Communication method, device, equipment and storage medium

Abstract

The embodiments of the present application provide a communication method, apparatus, device, and storage medium, which are applied to a data center, wherein the data center is connected to an edge node, and the method comprises: obtaining virtual address description information; and changing the communication behavior when the edge node accesses the data center based on a virtual IP address according to the virtual address description information. The embodiments of the present application change the communication behavior when the edge node accesses the data center based on a virtual IP address, so that the edge node can better communicate when accessing the data center based on a virtual IP address, and can adapt to various cloud-edge scenarios.

Description

Technical Field

[0001] The embodiments of the present application relate to the field of communication technologies, and in particular, to a communication method and apparatus, an electronic device, and a storage medium. Background Art

[0002] Edge nodes can provide edge node services / edge computing (ENS). Edge node services are open platforms that integrate network, computing, storage, and application core capabilities to provide local services close to the source of objects or data. Applications are initiated at the edge node, resulting in faster network service responses and meeting basic industry requirements for real-time services, application intelligence, security, and privacy protection.

[0003] However, edge nodes access the data center through VIP (Virtual IP Address), but edge nodes are usually CDN (Content Delivery Network) nodes, so the data center is restricted from communicating with edge nodes and cannot communicate with edge nodes better. Summary of the Invention

[0004] An embodiment of the present application provides a communication method to solve the communication problem when an edge node accesses a data center based on a virtual IP address.

[0005] Correspondingly, an embodiment of the present application also provides a communication device, an electronic device and a storage medium to ensure the implementation and application of the above method.

[0006] To solve the above problems, an embodiment of the present application discloses a communication method, which is applied to a data center connected to an edge node. The method includes:

[0007] Get virtual address description information;

[0008] The communication behavior when the edge node accesses the data center based on the virtual IP address is changed according to the virtual address description information.

[0009] Optionally, after changing, according to the virtual address description information, a communication behavior when the edge node accesses the data center based on the virtual IP address, the method includes:

[0010] receiving an authentication request sent by the edge node;

[0011] A process identity certificate is issued to the edge node according to the authentication request, so that the edge node communicates with the data center based on the process identity certificate.

[0012] Optionally, the method further includes: providing a stateful service for the edge node when the edge node accesses the data center based on the virtual IP address.

[0013] Optionally, the method further includes: when providing a stateful service for the edge node, if a communication request sent by the edge node is received, forwarding the communication request through a proxy interface; the proxy interface is pre-configured based on the virtual address description information.

[0014] Optionally, if a communication request is received from the edge node, the communication request is forwarded through a proxy interface, including: if the communication request is received from the edge node using the TLS protocol, the communication request is forwarded through a proxy interface based on the TCP protocol.

[0015] Optionally, the method further includes: monitoring the communication with the edge node based on the TLS protocol.

[0016] Optionally, the method further includes: providing operation and maintenance services for the edge node when the edge node accesses the data center based on the virtual IP address.

[0017] The present application also discloses a communication device, which is applied to a data center connected to an edge node. The device includes:

[0018] A virtual address description information acquisition module is used to obtain virtual address description information;

[0019] A communication behavior updating module is used to change the communication behavior when the edge node accesses the data center based on the virtual IP address according to the virtual address description information.

[0020] Optionally, the device further includes: an authentication module, configured to receive an authentication request sent by the edge node; and send a process identity certificate to the edge node according to the authentication request, so that the edge node communicates with the data center based on the process identity certificate.

[0021] Optionally, the device further includes: a stateful service providing module, configured to provide a stateful service for the edge node when the edge node accesses the data center based on the virtual IP address.

[0022] Optionally, the device further includes: a proxy forwarding module for forwarding the communication request through a proxy interface if a communication request sent by the edge node is received when providing stateful services for the edge node; the proxy interface is pre-configured based on the virtual address description information.

[0023] Optionally, the proxy forwarding module is configured to forward the communication request based on the TCP protocol through a proxy interface if the communication request received from the edge node adopts the TLS protocol.

