Method and circuit for realizing network bypass function

Abstract

The present application relates to a method, circuit, computer device, storage medium and computer program product for realizing a network Bypass function. The method includes: establishing a communication connection with a central processing unit; in the case of a communication connection, writing configuration data for a network security device sent by the central processing unit into the network security device; the configuration data is used to configure the network security device to switch to a Bypass mode; in the case of a network security device failure, according to a preset integrated circuit bus protocol, the Bypass start instruction of the central processing unit is sent to the network security device, instructing the network security device to switch to the Bypass mode to control the network connectivity of the target port. The use of this method can enable the network security device to turn on the Bypass mode through the above communication in the case of a network security device failure, thereby realizing the network Bypass function.

Description

Technical Field

[0001] The present application relates to the field of modern wireless communication technology, and in particular to a method, circuit, computer device, storage medium and computer program product for implementing network bypass. Background Art

[0002] With the development of network security, society's demand for the sustainability and reliability of network security equipment has gradually increased, and network bypass technology has emerged. Among them, the network Bypass function has been developed and used. The Bypass function can use a specific trigger state (power off or crash) to allow two networks to be physically connected directly without passing through the system of the network security device, ensuring that after the network security device fails, the networks connected to this network security device can still be connected to each other.

[0003] In traditional technology, relays are added to network security devices, and Bypass is controlled and triggered by combining GPIO (general purpose input output) and Watchdog. In fact, both methods operate GPIO, specifically by controlling the internal switch of the relay through GPIO to generate corresponding jumps to achieve mutual connectivity between the two network ports.

[0004] However, the current method of implementing Bypass through relays has a complex hardware system structure and a complex connection method for GPIO control to connect the internal switch of the relay, resulting in a large amount of IO resources being required to implement the Bypass function. Summary of the invention

[0005] Based on this, it is necessary to provide a method, circuit, computer device, computer-readable storage medium and computer program product that can implement the network bypass function in response to the above technical problems.

[0006] In a first aspect, the present application provides a method for implementing a network bypass function. The method comprises:

[0007] Establishing a communication connection with the central processing unit;

[0008] In the case of communication connection, the configuration data for the network security device sent by the central processor is written into the network security device; the configuration data is used to configure the network security device to switch to the Bypass mode;

[0009] In the event of a failure of the network security device, the Bypass start instruction of the central processor is sent to the network security device according to a preset integrated circuit bus protocol, instructing the network security device to switch to Bypass mode to control network connectivity of the target port.

[0010] In the above method for realizing the network Bypass function, by establishing a connection between the complex programmable logic device and the central processing unit according to a preset integrated circuit bus protocol, and completing the writing of configuration data for the network security device under the condition of communication connection, in the event of a failure of the network security device, the network security device can be enabled to enter the Bypass mode through the above communication to realize the network Bypass function.

[0011] In one embodiment, establishing a communication connection with a central processing unit includes:

[0012] In the case of the transmission state of the central processing unit, receiving first addressing address information of the central processing unit, the transmission state of the central processing unit is that the central processing unit is started based on the integrated circuit bus protocol; the first addressing address information is the address information of the complex programmable logic device;

[0013] Performing address matching according to the first addressing address information, and feeding back first response information based on a first matching result;

[0014] Receive the register address information of the complex programmable logic device sent by the central processor, perform address matching according to the register address information of the complex programmable logic device, and feed back second response information to the central processor based on a second matching result to establish a communication connection with the central processor.

[0015] In this embodiment, the central processing unit and the complex programmable logic device simulate the I2C bus protocol, so that the central processing unit and the complex programmable logic device complete the communication connection, so that the central processing unit can write data to the register of the complex programmable logic device through this communication connection.

[0016] In one embodiment, writing the configuration data for the network security device sent by the central processor into the network security device includes:

[0017] Receiving configuration data for network security devices sent by the central processor;

[0018] Establishing a communication connection with the network security device;

[0019] The configuration data is written into a register of the network security device based on a target transmission channel corresponding to the communication connection.

