A method, system, electronic device and storage medium for network interworking
By leveraging the load balancing and gateway cluster collaboration within the data center, the problem of excessive network policy openings across data center service clusters is resolved, enhancing security, simplifying network policy management, and reducing attack risks.
Patent Information
- Authority / Receiving Office
- CN · China
- Patent Type
- Patents(China)
- Current Assignee / Owner
- 上海安畅网络科技股份有限公司
- Filing Date
- 2023-03-03
- Publication Date
- 2026-04-14
AI Technical Summary
The large number of network policies opened between service clusters across data centers increases the risk of API exposure, thereby increasing the risk of network attacks and data breaches.
The data center's load balancing service receives requests and forwards them to the gateway cluster. The gateway cluster determines the interface service and calls the corresponding business application cluster to provide services to the service call initiator. This reduces the need for network policy openings between service clusters and minimizes the exposure of APIs and network policies.
It reduces the risk of data center services being attacked on the network, and improves security by reducing the exposure of network policies through a unified gateway cluster management interface service.
Smart Images

Figure CN116346875B_ABST
Abstract
Description
Technical Field
[0001] This invention relates to the field of data center network interconnection technology, and in particular to a method, system, electronic device and storage medium for network interconnection. Background Technology
[0002] Currently, cross-datacenter interface calls for enterprises are all completed directly through business applications (such as business cluster A calling interfaces of clusters D, E, and F). This requires opening network policies for accessing cross-datacenter clusters in business clusters (clusters D, E, and F need to open network policies that allow cluster A to access them). This results in an abnormally large number of network policies being opened between service clusters, making it impossible to control the number of APIs exposed on the service clusters, thus increasing the risk of network attacks and data leaks. Summary of the Invention
[0003] In view of this, the present invention provides a method, system, electronic device, and storage medium for network interconnection. The aim is to reduce the exposure of APIs and network policies, thereby lowering the risk of data center services being attacked on the network.
[0004] In a first aspect of the present invention, a method for network interconnection is provided, applied to a data center, the method comprising:
[0005] The load balancing service corresponding to the data center receives the request initiated by the service caller and forwards the request to the gateway cluster corresponding to the data center.
[0006] Based on the received request, the gateway cluster corresponding to the data center determines the interface service corresponding to the request;
[0007] The corresponding business application cluster is invoked through the interface service to provide services to the service initiator.
[0008] Optionally, the method further includes:
[0009] Register the interface services of each business application cluster corresponding to the data center to the gateway cluster corresponding to the data center.
[0010] Optionally, when the interface service corresponding to the request is an interface service in the first data center, the step of calling the corresponding business application cluster through the interface service to provide services to the service call initiator includes:
[0011] Based on the interface service, the service is routed to the load balancing service corresponding to the first data center through the gateway cluster of the data center;
[0012] The service is forwarded to the gateway cluster corresponding to the first data center through the load balancing service corresponding to the first data center, and the service is provided to the service initiator by calling the business application cluster corresponding to the interface service through the gateway cluster.
[0013] Optionally, before routing the service to the load balancing service corresponding to the first data center, the method further includes:
[0014] The gateway cluster corresponding to the data center opens the server access port policy for the load balancing service corresponding to the first data center.
[0015] Register the interface access address of the gateway cluster corresponding to the first data center to the gateway cluster corresponding to the data center;
[0016] The step of routing the service to the load balancing service corresponding to the first data center through the gateway cluster of the data center according to the interface service includes:
[0017] Based on the interface service and the interface access address of the gateway cluster corresponding to the first data center registered in the gateway cluster corresponding to the data center, the service is routed to the load balancing service corresponding to the first data center.
[0018] Optionally, the method further includes:
[0019] A gateway management platform is constructed to register the interface services of each business application cluster corresponding to the data center to the gateway cluster corresponding to the data center through a visual web page, and to manage the interface services in the gateway cluster corresponding to the data center.
