Method, apparatus and computer readable medium for interacting with service data
By setting up container IP group instances and tags in banking operations, the problem of business data transmission caused by the inability to set fixed IPs was solved, and stable banking business data transmission was achieved.
Patent Information
- Application Number
- CN202211682154.4
- Authority / Receiving Office
- CN · China
- Patent Type
- Patents(China)
- Current Assignee / Owner
- Filing Date
- 2022-12-26
- Publication Date
- 2025-11-25
- Estimated Expiration
- 2042-12-26
AI Technical Summary
In banking operations, the inability to set a fixed IP address makes it difficult to transmit business data.
By setting key-value pairs in the metadata tags of the workload, the IP group instance corresponding to the container is obtained, and the container is created based on the IP group instance. After setting key-value pairs in the container tag, the container is scheduled to be deployed to the business cluster, and banking business data is exchanged based on the container's IP.
It enables the transmission of business data within the banking architecture, meets the requirements for fixed IP interaction, and ensures the stable transmission of business data.
Smart Images

Figure CN116016424B_ABST
Abstract
Description
TECHNICAL FIELD
[0001] The present application relates to the field of cloud computing, and in particular to a method and device for interacting with business data, an apparatus, and a computer readable medium. BACKGROUND
[0002] An IP address (Internet Protocol Address) refers to an Internet Protocol address. The IP address is a unified address format provided by the IP protocol, which assigns a logical address to each network and each host on the Internet to shield the difference between physical addresses.
[0003] Under the traditional architecture of a bank, an IP address is an important network resource. A large number of core system service registrations still use the traditional form-filling method, which cannot achieve automatic service registration and discovery.
[0004] In the process of implementing the present application, the inventors have found that at least the following problems exist in the prior art: In a bank business, an IP address needs to be fixedly mapped to a host. However, due to the inability to set a fixed IP address, it is difficult to achieve the transmission of business data under the bank architecture. SUMMARY
[0005] Therefore, the embodiments of the present application provide a method and device for interacting with business data, an apparatus, and a computer readable medium, in which the IP of a container remains unchanged, the bank business data is interacted with through the IP of the container, and the transmission of business data under the bank architecture is achieved.
[0006] To achieve the above-mentioned purpose, according to one aspect of the embodiments of the present application, a method for interacting with business data is provided, comprising:
[0007] Setting a key-value pair in a metadata tag of a workload according to an IP group in the workload;
[0008] According to the IP group in the metadata tag, obtaining an IP group instance corresponding to a container, so as to create the container according to the IP group instance;
[0009] Based on the number of IPs in the IP group instance, setting a key-value pair in a container tag of the container;
[0010] After scheduling the container to a business cluster, setting an IP of the container according to the key-value pair in the container tag, so as to interact with the bank business data according to the IP of the container.
[0011] The setting of the key-value pair in the metadata tag of the workload according to the IP group in the workload comprises:
[0012] According to the IP group in the workload, a key-value pair is set in a metadata label of the workload and a metadata label of a container instance.
[0013] The workload includes a statefulset and a deployment.
[0014] The IP group includes an IP number, a source subnet segment of the IP, and IP affinity information.
[0015] The setting of the key-value pair in the metadata label of the workload according to the IP group in the workload includes:
[0016] According to the IP group in the workload, a key-value pair is set in a metadata label of the workload and a metadata label of a container instance.
[0017] According to the IP group in the metadata label, an IP group instance corresponding to the container is obtained.
[0018] In a case where the workload is scheduled to create a container, according to the IP group in the metadata label, an IP group instance corresponding to the container is obtained.
[0019] The workload includes a statefulset;
[0020] The container is created according to the IP group instance, including establishing a container corresponding to an identifier of the IP group instance.
[0021] The workload includes a deployment;
[0022] The container is created according to the IP group instance, including creating a container according to an unoccupied IP group instance.
[0023] The key-value pair in the container label of the container is set based on the IP number in the IP group instance, including:
[0024] The IP number in the IP group instance is 1, and a value in a key-value pair of a network card in the container label of the container is set as an IP setting parameter.
[0025] The key-value pair in the container label of the container is set based on the IP number in the IP group instance, including:
[0026] The IP number in the IP group instance is 2, a value in a key-value pair of a primary network card in the container label of the container is set as an IP setting parameter, and a key in the key-value pair of the primary network card is set as an address of the IP setting parameter.
[0027] set a value in a key-value pair in a container tag of the container, set a parameter for an IP in the key-value pair, and set an address of a network type of the parameter for the IP in a key in the key-value pair of the auxiliary network card.
[0028] The network type includes an overlay network and an underlay network.
[0029] The setting of the key-value pair in the container tag of the container based on the number of IPs in the IP group instance includes:
[0030] The setting of the key-value pair in the container tag of the container and the key-value pair in the metadata tag of the container instance based on the number of IPs in the IP group instance.