[0020] In this embodiment, by establishing communication between a complex programmable logic device and a network security device, the central processor can write configuration data to the network security device, so that the network security device can turn on the Bypass mode, and write data to the register of the network security device through multiple channels, thereby improving the reliability of the Bypass mode of the network security device.

[0021] In one embodiment, establishing a communication connection with the network security device includes:

[0022] When the complex programmable logic device is in a transmission initiating state, second addressing address information is sent to the routing chip; the second addressing address information is the address information of the routing chip;

[0023] receiving a first response signal from the routing chip to control the activation of the routing chip;

[0024] The register address information of the network security device is sent to the routing chip, and a second response signal of the routing chip is received to establish a communication connection with the network security device.

[0025] In this embodiment, after the complex programmable logic device completes communication with the routing chip, the complex programmable logic device can complete communication with the network security device through the routing chip, and the configuration data in the complex programmable logic device register can be written into the register of the network security device.

[0026] In one embodiment, the configuration data includes a value corresponding to the transmission channel; the routing chip includes a plurality of transmission channels, and after receiving a first response signal of the routing chip to control the start of the routing chip, the method further includes:

[0027] Based on the value corresponding to the transmission channel included in the configuration data, the target transmission channel corresponding to the configuration data is enabled.

[0028] In this embodiment, by using a routing chip with multiple transmission channels, when one of the transmission channels fails, other transmission channels can be selected, thereby improving the reliability of the Bypass device.

[0029] In one embodiment, writing the configuration data into a register of the network security device based on the target transmission channel corresponding to the communication connection includes:

[0030] Transmitting the configuration data of the central processing unit via an integrated circuit bus pre-set in the routing chip; the configuration data meets the integrated circuit bus protocol;

[0031] When the target transmission channel is enabled, the configuration data is sent to a register of the network security device.

[0032] In this embodiment, the central processing unit writes the configuration data of the network security device into the register of the complex programmable logic device through the I2C bus protocol, and forwards the configuration data to the network security device through the complex programmable logic device, thereby completing the configuration of the Bypass mode of the network security device and realizing the Bypass function of the network security device.

[0033] In a second aspect, the present application also provides a circuit for implementing a network bypass function. The circuit includes:

[0034] The central processor 102 is used to send configuration data to the complex programmable logic device, and in the event of a network security device failure, send a Bypass start instruction according to a preset integrated circuit bus protocol.

[0035] The complex programmable logic device 104 is used to establish a communication connection with the central processing unit according to the configuration data; write the configuration data for the network security device sent by the central processing unit into the network security device; in the event of a failure of the network security device, according to a preset integrated circuit bus protocol, send the Bypass start instruction of the central processing unit to the network security device, instructing the network security device to control the network connectivity of the target port based on the Bypass mode.

[0036] In the above-mentioned circuit for realizing the network Bypass function, by establishing a connection between the complex programmable logic device and the central processing unit according to a preset integrated circuit bus protocol, and completing the writing of configuration data for the network security device under the condition of communication connection, in the event of a failure of the network security device, the network security device can be enabled to turn on the Bypass mode through the above-mentioned communication, thereby realizing the network Bypass function.

[0037] In one embodiment, the configuration data includes a value corresponding to the transmission channel; and the circuit further includes:

[0038] The routing chip 106 is used to feed back a response signal based on the address information sent by the complex programmable logic device, and to open a target transmission channel corresponding to the configuration data based on a value corresponding to the transmission channel included in the configuration data.

[0039] In this embodiment, by configuring data to open the value corresponding to the transmission channel of the routing chip, the complex programmable logic device can communicate with the network security device.

[0040] In one of the embodiments, the address information includes second addressing address information and register address information of the network security device, and the response signal includes a first response signal and a second response signal;

[0041] The complex programmable logic device 104 is further configured to send the second addressing address information to the routing chip when the bus of the complex programmable logic device sends a start command;

[0042] The complex programmable logic device 104 is also used to send the register address information of the network security device to the routing chip based on the first response signal returned by the routing chip, and receive the second response signal of the routing chip to complete the communication connection with the network security device.

