Application deployment method and device, storage medium and electronic device

Abstract

The present invention provides an application deployment method and device, a storage medium and an electronic device, which are applied to a network service platform that cannot be accessed by an external network, including: reading application deployment tasks in an encrypted task queue of an external network by calling a preset proxy server in the platform, the encrypted task queue is used to save tasks of applications that the external network needs to deploy on the network service platform; decrypting the application deployment tasks to obtain application packages and deployment step information in the application deployment tasks; processing the application packages based on the deployment step information, and deploying applications corresponding to the application packages on the network service platform. In this way, when the external network cannot access the network service platform, the application programs of the external network can be deployed to the network service platform, thereby ensuring that the types of applications in the network service platform are complete and the versions are updated in a timely manner, thereby providing users with better services.

Description

Technical Field

[0001] The present invention relates to the field of computer technology, and in particular to a method and device for deploying an application program, a storage medium, and an electronic device. Background Art

[0002] With the development of computer technology, computer technology has begun to be applied in various industries, and different industries have different requirements for the network formed by computer equipment. For example, some companies use computer equipment to form a private network, which can only transmit data internally and cannot transmit data to the outside.

[0003] In addition to the private networks mentioned above, there are also networks that only support one-way access, such as a network architecture that only supports access to external networks but does not support external networks accessing it. Platforms that use this type of network architecture cannot deploy applications through external networks, which can easily lead to untimely or incomplete application updates on this platform, making it impossible to provide users with quality services. Summary of the invention

[0004] In view of this, the present invention provides an application deployment method and device, a storage medium and an electronic device. By using the present invention, an application of an external network can be deployed to a network service platform that cannot be accessed by the external network. Thus, the version of the application in the network service platform can be updated and the application can be installed in time, so that the network service platform can provide users with better quality services.

[0005] To achieve the above objectives, the embodiments of the present invention provide the following technical solutions:

[0006] A first aspect of the present invention discloses a method for deploying an application program, which is applied to a network service platform that cannot be accessed by an external network. The method comprises:

[0007] Calling a preset proxy server to read application deployment tasks in the encrypted task queue of the external network, wherein the encrypted task queue is used to store tasks of application programs that the external network needs to deploy on the network service platform;

[0008] Decrypting the application deployment task to obtain the application package and deployment step information in the application deployment task;

[0009] The application package is processed based on the deployment step information, and an application corresponding to the application package is deployed on the network service platform.

[0010] Optionally, the method described above calls a preset proxy server to read the application deployment task in the encrypted task queue of the external network, including:

[0011] Determine whether the proxy server can access the server of the external network;

[0012] When it is determined that the proxy server can access the server of the external network, using the proxy server to access the encryption task queue in the server of the external network, and reading the application deployment task from the encryption task queue;

[0013] When it is determined that the proxy server cannot access the service end of the external network, adding a server proxy in the network service platform, and using the service proxy to register the proxy server on the service end of the external network;

[0014] The registered proxy server is used to access the encrypted task queue in the server of the external network, and the application deployment task is read from the encrypted task queue.

[0015] In the above method, optionally, the process in which the external network saves the application deployment task in the encrypted task queue includes:

[0016] Determining the application program to be deployed that needs to be deployed to the network service platform;

[0017] Acquire the application package and deployment step information of the application to be deployed, and encrypt the application package and deployment step information to obtain an application deployment task corresponding to the application to be deployed;

[0018] The application deployment task of the application to be deployed is saved in a preset encrypted task queue.

[0019] The above method may optionally further include:

[0020] Generate an execution result of the application deployment task;

[0021] The execution result is encrypted and sent to the external network.

[0022] The above method may optionally further include:

[0023] When the encrypted execution result is successfully sent to the external network, the server of the external network is triggered to decrypt the execution result, and process each application deployment task in the encrypted task queue based on the decrypted execution result.