[0031] The IP group instance is determined by the IP group according to an IP source subnet segment and a preset affinity field.
[0032] The method further includes, after the interaction of the bank business data according to the IP of the container:
[0033] deleting a task of the interaction bank business data;
[0034] interacting next bank business data of the bank according to the IP of the container again, the next bank business data being a task established based on the IP of the container.
[0035] According to a second aspect of an embodiment of the present application, an apparatus for interaction of business data is provided, and the apparatus includes:
[0036] a working module configured to set a key-value pair in a metadata tag of a workload according to an IP group in the workload;
[0037] a creating module configured to obtain an IP group instance corresponding to a container according to the IP group in the metadata tag, and create the container according to the IP group instance;
[0038] a container module configured to set a key-value pair in a container tag of the container based on a number of IPs in the IP group instance;
[0039] an interaction module configured to set an IP of the container according to the key-value pair in the container tag after the container is dispatched to a business cluster, and interact bank business data according to the IP of the container.
[0040] The working module is specifically configured to set a key-value pair in a metadata tag of a workload and a metadata tag of a container instance according to an IP group in the workload.
[0041] The creating module is specifically configured to, in a case of scheduling the workload to create a container, acquire an IP group instance corresponding to the container according to the IP group in the metadata tag.
[0042] According to a third aspect of the embodiments of the present application, an electronic device for interacting with service data is provided, comprising:
[0043] one or more processors;
[0044] a storage device configured to store one or more programs,
[0045] When the one or more programs are executed by the one or more processors, the one or more processors implement the method as described above.
[0046] According to a fourth aspect of the embodiments of the present application, a computer readable medium is provided, which stores a computer program, and the program is executed by a processor to implement the method as described above.
[0047] According to a fifth aspect of the embodiments of the present application, a computer program product is provided, which comprises a computer program, and the program is executed by a processor to implement the method as described above.
[0048] One embodiment of the above application has the following advantages or beneficial effects: according to the IP group in the workload, a key-value pair is set in the metadata tag of the workload; according to the IP group in the metadata tag, an IP group instance corresponding to the container is acquired to create the container according to the IP group instance; based on the number of IPs in the IP group instance, a key-value pair in the container tag of the container is set; after the container is scheduled to the service cluster, the IP of the container is set according to the key-value pair in the container tag, so that the bank service data is interacted with according to the IP of the container. Since the IP of the container remains unchanged, the bank service data is interacted with through the IP of the container, which meets the requirement of interacting with service data through a specified fixed IP and realizes the transmission of service data under the bank architecture.
[0049] The further effects of the above-mentioned non-conventional optional mode will be described in the following combined with the specific embodiments. BRIEF DESCRIPTION OF DRAWINGS
[0050] The accompanying drawings are used to better understand the present application and do not constitute an improper limitation on the present application. Among them:
[0051] Figure 1 is the main flow diagram of the method for interacting with service data according to the embodiments of the present application;
[0052] Figure 2 is the deployment architecture diagram of the IP group controller according to the embodiments of the present application;
[0053] Figure 3 is a relationship diagram of a resource object according to an embodiment of the present application;
[0054] Figure 4 is a flow diagram of setting a key-value pair in a container label according to an embodiment of the present application;
[0055] Figure 5 is a flow diagram of interacting with next bank service data according to an embodiment of the present application;
[0056] Figure 6 is a main structure diagram of an apparatus for interacting with service data according to an embodiment of the present application;
[0057] Figure 7 is an exemplary system architecture diagram to which embodiments of the present application can be applied;
[0058] Figure 8 is a structure diagram of a computer system of a terminal device or a server suitable for implementing embodiments of the present application. DETAILED DESCRIPTION
[0059] Exemplary embodiments of the present application are described below with reference to the accompanying drawings, in which various details of the embodiments of the present application are set forth in order to provide a thorough understanding of the embodiments of the present application. It will be apparent, however, to those skilled in the art that various changes and modifications can be made to the embodiments described herein without departing from the scope and spirit of the present application. Also, the description below is made with respect to the drawings, in which like numerals indicate like elements throughout the several figures. The description of well-known functions and structures is omitted in the following description for the sake of clarity and conciseness. The acquisition, storage, use, processing, etc. of data in the technical solutions of the present application comply with relevant provisions of national laws and regulations.
[0060] Under the traditional architecture of a bank, without modifying the registration center, a fixed IP address needs to be implemented, i.e. after the instance is created, the mapping relationship between the hostname and the IP address is established and will not be changed. Hereinafter, the IP address is referred to as "IP".
