I Pv6 conversion processing method, apparatus, device, medium and product

Abstract

The present disclosure provides an IPv6 conversion processing method, device, equipment, medium and product, wherein the method comprises: obtaining an original access request sent by a user, and resolving a source station domain name requested by the original access request into an IPv6 address to obtain a target access request after resolution; sending the target access request to a proxy server matched with the user through an intelligent load balancing server, so that the proxy server forwards the target access request to an IPv4 address of a source station; and obtaining response content fed back by the source station, and forwarding the response content to the user.

Description

Technical Field

[0001] This disclosure relates to the field of computer technology, and more specifically, to an IPv6 conversion processing method, apparatus, device, medium, and product. Background Technology

[0002] With the rapid development of information technology, the internet has permeated all aspects of work and life, and the demand for IP addresses is growing daily. Traditional IPv4 addresses are facing depletion and cannot meet the future development needs of the internet. Therefore, IPv6 transformation has become an important task for current network upgrades.

[0003] Currently, there are various technical means in the industry to achieve IPv6 upgrades, including tunneling, dual-stack, translation, and reverse proxy technologies. However, tunneling technology increases network complexity and management difficulty, requiring administrators to have high technical skills and maintenance capabilities, significantly increasing network operation and maintenance costs. Dual-stack technology also has significant limitations in application. Translation technology suffers from increased network latency, restricted IP address formats, unreliable compatibility, and increased difficulty and cost in network configuration and maintenance, limiting the large-scale deployment of IPv6 upgrades. Reverse proxy technology, when faced with a large number of requests, can cause very high network card load on the proxy server, impacting the actual access experience. Summary of the Invention

[0004] This disclosure provides at least one IPv6 conversion processing method, apparatus, device, medium, and product.

[0005] In a first aspect, embodiments of this disclosure provide an IPv6 conversion processing method, including:

[0006] Obtain the original access request sent by the user, resolve the origin server domain name requested by the original access request to an IPv6 address, and obtain the target access request after resolution;

[0007] The target access request is sent to the proxy server matched with the user through the intelligent load balancing server, so that the proxy server forwards the target access request to the IPv4 address of the origin server;

[0008] Obtain the response content from the origin server and forward the response content to the user.

[0009] In an optional implementation, after obtaining the original access request sent by the user, the method further includes:

[0010] The original access request is parsed to obtain target feature information;

[0011] The target feature information is analyzed using a support vector machine to obtain the requested analysis results;

[0012] If the original access request is determined to be abnormal based on the request analysis results, the original access request will be refused.

[0013] In one optional implementation, the step of refusing to process the original access request when it is determined to be abnormal based on the request analysis result includes:

[0014] If the original access request is determined to be abnormal based on the request analysis results, the client address information contained in the original access request is written into the target address table; wherein, the address information recorded in the target address table is used to indicate users who are prohibited from accessing the source site.

[0015] In one optional implementation, sending the target access request to a proxy server matched with the user via an intelligent load balancing server includes:

[0016] The user's identification information is determined by the intelligent load balancing server;

[0017] Search the geographic location database for the location information that matches the identified information;

[0018] The proxy server associated with the location information is identified as the proxy server that matches the user, and the target access request is sent to the proxy server that matches the user.

[0019] In an optional implementation, after resolving the origin server domain name requested by the original access request to an IPv6 address and obtaining the target access request, the method further includes:

[0020] Obtain the BGP routes pre-published by the intelligent load balancer server;

[0021] Determine whether the IPv6 address in the target access request matches the BGP route;

[0022] If it is determined that the IPv6 address in the target access request matches the BGP route, the step of sending the target access request to the proxy server matching the user is executed through the intelligent load balancing server.

[0023] In one optional implementation, the method further includes:

[0024] Real-time monitoring of the network bandwidth utilization of the source station;

[0025] The network bandwidth limit of the BGP route is dynamically adjusted based on the network bandwidth utilization rate.

[0026] In one optional implementation, the proxy server forwards the target access request to the IPv4 address of the origin server, including:

[0027] The proxy server looks up the IPv4 address corresponding to the origin server in its local storage and forwards the target access request to the IPv4 address of the origin server.

[0028] In one optional implementation, obtaining the response content from the origin server and forwarding the response content to the user includes:

[0029] Remove the HTTP response headers associated with the response body from the response content to obtain the encapsulated response content, and forward the encapsulated response content to the user.

[0030] In an optional implementation, before obtaining the original access request sent by the user, the method further includes:

[0031] The network interface card (NIC) in the intelligent load balancer server is set to acceleration mode according to a preset method. In acceleration mode, the NIC bypasses the kernel of the intelligent load balancer server and directly sends and receives target access data in user space. The preset method includes at least one of the following: binding the NIC to the DPDK driver, setting the NIC to polling mode, setting the NIC to DMA mapping function, setting the number of the NIC's send and receive queues to be the same as the number of kernels, and increasing the huge page parameter.

[0032] Secondly, embodiments of this disclosure provide an IPv6 conversion processing apparatus, comprising:

[0033] The first acquisition unit is used to acquire the original access request sent by the user, and resolve the origin server domain name requested by the original access request into an IPv6 address, and obtain the target access request after resolution.