[0024] A second aspect of the present invention discloses a deployment device for an application program, which is applied to a network service platform that cannot be accessed by an external network, and the device comprises:

[0025] A reading unit, used to call a preset proxy server to read the application deployment task in the encrypted task queue of the external network, wherein the encrypted task queue is used to store the task of the application program that the external network needs to deploy on the network service platform;

[0026] A decryption unit, used to decrypt the application deployment task to obtain the application package and deployment step information in the application deployment task;

[0027] A deployment unit is used to process the application package based on the deployment step information and deploy an application corresponding to the application package on the network service platform.

[0028] In the above device, optionally, the reading unit includes:

[0029] A judging subunit, used for judging whether the proxy server can access the server of the external network;

[0030] A first reading subunit is used for, when it is determined that the proxy server can access the server of the external network, using the proxy server to access the encryption task queue in the server of the external network, and reading the application deployment task from the encryption task queue;

[0031] A registration subunit, configured to add a server agent to the network service platform when it is determined that the proxy server cannot access the service end of the external network, and use the service agent to register the proxy server on the service end of the external network;

[0032] The second reading subunit is used to use the registered proxy server to access the encryption task queue in the server of the external network, and read the application deployment task from the encryption task queue.

[0033] The above device may optionally further include:

[0034] A determination unit, used to determine the to-be-deployed application program that needs to be deployed to the network service platform;

[0035] An acquisition unit, used to acquire an application package and deployment step information of the application to be deployed, and encrypt the application package and deployment step information to obtain an application deployment task corresponding to the application to be deployed;

[0036] The saving unit is used to save the application deployment task of the application to be deployed in a preset encryption task queue.

[0037] The above device may optionally further include:

[0038] A generating unit, used to generate an execution result of the application deployment task;

[0039] The sending unit is used to encrypt the execution result and send the encrypted execution result to the external network.

[0040] The above device may optionally further include:

[0041] The trigger unit is used to trigger the server of the external network to decrypt the execution result after the encrypted execution result is successfully sent to the external network, and to process each application deployment task in the encrypted task queue based on the decrypted execution result.

[0042] A third aspect of the present invention discloses a storage medium, which includes stored instructions, wherein when the instructions are executed, a device where the storage medium is located is controlled to execute the above-mentioned method for deploying an application.

[0043] A fourth aspect of the present invention discloses an electronic device, comprising a memory and one or more instructions, wherein the one or more instructions are stored in the memory and are configured to be executed by one or more processors to implement the above-mentioned method for deploying an application.

[0044] Compared with the prior art, the present invention has the following advantages:

[0045] The present invention provides an application deployment method and device, a storage medium and an electronic device, which are applied to a network service platform that cannot be accessed by an external network, including: reading application deployment tasks in an encrypted task queue of an external network by calling a preset proxy server in the platform, the encrypted task queue is used to save tasks of applications that the external network needs to deploy on the network service platform; decrypting the application deployment tasks to obtain application packages and deployment step information in the application deployment tasks; processing the application packages based on the deployment step information, and deploying applications corresponding to the application packages on the network service platform. In this way, when the external network cannot access the network service platform, the application programs of the external network can be deployed to the network service platform, thereby ensuring that the types of applications in the network service platform are complete and the versions are updated in a timely manner, thereby providing users with better services. BRIEF DESCRIPTION OF THE DRAWINGS

[0046] In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are only embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on the provided drawings without paying creative work.

