Data transmission method and equipment

Abstract

The invention discloses a data transmission method and equipment. The data transmission method comprises the following steps of: determining that data is sent to receiving end equipment through firewall equipment by transmitting end equipment, wherein the data comprises an IP (Internet Protocol) layer, a TCP (Transmission Control Protocol) layer or a UDP (User Datagram Protocol) layer and the TCP layer or the UDP layer carries a port identification of the data; acquiring the port identification allowed by the firewall equipment to pass by the transmitting end equipment; copying the port identification of the TCP layer or the UDP layer to the IP layer; modifying the port identification of the TCP layer or the UDP layer into a port identification allowed by the firewall equipment to pass; and transmitting the data modified by the port identification to the receiving end equipment by the transmitting end equipment through the firewall equipment. In the data transmission method and equipment, the transmission efficiency of the data can be improved.

Description

technical field [0001] The present invention relates to the field of communication technology, in particular to a data transmission method and equipment. Background technique [0002] In the prior art, in order to ensure network security, a firewall device needs to be deployed in the network. For example, when the Internet and the intranet are interconnected, or when two networks with different security levels are interconnected, a firewall device needs to be deployed between the two networks, such as figure 1 As shown in , it is a schematic diagram of the deployment when the Internet and the intranet are interconnected. In order to protect the security of the network to the greatest extent, if the firewall device does not match the rules, the data cannot pass through the firewall device. Among them, the rules set on the firewall device are usually allowed port numbers, that is, when the destination port number of the data is the allowed port number, the data can pass thro...

AI Technical Summary

Problems solved by technology

When the terminal in IP network 1 needs to access the terminal in IP network 2, the data needs to pass through two firewall devices, assuming that the destination port number of the terminal sending data is 10, then firewall device 1 and firewall device 2 need to be set to allow port number 10 to pass through Obviously, when there are a large number of firewall devices, the configuration process is very complicated and inefficient; and if the firewall device cannot set a rule that allows port number 10 to pass through, the data will not be sent successfully

Images