[0024] Optionally, the device further includes: a monitoring module, configured to monitor communication with the edge node based on the TLS protocol.

[0025] Optionally, the device further includes: an operation and maintenance capability providing module, configured to provide operation and maintenance services for the edge node when the edge node accesses the data center based on the virtual IP address.

[0026] An embodiment of the present application further discloses an electronic device, comprising: a processor; and a memory on which executable code is stored. When the executable code is executed, the processor executes one or more communication methods described in the embodiments of the present application.

[0027] The embodiments of the present application also disclose one or more machine-readable media on which executable codes are stored. When the executable codes are executed, the processor executes the communication method as described in one or more of the embodiments of the present application.

[0028] Compared with the prior art, the embodiments of the present application have the following advantages:

[0029] In an embodiment of the present application, virtual address description information is obtained, and the communication behavior when the edge node accesses the data center based on the virtual IP address is modified according to the virtual address description information. By modifying the communication behavior when the edge node accesses the data center based on the virtual IP address, the embodiment of the present application enables better communication when the edge node accesses the data center based on the virtual IP address, and can adapt to various cloud-edge scenarios. BRIEF DESCRIPTION OF THE DRAWINGS

[0030] Figure 1 This is a flowchart of the steps of an embodiment of a communication method of the present application;

[0031] Figure 2 is a flowchart of another communication method embodiment of the present application;

[0032] Figure 3 It is a schematic diagram of an operation and maintenance component of this application;

[0033] Figure 4 This is a structural block diagram of an optional embodiment of a communication device of the present application;

[0034] Figure 5 It is a structural diagram of a device provided in one embodiment of the present application. DETAILED DESCRIPTION

[0035] In order to make the above-mentioned purposes, features and advantages of the present application more obvious and easy to understand, the present application is further described in detail below with reference to the accompanying drawings and specific implementation methods.

[0036] With the implementation of the Internet of Things (IoT), millions of IoT devices are online every day. Consequently, the amount of data generated by the IoT is enormous. Despite the scale of data centers (DCs), the speed and computing power of data centers may still be far from sufficient to cope with such a large amount of data generated continuously. Therefore, edge computing has also been widely used.

[0037] To ensure the normal operation of the data center, an automated operation and maintenance platform is deployed. Specifically, this platform provides secure and efficient automated operation and maintenance capabilities for the host hardware, system software, and distributed infrastructure services in the data center's central computer room (server) in large-scale scenarios. However, in practice, the operation and maintenance capabilities for edge nodes are still lacking. Therefore, the system software and other aspects of edge nodes are mostly manually operated and maintained, which is inefficient and prone to errors. Therefore, the data center's operation and maintenance platform is also needed to provide operation and maintenance capabilities for edge nodes.

[0038] In practice, the biggest difference between edge computing and data centers lies in network connectivity. Data center servers are directly connected via IP addresses, while edge nodes connect to the data center via virtual IP addresses and can only access the data center using the CDN's back-to-source VIP address. However, due to the internal architecture of the operations and maintenance platform being a client / server (C / S) architecture, the server manages data and the client interacts with users. Edge node clients connect directly to data center servers via IP addresses, making it impossible to provide operations and maintenance services in a one-way back-to-source VIP network environment.

[0039] In an embodiment of the present application, a communication method is provided. Through this method, when the edge node is connected to the data center through a virtual IP address, in order to enable the operation and maintenance capabilities of the operation and maintenance platform to be provided to the edge node, the communication behavior between the edge node and the data center is changed for the case where the edge node is connected to the data center through a virtual IP address, so that the operation and maintenance platform can solve the common problems such as traffic crossing the public network, stateless service access, and inability to monitor TLS (Transport Layer Security) service access when the edge node is connected to the data center through a virtual IP address based on the changed communication behavior. A general solution is provided to adapt to all cloud-edge scenarios, so that the data center can better communicate with the edge node, and then the operation and maintenance platform can provide operation and maintenance capabilities for the edge node.