[0047] Figure 1 A method flow chart of a method for deploying an application program is provided for an embodiment of the present invention;

[0048] Figure 2 A flow chart of a method for an external network to save an application deployment task to an encrypted task queue provided by an embodiment of the present invention;

[0049] Figure 3 A flow chart of a method for calling a preset proxy server and reading an application deployment task in an encrypted task queue of an external network provided in an embodiment of the present invention;

[0050] Figure 4 A structural diagram of deploying an application in a government network provided by an embodiment of the present invention;

[0051] Figure 5 A schematic diagram of the structure of a deployment device for an application provided by an embodiment of the present invention;

[0052] Figure 6 A schematic diagram of the structure of an electronic device provided by an embodiment of the present invention. DETAILED DESCRIPTION

[0053] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0054] In this application, the terms "comprises", "comprising" or any other variations thereof are intended to cover non-exclusive inclusion, so that a process, method, article or device comprising a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or device. In the absence of further restrictions, an element defined by the sentence "comprising a ..." does not exclude the presence of other identical elements in the process, method, article or device comprising the element.

[0055] The present invention can be used in many general or special computing device environments or configurations, such as personal computers, server computers, handheld or portable devices, tablet devices, multi-processor devices, distributed computing environments including any of the above devices or devices, etc.

[0056] The present invention is applied to a network service platform that cannot be accessed by an external network, that is, a network service platform that only allows one-way external access and does not allow one-way external access. For example, the external network can be a public network, and the network service platform can be a government network. Specifically, the government network only allows one-way outgoing and does not allow one-way incoming, that is, only the government network is allowed to access the public network in one direction, and the public network is not allowed to access the government network in one direction.

[0057] Reference Figure 1 , a method flow chart of a method for deploying an application program is provided in an embodiment of the present invention, and the specific description is as follows:

[0058] S101, calling a preset proxy server to read an application deployment task in an encrypted task queue of an external network.

[0059] A proxy server is pre-set in the network service platform. The proxy server can be represented by an agent. The encrypted task queue of the external network can be accessed through the agent, and then the application deployment tasks in the encrypted task queue can be read.

[0060] The external network of the present invention may be a public network, or may not be any network architecture in the network service platform.

[0061] The encryption task queue is used to save the tasks of the application programs that the external network needs to deploy on the network service platform; the encryption task queue can contain at least one application deployment task, and the application deployment task in the encryption task queue is set by the server of the external network. Figure 2 , which is a flow chart of a method for an external network to save an application deployment task to an encrypted task queue provided by an embodiment of the present invention, and is specifically described as follows:

[0062] S201: Determine the application program to be deployed to the network service platform.

[0063] The external network first determines the applications to be deployed to the network service platform.

[0064] S202: Acquire an application package and deployment step information of the application to be deployed, and encrypt the application package and deployment step information to obtain an application deployment task corresponding to the application to be deployed.

[0065] The application package is stored in the object storage. The object storage storing the application package can be accessed through the signature address, and then the application package of the application to be deployed can be downloaded. After downloading the application package, it is necessary to obtain the deployment step information corresponding to the application to be deployed. Furthermore, the deployment step information contains detailed steps for processing the application package.

[0066] The application package and deployment step information are encrypted using a preset encryption algorithm to obtain an encrypted application deployment task.

[0067] S203: Save the application deployment task of the application to be deployed in a preset encryption task queue.

[0068] It should be noted that the encryption task queue is set in the redis of the external network, and the encryption task queue can be a redis queue.

[0069] Preferably, the encryption task encryption queue includes multiple application deployment tasks, and the tasks in the encryption task queue are arranged in order. Preferably, they can be arranged in a first-in-first-out manner, and can also be arranged according to priority. For example, when arranging according to priority, after obtaining the application deployment task, it is necessary to calculate the priority of the application deployment task. When calculating the priority of the application deployment task, it can be calculated according to the urgency of the application deployment task. After obtaining the priority of the application deployment task, it is necessary to compare the priority of the application deployment task with the priority of each task in the encryption task queue. Tasks with higher priorities are arranged in front, and tasks with lower priorities are arranged in the back. It should be noted that when the priorities are the same, the tasks generated first are arranged in front. Furthermore, the tasks arranged in front can be read faster.

