Message processing method, service cluster and computer equipment

Abstract

The invention relates to a message processing method, a service cluster and computer equipment, and relates to the technical field of network communication. The message processing method is applied to a first service node in a service cluster. The method comprises the following steps: receiving a network message through a first service port; the first service node and a second service node in the service cluster jointly configure a first service port; the first service provided by the first service node is different from the second service provided by the second service node; judging whether the network message meets a message processing condition of a target service node or not to obtain a node judgment result; the target service node comprises at least one of the first service node and the second service node; and under the condition that the node judgment result is that the network message meets the message processing condition of the second service node, sending the network message to the second service node so as to provide a second service through the second service node. By adopting the method, multiplexing of a plurality of service ports can be realized, and the complexity of service management is reduced.

Description

Technical Field

[0001] The present application relates to the field of network communication technology, and in particular to a message processing method, a service cluster and a computer device. Background Art

[0002] With the rapid development of modern digitalization, the demand for network services from enterprises and individuals has exploded. Whether it is cloud computing, the Internet of Things, or big data analysis and artificial intelligence applications, a large number of network services are needed to support them.

[0003] In the related art, network services (referred to as services for short) usually need to configure corresponding service ports for communication. However, in the traditional service port allocation method, there is a problem of complex management of the service ports allocated to each service. Summary of the invention

[0004] Based on this, it is necessary to provide a message processing method, a service cluster and a computer device to address the above technical problems, which can realize multiplexing of multiple service ports and reduce the complexity of service management.

[0005] In a first aspect, the present application provides a message processing method, which is applied to a first service node in a service cluster, and the method includes:

[0006] receiving a network message through a first service port; the first service node and a second service node in the service cluster jointly configure the first service port; a first service provided by the first service node is different from a second service provided by the second service node;

[0007] Determine whether the network message meets the message processing condition of the target service node, and obtain a node determination result; the target service node includes at least one of the first service node and the second service node;

[0008] If the node determines that the network message meets the message processing condition of the second service node, the network message is sent to the second service node to provide the second service through the second service node.

[0009] In one embodiment, the determining whether the network message satisfies the message processing condition of the target service node to obtain the determination result includes:

[0010] Performing type parsing on the network message according to a target service protocol, and obtaining a message type of the network message; the target service protocol includes at least one of a first service protocol corresponding to the first service node and a second service protocol corresponding to the second service node;

[0011] Determine whether the message type meets the message type corresponding to the target service protocol, and obtain a type determination result;

[0012] The node judgment result is determined according to the type judgment result.

[0013] In one embodiment, determining the node judgment result according to the type judgment result includes:

[0014] When the type judgment result is that the message type does not satisfy the message type corresponding to the first service protocol, or when the type judgment result is that the message type satisfies the message type corresponding to the second service protocol, determining that the node judgment result is that the network message satisfies the message processing condition of the second service node;

[0015] When the type judgment result is that the message type satisfies the message type corresponding to the first service protocol, the node judgment result is determined according to the network message and the first service protocol.

[0016] In one embodiment, determining the node judgment result according to the network message and the first service protocol includes:

[0017] Performing field parsing on the network message according to the first service protocol, and acquiring a target field of the network message;

[0018] querying whether there is a session that complies with the first service agreement according to the target field, and obtaining a session query result;

[0019] When the session query result is that the session query result exists, performing service analysis on the network message according to the first service protocol, and generating a processing result of the network message;

[0020] When the session query result is not present or the processing result is failure, it is determined that the node judgment result is that the network message meets the message processing condition of the second service node.

[0021] In one embodiment, determining the node judgment result according to the network message and the first service protocol includes:

[0022] Performing service analysis on the network message according to the first service protocol, and generating a processing result of the network message;

[0023] In a case where the processing result is failure, it is determined that the node judgment result is that the network message meets the message processing condition of the second service node.

[0024] In one embodiment, the service cluster further includes a third service node, the third service node is configured with a second service port, the second service port is different from the first service port, and the receiving the network message through the first service port includes:

[0025] The network message sent by the third service node through the second service port is received through the first service port; wherein the network message is sent by the third service node when the destination port of the network message is the first service port.

[0026] In one of the embodiments, the first service node is a first encryption service node, and the first encryption service node is used to provide a first encryption service;

[0027] The second service node includes a second encryption service node, and the second encryption service node is used to provide a second encryption service; wherein the first encryption service and the second encryption service are different.

[0028] In a second aspect, the present application provides a message processing method, which is applied to a second service node in a service cluster, and the method includes:

[0029] Receive a network message sent by a first service node in the service cluster; the first service node and the second service node jointly configure a first service port; the first service provided by the first service node is different from the second service provided by the second service node; the network message is received by the first service node through the first service port, and it is determined whether the network message meets the message processing condition of the target service node, and a node determination result is obtained, and the network message is sent when the node determination result is that the network message meets the message processing condition of the second service node; the target service node includes at least one of the first service node and the second service node;

[0030] The network message is processed to provide the second service.

[0031] In a third aspect, the present application provides a service cluster, the service cluster comprising a first service node and a second service node, the first service node and the second service node jointly configure a first service port, and the first service provided by the first service node is different from the second service provided by the second service node; wherein,

[0032] The first service node is used to receive a network message through the first service port, determine whether the network message meets the message processing condition of the target service node, obtain a node determination result, and send the network message to the second service node if the node determination result is that the network message meets the message processing condition of the second service node; the target service node includes at least one of the first service node and the second service node;

[0033] The second service node is used to provide the second service according to the network message.

[0034] In a fourth aspect, the present application provides a computer device, including a memory and a processor, wherein the memory stores a computer program, and the processor implements the steps of the above method when executing the computer program.