[0043] In this embodiment, the complex programmable logic device completes the establishment of connection with the routing chip according to the I2C bus communication protocol, so that the complex programmable logic device can establish a connection with the network security device through the routing chip.

[0044] In one embodiment, the routing chip 106 includes multiple transmission channels, such as Figure 7 As shown, the multiple transmission channels are represented as Slot1-Slot8 respectively, and the routing chip 106 is also used to select a transmission channel as a target transmission channel, and send configuration data or a Bypass startup instruction to the network security device through the target transmission channel.

[0045] In this embodiment, by selecting multiple transmission channels of the routing chip, when one of the transmission channels fails, it can switch to other transmission channels, which can improve the reliability of the circuit for implementing network bypass.

[0046] In one embodiment, the complex programmable logic device is specifically used for:

[0047] In the case of a transmission state of the central processing unit, first addressing address information of the central processing unit is received, the transmission state of the central processing unit is that the central processing unit is started based on the integrated circuit bus protocol; the first addressing address information is address information of the complex programmable logic device;

[0048] Performing address matching according to the first addressing address information, and feeding back first response information based on the first matching result;

[0049] Receive register address information of the complex programmable logic device sent by the central processor, perform address matching according to the register address information of the complex programmable logic device, and feed back second response information to the central processor based on a second matching result to establish a communication connection with the central processor.

[0050] In this embodiment, the central processing unit and the complex programmable logic device simulate the I2C bus protocol, so that the central processing unit and the complex programmable logic device complete the communication connection, so that the central processing unit can write data to the register of the complex programmable logic device through this communication connection.

[0051] In one embodiment, the complex programmable logic device is specifically used for:

[0052] receiving configuration data for network security devices sent by the central processor;

[0053] Establishing a communication connection with network security equipment;

[0054] The configuration data is written into the register of the network security device based on the target transmission channel corresponding to the communication connection.

[0055] In this embodiment, by establishing communication between a complex programmable logic device and a network security device, the central processor can write configuration data to the network security device, so that the network security device can turn on the Bypass mode, and write data to the register of the network security device through multiple channels, thereby improving the reliability of the Bypass mode of the network security device.

[0056] In one embodiment, the complex programmable logic device is specifically used for:

[0057] When the complex programmable logic device is in a transmission initiating state, second addressing address information is sent to the routing chip; the second addressing address information is address information of the routing chip;

[0058] Receiving a first response signal from the routing chip to control the activation of the routing chip;

[0059] The register address information of the network security device is sent to the routing chip, and a second response signal of the routing chip is received to establish a communication connection with the network security device.

[0060] In this embodiment, after the complex programmable logic device completes communication with the routing chip, the complex programmable logic device can complete communication with the network security device through the routing chip, and the configuration data in the complex programmable logic device register can be written into the register of the network security device.

[0061] In one embodiment, the complex programmable logic device is specifically used for:

[0062] Based on the value corresponding to the transmission channel included in the configuration data, the target transmission channel corresponding to the configuration data is opened.

[0063] In this embodiment, by using a routing chip with multiple transmission channels, when one of the transmission channels fails, other transmission channels can be selected, thereby improving the reliability of the Bypass device.

[0064] In one embodiment, the complex programmable logic device is specifically used for:

[0065] The configuration data of the central processing unit is transmitted through the integrated circuit bus preset in the routing chip; the configuration data meets the integrated circuit bus protocol;

[0066] With the target transmission channel selected, the configuration data is sent to the registers of the network security device.

[0067] In this embodiment, the central processing unit writes the configuration data of the network security device into the register of the complex programmable logic device through the I2C bus protocol, and forwards the configuration data to the network security device through the complex programmable logic device, thereby completing the configuration of the Bypass mode of the network security device and realizing the Bypass function of the network security device.