[0034] The sending unit is configured to send the target access request to a proxy server matched with the user via an intelligent load balancing server, so that the proxy server forwards the target access request to the IPv4 address of the origin server.

[0035] The second acquisition unit is used to acquire the response content fed back by the source station;

[0036] A forwarding unit is used to forward the response content to the user.

[0037] Thirdly, embodiments of this disclosure also provide an electronic device, including: a processor, a memory, and a bus, wherein the memory stores machine-readable instructions executable by the processor, and when the electronic device is running, the processor communicates with the memory via the bus, and when the machine-readable instructions are executed by the processor, the steps of the first aspect above, or any possible implementation of the first aspect, are performed.

[0038] Fourthly, embodiments of this disclosure also provide a computer-readable storage medium storing a computer program that, when executed by a processor, performs the steps of the first aspect or any possible implementation of the first aspect.

[0039] Fifthly, embodiments of this disclosure also provide a computer program product, including a computer program / instructions that, when executed by a processor, implement the steps of the first aspect described above, or any possible implementation of the first aspect.

[0040] This disclosure provides an IPv6 conversion processing method, apparatus, device, medium, and product. In an embodiment of this application, firstly, an original access request sent by a user is obtained, and the domain name of the origin server requested by the original access request is resolved to an IPv6 address, resulting in a target access request; then, the target access request is sent to a proxy server matched with the user via an intelligent load balancing server, so that the proxy server forwards the target access request to the IPv4 address of the origin server; next, the response content returned by the origin server is obtained, and the response content is forwarded to the user.

[0041] In the above implementation, the origin server domain name requested by the original access request is resolved to an IPv6 address, and the target access request is sent to a proxy server matched with the user through an intelligent load balancer server. The proxy server then forwards the target access request to the IPv4 address of the origin server. This method can achieve seamless IPv6 transformation without any modifications to the origin server or website services, thereby reducing the transformation cycle and cost, increasing service security, and improving network communication efficiency.

[0042] To make the above-mentioned objects, features and advantages of this disclosure more apparent and understandable, preferred embodiments are described below in detail with reference to the accompanying drawings. Attached Figure Description

[0043] To more clearly illustrate the technical solutions of the embodiments of this disclosure, the accompanying drawings used in the embodiments will be briefly described below. These drawings are incorporated in and constitute a part of this specification. They illustrate embodiments conforming to this disclosure and, together with the specification, serve to explain the technical solutions of this disclosure. It should be understood that the following drawings only show some embodiments of this disclosure and should not be considered as limiting the scope. Those skilled in the art can obtain other related drawings based on these drawings without creative effort.

[0044] Figure 1 A flowchart of an IPv6 conversion processing method provided by an embodiment of this disclosure is shown;

[0045] Figure 2 A schematic diagram of an IPv6 conversion processing system provided in an embodiment of this disclosure is shown;

[0046] Figure 3 A schematic diagram of an IPv6 conversion processing apparatus provided in an embodiment of this disclosure is shown;

[0047] Figure 4 A schematic diagram of an electronic device provided in an embodiment of the present disclosure is shown. Detailed Implementation

[0048] To make the objectives, technical solutions, and advantages of the embodiments of this disclosure clearer, the technical solutions of the embodiments of this disclosure will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only a part of the embodiments of this disclosure, and not all of them. The components of the embodiments of this disclosure described and shown in the accompanying drawings can generally be arranged and designed in various different configurations. Therefore, the following detailed description of the embodiments of this disclosure provided in the accompanying drawings is not intended to limit the scope of the claimed disclosure, but merely represents selected embodiments of this disclosure. All other embodiments obtained by those skilled in the art based on the embodiments of this disclosure without inventive effort are within the scope of protection of this disclosure.

[0049] It should be noted that similar labels and letters in the following figures indicate similar items. Therefore, once an item is defined in one figure, it does not need to be further defined and explained in subsequent figures.

[0050] In this document, the term "and / or" merely describes a relationship, indicating that three relationships can exist. For example, A and / or B can represent three cases: A alone, A and B simultaneously, and B alone. Furthermore, the term "at least one" in this document means any combination of at least two of any one or more elements. For example, including at least one of A, B, and C can mean including any one or more elements selected from the set consisting of A, B, and C.

[0051] With the rapid development of information technology, the internet has permeated all aspects of work and life, and the demand for IP addresses is growing daily. Traditional IPv4 addresses are facing depletion and cannot meet the future development needs of the internet. Therefore, IPv6 transformation has become an important task for current network upgrades. Currently, there are various technical means in the industry to achieve IPv6 transformation, including: tunneling technology, dual-stack technology, translation technology, and reverse proxy technology.

[0052] However, tunneling technology only requires modifications at the tunnel's entrance and exit points, with no special requirements for other parts of the network. However, it cannot completely solve the compatibility issues between IPv4 and IPv6, and cannot enable communication between IPv4 and IPv6 nodes. Furthermore, tunneling technology increases network complexity and management difficulty, requiring administrators to possess high levels of technical expertise and maintenance capabilities, significantly increasing network operation and maintenance costs.