[0035] The message processing method, service cluster and computer device receive network messages through the first service port, judge whether the network messages meet the message processing conditions of the target service node, and obtain the node judgment result. The target service node includes at least one of the first service node and the second service node. When the node judgment result is that the network message meets the message processing conditions of the second service node, the network message is sent to the second service node to provide the second service through the second service node. The first service node and the second service node in the service cluster jointly configure the first service port. The first service provided by the first service node is different from the second service provided by the second service node. The identification of the network message is realized. That is, when it is identified that the network message is used to request the first service, the network message is processed by the first service node. The first service node and the second service node process the network message, and when it is identified that the network message is used to request the second service, the network message is sent to the second service node for processing through the first service node. Moreover, there is no need to set up an additional service port between the first service node and the second service node to transmit the network message. Therefore, the first service node and the second service node reuse the first service port, that is, the first service node and the second service node share the first service port to communicate with other service nodes in the service cluster, and the reuse of the same port by at least two services is realized, the number of service ports is reduced, the port configuration process is simplified, the management complexity of the service port is reduced, the security risks caused by exposing multiple service ports are reduced, the operation and maintenance costs and resources are reduced, the system resource utilization rate is improved, and the flexibility is improved. BRIEF DESCRIPTION OF THE DRAWINGS

[0036] FIG1 is a schematic diagram of the structure of a service cluster in one embodiment;

[0037] FIG2 is a flow chart of a message processing method according to an embodiment;

[0038] FIG3 is a schematic diagram of the structure of a message processing system in one embodiment;

[0039] FIG4 is a second flow chart of a message processing method in one embodiment;

[0040] FIG5 is a third flow chart of a message processing method in an embodiment;

[0041] FIG6 is a fourth flow chart of a message processing method in one embodiment;

[0042] FIG7 is a fifth flow chart of a message processing method in one embodiment;

[0043] FIG8 is a sixth flow chart of a message processing method in one embodiment;

[0044] FIG9 is a structural block diagram of a message processing device in one embodiment;

[0045] FIG10 is a structural block diagram of a message processing device in another embodiment;

[0046] FIG. 11 is a diagram showing the internal structure of a computer device in one embodiment. DETAILED DESCRIPTION

[0047] In order to make the purpose, technical solution and advantages of the present application more clearly understood, the present application is further described in detail below in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are only used to explain the present application and are not used to limit the present application.

[0048] It is understood that the terms "first", "second", etc. used in this application may be used herein to describe various contents, but these contents are not limited by these terms. These terms are only used to distinguish the first content from another content. For example, without departing from the scope of this application, the first service node may be referred to as the second service node, and similarly, the second service node may be referred to as the first service node. Both the first service node and the second service node are service nodes, but they are not the same service node.

[0049] In the related art, each service is separately configured with an independent service port. This allocation method has the problem of complex management. In addition, as the number of services increases, the number of service ports also increases, and it becomes more difficult to manage and monitor these service ports, and the operation and maintenance costs and human resource investment also increase. The traditional port allocation method often leads to low resource utilization, resulting in resource waste and low efficiency.

[0050] In addition, the exposure of multiple service ports expands the attack surface and increases potential security vulnerabilities, which can be easily exploited by malicious attackers to launch network attacks. By scanning open ports, attackers can discover and exploit security vulnerabilities to launch attacks, especially distributed denial of service (DDoS) attacks. Using multiple ports to launch attacks simultaneously may cause network paralysis. Ports that are not strictly access controlled may be exploited by attackers to bypass security measures and conduct unauthorized access, or even invade the system through known or unknown vulnerabilities, steal data or spread malware, increasing the risk of internal network infection and posing a high security risk.

[0051] Based on the above, the embodiments of the present application provide a message processing method, apparatus, service cluster 10 and computer equipment, which reduce the number of service ports, reduce the complexity of service port management, and reduce security risks by multiplexing service ports.

[0052] The message processing method provided in the embodiment of the present application can be applied to the service cluster 10 shown in Figure 1. The service cluster 10 is a cluster built based on VPP (Vector Packet Processing). The service cluster 10 includes a first service node 11 and a second service node 12. The first service node 11 and the second service node 12 are connected. In addition, the first service node 11 and the second service node 12 jointly configure a first service port. The first service provided by the first service node 11 and the second service provided by the second service node 12 are different. Among them, the first service node 11 receives the network message 20 through the first service port, and determines whether the network message 20 meets the message processing condition of the target service node, and obtains the node judgment result. When the node judgment result is that the network message 20 meets the message processing condition of the second service node 12, the network message 20 is sent to the second service node 12 to provide the second service through the second service node 12, thereby realizing the multiplexing of the first service port by the first service node 11 and the second service node 12. Therefore, there is no need to set separate service ports for the first service node 11 and the second service node 12, thereby reducing the number of service ports and reducing the management complexity of the service ports.

[0053] In one embodiment, as shown in FIG. 2 , a message processing method is provided, which is described by taking the method applied to the first service node 11 in FIG. 1 as an example, and includes the following steps S202 to S206 .

[0054] S202: receiving a network message through a first service port; the first service node and a second service node in the service cluster jointly configure the first service port; the first service provided by the first service node is different from the second service provided by the second service node.

[0055] Service cluster 10 is a cluster built on VPP. Each service node in the cluster is used to provide network services. VPP is an open source, high-performance network data plane processing software. VPP runs in multiple Linux user spaces. The main architectures include x86, ARM and Power architectures. It aims to provide flexible and high-performance network packet processing solutions suitable for various network applications and scenarios.

[0056] Exemplarily, the port type of the first service port is a UDP (User Datagram Protocol Port) port. The specific port number of the first service port can be configured according to actual application scenarios, for example, port 500, which is not specifically limited here.

[0057] The first service node 11 is used to provide a first service, and the second service node 12 is used to provide a second service, and the first service is different from the second service. It should be noted that the first service node 11 can also provide other services different from the second service, and the second service node 12 can also provide other services different from the first service, which are not specifically limited here.

[0058] Exemplarily, the first service node 11 includes a first encryption service node, which is used to provide a first encryption service, such as a Wireguard service; the second service node 12 includes a second encryption service node, which is used to provide a second encryption service, such as an IKEv2 service.

[0059] Exemplarily, as shown in FIG3 , the service cluster 10 further includes a third service node 13, and the third service node 13 is configured with a second service port; wherein the first service port and the second service port are different, and the first service provided by the first service node 11, the second service provided by the second service node 12, and the third service provided by the third service node 13 are different. Based on this, in the application, the first service node 11 can receive through the first service port the network message 20 sent by the third service node 13 through the second service port.

[0060] S204: Determine whether the network message meets the message processing condition of the target service node, and obtain a node determination result.

[0061] The target service node includes at least one of the first service node 11 and the second service node 12. The message processing condition of the first service node 11 is different from the message processing condition of the second service node 12. The message processing condition of each service node is preset and can be set according to the first service and the second service respectively.

[0062] Exemplarily, the target service node includes the first service node 11, then it is determined whether the network message 20 meets the message processing conditions of the first service node 11 to obtain a node judgment result; in this case, the node judgment result includes that the network message 20 meets the message processing conditions of the first service node 11, or that the network message 20 does not meet the message processing conditions of the first service node 11.

