WO2021217869A1 - 一种传递客户端真实ip地址的方法及系统 - Google Patents

一种传递客户端真实ip地址的方法及系统 Download PDF

Info

Publication number
WO2021217869A1
WO2021217869A1 PCT/CN2020/099529 CN2020099529W WO2021217869A1 WO 2021217869 A1 WO2021217869 A1 WO 2021217869A1 CN 2020099529 W CN2020099529 W CN 2020099529W WO 2021217869 A1 WO2021217869 A1 WO 2021217869A1
Authority
WO
WIPO (PCT)
Prior art keywords
packet
client
address
proxy
proxy server
Prior art date
Application number
PCT/CN2020/099529
Other languages
English (en)
French (fr)
Inventor
覃华伟
Original Assignee
平安科技（深圳）有限公司
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by 平安科技（深圳）有限公司 filed Critical 平安科技（深圳）有限公司
Publication of WO2021217869A1 publication Critical patent/WO2021217869A1/zh

Links

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L61/00—Network arrangements, protocols or services for addressing or naming
    • H04L61/09—Mapping addresses
    • H04L61/25—Mapping addresses of the same type
    • H04L61/2503—Translation of Internet protocol [IP] addresses
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L67/00—Network arrangements or protocols for supporting network services or applications
    • H04L67/14—Session management
    • H04L67/141—Setup of application sessions
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L67/00—Network arrangements or protocols for supporting network services or applications
    • H04L67/50—Network services
    • H04L67/56—Provisioning of proxy services
    • H04L67/562—Brokering proxy services
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L69/00—Network arrangements, protocols or services independent of the application payload and not provided for in the other groups of this subclass
    • H04L69/22—Parsing or analysis of headers
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L2101/00—Indexing scheme associated with group H04L61/00
    • H04L2101/60—Types of network addresses
    • H04L2101/618—Details of network addresses
    • H04L2101/659—Internet protocol version 6 [IPv6] addresses