[0053] Dual-stack technology also has significant limitations in application. On the one hand, implementing dual-stack technology requires a complete replacement and upgrade of existing network equipment and terminals, necessitating additional configuration and management work, increasing the complexity and cost of network management, and potentially impacting the normal operation of existing networks. On the other hand, dual-stack technology requires network devices to have both IPv4 and IPv6 addresses, failing to alleviate the problem of IPv4 address resource depletion.

[0054] Translation technology suffers from numerous problems, including increased network latency, limited IP address formats, unreliable compatibility, and increased difficulty and cost in network configuration and maintenance, which restricts the large-scale rollout of IPv6 upgrades.

[0055] When the number of requests is large, the network card load of the reverse proxy server will become very high, which will have a certain impact on the actual access effect.

[0056] Based on the above research, this disclosure provides an IPv6 conversion processing method, apparatus, device, medium, and product. In this embodiment, firstly, an original access request sent by a user is obtained, and the domain name of the origin server requested by the original access request is resolved to an IPv6 address, resulting in a target access request; then, the target access request is sent to a proxy server matched with the user via an intelligent load balancing server, so that the proxy server forwards the target access request to the IPv4 address of the origin server; next, the response content returned by the origin server is obtained, and the response content is forwarded to the user.

[0057] In the above implementation, the origin server domain name requested by the original access request is resolved to an IPv6 address, and the target access request is sent to a proxy server matched with the user through an intelligent load balancer server. The proxy server then forwards the target access request to the IPv4 address of the origin server. This method can achieve seamless IPv6 transformation without any modifications to the origin server or website services, thereby reducing the transformation cycle and cost, increasing service security, and improving network communication efficiency.

[0058] To facilitate understanding of this embodiment, a detailed description of the IPv6 conversion processing method disclosed in this disclosure will be provided first. The execution subject of the IPv6 conversion processing method provided in this disclosure is generally an electronic device with a certain computing capability. In some possible implementations, this IPv6 conversion processing method can be implemented by a processor calling computer-readable instructions stored in memory.

[0059] See Figure 1 The diagram shows a flowchart of an IPv6 conversion processing method provided in an embodiment of this disclosure. The method includes steps S101 to S103, wherein:

[0060] S101: Obtain the original access request sent by the user, and resolve the origin server domain name requested by the original access request into an IPv6 address, and obtain the target access request after resolution.

[0061] The intelligent cloud DNS server receives the original access request sent by the user and parses it, thereby resolving the origin server domain name requested by the user to an IPv6 address. This IPv6 address is the BGP (Border Gateway Protocol) address published by the intelligent load balancer server.

[0062] S102: The target access request is sent to the proxy server matched with the user through the intelligent load balancer, so that the proxy server forwards the target access request to the IPv4 address of the origin server.

[0063] After parsing the original access request and obtaining the target access request, the intelligent cloud resolution server can forward the target access request to the telecommunications data infrastructure network CMNET. CMNET determines whether the BGP route pre-published by the intelligent load balancer matches the target access request. If CMNET determines that there is a match, it forwards the target access request to the intelligent load balancer for processing.

[0064] After receiving a target access request, the intelligent load balancer server determines the proxy server that matches the request and forwards it to that server for processing. The proxy server, upon receiving the request, then forwards it to the origin server's IPv4 address.

[0065] S103: Obtain the response content from the origin server and forward the response content to the user.

[0066] The proxy server obtains the response content from the origin server, performs secondary encapsulation on the response content, and then sends the encapsulated response content to the user.

[0067] In the above implementation, the origin server domain name requested by the original access request is resolved to an IPv6 address, and the target access request is sent to a proxy server matched with the user through an intelligent load balancer server. The proxy server then forwards the target access request to the IPv4 address of the origin server. This method can achieve seamless IPv6 transformation without any modifications to the origin server or website services, thereby reducing the transformation cycle and cost, increasing service security, and improving network communication efficiency.

[0068] In this embodiment of the application, after obtaining the original access request sent by the user, the method further includes the following steps:

[0069] S11: Parse the original access request to obtain target feature information;

[0070] S12: Analyze the target feature information using a support vector machine to obtain the requested analysis results;

[0071] S13: If the original access request is determined to be abnormal based on the request analysis results, the original access request shall be refused.

[0072] In this embodiment of the application, the intelligent cloud parsing server performs feature parsing on the original access request and extracts the following information from the original access request: the domain name of the query, the query type, the location of the customer, and the query time; then, the extracted information is encoded and converted to obtain the target feature information.

[0073] Next, a trained machine learning model can be used to analyze the target feature information to detect anomalies in the original access request, and then determine whether the original access request is an abnormal query request based on the request analysis results. For example, an original access request with a request analysis result of -1 can be identified as an abnormal query request.

