WO2020134329A1 - Gateway service implementation method, control device, and gateway - Google Patents

Abstract

Provided in the embodiments of the present invention are a gateway service implementation method, a control device and a gateway. A gateway service control device generates a gateway service model according to an input instruction; and sends gateway service information to a gateway according to the generated gateway service model. The gateway acquires a plurality of first instructions for implementing gateway services, and processes received messages according to the first instructions. Gateway services in the present application adopt a model-driven design, and may meet different service requirements, rapidly achieving service objectives, without the need to develop different plug-ins according to different services.

Description

Gateway service implementation method, control device and gateway Technical field

This application relates to the field of cloud infrastructure, and more specifically, to a gateway service implementation method, control device, and gateway.

Background technique

In the service-oriented architecture, the Hypertext Transfer Protocol (HTTP, HyperText Transfer Protocol) gateway (including http 1.0, http 1.1 and http 2.0, etc.) is responsible for the entire system's external entrance and is the core component of the service system. From the perspective of object-oriented design, it is similar to the appearance mode. The gateway encapsulates the system's internal architecture and provides each client with a customized application programming interface (API, Application Programming Interface). It may also have other responsibilities, such as authentication, monitoring, load balancing, caching, request fragmentation and management, and static response processing. All clients and consumers access microservices through a unified gateway, and all non-business functions need to be handled at the gateway layer.

All kinds of API gateways have their own characteristics, but the development of their gateway business needs to be completed by writing code and developing multiple plug-ins. The introduction is as follows:

Nginx: As the most popular HTTP gateway, it has high processing performance and good stability, but lacks dynamic capabilities. The new configuration needs to be restarted to take effect, and the gateway service needs to meet its specifications. It is developed using a plug-in method. The technical level is high.

OpenResty: Based on Nginx, but in order to reduce the difficulty of developing Nginx's own plug-ins, Lua is introduced to develop gateway service plug-ins.

Kong: Based on Nginx, Lua has developed many specific plug-ins for openapi to achieve out-of-the-box purposes, but non-preset functions require self-developed plug-ins.

Zuul: Based on java development, you can use java or groovy to develop plug-ins needed for its business

The biggest disadvantage of using the above HTTP gateway to develop HTTP services is that different gateway plug-ins need to be developed to complete different HTTP gateway services, which results in slow online services, low stability, and inflexible adjustment.

Summary of the invention

The following is an overview of the topics detailed in this article. This summary is not intended to limit the scope of protection of the claims.

The embodiments of the present invention provide the following solutions.

A method for implementing gateway service, applied to a gateway service control device, including:

Generate a gateway business model based on input instructions;

Deliver gateway service information to the gateway according to the generated gateway service model to perform gateway service processing on the gateway.

A gateway service control device, including a model designer and a service delivery interface, in which:

The model designer is configured to generate a gateway business model according to the input instruction;

The service delivery interface is configured to deliver gateway service information to the gateway according to the generated gateway service model.

A method for implementing gateway service includes:

The gateway obtains multiple first instructions for implementing the gateway service, wherein the first instructions are obtained based on the gateway service model;

The gateway processes the received message according to the first instruction.

A gateway, including a gateway control plane and an instruction executor, wherein:

The gateway control plane is configured to obtain a plurality of first instructions for implementing gateway services and issue them to the instruction executor, wherein the first instructions are obtained based on the gateway business model, and the gateway business model is adopted as Generated by the method for generating a gateway business model according to any embodiment of the present invention;

The instruction executor is configured to process the received message according to the first instruction issued.

A gateway service control device, including a memory, a processor, and a computer program stored on the memory and capable of running on the processor, when the processor executes the computer program, it is implemented as described in any embodiment of the present invention Processing of the method executed by the gateway service control device side.

A gateway includes a memory, a processor, and a computer program stored on the memory and executable on the processor. When the processor executes the computer program, the method performed by the gateway according to any embodiment of the present invention is implemented Treatment.

A computer-readable storage medium on which a computer program is stored, which when executed by a processor implements the processing of the method according to any embodiment of the present invention.

Embodiments of the present invention provide a system for implementing a gateway service. The gateway service uses a model-driven design, which can respond to different business needs and quickly achieve business goals. The operation and maintenance personnel can develop new services without the need for different services. Develop different plugins.

After reading and understanding the drawings and detailed description, other aspects can be understood.

BRIEF DESCRIPTION

FIG. 1 is a schematic diagram of a system for implementing gateway services according to an embodiment of the present invention;

2 is a schematic structural diagram of an assembly line according to an embodiment of the present invention;

3 is a flowchart of gateway service model design and delivery according to an embodiment of the present invention;

4 is a schematic diagram of an operation interface provided by a model designer according to an embodiment of the present invention;

5 is a flowchart of processing packets according to an embodiment of the present invention;

6A and 6B are schematic diagrams of an authentication control process and instructions executed by an instruction executor according to an embodiment of the present invention;

7A and 7B are schematic diagrams of a current limiting control process and instructions executed by an instruction executor according to an embodiment of the present invention;

8A and 8B are schematic diagrams of a canary upgrade control process and instructions executed by an instruction executor according to an embodiment of the present invention;

9A and 9B are schematic diagrams of a spike control process and instructions executed by an instruction executor according to an embodiment of the present invention;

10 is a schematic diagram of embedding a current limiting control sub-process and a permission control sub-process in a business process according to Embodiment 1 of the present invention;

11 is a schematic diagram of a hardware structure of a gateway service control device and a gateway according to an embodiment of the present invention.

detailed description

This application describes a plurality of embodiments, but the description is exemplary rather than restrictive, and it is obvious to a person of ordinary skill in the art that within the scope of the embodiments described in this application There are more embodiments and implementation schemes. Although many possible combinations of features are shown in the drawings and discussed in the detailed description, many other combinations of the disclosed features are also possible. Unless specifically limited, any feature or element of any embodiment may be used in combination with, or may replace any other feature or element of any other embodiment.