[0040] Reference Figure 1 , is a flowchart of a communication method embodiment of the present application, which is applied to a data center, the data center being connected to an edge node, and the method comprising the following steps:

[0041] Step 102: Obtain virtual address description information.

[0042] Step 104: Modify the communication behavior when the edge node accesses the data center based on the virtual IP address according to the virtual address description information.

[0043] In the specific implementation, the edge node is a CDN node, which is usually connected to the data center through a virtual IP address. The operation and maintenance platform is deployed in the data center and can provide operation and maintenance capabilities for the data center. Among them, the servers in the data center are directly connected through IP addresses. Therefore, the operation and maintenance components in the operation and maintenance platform are also connected through IP addresses.

[0044] In an embodiment of the present application, the operation and maintenance components of the operation and maintenance platform are deployed in the data center and the edge node. In order to adapt to the situation where the edge node is connected to the data center through a virtual IP address, the operation and maintenance components of the edge node are changed to be connected to the operation and maintenance components of the data center through a virtual IP address.

[0045] As an example, a public file can be defined to describe the virtual address description information (VIP information), which can include VIP address, communication type and other information. All operation and maintenance components in the data center and edge nodes that need to communicate can adapt to the code by reading the virtual address description information, and then change their own communication behavior to adapt to the communication scenario using the virtual IP address. Specifically, the changed operation and maintenance components can adapt to communication scenarios such as meta management, downloading, software operation and maintenance, system operation and maintenance, basic detection, remote login, and white screen forwarding.

[0046] In an embodiment of the present application, virtual address description information is obtained, and the communication behavior when the edge node accesses the data center based on the virtual IP address is modified according to the virtual address description information. By modifying the communication behavior when the edge node accesses the data center based on the virtual IP address, the embodiment of the present application enables better communication when the edge node accesses the data center based on the virtual IP address, and can adapt to various cloud-edge scenarios.

[0047] Reference Figure 2 , is a flowchart of a communication method embodiment of the present application, which is applied to a data center, the data center being connected to an edge node, and the method comprising the following steps:

[0048] Step 202: Obtain virtual address description information.

[0049] Step 204: Modify the communication behavior when the edge node accesses the data center based on the virtual IP address according to the virtual address description information.

[0050] Step 206: When the edge node accesses the data center based on the virtual IP address, provide operation and maintenance services for the edge node.

[0051] In the embodiments of the present application, since edge nodes and data centers are usually accessed through virtual IP addresses, the operation and maintenance components are changed from IP address connections to VIP connections. Edge computing has its own characteristics, so edge computing has common problems such as traffic crossing the public network, stateless services, and inability to monitor TLS service access. Specifically, VIP connections, LVS (Linux Virtual Server) are generally stateless forwarding, which will cause problems for stateful service access, so stateless services are provided; in addition, because the problem of traffic crossing the public network needs to be solved by communicating through TLS, but some services cannot monitor TLS communications, so there will be a problem of being unable to monitor TLS communications.

[0052] In an embodiment of the present application, after the communication behavior when the edge node accesses the data center based on the virtual IP address is changed based on the virtual address description information, the communication process has encryption / authentication capabilities, supports stateful services and the ability to monitor TLS communications, and thus can provide operation and maintenance services for the edge node when the edge node accesses the data center based on the virtual IP address.

[0053] In an exemplary embodiment, after step 204, the step of changing the communication behavior when the edge node accesses the data center based on the virtual IP address according to the virtual address description information, the method may further include the following steps:

[0054] receiving an authentication request sent by the edge node;

[0055] A process identity certificate is issued to the edge node according to the authentication request, so that the edge node communicates with the data center based on the process identity certificate.