[0020] In a second aspect of the present invention, a network interconnection system is provided, applied in a data center, the system comprising:
[0021] The service initiator is used to initiate a request to call a service.
[0022] The load balancing service corresponding to the data center is used to receive requests initiated by the service call initiator and to forward the requests to the gateway cluster corresponding to the data center.
[0023] The gateway cluster corresponding to the data center is used to determine the interface service corresponding to the received request, and to call the corresponding business application cluster through the interface service to provide services to the service call initiator.
[0024] Optionally, the system further includes:
[0025] The gateway management platform is used to register the interface services of each business application cluster corresponding to the data center to the gateway cluster corresponding to the data center through a visual web page, and to manage the interface services in the gateway cluster corresponding to the data center.
[0026] In a third aspect of the present invention, an electronic device is also provided, including a processor, a communication interface, a memory, and a communication bus, wherein the processor, the communication interface, and the memory communicate with each other through the communication bus.
[0027] Memory, used to store computer programs;
[0028] When a processor executes a program stored in memory, it implements the steps of a network interconnection method provided in the first aspect of the present invention.
[0029] In a fourth aspect of the present invention, a computer-readable storage medium is also provided, on which a computer program is stored, which, when executed by a processor, implements a network interconnection method as described in the first aspect of the present invention.
[0030] Compared with prior art, the present invention has the following advantages:
[0031] This invention provides a network interconnection method. The method involves receiving a request initiated by a service caller through a load balancing service corresponding to a data center, and forwarding the request to a gateway cluster corresponding to that data center. Based on the received request, the gateway cluster determines the interface service corresponding to the request. This interface service then invokes the corresponding business application cluster to provide services to the service caller. Therefore, this invention allows the gateway cluster to directly obtain the corresponding interface service after the service caller initiates a request, and the interface service then invokes the requested service without requiring network policy activation between service clusters. This reduces the exposure of service cluster APIs and network policies, thereby lowering the risk of data center services being attacked on the network.
[0032] The above description is merely an overview of the technical solution of the present invention. In order to better understand the technical means of the present invention and to implement it in accordance with the contents of the specification, and in order to make the above and other objects, features and advantages of the present invention more apparent and understandable, specific embodiments of the present invention are described below. Attached Figure Description
[0033] To more clearly illustrate the technical solutions in the embodiments of the present invention or the prior art, the accompanying drawings used in the description of the embodiments or the prior art will be briefly introduced below.
[0034] Figure 1A flowchart illustrating a network interconnection method provided in an embodiment of the present invention;
[0035] Figure 2 This is a data center deployment diagram in a network interconnection method provided by an embodiment of the present invention;
[0036] Figure 3 This is a load balancing service deployment diagram in a network interconnection method provided by an embodiment of the present invention;
[0037] Figure 4 This is a schematic diagram of a network interconnection system provided in an embodiment of the present invention. Detailed Implementation
[0038] Exemplary embodiments of the present invention will now be described in more detail with reference to the accompanying drawings.
[0039] Before describing the present invention, the relevant terms mentioned will be explained as follows:
[0040] Load balancing refers to the balanced distribution of workload across multiple processing units to collectively complete a task. These processing units include web servers, FTP servers, enterprise-critical application servers, and other mission-critical servers. Load balancing provides a cost-effective, efficient, and transparent method to expand the bandwidth of network devices and servers, increase throughput, enhance network data processing capabilities, and improve network flexibility and availability.
[0041] A cluster is a group of independent computers interconnected by a high-speed network, managed as a single system. When a client interacts with a cluster, the cluster acts as a single server. Cluster configurations are used to improve server availability and scalability. They offer relatively high performance, reliability, and flexibility at a lower cost, with task scheduling being a core technology in cluster systems.
[0042] Gateway: Also known as an internetwork connector or protocol converter. A gateway is a complex network interconnection device that operates above the network layer, used to interconnect two networks with different high-level protocols. Gateways can be used for both wide area network (WAN) and local area network (LAN) interconnection.