This application includes and contemplates combinations with features and elements known to those of ordinary skill in the art. The embodiments, features and elements already disclosed in the present application can also be combined with any conventional features or elements to form a unique invention solution defined by the claims. Any feature or element of any embodiment may also be combined with features or elements from other inventions to form another unique invention defined by the claims. Therefore, it should be understood that any features shown and/or discussed in this application may be implemented individually or in any suitable combination. Therefore, the embodiments are not limited except in accordance with the limitations of the appended claims and their equivalents. In addition, various modifications and changes can be made within the scope of protection of the appended claims.

In addition, in describing representative embodiments, the specification may have presented the methods and/or processes as a specific sequence of steps. However, to the extent that the method or process does not depend on the specific order of steps described herein, the method or process should not be limited to the specific order of steps described. As one of ordinary skill in the art will understand, other sequence of steps are also possible. Therefore, the specific order of steps set forth in the specification should not be construed as limiting the claims. In addition, the claims for the method and/or process should not be limited to the steps for performing them in the order written, as those skilled in the art can easily understand that these orders can be changed and still maintain the spirit and scope of the embodiments of the present application Inside.

In the development of systems in the communications field, IT is becoming more and more obvious. The telecommunications management and operation systems of major mainstream equipment vendors have become mainstream through the use of microservices architecture. For example, under the Linux Foundation, the industry’s mainstream operators and equipment vendors work together. Participation in management and orchestration (MANO, management and orchestration) system: Open Network Automation Platform (ONAP, The Open Network Automation Platform) has adopted a micro-service architecture from the beginning, MSB is its HTTP gateway, located in the core part of the system.

The 5G core network confirmed by 3GPP uses a service-based architecture (SBA) as the unified infrastructure, and the interface is recommended to be based on HTTP/2 REST. It consists of six major parts: control plane services, user plane services, service framework, data services, service management and orchestration, and other parts. The control plane service and the user plane service are both composed of multiple services. When calling the control plane service and the user plane service, the specific request needs to be forwarded through the HTTP gateway.

The HTTP gateway occupies an absolutely important position in the Open API (OpenAPI) system. It is the core component of API governance. When the API (Application Programming Interface) is exposed to the outside as a capability, it needs to be authenticated by the HTTP gateway , Authentication and current limiting and other requirements, and requires extremely high flexibility.

The clouding trend of various systems is becoming more and more obvious, and security problems are becoming more and more prominent. As the first barrier of the security system, the HTTP gateway needs to deal with sudden security problems.

In the next-generation microservices architecture, the service grid as a cloud facility will greatly simplify the development of microservices. At the same time, the service grid technology also requires the gateway to cooperate with the service grid, according to the operational needs of microservices, according to the relevant rules issued To adjust the behavior of the gateway.

To this end, an exemplary embodiment of the present invention provides a system for implementing a gateway service. As shown in FIG. 1, it includes a gateway service control device 1 and a gateway 2, which is an HTTP gateway.

The gateway service control device 1 includes a model designer 11 and a service delivery interface 12, and the gateway service control device 1 may be any computer equipment, such as a server, a PC, or the like. The gateway service control device 1 and the gateway 2 may be connected through a network.

The model designer 11 is configured to generate a gateway business model according to the input instruction. The model designer provides the design function of the gateway business model. In the model designer, you can visualize the steps and elements required by the gateway business, and drag and drop in the model designer to form a complete pipeline for processing the gateway business. Among related elements, specific matching rules and execution actions can be configured, and complex gateway services can be realized.

In an exemplary embodiment of the present invention, the model designer 11 includes:

The user interface unit is set to display an operation interface and receive user input commands;

The model building unit is set to select the constituent elements of the gateway business model from the optional elements according to the input instructions, connect the constituent elements to a pipeline for processing gateway services, and set the attributes of the constituent elements to implement gateway business processing logic.

The model generating unit is configured to generate the gateway business model according to the attributes of the pipeline and the constituent elements.

In one example, the user interface unit may display a visual operation interface including an element selection area and a model design area, and determine a user's input instruction according to the user operation. When the model building unit detects that the optional element in the element selection area is dragged into the model design area, the dragged optional element is recorded as a constituent element of the gateway business model. The optional element may include at least one of the following: a start link, an end link, an execution link, a judgment jump link, and an existing business model. In this example, the existing business model is used as an element, which means that the designed gateway business process can be used as a sub-process of the newly designed business process. By combining sub-processes, a more complex process can be formed, so that the process can be passed Reuse reduces the investment of personnel and time.