[0056] In an embodiment of the present application, a process identity system is connected to the operation and maintenance platform. Based on the process identity system, a process identity certificate can be assigned to the edge node, so that the edge node can perform two-way TLS (MTLS) communication through the process identity certificate, completing the encryption / authentication process of access from the edge node to the data center, and avoiding the public network from sniffing data and API (Application Programming Interface) forgery for network intrusion when the traffic crosses the public network.

[0057] Specifically, refer to Figure 3 , is a schematic diagram of an operation and maintenance component provided by this application. The operation and maintenance component may include CA (certificate center) and Proxyssl (identity management module), wherein CA is used to provide an issuance interface for machine-level certificates, and Proxyssl is used to obtain machine-level certificates and provide an issuance interface for process-level certificates.

[0058] The process identity certificate refers to app cert. As an example, the process identity certificate can be an x509 standard certificate. In the embodiment of the present application, the x509 standard certificate can be obtained from the CA through ProxySSL, and then when the edge node and the data center perform TLS communication, encrypted communication can be performed based on the x509 standard certificate.

[0059] In an exemplary embodiment, the method may further include the following steps:

[0060] When the edge node accesses the data center based on the virtual IP address, a stateful service is provided for the edge node.

[0061] In a specific implementation, the data center may provide stateful services and stateless services for edge nodes. For example, a server providing stateful services and a server providing stateless services may be set up in the data center.

[0062] Specifically, for the server, when a client comes to visit, will the server save the client's request information (such as session)? If it is saved, that is, the client's request has a contextual relationship on the server, then the service provided by the server is a stateful service; correspondingly, a stateless service is a server that does not save the client's request information. All the information that the server can obtain comes from the request information carried by the request, or the information saved on other servers (such as a server dedicated to storing sessions).

[0063] Reference Figure 3 The operation and maintenance components can also include Stateless agent: the client in the stateless communication scenario; Stateless service: the server in the stateless communication scenario, providing API to be accessed by the Stateless agent; Stateful agent: the client in the stateful communication scenario; Stateful service: the server in the stateful communication scenario, providing API to be accessed by the Stateful agent.

[0064] In an exemplary embodiment, the method may further include the following steps:

[0065] When providing a stateful service for the edge node, if a communication request sent by the edge node is received, the communication request is forwarded through a proxy interface; the proxy interface is pre-configured based on the virtual address description information.

[0066] In the specific implementation, since the load balance of VIP connections is completely stateless forwarding, the servers in the data center all provide stateless services, while stateful services require additional processing. Therefore, a proxy interface is added to the data center. When a communication request sent by the edge node is received, the communication request can be forwarded through the proxy interface, thereby ensuring the security of the data center network by limiting the access destination (accessed server).

[0067] For example, the proxy interface may be a socks5 (Protocol for sessions traversal across firewall securely, Firewall Secure Session Transformation Protocol Version 5) interface. Figure 3 ,The operation and maintenance components can also include SocksServer, which can provide a standard socks5 interface and ,forwarding capability, so that when a communication request from an edge node is ,received, it can be forwarded based on the socks5 interface.

[0068] In an exemplary embodiment, the method may further include the following steps:

[0069] Monitor the communication with the edge node based on the TLS protocol.

[0070] In an embodiment of the present application, the data center can perform TLS monitoring on the edge node, thereby avoiding security threats during the communication process and ensuring data security.

[0071] In an exemplary embodiment, if the communication request sent by the edge node is received, the communication request is forwarded through the proxy interface, and the method may further include the following steps:

[0072] If the communication request received from the edge node adopts the TLS protocol, the communication request is forwarded based on the TCP protocol through the proxy interface.

[0073] Among them, the SOCKS5 protocol is a 4-layer forwarding protocol. Although stateful services can be implemented through the SOCKS5 interface of the SOCKS5 protocol, the SOCKS5 protocol does not involve encryption, so the communication requests of the TLS protocol need to be forwarded to the real server (RealServer) in the data center. However, some servers are actually unable to perform TLS monitoring, that is, they cannot process TLS protocol communication requests. Therefore, in the embodiment of the present application, the communication behavior of some servers in the data center can be modified to enable TLS monitoring, but some servers in the data center cannot be modified to enable TLS monitoring.