[0063] In another exemplary embodiment, the target service node includes a second service node 12, then it is determined whether the network packet 20 meets the packet processing conditions of the second service node 12 to obtain a node judgment result; in this case, the node judgment result includes that the network packet 20 meets the packet processing conditions of the second service node 12, or that the network packet 20 does not meet the packet processing conditions of the second service node 12.

[0064] In another exemplary embodiment, the target service node includes a first service node 11 and a second service node 12, then it is determined whether the network packet 20 meets the packet processing condition of the first service node 11, and it is determined whether the network packet 20 meets the packet processing condition of the second service node 12, to obtain a node judgment result; in this case, the node judgment result includes that the network packet 20 meets the packet processing condition of the first service node 11 and does not meet the packet processing condition of the second service node 12, or, the network packet 20 does not meet the packet processing condition of the first service node 11 and meets the packet processing condition of the second service node 12, or, the network packet 20 does not meet the packet processing condition of the first service node 11 and does not meet the packet processing condition of the second service node 12.

[0065] S206: When the node determines that the network message meets the message processing condition of the second service node, the network message is sent to the second service node to provide the second service through the second service node.

[0066] If the node determines that the network message 20 meets the message processing condition of the second service node 12, it indicates that the network message 20 may be used to request the second service. In this case, the first service node 11 directly sends the network message 20 to the second service node 12, and the second service node 12 processes the network message 20 to provide the second service. The transmission of the network message 20 between the first service node 11 and the second service node 12 does not need to pass through the service port.

[0067] Exemplarily, the node judgment result is that the network packet 20 meets the message processing conditions of the first service node 11. It can be understood that the node judgment result is that the network packet 20 does not meet the message processing conditions of the second service node 12. In this case, it indicates that the network packet 20 may be used to request the first service. In this case, the first service node 11 processes the network packet 20 to provide the first service.

[0068] As another example, when the node judgment result is that the network packet 20 does not meet the message processing conditions of the first service node 11, and the node judgment result is that the network packet 20 does not meet the message processing conditions of the second service node 12, it indicates that the service requested by the network packet 20 does not include the first service and the second service. In this regard, the first service node 11 can delete the network packet 20 and wait for the next network packet 20.

[0069] It should be noted that, in the embodiment of the present application, determining whether the network message 20 meets the message processing conditions of the target service node is intended to identify the network message 20, or in other words, to identify whether the service type requested by the network message 20 is the first service or the second service; if the network message 20 is used to request the first service, the network message 20 is directly processed by the first service node 11; if the network message 20 is used to request the second service, the first service node 11 sends the network message 20 to the second service node 12, and the network message 20 is processed by the second service node 12.

[0070] The message processing method receives a network message 20 through a first service port, determines whether the network message 20 satisfies a message processing condition of a target service node, and obtains a node judgment result. The target service node includes at least one of a first service node 11 and a second service node 12. When the node judgment result is that the network message 20 satisfies the message processing condition of the second service node 12, the network message 20 is sent to the second service node 12 to provide a second service through the second service node 12. The first service node 11 and the second service node 12 in the service cluster 10 jointly configure a first service port. The first service provided by the first service node 11 is different from the second service provided by the second service node 12, thereby realizing the identification of the network message 20. That is, when it is identified that the network message 20 is used to request the first service, the network message 20 is processed by the first service node 11; and when it is identified that the network message 20 is used to request the second service, the network message 20 is sent to the second service node 12 for processing by the first service node 11, and there is no need to set up an additional service port between the first service node 11 and the second service node 12 to transmit the network message 20. Therefore, the first service node 11 and the second service node 12 use the first service port multiplexing, that is, the first service node 11 and the second service node 12 share the first service port to communicate with other service nodes in the service cluster 10, and the multiplexing of the same port by at least two services is realized, which reduces the number of service ports, simplifies the port configuration process, reduces the management complexity of the service port, reduces the security risks caused by exposing multiple service ports, reduces the operation and maintenance costs and resources, improves the system resource utilization, and improves flexibility.

[0071] It should be noted that the message processing method provided in the embodiment of the present application takes two services reusing the same port as an example. In actual applications, three or more services may also reuse the same port, and the message processing logic is the same. For example, the service cluster 10 also includes a fourth service node that reuses the first service port. Then, after receiving the network message 20, the first service node 11 can determine which service node among the first service node 11, the second service node 12 and the third service node 13 the network message 20 meets the message processing condition, and send it to the corresponding service node that meets the message processing condition according to the node judgment result. For another example, the first service node 11 determines whether the message processing condition of the first service node 11 is met, and sends it to the second service node 12 if it is not met, and determines whether the message processing condition of the third service node 13 is met through the second service node 12, and sends it to the third service node 13 if it is not met, that is, the node flow direction method is used to judge node by node. In the application, any suitable method can be used to identify the network message 20, which is not limited here.

[0072] In one embodiment, as shown in FIG. 4 , step S204 , determining whether the network message 20 satisfies the message processing condition of the target service node, and obtaining a determination result, includes the following steps S402 to S406 .

[0073] S402: Perform type parsing on the network message according to the target service protocol, and obtain the message type of the network message; wherein the target service protocol includes at least one of a first service protocol corresponding to the first service node and a second service protocol corresponding to the second service node.

[0074] S404: Determine whether the message type meets the message type corresponding to the target service protocol, and obtain a type determination result.

[0075] S406: Determine the node judgment result according to the type judgment result.

[0076] The target service protocol corresponds to the target service node. Exemplarily, the target service protocol includes a first service protocol. In this case, the network message 20 is parsed according to the first service protocol, and the message type of the network message 20 is obtained, and it is determined whether the message type meets the message type corresponding to the first service protocol, and a type judgment result is obtained, and a node judgment result is determined according to the type judgment result. Among them, the type judgment result includes that the message type meets the message type corresponding to the first service protocol, or that the message type does not meet the message type corresponding to the first service protocol.

[0077] In another exemplary embodiment, the target service protocol includes a second service protocol. In this case, the network message 20 is parsed according to the second service protocol, and the message type of the network message 20 is obtained. It is determined whether the message type meets the message type corresponding to the second service protocol, and a type judgment result is obtained. The node judgment result is determined according to the type judgment result. The type judgment result includes that the message type meets the message type corresponding to the second service protocol, or that the message type does not meet the message type corresponding to the second service protocol.

