A communication system and communication method between a test environment and a third-party Internet environment
By deploying nginx reverse proxy and testing F5 load on the production Internet domain, the inconvenience and security risks of communication between the test environment and the third-party Internet environment are solved, unified management and security policies are implemented, and the test environment and third-party Internet are ensured. The quality of the application's joint access and online access.
Patent Information
- Application Number
- CN202210508153.1
- Authority / Receiving Office
- CN · China
- Patent Type
- Patents(China)
- Current Assignee / Owner
- Filing Date
- 2022-05-10
- Publication Date
- 2025-02-07
- Estimated Expiration
- 2042-05-10
AI Technical Summary
There are inconveniences and security risks in communication between the test environment and third-party Internet environments, and there is a lack of unified management and implementation of security policies.
Deploy nginx reverse proxy and test F5 load on the production Internet domain, configure the test environment application forwarding port and third-party Internet application forwarding port, realize the communication between nginx reverse proxy and test environment application, and realize the third-party through public network IP mapping Intercommunication between Internet applications and test environment applications.
It realizes unified management of the production environment and test environment and third-party Internet applications, enhances the security control of the test environment, and ensures the joint access and online quality of the test environment and third-party Internet applications.
Smart Images

Figure CN115086210B_ABST
Abstract
Description
Technical Field
[0001] The present invention relates to the field of network communication technology, and in particular to a communication system and a communication method between a test environment and a third-party Internet environment, mainly realizing communication between a telecom operator's test environment and a third-party Internet environment. Background Art
[0002] As telecom operators and Internet applications connect, production environments usually plan Internet domains to deploy applications that interact with the outside world, such as Figure 1 The communication system between the production environment and the third-party Internet environment shown ensures the security of access.
[0003] However, for the test environment, there is usually no plan for external interaction with the Internet domain, which not only brings inconvenience to the joint debugging and access of the test environment and third-party Internet applications, but also poses a security risk. Summary of the invention
[0004] In view of the above problems existing in the prior art, the present invention provides a communication system and a communication method between a test environment and a third-party Internet environment.
[0005] The present invention discloses a communication system between a test environment and a third-party Internet environment, comprising: a host;
[0006] The host is set in the production Internet domain, and an nginx reverse proxy is deployed on the host. The nginx reverse proxy configures a test environment application forwarding port and a third-party Internet application forwarding port. The test environment application forwarding port is configured to test an F5 load;
[0007] The nginx reverse proxy communicates with the test environment application in the test environment, wherein the nginx reverse proxy opens up the relevant network policy with the test environment according to the test environment application port; the test environment opens up the network policy with the nginx reverse proxy according to the third-party Internet application forwarding port configured on the nginx reverse proxy;
[0008] The test F5 load maps the public IP, and the nginx reverse proxy host maps the public IP.
[0009] As a further improvement of the present invention, the number of deployed hosts is greater than 2.
[0010] The present invention also discloses a communication method based on the above communication system, comprising: a third-party Internet application accesses a test environment application;
[0011] The method for the third-party Internet application to access the test environment application includes:
[0012] The third-party Internet application accesses the public network mapping IP of the test F5 load, and the request passes through the test F5 load to the nginx reverse proxy, which forwards the relevant request to the test environment application.
[0013] As a further improvement of the present invention, it also includes: the test environment application accesses the third-party Internet application;
[0014] The test environment application accesses a third-party Internet application, including:
[0015] The test environment application accesses the third-party Internet application forwarding port configured on the nginx reverse proxy, and the nginx reverse proxy accesses the third-party Internet application through the public network mapping IP.
[0016] Compared with the prior art, the present invention has the following beneficial effects:
[0017] 1. Unified management: unified management of production environment and test environment, and interaction with third-party Internet applications;
[0018] 2. Security control: The test environment implements the same security policies as the production environment, and opens up relevant addresses in a targeted manner;
[0019] 3. Application mutual access: The test environment and third-party Internet applications can call and debug each other to ensure the quality of online launch. BRIEF DESCRIPTION OF THE DRAWINGS
[0020] Figure 1 A schematic diagram of the communication system framework between the existing production environment and the third-party Internet environment;
[0021] Figure 2 A schematic diagram of a communication system framework between a test environment and a third-party Internet environment disclosed in an embodiment of the present invention. DETAILED DESCRIPTION
[0022] In order to make the purpose, technical solution and advantages of the embodiments of the present invention clearer, the technical solution in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments are part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.