[0068] In a third aspect, the present application further provides a computer device. The computer device includes a memory and a processor, the memory stores a computer program, and the processor implements the following steps when executing the computer program:

[0069] Establishing a communication connection with the central processing unit;

[0070] In the case of communication connection, the configuration data for the network security device sent by the central processor is written into the network security device; the configuration data is used to configure the network security device to switch to the Bypass mode;

[0071] In the event of a failure of the network security device, the Bypass start instruction of the central processor is sent to the network security device according to a preset integrated circuit bus protocol, instructing the network security device to switch to Bypass mode to control network connectivity of the target port.

[0072] In the above method for realizing the network Bypass function, by establishing a connection between the complex programmable logic device and the central processing unit according to a preset integrated circuit bus protocol, and completing the writing of configuration data for the network security device under the condition of communication connection, in the event of a failure of the network security device, the network security device can be enabled to enter the Bypass mode through the above communication to realize the network Bypass function.

[0073] In one embodiment, establishing a communication connection with a central processing unit includes:

[0074] In the case of the transmission state of the central processing unit, receiving first addressing address information of the central processing unit, the transmission state of the central processing unit is that the central processing unit is started based on the integrated circuit bus protocol; the first addressing address information is the address information of the complex programmable logic device;

[0075] Performing address matching according to the first addressing address information, and feeding back first response information based on a first matching result;

[0076] Receive the register address information of the complex programmable logic device sent by the central processor, perform address matching according to the register address information of the complex programmable logic device, and feed back second response information to the central processor based on a second matching result to establish a communication connection with the central processor.

[0077] In this embodiment, the central processing unit and the complex programmable logic device simulate the I2C bus protocol, so that the central processing unit and the complex programmable logic device complete the communication connection, so that the central processing unit can write data to the register of the complex programmable logic device through this communication connection.

[0078] In one embodiment, writing the configuration data for the network security device sent by the central processor into the network security device includes:

[0079] Receiving configuration data for network security devices sent by the central processor;

[0080] Establishing a communication connection with the network security device;

[0081] The configuration data is written into a register of the network security device based on a target transmission channel corresponding to the communication connection.

[0082] In this embodiment, by establishing communication between a complex programmable logic device and a network security device, the central processor can write configuration data to the network security device, so that the network security device can turn on the Bypass mode, and write data to the register of the network security device through multiple channels, thereby improving the reliability of the Bypass mode of the network security device.

[0083] In one embodiment, establishing a communication connection with the network security device includes:

[0084] When the complex programmable logic device is in a transmission initiating state, second addressing address information is sent to the routing chip; the second addressing address information is the address information of the routing chip;

[0085] receiving a first response signal from the routing chip to control the activation of the routing chip;

[0086] The register address information of the network security device is sent to the routing chip, and a second response signal of the routing chip is received to establish a communication connection with the network security device.

[0087] In this embodiment, after the complex programmable logic device completes communication with the routing chip, the complex programmable logic device can complete communication with the network security device through the routing chip, and the configuration data in the complex programmable logic device register can be written into the register of the network security device.

[0088] In one embodiment, the configuration data includes a value corresponding to the transmission channel; the routing chip includes a plurality of transmission channels, and after receiving a first response signal of the routing chip to control the start of the routing chip, the method further includes:

[0089] Based on the value corresponding to the transmission channel included in the configuration data, the target transmission channel corresponding to the configuration data is enabled.

[0090] In this embodiment, by using a routing chip with multiple transmission channels, when one of the transmission channels fails, other transmission channels can be selected, thereby improving the reliability of the Bypass device.

[0091] In one embodiment, writing the configuration data into a register of the network security device based on the target transmission channel corresponding to the communication connection includes:

[0092] Transmitting the configuration data of the central processing unit via an integrated circuit bus pre-set in the routing chip; the configuration data meets the integrated circuit bus protocol;

[0093] When the target transmission channel is enabled, the configuration data is sent to a register of the network security device.

[0094] In this embodiment, the central processing unit writes the configuration data of the network security device into the register of the complex programmable logic device through the I2C bus protocol, and forwards the configuration data to the network security device through the complex programmable logic device, thereby completing the configuration of the Bypass mode of the network security device and realizing the Bypass function of the network security device.