Definitions

  • This application relates to the field of computer technology, and in particular to a method and system for transmitting the real IP address of a client.
  • a method for transmitting the real IP address of a client is applied to establish a communication connection between the client and a back-end server using a proxy server, the method includes: the client sends a communication request to the proxy server The communication request carries a client IP packet, and the client IP packet includes the client's real IP address; the proxy server responds to the communication request and performs IP packet encapsulation on the client IP packet to obtain the The target proxy IP packet corresponding to the client IP packet, the target proxy IP packet including the client real IP address; the proxy server based on the communication connection with the back-end server, the The target agent IP packet is sent to the back-end server; the back-end server parses the target agent IP packet to obtain the client real IP address corresponding to the target agent IP packet.
  • this application also proposes a system for transmitting the real IP address of a client.
  • the system includes: a client, a proxy server, and a back-end server; the client is used to send a communication request to the proxy server ,
  • the communication request carries a client IP packet, the client IP packet includes the client's real IP address;
  • the proxy server is used to establish a communication connection between the client and the back-end server, and respond to the communication Request, perform IP package encapsulation on the client IP package to obtain a target proxy IP package corresponding to the client IP package, the target proxy IP package including the client’s real IP address, based on the
  • the communication connection between the back-end servers is to send the target agent IP packet to the back-end server;
  • the back-end server is used to parse the target agent IP packet to obtain a connection with the target agent The real IP address of the client corresponding to the end IP packet.
  • the present application also provides a computer device that includes a processor, a memory, and a computer program stored on the memory and executable by the processor, wherein the computer program is When executed by the processor, the steps of the above method are realized.
  • the computer device may be a client device (such as a terminal), a proxy server, or a back-end server, and may implement the steps performed by the computer device in the foregoing method.
  • the present application also provides a computer-readable storage medium on which a computer program is stored, and when the computer program is executed by a processor, the steps of the above-mentioned method are implemented.
  • This application realizes that the back-end server can obtain the real IP address of the client when the proxy server is used to establish a communication connection.
  • Fig. 1 is a flowchart of a method for transmitting a client's real IP address in an embodiment.
  • Fig. 2 is a flow chart of the method of transmitting the real IP address of the client in Fig. 1 to encapsulate the IP packet of the target agent.
  • Fig. 3 is a flowchart of IPv6 packet header encapsulation in the method of transmitting the real IP address of the client in Fig. 2.
  • FIG. 4 is a flowchart of the method of transmitting the real IP address of the client in FIG. 3 to obtain the IP address to be encapsulated of the client using the IPv6 protocol.
  • FIG. 5 is a flowchart of the method of transmitting the real IP address of the client in FIG. 3 to obtain the IP address to be encapsulated of the client using the IPv4 protocol.
  • Fig. 6 is a flowchart of IPv6 packet header encapsulation in the method of transmitting the client's real IP address in Fig. 2.
  • FIG. 7 is a sequence diagram of the method of transmitting the real IP address of the client in FIG. 1.
  • Fig. 8 is a structural block diagram of a system for transmitting the real IP address of a client in an embodiment.
  • Figure 9 is a block diagram of the computer equipment.
  • the technical solution of this application can be applied to the fields of artificial intelligence, big data and/or blockchain technology, and the data involved, such as real IP addresses, can be stored in a database, or can be stored in a blockchain node, such as through a blockchain Distributed storage, etc., are not limited in this application.
  • IP address The abbreviation of IP Internet Protocol, is the network layer protocol in the TCP/IP system. IP stipulates that all devices on the network must have a unique IP address.
  • IP packet refers to an IP data packet, which is a variable-length packet composed of two parts: the header and the data load.
  • IPv4 The fourth edition of the Internet Communication Protocol, which is the fourth revision in the development of the Internet Protocol.
  • IPv6 It is the abbreviation of Internet Protocol Version 6. It is the next-generation IP protocol designed by the Internet Engineering Task Force (IETF) to replace IPv4.
  • IETF Internet Engineering Task Force
  • Proxy server used to proxy network users to obtain network information. As a transfer station for network information, it is an intermediate agency between personal networks and Internet service providers, responsible for forwarding legal network information, and controlling and registering forwarding.
  • Nginx is a high-performance HTTP and reverse proxy web server, and also provides IMAP/POP3/SMTP services.
  • Reverse Proxy refers to the use of a proxy server to accept connection requests on the Internet, then forward the request to a server on the internal network, and return the result from the server to the client requesting the connection on the Internet. At this time, the proxy server acts as a server externally.
  • Client Or called the client, it refers to the program that corresponds to the server and provides local services to customers.
  • Back-end server It can be an application server for running applications, a database server for running data, or a server for running applications and running data at the same time.
  • a method for transmitting the real IP address of the client is applied to establish a communication connection between the client and the back-end server by using a proxy server, and the method includes the following steps.
  • the client sends a communication request to the proxy server, where the communication request carries a client IP packet, and the client IP packet includes a real IP address of the client.
  • the client When the client needs to access the back-end server, the client sends a communication request to the proxy server corresponding to the back-end server through the network.
  • the proxy server communicates with at least one client and at least one back-end server respectively through the network.
  • the real IP address of the client refers to an IPv6 home address
  • the header format of the client IP packet is an IPv6 packet header
  • the real IP address of the client refers to the source IP address of the IPv4 packet
  • the header format of the IP packet of the client at this time is an IPv4 packet header
  • the client IP packet is an IP packet.
  • IPv6 has a fixed home address for each mobile device (home address), the home address has nothing to do with the current location of the mobile device connected to the Internet.
  • a care-of address is used to provide the current location information of the mobile node; each time the mobile device changes its location, it must tell its home address and its care-of address.
  • Corresponding communication node In places other than the hometown address, when a mobile device transmits a data packet, it usually uses the care-of address as the source address in the IPv6 header.
  • the proxy server performs IP packet encapsulation on the client IP packet to obtain a target proxy IP packet corresponding to the client IP packet, and the target proxy IP packet includes the The real IP address of the client.
  • the proxy server After receiving the communication request sent by the client, the proxy server parses the communication request, and parses the client's real IP address from the header of the client IP packet carried in the communication request; and establishes a pending IP address for each client IP packet.
  • Process the proxy IP packet add an IPv6 packet header to each proxy IP packet to be processed; encapsulate the client's real IP address into the extended header of the IPv6 packet header added in the proxy IP packet to be processed, and get the target after the encapsulation is completed Agent IP package.
  • the target agent IP packet is an IP packet.
  • the proxy server sends the target proxy IP packet to the back-end server based on the communication connection with the back-end server.
  • the proxy server is based on the communication connection between the proxy server and the back-end server, and the proxy server sends the target proxy-end IP packet to the back-end server.
  • the communication connection between the proxy server and the back-end server may adopt the HTTP protocol.
  • the communication connection between the proxy server and the back-end server may also adopt a non-HTTP protocol.
  • non-HTTP protocols include UDP/TCP and HTTPS, which are not specifically limited in this example.
  • the proxy server uses Nginx to implement reverse proxy, which is not specifically limited in this example.
  • the proxy server adopts Nginx, because an IPv6 packet header is added to each proxy IP packet to be processed, it does not affect the original http_realip_module function of Nginx, so it can provide clients at both the IP and HTTP layers. Transmission of the real IP address of the terminal.
  • the IP layer refers to the network layer
  • the HTTP layer refers to the application layer.
  • the back-end server parses the target proxy IP packet to obtain a client real IP address corresponding to the target proxy IP packet.
  • the back-end server parses the received target agent IP packet, and obtains the client real IP address corresponding to the target agent IP packet from the IPv6 packet header of the target agent IP packet.
  • the operating system of the back-end server may be Linux, Windows, MacOS, FreeBSD, etc., and only the operating system of the back-end server needs to support a standard IPv6 protocol stack, Nginx servers can use this application to send the real IP address of the client to the back-end server through the MIPv6 option.
  • the back-end server obtains the client's real IP address corresponding to the target agent's IP packet, which can identify the authenticity of the communication request.
  • Source Determine the risk level corresponding to the real IP address of the client according to the real IP address of the client, and provide corresponding services according to the risk level corresponding to the real IP address of the client, so as to ensure the quality of service at the same time.
  • Risk control is further improved, and the public support and adaptability of the architecture that uses proxy servers to establish communication connections are further improved.
  • the client's real IP address corresponding to the target agent's IP packet is obtained through the back-end server, which can identify the true source of the communication request, and avoids dangerous communication requests from passing through the agent.
  • the method bypasses the review of financial payment, thus avoiding economic losses and information leakage caused by financial payment errors.
  • a proxy server is used to establish a communication connection between the client and the back-end server, and the real IP address of the client in the client IP packet carried in the communication request is encapsulated into the target proxy IP packet corresponding to the client IP packet , And then send the target proxy IP packet to the back-end server.
  • the back-end server obtains the client's real IP address by parsing the target proxy IP packet, so that the back-end server can obtain the client's real IP address when the proxy server is used to establish a communication connection.
  • the architecture that uses a proxy server to establish a communication connection is suitable for application scenarios that need to carry out related services based on the client's real IP address, which improves the public support and adaptability of the architecture that uses a proxy server to establish a communication connection; and the entire technology
  • the solution only needs to make changes in the proxy server, which will not greatly increase the deployment difficulty of establishing a communication connection with the proxy server.
  • the IP packet of the target agent can be obtained through the network packet capture tool, and the IP packet of the target agent can also be parsed to obtain the real IP address of the client. Therefore, this application is also very helpful for debugging.
  • the network packet capture tool includes Wireshark. There is a standard analysis of MIPv6 in it, which simplifies the deployment of an architecture that uses a proxy server to establish communication connections.
  • the IP packet encapsulation on the client IP packet to obtain the target agent IP packet corresponding to the client IP packet includes the following steps.
  • the proxy server sets up a proxy IP packet to be processed corresponding to the client IP packet according to the client IP packet.
  • the proxy server sets up a to-be-processed proxy IP packet corresponding to the client IP packet for each client IP packet.
  • proxy IP packet to be processed is an IP packet.
  • the proxy server adds an IPv6 packet header to the to-be-processed proxy-side IP packet to obtain the to-be-encapsulated proxy-side IP packet corresponding to the client IP packet.
  • the proxy server adds an IPv6 packet header to each of the proxy IP packets to be processed, and uses the proxy IP packet to be processed after the IPv6 packet header is added as the proxy IP packet to be encapsulated corresponding to the client IP packet.
  • proxy IP packet to be encapsulated is an IP packet.
  • the proxy server encapsulates the IPv6 packet header of the proxy IP packet to be encapsulated according to the client IP packet to obtain a target proxy IP packet corresponding to the client IP packet.
  • the proxy server parses the client’s real IP address from the client’s IP packet header, encapsulates the client’s real IP address into the extended header of the IPv6 packet header added to the proxy IP packet to be processed, and converts After the encapsulation is completed, the proxy IP packet to be encapsulated is used as the target proxy IP packet.
  • the proxy server encapsulates the IPv6 packet header of the proxy IP packet to be encapsulated according to the client IP packet to obtain a packet corresponding to the client IP packet
  • the target agent IP package includes the following steps.
  • the proxy server extracts an IP address from the client IP packet to obtain an IP address to be encapsulated corresponding to the client IP packet, where the IP address to be encapsulated includes the real IP address of the client, where: The real IP address of the client is stored in the blockchain.
  • the real IP address of the client can also be stored in a node of a blockchain.
  • the proxy server extracts the client real IP address from the client IP packet, and uses the client real IP address as the IP address to be encapsulated corresponding to the client IP packet.
  • the proxy server updates the extended header of the IPv6 packet header of the proxy IP packet to be encapsulated according to the IP address to be encapsulated.
  • the proxy server adds the IP address to be encapsulated to the extended header of the IPv6 packet header of the proxy IP packet to be encapsulated. It is understandable that the adding method is implemented by using the second type of routing header. Only one via address can be hidden in the second type of routing header, and the real IP address of the client is updated to the via address.
  • the proxy server uses the proxy IP packet to be encapsulated after the extension header is updated as the target proxy IP packet corresponding to the client IP packet.
  • the proxy server uses the proxy IP packet to be encapsulated with the IP address to be encapsulated as a target proxy IP packet corresponding to the client IP packet.
  • the real IP address of the client is encapsulated in the extended header of the IPv6 packet header added in the IP packet of the proxy to be processed, and the real IP address of the client is transferred, and other data of the IP packet to be processed is not Make an impact.
  • the real IP address of the client refers to the IPv6 home address.
  • the proxy server encapsulates the IPv6 packet header of the proxy IP packet to be encapsulated according to the client IP packet to obtain the target proxy IP packet corresponding to the client IP packet, including the following steps.
  • the proxy server extracts the home address from the client IP packet, obtains the IPv6 home address corresponding to the client IP packet, and uses the IPv6 home address corresponding to the client IP packet as the waiting address. Encapsulate the IP address, where the IP address to be encapsulated includes the real IP address of the client.
  • the proxy server extracts the IPv6 home address corresponding to the client IP packet from the IPv6 packet header of the client IP packet.
  • the IPv6 home address is the real IP address of the client.
  • the proxy server updates the extended header of the IPv6 packet header of the proxy IP packet to be encapsulated according to the IP address to be encapsulated.