[0061] Considering the requirement of network security, the banking core system needs to control the IP access permission. After submitting an IP network access relationship opening work order, the communication connection between the source IP and the target IP can be connected. Since the opening of the network access relationship needs to be approved, the instance IP needs to be known in advance before the application service is created and deployed, so as to open the network access relationship. In this way, when the version is changed, verification can be directly performed without waiting for the approval.
[0062] In addition, the bank core system cross-availability zone (AZ) deployment is a hard requirement. The introduction of AZ is based on the security perspective. The network between AZs is independent of each other, and IP can be used within the same AZ, but cannot be migrated across AZs. After an IP is determined, the AZ to which it belongs is also determined, and the instance uses the IP, which can only be deployed in the AZ. Therefore, when applying for an IP, the AZ attribute needs to be considered, and the future instance scheduling scenario using the IP needs to be considered comprehensively to achieve cross-AZ IP pre-application.
[0063] In summary, in the bank system, due to the inability to set a fixed IP, it is difficult to realize the transmission of business data under the bank architecture.
[0064] In order to solve the problem that it is difficult to realize the transmission of business data under the bank architecture due to the inability to set a fixed IP, the technical solutions in the embodiments of the present application can be used.
[0065] Referring to Figure 1 , Figure 1 is the main flow diagram of the method for interacting with business data according to the embodiment of the present application, which sets the IP of the container through the IP group, IP group instance and IP number, realizes the interaction of bank business data with the fixed IP of the container. As shown in Figure 1 , the specific steps include the following steps:
[0066] S101, according to the IP group in the work load, set key-value pairs in the metadata label of the work load.
[0067] Kubernetes is an open source container scheduling platform across host clusters, which can automatically deploy, expand and operate application containers, and provides a container-centric infrastructure. At the most basic level, Kubernetes can schedule and run application containers on a physical or virtual machine cluster.
[0068] In addition, Kubernetes allows developers to "detach" from physical and virtual machines and move from a host-centric infrastructure to a container-centric infrastructure, which can provide all the advantages and benefits inherent in containers. Kubernetes provides the infrastructure to build a truly container-centric development environment.
[0069] Using Kubernetes, a cluster is generally managed, and the high availability of services cannot be guaranteed. When implementing service high availability, the most cost-effective way is cross-AZ deployment. AZ refers to availability zone, which refers to a physical area that is independent of power and network within the same region. The network delay between instances in the same availability zone is smaller. Within the same region, the availability zones can communicate with each other, and the availability zones can be isolated from failures.
[0070] To achieve cross-AZ same management, a federation cluster needs to be used. The federation cluster has a management and control surface, which is usually a Kubernetes cluster, provides a standard Kubernetes API, and stores data through etcd. Etcd is the default storage system provided by Kubernetes, which saves all cluster data. When using etcd data, a backup plan needs to be provided for etcd data.
[0071] Unlike the traditional use of Kubernetes, the federation cluster manages all Kubernetes clusters. The federation cluster solution is based on the virtual kubelet implementation. The virtual kubelet is an implementation of the Kubernetes kubelet. It pretends to be a kubelet, simulates a traditional Kubernetes cluster as a node, connects the Kubernetes cluster to other APIs, and thus shields the concept of business clusters from users, so that multiple clusters are logically connected and federated.
[0072] In the embodiments of the present application, in order to realize the cross-AZ pre-application and reservation of IP, an IP group controller (IPGroup Controller) can be used to manage the IP resources scheduled and issued by the federation layer, and realize the global scheduling of IP across clusters. The IP group controller is deployed in the federation management layer.
[0073] Referring to Figure 2 , Figure 2 is a deployment architecture diagram of the IP group controller according to the embodiments of the present application. Figure 2 In the embodiments of the present application, the global controller (Global Controllers) has an IP group controller. The IP group controller controls multiple clusters through a global application programming interface service (Global API Server).
[0074] Figure 2 In the embodiments of the present application, multiple clusters are included, such as cluster A and cluster B. In each cluster, an API interface service (APIServer) is used to receive information of an IP setting controller under the controller in the cluster.
[0075] In the embodiments of the present application, resource objects such as IP group (IPGroup), IP group instance (IPGroupInstance), and IP setting (IPset) are involved. The following will be described exemplarily with reference to the accompanying drawings Figure 3 ,
[0076] Referring to Figure 3 , Figure 3 is a relationship diagram of the resource objects according to the embodiments of the present application.Figure 3 In the embodiment of the present application, the IP group record the required IP number, the source subnet segment of each IP and the IP affinity information. Figure 3 The IP group includes IP group instances, and the IP group instances include IP settings. Figure 3 In the embodiment of the present application, the IP group includes two IP group instances, and the IP group instances include four IP settings.