[0074] In response to the problem that some servers cannot be modified to perform tls monitoring, the embodiments of the present application take into account that the client of the edge node is relatively easy to modify, so it expands on the socks5 protocol. By adding an operation and maintenance component that can provide a socks5 interface to the client of the edge node, the ability to convert from tls (client->SocksServer) communication to tcp (SocksServer->RealServer) communication can be achieved. That is, even if the client sends a communication request of the tls protocol, the operation and maintenance component can convert the communication request of the tls protocol into a communication request of tcp and then send it to the corresponding server.

[0075] Specifically, refer to Figure 3 The operation and maintenance components can also include SocksServer (unloading tls): providing a modified socks5 interface and tls unloading capability, that is, the agent uses the tls protocol when accessing, and the SocksServer uses the tcp protocol when accessing the forwarding destination to adapt to those servers that cannot be converted to tls listening; SocksClient: working with SocksServer (unloading tls) to provide a standard socks5 interface to ensure that encrypted communication is used from the edge node to the data center; MirrorService: working with SocksServer (unloading tls) to provide a standard http interface to ensure that encrypted communication is used from the edge node to the data center.

[0076] In the embodiment of the present application, in order to solve the problem of traffic crossing the public network, the edge node and the data center use the TLS protocol for communication to ensure data confidentiality and data integrity during communication. However, the server in the data center may not support TLS monitoring. Therefore, the SocksServer in the data center can convert the TLS protocol communication request from the client into a TCP protocol communication request when receiving the TLS protocol communication request from the client, and forward it to the corresponding server, that is, the server that cannot perform TLS monitoring. Of course, if the server in the data center supports TLS monitoring, TLS monitoring can be performed.

[0077] In related technical solutions, VPN (Virtual Private Network) is used to connect edge nodes and data centers, thereby bypassing the one-way return to the VIP source of the operation and maintenance components. However, the VPN solution has relatively high network requirements. By applying the embodiment of the present application, by transforming the operation and maintenance components, it is possible to avoid dependence on upper-layer VPN network products, improve the flexibility of VIP scenario output (no VPN is required in the solution) and the rational layering of the operation and maintenance solution (VPN is the first communication module accessed by the edge node and cannot be remotely operated and maintained), and provide operation and maintenance capabilities for the edge node.

[0078] In addition, the communication process between the edge node and the data center has encryption / authentication capabilities, supports stateful services and services that cannot monitor TLS. In addition, standard socks5 interfaces and HTTP interfaces are provided at the edge node to provide communication support for upper-layer services, avoiding the need to redevelop the operation and maintenance platform and reducing development costs.

[0079] It should be noted that for the method embodiments, for the sake of simplicity, they are all expressed as a series of action combinations, but those skilled in the art should be aware that the embodiments of the present application are not limited by the order of the actions described, because according to the embodiments of the present application, certain steps can be performed in other orders or simultaneously. Secondly, those skilled in the art should also be aware that the embodiments described in the specification are all preferred embodiments, and the actions involved are not necessarily required by the embodiments of the present application.

[0080] Based on the above embodiments, this embodiment further provides a communication device, which is applied to electronic devices such as terminal devices and servers.

[0081] Reference Figure 4 , shows a structural block diagram of an embodiment of a communication device of the present application, which may specifically include the following modules:

[0082] A virtual address description information acquisition module 402 is used to acquire virtual address description information;

[0083] The communication behavior updating module 404 is configured to modify the communication behavior when the edge node accesses the data center based on the virtual IP address according to the virtual address description information.

[0084] In an exemplary embodiment, the device further includes: an authentication module for receiving an authentication request sent by the edge node; and issuing a process identity certificate to the edge node according to the authentication request, so that the edge node communicates with the data center based on the process identity certificate.