In an exemplary embodiment of the present invention, the above pipeline includes one or more branches, each branch has one or more execution links, and each link may include one or more second instructions. The second instructions use a high-level language such as DSL description. Multiple second instructions with similar functions (such as instructions for performing message processing) can be designed in one link. In one example, the link includes at least one of the following information: service identifier, link identifier, entry link identifier, priority, instruction identifier, matching rule, and execution action. Among them, the matching rule of the entry link is used to determine whether the received message matches the pipeline where the entry link is located; the priority of the entry link is used to determine the order of matching the pipeline; the execution action is used to determine the processing performed on the message , Which includes the action of jumping to the next link or instruction (jump action is a type of execution action). The information in the above links can be generated according to the link to which the constituent element belongs, the attribute set for the constituent element, and the connection relationship of the links in the pipeline.

In an exemplary embodiment of the present invention, the gateway business model is based on a domain-specific language (DSL) description for HTTP operations. DSL refers to a computer language focused on an application domain, also known as a domain-specific language. Using DSL, the general operation and maintenance personnel can design the model. At this time, the second instruction in the gateway service model may also be called a DSL instruction. The DSL instruction includes components such as action primitives, parameters, context variables, operators, and logic processors. Examples of action primitives and corresponding expressions are as follows:

URL rewriting: rewrite<URL>

header information modification: header add/modify/remove<property><value>

Body information modification: body add/modify/remove<xpath><content>

Request redirection: redirect<url>

Entry jump: jump<table-entry-id>

Reject the request: refuse

Request forwarding: forward

Save state: save<key><value>

Loading status: load<key>

Increase count: calc<key><count>

Read count: read<key>

The gateway business model is described in DSL or other high-level languages, and cannot be directly executed by the gateway. It needs to be converted into the first instruction executable by the gateway before it can be issued to the flow table library to take effect, thereby achieving the goal of gateway business. In the example shown in FIG. 1, the gateway service control device 1 directly issues the gateway service model to the gateway 2, and the service control plane 22 in the gateway 2 completes the instruction conversion. At this time, the service delivery interface 12 is configured to deliver the gateway service model to the gateway 2. In another example, after the instruction conversion is completed in the gateway service control device 1, it is issued to the gateway 2. At this time, the service delivery interface 12 is configured to parse the gateway service model and convert it into a first instruction executable by the gateway, and then deliver the first instruction to the gateway.

In one example, the model designer 11 itself may have persistent storage to save the completed gateway business model. The model designer 11 may also be provided with a verification function, and the entire gateway business model will be verified during storage.

In an exemplary embodiment of the present invention, as shown in FIG. 1, the gateway 2 includes a gateway control plane 21, an instruction executor 22, a request parser 23, a request dispatcher 24, a response parser 25, and a response feedbacker 26, among them:

The gateway control plane 21 provides an interactive interface between the gateway and the gateway service control device, and is configured to obtain multiple first instructions for implementing the gateway service and issue them to the instruction executor 22, wherein the first instructions are based on the gateway business model get.

In an exemplary embodiment of the present invention, the gateway business model is generated using the gateway business model generation method described in any of the embodiments of the present invention.

In the embodiment shown in FIG. 1, the conversion of instructions is implemented in the gateway. The gateway control plane 21 receives the gateway business model issued by the gateway business control device 1, parses the gateway business model and converts it into a plurality of the first instructions, and then issues them to the instruction executor 22. Before parsing the gateway service model, the gateway control plane 21 can also check the delivered gateway service model, such as a CRC check. If the check fails, the delivery is rejected, and the gateway service control device can be requested to reissue. In another exemplary embodiment of the present invention, the gateway service control device 2 completes the instruction conversion function and then issues it. At this time, the gateway control plane 21 may be configured to receive the first instruction issued by the gateway service control device 1 and directly issue it to the instruction executor 22. After the gateway control plane 21 delivers successfully, it can return a successfully delivered response message to the gateway service control device.

The instruction executor 22 is configured to process received messages (such as HTTP request messages and HTTP response messages) according to the first instruction issued. The instruction executor 22 may save the issued first instruction as an entry in the instruction flow table library, and the first instruction may also be called a flow table instruction. The logical structure of the first instruction for message processing is a pipeline. This pipeline includes one or more branches, each branch has one or more execution links, and each execution link can include one or more first instructions, such as Figure 2 shows. After the gateway 2 receives a message, the message is processed step by step in the instruction executor 22 according to the pipeline, and each instruction in the pipeline runs in a "matching condition, execute action" manner to realize the pipeline of the message deal with.

In an exemplary embodiment of the present invention, a plurality of the first instructions form a pipeline for implementing gateway service processing, and the first instructions include at least one of the following information: instruction identifier, priority, matching rule, and execution action ; Wherein, the matching rule of the first instruction in the pipeline is used to determine whether the received message matches the pipeline; the priority of the first instruction is used to determine the order in which the pipeline is matched; The execution action is used to determine the processing performed on the message, including the action of jumping to the next instruction. Of course, the last instruction does not need to execute the jump to the next instruction. The instruction identifier can be a number sequence, and the order of the instructions can be determined according to the number.

The request parser 23 is configured to parse the received request message and send it to the command executor 22;

The request dispatcher 24 is configured to deliver the request message processed by the instruction executor 22 to the back-end service;

The response parser 25 is configured to parse the received response message and send it to the command executor 22;

The response feedback unit 26 is configured to return the response message processed by the instruction executor 22 to the client.