[0077] In the embodiment of the present application, the IP group record the required IP number, the source subnet segment of each IP and the IP affinity information. The IP group instance is a further split of the IP group, and the IP group instance record the IP information required by each container instance. The IP setting record the IP information of each network card.
[0078] The application IP process is described below in combination with specific examples. The data center makes overall planning for the network, divides a plurality of independent large subnet segments, and allocates the subnet segments to the container cloud platform. The container cloud platform splits a plurality of small subnet segments from the large subnet segments according to the required IP resources of each AZ. The IP is further split in the small subnet segment, that is, the IP group is created. The IP group instance is further split, and finally the IP configuration is set.
[0079] In the embodiment of the present application, the work load includes statefulset and deployment. The statefulset is used to deploy a stateful application, and the deployment is used to deploy a stateless application. The stateful application is that the related information of the request end exists before the request end initiates a request, and otherwise the request cannot be completed. The stateless application is that the request end itself state information is contained in the request of the request end, and there is no service end. It can be understood that the technical solution in the embodiment of the present application can be applied to a stateful application, and can also be applied to a stateless application.
[0080] In the embodiment of the present application, according to the IP group in the work load, the key-value pair is set in the metadata label of the work load and the metadata label of the container instance. The key-value pair is set in the metadata label of the container instance.
[0081] The key-value pair is set in the metadata label of the work load, and the purpose is to allocate the IP resource of the IP group; the key-value pair is set in the metadata label of the container instance, and the purpose is to set the IP group used by the container.
[0082] In the embodiment of the present application, the IP group includes the IP number, the source subnet segment of the IP and the IP affinity information. The IP affinity information is used to set the affinity of the container. The pod affinity and anti-affinity are mainly to constrain whether the current pod is scheduled to the node according to the pod label already running on the node.
[0083] In an embodiment of the present application, an IP group is created in a global namespace, and the number of IP group instances is determined in a source address pool of an IP address. A field of the number of IP group instances records the source of a network card IP. That is, the IP group instance is determined by the IP source subnet segment and a preset affinity field.
[0084] An affinity field is added in the IP group instance. The IP group instance is distributed according to the affinity and the IP container used.
[0085] After the IP group instance is scheduled to the space of a target cluster, the IP group instance is further split according to the space, an IPSet is created, the created IPSet is assigned an IP, and IP information is reported.
[0086] In an embodiment of the present application, a key-value pair is set in a metadata label of a workload, and a value in the key-value pair in the metadata label of the workload is set as an identifier of an IP group according to the IP group in the workload.
[0087] As an example, when a statefulset or a deployment is created, an IP group used is specified. A key value alcor.io / saishang-ipam.IPGroup is set in a metadata label (metadata.labels) of the workload, and a value value of the IP group is set as an identifier of the IP group. A key value alcor.io / saishang-ipam.IPGroup is set in a metadata label (metadata.labels) of a container instance, and a value value of the IP group is set as a name of the IP group.
[0088] S102, according to the IP group in the metadata label, an IP group instance corresponding to the container is obtained, and the container is created according to the IP group instance.
[0089] In an embodiment of the present application, after the IP group in the metadata label is determined, an IP group instance corresponding to the container is obtained, and the container is created according to the IP group instance.
[0090] As an example, in the case of creating a container by scheduling a workload, an IP group instance corresponding to the container is obtained according to the IP group in the metadata label.
[0091] Specifically, when a deployment or a statefulset is scheduled by a scheduler (Scheduler), a container is created, and an IP group instance corresponding to the container is obtained according to the IP group in the metadata label.
[0092] In a case where the workload includes a statefulset, a container corresponding to an identifier of an IP group instance is established. That is, the container created by the statefulset corresponds to the IP group instance one by one according to a serial number.
[0093] In a case where the workload includes a deployment, a container is created according to an unoccupied IP group instance. That is, the pod created by the deployment can be selected from an unoccupied IPGroupInstance. Then, the pod is scheduled to a corresponding cluster according to a scheduling result of the corresponding IPGroupInstance.
[0094] S103, set a key-value pair in a container tag of the container based on the number of IPs in the IP group instance.
[0095] The number of IPs in the IP group instance is different, and the key-value pair in the container tag of the container is set differently.
[0096] In an embodiment of the present application, the number of IPs in the IP group instance is 1, and the value of the key-value pair in the container tag of the container is set as an IP setting parameter.
[0097] Specifically, according to the number of IPs in the IPGroupInstance, a key-value pair is set in the container tag of the container and the label of the container instance. If the number of IPs in the IPGroupInstance is 1, it means single network card; if the number of IPs in the IPGroupInstance is 2, it means double network card.
[0098] The number of IPs in the IP group instance is 1, and the value of the key-value pair in the container tag of the container is set as an IP setting parameter. For example, the key of the network card is set as alcor.io / saishang-ipam.IPSet, and the value is the name of the corresponding IPSet.