[0085] In an exemplary embodiment, the apparatus further includes: a stateful service providing module, configured to provide a stateful service for the edge node when the edge node accesses the data center based on the virtual IP address.

[0086] In an exemplary embodiment, the device also includes: a proxy forwarding module, which is used to forward the communication request sent by the edge node through a proxy interface if a communication request is received when providing stateful services for the edge node; the proxy interface is pre-configured based on the virtual address description information.

[0087] In an exemplary embodiment, the proxy forwarding module is configured to forward the communication request received from the edge node based on the TCP protocol through a proxy interface if the communication request adopts the TLS protocol.

[0088] In an exemplary embodiment, the apparatus further includes: a monitoring module, configured to monitor communications with the edge node based on the TLS protocol.

[0089] In an exemplary embodiment, the apparatus further includes: an operation and maintenance capability providing module, configured to provide operation and maintenance services for the edge node when the edge node accesses the data center based on the virtual IP address.

[0090] An embodiment of the present application further provides a non-volatile readable storage medium, which stores one or more modules (programs). When the one or more modules are applied to a device, the device can execute instructions (instructions) of each method step in the embodiment of the present application.

[0091] The present application provides one or more machine-readable media having instructions stored thereon, which, when executed by one or more processors, cause an electronic device to perform one or more of the methods described in the above embodiments. In the present application, the electronic device includes various types of devices such as terminal devices and servers (clusters).

[0092] The embodiments of the present disclosure may be implemented as a device configured as desired using any appropriate hardware, firmware, software, or any combination thereof, and the device may include electronic devices such as terminal devices and servers (clusters). Figure 5 An exemplary apparatus 500 that can be used to implement various embodiments described in this application is schematically illustrated.

[0093] For one embodiment, Figure 5 An exemplary apparatus 500 is shown having one or more processors 502, a control module (chip set) 504 coupled to at least one of the processor(s) 502, a memory 506 coupled to the control module 504, a non-volatile memory (NVM) / storage device 508 coupled to the control module 504, one or more input / output devices 510 coupled to the control module 504, and a network interface 512 coupled to the control module 504.

[0094] The processor 502 may include one or more single-core or multi-core processors, and the processor 502 may include any combination of general-purpose processors or dedicated processors (e.g., graphics processors, application processors, baseband processors, etc.). In some embodiments, the apparatus 500 can serve as a terminal device, server (cluster), or other device described in the embodiments of the present application.

[0095] In some embodiments, the apparatus 500 may include one or more computer-readable media (e.g., memory 506 or NVM / storage 508) having instructions 514 and one or more processors 502 configured in combination with the one or more computer-readable media to execute the instructions 514 to implement a module to perform the actions described in the present disclosure.

[0096] For one embodiment, the control module 504 may include any suitable interface controller to provide any suitable interface to at least one of the processor(s) 502 and / or any suitable device or component in communication with the control module 504 .

[0097] The control module 504 may include a memory controller module to provide an interface to the memory 506. The memory controller module may be a hardware module, a software module, and / or a firmware module.

[0098] The memory 506 can be used, for example, to load and store data and / or instructions 514 for the device 500. For one embodiment, the memory 506 can include any suitable volatile memory, such as a suitable DRAM. In some embodiments, the memory 506 can include double data rate type four synchronous dynamic random access memory (DDR4 SDRAM).

[0099] For one embodiment, the control module 504 may include one or more input / output controllers to provide interfaces to the NVM / storage device 508 and the input / output device(s) 510 .

[0100] For example, NVM / storage 508 may be used to store data and / or instructions 514. NVM / storage 508 may include any suitable non-volatile memory (e.g., flash memory) and / or may include any suitable non-volatile storage device(s) (e.g., one or more hard disk drives (HDDs), one or more compact disk (CD) drives, and / or one or more digital versatile disk (DVD) drives).

