A network data transmission control method and system

Abstract

The invention provides a network data transmission control method and system. Two socket service ends are enabled on a service network end on one side of a firewall and two socket client ends are enabled on a client network end on the other side, and then TCP link is established by using a mode allowed by the firewall. When there is need to reversely visit a target apparatus on the client networkend side, a service network end apparatus establishes connection with the second service end and tells the second client end to establish connection with the target apparatus through the first serviceend, the pre-established TCP link, and the first client end; when the connection is successfully established, the service network end side apparatus is reversely notified of the successful connectionestablishment and permission of data transmission, so that access can be performed. The application is convenient, time is saved, and the timeliness of data is not reduced. For apparatuses requiringreverse establishment of connection, the access is the same as that directly performed in a network without firewall restriction; the lower layer TCP is employed to establish data links, so that interception by a firewall can be prevented.

Description

technical field [0001] The invention relates to the field of communication technology, in particular to a network data transmission control method and system. Background technique [0002] In two or more independent or relatively independent networks, in order to ensure the security of a single network environment and other reasons, the devices in an internal network (client network side) can only actively access the external network (service network side) The device cannot allow the external network (service network side) device to access the device in the internal network (client network side). When the access rules of these networks cannot be modified due to various reasons, this reverse communication can be achieved in the following ways: [0003] 1. Redesign and implement the network access mode between these devices. Devices on the external network (service network side) no longer access the internal network (client network side), but store information in the external ...

AI Technical Summary

Problems solved by technology

[0005] However, it takes a lot of time to redesign and implement the network access method between devices, and it will change the communication between these devices from real-time communication to non-real-time asynchronous communication, resulting in a decrease in the timeliness of data

When relying on SSH to achieve reverse communication, in some cases the firewalls of the internal network and external network will disable the SSH protocol, so this method cannot be used

[0006] Therefore, how to enable devices between different networks that can only establish a one-way connection for communication to achieve reverse active access, which is convenient to use and saves time, and does not reduce the timeliness of data, is a technical problem that those skilled in the art need to solve at present

Images