • the data packet is transmitted to the server 22; wherein the source IP address of the data packet is a private network IP address configured for the bridge interface.
  • the first custom private network IP address and the second custom private network IP address are virtual IPs, and are not configured on any device, but the private network IP address of the bridge interface must be on the same network segment.
  • the next hop of the data packet sent to the server is the first custom private network IP
  • the next hop of the data packet sent to the client is the second custom private network IP.
  • the processing module 41 is further configured to: when the received data packet sent from the client 20 is sent to the server 22, further comprising: according to the preset source
  • the MAC address translation rule converts the source MAC address of the data packet to the MAC address of the client 20, and according to the mapping relationship between the first custom private network IP address and the MAC address of the server 22
  • the data packet whose source MAC address is the MAC address of the client 20 is transmitted to the server 22.
  • the processing module 41 is further configured to: when the received data packet sent from the server 22 is sent to the client 20, according to a preset source IP address translation rule. Transmitting the source IP address of the data packet to the IP address of the server 22, and setting the source IP address according to the mapping relationship between the second custom private network IP address and the MAC address of the client 20 The data packet of the IP address of the server 22 is transmitted to the client 20.
  • the processing module 41 is further configured to: when the received data packet sent from the server 22 is sent to the client 20, further comprising: according to a preset source MAC address. Converting a rule, converting a source MAC address of the data packet to a MAC address of the server 22, and converting a source MAC address according to a mapping relationship between the second custom private network IP address and a MAC address of the client 20 The data packet whose address is the MAC address of the server 22 is transmitted to the client 20.
  • the manner in which the configuration module 40 obtains the IP address and the MAC address of the client 20 and the server 22 respectively includes: the first network port passes the crawling from the The data packet sent by the client 20 to the server 22 is analyzed to obtain the IP address and the MAC address of the client 20 and the server 22 respectively; or the client 20 and the server 22 respectively configured through the custom configuration. IP address and MAC address.
  • a system as shown in FIG. 5 including a client 50, a proxy server 51, and a gateway 52.
  • the proxy server 51 includes two network ports, respectively, a network port Eth1 and a network port. Eth2.
  • the method steps for the specific application are as follows:
  • Step 1 Device connection: The Eth1 network port of the proxy server 51 is connected to the network port of the client 50, and the Eth0 port of the proxy server 51 is connected with the gateway 52 (equivalent to inserting between the client 50 and the gateway 52). a piece of equipment).
  • Step 2 Configure the bridge br0: bridge Eth1 and Eth0, set the bridge interface br0, configure the private network IP for br0, and set the first custom private network IP (IP4') corresponding to the Eth1. And setting a second custom private network IP (IP4) corresponding to the Eth0.
  • IP4 custom private network IP
  • Step 3 Obtain the IP address and MAC address of the client 50 and the gateway 52 in the Eth1 packet capture.
  • the IP address and MAC address of the client 50 and the gateway 52 can also be specified in a self-configuring manner.
  • the IP address of the client 50 is IP5, and the MAC address of the client 50 is MAC5.
  • the IP address of the gateway 52 is IP6, and the MAC address of the gateway 52 is MAC6.
  • Step 4 Configure the routing table: ip route add default via IP4dev br0, that is, configure the proxy server 51 to send the packet to the gateway 52 (server) through IP4.
  • Step 5 Configure static arp: arp–s IP4MAC6; arp–s IP4’MAC5. (This step is equivalent to associating the private IP address configured in step 4 with the actual MAC address.)
  • Step 6 Configure the SNAT rules for IP: iptables–t nat–I POSTROUTING–o Eth0–s IP4/24–j SNAT--to IP5. (This step is to convert the source IP address IP4 of the packet sent by the proxy server 51 to the server to the IP address IP5 of the client 50).
  • Step 7 Preferably, for some gateways 52 with MAC address filtering function, since such a gateway 52 discards data packets whose ip and mac addresses do not match in the arp mapping table, the MAC address is configured on the proxy server 51.
  • the network system, the proxy server, and the data processing method and system thereof of the present invention pre-set a private network IP address for the proxy server, and the proxy server may not need to occupy the public network IP address, and will receive the received
  • the source IP address of the data packet is translated into the IP address of the client according to a preset source IP address translation rule, and according to the A mapping relationship between the private IP address and the MAC address of the server is transmitted to the server by using the source IP address as the IP address of the client.
  • the proxy server does not need to occupy the public network IP, and when the server receives the data sent by the client forwarded by the proxy server, the information such as the IP of the client can be clearly known, and the information interaction is more transparent. Therefore, the present invention effectively overcomes various shortcomings in the prior art and has high industrial utilization value.