[0095] In a fourth aspect, the present application further provides a computer-readable storage medium. The computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, the following steps are implemented:

[0096] Establishing a communication connection with the central processing unit;

[0097] In the case of communication connection, the configuration data for the network security device sent by the central processor is written into the network security device; the configuration data is used to configure the network security device to switch to the Bypass mode;

[0098] In the event of a failure of the network security device, the Bypass start instruction of the central processor is sent to the network security device according to a preset integrated circuit bus protocol, instructing the network security device to switch to Bypass mode to control network connectivity of the target port.

[0099] In the above method for realizing the network Bypass function, by establishing a connection between the complex programmable logic device and the central processing unit according to a preset integrated circuit bus protocol, and completing the writing of configuration data for the network security device under the condition of communication connection, in the event of a failure of the network security device, the network security device can be enabled to enter the Bypass mode through the above communication to realize the network Bypass function.

[0100] In one embodiment, establishing a communication connection with a central processing unit includes:

[0101] In the case of the transmission state of the central processing unit, receiving first addressing address information of the central processing unit, the transmission state of the central processing unit is that the central processing unit is started based on the integrated circuit bus protocol; the first addressing address information is the address information of the complex programmable logic device;

[0102] Performing address matching according to the first addressing address information, and feeding back first response information based on a first matching result;

[0103] Receive the register address information of the complex programmable logic device sent by the central processor, perform address matching according to the register address information of the complex programmable logic device, and feed back second response information to the central processor based on a second matching result to establish a communication connection with the central processor.

[0104] In this embodiment, the central processing unit and the complex programmable logic device simulate the I2C bus protocol, so that the central processing unit and the complex programmable logic device complete the communication connection, so that the central processing unit can write data to the register of the complex programmable logic device through this communication connection.

[0105] In one embodiment, writing the configuration data for the network security device sent by the central processor into the network security device includes:

[0106] Receiving configuration data for network security devices sent by the central processor;

[0107] Establishing a communication connection with the network security device;

[0108] The configuration data is written into a register of the network security device based on a target transmission channel corresponding to the communication connection.

[0109] In this embodiment, by establishing communication between a complex programmable logic device and a network security device, the central processor can write configuration data to the network security device, so that the network security device can turn on the Bypass mode, and write data to the register of the network security device through multiple channels, thereby improving the reliability of the Bypass mode of the network security device.

[0110] In one embodiment, establishing a communication connection with the network security device includes:

[0111] When the complex programmable logic device is in a transmission initiating state, second addressing address information is sent to the routing chip; the second addressing address information is the address information of the routing chip;

[0112] receiving a first response signal from the routing chip to control the activation of the routing chip;

[0113] The register address information of the network security device is sent to the routing chip, and a second response signal of the routing chip is received to establish a communication connection with the network security device.

[0114] In this embodiment, after the complex programmable logic device completes communication with the routing chip, the complex programmable logic device can complete communication with the network security device through the routing chip, and the configuration data in the complex programmable logic device register can be written into the register of the network security device.

[0115] In one embodiment, the configuration data includes a value corresponding to the transmission channel; the routing chip includes a plurality of transmission channels, and after receiving a first response signal of the routing chip to control the start of the routing chip, the method further includes:

[0116] Based on the value corresponding to the transmission channel included in the configuration data, the target transmission channel corresponding to the configuration data is enabled.

[0117] In this embodiment, by using a routing chip with multiple transmission channels, when one of the transmission channels fails, other transmission channels can be selected, thereby improving the reliability of the Bypass device.

[0118] In one embodiment, writing the configuration data into a register of the network security device based on the target transmission channel corresponding to the communication connection includes:

[0119] Transmitting the configuration data of the central processing unit via an integrated circuit bus pre-set in the routing chip; the configuration data meets the integrated circuit bus protocol;

[0120] When the target transmission channel is enabled, the configuration data is sent to a register of the network security device.

[0121] In this embodiment, the central processing unit writes the configuration data of the network security device into the register of the complex programmable logic device through the I2C bus protocol, and forwards the configuration data to the network security device through the complex programmable logic device, thereby completing the configuration of the Bypass mode of the network security device and realizing the Bypass function of the network security device.