[0074] Specifically, Support Vector Machines (SVMs) can be used to analyze target feature information to obtain request analysis results, which indicate whether the original access request is an anomalous query request. Specifically, SVMs can be used to perform binary classification anomaly detection on target feature information. If the original access request is identified as a normal query request, the request analysis result is 1; if the original access request is identified as an anomalous query request, the request analysis result is -1. Anomalous query requests can include requests such as DDoS attacks. Support Vector Machines are classification and regression algorithms based on statistical learning theory. Its main idea is to find a hyperplane that divides the dataset into different categories while maximizing the distance from the hyperplane to the data points. The core of the SVM algorithm is to build an optimization model to find the optimal separating hyperplane that maximizes the classification margin.

[0075] In this embodiment of the application, step S13, where the original access request is determined to be abnormal based on the request analysis result, specifically includes:

[0076] If the original access request is determined to be abnormal based on the request analysis results, the client address information contained in the original access request is written into the target address table; wherein, the address information recorded in the target address table is used to indicate users who are prohibited from accessing the source site.

[0077] In this embodiment, if the request analysis result output by the trained machine learning model is 1, the original access request is determined to be a normal query request; if the request analysis result output by the trained machine learning model is -1, the original access request is determined to be an abnormal query request. In this case, the client address information contained in the original access request can be written to the target address table iptables, and the query requests of the user associated with the client address information can be rejected for a period of time.

[0078] If another original access request is detected from the same user within a specified time period, it can be determined by querying the target address table that the user has been banned from accessing the origin site. Therefore, the original access request can be ignored, and a request failure message can be returned to the user.

[0079] In other words, in this embodiment of the application, after the intelligent cloud resolution server obtains the original access request, it first checks whether there is client address information indicating the user in the target address table. If it is determined that the address does not exist, the above steps S11 to S13 are executed; if it is determined that the address exists, the original access request is ignored, and the user can also be returned with a request failure message.

[0080] After determining that the original access request is a normal query request, the intelligent cloud DNS server uses a traditional recursive query method to find the v6 address corresponding to the origin domain name requested by the original access request. For example, if the origin domain name that the user needs to access is www.test.com, the intelligent cloud DNS server obtains the v6 address of the domain name as 2409:8c5b:ffff:2c00::61, that is, accessing [2409:8c5b:ffff:2c00::61]:80.

[0081] In the above implementation, machine learning algorithms are used to help the intelligent cloud parsing server intercept abnormal and extremely high-frequency parsing requests, thereby increasing service security.

[0082] In this embodiment of the application, step S102 above sends the target access request to the proxy server matched with the user through the intelligent load balancing server, specifically including the following steps:

[0083] S21: Determine the user's identification information through the intelligent load balancing server;

[0084] S22: Search the geolocation database for location information that matches the identification information;

[0085] S23: Identify the proxy server associated with the home location information as the proxy server that matches the user, and send the target access request to the proxy server that matches the user.

[0086] In this embodiment, the intelligent load balancer first obtains the user's identification information, such as the user's IP address. Then, it queries the user's location information based on the IP address. For example, if the user's IP address is 1.2.3.4 and the location database shows Guangzhou, the target access request can be forwarded to a proxy server in Guangzhou via the intelligent load balancer. This way, when the response from the origin server returns to the proxy server, the response can be forwarded to the user in the shortest possible time.

[0087] In this embodiment of the application, after resolving the origin server domain name requested by the original access request to an IPv6 address and obtaining the target access request, the method further includes the following steps:

[0088] S31: Obtain BGP routes pre-published by the intelligent load balancer server;

[0089] S32: Determine whether the IPv6 address in the target access request matches the BGP route;

[0090] S33: If it is determined that the IPv6 address in the target access request matches the BGP route, execute the step of sending the target access request to the proxy server matched with the user through the intelligent load balancer server.

[0091] BGP routing protocol is a distance-vector routing protocol used to establish TCP connections between two entities. A smart load balancer server can direct access requests from a specific IPv6 address range to the server by advertising BGP routes (IPv6 address ranges). For example, if a smart load balancer server advertises a BGP route 2409:8c5b:ffff:2c00::61, and the origin domain www.test.com corresponds to the IPv6 address 2409:8c5b:ffff:2c00::61, then the access request will reach the load balancer server.

[0092] After receiving the target access request from the intelligent cloud resolution server, CMNET retrieves the pre-published BGP routes from the intelligent load balancer server and determines whether the IPv6 address in the target access request matches the BGP route. If the IPv6 address in the target access request matches the BGP route, the target access request is forwarded to the intelligent load balancer server, which then forwards the target access request to the proxy server matched with the user.

[0093] In this embodiment of the application, the method further includes the following steps:

[0094] First, monitor the network bandwidth utilization of the source station in real time;

[0095] Secondly, the network bandwidth limit of BGP routes is dynamically adjusted based on network bandwidth utilization.

[0096] In this embodiment, the intelligent load balancing server can monitor the bandwidth used by each BGP route in real time. Since it limits the maximum bandwidth of each BGP route, the intelligent load balancing server calculates the network bandwidth utilization of each source station in real time, and then dynamically adjusts the network bandwidth limit of the corresponding BGP route based on the network bandwidth utilization. Specifically, when the network bandwidth utilization is too high, the network bandwidth limit can be increased dynamically; when the network bandwidth utilization decreases, the maximum bandwidth limit is dynamically decreased, thus saving server bandwidth usage costs.