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Data Exchanges In Wide-Area Networks (AREA)
  • Small-Scale Networks (AREA)

Abstract

本发明提供一种网络系统、代理服务器及其应用的数据处理方法及系统，预先为代理服务器设置私网IP地址，则代理服务器可以不需要占用公网IP地址，当将接收到的从所述客户端发送的数据包发送至所述服务端时，根据预设的源IP地址转换规则，将所述数据包的源IP地址转化为所述客户端的IP地址，并根据所述第一自定义私网IP地址与所述服务端的MAC地址的映射关系将源IP地址为所述客户端的IP地址的所述数据包传输至所述服务端。即本发明中，代理服务器不需要占用公网IP，且在服务端接收到由代理服务器转发的客户端发送的数据时，可以清楚的知道客户端的IP等信息，信息交互更加透明。

Description

网络系统、代理服务器及其应用的数据处理方法及系统 技术领域
本发明涉及数据处理领域，特别是涉及一种网络系统、代理服务器及其应用的数据处理方法及系统。
背景技术
现有的代理方案的拓扑结构如图1所示。代理服务器11把客户端10访问服务端12的流量勾到应用层，再由应用层的程序代理访问服务端12。过程中客户端10和代理服务器11之间会建立一个连接，代理服务器11和服务端12之间会建立另一个连接。对客户端10来说，它看到的IP依然是服务端12的IP；对服务端12来说，它看到的IP则是代理服务器11的IP。且代理服务器11本身需要多占用一个IP，在之前没有预留冗余IP的情况下，可能会出现IP稀缺的情况，无法提供多余的IP供代理服务器11使用，造成代理环境的部署困难。
发明内容
鉴于以上所述现有技术的缺点，本发明的目的在于提供一种网络系统、代理服务器及其应用的数据处理方法及系统，用于解决现有技术中代理服务器本身需要占用一个公网IP且客户端的IP不能对服务端透明的问题。
为实现上述目的及其他相关目的，本发明提供一种数据处理方法，包括：通过第一网口与客户端连接，且通过第二网口与服务端进行连接；将所述第一网口与所述第二网口进行桥接，以形成网桥接口，且为所述网桥接口配置私网IP地址；分别获取所述客户端和所述服务端的IP地址以及MAC地址；配置路由表，以定义客户端与服务端之间的往返路由，使得所述服务端获得第一自定义私网IP地址，所述客户端获得第二自定义私网IP地址，且进行映射将所述第一自定义私网IP地址与所述服务端的MAC地址进行映射，进行映射将所述第二自定义私网IP地址与所述客户端的MAC地址进行映射；当将接收到的从所述客户端发送的数据包发送至所述服务端时，根据预设的源IP地址转换规则，将所述数据包的源IP地址转化为所述客户端的IP地址，并根据所述第一自定义私网IP地址与所述服务端的MAC地址的映射关系将源IP地址为所述客户端的IP地址的所述数据包传输至所述服务端；其中所述数据包的源IP地址为为所述网桥接口配置的私网IP地址。
于本发明一具体实施例中，当将接收到的从所述客户端发送的数据包发送至所述服务端时，还包括根据所述预设的源MAC地址转换规则，将所述数据包的源MAC地址转化为所述 客户端的MAC地址，并根据所述第一自定义私网IP地址与所述服务端的MAC地址的映射关系将源MAC地址为所述客户端的MAC地址的所述数据包传输至所述服务端。
于本发明一具体实施例中，当将接收到的从所述服务端发送的数据包发送至所述客户端时，根据预设的源IP地址转换规则，将所述数据包的源IP地址转化为所述服务端的IP地址，并根据所述第二自定义私网IP地址与所述客户端的MAC地址的映射关系将源IP地址为所述服务端的IP地址的所述数据包传输至所述客户端。
于本发明一具体实施例中，所述分别获取所述客户端以及服务端的IP地址以及MAC地址的步骤包括：在所述第一网口通过对抓取的从所述客户端发送至所述服务端的数据包进行分析，以分别获取所述客户端以及服务端的IP地址以及MAC地址；或分别获取通过自定义配置的客户端以及服务端的IP地址以及MAC地址。
为实现上述目的及其他相关目的，本发明还提供一种数据处理系统，包括：配置模块，用以通过第一网口与客户端连接，且通过第二网口与服务端进行连接；将所述第一网口与所述第二网口进行桥接，以形成网桥接口，且为所述网桥接口配置私网IP地址；且分别获取所述客户端和所述服务端的IP地址以及MAC地址；配置路由表，以定义客户端与服务端之间的往返路由，使得所述服务端获得第一自定义私网IP地址，所述客户端获得第二自定义私网IP地址，且进行映射将所述第一自定义私网IP地址与所述服务端的MAC地址进行映射，进行映射将所述第二自定义私网IP地址与所述客户端的MAC地址进行映射；处理模块，用以当将接收到的从所述客户端发送的数据包发送至所述服务端时，根据预设的源IP地址转换规则，将所述数据包的源IP地址转化为所述客户端的IP地址，并根据所述第一自定义私网IP地址与所述服务端的MAC地址的映射关系将源IP地址为所述客户端的IP地址的所述数据包传输至所述服务端；其中所述数据包的源IP地址为为所述网桥接口配置的私网IP地址。
于本发明一具体实施例中，所述处理模块还用以当将接收到的从所述客户端发送的数据包发送至所述服务端时，还包括根据所述预设的源MAC地址转换规则，将所述数据包的源MAC地址转化为所述客户端的MAC地址，并根据所述第一自定义私网IP地址与所述服务端的MAC地址的映射关系将源MAC地址为所述客户端的MAC地址的所述数据包传输至所述服务端。