In the present application, the gateway service control device 1 may be any computer device that can perform the generation and delivery processing of the gateway service model. The gateway service control device 1 may directly deliver the gateway service information to the gateway 2 or indirectly. In the case of indirect delivery, the function of instruction conversion can also be realized by the intermediate device.

The above embodiment of the present invention implements a system for implementing a gateway service. The gateway service uses a model-driven design, which can respond to different business needs and quickly achieve business goals. The operation and maintenance personnel can develop new services without the need for different services. Different plug-ins for business development.

An exemplary embodiment of the present invention also provides a gateway service implementation method, where the gateway service is an HTTP gateway service. The implementation method includes the design and delivery processing of the gateway service model performed by the gateway service control device at the design stage, and the processing of the message performed by the gateway at the operation stage. Among them, the processing of messages is divided into: processing of request messages and processing of response messages.

The method executed on the gateway service control device side is shown in FIG. 3, and includes: step 110, generating a gateway service model according to the input instruction; and, step 120, delivering gateway service information to the gateway according to the generated gateway service model, to Perform gateway service processing on the gateway.

In an exemplary embodiment of the present invention, the generating the gateway business model according to the input instruction includes:

Display the operation interface and receive input commands;

According to the input instruction, select the constituent elements of the gateway business model from the optional elements, connect the constituent elements into a pipeline for processing gateway services and set the attributes of the constituent elements to implement the gateway business processing logic;

The gateway business model is generated according to the attributes of the pipeline and the constituent elements.

In an exemplary embodiment of the present invention, the gateway service model is implemented in a gateway service specific language. For example, a DSL description for HTTP operations can be used to complete the design of different gateway services.

In an example, an operation interface provided by the gateway service control device is a visual operation interface including an "element selection area" and a "model design area". As shown in FIG. 4, the element selection area is located on the left side of the operation interface, and the designer You can choose to build the model in the "element selection area". In addition to the basic elements (such as the start link, the end link, the execution link, and the judgment jump), the elements in the "element selection area" can also contain the existing business model that has been designed. Business model. This means that when designing a gateway business model, the designed business model can be saved as a link (that is, a sub-process) nested in a more complex gateway business pipeline (also a business process) as one of them Processing link. In this way, business models can be shared and reused, and the development of more complex business models can be completed, which can greatly save the time required for design.

In the example shown in Figure 4, the model design area is located in the middle of the operation interface. The right side of the operation interface also includes a model attribute area for filling in the attributes of the constituent elements. "Model design area" is the visual display area of the model. Designers can construct the model by dragging the elements of "element selection area" to "model design area". When detecting that the optional element in the element selection area is dragged into the model design area, the gateway service control device records the dragged optional element as a component element of the gateway service model. When the designer selects a specific element in the "Model Design Area", he can set the attributes of the element in the "Model Attribute Area", such as matching conditions and execution actions. The model designer can give intelligent prompts according to the operation primitives and context to help the operation and maintenance personnel to design, and does not require special developers to participate in it; at the same time, it can also provide "save" and "send" buttons, you can The designed model is saved, and the designed model can also be delivered to the HTTP gateway.

In an exemplary embodiment of the present invention, the generated gateway business model is a pipeline including multiple links in the logical structure. A link may include a second instruction (such as a DSL instruction) or multiple second instructions that are sequentially executed on the pipeline. For example, multiple second instructions that perform similar functions (such as multiple second instructions that perform message processing) can be combined into one link to simplify the pipeline structure and facilitate model design. The link includes at least one of the following information: service identification, link identification, entry link identification, priority, instruction identification, matching rules, and execution actions; wherein, the entry link matching rules are used to determine whether the received message is The pipeline where the entry link is matched; the priority of the entry link is used to determine the order in which the pipeline is matched; the execution action is used to determine the processing performed on the message, including the action of jumping to the next link or instruction. The matching rules and execution actions of the second instruction can be determined according to the links to which the constituent elements of the pipeline belong, the connection relationships of the various links, and the attributes of the constituent elements.

In an exemplary embodiment of the present invention, when delivering the gateway service information to the gateway according to the generated gateway business model, the gateway business model is directly delivered to the gateway. For example, by clicking the "Send" button in the model designer, the gateway business model is delivered to the HTTP gateway. In another exemplary embodiment of the present invention, the gateway business model is first parsed and converted into a first instruction executable by the gateway, and then the first instruction is issued to the gateway.

The method executed on the gateway side as shown in FIG. 5 includes: step 210, the gateway obtains a plurality of first instructions for implementing the gateway service, wherein the first instruction is obtained based on the gateway service model; and, step 220, The gateway processes the received message according to the first instruction. Wherein, the gateway business model may be generated using the method for generating a gateway business model according to any embodiment of the present invention.

In an exemplary embodiment of the present invention, the gateway acquiring a plurality of first instructions for implementing the gateway service includes: the gateway receives the gateway service model, parses the gateway service model and converts it into multiple The first instruction. Before parsing the gateway business model, the gateway business model can also be verified, such as a CRC check. If the check fails, it is rejected.

In an exemplary embodiment of the present invention, the processing of the request message (such as the HTTP request message) by the gateway includes:

Step 1: The gateway parses the received request message sent by the client to obtain the content of the request message, which includes information such as uniform resource locator (URL), header (header), and body (body).