[0097] In the above implementation, by directing access requests to the local proxy server based on the user's identification information and by dynamically adjusting the network bandwidth limits of each BGP route in real time, the load on the proxy server can be reduced, thus preventing any impact on the access performance of the origin server.

[0098] In this embodiment of the application, the above-mentioned step of the proxy server forwarding the target access request to the IPv4 address of the origin server specifically includes:

[0099] The proxy server looks up the IPv4 address of the origin server in its local storage and forwards the target access request to the IPv4 address of the origin server.

[0100] In this embodiment of the application, a forwarding service (i.e., a proxy server) is designed. The proxy server is responsible for forwarding the target access request forwarded by the intelligent load balancer to the origin server through matching rules, and for re-encapsulating the response content forwarded back by the origin server before forwarding it to the user.

[0101] In practice, the proxy server stores the IPv4 address corresponding to the origin domain name. For example, the IPv4 address corresponding to www.test.com is 8.8.8.8. When a target access request is received, the proxy server can look up the IPv4 address corresponding to the origin domain and forward the target access request to the IPv4 address of the origin domain name, i.e., 8.8.8.8:80.

[0102] In this embodiment of the application, the above steps of obtaining the response content from the origin server and forwarding the response content to the user specifically include the following steps:

[0103] Remove the HTTP response headers associated with the response body from the response content to obtain the encapsulated response content, and forward the encapsulated response content to the user.

[0104] After the proxy server receives the response content from the origin server, it will clear the HTTP response headers related to the response body to ensure cache consistency. For example, it will clear headers such as content_length and etag. Finally, the proxy server will send the response body and response headers to the user.

[0105] In this embodiment of the application, before obtaining the original access request sent by the user, the method further includes:

[0106] Configure the network interface card (NIC) in the intelligent load balancer server to acceleration mode according to the preset method. In acceleration mode, the NIC bypasses the kernel of the intelligent load balancer server and directly sends and receives target access data in user space. The preset method includes at least one of the following: binding the NIC to the DPDK driver, setting the NIC to polling mode, setting the NIC's DMA mapping function, setting the number of NIC's send and receive queues to be the same as the number of kernels, and increasing the huge page parameter.

[0107] In this embodiment of the application, when the original access request sent by the user is obtained, the working mode of the network card in the intelligent load balancer server can be set. For example, the working mode of the network card in the intelligent load balancer server can be set to acceleration mode. The network card in acceleration mode can bypass the kernel of the intelligent load balancer server and directly send and receive target access data in user space.

[0108] In practical implementation, the network interface card (NIC) of the intelligent load balancer server can be unloaded from the kernel driver beforehand, and a UIO (Userspace I / O) module and a DPDK (Data Plane Development Kit) compatible UIO driver can be loaded, thereby binding the NIC to the DPDK driver. Furthermore, the NIC of the intelligent load balancer server can be set to round-robin mode, and an independent transmit / receive queue can be allocated to each NIC port; DMA (Direct Memory Access) mapping can also be performed on the NIC of the intelligent load balancer server. By setting DMA mapping, the intelligent load balancer server can directly read and write to the NIC's DMA area without kernel involvement. Additionally, the number of NIC transmit / receive queues can be specified to be consistent with the number of CPU cores, and the NIC transmit / receive queues can be bound one-to-one with the kernel. For example, if the CPU has 32 cores, the NIC transmit / receive queues can be set to 8, and each NIC transmit / receive queue can be bound to kernels 1-8 sequentially; furthermore, the huge page parameter can be increased, for example, to 4096.

[0109] Through the above processing methods, this application proposes an efficient memory management mechanism. This mechanism uses large page memory to reduce the overhead of memory allocation and release, and improves the efficiency of data access. This memory management mechanism uses a set of user-space network device drivers to directly control and manage the network card, bypassing the network protocol stack of the operating system kernel, and directly performing data packet sending and receiving operations in user space, eliminating the overhead brought by the operating system kernel, thereby achieving high-speed, low-latency, and high-throughput network data packet processing. This memory management mechanism achieves multi-queue, multi-core concurrent processing capabilities by binding the network card queue to the CPU core one-to-one.

[0110] Reference Figure 2 The diagram shown is a schematic of an IPv6 conversion processing system provided in an embodiment of this disclosure. The system includes: an intelligent cloud resolution server 201, a CMNET telecommunications data infrastructure network 202, an intelligent load balancing server 203, and a proxy server 204, wherein:

[0111] The intelligent cloud DNS server 201 is used to obtain the original access request sent by the user, resolve the origin domain name requested by the original access request to an IPv6 address, and obtain the target access request after resolution.

[0112] CMNET Telecom Data Infrastructure Network 202 is used to receive target access requests sent by the intelligent cloud resolution server and determine whether the IPv6 address in the target access request matches the BGP route; if it is determined that the IPv6 address in the target access request matches the BGP route, the target access request is forwarded to the intelligent load balancer server 203.