[0043] Microservices: A software development technique—a variation of the Service-Oriented Architecture (SOA) style that advocates dividing a single application into a set of small services that coordinate and cooperate with each other to provide end-value to the user. Each service runs in its own independent process, and services communicate with each other using lightweight communication mechanisms (typically HTTP-based RESTful APIs).
[0044] Data Center: Internet Data Center (IDC) is a standardized, professional-grade computer room environment established by telecommunications departments using existing Internet communication lines and bandwidth resources to provide enterprises and governments with comprehensive services such as server hosting, rental, and related value-added services.
[0045] Figure 1 A flowchart of a network interconnection method provided in an embodiment of the present invention is shown below. Figure 1 As shown in the figure, an embodiment of the present invention provides a network interconnection method applied to a data center, the method comprising:
[0046] Step S101: Receive the request initiated by the service caller through the load balancing service corresponding to the data center, and forward the request to the gateway cluster corresponding to the data center;
[0047] Step S102: Based on the received request, the gateway cluster corresponding to the data center determines the interface service corresponding to the request;
[0048] Step S103: Provide services to the service call initiator by calling the corresponding business application cluster through the interface service call.
[0049] In this invention, the method further includes: registering the interface services of each business application cluster corresponding to the data center to the gateway cluster corresponding to the data center.
[0050] In an embodiment of the present invention, the service initiator first initiates a request, which requests a corresponding service. The request is received by the load balancing service corresponding to the data center, and then forwarded to the gateway cluster corresponding to the data center. The gateway cluster of the data center registers a large number of interface services for various business application clusters corresponding to the data center. Upon receiving the request, the gateway cluster determines the registered interface service corresponding to the request and, through that interface service, invokes the corresponding business application cluster to provide the service to the service initiator.
[0051] In embodiments of this invention, the data center service initiator includes: a PC client, a mobile client, and an application service. A load balancing service receives requests from the service initiator and distributes the access traffic corresponding to each request to the backend server cluster according to a forwarding policy, enabling multiple servers to provide the same business service. The load balancing service enables session synchronization to eliminate single points of failure, improve redundancy, and thus ensure service stability. It can be built using hardware load balancing or Nginx. A gateway cluster (a unified API access layer) registers interface services. Some common logic unrelated to the business functionality itself is implemented in the gateway cluster (such as authentication, authorization, monitoring, caching, load balancing, traffic monitoring, routing, etc.). The business application cluster is the provider of the data center's interface services. A data center consists of multiple business application clusters, providing external access interfaces.
[0052] This invention provides a network interconnection method. The method involves receiving a request initiated by a service caller through a load balancing service corresponding to a data center, and forwarding the request to a gateway cluster corresponding to that data center. Based on the received request, the gateway cluster determines the interface service corresponding to the request. This interface service then invokes the corresponding business application cluster to provide services to the service caller. Therefore, this invention allows the gateway cluster to directly obtain the corresponding interface service after the service caller initiates a request, and the interface service then invokes the requested service without requiring network policy activation between service clusters. This reduces the exposure of service cluster APIs and network policies, thereby lowering the risk of data center services being attacked on the network.
[0053] In this invention, when the interface service corresponding to the request is an interface service in the first data center, the step of calling the corresponding business application cluster through the interface service to provide services to the service initiator includes: routing the service to the load balancing service corresponding to the first data center through the gateway cluster of the data center according to the interface service; forwarding the service to the gateway cluster corresponding to the first data center through the load balancing service corresponding to the first data center; and calling the business application cluster corresponding to the interface service through the gateway cluster to provide services to the service initiator.