Step 2: The gateway determines whether there is a matching pipeline according to the relevant characteristics in the request message (such as IP address, login_token in cookie, etc.). If not, the request message is rejected and the process ends; if so, continue to the next step .

In this step, if the relevant feature in the request message meets the matching condition of the entry link of a pipeline, the pipeline is the pipeline that matches the request message.

Step 3: Starting from the matched first instruction of the pipeline, sequentially execute all the first instructions on the pipeline to process the request message, and deliver the processed request message to the back-end service.

In an exemplary embodiment of the present invention, the processing of the response message (such as the HTTP response message) by the gateway includes:

Step 1: The gateway parses the received response message returned by the back-end service to obtain the content of the response message, such as header and body information;

Step 2: The gateway determines whether there is a matching pipeline according to the relevant characteristics of the response message. If not, it rejects the request message and the process ends; if it does, it continues to the next step.

In this step, if the relevant features in the response message meet the matching conditions of the first instruction (corresponding to the entry link) of a pipeline, the pipeline is the pipeline that matches the response message.

Step 3: Starting from the matched first instruction of the pipeline, execute all the first instructions of the pipeline in sequence to process the response message, and return the processed response message to the client that sends the corresponding request message .

In an exemplary embodiment of the present invention, the HTTP gateway needs to carry multiple different gateway services at the same time, so the processing flow of multiple services can be run simultaneously in the instruction executor. On the first processing link of the pipeline, HTTP The messages are numbered, and at the same time, the HTTP request/response is sent to different pipelines for processing according to the matching characteristics of the HTTP message and the pipeline, and the corresponding number is used to track the corresponding processing process.

In an exemplary embodiment of the present invention, when the first instruction is executed, it is a mode for explaining execution. When the number of executions reaches a certain threshold, instant conversion technology can be used to convert the first instruction into machine code such as native code again. Implementation to improve the processing efficiency of the entire process.

In an exemplary embodiment of the present invention, the logical structure of the service gateway model is one or more pipelines. For example, different pipelines can be used to process different types of packets. Each pipeline may include one or more branches. There can be multiple links on a pipeline, and each link can contain the following information:

Business identification: used to identify the business targeted by this session.

Link ID (ID): The link number can be used as the link ID.

Entry link identification: A value of "Y" indicates that the link is an entry link, and the matching rules of the entry link are used to determine whether the pipeline matches the received message.

Priority: Set the priority when this link is an entry link. The smaller the number in this field, the higher the priority. When the priority is the same, it can be defined as the link ID is larger and the priority is higher, or vice versa. When the gateway receives the message and determines whether the message matches the set pipeline according to the characteristics of the message, it starts from the high-priority entry link (also known as the entry), according to the order from high to low Match in order.

Matching rule: It can also be called a matching condition, which is used to determine whether the request message meets certain conditions, so as to control the processing flow of the pipeline. The characteristics of the matching operation can be any part of the message, such as httpURL, http header and http body etc.

Execution action: the processing performed on the message, such as: modifying the HTTP header, rewriting the URL, increasing the counter, forwarding the HTTP request to the back-end service, rejecting the HTTP request, and skipping to the next link or instruction.

The above matching rules and execution actions can be described (or written) in a specific DSL language at the time of design, and converted by the gateway control plane into the content of the first instruction executable by the gateway.

In an exemplary embodiment of the present invention, a link is an instruction, and a link ID is also an instruction ID. In this case, a link includes the above service ID, link ID, entry link ID, priority, matching rules, and execution actions. , There is no need to set the instruction ID separately.

In another exemplary embodiment of the present invention, a link may include multiple instructions. In this case, each instruction has its own matching rules and execution actions. It is also necessary to set an instruction identifier for each instruction to distinguish different instructions . The business name, link ID, entrance link ID, etc. can be shared by multiple instructions in the same link.

The following table shows the three links in a pipeline:

The structure of the link in the pipeline in this embodiment can be applied to any of the above embodiments of the invention.

In an exemplary embodiment of the present invention, a plurality of the first instructions form a pipeline for processing gateway services, and the first instructions may include at least one of the following information:

The instruction identifier, which may include both the link number and the instruction number in the first instruction;

priority;

Matching rules

Perform an action

Among them, the matching rule of the first instruction in the pipeline is used to determine whether the received message matches the pipeline; the priority of the first instruction is used to determine the order of matching the pipeline; the execution The action is used to determine the processing performed on the message, one of which is the action to jump to the next instruction. In addition, for the instructions that do not determine the jump but only process the message, the matching rule can be set to a default value such as TRUE, and the default matching is successful. The order of the instructions in the pipeline can be determined according to the instruction ID of the sequential number.

As the entrance of the service system, the HTTP gateway needs to develop various business logics. Traditionally, it is realized by developing and deploying different business plug-ins and deploying in the HTTP gateway. After adopting the solution of the embodiment of the present invention, it is not written The way of plug-in can be realized by the operation and maintenance personnel using a unified process and model.

The present application will be described below through several embodiments of specific gateway services.

Example one

An enterprise microservice architecture system needs to use basic (access) authentication for all HTTP requests from outside.

Implementation environment description: External HTTP requests will pass through the HTTP gateway and then forwarded to the back-end service. However, the current HTTP gateway does not have the capability of security control, and operation and maintenance personnel need to quickly increase the security authentication function for external requests. The authentication uses basic For authentication, obtain the user name and password through the Authorization attribute in the Cookie in the HTTP request, and then verify the password. Taking the enterprise using the gateway service implementation system of the embodiment of the present invention as an example, the embodiment of the present invention will be described in detail:

Model design:

The operation and maintenance personnel use the model designer to design the certified gateway business model and the completed model.