[0113] The intelligent load balancing server 203 is used to send the target access request to the proxy server matched with the user through the intelligent load balancing server, so that the proxy server forwards the target access request to the IPv4 address of the origin server;

[0114] The proxy server 204 is used to obtain the response content from the origin server and forward the response content to the user.

[0115] In this embodiment, the intelligent cloud DNS server is primarily responsible for resolving the domain name to be accessed by the user into an IPv6 address and for intercepting abnormal resolution requests, such as DDoS attacks; CMNET is a telecommunications data infrastructure network based on broadband Internet technology, responsible for network access; the intelligent load balancing server directs access traffic to the proxy server, and can direct access requests to the local proxy server based on the user's identification information location, while dynamically adjusting the network bandwidth of each origin server; the proxy server is responsible for forwarding access requests to the origin server and forwarding the response content of the origin server to the client; the origin server to be accessed is responsible for deploying the website application service's IPv4 server.

[0116] like Figure 2 As shown, User A and User B initiate initial access requests. The intelligent cloud server determines whether the initial access requests initiated by User A and User B are abnormal query requests. If not, the server modifies the origin server domain name to be accessed in the initial access request to an IPv6 address and transmits the modified target access request to CMNET. CMNET receives the target access request sent by the intelligent cloud resolution server and determines whether the IPv6 address in the target access request matches the BGP route. If the IPv6 address in the target access request matches the BGP route, the server forwards the target access request to the intelligent load balancer 203. The intelligent load balancer then sends the target access request to a proxy server matched with the user, so that the proxy server forwards the target access request to the origin server's IPv4 address. The proxy server obtains the response content from the origin server, re-encapsulates the response content, and sends it to the user.

[0117] When customers upgrade their products and services to IPv6, they want to minimize the impact on these services and ensure their availability during the upgrade process. Therefore, the technical solution in this application meets these needs. By introducing an intelligent cloud DNS system and intelligent load balancing, and optimizing network interface card performance for reverse proxy technology, this application allows for seamless IPv6 upgrades without requiring modifications to existing network equipment, server equipment, or the customer's website server. This improves the flexibility of the architecture deployment, reduces the upgrade cycle and cost, increases service security, improves network communication efficiency, offers strong compatibility, and eliminates the need for significant maintenance costs.

[0118] Those skilled in the art will understand that, in the above-described method of the specific implementation, the order in which each step is written does not imply a strict execution order and does not constitute any limitation on the implementation process. The specific execution order of each step should be determined by its function and possible internal logic.

[0119] Based on the same inventive concept, this disclosure also provides an IPv6 conversion processing device corresponding to the IPv6 conversion processing method. Since the principle of the device in this disclosure for solving the problem is similar to the IPv6 conversion processing method described above in this disclosure, the implementation of the device can refer to the implementation of the method, and the repeated parts will not be described again.

[0120] Reference Figure 3 The diagram shown is a schematic representation of an IPv6 conversion processing device provided in an embodiment of this disclosure. The device includes: a first acquisition unit 301, a sending unit 302, a second acquisition unit 303, and a forwarding unit 304; wherein,

[0121] The first acquisition unit 301 is used to acquire the original access request sent by the user, and resolve the origin server domain name requested by the original access request to an IPv6 address, and obtain the target access request after resolution.

[0122] Sending unit 302 is used to send the target access request to a proxy server matched with the user through an intelligent load balancing server, so that the proxy server forwards the target access request to the IPv4 address of the origin server;

[0123] The second acquisition unit 303 is used to acquire the response content fed back by the source station;

[0124] Forwarding unit 304 is used to forward the response content to the user.

[0125] In one possible implementation, the device is also used for:

[0126] After obtaining the original access request sent by the user, the original access request is parsed to obtain target feature information;

[0127] The target feature information is analyzed using a support vector machine to obtain the requested analysis results;

[0128] If the original access request is determined to be abnormal based on the request analysis results, the original access request will be refused.

[0129] In one possible implementation, the device is also used for:

[0130] If the original access request is determined to be abnormal based on the request analysis results, the client address information contained in the original access request is written into the target address table; wherein, the address information recorded in the target address table is used to indicate users who are prohibited from accessing the source site.

[0131] In one possible implementation, the transmitting unit is further configured to:

[0132] The user's identification information is determined by the intelligent load balancing server;

[0133] Search the geographic location database for the location information that matches the identified information;

[0134] The proxy server associated with the location information is identified as the proxy server that matches the user, and the target access request is sent to the proxy server that matches the user.

[0135] In one possible implementation, the device is also used for:

[0136] After resolving the origin server domain name requested by the original access request to an IPv6 address and obtaining the target access request, the BGP route pre-published by the intelligent load balancer server is obtained.

[0137] Determine whether the IPv6 address in the target access request matches the BGP route;

[0138] If it is determined that the IPv6 address in the target access request matches the BGP route, the step of sending the target access request to the proxy server matching the user is executed through the intelligent load balancing server.

[0139] In one possible implementation, the device is also used for:

[0140] Real-time monitoring of the network bandwidth utilization of the source station;

[0141] The network bandwidth limit of the BGP route is dynamically adjusted based on the network bandwidth utilization rate.