  • the proxy server uses the proxy IP packet to be encapsulated after the extension header is updated as a target proxy IP packet corresponding to the client IP packet.
  • the real IP address of the client that is, the home address
  • the proxy IP packet to be encapsulated, so that this application is suitable for application scenarios where the client adopts the IPv6 protocol.
  • the real IP address of the client refers to the source IP address of the IPv4 packet
  • the proxy server and the back-end server support IPv4in IPv6 address translation service.
  • the encapsulating the IPv6 packet header of the proxy IP packet to be encapsulated according to the client IP packet to obtain the target proxy IP packet corresponding to the client IP packet further includes the following steps.
  • the proxy server extracts the source IP address from the client IP packet, and obtains the source IP address of the IPv4 packet corresponding to the client IP packet.
  • the proxy server extracts the source IP address of the IPv4 packet corresponding to the client IP packet from the source IP address field in the IPv4 packet header of the client IP packet.
  • the proxy server converts the source IP address of the IPv4 packet corresponding to the client IP packet into an IPv6 home address to obtain the IP address to be encapsulated, and the IP address to be encapsulated includes the real IP of the client. address.
  • the proxy server is based on IPv4in
  • the IPv6 address translation service converts the source IP address of the IPv4 packet corresponding to the client IP packet from an IP address in IPv4 format to an IPv6 home address in IPv6 format, and uses the converted IPv6 home address as the IP to be encapsulated address. It is understandable that the real IP address of the client is part of the converted IPv6 home address.
  • IPv4 format The method for converting an IP address in IPv4 format into a home address in IPv6 format can be selected from the prior art, and will not be repeated here.
  • the proxy server updates the extended header of the IPv6 packet header of the proxy IP packet to be encapsulated according to the IP address to be encapsulated.
  • the proxy server uses the proxy IP packet to be encapsulated after the extension header is updated as the target proxy IP packet corresponding to the client IP packet.
  • the real IP address of the client that is, the source IP address of the IPv4 packet
  • the real IP address of the client is converted into an IPv6 format and then encapsulated in the proxy IP packet to be encapsulated, so that this application is suitable for the client
  • the end adopts the application scenario of the IPv4 protocol.
  • the proxy server encapsulates the IPv6 packet header of the proxy IP packet to be encapsulated according to the client IP packet, and obtains a packet corresponding to the client IP packet
  • the target agent IP package includes the following steps.
  • the proxy server obtains an IP address of the proxy server.
  • the proxy server obtains the proxy server IP address from its own database.
  • the IP address of the proxy server refers to the IP address of the proxy server.
  • the proxy server updates the source address of the IPv6 packet header of the proxy IP packet to be encapsulated according to the proxy server IP address.
  • the proxy server updates the IP address of the proxy server to the source address of the IPv6 packet header of the proxy IP packet to be encapsulated.
  • the proxy server obtains the transmission protocol type of the communication connection between the proxy server and the back-end server.
  • the proxy server obtains the transmission protocol type of the communication connection between the proxy server and the back-end server from the proxy server in the database.
  • the transmission protocol types include TCP and UDP, which are not specifically limited in this example.
  • TCP Transmission Control Protocol
  • Transmission Control Protocol is a connection-oriented, reliable, byte stream-based transport layer communication protocol defined by IETF RFC 793.
  • UDP User Datagram Protocol
  • User Datagram Protocol refers to the User Datagram Protocol, which provides a method for applications to send encapsulated IP data packets without establishing a connection.
  • the proxy server updates the next extension header of the IPv6 packet header of the proxy IP packet to be encapsulated according to the transmission protocol type.
  • the proxy server updates the next extension header (NextHeader) of the IPv6 packet header of the proxy IP packet to be encapsulated according to the transmission protocol type.
  • NextHeader next extension header
  • the proxy server encapsulates the IPv6 packet header of the updated proxy IP packet to be encapsulated according to the client IP packet to obtain the target proxy IP packet.
  • Proxy Server The proxy server encapsulates the IPv6 packet header of the updated proxy IP packet to be encapsulated according to the client IP packet to obtain the target proxy IP packet.
  • step S302 the method for encapsulating the IPv6 packet header of the updated proxy IP packet to be encapsulated to obtain the target proxy IP packet is the same as step S302 to step S306.
  • steps S302 to S306 can be performed first, and then steps S602 to S608 are performed on the updated proxy IP packet to be encapsulated after performing steps S302 to S306, and finally step S608 is performed.
  • the updated proxy IP packet to be encapsulated serves as the target proxy IP packet corresponding to the client IP packet, which is not specifically limited in this example.
  • the proxy server adopts an Nginx server; the socket of the connection between the proxy server and the back-end server adopts an original socket.
  • the communication type of the socket connected between the proxy server and the back-end server adopts SOCK_RAW (raw socket), the parameter adopts IPPROTO_RAW, and the function of the socket connected between the proxy server and the back-end server
  • the calling format is socket (AF_INET, SOCK_RAW, ipproto_raw).
  • the IPPROTO_RAW provides a function for the application to specify the IP header by itself.
  • the back-end server determines the communication network of the client according to the real IP address of the client, and/or determines the geographic location information of the client according to the real IP address of the client.
  • the determining the communication network of the client according to the real IP address of the client includes: the back-end server obtains an IP address database, and matches and searches the IP address database according to the real IP address of the client to obtain geographic location information ,
  • the IP address database includes: IP address, geographic location information, and communication network.
  • the shopping platform determines the communication network of the shopping client according to the real IP address of the shopping client, and then makes shopping recommendations based on the communication network.
  • communication networks include: China Mobile, China Unicom, and China Telecom , This example does not make specific restrictions.
  • the determining the geographic location information of the client according to the real IP address of the client includes: the back-end server obtains an IP address database, and matches and searches the IP address database according to the real IP address of the client to obtain the geographic location information.
  • the proxy server uses seven-layer load balancing software Nginx to implement reverse proxy.
  • this application also proposes a proxy server that transmits the client's real IP address, and stores a computer instruction program.
  • the processor executes the following method Step: The client sends a communication request to the proxy server, the communication request carries a client IP packet, and the client IP packet includes the real IP address of the client; the proxy server responds to the communication request, Perform IP package encapsulation on the client IP package to obtain a target proxy IP package corresponding to the client IP package.
  • the target proxy IP package includes the real IP address of the client; the proxy server is based on and The communication connection between the back-end servers sends the target agent IP packet to the back-end server; the back-end server parses the target agent IP packet to obtain a connection with the target agent The real IP address of the client corresponding to the IP packet.
  • the proxy server may be an Nginx server or other proxy servers, which is not specifically limited here.
  • the proxy server of this embodiment establishes a communication connection between the client and the back-end server, and the computer instruction program in the proxy server encapsulates the real IP address of the client in the client IP packet carried in the communication request to the client when the program is executed.
  • the target proxy IP packet corresponding to the IP packet is sent to the back-end server.
  • the back-end server obtains the client's real IP address by parsing the target proxy IP packet, which realizes that when the proxy server is used to establish a communication connection
  • the back-end server can obtain the real IP address of the client, so that the architecture that uses a proxy server to establish a communication connection is suitable for application scenarios that need to carry out related services based on the real IP address of the client, and improves the publicity of the architecture that uses a proxy server to establish a communication connection.
  • Support and adaptability; and the entire technical solution only needs to be changed in the proxy server, which will not greatly increase the deployment difficulty of establishing a communication connection with the proxy server.
  • a system for transmitting the real IP address of a client includes: a client, a proxy server, and a back-end server;
  • the proxy server sends a communication request, the communication request carries a client IP packet, the client IP packet includes the client's real IP address; the proxy server is used to establish a communication connection between the client and the back-end server ,
  • Based on the communication connection with the back-end server send the target proxy IP packet to the back-end server; the back-end server is used to parse the target proxy IP packet to obtain The real IP address of the client corresponding to the target agent IP packet.
  • the obtaining the real IP address of the client by parsing the IP packet of the target agent includes: the back-end server calls the standard recv_from to obtain the real IP address of the client from the IP packet of the target agent.
  • the back-end server uses the HOOK mechanism to make the XFRM check function return true forever, so as to prevent the target agent IP packet from failing the kernel XFRM check.
  • a proxy server is used to establish a communication connection between the client and the back-end server, and the real IP address of the client in the client IP packet carried in the communication request is encapsulated into the target proxy IP packet corresponding to the client IP packet , And then send the target proxy IP packet to the back-end server.
  • the back-end server obtains the client's real IP address by parsing the target proxy IP packet, so that the back-end server can obtain the client's real IP address when the proxy server is used to establish a communication connection.
  • the architecture that uses a proxy server to establish a communication connection is suitable for application scenarios that need to carry out related services based on the client's real IP address, which improves the public support and adaptability of the architecture that uses a proxy server to establish a communication connection; and the entire technology
  • the solution only needs to make changes in the proxy server, which will not greatly increase the deployment difficulty of establishing a communication connection with the proxy server.
  • the back-end server is further configured to determine the communication network of the client according to the real IP address of the client and/or determine the geographic location information of the client according to the real IP address of the client.
  • Fig. 9 shows an internal structure diagram of a computer device in an embodiment.
  • the computer device may specifically be a terminal or a server.
  • the computer device includes a processor, a memory, and a network interface connected through a system bus.
  • the memory includes a non-volatile storage medium and an internal memory.
  • the non-volatile storage medium of the computer device stores an operating system and may also store a computer program.
  • the processor can realize the method of transmitting the real IP address of the client.
  • a computer program may also be stored in the internal memory.
  • the processor can execute the method of transmitting the real IP address of the client.
  • FIG. 9 is only a block diagram of a part of the structure related to the solution of the present application, and does not constitute a limitation on the computer device to which the solution of the present application is applied.
  • the specific computer device may Including more or fewer parts than shown in the figure, or combining some parts, or having a different arrangement of parts.
  • the method for transmitting the real IP address of the client provided in the present application can be implemented in the form of a computer program, and the computer program can run on the computer device as shown in FIG. 9.
  • the memory of the computer equipment can store various program templates of a living body screening device based on multi-point positioning.
  • a storage medium which stores a computer instruction program (computer program), and when the computer instruction program is executed by a processor, the processor executes the following method steps: The end sends a communication request to the proxy server, the communication request carries a client IP packet, and the client IP packet includes the client's real IP address; the proxy server responds to the communication request to the client The IP packet is encapsulated in an IP packet to obtain a target proxy IP packet corresponding to the client IP packet.
  • a computer instruction program computer program
  • the target proxy IP packet includes the client's real IP address; the proxy server is based on the back-end server The communication connection between the target agent IP packet is sent to the back-end server; the back-end server parses the target agent IP packet to obtain the client corresponding to the target agent IP packet The real IP address of the end.
  • the real IP address of the client in the client IP packet carried in the communication request is encapsulated into the target agent IP packet corresponding to the client IP packet, and then the target agent IP packet is sent to the post
  • the back-end server obtains the real IP address of the client by parsing the target proxy IP packet, so that the back-end server can obtain the real IP address of the client when the proxy server is used to establish a communication connection, so that the proxy server can be used to establish a communication connection
  • the architecture is suitable for application scenarios that need to carry out related services based on the real IP address of the client, which improves the public support and adaptability of the architecture that uses a proxy server to establish a communication connection; and the entire technical solution only needs to be changed in the proxy server. It will greatly increase the deployment difficulty of establishing a communication connection with a proxy server.
  • the above-mentioned method of transmitting the client's real IP address and a system of transmitting the client's real IP address belong to a general inventive concept, a method of transmitting the client's real IP address, and a method of transmitting the client's real IP address.
  • the contents in the system embodiment of the real IP address are mutually applicable.
  • the foregoing storage medium may be a computer-readable storage medium, and the storage medium, such as a computer-readable storage medium, may be non-volatile or volatile.
  • Non-volatile memory may include read only memory (ROM), programmable ROM (PROM), electrically programmable ROM (EPROM), electrically erasable programmable ROM (EEPROM), or flash memory.
  • Volatile memory may include random access memory (RAM) or external cache memory.
  • RAM is available in many forms, such as static RAM (SRAM), dynamic RAM (DRAM), synchronous DRAM (SDRAM), double data rate SDRAM (DDRSDRAM), enhanced SDRAM (ESDRAM), synchronous chain Road (Synchlink) DRAM (SLDRAM), memory bus (Rambus) direct RAM (RDRAM), direct memory bus dynamic RAM (DRDRAM), and memory bus dynamic RAM (RDRAM), etc.
  • SRAM static RAM
  • DRAM dynamic RAM
  • SDRAM synchronous DRAM
  • DDRSDRAM double data rate SDRAM
  • ESDRAM enhanced SDRAM
  • SLDRAM synchronous chain Road (Synchlink) DRAM
  • SLDRAM synchronous chain Road (Synchlink) DRAM
  • Rambus direct RAM
  • DRAM direct memory bus dynamic RAM
  • RDRAM memory bus dynamic RAM
  • the blockchain referred to in this application is a new application mode of computer technology such as distributed data storage, point-to-point transmission, consensus mechanism, and encryption algorithm.
  • Blockchain essentially a decentralized database, is a series of data blocks associated with cryptographic methods. Each data block contains a batch of network transaction information for verification. The validity of the information (anti-counterfeiting) and the generation of the next block.
  • the blockchain can include the underlying platform of the blockchain, the platform product service layer, and the application service layer.