[0099] Referring to Figure 4 , Figure 4 is a flowchart of setting a key-value pair in a container tag according to an embodiment of the present application. Specifically, the following steps are included:
[0100] S401, the number of IPs in the IP group instance is 2, the value of the key-value pair in the container tag of the container is set as an IP setting parameter, and the key of the key-value pair of the main network card is set as the address of the IP setting parameter.
[0101] The number of IPs in the IP group instance is 2, and the gateway includes a main network card and an auxiliary network card. The value of the key-value pair in the container tag of the container is set as an IP setting parameter, and the key of the key-value pair of the main network card is set as the address of the IP setting parameter.
[0102] S402, set the value in the key-value pair of the secondary network card in the container label of the container, set the parameter of the IP, and set the key in the key-value pair of the secondary network card, set the address of the network type of the parameter of the IP.
[0103] The key value set by the secondary network card is different according to the network type. As an example, the network type includes an overlay network and an underlay network.
[0104] Set the value in the key-value pair of the secondary network card in the container label of the container, set the parameter of the IP, and set the key in the key-value pair of the secondary network card, set the address of the network type of the parameter of the IP. As an example, in the overlay network type, the key is alcor.io / saishang-ipam.secondary.IPSet.vni, and the value is the corresponding IPSet name. In the underlay network type, the key is alcor.io / saishang-ipam.secondary.IPSet.underlay, and the value is the corresponding IPSet name.
[0105] In the embodiment of Figure 4 , the key-value pair in the container label is set according to the network type.
[0106] S104, after scheduling the container to the business cluster, set the IP of the container according to the key-value pair in the container label, so as to interact with the bank business data according to the IP of the container.
[0107] After calling the container to the business cluster, the IP of the container can be set according to the key-value pair in the container label, so that the bank business data can be interacted according to the IP of the container.
[0108] Referring to Figure 5 , Figure 5 is a flowchart of interacting with the next bank business data according to an embodiment of the application. Specifically, it includes the following steps:
[0109] S501, delete the task of interacting with the bank business data.
[0110] After interacting with the bank business data according to the IP of the container, in order to interact with the next bank business data again, the task of interacting with the bank business data by the container needs to be deleted.
[0111] S502, interact with the next bank business data of the bank again according to the IP of the container, and the next bank business data is a task established based on the IP of the container.
[0112] The IP of the container is unchanged, and the bank service data interacting with the container is changed. That is, the next bank service data interacting with the bank is interacted again according to the IP of the container, and the next bank service data is a task established based on the IP of the container.
[0113] In Figure 5 Embodiments of the application, different bank service data is interacted with the same container.
[0114] In the above embodiments of the application, according to the IP group in the work load, a key-value pair is set in the metadata label of the work load; according to the IP group in the metadata label, an IP group instance corresponding to the container is obtained to create the container according to the IP group instance; based on the number of IPs in the IP group instance, a key-value pair in the container label of the container is set; after the container is scheduled to the service cluster, the IP of the container is set according to the key-value pair in the container label to interact with the bank service data according to the IP of the container. Since the IP of the container remains unchanged, the bank service data is interacted through the IP of the container, which meets the requirement of interacting with the service data through the fixed IP and realizes the transmission of the service data under the bank architecture.
[0115] Referring to Figure 6 , Figure 6 is the main structure diagram of the device for interacting with service data according to the embodiments of the application. The device for interacting with service data can implement the method for interacting with service data, as shown in Figure 6 The device for interacting with service data specifically includes:
[0116] The work module 601 is configured to set a key-value pair in the metadata label of the work load according to the IP group in the work load.
[0117] The creation module 602 is configured to obtain an IP group instance corresponding to the container according to the IP group in the metadata label to create the container according to the IP group instance.
[0118] The container module 603 is configured to set a key-value pair in the container label of the container based on the number of IPs in the IP group instance.
[0119] The interaction module 604 is configured to set the IP of the container according to the key-value pair in the container label after the container is scheduled to the service cluster to interact with the bank service data according to the IP of the container.
[0120] In an embodiment of the application, the work module 601 is specifically configured to set a key-value pair in the metadata label of the work load and the metadata label of the container instance according to the IP group in the work load.
[0121] In an embodiment of the present application, the workloads include statefulset and deployment.
[0122] In an embodiment of the present application, the IP group includes the number of IPs, the source subnet segment of the IPs and the IP affinity information.
[0123] In an embodiment of the present application, the work module 601 is specifically configured to set the value in the key-value pair in the metadata label of the workloads to the identification of the IP group according to the IP group in the workloads.
[0124] In an embodiment of the present application, the creation module 602 is specifically configured to obtain the IP group instance corresponding to the container according to the IP group in the metadata label in the case of creating the container for scheduling the workloads.