[0142] In one possible implementation, the transmitting unit is further configured to:

[0143] The proxy server looks up the IPv4 address corresponding to the origin server in its local storage and forwards the target access request to the IPv4 address of the origin server.

[0144] In one possible implementation, the second acquisition unit is further configured to:

[0145] Remove the HTTP response headers associated with the response body from the response content to obtain the encapsulated response content, and forward the encapsulated response content to the user.

[0146] In one possible implementation, the device is also used for:

[0147] Before acquiring the original access request sent by the user, the network interface card (NIC) in the intelligent load balancer server is set to acceleration mode according to a preset method. In acceleration mode, the NIC bypasses the kernel of the intelligent load balancer server and directly sends and receives target access data in user space. The preset method includes at least one of the following: binding the NIC to the DPDK driver, setting the NIC to polling mode, setting the NIC to DMA mapping function, setting the number of the NIC's send and receive queues to be the same as the number of kernels, and increasing the huge page parameter.

[0148] The processing flow of each module in the device and the interaction flow between each module can be referred to the relevant descriptions in the above method embodiments, and will not be detailed here.

[0149] Corresponding to Figure 1 In addition to the IPv6 conversion processing method, this disclosure also provides an electronic device 400, such as... Figure 4 The diagram shown is a structural schematic of an electronic device 400 provided in an embodiment of this disclosure, including:

[0150] The system includes a processor 41, a memory 42, and a bus 43. The memory 42 stores execution instructions and includes main memory 421 and external memory 422. The main memory 421, also called internal memory, temporarily stores the computational data in the processor 41, as well as data exchanged with external memory such as a hard disk. The processor 41 exchanges data with the external memory 422 through the main memory 421. When the electronic device 400 is running, the processor 41 communicates with the memory 42 through the bus 43, causing the processor 41 to execute the following instructions:

[0151] Obtain the original access request sent by the user, resolve the origin server domain name requested by the original access request to an IPv6 address, and obtain the target access request after resolution;

[0152] The target access request is sent to the proxy server matched with the user through the intelligent load balancing server, so that the proxy server forwards the target access request to the IPv4 address of the origin server;

[0153] Obtain the response content from the origin server and forward the response content to the user.

[0154] This disclosure also provides a computer-readable storage medium storing a computer program, which, when executed by a processor, performs the steps of the IPv6 conversion processing method described in the above method embodiments. The storage medium can be a volatile or non-volatile computer-readable storage medium.

[0155] This disclosure also provides a computer program product carrying program code. The program code includes instructions that can be used to execute the steps of the IPv6 conversion processing method described in the above method embodiments. For details, please refer to the above method embodiments, which will not be repeated here.

[0156] The aforementioned computer program product can be implemented through hardware, software, or a combination thereof. In one optional embodiment, the computer program product is specifically embodied in a computer storage medium; in another optional embodiment, the computer program product is specifically embodied in a software product, such as a software development kit (SDK), etc.

[0157] Those skilled in the art will clearly understand that, for the sake of convenience and brevity, the specific working processes of the systems and devices described above can be referred to the corresponding processes in the foregoing method embodiments, and will not be repeated here. In the several embodiments provided in this disclosure, it should be understood that the disclosed systems, devices, and methods can be implemented in other ways. The device embodiments described above are merely illustrative. For example, the division of units is only a logical functional division; in actual implementation, there may be other division methods. Furthermore, multiple units or components may be combined or integrated into another system, or some features may be ignored or not executed. Another point is that the displayed or discussed mutual coupling or direct coupling or communication connection may be through some communication interfaces; the indirect coupling or communication connection of devices or units may be electrical, mechanical, or other forms.

[0158] The units described as separate components may or may not be physically separate. The components shown as units may or may not be physical units; that is, they may be located in one place or distributed across multiple network units. Some or all of the units can be selected to achieve the purpose of this embodiment according to actual needs.

[0159] In addition, the functional units in the various embodiments of this disclosure can be integrated into one processing unit, or each unit can exist physically separately, or two or more units can be integrated into one unit.

[0160] If the aforementioned functions are implemented as software functional units and sold or used as independent products, they can be stored in a processor-executable, non-volatile, computer-readable storage medium. Based on this understanding, the technical solution of this disclosure, in essence, or the part that contributes to the prior art, or a portion of the technical solution, can be embodied in the form of a software product. This computer software product is stored in a storage medium and includes several instructions to cause a computer device (which may be a personal computer, server, or network device, etc.) to execute all or part of the steps of the methods described in the various embodiments of this disclosure. The aforementioned storage medium includes various media capable of storing program code, such as USB flash drives, portable hard drives, read-only memory (ROM), random access memory (RAM), magnetic disks, or optical disks.

[0161] Finally, it should be noted that the above-described embodiments are merely specific implementations of this disclosure, used to illustrate the technical solutions of this disclosure, and not to limit it. The protection scope of this disclosure is not limited thereto. Although this disclosure has been described in detail with reference to the foregoing embodiments, those skilled in the art should understand that any person skilled in the art can still modify or easily conceive of changes to the technical solutions described in the foregoing embodiments, or make equivalent substitutions for some of the technical features, within the scope of the technology disclosed in this disclosure. Such modifications, changes, or substitutions do not cause the essence of the corresponding technical solutions to deviate from the spirit and scope of the technical solutions of the embodiments of this disclosure, and should all be covered within the protection scope of this disclosure. Therefore, the protection scope of this disclosure should be determined by the protection scope of the claims.