[0101] NVM / storage device 508 may include storage resources that are physically part of the device on which apparatus 500 is installed, or it may be accessible to the device without being part of the device. For example, NVM / storage device 508 may be accessible over a network via input / output device(s) 510.

[0102] (One or more) input / output devices 510 may provide an interface for apparatus 500 to communicate with any other appropriate devices. Input / output devices 510 may include communication components, audio components, sensor components, etc. Network interface 512 may provide an interface for apparatus 500 to communicate via one or more networks. Apparatus 500 may wirelessly communicate with one or more components of a wireless network according to any of one or more wireless network standards and / or protocols, for example, accessing a wireless network based on a communication standard, such as WiFi, 2G, 3G, 4G, 5G, etc., or a combination thereof for wireless communication.

[0103] For one embodiment, at least one of the processor(s) 502 may be packaged together with the logic of one or more controllers (e.g., a memory controller module) of the control module 504. For one embodiment, at least one of the processor(s) 502 may be packaged together with the logic of one or more controllers of the control module 504 to form a system-in-package (SiP). For one embodiment, at least one of the processor(s) 502 may be integrated on the same die with the logic of one or more controllers of the control module 504. For one embodiment, at least one of the processor(s) 502 may be integrated on the same die with the logic of one or more controllers of the control module 504 to form a system-on-chip (SoC).

[0104] In various embodiments, the apparatus 500 may be, but is not limited to, a terminal device such as a server, a desktop computing device, or a mobile computing device (e.g., a laptop computing device, a handheld computing device, a tablet computer, a netbook, etc.). In various embodiments, the apparatus 500 may have more or fewer components and / or a different architecture. For example, in some embodiments, the apparatus 500 includes one or more cameras, a keyboard, a liquid crystal display (LCD) screen (including a touchscreen display), a non-volatile memory port, multiple antennas, a graphics chip, an application-specific integrated circuit (ASIC), and a speaker.

[0105] Among them, the main control chip can be used as a processor or control module in the detection device, sensor data, location information, etc. are stored in the memory or NVM / storage device, the sensor group can be used as an input / output device, and the communication interface may include a network interface.

[0106] As for the device embodiment, since it is basically similar to the method embodiment, the description is relatively simple, and the relevant parts can be referred to the partial description of the method embodiment.

[0107] The various embodiments in this specification are described in a progressive manner, and each embodiment focuses on the differences from other embodiments. The same or similar parts between the various embodiments can be referenced to each other.

[0108] The embodiments of the present application are described with reference to the flowcharts and / or block diagrams of the methods, terminal devices (systems), and computer program products according to the embodiments of the present application. It should be understood that each process and / or box in the flowchart and / or block diagram, as well as the combination of the processes and / or boxes in the flowchart and / or block diagram, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable communication terminal device to generate a machine, so that the instructions executed by the processor of the computer or other programmable communication terminal device generate instructions for implementing the steps in the process. Figure 1 a process or multiple processes and / or boxes Figure 1 A device that provides the functions specified in a block or multiple blocks.

[0109] These computer program instructions may also be stored in a computer readable memory that can direct a computer or other programmable communication terminal device to operate in a specific manner, so that the instructions stored in the computer readable memory produce a manufactured product including an instruction device, which implements the process Figure 1 a process or multiple processes and / or boxes Figure 1 The function specified in one or more boxes.

[0110] These computer program instructions can also be loaded onto a computer or other programmable communication terminal device so that a series of operating steps are executed on the computer or other programmable terminal device to produce a computer-implemented process, thereby providing instructions for executing on the computer or other programmable terminal device to implement the process. Figure 1 a process or multiple processes and / or boxes Figure 1 A step that specifies a function in one or more boxes.

[0111] Although preferred embodiments of the present invention have been described, those skilled in the art may make additional changes and modifications to these embodiments once they become aware of the basic inventive concepts. Therefore, the appended claims are intended to be interpreted as including the preferred embodiments and all changes and modifications that fall within the scope of the embodiments of the present invention.