[0125] In an embodiment of the present application, the workloads include statefulset;
[0126] The creation module 602 is specifically configured to create the container corresponding to the identification of the IP group instance.
[0127] In an embodiment of the present application, the workloads include deployment;
[0128] The creation module 602 is specifically configured to create the container according to the unoccupied IP group instance.
[0129] In an embodiment of the present application, the container module 603 is specifically configured to set the value in the key-value pair of the network card in the container label of the container to the IP setting parameter in the case of the number of IPs in the IP group instance being 1.
[0130] In an embodiment of the present application, the container module 603 is specifically configured to set the value in the key-value pair of the main network card in the container label of the container to the IP setting parameter and set the key in the key-value pair of the main network card to the address of the IP setting parameter in the case of the number of IPs in the IP group instance being 2.
[0131] In an embodiment of the present application, the container module 603 is specifically configured to set the value in the key-value pair of the auxiliary network card in the container label of the container to the IP setting parameter and set the key in the key-value pair of the auxiliary network card to the address of the network type of the IP setting parameter.
[0132] In an embodiment of the present application, the network type includes overlay network and underlay network.
[0133] In one embodiment of the present invention, the container module 603 is specifically used to set key-value pairs in the container tag of the container and key-value pairs in the metadata tag of the container instance based on the number of IPs in the IP group instance.
[0134] In one embodiment of the present invention, the IP group instance is determined by the IP group based on the IP source subnet segment and a preset affinity field.
[0135] In one embodiment of the present invention, the interaction module 604 is further configured to delete the interactive banking data.
[0136] Based on the container's IP address, the next banking transaction data is then processed by the bank, which is a task established based on the container's IP address.
[0137] Figure 7 An exemplary system architecture 700 is shown, which can be used to apply methods or apparatus for interactive business data according to embodiments of the present invention.
[0138] like Figure 7 As shown, system architecture 700 may include terminal devices 701, 702, and 703, a network 704, and a server 705. Network 704 serves as the medium for providing communication links between terminal devices 701, 702, and 703 and server 705. Network 704 may include various connection types, such as wired or wireless communication links, or fiber optic cables, etc.
[0139] Users can use terminal devices 701, 702, and 703 to interact with server 705 via network 704 to receive or send messages, etc. Various communication client applications can be installed on terminal devices 701, 702, and 703, such as shopping applications, web browser applications, search applications, instant messaging tools, email clients, social media platform software, etc. (for example only).
[0140] Terminal devices 701, 702, and 703 can be various electronic devices with displays and web browsing capabilities, including but not limited to smartphones, tablets, laptops, and desktop computers.
[0141] Server 705 can be a server providing various services, such as a backend management server supporting shopping websites browsed by users using terminal devices 701, 702, and 703 (for example only). The backend management server can analyze and process data such as received product information query requests, and feed back the processing results (such as target push information, product information - for example only) to the terminal devices.
[0142] It should be noted that the method for interactive service data provided by the embodiment of the present application is generally executed by the server 705, and accordingly, the device for interactive service data is generally arranged in the server 705.
[0143] It should be understood that, Figure 7 The number of terminal devices, networks and servers in the above-mentioned system is only illustrative. Any number of terminal devices, networks and servers can be provided according to the implementation needs.
[0144] The embodiment of the present application is a kind of computing program product, including computer program, the program is executed by processor to realize the method for interactive service data provided by the embodiment of the present application.
[0145] The following refers to Figure 8 which shows the structure diagram of the computer system 800 of the terminal device suitable for being used to realize the embodiment of the present application. Figure 8 The terminal device shown is only an example, and should not bring any limitation to the function and use range of the embodiment of the present application.
[0146] As shown in Figure 8 , the computer system 800 includes a central processing unit (CPU) 801, which can perform various appropriate actions and processes according to the program stored in the read-only memory (ROM) 802 or the program loaded from the storage portion 808 to the random access memory (RAM) 803. In the RAM 803, various programs and data required for the operation of the system 800 are also stored. The CPU 801, the ROM 802 and the RAM 803 are connected to each other through a bus 804. An input / output (I / O) interface 805 is also connected to the bus 804.
[0147] The following components are connected to the I / O interface 805: an input portion 806 including a keyboard, a mouse, etc.; an output portion 807 including a cathode ray tube (CRT), a liquid crystal display (LCD), etc., and a speaker, etc.; a storage portion 808 including a hard disk, etc.; and a communication portion 809 including a network interface card such as a LAN card, a modem, etc. The communication portion 809 performs communication processing via a network such as the Internet. A drive 810 is also connected to the I / O interface 805 as needed. A removable medium 811 such as a magnetic disk, an optical disk, a magneto-optical disk, a semiconductor memory, etc. is mounted on the drive 810 as needed, so that a computer program read therefrom is installed in the storage portion 808 as needed.