[0078] In another exemplary embodiment, the target service protocol includes a first service protocol and a second service protocol. In this case, the network message 20 is parsed according to the first service protocol and the second service protocol, and the message type of the network message 20 is obtained. It is determined whether the message type satisfies the message type corresponding to the first service protocol or the message type corresponding to the second service protocol, and a type judgment result is obtained. The node judgment result is determined according to the type judgment result. The type judgment result includes that the message type satisfies the message type corresponding to the first service protocol, or that the message type satisfies the message type corresponding to the second service protocol.

[0079] Taking the example that the first service node 11 includes the first encryption service node and the target service protocol includes the first encryption service protocol, step S402, performing type parsing on the network message 20 according to the target service protocol and obtaining the message type of the network message 20, may include: performing type parsing on the network message 20 according to the first encryption service protocol, obtaining the message header of the network message 20, and obtaining the message type of the network message 20 according to the message header. For example, the first encryption service node includes a Wireguard service node, which is used to provide Wireguard services. The first encryption service protocol includes the Wireguard protocol. The message types included in the Wireguard protocol include but are not limited to handshake initiation (Handshakeinitiation), handshake response (Handshake response), handshake cookie (Handshake cookie) and data (Data) and other message types; in the application, the network message 20 is type parsed according to the Wireguard protocol, the Wireguard message header of the network message 20 is obtained, and the message type of the network message 20 is obtained according to the Wireguard message header, so as to determine whether the message type satisfies the handshake initiation (Handshake initiation), handshake response (Handshake response), handshake cookie (Handshake cookie) and data (Data) and other message types corresponding to the Wireguard protocol.

[0080] The above-mentioned message processing method performs type parsing on the network message 20 according to the target service protocol, obtains the message type of the network message 20, judges whether the message type meets the message type corresponding to the target service protocol, obtains the type judgment result, and determines the node judgment result according to the message type; wherein, the target service protocol includes at least one of the first service protocol corresponding to the first service node 11 and the second service protocol corresponding to the second service node 12. In this method, the first service node 11 can identify the network message 20 according to the first service protocol and / or the second service protocol, and provide a technical basis for realizing that the first service node 11 and the second service node 12 share the first service port, so as to achieve the purpose of reducing management complexity, cost and security risks.

[0081] In one embodiment, as shown in FIG. 5 , step S406 , determining the node judgment result according to the type judgment result, includes the following steps S502 and S504 .

[0082] S502: When the type judgment result is that the message type does not satisfy the message type corresponding to the first service protocol, or the type judgment result is that the message type satisfies the message type corresponding to the second service node, determine that the node judgment result is that the network message satisfies the message processing condition of the second service node.

[0083] If the type judgment result is that the message type does not satisfy the message type corresponding to the first service protocol, or the type judgment result is that the message type satisfies the message type corresponding to the second service node 12, it indicates that the network message 20 may be used to request the second service. In this case, the first service node 11 sends the network message 20 to the second service node 12, and the second service node 12 processes the network message 20 to provide the second service.

[0084] S504: When the type judgment result is that the message type satisfies the message type corresponding to the first service node, determine the node judgment result according to the network message and the first service protocol.

[0085] When the type judgment result is that the message type is the message type corresponding to the first service node 11, it indicates that the network message 20 may be used to request the first service. In this case, the first service node 11 can further process the network message 20 according to the first service protocol to determine the node judgment result. This process can be understood as a bottom-up judgment process, which can avoid the situation where the network message 20 cannot be accurately distinguished as a request for the first service or the second service due to the message type, which helps to improve the recognition accuracy of the network message 20 and improve the reliability of message processing.

[0086] The above-mentioned message processing method, when the type judgment result is that the message type satisfies the message type corresponding to the second service node 12, determines that the node judgment result is that the network message 20 satisfies the message processing condition of the second service node 12, thereby sending the network message 20 to the second service node 12, so that the second service node 12 provides the second service according to the network message 20, thereby realizing effective identification of the service type requested by the network message 20 and improving the processing efficiency of the network message 20; and, when the type judgment result is that the message type satisfies the message type corresponding to the first service node 11, the network message 20 is further processed according to the first service protocol to determine the node judgment result, thereby improving the identification accuracy of the network message 20, and providing a technical basis and guarantee for the first service node 11 and the second service node 12 to share the first service port.

[0087] In one embodiment, as shown in FIG. 6 , step S504 , determining a node judgment result according to the network message 20 and the first service protocol, includes the following steps S602 to S608 .

[0088] S602: Perform field parsing on the network message according to the first service protocol, and obtain a target field of the network message.

[0089] The target field is at least one of all the fields of the network message 20. The target field can be specifically determined according to factors such as the format of the network message 20 and the first service protocol, and is not limited here. Exemplarily, the target field includes at least part of the fields of the message header of the network message 20. Taking the first service protocol as the Wireguard protocol as an example, the target field can be the receiver field of the Wireguard message header of the network message 20.

[0090] S604: Query whether there is a session that complies with the first service protocol according to the target field, and obtain a session query result.

[0091] The session query result is used to indicate whether the first service node 11 has a session that complies with the first service protocol. The session query result includes whether the first service node 11 has a session that complies with the first service protocol, or whether the first service node 11 does not have a session that complies with the first service protocol.

[0092] Taking the Wireguard protocol as the first service protocol as an example, in the application, the first encryption service node, such as the Wireguard service node, can query whether there is a session that complies with the Wireguard protocol based on the receiver field on the VPP.

[0093] S606: When the session query result is that the session exists, perform service analysis on the network message according to the first service protocol, and generate a processing result of the network message.

[0094] If the session query result is "existent", it indicates that the network message 20 may be used to request the first service. In this regard, the network message 20 is further parsed according to the first service protocol to provide the first service and generate a corresponding processing result. The processing result is used to indicate whether the first service node 11 successfully processes the network message 20 to provide the first service. The processing result includes success or failure (for example, the network message 20 fails to be decrypted or some field values ​​do not match).

[0095] S608: When the session query result is not present or the processing result is failure, the determination node determines that the network message meets the message processing condition of the second service node.

[0096] When the session query result is not present, or the processing result is failure, it indicates that the service type requested by the network message 20 is not the first service, but may be the second service. In this regard, the determination node determines that the network message 20 meets the message processing conditions of the second service node 12, and thus sends the network message 20 to the second service node 12, and the second service node 12 processes the network message 20 to provide the second service.