于本发明一具体实施例中，所述处理模块还用以当将接收到的从所述服务端发送的数据包发送至所述客户端时，根据预设的源IP地址转换规则，将所述数据包的源IP地址转化为所述服务端的IP地址，并根据所述第二自定义私网IP地址与所述客户端的MAC地址的映射关系将源IP地址为所述服务端的IP地址的所述数据包传输至所述客户端。
于本发明一具体实施例中，所述配置模块分别获取所述客户端以及服务端的IP地址以及MAC地址的方式包括：在所述第一网口通过对抓取的从所述客户端发送至所述服务端的数据包进行分析，以分别获取所述客户端以及服务端的IP地址以及MAC地址；或分别获取通过自定义配置的客户端以及服务端的IP地址以及MAC地址。
为实现上述目的及其他相关目的，本发明还提供一种代理服务器，包括如上中任一项所述的数据处理系统。
为实现上述目的及其他相关目的，本发明还提供一种网络系统，包括如上所述的代理服务器，还包括通过第一网口与所述代理服务器连接的客户端以及通过第二网口与所述代理服务器连接的服务端。
如上所述，本发明的网络系统、代理服务器及其应用的数据处理方法及系统，预先为代理服务器设置私网IP地址，则代理服务器可以不需要占用公网IP地址，当将接收到的从所述客户端发送的数据包发送至所述服务端时，根据预设的源IP地址转换规则，将所述数据包的源IP地址转化为所述客户端的IP地址，并根据所述第一自定义私网IP地址与所述服务端的MAC地址的映射关系将源IP地址为所述客户端的IP地址的所述数据包传输至所述服务端。在本发明中，因为代理服务器只需要配置私网IP，且通过配置往返路由、IP-MAC映射、SNAT规则达到透明代理的效果，从而代理服务器不需要占用公网IP，且在服务端接收到由代理服务器转发的客户端发送的数据时，可以清楚的知道客户端的IP等信息，信息交互更加透明。
附图说明
图1显示为现有技术一实施例的网络系统的结构示意图。
图2显示为本发明的网络系统在一具体实施例中的结构示意图。
图3显示为本发明的数据处理方法在一具体实施例中的流程示意图。
图4显示为本发明的数据处理系统在一具体实施例中的模块示意图。
图5显示为本发明的网络系统在一具体实施例中的结构示意图。
元件标号说明
10    客户端
11    代理服务器
12    服务端
20       客户端
21       代理服务器
22       服务端
30～34   步骤
4        数据处理系统
40       配置模块
41       处理模块
50       客户端
51       代理服务器
52       网关
具体实施方式
以下通过特定的具体实例说明本发明的实施方式，本领域技术人员可由本说明书所揭露的内容轻易地了解本发明的其他优点与功效。本发明还可以通过另外不同的具体实施方式加以实施或应用，本说明书中的各项细节也可以基于不同观点与应用，在没有背离本发明的精神下进行各种修饰或改变。需说明的是，在不冲突的情况下，以下实施例及实施例中的特征可以相互组合。
需要说明的是，以下实施例中所提供的图示仅以示意方式说明本发明的基本构想，遂图示中仅显示与本发明中有关的组件而非按照实际实施时的组件数目、形状及尺寸绘制，其实际实施时各组件的型态、数量及比例可为一种随意的改变，且其组件布局型态也可能更为复杂。
在传统的代理方案的拓扑结构中，采用如图1所示的结构，包括客户端10、代理服务器11、以及服务器12。代理服务器11把客户端10访问服务端12的流量勾到应用层，再由应用层的程序代理访问服务端12。过程中客户端10和代理服务器11之间会建立一个连接，代理服务器11和服务端12之间会建立另一个连接。对客户端10来说，它看到的IP依然是服务端12的IP；对服务端12来说，它看到的IP则是代理服务器11的IP。例如在本方案中，客户端的IP地址为IP1，客户端的MAC地址为MAC1，代理服务器11的IP地址为IP2，代理服务器11的MAC地址为MAC2，服务端12的IP地址为IP3，服务端12的MAC地址为MAC3，当代理服务器11将从客户端10接收到的数据转发至服务端12时，服务端12可获得的数据发送的IP地址为代理服务器11的IP地址IP2，当代理服务器11将从服务端12接 收到的数据转发至客户端10时，客户端10可获得的数据发送的IP地址为服务端12的IP地址IP3，其中所述IP2为公网IP，所述代理服务器11需要占用一个公网IP。
这种代理方案的缺点是：代理服务器本身需要多占用一个公网IP，在之前没有预留冗余公网IP的情况下，可能会出现公网IP稀缺的情况，无法提供多余的公网IP供代理服务器使用，造成代理环境的部署困难，且服务端12无法获取客户端10的IP地址或MAC地址。
本发明在基于以上缺点的情况下，采用一种透明代理的方法。本发明应用的网络系统，其拓扑结构如图2所示，所述网络系统包括客户端20、代理服务器21、以及服务端22，整体的拓扑结构与图1类似，只是在代理服务器21采用本文所述方法对IP、Mac地址进行了转换处理，且代理服务器21的IP地址为私网IP地址IP2’为私网IP地址。这样不仅客户端20看到的是服务端22的IP(IP3)，服务端22看到的也是客户端20的IP(IP1)；并且无需在代理服务器21上配置公网IP，只需配置一个私网IP(IP2’)。采用本发明后，原方案所使用的应用程序也无需做修改，节约了开发成本。