[0148] In particular, the processes described above with reference to the flow charts can be implemented as a computer software program in accordance with the embodiments disclosed herein. For example, embodiments disclosed herein include a computer program product which includes a computer program tangibly embodied on a computer readable medium, the computer program containing program code for executing the methods illustrated by the flow charts. In such embodiments, the computer program can be downloaded and installed from a network via the communication portion 809 and / or installed from a removable media 811. When the computer program is executed by the central processing unit (CPU) 801, the above-described functions defined in the system of the present invention are performed.
[0149] It should be noted that the computer readable medium shown in the present invention can be a computer readable signal medium or a computer readable storage medium or any combination thereof. The computer readable storage medium may, for example, be, but is not limited to, an electronic, magnetic, optical, electromagnetic, infrared, or semiconductor system, device or apparatus, or any combination thereof. More specific examples of the computer readable storage medium can include, but are not limited to, an electrical connection having one or more wires, a portable computer diskette, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination thereof. In the present invention, the computer readable storage medium can be any tangible medium that contains or stores a program that can be used by or in connection with an instruction execution system, apparatus or device. In the present invention, the computer readable signal medium can include a data signal propagated in a baseband or as a carrier wave in a propagated data signal, in which the computer readable program code is carried. Such a propagated data signal can take many forms, including but not limited to, an electromagnetic signal, an optical signal or any suitable combination thereof. The computer readable signal medium can also be any computer readable medium that can send, propagate or transfer a program for use by or in connection with an instruction execution system, apparatus or device. The program code contained on the computer readable medium can be transmitted using any suitable medium, including but not limited to, wireless, wire line, optical fiber cable, RF, etc., or any suitable combination thereof.
[0150] The computer readable medium can be a storage medium, such as a floppy disk, a hard disk, a tape, a computer system memory, a computer system storage, a computer system read-only memory, a computer system programmable read-only memory, a computer system erasable programmable read-only memory, an optical fiber, a portable device memory, a solid state memory, or a hybrid solid state memory. The computer readable medium can be an electronic, magnetic, optical, electromagnetic, infrared, or semiconductor system, or a portable device or a computer system, or a medium used to provide instructions to a computer or other device. The medium can be used to provide instructions that, when executed by a processor of a computer or other device, cause the computing device to perform a process. The instructions can be used to cause the processor to, among other things, execute processes to implement the functions of the disclosed embodiments.
[0151] The modules described in the embodiments of the present application can be implemented by software or by hardware. The modules described can be implemented in a processor, for example, a processor can be described as including a working module, a creating module, a container module, and an interacting module. In some cases, the names of the modules do not limit the modules themselves, for example, the working module can also be described as "setting a key-value pair in a metadata tag of a work load according to an IP group in the work load".
[0152] As another aspect, the present application also provides a computer readable medium, which can be included in the device described in the above embodiments, or can exist separately without being assembled into the device. The computer readable medium carries one or more programs, which, when executed by the device, cause the device to include:
[0153] Setting a key-value pair in a metadata tag of a work load according to an IP group in the work load;
[0154] According to the IP group in the metadata tag, obtaining an IP group instance corresponding to a container to create the container according to the IP group instance;
[0155] Based on the number of IPs in the IP group instance, setting a key-value pair in a container tag of the container;
[0156] After scheduling the container to a service cluster, setting an IP of the container according to the key-value pair in the container tag to interact with banking service data according to the IP of the container.
[0157] According to the technical scheme of the embodiment of the present application, a key-value pair is set in a metadata label of a workload according to an IP group in the workload; an IP group instance corresponding to a container is acquired according to the IP group in the metadata label, so that the container is created according to the IP group instance; a key-value pair in a container label of the container is set based on the number of IPs in the IP group instance; after the container is scheduled to a service cluster, an IP of the container is set according to the key-value pair in the container label, so that the bank service data is interacted according to the IP of the container. Since the IP of the container remains unchanged, the bank service data is interacted through the IP of the container, the requirement of interacting the service data with a specified fixed IP is met, and the transmission of the service data under the bank architecture is realized.
[0158] The above detailed description does not constitute a limitation on the protection scope of the present application. Those skilled in the art should understand that various modifications, combinations, sub-combinations and substitutions can occur depending on design requirements and other factors. Any modification, equivalent replacement and improvement within the spirit and principle of the present application should be included in the protection scope of the present application.
[0159] It should be noted that in the technical scheme of the present application, the collection, analysis, use, transmission and storage of user personal information are in line with relevant laws and regulations and are used for legal and reasonable purposes, and are not shared, disclosed or sold outside these legal uses, and are subject to supervision and management by regulatory authorities. Necessary measures should be taken to prevent illegal access to such personal information data and to ensure that personnel with access to personal information data comply with relevant laws and regulations to ensure the security of user personal information. Once these user personal information data are no longer needed, the risk should be minimized by limiting or even prohibiting data collection and / or deleting data.