Claims

1. An IPv6 conversion processing method, characterized in that, include: Obtain the original access request sent by the user, resolve the origin server domain name requested by the original access request to an IPv6 address, and obtain the target access request after resolution; The target access request is sent to the proxy server matched with the user through the intelligent load balancing server, so that the proxy server forwards the target access request to the IPv4 address of the origin server; Obtain the response content from the origin server and forward the response content to the user; The method further includes, after resolving the origin server domain name requested by the original access request to an IPv6 address and obtaining the target access request, the method also includes: Obtain the BGP routes pre-published by the intelligent load balancer server; Determine whether the IPv6 address in the target access request matches the BGP route; If it is determined that the IPv6 address in the target access request matches the BGP route, the step of sending the target access request to the proxy server matching the user is executed through the intelligent load balancing server; And real-time monitoring of the network bandwidth utilization of the source station; The network bandwidth limit of the BGP route is dynamically adjusted based on the network bandwidth utilization rate.

2. The method according to claim 1, characterized in that, After obtaining the original access request sent by the user, the method further includes: The original access request is parsed to obtain target feature information; The target feature information is analyzed using a support vector machine to obtain the requested analysis results; If the original access request is determined to be abnormal based on the request analysis results, the original access request will be refused.

3. The method according to claim 2, characterized in that, The step of refusing to process the original access request when it is determined to be abnormal based on the request analysis results includes: If the original access request is determined to be abnormal based on the request analysis results, the client address information contained in the original access request is written into the target address table; wherein, the address information recorded in the target address table is used to indicate users who are prohibited from accessing the source site.

4. The method according to claim 1, characterized in that, The step of sending the target access request to the proxy server matched with the user through the intelligent load balancing server includes: The user's identification information is determined by the intelligent load balancing server; Search the geographic location database for the location information that matches the identified information; The proxy server associated with the location information is identified as the proxy server that matches the user, and the target access request is sent to the proxy server that matches the user.

5. The method according to claim 1, characterized in that, The proxy server forwards the target access request to the IPv4 address of the origin server, including: The proxy server looks up the IPv4 address corresponding to the origin server in its local storage and forwards the target access request to the IPv4 address of the origin server.

6. The method according to claim 1, characterized in that, The step of obtaining the response content from the origin server and forwarding the response content to the user includes: Remove the HTTP response headers associated with the response body from the response content to obtain the encapsulated response content, and forward the encapsulated response content to the user.

7. The method according to claim 1, characterized in that, Before obtaining the original access request sent by the user, the method further includes: The network interface card (NIC) in the intelligent load balancer server is set to acceleration mode according to a preset method. In acceleration mode, the NIC bypasses the kernel of the intelligent load balancer server and directly sends and receives target access data in user space. The preset method includes at least one of the following: binding the NIC to the DPDK driver, setting the NIC to polling mode, setting the NIC to DMA mapping function, setting the number of the NIC's send and receive queues to be the same as the number of kernels, and increasing the huge page parameter.

8. An IPv6 conversion processing device, characterized in that, include: The first acquisition unit is used to acquire the original access request sent by the user, and resolve the origin server domain name requested by the original access request into an IPv6 address, and obtain the target access request after resolution. The sending unit is configured to send the target access request to a proxy server matched with the user via an intelligent load balancing server, so that the proxy server forwards the target access request to the IPv4 address of the origin server. The second acquisition unit is used to acquire the response content fed back by the source station; A forwarding unit is used to forward the response content to the user; In this process, after resolving the origin server domain name requested by the original access request to an IPv6 address, and obtaining the target access request after resolution, the device is further used to: Obtain the BGP routes pre-published by the intelligent load balancer server; Determine whether the IPv6 address in the target access request matches the BGP route; If it is determined that the IPv6 address in the target access request matches the BGP route, the step of sending the target access request to the proxy server matching the user is executed through the intelligent load balancing server; And real-time monitoring of the network bandwidth utilization of the source station; The network bandwidth limit of the BGP route is dynamically adjusted based on the network bandwidth utilization rate.

9. An electronic device, characterized in that, include: The device includes a processor, a memory, and a bus. The memory stores machine-readable instructions executable by the processor. When the electronic device is running, the processor communicates with the memory via the bus. When the machine-readable instructions are executed by the processor, they perform the steps of the IPv6 conversion processing method as described in any one of claims 1 to 7.

10. A computer-readable storage medium, characterized in that, The computer-readable storage medium stores a computer program that, when executed by a processor, performs the steps of the IPv6 conversion processing method as described in any one of claims 1 to 7.

11. A computer program product, comprising a computer program / instructions, characterized in that, When the computer program / instruction is executed by the processor, it implements the steps of the IPv6 conversion processing method according to any one of claims 1 to 7.

Images