请参阅图3，显示为本发明的数据处理方法在一具体实施例中的流程示意图。所述数据处理方法应用于所述代理服务器21中，包括：
S30：通过第一网口与客户端20连接，且通过第二网口与服务端22进行连接；
S31：将所述第一网口与所述第二网口进行桥接，以形成网桥接口，且为所述网桥接口配置私网IP地址；
S32：分别获取所述客户端20和所述服务端22的IP地址以及MAC地址；其中所述客户端20的IP地址以及MAC地址为通过所述第一网口与所述代理服务器21连接的设备的IP地址以及MAC地址，所述客户端20的IP地址可为公网IP或私网IP。所述服务端22的IP地址以及MAC地址为通过所述第二网口与所述代理服务器21连接的设备的IP地址以及MAC地址，所述服务端22的IP地址可为公网IP或私网IP。于具体应用中，所述客户端20例如为智能手机、平板电脑、或台式电脑等智能设备。
S33：配置路由表，以定义客户端20与服务端22之间的往返路由，使得所述服务端22获得第一自定义私网IP地址，所述客户端20获得第二自定义私网IP地址，且将所述第一自定义私网IP地址与所述服务端22的MAC地址进行映射，将所述第二自定义私网IP地址与所述客户端20的MAC地址进行映射；第一自定义私网IP地址和第二自定义私网IP地址都是虚拟出来的IP，并没有配置到任何的设备上，但是和网桥接口的私网IP必须在同一个网段内。通过配置路由表，使得发往服务端的数据包的下一跳是第一自定义私网IP，发往客户端的数据包的下一跳是第二自定义私网IP。
S34：当将接收到的从所述客户端20发送的数据包发送至所述服务端22时，根据预设的源IP地址转换规则，将所述数据包的源IP地址转化为所述客户端20的IP地址，并根据所述第一自定义私网IP地址与所述服务端22的MAC地址的映射关系将源IP地址为所述客户端20的IP地址的所述数据包传输至所述服务端22；其中所述数据包的源IP地址为所述网桥接口配置的私网IP地址。
于本发明一具体实施例中，当将接收到的从所述客户端20发送的数据包发送至所述服务端22时，还包括根据所述预设的源MAC地址转换规则，将所述数据包的源MAC地址转化为所述客户端20的MAC地址，并根据所述第一自定义私网IP地址与所述服务端22的MAC地址的映射关系将源MAC地址为所述客户端20的MAC地址的所述数据包传输至所述服务端22。
于本发明一具体实施例中，当将接收到的从所述服务端22发送的数据包发送至所述客户端20时，根据预设的源IP地址转换规则，将所述数据包的源IP地址转化为所述服务端22的IP地址，并根据所述第二自定义私网IP地址与所述客户端20的MAC地址的映射关系将源IP地址为所述服务端22的IP地址的所述数据包传输至所述客户端20。
于本发明一具体实施例中，当将接收到的从所述服务端22发送的数据包发送至所述客户端20时，还包括根据预设的源MAC地址转换规则，将所述数据包的源MAC地址转化为所述服务端22的MAC地址，并根据所述第二自定义私网IP地址与所述客户端20的MAC地址的映射关系将源MAC地址为所述服务端22的MAC地址的所述数据包传输至所述客户端20。
于本发明一具体实施例中，所述分别获取所述客户端20以及服务端22的IP地址以及MAC地址的步骤包括：在所述第一网口通过对抓取的从所述客户端20发送至所述服务端22的数据包进行分析，以分别获取所述客户端20以及服务端22的IP地址以及MAC地址；或分别获取通过自定义配置的客户端20以及服务端22的IP地址以及MAC地址。
请参阅图4，显示为本发明的数据处理系统在一具体实施例中的模块示意图。所述数据处理系统4包括配置模块40以及处理模块41。所述数据处理系统4应用于图2所示的代理服务器21中，具体为：
所述配置模块40用以通过第一网口与客户端20连接，且通过第二网口与服务端22进行连接；将所述第一网口与所述第二网口进行桥接，以形成网桥接口，且为所述网桥接口配置私网IP地址；且分别获取所述客户端20和所述服务端22的IP地址以及MAC地址；配置路由表使，以定义客户端20与服务端22之间的往返路由，得所述服务端22获得第一自定义私 网IP地址，所述客户端20获得第二自定义私网IP地址，且将所述第一自定义私网IP地址与所述服务端22的MAC地址进行映射，将所述第二自定义私网IP地址与所述客户端20的MAC地址进行映射；其中所述客户端20的IP地址以及MAC地址为通过所述第一网口与所述代理服务器21连接的设备的IP地址以及MAC地址，所述客户端20的IP地址可为公网IP或私网IP。所述服务端22的IP地址以及MAC地址为通过所述第二网口与所述代理服务器21连接的设备的IP地址以及MAC地址，所述服务端22的IP地址可为公网IP或私网IP。于具体应用中，所述客户端20例如为智能手机、平板电脑、或台式电脑等智能设备。
所述处理模块41用以当将接收到的从所述客户端20发送的数据包发送至所述服务端22时，根据预设的源IP地址转换规则，将所述数据包的源IP地址转化为所述客户端20的IP地址，并根据所述第一自定义私网IP地址与所述服务端22的MAC地址的映射关系将源IP地址为所述客户端20的IP地址的所述数据包传输至所述服务端22；其中所述数据包的源IP地址为为所述网桥接口配置的私网IP地址。其中，第一自定义私网IP地址和第二自定义私网IP地址都是虚拟出来的IP，并没有配置到任何的设备上，但是和网桥接口的私网IP必须在同一个网段内。通过配置路由表，使得发往服务端的数据包的下一跳是第一自定义私网IP，发往客户端的数据包的下一跳是第二自定义私网IP。