[0054] In embodiments of the present invention, for interface services in a first data center that differs from the current data center, the present invention routes the interface service to the load balancing service of the first data center through the gateway cluster of the current data center, thereby invoking the interface service in the first data center. This allows the corresponding service to be invoked through the interface service to provide services to the service initiator. Thus, when the current data center calls multiple interface services in another first data center (different from the current data center), only routing to the load balancing service of that first data center is needed to invoke the multiple interface services in that first data center, without needing to enable network policies for each interface service in that first data center. This effectively reduces the exposure of APIs and network policies of the service cluster, thereby reducing the risk of data center services being attacked in the network. Specifically, when the interface service corresponding to the request received by the current data center is different from the interface service in the first data center, one implementation of invoking the corresponding business application cluster through the interface service to provide services to the service initiator is as follows: based on the request received by the load balancing service corresponding to the current data center, the request corresponds to an interface service, and this interface service, in turn, routes the corresponding service to the load balancing service of the first data center through the gateway cluster of the current data center. The service is forwarded to the gateway cluster corresponding to the first data center through the load balancing service. The gateway cluster then calls the corresponding business application cluster of the interface service to provide services to the service initiator. The request is initiated by the service initiator.
[0055] For example, the load balancing service corresponding to data center A receives a request for service corresponding to interface service B1, and service B1 belongs to the interface services registered in the gateway cluster of data center B. Upon receiving the request, the load balancing service of data center A routes the service corresponding to interface service B1 to the load balancing service of data center B through the gateway cluster of data center A. The load balancing service of data center B then forwards the service to the gateway cluster of data center B, and the gateway cluster of data center B invokes the business application cluster corresponding to interface service B1 to provide service to the service initiator.
[0056] In this invention, before routing the service to the load balancing service corresponding to the first data center, the method further includes: opening a server access port policy for the load balancing service corresponding to the first data center in the gateway cluster corresponding to the data center; registering the interface access address of the gateway cluster corresponding to the first data center to the gateway cluster corresponding to the data center; and routing the service to the load balancing service corresponding to the first data center through the gateway cluster of the data center according to the interface service, which includes: routing the service to the load balancing service corresponding to the first data center according to the interface service and the interface access address of the gateway cluster corresponding to the first data center registered in the gateway cluster corresponding to the data center.
[0057] In an embodiment of the present invention, one implementation where the request received by the current data center requests an interface service in the first data center is as follows: the gateway cluster corresponding to the current data center opens a server access port policy for the load balancing server corresponding to the first data center, enabling the gateway cluster to route to the load balancing service of the first data center. Simultaneously, to ensure the current data center can correctly locate the first data center, the interface access address of the gateway cluster corresponding to the first data center needs to be registered with the gateway cluster corresponding to the current data center. In other words, the interface access address registered with the gateway cluster of the first data center in the current data center informs the current data center of the location of the interface service corresponding to the request it receives, and the server access port policy opened by the gateway cluster of the current data center for the load balancing server corresponding to the first data center is the key to the current data center's correct access to the first data center. At this point, when the request received by the current data center is for a service corresponding to an interface service registered in the gateway cluster corresponding to the first data center, the service is routed to the load balancing service corresponding to the first data center based on the interface service and the interface access address of the gateway cluster corresponding to the first data center registered in the gateway cluster corresponding to the current data center. Then, the load balancing service of the first data center forwards the request to the gateway cluster corresponding to the first data center, thereby providing services to the service initiator by calling the corresponding business application cluster through the interface service registered in the gateway cluster corresponding to the first data center.
[0058] In this invention, the method further includes: constructing a gateway management platform to register the interface services of each business application cluster corresponding to the data center to the gateway cluster corresponding to the data center through a visual web page, and to manage the interface services in the gateway cluster corresponding to the data center.
[0059] In embodiments of the present invention, to facilitate the management of interface services, the present invention constructs a gateway management platform, which registers the interface services of each business application cluster corresponding to the data center to the gateway cluster corresponding to the data center through a visual page, and manages the interface services in the gateway clusters corresponding to each data center through the gateway management platform.