[0070] In the method provided by the embodiment of the present invention, the external network cannot directly deploy the application program on the network service platform, so an encrypted task queue for storing application deployment tasks is set in the redis of the external network, so that the network platform can obtain the application deployment tasks through the encrypted task queue. The application deployment tasks are encrypted tasks, thereby ensuring the security of the data.

[0071] Reference Figure 3 , which is a flowchart of a method for calling a preset proxy server and reading an application deployment task in an encrypted task queue of an external network provided by an embodiment of the present invention, is specifically described as follows:

[0072] S301, determine whether the proxy server can access the server of the external network; when it is determined that the proxy server can access the server of the external network, execute S302; when it is determined that the proxy server cannot access the server of the external network, execute S303.

[0073] In the process of using a proxy server to obtain application deployment tasks, it is necessary to first determine whether the proxy server can directly access the server of the external network. When it is determined that the proxy server cannot directly access the server of the external network, S303 needs to be executed; when it is determined that the proxy server can directly access the server of the external network, S302 needs to be executed.

[0074] Furthermore, one way to determine whether the proxy server can access the server of the external network is to determine whether the proxy server has the authority to access the server of the external network. If not, it is determined that the proxy server cannot access the server of the external network. If so, it is determined that the proxy server can access the server of the external network. Further, it can also be determined by whether the proxy server has information registered in the external network. If the proxy server has information registered in the external network, it can be determined that the proxy server can access the server of the external network. If the proxy server does not have information registered in the external network, it can be determined that the proxy server cannot access the server of the external network. Further, it can also be determined by whether the proxy server has record information of accessing the external network. If the proxy server has record information of accessing the external network, it can be determined that the proxy server can access the server of the external network. If the proxy server does not have record information of accessing the external network, it can be determined that the proxy server cannot access the server of the external network.

[0075] S302: Use a proxy server to access the encryption task queue in the server of the external network, and read the application deployment task from the encryption task queue.

[0076] The proxy server is used to access the API interface of the server deployment task of the external network, and then the encrypted task queue of the external network can be accessed to read the application deployment task from the encrypted task queue.

[0077] S303: Add a server agent to the network service platform, and use the service agent to register the proxy server on the service end of the external network.

[0078] The server agent can be represented by proxy, which accesses the server of the external network through proxy and registers for the agent of the network service platform.

[0079] S304: Use the registered proxy server to access the encryption task queue in the server of the external network, and read the application deployment task from the encryption task queue.

[0080] It should be noted that after the agent registration is completed, the registered agent is used to access the API interface of the server deployment task on the external network, so that the encrypted task queue in the server of the external network can be accessed, and then the application deployment task can be read from the encrypted task queue.

[0081] Preferably, the application deployment tasks in the encryption task queue are arranged in order, and the first task in the encryption task queue is read.

[0082] S102: Decrypt the application deployment task to obtain the application package and deployment step information in the application deployment task.

[0083] In the method provided by an embodiment of the present invention, when decrypting an application deployment task, it is necessary to use a decryption algorithm corresponding to the encryption algorithm used in step S202. For example, when the encryption algorithm used in S202 is a hash encryption algorithm, it is necessary to use a decryption algorithm corresponding to the hash encryption algorithm.

[0084] After decrypting the application deployment task, the application package and deployment step information in the application deployment task can be obtained. Furthermore, the deployment step information includes a detailed step process for processing the application package.

[0085] S103: Process the application package based on the deployment step information, and deploy the application corresponding to the application package on the network service platform.

[0086] It should be noted that when the network service platform deploys the application corresponding to the application package, it can be to install the application corresponding to the application package on the network service platform, or it can be to update the version of the application corresponding to the application package in the network service platform.

[0087] Preferably, whether updating the application version or installing the application, the corresponding steps need to be executed in sequence based on the deployment step information, so that the application corresponding to the application package can be deployed on the network service platform.