于本发明一具体实施例中，所述处理模块41还用以当将接收到的从所述客户端20发送的数据包发送至所述服务端22时，还包括根据所述预设的源MAC地址转换规则，将所述数据包的源MAC地址转化为所述客户端20的MAC地址，并根据所述第一自定义私网IP地址与所述服务端22的MAC地址的映射关系将源MAC地址为所述客户端20的MAC地址的所述数据包传输至所述服务端22。
于本发明一具体实施例中，所述处理模块41还用以当将接收到的从所述服务端22发送的数据包发送至所述客户端20时，根据预设的源IP地址转换规则，将所述数据包的源IP地址转化为所述服务端22的IP地址，并根据所述第二自定义私网IP地址与所述客户端20的MAC地址的映射关系将源IP地址为所述服务端22的IP地址的所述数据包传输至所述客户端20。
于本发明一具体实施例中，所述处理模块41还用以当将接收到的从所述服务端22发送的数据包发送至所述客户端20时，还包括根据预设的源MAC地址转换规则，将所述数据包的源MAC地址转化为所述服务端22的MAC地址，并根据所述第二自定义私网IP地址与所述客户端20的MAC地址的映射关系将源MAC地址为所述服务端22的MAC地址的所述数据包传输至所述客户端20。
于本发明一具体实施例中，所述配置模块40分别获取所述客户端20以及服务端22的IP地址以及MAC地址的方式包括：在所述第一网口通过对抓取的从所述客户端20发送至所述服务端22的数据包进行分析，以分别获取所述客户端20以及服务端22的IP地址以及MAC地址；或分别获取通过自定义配置的客户端20以及服务端22的IP地址以及MAC地址。
于本发明一具体应用实例中，提供如图5所示的系统，包括客户端50、代理服务器51、以及网关52，所述代理服务器51包括两个网口，分别为网口Eth1以及网口Eth2。具体应用的方法步骤如下：
步骤1，设备连接：将代理服务器51的Eth1网口同客户端50的网口进行连接，将代理服务器51的Eth0口同网关52进行连接(相当于在客户端50和网关52之间插入了一台设备)。
步骤2，配置网桥br0：将Eth1和Eth0进行桥接，设置成网桥接口br0，并为br0配置私网IP，且设置与所述Eth1对应的第一自定义私网IP(IP4’)，以及设置与所述Eth0对应的第二自定义私网IP(IP4)。
步骤3，在Eth1抓包获取客户端50、网关52的IP地址、MAC地址。也可采取自己配置的方式来指定客户端50和网关52的IP地址和MAC地址。所述客户端50的IP地址为IP5，所述客户端50的MAC地址为MAC5。所述网关52的IP地址为IP6，所述网关52的MAC地址为MAC6。
步骤4，配置路由表：ip route add default via IP4dev br0，即配置所述代理服务器51通过IP4把包发往网关52(服务端)。ip route add IP5via IP4’dev br0，即配置反向路由(也就是代理服务器51要把包发给客户端50要怎么走)即代理服务器51通过所述IP4’将包发往所述客户端50。
步骤5，配置静态arp：arp–s IP4MAC6；arp–s IP4’MAC5。(这个步骤相当于把步骤4配置的私网IP和实际的MAC地址对应起来。)
步骤6，配置IP的SNAT规则：iptables–t nat–I POSTROUTING–o Eth0–s IP4/24–j SNAT--to IP5。(这个步骤是把代理服务器51发往服务端的包进行源IP地址IP4的转换，换成客户端50的IP地址IP5)。
步骤7，优选的，针对一些具备MAC地址过滤功能的网关52，由于这类网关52对于自身arp映射表中ip和mac地址不匹配的数据包会进行丢弃，所以在代理服务器51上配置MAC地址的SNAT规则：ebtables-t nat-I POSTROUTING-o Eth0-j snat--to-src MAC5。(这个步骤是把代理服务器51发往服务端的包进行源MAC地址的转换，换成客户端50的MAC地址MAC5)。
综上所述，本发明的网络系统、代理服务器及其应用的数据处理方法及系统，预先为代理服务器设置私网IP地址，则代理服务器可以不需要占用公网IP地址，当将接收到的从所述客户端发送的数据包发送至所述服务端时，根据预设的源IP地址转换规则，将所述数据包的源IP地址转化为所述客户端的IP地址，并根据所述第一自定义私网IP地址与所述服务端的MAC地址的映射关系将源IP地址为所述客户端的IP地址的所述数据包传输至所述服务端。即本发明中，代理服务器不需要占用公网IP，且在服务端接收到由代理服务器转发的客户端发送的数据时，可以清楚的知道客户端的IP等信息，信息交互更加透明。所以，本发明有效克服了现有技术中的种种缺点而具高度产业利用价值。
上述实施例仅例示性说明本发明的原理及其功效，而非用于限制本发明。任何熟悉此技术的人士皆可在不违背本发明的精神及范畴下，对上述实施例进行修饰或改变。因此，举凡所属技术领域中具有通常知识者在未脱离本发明所揭示的精神与技术思想下所完成的一切等效修饰或改变，仍应由本发明的权利要求所涵盖。