[0097] Exemplarily, when the processing result is successful, it indicates that the first service node 11 successfully provides the first service according to the network message 20, and the network service requested by the network message 20 is not the second service. In this regard, the first service node 11 can delete the network message 20 and wait for the next network message 20.

[0098] In the above-mentioned message processing method, when the type judgment result is that the message type meets the message type corresponding to the first service node 11, the network message 20 is field parsed according to the first service protocol, and the target field of the network message 20 is obtained. It is queried whether there is a session that complies with the first service protocol according to the target field, and the session query result is obtained. When the session query result is that it exists, the network message 20 is service parsed according to the first service protocol, and the processing result of the network message 20 is generated. When the session query result is that it does not exist, or the processing result is a failure, it is determined that the node judgment result is that the network message 20 meets the message processing condition. The method performs field parsing and service parsing on the network message 20 according to the first service protocol, increases the identification method of the network message 20 from the dimensions of session query and message processing, realizes the bottom-up identification of the network service type requested by the network message 20, improves the identification accuracy of the network message 20, and provides a technical basis and guarantee for the first service node 11 and the second service node 12 to share the first service port.

[0099] In one embodiment, as shown in FIG. 7 , step S504 , determining a judgment result according to the network message 20 and the first service protocol, includes the following steps S702 and S704 .

[0100] S702: Perform service analysis on the network message according to the first service protocol, and generate a processing result of the network message.

[0101] S704: When the processing result is failure, determine that the judgment result is that the network message meets the message processing condition of the second service node.

[0102] Step S702 is similar to the aforementioned step S606, and step S704 is similar to step S608, except that in this embodiment, when the type judgment result is that the message type is the message type corresponding to the first service node 11, the first service node 11 directly performs service analysis on the network message 20 according to the first service protocol and generates a corresponding processing result, that is, no field analysis is performed. In the application, whether field analysis is required can be determined based on factors such as the network message 20, the first service protocol, the second service protocol, the first service and the second service, which are not specifically limited here.

[0103] It should be noted that the purpose of performing type parsing, field parsing and service parsing on the network message 20 in the present application is to identify whether the network service type requested by the network message 20 is the first service or the second service. When the network message 20 requests the first service, the network message 20 is processed by the first service node 11; and when the network message 20 requests the second service, the network message 20 is processed by the second service node 12, thereby achieving the purpose of the first service node 11 and the second service node 12 sharing the first service port.

[0104] The above-mentioned message processing method, when the type judgment result is that the message type meets the message type corresponding to the first service node 11, performs service analysis on the network message 20 according to the first service protocol and generates a processing result of the network message 20. When the processing result is failure, it is determined that the judgment result is that the network message 20 meets the message processing condition of the second service node 12. This method performs service analysis on the network message 20 according to the first service protocol, adds an identification method for the network message 20 from the dimension of message processing, realizes the bottom-up identification of the network service type requested by the network message 20, improves the identification accuracy of the network message 20, and provides a technical basis and guarantee for the first service node 11 and the second service node 12 to share the first service port.

[0105] Please continue to refer to Figure 3. In one embodiment, the service cluster 10 further includes a third service node 13, and the third service node 13 is configured with a second service port, and the second service port is different from the first service port. Step S202, receiving the network message 20 through the first service port, includes: receiving the network message 20 sent by the third service node 13 through the second service port through the first service port. The network message 20 is sent by the third service node 13 when the destination port of the network message 20 is the first service port.

[0106] Exemplarily, the third service node 13 includes an IPv4 / 6 (Internet Protocol Version 4 / 6) UDP look-up service node.

[0107] In the application, the third service node 13 determines whether the destination port of the network message 20 is the first service port. If so, the network message 20 is sent to the first service port through the second service port; if not, it is sent to other service nodes in the service cluster 10 for processing.

[0108] It should be noted that, as shown in FIG3 , the service cluster 10 includes, in addition to the first service node 11 , the second service node 12 and the third service node 13 , other service nodes may also be included. For example, the early service nodes include but are not limited to DPDK (Data Plane Development Kit, accelerated data packet processing) service node 14 , ETH (Ethernet) service node 15 , IPv4 / 6 UDP input (Input) service node 16 , and other service nodes such as ARP (Address Resolution Protocol, Address Resolution Protocol) service node, etc., which can be specifically configured according to the actual application scenario and are not limited here.

[0109] In one embodiment, the first service node 11 is a first encryption service node, and the first encryption service node is used to provide a first encryption service. Exemplarily, the first encryption service node includes a Wireguard service node, and the Wireguard service node is used to provide a Wireguard service. Wireguard is a VPN (Virtual Private Network) protocol that uses encryption algorithms (such as ChaCha20 and Poly1305) to ensure data security, is easy to configure and audit, and supports multiple platforms.

[0110] The second service node 12 includes a second encryption service node, which is used to provide a second encryption service; wherein the first encryption service and the second encryption service are different. Exemplarily, the second encryption service node includes an IKEv2 service node, which is used to provide an IKEv2 service. IKEv2 (Internet Key Exchange version 2) is a protocol for establishing an IPsec (Internet Protocol Security) security association. It is an improved version of the IKE protocol and is intended to provide a more efficient and flexible key exchange and identity authentication mechanism.

[0111] Based on the above, the message processing method provided in the embodiment of the present application can realize the sharing of the first service port by the first encryption service node such as the Wireguard service node and the second encryption service node such as the IKEv2 service node, so that the first encryption service such as the Wireguard service and the second encryption service such as the IKEv2 service reuse the first port, reducing the number of encryption service ports, simplifying the port configuration process, reducing the management complexity of the service port, reducing the security risks caused by exposing multiple service ports, reducing operation and maintenance costs and resources, improving system resource utilization, and improving flexibility.

[0112] In one embodiment, a message processing method is provided, and the method is applied to a system consisting of a service cluster 10 and a network interface card (NIC) 30 constructed based on VPP as shown in FIG3 as an example for explanation. Among them, the first service node 11 is a Wireguard service node, and the second service node is an IKEv2 service node. As shown in FIG8, the message processing method includes the following steps S802 to S822.

[0113] S802: The network interface card is taken over by the VPP, and the network message enters the service cluster from the network interface card.

[0114] S804: The network message is processed by the previous service node.

[0115] Among them, the early service nodes include DPDK service node 14, ETH service node 15 and IPv4 / 6 UDP input service node 16.