[0088] It should be noted that after the network service platform deploys the application corresponding to the application package, the execution result of the application deployment task is generated, the execution result is encrypted, and the encrypted execution result is sent to the external network; when the encrypted execution result is successfully sent to the external network, the server of the external network is triggered to decrypt the execution result, and process each application deployment task in the encrypted task queue based on the decrypted execution result.

[0089] Preferably, the encryption algorithm and decryption algorithm here may be the same as or different from the encryption algorithm and decryption algorithm used above; the encryption algorithm and decryption algorithm here correspond to each other. For example, the encryption algorithm used here may be the DES encryption algorithm, and the encryption algorithm corresponding to the DES encryption algorithm is used here for decryption processing.

[0090] Furthermore, after obtaining the decrypted execution result, if the execution result is a successful execution, the application deployment task corresponding to the execution result in the encrypted task queue can be deleted; if the execution result is a failed execution, the application deployment task mark corresponding to the execution result in the encrypted task queue can be added to a temporarily generated failure queue so that the tasks in the failure queue can be re-read later; preferably, when the execution result is a failed execution, it can also be determined whether the total number of execution failures of the application deployment tasks corresponding to the execution result in the encrypted task queue has reached a preset number; if not, the application deployment task may not be processed so that the network service platform can continue to read the application deployment task; if the preset number has been reached, the application deployment task is deleted from the encrypted task queue so that the network service platform can read the next task.

[0091] In the method provided by the embodiment of the present invention, the method provided by the present invention is applied to a network service platform that cannot be accessed by an external network, and by calling a preset proxy server in the platform, the application deployment task is read in the encrypted task queue of the external network, and the encrypted task queue is used to save the task of the application program that the external network needs to deploy on the network service platform; the application deployment task is decrypted to obtain the application package and deployment step information in the application deployment task; the application package is processed based on the deployment step information, and the application corresponding to the application package is deployed on the network service platform. In this way, when the external network cannot access the network service platform, the application program of the external network can be deployed to the network service platform, and then the completeness of the application types and the timely update of the versions in the network service platform can be ensured, so as to provide users with better services.

[0092] In order to further illustrate the solution provided by the present invention, the government network and the public cloud network are used as examples for illustration. When the current public cloud network is used, when remotely deploying applications to other server hosts through the service end (server) of the public cloud network, the server end needs to be able to actively access the target network where the host is located to complete the automatic deployment. If the server cannot actively access the target network where the host is located, it can also actively access the target network where the host is located by configuring a proxy. The government network only allows one-way out and does not allow one-way in, that is, the government network is only allowed to access the public cloud network in one direction, and the public cloud network is not allowed to access the government network in one direction. In this case, the original method cannot be used to safely and automatically deploy the application from the server of the public cloud network to the server host of the government network. At this time, the solution provided by the present invention can be used to deploy the application in the public cloud network to the government network. Refer to Figure 4 , which is a structural diagram of deploying an application in an e-government network provided by an embodiment of the present invention, and is specifically described as follows:

[0093] The figure includes a public cloud network and a government network, wherein the public cloud network includes a server and redis, wherein the server can be represented by server; the government network includes a government Internet of Things area and a government extranet area, wherein the government Internet of Things area includes a server proxy, which can be represented by proxy, and the government extranet area includes a proxy server and a host, wherein the proxy server can be represented by agent.

[0094] In the public network environment, the server submits the deployment application package to the server host in the government extranet area through the server. The deployment task and execution steps are encrypted and stored in the redis queue and then suspended. At the same time, the package is stored in the object storage and requires a signed address to download and access. The detailed information of the task, including the execution steps and the signature download address of the package, can be queried through the API interface provided by the server. The agent is deployed in the government extranet area. The government extranet can access the public network in one direction. At this time, the agent can access the server's API interface to obtain the suspended encrypted task queue. If the agent cannot directly access the server, it can access the server in one direction through the government Internet area proxy proxy to obtain the suspended encrypted task queue. The agent decrypts the encrypted task data obtained and executes the task steps in sequence, and encrypts the execution results and returns them to the server. After receiving the execution results, the server decrypts the data and updates the task results, completing the automatic deployment of the application package from the public network server to the government network server hos. At the same time, the encryption and decryption of the server and the agent ensures the security of interface data transmission during automatic deployment.