The operation and maintenance personnel click the release button of the model designer to deliver the model to the gateway control plane in the gateway.

The gateway control analyzes the gateway business model, converts it into an executable instruction and sends it to the instruction executor. The corresponding instruction is shown in Figure 6B.

Processing of requests and responses: When the HTTP gateway receives the request message and the response message sent by the HTTP client, it will execute the corresponding instructions of the pipeline, and its processing logic is shown in FIG. 6A.

Step 501: The HTTP gateway listens to the HTTP request message on port 80.

Step 502: In the cookie of the HTTP request message, there is no login_token attribute, and this embodiment indicates that the message is a request message.

Step 504: Analyze the Authorization field through the BASE64 algorithm to obtain the user name and password.

Step 505: Use the user name to obtain the user's password from the cache.

Step 506: Compare the password obtained in the cache with the password obtained in step 504, assuming that the two are the same.

Step 507: Forward the HTTP request message to the back-end processor.

Step 508: Receive the HTTP response message returned by the back-end processor after completing the processing.

Step 509: Set the login_token attribute in the HTTP response cookie.

Step 510: Return the HTTP response to the HTTP client.

Example 2

In this embodiment, an operator's API development platform needs to limit the access frequency of non-logged-in users, and its access quota is 10 times per minute.

Implementation environment description: The operator’s API platform uses the RESTFUL interface to provide external API services. In order to ensure the core user’s QoS and limit the access frequency of non-logged-in users, it is necessary to determine whether there is a login_token attribute in the cookie and a login_token attribute. If it is considered as a logged-in user, if it is not, it is considered as a non-logged-in user, and then record the number of visits. Taking the operator using the device as an example, the present invention will be described in detail:

Model design:

The operation and maintenance personnel use the model designer to design the current-limiting business model and the completed model.

The operation and maintenance personnel click the release button of the model designer to discover the model to the gateway control plane in the gateway.

The gateway control analyzes the model, generates executable instructions and delivers them to the instruction executor. The corresponding instructions are shown in Figure 7B.

Request processing: After receiving the request message, all the instructions of the pipeline will be executed, and the processing logic is shown in Figure 7A:

Step 701: The HTTP server listens to the HTTP request message on port 80.

Step 702: In the cookie of the HTTP request message, if there is no login_token attribute, go to step 703, and if there is the login_token attribute, go to step 708.

Step 703: Obtain the original IP address of the request from the HTTP request message.

Step 704: Obtain the number of visited times in the current statistical period (within one minute) from the cache according to the obtained IP address.

Step 705: If the number of accessed times has reached 10 times, go to step 706, and if not, go to step 707.

Step 706, the forwarding of the access request is denied, and the end

Step 707: The current count in the cache is increased by 1;

Step 708, forward the HTTP request message to the backend processor, and end.

Example Three

A government department needs to upgrade its application in the public cloud, which needs to be completed by using a canary upgrade.

Implementation environment description: A government department needs to upgrade its applications in the public cloud. It needs to maintain the coexistence of new and old applications for a period of time, import a small amount of traffic into the new applications, observe whether the new applications are used normally, and discover new applications. Direct traffic back to the old application as soon as it is abnormal. Take the device used by the government department as an example to describe the invention in detail:

Model design:

The operation and maintenance personnel use the model designer to design the business model upgraded by Canary, and design the completed model.

The operation and maintenance personnel click the release button of the model designer to discover the model to the gateway control plane of the gateway.

Facing the model analysis, the gateway control generates executable instructions and delivers them to the instruction executor. The corresponding instructions are shown in Figure 8B.

Request processing: After receiving the request message, it will execute all the instructions of the pipeline. The processing logic can be seen in FIG. 8A.

Step 901: The HTTP server listens to the HTTP request message on port 80.

Step 902: Obtain the original IP address of the request message from the HTTP request.

Step 903: Calculate the hash (HASH) by the original IP address, then find the modulus with 100.

Step 904: determine whether the modulus is 1, go to step 906, otherwise go to step 905.

Step 905: Forward the HTTP request message to the old version of the service and end.

Step 906: Forward the HTTP request message to the new version of the service and end.

Through the above processing, 1% of the messages can be forwarded to the new version of the service, and other messages still use the old version of the service.

Example 4

An e-commerce company needs to launch a spike service. The first 100 requests can be purchased, and the subsequent request returns a spike response.

Implementation environment description: An e-commerce needs to launch a spike service. The HTTP gateway uses an access counter to count. When the count is less than 100, the order is normally placed and the counter is increased by one. Otherwise, the request returns a response to the spike failure. Take this device as an example to describe this invention in detail:

Model design:

The operation and maintenance personnel use the model designer to design the spike business model, and the designed model is shown in FIG. 9A.

The operation and maintenance personnel click the release button of the model designer to discover the model to the gateway control plane in the gateway.

Facing the model analysis, the gateway control generates executable instructions and delivers them to the instruction executor. The relevant instructions are shown in Figure 9B.

Request and response processing: After receiving the request message and the response message, all the instructions of the pipeline will be executed. The processing logic can be seen in FIG. 9A.