[0060] For example, load balancing service A in data center A is responsible for forwarding requests from PCs, mobile devices, and application services to gateway cluster A after load balancing; gateway cluster A in data center A is used to register API services on business application clusters A, B, and C; load balancing service B in data center B is responsible for forwarding requests from PCs, mobile devices, and application services to gateway cluster B after load balancing; gateway cluster B in data center B is used to register API services on business application clusters D, E, and F.
[0061] Gateway cluster A enables access to servers 80 and 443 of load balancing service B, and gateway cluster B enables access to servers 80 and 443 of load balancing service A. After these network policies are enabled, access to servers 80 and 443 of load balancing service B by gateway cluster A is guaranteed, as is access to servers 80 and 443 of load balancing service A by gateway cluster B. In this invention, the gateway clusters can be deployed based on existing gateway products, and API registration, publishing, decommissioning, and modification operations can be managed through the gateway management page.
[0062] When data center A calls the interface of data center B, the interfaces of business application clusters D, E, and F are first registered with gateway cluster B, and the interface access addresses on gateway cluster B are registered with gateway cluster A. When calling the interface service registered by gateway cluster A in data center A, the service can be routed to load balancing service B, then forwarded to gateway cluster B, and finally routed to the business application cluster.
[0063] When data center B calls the interface of data center A, the interfaces of business application clusters A, B, and C are first registered with gateway cluster A, and the interface access addresses on gateway cluster A are registered with gateway cluster B. When calling the interface service registered by gateway cluster B in data center B, the service can be routed to load balancing service A, then forwarded to gateway cluster A, and finally routed to the business application cluster.
[0064] In an embodiment of the present invention, an implementation of a network interconnection method of the present invention, namely, an implementation of a network interconnection method for microservice clusters across data centers, is provided, such as... Figure 2As shown, the first step is to deploy load balancing services and gateway clusters in each data center. Then, the load balancing service distributes access traffic from PCs, mobile devices, and business applications to a traffic distribution control service on multiple backend cloud servers according to forwarding policies. This enables multiple servers in the gateway cluster to provide business services. The gateway cluster is the entry point for the entire business application. After the microservice's external API interface is registered with the gateway cluster, requests are forwarded to the corresponding microservice API interface by accessing the API rules configured in the gateway cluster. Therefore, only the access path of the gateway cluster needs to be exposed to the client, thus avoiding the exposure of the access addresses of all microservices. Once all external API interfaces are registered with the gateway cluster, when API interface calls need to be made across data centers, the gateway cluster interface access path of the called data center (i.e., the first data center) is first registered with the gateway cluster of the calling data center (i.e., the current data center that received the request). The IP in this access path uses the IP of the load balancing service of the called data center. If the calling data center enables the load balancing service of the called data center and the 80 and 443 access policies of the gateway cluster, then when the calling data center calls the gateway cluster, the final route will call the gateway cluster of the called data center, thereby calling the interface service in the gateway cluster of the called data center.
[0065] In embodiments of the present invention, such as Figure 3 As shown, this invention uses NGINX as a reverse proxy server to achieve load balancing, characterized by high concurrency support, with a single machine capable of supporting 30,000 concurrent users. Since a single NGINX instance has limitations, this invention employs master-slave backup to ensure high service availability and clustering to distribute concurrency pressure. The NGINX master-slave backup scheme utilizes Keepalived + Nginx for dual-machine hot standby.
[0066] In embodiments of the present invention, the gateway cluster can build a gateway management platform based on the open-source gateway project and gateway-ui project, and can register corresponding API interface services on the gateway management platform. After the gateway cluster is built, the API interface can be registered, published, modified, or taken offline through the gateway management platform. At the same time, the gateway platform also has other responsibilities, such as authentication, monitoring, load balancing, caching, request sharding and management, and static response processing.
[0067] In embodiments of this invention, load balancing can utilize not only Nginx, but also cloud-native load balancing products from cloud vendors, or other load balancing components, such as LVS (Linux Virtual Server), a virtual server cluster system; and HAProxy, a free and open-source software written in C that provides high availability, load balancing, and application proxying based on TCP and HTTP. The gateway cluster can be built using the open-source projects gateway and gateway-ui.