[0116] S806: The IPv4 / 6 UDP input service node determines whether the network message is a UDP message. If not, execute step S808; if yes, execute step S810.

[0117] S808: Send the network message to other service nodes in the service cluster for processing.

[0118] S810: The IPv4 / 6 UDP input service node sends the network message to the IPv4 / 6 UDP query service node for processing.

[0119] S812: The IPv4 / 6 UDP query service node determines whether the destination port of the network message is an encryption service port. If not, execute step S808; if yes, execute step S814. For example, the encryption service port is port 500.

[0120] S814: The IPv4 / 6 UDP query service node sends the network message to the encryption service port through the corresponding port.

[0121] S816: The Wireguard service node determines whether the message type of the network message is the message type corresponding to the Wireguard protocol. If not, step S818 is executed; if yes, step S820 is executed.

[0122] The Wireguard service node performs type analysis on the network message 20 according to the Wireguard protocol, obtains the Wireguard message header, and then determines whether the message type is the message type corresponding to the Wireguard protocol. According to the Wireguard protocol, the message types include Handshake initiation, Handshake response, Handshakecookie, and Data.

[0123] S818: The Wireguard service node sends the network message to the IKEv2 service node, which processes the network message and completes the IKEv2 protocol signaling interaction.

[0124] S820: The Wireguard service node obtains the receiver field of the Wireguard message header according to the Wireguard protocol, and queries whether there is a corresponding Wireguard session according to the receiver field. If not, execute step S818; if yes, execute step S820.

[0125] S822: The Wireguard service node processes the network message and determines whether the network message is successfully processed. If not, execute step S818; if yes, end the process.

[0126] It should be noted that the above-mentioned Wireguard service node and IKEv2 service node reuse the encrypted service port 500, and the Wireguard service node and IKEv2 service node do not need to set up a service port to communicate directly. The Wireguard service node and other service nodes, and other service nodes communicate with each other through their respective corresponding independent ports.

[0127] The above message processing method, combined with the node flow technology of VPP, realizes that the Wireguard service and IKEv2 service based on VPP share the same UDP port, avoiding the security risks brought by exposing multiple ports, and at the same time reduces the operation and maintenance costs caused by mapping multiple service ports and improves the utilization rate of service ports. In addition, the Wireguard service node can distinguish whether the network message is a Wireguard protocol message or an IKEv2 protocol message according to the Wireguard protocol and the IKEv2 protocol, realizes the identification function of different encryption protocol messages, and provides a technical basis for Wireguard and IKEv2 services to share the same UDP port. In addition, if the message processing logic fails to be processed according to the Wireguard protocol, the Wireguard service node is added with a function of sending it to the IKEv2 service node for processing, which provides a bottom-up mechanism for Wireguard and IKEv2 to share the same UDP port and ensures the reliability of the shared port. This method enables the two encrypted services, Wireguard and IKEv2, to share the same service port, avoiding the security risks brought by exposing multiple ports, and at the same time reduces the operation and maintenance costs caused by mapping multiple service ports and improves the utilization rate of service ports.

[0128] Based on the same inventive concept, the embodiment of the present application also provides a message processing method applied to the second service node in the service cluster. The implementation scheme for solving the problem provided by the method is similar to the implementation scheme recorded in the above method, so the specific limitations in one or more message processing method embodiments provided below can refer to the limitations of the message processing method applied to the first service node in the above text, and will not be repeated here.

[0129] In one embodiment, a message processing method is provided, which is applied to a second service node in a service cluster, and the method includes: receiving a network message sent by a first service node in the service cluster, and processing the network message to provide a second service. The first service node and the second service node jointly configure a first service port; the first service provided by the first service node is different from the second service provided by the second service node; the network message is received by the first service node through the first service port, and it is determined whether the network message meets the message processing condition of the target service node, and a node judgment result is obtained, and the message is sent when the node judgment result is that the network message meets the message processing condition of the second service node; the target service node includes at least one of the first service node and the second service node.

[0130] The above-mentioned message processing method receives a network message through a first service port, determines whether the network message meets the message processing condition of a target service node, and obtains a node judgment result. The target service node includes at least one of a first service node and a second service node. When the node judgment result is that the network message meets the message processing condition of the second service node, the network message is sent to the second service node to provide a second service through the second service node. The first service node and the second service node in the service cluster jointly configure a first service port, and the first service provided by the first service node is different from the second service provided by the second service node. The identification of the network message is realized, that is, when it is identified that the network message is used to request the first service, the network message is processed through the first service node. And when it is identified that the network message is used to request the second service, the network message is sent to the second service node for processing through the first service node, and there is no need to set up an additional service port between the first service node and the second service node to transmit the network message. Therefore, the first service node and the second service node reuse the first service port, that is, the first service node and the second service node share the first service port to communicate with other service nodes in the service cluster, and the reuse of the same port by at least two services is realized, the number of service ports is reduced, the port configuration process is simplified, the management complexity of the service port is reduced, the security risks caused by exposing multiple service ports are reduced, and the operation and maintenance costs and resources are reduced, the system resource utilization rate is improved, and the flexibility is improved.

[0131] It should be understood that, although the steps in the flowcharts involved in the above embodiments are displayed in sequence according to the indication of the arrows, these steps are not necessarily executed in sequence according to the order indicated by the arrows. Unless there is a clear explanation in this article, the execution of these steps is not strictly limited in order, and these steps can be executed in other orders. Moreover, at least a part of the steps in the flowcharts involved in the above embodiments may include multiple steps or multiple stages, and these steps or stages are not necessarily executed at the same time, but can be executed at different times, and the execution order of these steps or stages is not necessarily carried out in sequence, but can be executed in turn or alternately with other steps or at least a part of the steps or stages in other steps.

[0132] Based on the same inventive concept, the embodiment of the present application also provides a message processing device for implementing the message processing method involved above. The implementation scheme for solving the problem provided by the device is similar to the implementation scheme recorded in the above method, so the specific limitations in one or more message processing device embodiments provided below can refer to the limitations on the message processing method above, and will not be repeated here.

[0133] In one embodiment, as shown in FIG9 , a message processing device 900 is provided, comprising: a first receiving module 901, a judging module 902 and a sending module 903. The first receiving module 901 is used to receive a network message through a first service port; the first service node and the second service node in the service cluster jointly configure the first service port; the first service provided by the first service node is different from the second service provided by the second service node. The judging module 902 is used to judge whether the network message meets the message processing condition of the target service node and obtain a node judgment result; the target service node includes at least one of the first service node and the second service node. The sending module 903 is used to send a network message to the second service node when the node judgment result is that the network message meets the message processing condition of the second service node, so as to provide a second service through the second service node.