Step 1101: The HTTP server listens to the HTTP request message on port 80.

Step 1102: Obtain the current request count from the cache.

Step 1103: determine whether the request count reaches 100, reach forward to step 1104, and fail to forward to step 1106.

Step 1104: The request count in the cache is increased by one.

Step 1105: Go to the HTTP request to the service server and end.

Step 1106: Return a response to the spike failure to the HTTP client, and the process ends.

Example 5

The gateway service to be implemented in this embodiment is: the access frequency of users who are authenticated is controlled at 1000 times per second, and the overall access frequency of non-identified users is controlled at 100 times per second. Identity can be used in this HTTP gateway service The combination of the authentication model and the access limitation model is completed.

This embodiment mainly explains the nesting in model design. Assuming that a first gateway business model for implementing the current limiting control process and a second gateway business model for implementing the authorization control process have been designed, when designing the third gateway business model of this embodiment, you can The first gateway business model and the second gateway business model are embedded as a link in the third gateway business model, that is, the permission control sub-process and the current limit control sub-process are embedded into the overall business process, as shown in Figure 10 Processing logic.

An exemplary embodiment of the present invention further provides a gateway service control device, as shown in FIG. 11, including a processor 50, a memory 60, and a computer stored on the memory 60 and capable of running on the processor 50 Program, when the processor 50 executes the calculation program, the processing of the method executed by the gateway service control device side according to any of the above embodiments of the present invention is implemented.

An exemplary embodiment of the present invention also provides a gateway. Referring also to FIG. 11, it includes a processor 50, a memory 60, and a computer program stored on the memory 60 and executable on the processor 50. When the processor 50 executes the calculation program, it implements the processing of the method performed by the gateway side according to any one of the above embodiments of the present invention.

An exemplary embodiment of the present invention also provides a computer-readable storage medium on which a computer program is stored, which when executed by a processor implements the processing of the method described in any of the above embodiments of the present invention.

The technical solutions of the above embodiments of the present invention have at least one beneficial effect as follows:

Using model-driven gateways, there is no need to develop specific plug-ins for the business, completing different services that originally required multiple business plug-ins to complete.

The DSL language is used to build the gateway business model, and the model is converted into executable instructions and then issued to the instruction executor, so that the gateway business development can be completed based on high-level abstractions.

Complete the design of the gateway service through the gateway model designer and improve the development speed of the gateway service.

Those of ordinary skill in the art may understand that all or some of the steps, systems, and functional modules/units in the method disclosed above may be implemented as software, firmware, hardware, and appropriate combinations thereof. In a hardware implementation, the division between the functional modules/units mentioned in the above description does not necessarily correspond to the division of physical components; for example, one physical component may have multiple functions, or one function or step may be composed of several physical The components are executed in cooperation. Some physical components or all physical components may be implemented as software executed by a processor, such as a central processing unit, digital signal processor, or microprocessor, or as hardware, or as an integrated circuit, such as an application specific integrated circuit . Such software may be distributed on computer-readable media, which may include computer storage media (or non-transitory media) and communication media (or transitory media). As is well known to those of ordinary skill in the art, the term computer storage medium includes both volatile and nonvolatile implemented in any method or technology for storing information such as computer readable instructions, data structures, program modules, or other data Sex, removable and non-removable media. Computer storage media include but are not limited to RAM, ROM, EEPROM, flash memory or other memory technologies, CD-ROM, digital versatile disk (DVD) or other optical disk storage, magnetic cartridges, magnetic tape, magnetic disk storage or other magnetic storage devices, or may Any other medium used to store desired information and accessible by a computer. In addition, it is well known to those of ordinary skill in the art that the communication medium generally contains computer readable instructions, data structures, program modules, or other data in a modulated data signal such as a carrier wave or other transmission mechanism, and may include any information delivery medium .

Industrial applicability

The embodiments of the present invention can respond to different business needs and quickly realize business goals, and the operation and maintenance personnel can develop new services, and no longer need to develop different plug-ins according to different services.

Claims (22)

1. A method for implementing gateway service, including:

   Generate a gateway business model based on input instructions;

   Deliver gateway service information to the gateway according to the generated gateway service model to perform gateway service processing on the gateway.
2. The method of claim 1, wherein:

   The gateway business model uses a domain-specific language DSL description for the hypertext transfer protocol HTTP operation.
3. The method according to claim 1 or 2, wherein:

   The generating the gateway business model according to the input instruction includes:

   Display the operation interface and receive input commands;

   According to the input instruction, select the constituent elements of the gateway business model from the optional elements, connect the constituent elements into a pipeline for processing gateway services and set the attributes of the constituent elements to implement the gateway business processing logic;

   The gateway business model is generated according to the attributes of the pipeline and the constituent elements.
4. The method of claim 3, wherein:

   The operation interface is a visual operation interface including an element selection area and a model design area;

   The selection of the constituent elements of the gateway business model from the selectable elements includes: when it is detected that the selectable element in the element selection area is dragged into the model design area, the selectable element to be dragged The element record is a component element of the gateway business model.
5. The method of claim 3, wherein:

   The optional elements include at least one of the following: a start link, an end link, an execution link, a judgment jump link, and an existing business model.
6. The method of claim 5, wherein:

   The gateway business model includes multiple links that constitute the pipeline, each link includes one or more second instructions, and the link includes at least one of the following information:

   Business identification

   Link identification;

   Entrance link identification;

   priority;

   Instruction mark;

   Matching rules

   Perform an action

   Among them, the matching rule of the entry link is used to determine whether the received message matches the pipeline where the entry link is located; the priority of the entry link is used to determine the order of matching the pipeline; the execution action is used to determine the processing performed on the message , Which includes actions to jump to the next link or instruction.
7. The method of claim 3, wherein:

   The delivery of gateway service information to the gateway includes:

   Deliver the gateway business model to the gateway; or

   Analyze and convert the gateway service model into a first instruction executable by the gateway, and issue the first instruction to the gateway.
8. A method for implementing gateway service includes:

   The gateway obtains multiple first instructions for implementing the gateway service, wherein the first instructions are obtained based on the gateway service model;

   The gateway processes the received message according to the first instruction.
9. The method of claim 8, wherein:

   The gateway service model is generated by the method according to any one of claims 1 to 6.
10. The method of claim 8, wherein:

    The gateway acquiring multiple first instructions for implementing the gateway service includes:

    The gateway receives multiple first instructions for implementing gateway services; or

    The gateway receives the gateway business model, parses the gateway business model and converts it into multiple first instructions.
11. The method of claim 8, wherein:

    A plurality of the first instructions form a pipeline for processing gateway services, and the first instructions include at least one of the following information:

    Instruction mark;

    priority;

    Matching rules

    Perform an action

    Among them, the matching rule of the first instruction in the pipeline is used to determine whether the received message matches the pipeline; the priority of the first instruction is used to determine the sequence of matching the pipeline; the execution The action is used to determine the processing performed on the message, including the action of jumping to the next instruction.
12. The method according to any one of claims 8 to 11, wherein:

    The gateway processing the received message according to the first instruction includes:

    The gateway parses the received message sent by the client to obtain the content of the message;

    The gateway judges whether there is a matching pipeline according to the relevant features in the message, if not, it rejects the message and ends; if so, continues to the next step;

    Starting from the first instruction of the matched pipeline, all first instructions on the pipeline are executed in sequence to process the message, and the processed message is delivered to the back-end service or returned to the client.
13. A gateway service control device, including a model designer and a service delivery interface, in which:

    The model designer is configured to generate a gateway business model according to the input instruction;

    The service delivery interface is configured to deliver gateway service information to the gateway according to the generated gateway service model.
14. The apparatus of claim 13, wherein:

    The model designer includes:

    The user interface unit is set to display an operation interface and receive user input commands;

    The model building unit is set to select the constituent elements of the gateway business model from the optional elements according to the input instructions, connect the constituent elements as a pipeline for processing gateway services, and set the attributes of the constituent elements to implement gateway business processing logic;

    The model generating unit is configured to generate the gateway business model according to the attributes of the pipeline and the constituent elements.
15. The apparatus of claim 14, wherein:

    The optional elements include at least one of the following: start link, end link, execution link, judgment jump link, and existing business model;

    The gateway business model includes multiple links that constitute the pipeline, each link includes one or more second instructions, and the link includes at least one of the following information:

    Business identification

    Link identification;

    Entrance link identification;

    priority;

    Instruction mark;

    Matching rules

    Perform an action

    Among them, the matching rule of the entry link is used to determine whether the received message matches the pipeline where the entry link is located; the priority of the entry link is used to determine the order of matching the pipeline; the execution action is used to determine the processing performed on the message , Which includes actions to jump to the next link or instruction.
16. The device according to claim 13 or 14 or 15, wherein:

    The service delivery interface delivers gateway service information to the gateway according to the generated gateway service model, including: the service delivery interface delivers the gateway service model to the gateway, or the service delivery interface The gateway business model is parsed and converted into a first instruction executable by the gateway, and the first instruction is issued to the gateway.
17. A gateway, including a gateway control plane and an instruction executor, wherein:

    The gateway control plane is configured to obtain a plurality of first instructions for implementing gateway services and issue them to the instruction executor, wherein the first instructions are obtained based on the gateway business model;

    The instruction executor is configured to process the received message according to the first instruction issued.
18. The gateway of claim 17, wherein:

    The gateway control plane acquiring multiple first instructions for implementing gateway services includes: the gateway receiving multiple first instructions for implementing gateway services; or, the gateway receiving the gateway service model, The gateway business model is parsed and converted into multiple first instructions.
19. The gateway according to claim 17 or 18, wherein:

    A plurality of the first instructions form a pipeline for processing gateway services, and the first instructions include at least one of the following information:

    Instruction mark;

    priority;

    Matching rules

    Perform an action

    Among them, the matching rule of the first instruction in the pipeline is used to determine whether the received message matches the pipeline; the priority of the first instruction is used to determine the sequence of matching the pipeline; the execution The action is used to determine the processing performed on the message, including the action of jumping to the next instruction.
20. A gateway service control device, including a memory, a processor, and a computer program stored on the memory and capable of running on the processor, and when the processor executes the computer program, any one of claims 1 to 7 is implemented The method described.
21. A gateway, including a memory, a processor, and a computer program stored on the memory and executable on the processor, when the processor executes the computer program, any one of claims 8 to 12 is implemented Method handling.
22. A computer-readable storage medium on which a computer program is stored, which when executed by a processor implements the processing of the method according to any one of claims 1 to 12.

Images