[0122] In a fifth aspect, the present application further provides a computer program product. The computer program product includes a computer program, and when the computer program is executed by a processor, the following steps are implemented:

[0123] Establishing a communication connection with the central processing unit;

[0124] In the case of communication connection, the configuration data for the network security device sent by the central processor is written into the network security device; the configuration data is used to configure the network security device to switch to the Bypass mode;

[0125] In the event of a failure of the network security device, the Bypass start instruction of the central processor is sent to the network security device according to a preset integrated circuit bus protocol, instructing the network security device to switch to Bypass mode to control network connectivity of the target port.

[0126] In the above method for realizing the network Bypass function, by establishing a connection between the complex programmable logic device and the central processing unit according to a preset integrated circuit bus protocol, and completing the writing of configuration data for the network security device under the condition of communication connection, in the event of a failure of the network security device, the network security device can be enabled to enter the Bypass mode through the above communication to realize the network Bypass function.

[0127] In one embodiment, establishing a communication connection with a central processing unit includes:

[0128] In the case of the transmission state of the central processing unit, receiving first addressing address information of the central processing unit, the transmission state of the central processing unit is that the central processing unit is started based on the integrated circuit bus protocol; the first addressing address information is the address information of the complex programmable logic device;

[0129] Performing address matching according to the first addressing address information, and feeding back first response information based on a first matching result;

[0130] Receive the register address information of the complex programmable logic device sent by the central processor, perform address matching according to the register address information of the complex programmable logic device, and feed back second response information to the central processor based on a second matching result to establish a communication connection with the central processor.

[0131] In this embodiment, the central processing unit and the complex programmable logic device simulate the I2C bus protocol, so that the central processing unit and the complex programmable logic device complete the communication connection, so that the central processing unit can write data to the register of the complex programmable logic device through this communication connection.

[0132] In one embodiment, writing the configuration data for the network security device sent by the central processor into the network security device includes:

[0133] Receiving configuration data for network security devices sent by the central processor;

[0134] Establishing a communication connection with the network security device;

[0135] The configuration data is written into a register of the network security device based on a target transmission channel corresponding to the communication connection.

[0136] In this embodiment, by establishing communication between a complex programmable logic device and a network security device, the central processor can write configuration data to the network security device, so that the network security device can turn on the Bypass mode, and write data to the register of the network security device through multiple channels, thereby improving the reliability of the Bypass mode of the network security device.

[0137] In one embodiment, establishing a communication connection with the network security device includes:

[0138] When the complex programmable logic device is in a transmission initiating state, second addressing address information is sent to the routing chip; the second addressing address information is the address information of the routing chip;

[0139] receiving a first response signal from the routing chip to control the activation of the routing chip;

[0140] The register address information of the network security device is sent to the routing chip, and a second response signal of the routing chip is received to establish a communication connection with the network security device.

[0141] In this embodiment, after the complex programmable logic device completes communication with the routing chip, the complex programmable logic device can complete communication with the network security device through the routing chip, and the configuration data in the complex programmable logic device register can be written into the register of the network security device.

[0142] In one embodiment, the configuration data includes a value corresponding to the transmission channel; the routing chip includes a plurality of transmission channels, and after receiving a first response signal of the routing chip to control the start of the routing chip, the method further includes:

[0143] Based on the value corresponding to the transmission channel included in the configuration data, the target transmission channel corresponding to the configuration data is enabled.

[0144] In this embodiment, by using a routing chip with multiple transmission channels, when one of the transmission channels fails, other transmission channels can be selected, thereby improving the reliability of the Bypass device.

[0145] In one embodiment, writing the configuration data into a register of the network security device based on the target transmission channel corresponding to the communication connection includes:

[0146] Transmitting the configuration data of the central processing unit via an integrated circuit bus pre-set in the routing chip; the configuration data meets the integrated circuit bus protocol;

[0147] When the target transmission channel is enabled, the configuration data is sent to a register of the network security device.