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Computer Security & Cryptography (AREA)
  • Data Exchanges In Wide-Area Networks (AREA)

Abstract

本申请实施例公开了一种传递客户端真实IP地址的方法及系统。所述方法包括：客户端向代理服务器发送通信请求，通信请求中携带有客户端IP包，客户端IP包包括客户端真实IP地址；代理服务器响应通信请求，对客户端IP包进行IP包封装，得到与客户端IP包对应的目标代理端IP包，目标代理端IP包包括客户端真实IP地址，基于与后端服务器之间的通信连接，将目标代理端IP包发送给后端服务器；后端服务器对目标代理端IP包进行解析，得到与目标代理端IP包对应的客户端真实IP地址。此外，本申请还涉及区块链技术，客户端真实IP地址可存储于区块链节点中。

Description

一种传递客户端真实IP地址的方法及系统
本申请要求于2020年4月29日提交中国专利局、申请号为202010354722.2，发明名称为“一种传递客户端真实IP地址的方法及系统”的中国专利申请的优先权，其全部内容通过引用结合在本申请中。
技术领域
本申请涉及计算机技术领域，尤其涉及一种传递客户端真实IP地址的方法及系统。
 背景技术
发明人意识到，现有采用代理服务器在客户端与后端服务器之间进行通信连接的技术中，彻底地改变了请求后端服务器服务的来源，隔离了客户端和后端服务器之间直接通信连接，从而使后端服务器只能看到代理服务器的IP地址，无法看到客户端的真实IP地址，无法满足需要基于客户端的真实IP地址开展的相关业务。
 技术问题
基于此，有必要针对上述问题，提出了一种传递客户端真实IP地址的方法及系统，用于解决现有技术中采用代理服务器在客户端与后端服务器之间进行通信连接时后端服务器无法看到客户端的真实IP地址的技术问题。
 技术解决方案
第一方面，一种传递客户端真实IP地址的方法，应用于采用代理服务器建立客户端与后端服务器之间的通信连接，所述方法包括：所述客户端向所述代理服务器发送通信请求，所述通信请求中携带有客户端IP包，所述客户端IP包包括客户端真实IP地址；所述代理服务器响应所述通信请求，对所述客户端IP包进行IP包封装，得到与所述客户端IP包对应的目标代理端IP包，所述目标代理端IP包包括所述客户端真实IP地址；所述代理服务器基于与所述后端服务器之间的通信连接，将所述目标代理端IP包发送给所述后端服务器；所述后端服务器对所述目标代理端IP包进行解析，得到与所述目标代理端IP包对应的客户端真实IP地址。
第二方面，本申请还提出了一种传递客户端真实IP地址的系统，所述系统包括：客户端、代理服务器、后端服务器；所述客户端，用于向所述代理服务器发送通信请求，所述通信请求中携带有客户端IP包，所述客户端IP包包括客户端真实IP地址；所述代理服务器，用于建立客户端与后端服务器之间的通信连接，响应所述通信请求，对所述客户端IP包进行IP包封装，得到与所述客户端IP包对应的目标代理端IP包，所述目标代理端IP包包括所述客户端真实IP地址，基于与所述后端服务器之间的通信连接，将所述目标代理端IP包发送给所述后端服务器；所述后端服务器，用于对所述目标代理端IP包进行解析，得到与所述目标代理端IP包对应的客户端真实IP地址。
第三方面，本申请还提供一种计算机设备，所述计算机设备包括处理器、存储器、以及存储在所述存储器上并可被所述处理器执行的计算机程序，其中所述计算机程序被所述处理器执行时，实现上述方法的步骤。可选的，该计算机设备可以是客户端设备（如终端）、代理服务器、后端服务器，并可实现上述方法中该计算机设备执行的步骤。
第四方面，本申请还提供一种计算机可读存储介质，所述计算机可读存储介质上存储有计算机程序，其中所述计算机程序被处理器执行时，实现如上述方法的步骤。
 有益效果
本申请实现了在采用代理服务器建立通信连接时后端服务器可以获取到客户端真实IP地址。
 附图说明
图1为一个实施例中传递客户端真实IP地址的方法的流程图。
图2为图1中传递客户端真实IP地址的方法进行目标代理端IP包封装的流程图。
图3为图2中传递客户端真实IP地址的方法进行IPv6包头部封装的流程图。
图4为图3中传递客户端真实IP地址的方法获取采用IPv6协议的客户端的待封装IP地址的流程图。
图5为图3中传递客户端真实IP地址的方法获取采用IPv4协议的客户端的待封装IP地址的流程图。
图6为图2中传递客户端真实IP地址的方法进行IPv6包头部封装的流程图。
图7为图1的传递客户端真实IP地址的方法的时序图。
图8为一个实施例中传递客户端真实IP地址的系统的结构框图。
图9为计算机设备的结构框图。
 本发明的实施方式
下面将结合本申请实施例中的附图，对本申请实施例中的技术方案进行描述。
本申请的技术方案可应用于人工智能、大数据和/或区块链技术领域，涉及的数据如真实IP地址可存储于数据库中，或者可以存储于区块链节点中，如通过区块链分布式存储，等等，本申请不做限定。
本申请实施例所涉及的技术术语包括如下。
IP地址：IP网际互连协议的缩写，是TCP/IP体系中的网络层协议，IP规定网络上所有的设备都必须有一个独一无二的IP地址。
IP包：指IP数据包，是一种可变长分组，由首部和数据负载两部分组成。
IPv4：互联网通信协议第四版，是网际协议开发过程中的第四个修订版本。
IPv6：是互联网协议第6版的缩写，是互联网工程任务组（IETF）设计的用于替代IPv4的下一代IP协议。
代理服务器：用于代理网络用户去取得网络信息，作为网络信息的中转站，是个人网络和Internet服务商之间的中间代理机构，负责转发合法的网络信息，对转发进行控制和登记。
Nginx：是一个高性能的HTTP和反向代理web服务器，同时也提供了IMAP/POP3/SMTP服务。反向代理（Reverse Proxy）方式是指以代理服务器来接受Internet上的连接请求，然后将请求转发给内部网络上的服务器，并将从服务器上得到的结果返回给Internet上请求连接的客户端，此时代理服务器对外就表现为一个服务器。
客户端（Client）：或称为用户端，是指与服务器相对应，为客户提供本地服务的程序。
后端服务器：可以是用于运行应用的应用服务器，也可以是运行数据的数据库服务器，还可以用于同时运行应用和运行数据的服务器。
如图1所示，在一个实施例中，一种传递客户端真实IP地址的方法，应用于采用代理服务器建立客户端与后端服务器之间的通信连接，所述方法包括以下步骤。
S102、所述客户端向所述代理服务器发送通信请求，所述通信请求中携带有客户端IP包，所述客户端IP包包括客户端真实IP地址。
当客户端需要访问后端服务器时，所述客户端通过网络向与后端服务器对应的代理服务器发送通信请求。
可以理解的是，代理服务器通过网络分别与至少一个客户端、至少一个后端服务器进行通信连接。
可选的，当所述客户端采用IPv6协议时，所述客户端真实IP地址是指IPv6的家乡地址，此时所述客户端IP包的头部格式为IPv6包头部；当客户端有转交地址时，则把客户端的转交地址放入所述客户端IP包的IPv6包头部的源地址，且把客户端的家乡地址放入所述客户端IP包的IPv6包头部的扩展报头；当客户端没有转交地址时，则把客户端的家乡地址放入所述客户端IP包的IPv6包头部的源地址。
可选的，当所述客户端采用IPv4协议时，所述客户端真实IP地址是指IPv4包的源IP地址，此时所述客户端IP包的头部格式为IPv4包头部。
可以理解的是，所述客户端IP包是一个IP包。
IPv6为每个移动设备设有一个固定的家乡地址（home address），家乡地址与移动设备当前接入互联网的位置无关。
当移动设备在家乡以外的地方使用时，通过一个转交地址（care-of address）来提供移动节点当前的位置信息；移动设备每次改变位置，都要将它的转交地址告诉给家乡地址和它所对应的通信节点；在家乡地址以外的地方，移动设备传送数据包时，通常在IPv6报头中将转交地址作为源地址。
S104、所述代理服务器响应所述通信请求，对所述客户端IP包进行IP包封装，得到与所述客户端IP包对应的目标代理端IP包，所述目标代理端IP包包括所述客户端真实IP地址。
所述代理服务器接收到客户端发送的通信请求后，对通信请求进行解析，从通信请求携带的客户端IP包的头部中解析得到客户端真实IP地址；针对每个客户端IP包建立待处理代理端IP包，为每个待处理代理端IP包增加一个IPv6包头部；将客户端真实IP地址封装到待处理代理端IP包中增加的IPv6包头部的扩展报头，封装完成后得到目标代理端IP包。
可以理解的是，所述目标代理端IP包是一个IP包。
S106、所述代理服务器基于与所述后端服务器之间的通信连接，将所述目标代理端IP包发送给所述后端服务器。
所述代理服务器基于代理服务器与所述后端服务器之间的通信连接，代理服务器将所述目标代理端IP包发送给所述后端服务器。
可选的，代理服务器与所述后端服务器之间的通信连接可以采用HTTP协议。
可选的，代理服务器与所述后端服务器之间的通信连接也可以采用非HTTP协议。比如，非HTTP协议包括UDP/TCP、HTTPS，在此举例不做具体限定。
可选的，代理服务器采用Nginx以实现反向代理，在此举例不做具体限定。
可选的，在代理服务器采用Nginx时，因是在每个待处理代理端IP包增加一个IPv6包头部，不影响Nginx原有的http_realip_module的功能，因此可以同时在IP层和HTTP层提供对客户端真实IP地址的传送。其中，所述IP层是指网络层，所述HTTP层是指应用层。
S108、所述后端服务器对所述目标代理端IP包进行解析，得到与所述目标代理端IP包对应的客户端真实IP地址。
所述后端服务器对接收的所述目标代理端IP包进行解析，从所述目标代理端IP包的IPv6包头部中获取到与所述目标代理端IP包对应的客户端真实IP地址。