[0095] The specific steps are as follows:

[0096] Step A: The server is in the public cloud network, and the program package is stored in the object storage. A signed address is required to access it. The server submits the task of deploying the application package to the host under the government network. The current deployment task information and all operation steps are encrypted and stored in the redis queue in sequence. The deployment task is suspended. The detailed information of the task, including the execution steps and the signature download address of the program package, can be queried through the API interface provided by the server.

[0097] Step B: The agent is located in the government extranet area. If the agent cannot directly access the server, a proxy needs to be added in the government Internet area. The government network agent accesses the public network server through the proxy to complete the agent registration.

[0098] Step C: After the agent is successfully registered, the government network agent can successfully access the API interface of the public network server-side deployment task, and obtain the encrypted task information and all chronological operation steps stored in the redis queue on the server-side.

[0099] Step D: At this time, the agent decrypts the encrypted task information. After the decryption is completed, the agent downloads the deployment package from the task and executes it in sequence in strict accordance with the decrypted operation steps.

[0100] Step E: After the agent completes the task, it encrypts the execution result, accesses the task interface of the server, and returns the encrypted result to the server.

[0101] Step F: After receiving the encrypted result, the server decrypts it and updates the result of the task. The task is automatically executed and security is guaranteed to prevent the public network from eavesdropping and stealing data.

[0102] It should be noted that the deployment task issued by the server is suspended and encrypted in the redis queue. After the agent is registered on the server, it actively accesses the server regularly to obtain the task information suspended in the redis on the server. The agent decrypts the task information and operation steps, and executes in strict accordance with the operation steps. After completion, the encrypted result is returned to the server. The server receives the encrypted result, decrypts it, and updates the task queue result suspended in redis to complete the deployment task. Through the method provided by the present invention, the application program of the external network can be deployed to the network service platform, thereby timely updating the version of the application program in the network service platform and installing the application program in the network service platform, providing users with better services.

[0103] Furthermore, the data communication process between the external network and the network service platform is encrypted, thereby ensuring the security of the data.

[0104] and Figure 1 The method shown in FIG. 1 is relatively corresponding to the method shown in FIG. 1 , an embodiment of the present invention provides a deployment device for an application program, the device being applied to a network service platform that cannot be accessed by an external network, and being used to support Figure 1 For the implementation of the method shown, refer to Figure 5 , is a schematic diagram of the structure of the device provided by an embodiment of the present invention, and is specifically described as follows:

[0105] The reading unit 501 is used to call a preset proxy server to read the application deployment task in the encrypted task queue of the external network, and the encrypted task queue is used to store the task of the application program that the external network needs to deploy on the network service platform;

[0106] A decryption unit 502 is used to decrypt the application deployment task to obtain the application package and deployment step information in the application deployment task;

[0107] The deployment unit 503 is used to process the application package based on the deployment step information and deploy the application corresponding to the application package on the network service platform.

[0108] The device provided by the present invention is applied to a network service platform that cannot be accessed by an external network. By calling a preset proxy server in the platform, the application deployment task is read in the encrypted task queue of the external network, and the encrypted task queue is used to save the task of the application program that the external network needs to deploy on the network service platform; the application deployment task is decrypted to obtain the application package and deployment step information in the application deployment task; the application package is processed based on the deployment step information, and the application corresponding to the application package is deployed on the network service platform. In this way, when the external network cannot access the network service platform, the application program of the external network can be deployed to the network service platform, and then the completeness of the application types and the timely update of the versions in the network service platform can be ensured, so as to provide users with better services.