[0068] This invention provides a network interconnection method that minimizes network policies and external microservice interface configurations across different data centers using a limited number of gateway servers. This enables secure service calls between different data centers, reduces the exposure of APIs and network policies, and lowers the risk of data center services being attacked on the network. By managing publicly accessible services through a unified gateway cluster, access to interfaces from different data centers can be achieved simply by enabling access policies across the gateway cluster. Furthermore, the number of externally exposed interfaces can be reduced by controlling the interface services registered on the gateway cluster.
[0069] In a second aspect of the present invention, a network interconnection system is provided, applied to a data center, the system 400 comprising:
[0070] Service call initiator 401 is used to initiate a request to call a service;
[0071] The load balancing service 402 corresponding to the data center is used to receive requests initiated by the service call initiator and to forward the requests to the gateway cluster corresponding to the data center.
[0072] The gateway cluster 403 corresponding to the data center is used to determine the interface service corresponding to the received request, and to call the corresponding business application cluster through the interface service to provide services to the service call initiator.
[0073] Optionally, the system further includes:
[0074] The gateway management platform is used to register the interface services of each business application cluster corresponding to the data center to the gateway cluster corresponding to the data center through a visual web page, and to manage the interface services in the gateway cluster corresponding to the data center.
[0075] In a third aspect of the present invention, an electronic device is also provided, including a processor, a communication interface, a memory, and a communication bus, wherein the processor, the communication interface, and the memory communicate with each other through the communication bus.
[0076] Memory, used to store computer programs;
[0077] When a processor executes a program stored in memory, it implements the steps of a network interconnection method provided in the first aspect of the present invention.
[0078] In a fourth aspect of the present invention, a computer-readable storage medium is also provided, on which a computer program is stored, which, when executed by a processor, implements a network interconnection method as described in the first aspect of the present invention.
[0079] In the above embodiments, implementation can be achieved entirely or partially through software, hardware, firmware, or any combination thereof. When implemented using software, it can be implemented entirely or partially in the form of a computer program product. The computer program product includes one or more computer instructions. When the computer program instructions are loaded and executed on a computer, all or part of the processes or functions described in the embodiments of the present invention are generated. The computer can be a general-purpose computer, a special-purpose computer, a computer network, or other programmable device. The computer instructions can be stored in a computer-readable storage medium or transmitted from one computer-readable storage medium to another. For example, the computer instructions can be transmitted from one website, computer, server, or data center to another website, computer, server, or data center via wired (e.g., coaxial cable, fiber optic, digital subscriber line (DSL)) or wireless (e.g., infrared, wireless, microwave, etc.) means. The computer-readable storage medium can be any available medium that a computer can access or a data storage device such as a server or data center that integrates one or more available media. The available medium can be a magnetic medium (e.g., floppy disk, hard disk, magnetic tape), an optical medium (e.g., DVD), or a semiconductor medium (e.g., solid state disk (SSD)).
[0080] It should be noted that, in this document, relational terms such as "first" and "second" are used only to distinguish one entity or operation from another, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Furthermore, the terms "comprising," "including," or any other variations thereof are intended to cover non-exclusive inclusion, such that a process, method, article, or apparatus that comprises a list of elements includes not only those elements but also other elements not expressly listed, or elements inherent to such a process, method, article, or apparatus. Without further limitations, an element defined by the phrase "comprising one..." does not exclude the presence of other identical elements in the process, method, article, or apparatus that includes said element.
[0081] The various embodiments in this specification are described in a related manner. Similar or identical parts between embodiments can be referred to mutually. Each embodiment focuses on describing the differences from other embodiments. In particular, the system embodiments are basically similar to the method embodiments, so the description is relatively simple; relevant parts can be referred to the descriptions of the method embodiments.
