Method, system and device for accessing memory cache service through SASL authentication and medium

Abstract

The invention discloses a method, a system and equipment for accessing a memory cache service through SASL authentication, and a storage medium. The method comprises the following steps: configuring aback-end storage of an OpenStack cloud platform as the memory cache service; configuring a resource packet in the OpenStack cloud platform to support access to the memory cache service in an SASL authentication mode, configuring an authentication user in a configuration file of the OpenStack cloud platform based on the resource packet, and starting an access process; responding to an authentication request received by the access process, and matching the authentication request with an authentication user in the configuration file; and in response to successful matching between the authentication request and the authentication user in the configuration file, returning session connection to the authentication request, and establishing a channel for accessing the memory cache service based on the session connection. According to the scheme provided by the invention, through an SASL authentication mode, the situation that the sensitive data of the user is accessed by the client without passing the authentication is avoided, and the security vulnerability of the OpenStack cloud platform is made up.

Description

technical field [0001] The present invention relates to the field of cloud platforms, and more specifically refers to a method, system, computer equipment and readable medium for accessing memory cache services through SASL authentication. Background technique [0002] With the large-scale application of OpenStack cloud platform technology, users have put forward higher requirements for the security of cloud platform runtime data. How to ensure that the cloud platform can run efficiently while ensuring that the sensitive data inside the cloud platform is not leaked, Gaining importance. [0003] In the OpenStack project, the database is generally used to store the data generated by the cloud platform, but the frequent access to the database by a large number of service components will cause great pressure on the database service, and is not conducive to improving the operating efficiency of the cloud platform. The current practice is to use the memory cache system to cache t...

AI Technical Summary

Problems solved by technology

When components such as computing, storage, and network of OpenStack use the memory cache service, because the memory cache service does not enable any authentication mechanism by default, the client can read and modify the cache content without authentication; because the memory cache service caches a large number of Openstack cloud Sensitive information of the platform, such as tokens, available domains, etc., if the information can be accessed without authentication, it will cause the risk of information leakage and tampering, which poses a huge potential threat to the safe operation of the entire OpenStack cloud platform

Images