[0023] The present invention is further described in detail below in conjunction with the accompanying drawings:
[0024] The present invention provides a communication system and a communication method between a test environment and a third-party Internet environment, which can unify the interaction between the test environment and the production environment and the third-party Internet application, increase the security control of external access, and ensure the joint debugging access of the test environment and the third-party Internet application.
[0025] Specific:
[0026] like Figure 2 As shown, the communication system between the test environment of the present invention and the third-party Internet environment is Figure 1 On the basis of the above, add nginx reverse proxy on the production Internet domain, add test F5 load in the production environment, and add test environment application in the test domain of the test environment; specifically:
[0027] Prepare N hosts in the production Internet domain. N is based on the functional access volume and high availability. It is recommended to deploy 2+ hosts. Deploy nginx reverse proxy on the prepared hosts, and configure the test environment application forwarding port and the third-party Internet application forwarding port. The implementation method is as follows:
[0028]
[0029] The present invention configures a test F5 load on a test environment application forwarding port, which ensures high availability of the application.
[0030] The nginx reverse proxy of the present invention communicates with the test environment application under the test environment, wherein, from nginx to the test environment: the nginx reverse proxy opens up the relevant network policies with the test environment according to the test environment application port; from the test environment to nginx: the test environment opens up the relevant network policies with the nginx reverse proxy according to the third-party Internet application forwarding port configured on the nginx reverse proxy.
[0031] The test F5 load of the present invention maps a public network IP, and the nginx reverse proxy host maps a public network IP; thereby achieving communication between a third-party Internet application and a test environment application.
[0032] Based on Figure 2 The communication system shown, the communication method between the test environment and the third-party Internet environment of the present invention, includes:
[0033] 1. Third-party Internet applications access the test environment application:
[0034] The third-party Internet application accesses the public network mapping IP of the test F5 load, and the request passes through the test F5 load to the nginx reverse proxy, which forwards the relevant request to the test environment application.
[0035] 2. Test environment applications access third-party Internet applications:
[0036] The test environment application accesses the third-party Internet application forwarding port configured on the nginx reverse proxy, and the nginx reverse proxy accesses the third-party Internet application through the public network mapping IP.
[0037] The advantages of the present invention are:
[0038] 1. Unified management: unified management of production environment and test environment, and interaction with third-party Internet applications;
[0039] 2. Security control: The test environment implements the same security policies as the production environment, and opens up relevant addresses in a targeted manner;
[0040] 3. Application mutual access: The test environment and third-party Internet applications can call and debug each other to ensure the quality of online launch.
[0041] The above are only preferred embodiments of the present invention and are not intended to limit the present invention. For those skilled in the art, the present invention may have various modifications and variations. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of the present invention shall be included in the protection scope of the present invention.
Claims
1. A communication system between a test environment and a third-party Internet environment, characterized in that: include: Host; The host is set in the Internet domain of the production environment. In the production environment, an nginx reverse proxy is deployed on the host. The nginx reverse proxy configures a test environment application forwarding port and a third-party Internet application forwarding port. The test environment application forwarding port is configured to test the F5 load; The nginx reverse proxy communicates with the test environment application in the test environment, wherein the nginx reverse proxy opens up the network policy with the test environment according to the test environment application port; the test environment opens up the network policy with the nginx reverse proxy according to the third-party Internet application forwarding port configured on the nginx reverse proxy; The test F5 load maps a first public network mapping IP, and the nginx reverse proxy maps a second public network mapping IP; a third-party Internet application accesses the first public network mapping IP of the test F5 load, and the request passes through the test F5 load to the nginx reverse proxy, and the nginx reverse proxy forwards the relevant request to the test environment application; the test environment application accesses the third-party Internet application forwarding port configured on the nginx reverse proxy, and the nginx reverse proxy accesses the third-party Internet application through the second public network mapping IP.
2. The communication system according to claim 1, characterized in that: The number of hosts deployed is greater than 2.
3. A communication method based on the communication system according to claim 1 or 2, characterized in that: include: Third-party Internet applications access the test environment application; The method for the third-party Internet application to access the test environment application includes: The third-party Internet application accesses the first public network mapping IP of the test F5 load, and the request passes through the test F5 load to the nginx reverse proxy, which forwards the relevant request to the test environment application.
4. The communication method according to claim 3, characterized in that: Also includes: The test environment application accesses third-party Internet applications; The test environment application accesses a third-party Internet application, including: The test environment application accesses the third-party Internet application forwarding port configured on the nginx reverse proxy, and the nginx reverse proxy accesses the third-party Internet application through the second public network mapping IP.
Citation Information
Patent Citations
APP and server interaction system and method
CN107426341A
Test environment access method, device, readable storage medium and computer equipment
CN113900939A