[0134] In the above-mentioned message processing device 900, the first receiving module 901 receives the network message through the first service port, judges whether the network message meets the message processing condition of the target service node through the judgment module 902, obtains the node judgment result, and sends the network message to the second service node through the sending module 903 when the node judgment result is that the network message meets the message processing condition of the second service node, so as to provide the second service through the second service node, wherein the first service node and the second service node in the service cluster jointly configure the first service port, the first service provided by the first service node is different from the second service provided by the second service node, and the target service node includes at least one of the first service node and the second service node, thereby realizing the recognition of the network message, that is, when it is recognized that the network message is used to request the first service The network message is processed by the first service node, and when it is identified that the network message is used to request the second service, the network message is sent to the second service node for processing by the first service node. In addition, there is no need to set up an additional service port between the first service node and the second service node to transmit the network message. Therefore, the first service node and the second service node reuse the first service port, that is, the first service node and the second service node share the first service port to communicate with other service nodes in the service cluster, thereby realizing the reuse of the same port by at least two services, reducing the number of service ports, simplifying the port configuration process, reducing the management complexity of the service port, reducing the security risks caused by exposing multiple service ports, reducing operation and maintenance costs and resources, improving system resource utilization, and improving flexibility.

[0135] In one embodiment, the judgment module is further used to perform type analysis on the network message according to the target service protocol and obtain the message type of the network message; judge whether the message type meets the message type corresponding to the target service protocol to obtain a type judgment result; determine the node judgment result according to the type judgment result. The target service protocol includes at least one of a first service protocol corresponding to the first service node and a second service protocol corresponding to the second service node.

[0136] In one embodiment, the judgment module is also used to determine that the node judgment result is that the network message satisfies the message processing condition of the second service node when the type judgment result is that the message type does not satisfy the message type corresponding to the first service protocol, or when the type judgment result is that the message type satisfies the message type corresponding to the second service protocol; and when the type judgment result is that the message type satisfies the message type corresponding to the first service protocol, determine the node judgment result according to the network message and the first service protocol.

[0137] In one embodiment, the judgment module is also used to perform field analysis on the network message according to the first service protocol and obtain the target field of the network message; query whether there is a session that complies with the first service protocol according to the target field, and obtain the session query result; when the session query result is yes, perform service analysis on the network message according to the first service protocol, and generate a processing result of the network message; when the session query result is no, or the processing result is failure, determine that the node judgment result is that the network message meets the message processing condition of the second service node.

[0138] In one embodiment, the judgment module is also used to perform service analysis on the network message according to the first service protocol and generate a processing result of the network message; when the processing result is failure, the determination node judgment result is that the network message meets the message processing condition of the second service node.

[0139] In one embodiment, the service cluster also includes a third service node, which is configured with a second service port, which is different from the first service port. The first receiving module is also used to receive, through the first service port, a network message sent by the third service node through the second service port; wherein the network message is sent by the third service node when the destination port of the network message is the first service port.

[0140] In one embodiment, as shown in FIG10 , a message processing device 1000 is provided, which includes a second receiving module 1001 and a processing module 1002. The second receiving module 1001 is used to receive a network message sent by a first service node in a service cluster. The processing module 1002 is used to process the network message to provide a second service. The first service node and the second service node jointly configure a first service port; the first service provided by the first service node is different from the second service provided by the second service node; the network message is received by the first service node through the first service port, and it is determined whether the network message meets the message processing condition of the target service node, and a node judgment result is obtained, and the node judgment result is sent when the network message meets the message processing condition of the second service node; the target service node includes at least one of the first service node and the second service node.

[0141] The message processing device 1000 receives a network message sent by a first service node in a service cluster through a second receiving module 1001, and processes the network message through a processing module 1002 to provide a second service, wherein the first service node and the second service node jointly configure a first service port; the first service provided by the first service node is different from the second service provided by the second service node; the network message is received by the first service node through the first service port, and it is determined whether the network message meets the message processing condition of the target service node, and a node judgment result is obtained, and the message is sent when the node judgment result is that the network message meets the message processing condition of the second service node; the target service node includes at least one of the first service node and the second service node, and realizes the recognition of the network message, that is, after recognizing that the network message is used to request the first In the case of a second service, the network message is processed by the first service node, and in the case of identifying that the network message is used to request the second service, the network message is sent to the second service node for processing by the first service node, and there is no need to set up an additional service port between the first service node and the second service node to transmit the network message. Therefore, the first service node and the second service node reuse the first service port, that is, the first service node and the second service node share the first service port to communicate with other service nodes in the service cluster, thereby realizing the reuse of the same port by at least two services, reducing the number of service ports, simplifying the port configuration process, reducing the management complexity of the service port, reducing the security risks caused by exposing multiple service ports, reducing the operation and maintenance costs and resources, improving the utilization rate of system resources, and improving flexibility.

[0142] Each module in the above-mentioned message processing device can be implemented in whole or in part by software, hardware and a combination thereof. Each module can be embedded in or independent of a processor in a computer device in the form of hardware, or can be stored in a memory in a computer device in the form of software, so that the processor can call and execute the operations corresponding to each module above.

[0143] In one embodiment, a computer device is provided, which may be a server, and its internal structure diagram may be shown in FIG11. The computer device includes a processor, a memory, and a network interface connected via a system bus. The processor of the computer device is used to provide computing and control capabilities. The memory of the computer device includes a non-volatile storage medium and an internal memory. The non-volatile storage medium stores an operating system, a computer program, and a database. The internal memory provides an environment for the operation of the operating system and the computer program in the non-volatile storage medium. The network interface of the computer device is used to communicate with an external terminal via a network connection. When the computer program is executed by the processor, a message processing method is implemented.

[0144] Those skilled in the art will understand that the structure shown in FIG. 11 is merely a block diagram of a partial structure related to the solution of the present application, and does not constitute a limitation on the computer device to which the solution of the present application is applied. The specific computer device may include more or fewer components than shown in the figure, or combine certain components, or have a different arrangement of components.

[0145] In one embodiment, a computer device is provided, including a memory and a processor, wherein a computer program is stored in the memory, and the processor implements the steps of the above method when executing the computer program.