可选的，当所述代理服务器采用Nginx服务器时，所述后端服务器的操作系统可以是Linux,Windows,MacOS，FreeBSD等，只需要所述后端服务器的操作系统持标准的IPv6协议栈，Nginx服务器都可以采用本申请通过MIPv6选项发送所述客户端真实IP地址到后端服务器。
可选的，所述后端服务器的运营商需要进行风险控制时，通过所述后端服务器获取到与所述目标代理端IP包对应的客户端真实IP地址，能够识别所述通信请求的真实来源，根据所述客户端真实IP地址确定与所述客户端真实IP地址对应的风险级别，根据与所述客户端真实IP地址对应的风险级别提供相应的服务，从而在确保服务质量的同时实现了风险控制，进一步提高了采用代理服务器建立通信连接的架构的公共支持及适配性。
可选的，在金融支付中，通过所述后端服务器获取到与所述目标代理端IP包对应的客户端真实IP地址，能够识别所述通信请求的真实来源，避免了危险通信请求通过代理方式绕开金融支付的审查，从而实现了避免金融支付出错造成的经济损失和信息泄露。
本实施例采用代理服务器建立客户端与后端服务器之间的通信连接，将通信请求中携带的客户端IP包中的客户端真实IP地址封装到与客户端IP包对应的目标代理端IP包，再将目标代理端IP包发送给后端服务器，后端服务器通过解析目标代理端IP包获取客户端真实IP地址，实现了在采用代理服务器建立通信连接时后端服务器可以获取到客户端真实IP地址，从而使采用代理服务器建立通信连接的架构适用于需要基于客户端的真实IP地址开展相关业务的应用场景，提高了采用代理服务器建立通信连接的架构的公共支持及适配性；而且整个技术方案只需要在代理服务器中做更改，不会大量增加采用代理服务器建立通信连接的部署难度。
可以理解的是，通过网络抓包工具获取到目标代理端IP包，也可以解析目标代理端IP包获得客户端真实IP地址，因此本申请对debug（调试）也很有帮助。比如，所述网络抓包工具包括Wireshark，在Wireshark 中设有MIPv6的标准解析，简化了采用代理服务器建立通信连接的架构的部署。
如图2所示，在一个实施例中，所述对所述客户端IP包进行IP包封装，得到与所述客户端IP包对应的目标代理端IP包，包括以下步骤。
S202、所述代理服务器根据所述客户端IP包设立与所述客户端IP包对应的待处理代理端IP包。
代理服务器对每个客户端IP包设立一个与所述客户端IP包对应的待处理代理端IP包。
可以理解的是，所述待处理代理端IP包是一个IP包。
S204、所述代理服务器在所述待处理代理端IP包中增加IPv6包头部，得到与所述客户端IP包对应的待封装代理端IP包。
代理服务器在每个所述待处理代理端IP包中增加一个IPv6包头部，将增加IPv6包头部之后的待处理代理端IP包作为与所述客户端IP包对应的待封装代理端IP包。
可以理解的是，所述待封装代理端IP包是一个IP包。
S206、所述代理服务器根据所述客户端IP包对所述待封装代理端IP包的所述IPv6包头部进行封装，得到与所述客户端IP包对应的目标代理端IP包。
代理服务器从所述客户端IP包的头部中解析得到所述客户端真实IP地址，将所述客户端真实IP地址封装到待处理代理端IP包中增加的IPv6包头部的扩展报头，将封装完成后的所述待封装代理端IP包作为目标代理端IP包。
本实施例通过将所述客户端真实IP地址封装到待处理代理端IP包中增加的IPv6包头部，对待处理代理端IP包的其他数据不会造成影响。
如图3所示，在一个实施例中，所述代理服务器根据所述客户端IP包对所述待封装代理端IP包的所述IPv6包头部进行封装，得到与所述客户端IP包对应的目标代理端IP包，包括以下步骤。
S302、所述代理服务器从所述客户端IP包中提取IP地址，得到与所述客户端IP包对应的待封装IP地址，所述待封装IP地址包括所述客户端真实IP地址，其中，所述客户端真实IP地址存储在区块链中。
需要强调的是，为进一步保证上述客户端真实IP地址的私密和安全性，上述客户端真实IP地址还可以存储于一区块链的节点中。
代理服务器从所述客户端IP包中提取出客户端真实IP地址，将所述客户端真实IP地址作为与所述客户端IP包对应的待封装IP地址。
S304、所述代理服务器根据所述待封装IP地址更新所述待封装代理端IP包的所述IPv6包头部的扩展报头。
代理服务器将所述待封装IP地址添加到所述待封装代理端IP包的所述IPv6包头部的扩展报头中。可以理解的是，添加方法是采用第二类路由头实现，第二类路由头里面只能藏匿一个经由地址，用客户端真实IP地址更新到经由地址。
S306、所述代理服务器将更新所述扩展报头之后的所述待封装代理端IP包作为与所述客户端IP包对应的目标代理端IP包。
所述代理服务器将添加了所述待封装IP地址的所述待封装代理端IP包作为与所述客户端IP包对应的目标代理端IP包。
本实施例通过将所述客户端真实IP地址封装到待处理代理端IP包中增加的IPv6包头部的扩展报头，传递了客户端真实IP地址，而且对待处理代理端IP包的其他数据不会造成影响。
如图4所示，在一个实施例中，当所述客户端采用IPv6协议时，所述客户端真实IP地址是指IPv6的家乡地址。
所述代理服务器根据所述客户端IP包对所述待封装代理端IP包的所述IPv6包头部进行封装，得到与所述客户端IP包对应的目标代理端IP包，包括以下步骤。
S402、所述代理服务器从所述客户端IP包提取家乡地址，得到与所述客户端IP包对应的IPv6的家乡地址，将与所述客户端IP包对应的IPv6的家乡地址作为所述待封装IP地址，所述待封装IP地址包括所述客户端真实IP地址。
代理服务器从所述客户端IP包的IPv6包头部中提取得到与所述客户端IP包对应的IPv6的家乡地址，在IPv6协议中，IPv6的家乡地址即为所述客户端真实IP地址。
S404、所述代理服务器根据所述待封装IP地址更新所述待封装代理端IP包的所述IPv6包头部的扩展报头。
S406、所述代理服务器将更新所述扩展报头之后的所述待封装代理端IP包作为与所述客户端IP包对应的目标代理端IP包。
本实施例在客户端采用IPv6协议时，将所述客户端真实IP地址即家乡地址封装到了所述待封装代理端IP包中，从而使本申请适用于客户端采用IPv6协议的应用场景。
如图5所示，在一个实施例中，当所述客户端采用IPv4协议时，所述客户端真实IP地址是指IPv4包的源IP地址，所述代理服务器及所述后端服务器支持IPv4in IPv6地址转换服务。
所述根据所述客户端IP包对所述待封装代理端IP包的所述IPv6包头部进行封装，得到与所述客户端IP包对应的目标代理端IP包，还包括以下步骤。
S502、所述代理服务器从所述客户端IP包提取源IP地址，得到与所述客户端IP包对应的IPv4包的源IP地址。
代理服务器从所述客户端IP包的IPv4包头部中源IP地址字段提取得到与所述客户端IP包对应的IPv4包的源IP地址。
S504、所述代理服务器将与所述客户端IP包对应的IPv4包的源IP地址转换成IPv6的家乡地址，得到所述待封装IP地址，所述待封装IP地址包括所述客户端真实IP地址。
代理服务器根据IPv4in IPv6地址转换服务将与所述客户端IP包对应的IPv4包的源IP地址从IPv4格式的IP地址转换成IPv6格式的IPv6的家乡地址，将转换得到的IPv6的家乡地址作为所述待封装IP地址。可以理解的是，所述客户端真实IP地址是转换得到的IPv6的家乡地址的一部分。
将IPv4格式的IP地址转换成IPv6格式的家乡地址的方法可以从现有技术中选择，在此不做赘述。
S506、所述代理服务器根据所述待封装IP地址更新所述待封装代理端IP包的所述IPv6包头部的扩展报头。
S508、所述代理服务器将更新所述扩展报头之后的所述待封装代理端IP包作为与所述客户端IP包对应的目标代理端IP包。
本实施例在客户端采用IPv4协议时，将所述客户端真实IP地址即IPv4包的源IP地址转换成IPv6格式后封装到了所述待封装代理端IP包中，从而使本申请适用于客户端采用IPv4协议的应用场景。
如图6所示，在一个实施例中，所述代理服务器根据所述客户端IP包对所述待封装代理端IP包的所述IPv6包头部进行封装，得到与所述客户端IP包对应的目标代理端IP包，包括以下步骤。
S602、所述代理服务器获取代理服务器IP地址。
代理服务器从自身数据库中获取代理服务器IP地址。
所述代理服务器IP地址是指代理服务器的IP地址。
S604、所述代理服务器根据所述代理服务器IP地址更新所述待封装代理端IP包的所述IPv6包头部的源地址。
代理服务器将所述代理服务器IP地址更新到所述待封装代理端IP包的所述IPv6包头部的源地址。
S606所述代理服务器获取所述代理服务器与所述后端服务器之间通信连接的传输协议类型。
代理服务器从数据库中所述代理服务器获取所述代理服务器与所述后端服务器之间通信连接的传输协议类型。比如，所述传输协议类型包括TCP、UDP，在此举例不做具体限定。
TCP（Transmission Control Protocol，传输控制协议）是一种面向连接的、可靠的、基于字节流的传输层通信协议，由IETF的RFC 793定义。
UDP（User Datagram Protocol）是指用户数据报协议，为应用程序提供了一种无需建立连接就可以发送封装的 IP 数据包的方法。
S608、所述代理服务器根据所述传输协议类型更新所述待封装代理端IP包的所述IPv6包头部的下一扩展头。
代理服务器根据所述传输协议类型更新到所述待封装代理端IP包的所述IPv6包头部的下一扩展头（NextHeader）。
S610、所述代理服务器根据所述客户端IP包对更新之后的所述待封装代理端IP包的所述IPv6包头部进行封装，得到所述目标代理端IP包。
代理服务器所述代理服务器根据所述客户端IP包对更新之后的所述待封装代理端IP包的所述IPv6包头部进行封装，得到所述目标代理端IP包。
可以理解的是，对更新之后的所述待封装代理端IP包的所述IPv6包头部进行封装得到所述目标代理端IP包的方法与步骤S302至步骤S306相同。