[0082] The above description is merely a preferred embodiment of the present invention and is not intended to limit the scope of protection of the present invention. Any modifications, equivalent substitutions, improvements, etc., made within the spirit and principles of the present invention are included within the scope of protection of the present invention.
Claims
1. A method for network interconnection, characterized in that, Applied to data centers, the method includes: A gateway management platform is built to register the interface services of each business application cluster corresponding to the data center to the gateway cluster corresponding to the data center through a visual web page, and to manage the interface services in the gateway cluster corresponding to the data center. Register the interface access address of the gateway cluster corresponding to the first data center to the gateway cluster corresponding to the data center, wherein the IP of the interface access address is the IP of the load balancing service of the first data center; The load balancing service corresponding to the data center receives the request initiated by the service caller and forwards the request to the gateway cluster corresponding to the data center. Based on the received request, the gateway cluster corresponding to the data center determines the interface service corresponding to the request; The service can be provided to the service caller by calling the corresponding business application cluster through the interface service, without the need to open network policies between service clusters, thereby reducing the exposure of service cluster APIs and network policies. The service is provided to the service initiator by calling the corresponding business application cluster through the interface service, including: Based on the interface service, the interface service is routed to the load balancing service corresponding to the first data center through the gateway cluster of the data center; The interface service is forwarded to the gateway cluster corresponding to the first data center through the load balancing service corresponding to the first data center, and the service caller is provided with services by calling the business application cluster corresponding to the interface service through the gateway cluster.
2. The network interconnection method according to claim 1, characterized in that, Before routing the service to the load balancing service corresponding to the first data center, the method further includes: The gateway cluster corresponding to the data center opens the server access port policy for the load balancing service corresponding to the first data center. The step of routing the service to the load balancing service corresponding to the first data center through the gateway cluster of the data center according to the interface service includes: Based on the interface service and the interface access address of the gateway cluster corresponding to the first data center registered in the gateway cluster corresponding to the data center, the service is routed to the load balancing service corresponding to the first data center.
3. A network interconnection system, characterized in that, The system, applied in a data center, includes: The gateway management platform is used to register the interface services of each business application cluster corresponding to the data center to the gateway cluster corresponding to the data center through a visual web page, and to manage the interface services in the gateway cluster corresponding to the data center. The service initiator is used to initiate a request to call a service. The load balancing service corresponding to the data center is used to receive requests initiated by the service call initiator and to forward the requests to the gateway cluster corresponding to the data center. The gateway cluster corresponding to the data center is used to determine the interface service corresponding to the received request, and to call the corresponding business application cluster to provide services to the service initiator through the interface service. This eliminates the need for network policy opening between service clusters, thereby reducing the exposure of service cluster APIs and network policies. The process includes: routing the interface service to the load balancing service corresponding to the first data center through the gateway cluster of the data center; forwarding the interface service to the gateway cluster corresponding to the first data center through the load balancing service; and calling the business application cluster corresponding to the interface service to provide services to the service initiator through the gateway cluster. The system also includes: Register the interface services of each business application cluster corresponding to the data center to the gateway cluster corresponding to the data center; register the interface access address of the gateway cluster corresponding to the first data center to the gateway cluster corresponding to the data center, wherein the IP of the interface access address is the IP of the load balancing service of the first data center.
4. An electronic device, characterized in that, It includes a processor, a communication interface, a memory, and a communication bus, wherein the processor, the communication interface, and the memory communicate with each other through the communication bus; Memory, used to store computer programs; When a processor executes a program stored in memory, it implements the steps of a network interconnection method as described in any one of claims 1-2.
5. A computer-readable storage medium having a computer program stored thereon, characterized in that, When executed by the processor, the program implements a network interconnection method as described in any one of claims 1-2.
Citation Information
Patent Citations
Method and system for realizing cross-domain and cross-center communication in enterprise-level micro-service platform
CN111147588A
Intra-city active-active system and method based on micro-service
CN112671882A
Load balancing method and device based on application market architecture
CN114143324A