[0146] In one embodiment, a computer-readable storage medium is provided, on which a computer program is stored, and when the computer program is executed by a processor, the steps of the aforementioned method are implemented.

[0147] In one embodiment, a computer program product is provided, comprising a computer program, which implements the steps of the aforementioned method when executed by a processor.

[0148] It should be noted that the user information (including but not limited to user device information, user personal information, etc.) and data (including but not limited to data used for analysis, stored data, displayed data, etc.) involved in this application are all information and data authorized by the user or fully authorized by all parties.

[0149] Those skilled in the art can understand that all or part of the processes in the above-mentioned embodiments can be completed by instructing the relevant hardware through a computer program, and the computer program can be stored in a non-volatile computer-readable storage medium. When the computer program is executed, it can include the processes of the embodiments of the above-mentioned methods. Among them, any reference to the memory, database or other medium used in the embodiments provided in this application can include at least one of non-volatile and volatile memory. Non-volatile memory can include read-only memory (ROM), magnetic tape, floppy disk, flash memory, optical memory, high-density embedded non-volatile memory, resistive random access memory (ReRAM), magnetoresistive random access memory (MRAM), ferroelectric random access memory (FRAM), phase change memory (PCM), graphene memory, etc. Volatile memory can include random access memory (RAM) or external cache memory, etc. As an illustration and not limitation, RAM can be in various forms, such as static random access memory (SRAM) or dynamic random access memory (DRAM). The database involved in each embodiment provided in this application may include at least one of a relational database and a non-relational database. Non-relational databases may include distributed databases based on blockchains, etc., but are not limited to this. The processor involved in each embodiment provided in this application may be a general-purpose processor, a central processing unit, a graphics processor, a digital signal processor, a programmable logic device, a data processing logic device based on quantum computing, etc., but are not limited to this.

[0150] The technical features of the above embodiments may be combined arbitrarily. To make the description concise, not all possible combinations of the technical features in the above embodiments are described. However, as long as there is no contradiction in the combination of these technical features, they should be considered to be within the scope of this specification.

[0151] The above-described embodiments only express several implementation methods of the present application, and the descriptions thereof are relatively specific and detailed, but they cannot be understood as limiting the scope of the present application. It should be pointed out that, for a person of ordinary skill in the art, several variations and improvements can be made without departing from the concept of the present application, and these all belong to the protection scope of the present application. Therefore, the protection scope of the present application shall be subject to the attached claims.

Claims

1. A message processing method, characterized in that: Applied to a first service node in a service cluster, the method comprises: receiving a network message through a first service port; the first service node and a second service node in the service cluster jointly configure the first service port; a first service provided by the first service node is different from a second service provided by the second service node; Determine whether the network message meets the message processing condition of the target service node, and obtain a node determination result; the target service node includes at least one of the first service node and the second service node; If the node determines that the network message meets the message processing condition of the second service node, the network message is sent to the second service node to provide the second service through the second service node.

2. The method according to claim 1, characterized in that The determining whether the network message satisfies the message processing condition of the target service node to obtain the determination result includes: Performing type parsing on the network message according to a target service protocol, and obtaining a message type of the network message; the target service protocol includes at least one of a first service protocol corresponding to the first service node and a second service protocol corresponding to the second service node; Determine whether the message type meets the message type corresponding to the target service protocol, and obtain a type determination result; The node judgment result is determined according to the type judgment result.

3. The method according to claim 2, characterized in that The determining the node judgment result according to the type judgment result includes: When the type judgment result is that the message type does not satisfy the message type corresponding to the first service protocol, or when the type judgment result is that the message type satisfies the message type corresponding to the second service protocol, determining that the node judgment result is that the network message satisfies the message processing condition of the second service node; When the type judgment result is that the message type satisfies the message type corresponding to the first service protocol, the node judgment result is determined according to the network message and the first service protocol.

4. The method according to claim 3, characterized in that The determining the node judgment result according to the network message and the first service protocol includes: Performing field parsing on the network message according to the first service protocol, and acquiring a target field of the network message; querying whether there is a session that complies with the first service agreement according to the target field, and obtaining a session query result; When the session query result is that the session query result exists, performing service parsing on the network message according to the first service protocol, and generating a processing result of the network message; When the session query result is not present or the processing result is failure, it is determined that the node judgment result is that the network message meets the message processing condition of the second service node.

5. The method according to claim 3, characterized in that: The determining the node judgment result according to the network message and the first service protocol includes: Performing service analysis on the network message according to the first service protocol, and generating a processing result of the network message; In a case where the processing result is failure, it is determined that the node judgment result is that the network message meets the message processing condition of the second service node.

6. The method according to any one of claims 1 to 5, characterized in that: The service cluster further includes a third service node, the third service node is configured with a second service port, the second service port is different from the first service port, and the receiving of the network message through the first service port includes: The network message sent by the third service node through the second service port is received through the first service port; wherein the network message is sent by the third service node when the destination port of the network message is the first service port.

7. The method according to any one of claims 1 to 5, characterized in that: The first service node is a first encryption service node, and the first encryption service node is used to provide a first encryption service; The second service node includes a second encryption service node, and the second encryption service node is used to provide a second encryption service; wherein the first encryption service and the second encryption service are different.

8. A message processing method, characterized in that: Applied to a second service node in a service cluster, the method comprises: Receive a network message sent by a first service node in the service cluster; the first service node and the second service node jointly configure a first service port; the first service provided by the first service node is different from the second service provided by the second service node; the network message is received by the first service node through the first service port, and it is determined whether the network message meets the message processing condition of the target service node, and a node determination result is obtained, and the network message is sent when the node determination result is that the network message meets the message processing condition of the second service node; the target service node includes at least one of the first service node and the second service node; The network message is processed to provide the second service.

9. A service cluster, characterized in that: The service cluster includes a first service node and a second service node, the first service node and the second service node jointly configure a first service port, and a first service provided by the first service node is different from a second service provided by the second service node; wherein, The first service node is used to receive a network message through the first service port, determine whether the network message meets the message processing condition of the target service node, obtain a node determination result, and send the network message to the second service node if the node determination result is that the network message meets the message processing condition of the second service node; the target service node includes at least one of the first service node and the second service node; The second service node is used to provide the second service according to the network message.

10. A computer device comprising a memory and a processor, wherein the memory stores a computer program, characterized in that: When the processor executes the computer program, the steps of the method according to any one of claims 1 to 7 are implemented; or, when the processor executes the computer program, the steps of the method according to claim 8 are implemented.

Images