[0148] In this embodiment, the central processing unit writes the configuration data of the network security device into the register of the complex programmable logic device through the I2C bus protocol, and forwards the configuration data to the network security device through the complex programmable logic device, thereby completing the configuration of the Bypass mode of the network security device and realizing the Bypass function of the network security device.

[0149] The above-mentioned method, circuit, computer device, storage medium and computer program product for realizing the network Bypass function establish a connection between the complex programmable logic device and the central processing unit according to a preset integrated circuit bus protocol, and complete the writing of configuration data for the network security device under the condition of communication connection. In the event of a failure of the network security device, the network security device can be enabled to enter the Bypass mode through the above-mentioned communication, thereby realizing the network Bypass function. BRIEF DESCRIPTION OF THE DRAWINGS

[0150] Figure 1 An application environment diagram of a method for implementing a network bypass function in an embodiment;

[0151] Figure 2 A flowchart of a method for implementing a network bypass function in an embodiment;

[0152] Figure 3 A schematic diagram of a flow chart of steps for establishing communication between a complex programmable logic device and a central processing unit in one embodiment;

[0153] Figure 4 A schematic diagram of a flow chart of steps for establishing communication between a complex programmable logic device and a network security device in one embodiment;

[0154] Figure 5 A schematic diagram of configuring a network security device register in one embodiment;

[0155] Figure 6 A schematic flow chart of the steps of establishing communication between a complex programmable logic device and a network security device through a routing chip in one embodiment;

[0156] Figure 7 A schematic diagram of a process of a complex programmable logic device writing configuration data of a central processor into a register of a network security device through a routing chip in one embodiment;

[0157] Figure 8 is a structural block diagram of a circuit for implementing a network bypass function in an embodiment;

[0158] Fig. 9 FIG. 4 is a diagram showing the internal structure of a server device in one embodiment. DETAILED DESCRIPTION

[0159] In order to make the purpose, technical solution and advantages of the present application more clearly understood, the present application is further described in detail below in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are only used to explain the present application and are not used to limit the present application.

[0160] The present application embodiment provides a circuit for realizing a network bypass function, which can be applied to Figure 1 In the application environment shown. The application environment includes a central processing unit, a complex programmable logic device and a network security device. Among them, the circuit that implements the network Bypass function includes a central processing unit 102, a complex programmable logic device 104 and a network security device 106. The central processing unit 102 communicates with the complex programmable logic device 104 through the I2C protocol. The central processing unit 102 is used to send configuration data to the complex programmable logic device 104, and in the case of a failure of the network security device 106, send a Bypass start instruction according to a preset integrated circuit bus protocol; the complex programmable logic device 104 is used to establish a communication connection with the central processing unit 102 according to the configuration data; write the configuration data for the network security device 106 sent by the central processing unit 102 into the network security device 106; in the case of a failure of the network security device 106, send the Bypass start instruction of the central processing unit to the network security device 106 according to the preset integrated circuit bus protocol, instructing the network security device 106 to control the network conduction of the target port based on the Bypass mode.

[0161] In one embodiment, Figure 2 As shown, a method for implementing the network bypass function is provided. This embodiment uses the method applied to a complex programmable logic device as an example. It can be understood that the method can also be applied to a server, and can also be applied to a system including a terminal and a server, and is implemented through the interaction between the terminal and the server. In this embodiment, the method includes the following steps:

[0162] Step 202, establishing a communication connection with a central processing unit.

[0163] In an embodiment of the present application, a complex programmable logic device simulates an I2C communication protocol and establishes a communication connection with a central processing unit, so that the central processing unit can send configuration data or a startup instruction to enable a Bypass function to a network security device through the complex programmable logic device.

[0164] Optionally, the complex programmable logic device can also simulate other integrated circuit bus protocols, such as SPI and other integrated circuit bus protocols.

[0165] Step 204: When the communication connection is established, the configuration data for the network security device sent by the central processor is written into the network security device.

[0166] The configuration data is used to configure the network security device to switch to the Bypass mode.