[0112] Finally, it should be noted that, in this document, relational terms such as first and second, etc., are used only to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any actual relationship or order between these entities or operations. Moreover, the terms "comprises," "comprising," or any other variations thereof are intended to cover non-exclusive inclusion, such that a process, method, article, or terminal device that includes a series of elements includes not only those elements, but also other elements not explicitly listed, or elements inherent to such process, method, article, or terminal device. In the absence of further limitations, an element defined by the phrase "comprising a ..." does not exclude the presence of additional identical elements in the process, method, article, or terminal device that includes the element.

[0113] The above is a detailed introduction to a communication method and device, an electronic device and a storage medium provided by the present application. Specific examples are used in this article to illustrate the principles and implementation methods of the present application. The description of the above embodiments is only used to help understand the method of the present application and its core idea; at the same time, for general technical personnel in this field, based on the ideas of the present application, there will be changes in the specific implementation methods and application scope. In summary, the content of this specification should not be understood as a limitation on the present application.

Claims

1. A communication method, characterized in that: Applied to a data center, the data center is connected to an edge node, the method comprises: The data center obtains virtual address description information; the virtual address description information is described by defining a public file, and the virtual address description information at least includes a VIP address and a communication type; The data center changes the communication behavior when the edge node accesses the data center based on the virtual IP address according to the virtual address description information; the communication behavior of the data center when the edge node accesses the data center based on the virtual IP address according to the virtual address description information is changed specifically as follows: the operation and maintenance components that need to communicate in the data center and the edge node adapt to the change code by reading the virtual address description information, and then change their own communication behavior to adapt to the communication scenario using the virtual IP address.

2. The method according to claim 1, characterized in that After the communication behavior when the edge node accesses the data center based on the virtual IP address is changed according to the virtual address description information, the method includes: Receiving an authentication request sent by the edge node; A process identity certificate is issued to the edge node according to the authentication request, so that the edge node communicates with the data center based on the process identity certificate.

3. The method according to claim 1, characterized in that The method further comprises: When the edge node accesses the data center based on the virtual IP address, a stateful service is provided for the edge node.

4. The method according to claim 3, characterized in that: The method further comprises: When providing a stateful service for the edge node, if a communication request sent by the edge node is received, the communication request is forwarded through a proxy interface; the proxy interface is pre-configured based on the virtual address description information.

5. The method according to claim 4, characterized in that If the communication request sent by the edge node is received, the communication request is forwarded through the proxy interface, including: If the communication request received from the edge node adopts the TLS protocol, the communication request is forwarded based on the TCP protocol through the proxy interface.

6. The method according to claim 5, characterized in that The method further comprises: Monitor the communication with the edge node based on the TLS protocol.

7. The method according to any one of claims 1 to 6, characterized in that: The method further comprises: When the edge node accesses the data center based on the virtual IP address, an operation and maintenance service is provided for the edge node.

8. A communication device, characterized in that: Applied to a data center, the data center is connected to an edge node, and the device comprises: A virtual address description information acquisition module, used for the data center to acquire virtual address description information; the virtual address description information is described by defining a public file, and the virtual address description information at least includes a VIP address and a communication type; A communication behavior update module is used for the data center to change the communication behavior of the edge node when accessing the data center based on the virtual IP address according to the virtual address description information; changing the communication behavior of the data center when the edge node accesses the data center based on the virtual IP address according to the virtual address description information is specifically: the operation and maintenance components that need to communicate in the data center and the edge node read the virtual address description information to adapt the change code, and then change their own communication behavior to adapt to the communication scenario using the virtual IP address.

9. An electronic device, characterized in that: include: processor; and A memory having executable codes stored thereon, which, when executed, causes the processor to execute the communication method as claimed in one or more of claims 1-7.

10. One or more machine-readable media having executable codes stored thereon, which, when executed, cause a processor to perform the communication method as claimed in one or more of claims 1-7.

Images