Claims (10)

  1. 一种数据处理方法，其特征在于，包括：
    通过第一网口与客户端连接，且通过第二网口与服务端进行连接；
    将所述第一网口与所述第二网口进行桥接，以形成网桥接口，且为所述网桥接口配置私网IP地址；
    分别获取所述客户端和所述服务端的IP地址以及MAC地址；
    配置路由表，以定义客户端与服务端之间的往返路由，使得所述服务端获得第一自定义私网IP地址，所述客户端获得第二自定义私网IP地址，且将所述第一自定义私网IP地址与所述服务端的MAC地址进行映射，将所述第二自定义私网IP地址与所述客户端的MAC地址进行映射；
    当接收到从所述客户端发送的数据包发送至所述服务端时，根据预设的源IP地址转换规则，将所述数据包的源IP地址转化为所述客户端的IP地址，并根据所述第一自定义私网IP地址与所述服务端的MAC地址的映射关系将源IP地址为所述客户端的IP地址的所述数据包传输至所述服务端；其中，所述数据包的源IP地址为为所述网桥接口配置的私网IP地址。
  2. 根据权利要求1所述的数据处理方法，其特征在于：当将接收到的从所述客户端发送的数据包发送至所述服务端时，还包括根据所述预设的源MAC地址转换规则，将所述数据包的源MAC地址转化为所述客户端的MAC地址，并根据所述第一自定义私网IP地址与所述服务端的MAC地址的映射关系将源MAC地址为所述客户端的MAC地址的所述数据包传输至所述服务端。
  3. 根据权利要求1所述的数据处理方法，其特征在于：当将接收到的从所述服务端发送的数据包发送至所述客户端时，
    根据预设的源IP地址转换规则，将所述数据包的源IP地址转化为所述服务端的IP地址，并根据所述第二自定义私网IP地址与所述客户端的MAC地址的映射关系将源IP地址为所述服务端的IP地址的所述数据包传输至所述客户端。
  4. 根据权利要求1所述的数据处理方法，其特征在于：所述分别获取所述客户端以及服务端的IP地址以及MAC地址的步骤包括：
    在所述第一网口通过对抓取的从所述客户端发送至所述服务端的数据包进行分析，以分别获取所述客户端以及服务端的IP地址以及MAC地址；或
    分别获取通过自定义配置的客户端以及服务端的IP地址以及MAC地址。
  5. 一种数据处理系统，其特征在于，包括：
    配置模块，用以通过第一网口与客户端连接，且通过第二网口与服务端进行连接；将所述第一网口与所述第二网口进行桥接，以形成网桥接口，且为所述网桥接口配置私网IP地址；且分别获取所述客户端和所述服务端的IP地址以及MAC地址；并配置路由表，以定义客户端与服务端之间的往返路由，使得所述服务端获得第一自定义私网IP地址，所述客户端获得第二自定义私网IP地址，且进行映射将所述第一自定义私网IP地址与所述服务端的MAC地址进行映射，将所述第二自定义私网IP地址与所述客户端的MAC地址进行映射；
    处理模块，用以当将接收到的从所述客户端发送的数据包发送至所述服务端时，根据预设的源IP地址转换规则，将所述数据包的源IP地址转化为所述客户端的IP地址，并根据所述第一自定义私网IP地址与所述服务端的MAC地址的映射关系将源IP地址为所述客户端的IP地址的所述数据包传输至所述服务端；其中所述数据包的源IP地址为为所述网桥接口配置的私网IP地址。
  6. 根据权利要求5所述的数据处理系统，其特征在于：所述处理模块还用以当将接收到的从所述客户端发送的数据包发送至所述服务端时，还包括根据所述预设的源MAC地址转换规则，将所述数据包的源MAC地址转化为所述客户端的MAC地址，并根据所述第一自定义私网IP地址与所述服务端的MAC地址的映射关系将源MAC地址为所述客户端的MAC地址的所述数据包传输至所述服务端。
  7. 根据权利要求5所述的数据处理系统，其特征在于：所述处理模块还用以当将接收到的从所述服务端发送的数据包发送至所述客户端时，
    根据预设的源IP地址转换规则，将所述数据包的源IP地址转化为所述服务端的IP地址，并根据所述第二自定义私网IP地址与所述客户端的MAC地址的映射关系将源IP地址为所述服务端的IP地址的所述数据包传输至所述客户端。
  8. 根据权利要求5所述的数据处理系统，其特征在于：所述配置模块分别获取所述客户端以及服务端的IP地址以及MAC地址的方式包括：
    在所述第一网口通过对抓取的从所述客户端发送至所述服务端的数据包进行分析，以 分别获取所述客户端以及服务端的IP地址以及MAC地址；或
    分别获取通过自定义配置的客户端以及服务端的IP地址以及MAC地址。
  9. 一种代理服务器，其特征在于：包括如权利要求5～8中任一项所述的数据处理系统。
  10. 一种网络系统，其特征在于：包括如权利要求9所述的代理服务器，还包括通过第一网口与所述代理服务器连接的客户端以及通过第二网口与所述代理服务器连接的服务端。
PCT/CN2016/097829 2016-07-21 2016-09-01 网络系统、代理服务器及其应用的数据处理方法及系统 WO2018014434A1 (zh)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
CN201610579082.9A CN106230898B (zh) 2016-07-21 2016-07-21 网络系统、代理服务器及其应用的数据处理方法及系统
CN201610579082.9 2016-07-21