[0109] In another embodiment provided by the present invention, the reading unit 501 of the device includes:

[0110] A judging subunit, used for judging whether the proxy server can access the server of the external network;

[0111] A first reading subunit is used for, when it is determined that the proxy server can access the server of the external network, using the proxy server to access the encryption task queue in the server of the external network, and reading the application deployment task from the encryption task queue;

[0112] A registration subunit, configured to add a server agent to the network service platform when it is determined that the proxy server cannot access the service end of the external network, and use the service agent to register the proxy server on the service end of the external network;

[0113] The second reading subunit is used to use the registered proxy server to access the encryption task queue in the server of the external network, and read the application deployment task from the encryption task queue.

[0114] In another embodiment provided by the present invention, the device may also be configured as:

[0115] A determination unit, used to determine the to-be-deployed application program that needs to be deployed to the network service platform;

[0116] An acquisition unit, used to acquire an application package and deployment step information of the application to be deployed, and encrypt the application package and deployment step information to obtain an application deployment task corresponding to the application to be deployed;

[0117] The saving unit is used to save the application deployment task of the application to be deployed in a preset encryption task queue.

[0118] In another embodiment provided by the present invention, the device may also be configured as:

[0119] A generating unit, used to generate an execution result of the application deployment task;

[0120] The sending unit is used to encrypt the execution result and send the encrypted execution result to the external network.

[0121] In another embodiment provided by the present invention, the device may also be configured as:

[0122] The trigger unit is used to trigger the server of the external network to decrypt the execution result after the encrypted execution result is successfully sent to the external network, and to process each application deployment task in the encrypted task queue based on the decrypted execution result.

[0123] An embodiment of the present invention further provides a storage medium, which includes stored instructions, wherein when the instructions are executed, the device where the storage medium is located is controlled to execute the above-mentioned application deployment method.

[0124] The embodiment of the present invention further provides an electronic device, the structural diagram of which is shown in FIG. Figure 6 As shown, it specifically includes a memory 601 and one or more instructions 602, wherein the one or more instructions 602 are stored in the memory 601 and are configured to be executed by one or more processors 603 to execute the one or more instructions 602 to execute the deployment method of the above-mentioned application.

[0125] The specific implementation processes and derivative methods of the above-mentioned embodiments are all within the protection scope of the present invention.

[0126] Each embodiment in this specification is described in a progressive manner, and the same or similar parts between the embodiments can refer to each other, and each embodiment focuses on the differences from other embodiments. In particular, for the system or system embodiment, since it is basically similar to the method embodiment, the description is relatively simple, and the relevant parts can refer to the partial description of the method embodiment. The system and system embodiments described above are merely schematic, wherein the units described as separate components may or may not be physically separated, and the components displayed as units may or may not be physical units, that is, they may be located in one place, or they may be distributed on multiple network units. Some or all of the modules may be selected according to actual needs to achieve the purpose of the scheme of this embodiment. Ordinary technicians in this field can understand and implement it without creative work.

[0127] Professionals may further appreciate that the units and algorithm steps of each example described in conjunction with the embodiments disclosed herein can be implemented in electronic hardware, computer software, or a combination of the two. In order to clearly illustrate the interchangeability of hardware and software, the composition and steps of each example have been generally described in the above description according to function. Whether these functions are performed in hardware or software depends on the specific application and design constraints of the technical solution. Professionals and technicians may use different methods to implement the described functions for each specific application, but such implementation should not be considered to be beyond the scope of the present invention.

[0128] The above description of the disclosed embodiments enables one skilled in the art to implement or use the present invention. Various modifications to these embodiments will be apparent to one skilled in the art, and the general principles defined herein may be implemented in other embodiments without departing from the spirit or scope of the present invention. Therefore, the present invention will not be limited to the embodiments shown herein, but rather to the widest scope consistent with the principles and novel features disclosed herein.