[0160] When applicable, including in certain related applications, user privacy is protected by de-identifying data, such as by removing specific identifiers (e.g., birth date, etc.), controlling the amount or specificity of data stored (e.g., collecting location data at the city level rather than at the specific address level), controlling how data is stored, and / or other methods of de-identification, as applicable.
Claims
1. A method for interacting with business data, characterized in that, include: According to the IP groups in the workload, set key-value pairs in the metadata tags of the workload and the container instance; When scheduling the workload to create a container, the IP group instance corresponding to the container is obtained according to the IP group in the metadata tag, and the container is created according to the IP group instance; Based on the number of IPs in the IP group instance, set the key-value pairs in the container tag of the container; After scheduling the container to the business cluster, the IP address of the container is set according to the key-value pairs in the container label, so as to interact with banking business data according to the IP address of the container.
2. The method for interactive business data according to claim 1, characterized in that, The workload includes statefulset and deployment.
3. The method for interactive business data according to claim 1, characterized in that, The IP group includes the number of IPs, the source subnet of the IPs, and IP affinity information.
4. The method for interactive business data according to claim 1, characterized in that, The step of setting key-value pairs in the metadata tags of the workload according to the IP groups in the workload includes: According to the IP group in the workload, set the value in the metadata tag key-value pair of the workload to the identifier of the IP group.
5. The method for interactive business data according to claim 1, characterized in that, The workload includes a statefulset; The step of creating a container according to the IP group instance includes: creating a container with an identifier corresponding to the IP group instance.
6. The method for interactive business data according to claim 1, characterized in that, The workload includes deployment; The step of creating a container according to the IP group instance includes: creating a container according to an unoccupied IP group instance.
7. The method for interactive business data according to claim 1, characterized in that, The step of setting the key-value pairs in the container tag of the container based on the number of IPs in the IP group instance includes: The number of IPs in the IP group instance is 1, and the value in the key-value pair of the network card in the container label of the container is set to the IP setting parameter.
8. The method for interactive business data according to claim 1, characterized in that, The step of setting the key-value pairs in the container tag of the container based on the number of IPs in the IP group instance includes: The number of IPs in the IP group instance is 2. Set the value in the key-value pair of the main network interface in the container label of the container to set parameters for the IP, and set the key in the key-value pair of the main network interface to set the address of the IP parameter. Set the value in the key-value pair of the auxiliary network card in the container label of the container to set the IP parameter, and set the key in the key-value pair of the auxiliary network card to set the network type address of the IP parameter.
9. The method for interactive business data according to claim 8, characterized in that, The network types include overlay networks and underlying networks.
10. The method for interactive business data according to claim 1, characterized in that, The step of setting the key-value pairs in the container tag of the container based on the number of IPs in the IP group instance includes: Based on the number of IPs in the IP group instance, set the key-value pairs in the container tag of the container and the key-value pairs in the metadata tag of the container instance.
11. The method for interactive business data according to claim 1, characterized in that, The IP group instance is determined by the IP group based on the IP source subnet and the preset affinity field.
12. The method for interactive business data according to claim 1, characterized in that, After the step of exchanging banking business data according to the IP address of the container, it also includes: The task of deleting the aforementioned interactive banking data; Based on the container's IP address, the next banking transaction data is then processed by the bank, which is a task established based on the container's IP address.
13. An apparatus for interactive business data, characterized in that, include: The working module is used to set key-value pairs in the metadata tags of the workload and the container instance according to the IP groups in the workload; A creation module is used to obtain the IP group instance corresponding to the container based on the IP group in the metadata tag when scheduling the workload to create a container, so as to create the container according to the IP group instance; The container module is used to set the key-value pairs in the container tag of the container based on the number of IPs in the IP group instance; The interaction module is used to schedule the container to the business cluster, set the IP of the container according to the key-value pairs in the container label, and interact with banking business data according to the IP of the container.
14. An electronic device for interactive business data, characterized in that, include: One or more processors; Storage device for storing one or more programs. When the one or more programs are executed by the one or more processors, the one or more processors implement the method as described in any one of claims 1-12.
15. A computer-readable medium having a computer program stored thereon, characterized in that, When the program is executed by the processor, it implements the method as described in any one of claims 1-12.
16. A computer program product, comprising a computer program, characterized in that, When the computer program is executed by a processor, it implements the method as described in any one of claims 1-12.
Citation Information
Patent Citations
Cluster security management method and device based on Kubernetes and network domain and storage medium
CN110535831A
Container network management system
CN114237812A