Publications (1)

Publication Number Publication Date
WO2018014434A1 true WO2018014434A1 (zh) 2018-01-25

Family

ID=57532264

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2016/097829 WO2018014434A1 (zh) 2016-07-21 2016-09-01 网络系统、代理服务器及其应用的数据处理方法及系统

Country Status (2)

Country Link
CN (1) CN106230898B (zh)
WO (1) WO2018014434A1 (zh)

Cited By (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN113438335A (zh) * 2021-06-10 2021-09-24 深圳市广和通无线股份有限公司 路由方法、装置、设备及存储介质
CN114584546A (zh) * 2022-03-07 2022-06-03 南京厚建软件有限责任公司 一种抓取、保存App数据包的方法及系统

Families Citing this family (7)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN107181812B (zh) * 2017-06-08 2020-05-22 网宿科技股份有限公司 一种加速代理设备、加速代理方法以及一种内容管理系统
CN108809795B (zh) * 2018-04-19 2021-10-15 中国科学院计算机网络信息中心 一种局域网环境中透明分流方法和装置
CN109547452B (zh) * 2018-11-30 2021-04-02 四川安迪科技实业有限公司 Linux网桥设备上实现TCP透明代理的方法及系统
CN110708395A (zh) * 2019-10-24 2020-01-17 深圳前海环融联易信息科技服务有限公司 数据获取方法、装置、计算机设备及存储介质
CN111147562A (zh) * 2019-12-18 2020-05-12 深圳市任子行科技开发有限公司 网络代理方法及系统
CN111447240B (zh) * 2020-04-29 2022-02-15 安康鸿天科技股份有限公司 数据通信控制方法、装置、系统、存储介质及计算机设备
CN117354368B (zh) * 2023-12-05 2024-09-27 北京轻网科技股份有限公司 七层代理下客户端信息透传方法、装置、设备及存储介质

Citations (7)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN1549499A (zh) * 2003-05-07 2004-11-24 中兴通讯股份有限公司 一种基于snmp协议的代理网管的实现方法
WO2005096160A1 (en) * 2004-03-16 2005-10-13 Thomson Licensing Proxy dns for web browser request redirection in public hotspot accesses
CN1863138A (zh) * 2005-05-12 2006-11-15 中兴通讯股份有限公司 一种实现多媒体业务nat穿越的方法
CN101094104A (zh) * 2007-07-30 2007-12-26 中兴通讯股份有限公司 一种通过安全网管代理进行设备管理的方法及其装置
WO2012141762A1 (en) * 2011-02-25 2012-10-18 Telecommunication Systems, Inc. Mobile internet protocol (ip) location
CN105554065A (zh) * 2015-12-03 2016-05-04 华为技术有限公司 处理报文的方法、转换单元和应用单元
CN105721630A (zh) * 2016-03-24 2016-06-29 国云科技股份有限公司 一种虚拟机共用宿主机ip提供外网服务的方法