可以理解的是，在一个实施例中，可以先执行步骤S302至步骤S306，再对执行步骤S302至步骤S306更新后的所述待封装代理端IP包执行步骤S602至步骤S608，最后将步骤S608更新后的所述待封装代理端IP包作为与所述客户端IP包对应的目标代理端IP包，在此举例不做具体限定。
在一个实施例中，所述代理服务器采用Nginx服务器；所述代理服务器与所述后端服务器的连接的套接字采用原始套接字。
所述代理服务器与所述后端服务器的连接的套接字的通信类型采用SOCK_RAW（原始套接字），参数采用IPPROTO_RAW，所述代理服务器与所述后端服务器的连接的套接字的函数调用格式为socket(AF_INET, SOCK_RAW, ipproto_raw)。
所述IPPROTO_RAW提供了应用程序自行指定IP头部的功能。
在一个实施例中，所述后端服务器根据所述客户端真实IP地址确定所述客户端的通信网络，和/或，根据所述客户端真实IP地址确定所述客户端的地理位置信息。
所述根据所述客户端真实IP地址确定客户端的通信网络，包括：所述后端服务器获取IP地址数据库，根据所述客户端真实IP地址从所述IP地址数据库中匹配查找，得到地理位置信息，其中，所述IP地址数据库包括：IP地址、地理位置信息、通信网络。比如，在采用手机登陆手机上的购物客户端购物时，购物平台根据购物客户端真实IP地址确定购物客户端的通信网络，然后根据通信网络做购物推荐，比如，通信网络包括：移动、联通、电信，在此举例不做具体限定。
所述根据所述客户端真实IP地址确定客户端的地理位置信息，包括：所述后端服务器获取IP地址数据库，根据所述客户端真实IP地址从所述IP地址数据库中匹配查找，得到地理位置信息。
在一个实施例中，所述代理服务器采用七层负载均衡软件Nginx，以用于实现反向代理。
在一个实施例中，本申请还提出了一种传递客户端真实IP地址的代理服务器，存储有计算机指令程序，所述计算机指令程序被处理器执行时，使得所述处理器执行时实现如下方法步骤：所述客户端向所述代理服务器发送通信请求，所述通信请求中携带有客户端IP包，所述客户端IP包包括客户端真实IP地址；所述代理服务器响应所述通信请求，对所述客户端IP包进行IP包封装，得到与所述客户端IP包对应的目标代理端IP包，所述目标代理端IP包包括所述客户端真实IP地址；所述代理服务器基于与所述后端服务器之间的通信连接，将所述目标代理端IP包发送给所述后端服务器；所述后端服务器对所述目标代理端IP包进行解析，得到与所述目标代理端IP包对应的客户端真实IP地址。
所述代理服务器可以是Nginx服务器，也可以是其他代理服务器，在此不做具体限定。
本实施例的代理服务器建立客户端与后端服务器之间的通信连接，代理服务器中的计算机指令程序执行时将通信请求中携带的客户端IP包中的客户端真实IP地址封装到与客户端IP包对应的目标代理端IP包，再将目标代理端IP包发送给后端服务器，后端服务器通过解析目标代理端IP包获取客户端真实IP地址，实现了在采用代理服务器建立通信连接时后端服务器可以获取到客户端真实IP地址，从而使采用代理服务器建立通信连接的架构适用于需要基于客户端的真实IP地址开展相关业务的应用场景，提高了采用代理服务器建立通信连接的架构的公共支持及适配性；而且整个技术方案只需要在代理服务器中做更改，不会大量增加采用代理服务器建立通信连接的部署难度。
如图8所示，在一个实施例中，提出了一种传递客户端真实IP地址的系统，所述系统包括：客户端、代理服务器、后端服务器；所述客户端，用于向所述代理服务器发送通信请求，所述通信请求中携带有客户端IP包，所述客户端IP包包括客户端真实IP地址；所述代理服务器，用于建立客户端与后端服务器之间的通信连接，响应所述通信请求，对所述客户端IP包进行IP包封装，得到与所述客户端IP包对应的目标代理端IP包，所述目标代理端IP包包括所述客户端真实IP地址，基于与所述后端服务器之间的通信连接，将所述目标代理端IP包发送给所述后端服务器；所述后端服务器，用于对所述目标代理端IP包进行解析，得到与所述目标代理端IP包对应的客户端真实IP地址。
所述从所述目标代理端IP包解析得到所述客户端真实IP地址，包括：所述后端服务器调用标准的recv_from从所述目标代理端IP包中获取到所述客户端真实IP地址。
可选的，所述后端服务器的用HOOK机制让XFRM的检查函数永远返回true，以用于避免所述目标代理端IP包不能通过内核XFRM的检验。
本实施例采用代理服务器建立客户端与后端服务器之间的通信连接，将通信请求中携带的客户端IP包中的客户端真实IP地址封装到与客户端IP包对应的目标代理端IP包，再将目标代理端IP包发送给后端服务器，后端服务器通过解析目标代理端IP包获取客户端真实IP地址，实现了在采用代理服务器建立通信连接时后端服务器可以获取到客户端真实IP地址，从而使采用代理服务器建立通信连接的架构适用于需要基于客户端的真实IP地址开展相关业务的应用场景，提高了采用代理服务器建立通信连接的架构的公共支持及适配性；而且整个技术方案只需要在代理服务器中做更改，不会大量增加采用代理服务器建立通信连接的部署难度。
在一个实施例中，所述后端服务器还用于根据所述客户端真实IP地址确定客户端的通信网络和/或根据所述客户端真实IP地址确定客户端的地理位置信息。
图9示出了一个实施例中计算机设备的内部结构图。该计算机设备具体可以是终端，也可以是服务器。如图9所示，该计算机设备包括通过系统总线连接的处理器、存储器和网络接口。其中，存储器包括非易失性存储介质和内存储器。该计算机设备的非易失性存储介质存储有操作系统，还可存储有计算机程序，该计算机程序被处理器执行时，可使得处理器实现传递客户端真实IP地址的方法。该内存储器中也可储存有计算机程序，该计算机程序被处理器执行时，可使得处理器执行传递客户端真实IP地址的方法。本领域技术活体可以理解，图9中示出的结构，仅仅是与本申请方案相关的部分结构的框图，并不构成对本申请方案所应用于其上的计算机设备的限定，具体的计算机设备可以包括比图中所示更多或更少的部件，或者组合某些部件，或者具有不同的部件布置。
在一个实施例中，本申请提供的一种传递客户端真实IP地址的方法可以实现为一种计算机程序的形式，计算机程序可在如图9所示的计算机设备上运行。计算机设备的存储器中可存储组成的一种基于多点定位的活体甄别装置的各个程序模板。
在一个实施例中，还提出了一种存储介质，存储有计算机指令程序（计算机程序），所述计算机指令程序被处理器执行时，使得所述处理器执行时实现如下方法步骤：所述客户端向所述代理服务器发送通信请求，所述通信请求中携带有客户端IP包，所述客户端IP包包括客户端真实IP地址；所述代理服务器响应所述通信请求，对所述客户端IP包进行IP包封装，得到与所述客户端IP包对应的目标代理端IP包，所述目标代理端IP包包括所述客户端真实IP地址；所述代理服务器基于与所述后端服务器之间的通信连接，将所述目标代理端IP包发送给所述后端服务器；所述后端服务器对所述目标代理端IP包进行解析，得到与所述目标代理端IP包对应的客户端真实IP地址。
本实施例的方法步骤执行时将通信请求中携带的客户端IP包中的客户端真实IP地址封装到与客户端IP包对应的目标代理端IP包，再将目标代理端IP包发送给后端服务器，后端服务器通过解析目标代理端IP包获取客户端真实IP地址，实现了在采用代理服务器建立通信连接时后端服务器可以获取到客户端真实IP地址，从而使采用代理服务器建立通信连接的架构适用于需要基于客户端的真实IP地址开展相关业务的应用场景，提高了采用代理服务器建立通信连接的架构的公共支持及适配性；而且整个技术方案只需要在代理服务器中做更改，不会大量增加采用代理服务器建立通信连接的部署难度。
需要说明的是，上述一种传递客户端真实IP地址的方法、一种传递客户端真实IP地址的系统属于一个总的发明构思，一种传递客户端真实IP地址的方法、一种传递客户端真实IP地址的系统实施例中的内容可相互适用。
可选的，上述存储介质可以是计算机可读存储介质，该存储介质如计算机可读存储介质可以是非易失性的，也可以是易失性的。
本领域普通技术活体可以理解实现上述实施例方法中的全部或部分流程，是可以通过计算机程序来指令相关的硬件来完成，所述的程序可存储于一非易失性计算机可读取存储介质中，该程序在执行时，可包括如上述各方法的实施例的流程。其中，本申请所提供的各实施例中所使用的对存储器、存储、数据库或其它介质的任何引用，均可包括非易失性和/或易失性存储器。非易失性存储器可包括只读存储器(ROM)、可编程ROM(PROM)、电可编程ROM(EPROM)、电可擦除可编程ROM(EEPROM)或闪存。易失性存储器可包括随机存取存储器(RAM)或者外部高速缓冲存储器。作为说明而非局限，RAM以多种形式可得，诸如静态RAM(SRAM)、动态RAM(DRAM)、同步DRAM(SDRAM)、双数据率SDRAM(DDRSDRAM)、增强型SDRAM(ESDRAM)、同步链路(Synchlink) DRAM(SLDRAM)、存储器总线(Rambus)直接RAM(RDRAM)、直接存储器总线动态RAM(DRDRAM)、以及存储器总线动态RAM(RDRAM)等。
本申请所指区块链是分布式数据存储、点对点传输、共识机制、加密算法等计算机技术的新型应用模式。区块链(Blockchain)，本质上是一个去中心化的数据库，是一串使用密码学方法相关联产生的数据块，每一个数据块中包含了一批次网络交易的信息，用于验证其信息的有效性(防伪)和生成下一个区块。区块链可以包括区块链底层平台、平台产品服务层以及应用服务层等。
以上实施例的各技术特征可以进行任意的组合，为使描述简洁，未对上述实施例中的各个技术特征所有可能的组合都进行描述，然而，只要这些技术特征的组合不存在矛盾，都应当认为是本说明书记载的范围。
以上所述实施例仅表达了本申请的几种实施方式，其描述较为具体和详细，但并不能因此而理解为对本申请专利范围的限制。应当指出的是，对于本领域的普通技术活体来说，在不脱离本申请构思的前提下，还可以做出若干变形和改进，这些都属于本申请的保护范围。因此，本申请专利的保护范围应以所附权利要求为准。