Claims

1. A method for deploying an application, characterized in that: Applied to a network service platform that cannot be accessed by an external network, the method includes: Calling a preset proxy server to read application deployment tasks in the encrypted task queue of the external network, wherein the encrypted task queue is used to store tasks of application programs that the external network needs to deploy on the network service platform; the proxy server is set in the network service platform, and the proxy server is used to access the encrypted task queue of the external network; Decrypting the application deployment task to obtain the application package and deployment step information in the application deployment task; Processing the application package based on the deployment step information, and deploying an application corresponding to the application package on the network service platform; The calling of a preset proxy server to read the application deployment task in the encrypted task queue of the external network includes: Determine whether the proxy server can access the server of the external network; When it is determined that the proxy server can access the server of the external network, using the proxy server to access the encryption task queue in the server of the external network, and reading the application deployment task from the encryption task queue; When it is determined that the proxy server cannot access the service end of the external network, adding a service agent in the network service platform, and using the service agent to register the proxy server on the service end of the external network; The registered proxy server is used to access the encrypted task queue in the server of the external network, and the application deployment task is read from the encrypted task queue.

2. The method according to claim 1, characterized in that The process of the external network saving the application deployment task in the encrypted task queue includes: Determining the application program to be deployed that needs to be deployed to the network service platform; Acquire the application package and deployment step information of the application to be deployed, and encrypt the application package and deployment step information to obtain an application deployment task corresponding to the application to be deployed; The application deployment task of the application to be deployed is saved in a preset encrypted task queue.

3. The method according to claim 1, characterized in that Also includes: Generate an execution result of the application deployment task; The execution result is encrypted and sent to the external network.

4. The method according to claim 3, characterized in that Also includes: When the encrypted execution result is successfully sent to the external network, the server of the external network is triggered to decrypt the execution result, and process each application deployment task in the encrypted task queue based on the decrypted execution result.

5. A deployment device for an application, characterized in that: Applied to a network service platform that cannot be accessed by an external network, the device includes: A reading unit, used to call a preset proxy server, and read the application deployment task in the encrypted task queue of the external network, wherein the encrypted task queue is used to store the tasks of the application program that the external network needs to deploy on the network service platform; the proxy server is set in the network service platform, and the proxy server is used to access the encrypted task queue of the external network; A decryption unit, used to decrypt the application deployment task to obtain the application package and deployment step information in the application deployment task; A deployment unit, configured to process the application package based on the deployment step information, and deploy an application corresponding to the application package on the network service platform; Wherein, the reading unit comprises: A judging subunit, used for judging whether the proxy server can access the server of the external network; A first reading subunit is used for, when it is determined that the proxy server can access the server of the external network, using the proxy server to access the encryption task queue in the server of the external network, and reading the application deployment task from the encryption task queue; A registration subunit, configured to add a service agent to the network service platform when it is determined that the proxy server cannot access the service end of the external network, and use the service agent to register the proxy server on the service end of the external network; The second reading subunit is used to use the registered proxy server to access the encryption task queue in the server of the external network, and read the application deployment task from the encryption task queue.

6. The device according to claim 5, characterized in that Also includes: A determination unit, used to determine the to-be-deployed application program that needs to be deployed to the network service platform; An acquisition unit, used to acquire an application package and deployment step information of the application to be deployed, and encrypt the application package and deployment step information to obtain an application deployment task corresponding to the application to be deployed; The saving unit is used to save the application deployment task of the application to be deployed in a preset encrypted task queue.

7. A storage medium, characterized in that: The storage medium includes stored instructions, wherein when the instructions are executed, the device where the storage medium is located is controlled to execute the method for deploying the application program according to any one of claims 1 to 4.

8. An electronic device, characterized in that: The system comprises a memory and one or more instructions, wherein the one or more instructions are stored in the memory and configured to be executed by one or more processors to execute the method for deploying an application as claimed in any one of claims 1 to 4.

Images