Family Cites Families (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN1444363A (zh) * 2002-03-13 2003-09-24 磊讯（上海）软件科技有限公司 一种在公共场所实施以太局域网的方法
CN102065111B (zh) * 2009-11-13 2015-02-25 北京神州绿盟信息安全科技股份有限公司 一种反向代理方法和反向代理服务器
CN104168173B (zh) * 2010-08-20 2018-01-16 华为技术有限公司 终端穿越私网与ims核心网中服务器通信的方法、装置及网络系统
CN103428095B (zh) * 2013-08-26 2016-12-28 深信服网络科技（深圳）有限公司 一种代理服务器及其代理方法

Patent Citations (7)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN1549499A (zh) * 2003-05-07 2004-11-24 中兴通讯股份有限公司 一种基于snmp协议的代理网管的实现方法
WO2005096160A1 (en) * 2004-03-16 2005-10-13 Thomson Licensing Proxy dns for web browser request redirection in public hotspot accesses
CN1863138A (zh) * 2005-05-12 2006-11-15 中兴通讯股份有限公司 一种实现多媒体业务nat穿越的方法
CN101094104A (zh) * 2007-07-30 2007-12-26 中兴通讯股份有限公司 一种通过安全网管代理进行设备管理的方法及其装置
WO2012141762A1 (en) * 2011-02-25 2012-10-18 Telecommunication Systems, Inc. Mobile internet protocol (ip) location
CN105554065A (zh) * 2015-12-03 2016-05-04 华为技术有限公司 处理报文的方法、转换单元和应用单元
CN105721630A (zh) * 2016-03-24 2016-06-29 国云科技股份有限公司 一种虚拟机共用宿主机ip提供外网服务的方法

Cited By (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN113438335A (zh) * 2021-06-10 2021-09-24 深圳市广和通无线股份有限公司 路由方法、装置、设备及存储介质
CN114584546A (zh) * 2022-03-07 2022-06-03 南京厚建软件有限责任公司 一种抓取、保存App数据包的方法及系统

Also Published As

Publication number Publication date
CN106230898A (zh) 2016-12-14
CN106230898B (zh) 2019-07-23

Similar Documents

Publication Publication Date Title
WO2018014434A1 (zh) 网络系统、代理服务器及其应用的数据处理方法及系统
KR101082876B1 (ko) 가상 네트워크 접속 시스템, 장치, 및 기록 매체
CN105376299B (zh) 一种网络通信方法、设备及网络附属存储设备
JP2004112801A (ja) Ｉｐアドレス割当装置及び方法
CN105100299A (zh) 报文发送方法、nat表项建立方法及nat设备
KR101880346B1 (ko) 중계 장치 및 통신 방식 선택 방법 및 프로그램을 기억한 기억 매체
TWI601422B (zh) 具有無線中繼功能的網路攝影機
KR101323629B1 (ko) 정보 동기화를 위한 방법, 장치 및 시스템
CN111711705B (zh) 基于代理节点作双向nat实现网络连接的方法和装置
KR20020017135A (ko) 사설망의 네트워크 노드에 접속하기 위한 시스템과 방법
KR20150016201A (ko) 데이터 상호작용 방법, 장치, 및 시스템
CN106713528B (zh) 一种家庭网关及IPv6主机访问网络服务器的方法
KR100716997B1 (ko) 고객 전자 장치에 대한 이더넷과 1394ａ 로컬 링크사이에서 번역 브릿지 방법 및 장치
TW201414253A (zh) 網路位址轉換系統及方法
TW201701635A (zh) 用於多層網路位址轉譯器結構之網路傳輸方法及網路傳輸系統
CN114189492A (zh) 一种基于网络地址转换技术的网卡压力测试方法和系统
TW201517601A (zh) 媒體串流提供裝置、連線至媒體串流提供裝置的方法、媒體串流系統與電腦可讀取媒體
KR20080078802A (ko) 자동적으로 네트워크 어드레스 변환을 수행하기 위해 로컬네트워크상에서 실행되는 어플리케이션을 검출하기 위한디바이스 및 방법
CN104468575A (zh) 局域网上实现域名注册的方法与装置
JP5054666B2 (ja) Ｖｐｎ接続装置、パケット制御方法、及びプログラム
CN106656718B (zh) VxLAN网关以及基于VxLAN网关实现的主机接入互联网的方法
JP4480605B2 (ja) ネットワーク、ルータ装置及びそれらに用いるプライベートアドレス間通信方法並びにそのプログラム
KR20030026740A (ko) 매체 접근 제어를 이용한 망 주소 변환 처리방법
TWI491209B (zh) 路由器及保全系統
CN113067908B (zh) 一种nat穿越方法、装置、电子设备和存储介质

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 16909361

Country of ref document: EP

Kind code of ref document: A1

NENP Non-entry into the national phase

Ref country code: DE

122 Ep: pct application non-entry in european phase

Ref document number: 16909361

Country of ref document: EP

Kind code of ref document: A1