Claims (20)

  1. 一种传递客户端真实IP地址的方法，应用于采用代理服务器建立客户端与后端服务器之间的通信连接，所述方法包括：
    所述客户端向所述代理服务器发送通信请求，所述通信请求中携带有客户端IP包，所述客户端IP包包括客户端真实IP地址；
    所述代理服务器响应所述通信请求，对所述客户端IP包进行IP包封装，得到与所述客户端IP包对应的目标代理端IP包，所述目标代理端IP包包括所述客户端真实IP地址；
    所述代理服务器基于与所述后端服务器之间的通信连接，将所述目标代理端IP包发送给所述后端服务器；
    所述后端服务器对所述目标代理端IP包进行解析，得到与所述目标代理端IP包对应的客户端真实IP地址。
  2. 如权利要求1所述的方法，其中，所述对所述客户端IP包进行IP包封装，得到与所述客户端IP包对应的目标代理端IP包，包括：
    所述代理服务器根据所述客户端IP包设立与所述客户端IP包对应的待处理代理端IP包；
    所述代理服务器在所述待处理代理端IP包中增加IPv6包头部，得到与所述客户端IP包对应的待封装代理端IP包；
    所述代理服务器根据所述客户端IP包对所述待封装代理端IP包的所述IPv6包头部进行封装，得到与所述客户端IP包对应的目标代理端IP包。
  3. 如权利要求2所述的方法，其中，所述代理服务器根据所述客户端IP包对所述待封装代理端IP包的所述IPv6包头部进行封装，得到与所述客户端IP包对应的目标代理端IP包，包括：
    所述代理服务器从所述客户端IP包中提取IP地址，得到与所述客户端IP包对应的待封装IP地址，所述待封装IP地址包括所述客户端真实IP地址，其中，所述客户端真实IP地址存储在区块链中；
    所述代理服务器根据所述待封装IP地址更新所述待封装代理端IP包的所述IPv6包头部的扩展报头；
    所述代理服务器将更新所述扩展报头之后的所述待封装代理端IP包作为与所述客户端IP包对应的目标代理端IP包。
  4. 如权利要求3所述的方法，其中，当所述客户端采用IPv6协议时，所述客户端真实IP地址是指IPv6的家乡地址；
    所述代理服务器从所述客户端IP包中提取IP地址，得到与所述客户端IP包对应的待封装IP地址，包括：
    所述代理服务器从所述客户端IP包提取家乡地址，得到与所述客户端IP包对应的IPv6的家乡地址，将与所述客户端IP包对应的IPv6的家乡地址作为所述待封装IP地址。
  5. 如权利要求3所述的方法，其中，当所述客户端采用IPv4协议时，所述客户端真实IP地址是指IPv4包的源IP地址，所述代理服务器及所述后端服务器支持IPv4 in IPv6地址转换服务；
    所述代理服务器从所述客户端IP包中提取IP地址，得到与所述客户端IP包对应的待封装IP地址，包括：
    所述代理服务器从所述客户端IP包提取源IP地址，得到与所述客户端IP包对应的IPv4包的源IP地址；
    所述代理服务器将与所述客户端IP包对应的IPv4包的源IP地址转换成IPv6的家乡地址，得到所述待封装IP地址。
  6. 如权利要求2所述的方法，其中，所述代理服务器根据所述客户端IP包对所述待封装代理端IP包的所述IPv6包头部进行封装，得到与所述客户端IP包对应的目标代理端IP包，包括：
    所述代理服务器获取代理服务器IP地址；
    所述代理服务器根据所述代理服务器IP地址更新所述待封装代理端IP包的所述IPv6包头部的源地址；
    所述代理服务器获取所述代理服务器与所述后端服务器之间通信连接的传输协议类型；
    所述代理服务器根据所述传输协议类型更新所述待封装代理端IP包的所述IPv6包头部的下一扩展头；
    所述代理服务器根据所述客户端IP包对更新之后的所述待封装代理端IP包的所述IPv6包头部进行封装，得到所述目标代理端IP包。
  7. 如权利要求1至6任一项所述的方法，其中，所述代理服务器采用Nginx服务器；
    所述代理服务器与所述后端服务器的连接的套接字采用原始套接字。
  8. 如权利要求1至6任一项所述的方法，其中，所述后端服务器根据所述客户端真实IP地址确定所述客户端的通信网络，和/或，根据所述客户端真实IP地址确定所述客户端的地理位置信息。
  9. 一种传递客户端真实IP地址的系统，其中，所述系统包括：客户端、代理服务器、后端服务器；
    所述客户端，用于向所述代理服务器发送通信请求，所述通信请求中携带有客户端IP包，所述客户端IP包包括客户端真实IP地址；
    所述代理服务器，用于建立客户端与后端服务器之间的通信连接，响应所述通信请求，对所述客户端IP包进行IP包封装，得到与所述客户端IP包对应的目标代理端IP包，所述目标代理端IP包包括所述客户端真实IP地址，基于与所述后端服务器之间的通信连接，将所述目标代理端IP包发送给所述后端服务器；
    所述后端服务器，用于对所述目标代理端IP包进行解析，得到与所述目标代理端IP包对应的客户端真实IP地址。
  10. 如权利要求9所述的系统，其中，
    所述代理服务器，具体用于根据所述客户端IP包设立与所述客户端IP包对应的待处理代理端IP包；在所述待处理代理端IP包中增加IPv6包头部，得到与所述客户端IP包对应的待封装代理端IP包；根据所述客户端IP包对所述待封装代理端IP包的所述IPv6包头部进行封装，得到与所述客户端IP包对应的目标代理端IP包。
  11. 如权利要求10所述的系统，其中，
    所述代理服务器，具体用于从所述客户端IP包中提取IP地址，得到与所述客户端IP包对应的待封装IP地址，所述待封装IP地址包括所述客户端真实IP地址，其中，所述客户端真实IP地址存储在区块链中；根据所述待封装IP地址更新所述待封装代理端IP包的所述IPv6包头部的扩展报头；将更新所述扩展报头之后的所述待封装代理端IP包作为与所述客户端IP包对应的目标代理端IP包。
  12. 如权利要求11所述的系统，其中，当所述客户端采用IPv6协议时，所述客户端真实IP地址是指IPv6的家乡地址；
    所述代理服务器，具体用于从所述客户端IP包提取家乡地址，得到与所述客户端IP包对应的IPv6的家乡地址，将与所述客户端IP包对应的IPv6的家乡地址作为所述待封装IP地址。
  13. 如权利要求11所述的系统，其中，当所述客户端采用IPv4协议时，所述客户端真实IP地址是指IPv4包的源IP地址，所述代理服务器及所述后端服务器支持IPv4 in IPv6地址转换服务；
    所述代理服务器，具体用于从所述客户端IP包提取源IP地址，得到与所述客户端IP包对应的IPv4包的源IP地址；将与所述客户端IP包对应的IPv4包的源IP地址转换成IPv6的家乡地址，得到所述待封装IP地址。
  14. 如权利要求10所述的系统，其中，
    所述代理服务器，具体用于获取代理服务器IP地址；根据所述代理服务器IP地址更新所述待封装代理端IP包的所述IPv6包头部的源地址；获取所述代理服务器与所述后端服务器之间通信连接的传输协议类型；根据所述传输协议类型更新所述待封装代理端IP包的所述IPv6包头部的下一扩展头；根据所述客户端IP包对更新之后的所述待封装代理端IP包的所述IPv6包头部进行封装，得到所述目标代理端IP包。
  15. 如权利要求9至14任一项所述的系统，其中，所述代理服务器采用Nginx服务器；
    所述代理服务器与所述后端服务器的连接的套接字采用原始套接字。
  16. 如权利要求9所述的系统，其中，所述后端服务器还用于根据所述客户端真实IP地址确定客户端的通信网络和/或根据所述客户端真实IP地址确定客户端的地理位置信息。
  17. 一种客户端设备，其中，所述客户端设备包括处理器、存储器、以及存储在所述存储器上并可被所述处理器执行的计算机程序，其中所述计算机程序被所述处理器执行时，实现如权利要求1至8中任一项所述的方法中客户端执行的步骤。
  18. 一种代理服务器，其中，所述代理服务器包括处理器、存储器、以及存储在所述存储器上并可被所述处理器执行的计算机程序，其中所述计算机程序被所述处理器执行时，实现如权利要求1至8中任一项所述的方法中代理服务器执行的步骤。
  19. 一种后端服务器，其中，所述后端服务器包括处理器、存储器、以及存储在所述存储器上并可被所述处理器执行的计算机程序，其中所述计算机程序被所述处理器执行时，实现如权利要求1至8中任一项所述的方法中后端服务器执行的步骤。
  20. 一种计算机可读存储介质，其中，所述计算机可读存储介质上存储有计算机程序，其中所述计算机程序被处理器执行时，实现如权利要求1至8中任一项所述的方法的步骤。
PCT/CN2020/099529 2020-04-29 2020-06-30 一种传递客户端真实ip地址的方法及系统 WO2021217869A1 (zh)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
CN202010354722.2 2020-04-29
CN202010354722.2A CN111586200B (zh) 2020-04-29 2020-04-29 一种传递客户端真实ip地址的方法及系统

Publications (1)

Publication Number Publication Date
WO2021217869A1 true WO2021217869A1 (zh) 2021-11-04

Family

ID=72126322

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2020/099529 WO2021217869A1 (zh) 2020-04-29 2020-06-30 一种传递客户端真实ip地址的方法及系统

Country Status (2)

Country Link
CN (1) CN111586200B (zh)
WO (1) WO2021217869A1 (zh)

Cited By (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN115550307A (zh) * 2022-09-20 2022-12-30 中国银行股份有限公司 基于区块链的业务处理方法、业务端、用户端和系统

Families Citing this family (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN112272157B (zh) * 2020-09-15 2022-07-26 杭州数梦工场科技有限公司 主机ip地址的转换方法、装置、计算机设备及存储介质
CN115242888A (zh) * 2021-04-02 2022-10-25 深圳市锐速云计算有限公司 四层tcp/udp协议转发真实ip方法及系统

Citations (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20040208164A1 (en) * 2003-04-15 2004-10-21 Keenan Sean M. Transaction card information access web service
CN103139185A (zh) * 2011-12-02 2013-06-05 中科信息安全共性技术国家工程研究中心有限公司 一种实现安全反向代理服务的方法
CN103491200A (zh) * 2012-06-13 2014-01-01 中国移动通信集团贵州有限公司 一种虚拟终端服务器传递ip地址的方法、装置及系统
CN105915658A (zh) * 2016-07-04 2016-08-31 上海优刻得信息科技有限公司 获取客户端ip地址的数据调用方法、数据传输方法
CN109361784A (zh) * 2018-12-07 2019-02-19 成都知道创宇信息技术有限公司 一种在四层代理网络环境下获取客户端真实ip的方法
CN109743197A (zh) * 2018-12-24 2019-05-10 中信百信银行股份有限公司 一种基于优先级配置的防火墙部署系统和方法

Family Cites Families (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN104468625B (zh) * 2014-12-26 2018-07-13 浙江宇视科技有限公司 拨号隧道代理装置、利用拨号隧道穿越nat的方法
CN110933190B (zh) * 2019-10-18 2022-09-27 平安科技（深圳）有限公司 一种客户端地址获取方法、装置、存储介质及计算机设备

Patent Citations (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20040208164A1 (en) * 2003-04-15 2004-10-21 Keenan Sean M. Transaction card information access web service
CN103139185A (zh) * 2011-12-02 2013-06-05 中科信息安全共性技术国家工程研究中心有限公司 一种实现安全反向代理服务的方法
CN103491200A (zh) * 2012-06-13 2014-01-01 中国移动通信集团贵州有限公司 一种虚拟终端服务器传递ip地址的方法、装置及系统
CN105915658A (zh) * 2016-07-04 2016-08-31 上海优刻得信息科技有限公司 获取客户端ip地址的数据调用方法、数据传输方法
CN109361784A (zh) * 2018-12-07 2019-02-19 成都知道创宇信息技术有限公司 一种在四层代理网络环境下获取客户端真实ip的方法
CN109743197A (zh) * 2018-12-24 2019-05-10 中信百信银行股份有限公司 一种基于优先级配置的防火墙部署系统和方法

Cited By (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN115550307A (zh) * 2022-09-20 2022-12-30 中国银行股份有限公司 基于区块链的业务处理方法、业务端、用户端和系统

Also Published As

Publication number Publication date
CN111586200A (zh) 2020-08-25
CN111586200B (zh) 2022-05-17

Similar Documents

Publication Publication Date Title
JP4579934B2 (ja) レガシーノードとｈｉｐノード間のホストアイデンティティプロトコル（ｈｉｐ）接続を確立するためのアドレス指定方法及び装置
US7418485B2 (en) System and method for addressing networked terminals via pseudonym translation
US7305230B2 (en) System, apparatus, and method for providing a mobile server
WO2021217869A1 (zh) 一种传递客户端真实ip地址的方法及系统
KR100847167B1 (ko) 단말기 및 통신 시스템
CN113824642B (zh) 发送报文的方法、网络设备及计算机可读存储介质
WO2017147772A1 (zh) 一种消息传输方法及核心网接口设备
WO2003085997A1 (en) Methods and apparatus for using a paging and location server to support session signaling
US20210120416A1 (en) Secure inter-mobile network communication
US11418951B2 (en) Method for identifying encrypted data stream, device, storage medium and system
US20100278099A1 (en) Methods for Transmitting and Receiving Data and Communication Devices
CN112073545B (zh) 使用dns来传送服务器设备的mp-tcp能力
US20230189368A1 (en) Associating transport identifiers with quality of service flows
US11909781B2 (en) Secure and transparent transport of application level protocols to non-IP data delivery communication channels
CN111510476A (zh) 通信方法、装置、计算机设备和计算机可读存储介质
US8437254B2 (en) Dynamic configuration of VoIP trunks
EP3235188B1 (en) Method for resolving a host name, related system and computer program product
TW200807988A (en) Configuring a host device by way of MMP
JP4586721B2 (ja) 通信中にアドレス変更が可能な通信装置、システム及び通信方法
EP3926932A1 (en) Duplex load balancing for massive iot applications
WO2019076025A1 (zh) 一种加密数据流的识别方法、设备、存储介质及系统
US20220338095A1 (en) Base station assisted information centric network
US10841283B2 (en) Smart sender anonymization in identity enabled networks
WO2023117046A1 (en) Network address translation
CN116782275A (zh) 一种终端设备接入核心网的控制方法及装置

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 20933723

Country of ref document: EP

Kind code of ref document: A1

NENP Non-entry into the national phase

Ref country code: DE

122 Ep: pct application non-entry in european phase

Ref document number: 20933723

Country of ref document: EP

Kind code of ref document: A1