[0167] In an embodiment of the present application, when the complex programmable logic device is connected to the central processing unit for communication, the central processing unit can send configuration data to the register of the complex programmable logic device, and then the complex programmable logic device writes the configuration data in its register to the network security device. Specifically, when the complex programmable logic device receives a byte of configuration data, it returns a write response signal to the central processing unit, and then the central processing unit writes the next byte of configuration data to the complex programmable logic device, and repeats the above steps until the central processing unit completely writes the configuration data to the register of the complex programmable logic device. When the central processing unit completely writes the configuration data to the register of the complex programmable logic device, the central processing unit sends a stop transmission signal to end the I2C communication, completing the process of the central processing unit writing data to the complex programmable logic device, and then the complex programmable logic device sends the written configuration data to the register of the network security device.

[0168] Step 206, in case of a network security device failure, according to a preset integrated circuit bus protocol, the Bypass start instruction of the central processor is sent to the network security device, instructing the network security device to switch the Bypass mode to control the network connectivity of the target port.

[0169] In an embodiment of the present application, in the event of a network security device failure, for example, the network security device has a logical failure or requires maintenance, so that it cannot perform packet analysis and processing on the network. The complex programmable logic device sends the Bypass startup instruction of the central processor to the network security device according to the preset integrated circuit bus protocol, switches the state of the network security device to the Bypass mode, so that the network does not pass through the system of the network security device, thereby achieving physical connectivity between the two networks. Optionally, the preset integrated circuit bus protocol can be an I2C bus protocol or other integrated circuit bus protocols. Optionally, the device that implements the Bypass function can be a network security device or a Bypass switch.

[0170] In the above method for realizing the network Bypass function, by establishing a connection between the complex programmable logic device and the central processing unit according to a preset integrated circuit bus protocol, and completing the writing of configuration data for the network security device under the condition of communication connection, in the event of a failure of the network security device, the network security device can be enabled to enter the Bypass mode through the above communication to realize the network Bypass function.

[0171] In one embodiment, Figure 3 As shown, step 202 establishes a communication connection with the central processing unit, and the specific processing process includes:

[0172] Step 302: In the case of the transmission state of the central processing unit, receiving first address information of the central processing unit.

[0173] The transmission state of the central processing unit is initiated by the central processing unit based on the integrated circuit bus protocol.

[0174] The first addressing address information is address information of a complex programmable logic device.

[0175] In an embodiment of the present application, after the enable signal of the mainboard takes effect, the central processing unit can optionally pull the SDA (Serial Data signal line) signal from high to low and keep the SCL (System Clock Line clock signal line) signal high based on the integrated circuit bus protocol, so that the central processing unit initiates the transmission state.

[0176] When the central processor starts the transmission state, the central processor sends first address information to the complex programmable logic device, and then the complex programmable logic device can receive the first address information.

[0177] Step 304: perform address matching according to the first addressing address information, and feed back first response information based on the first matching result.

[0178] In the embodiment of the present application, the complex programmable logic device matches the received first addressing address information with the address of its own complex programmable logic device. When the first matching result is successful, the complex programmable logic device sends a first response information to the central processing unit.

[0179] Optionally, the first addressing address information may be a seven-bit complex programmable logic device address and a one-bit write flag.

[0180] Step 306, receiving the register address information of the complex programmable logic device sent by the central processor, performing address matching according to the register address information of the complex programmable logic device, and feeding back second response information to the central processor based on the second matching result to establish a communication connection with the central processor.

[0181] In the embodiment of the present application, the complex programmable logic device receives the register address information of its own complex programmable logic device sent by the central processor. In this step, the central processor sends the register address information of the complex programmable logic device to the complex programmable logic device in the same manner as in step 302, and will not be repeated in this step. Then the complex programmable logic device performs address matching according to the register address information of the complex programmable logic device to obtain a second matching result. When the second matching result is successful, the complex programmable logic device sends a second response message to the central processor.

[0182] In this embodiment, the central processing unit and the complex programmable logic device simulate the I2C bus protocol, so that the central processing unit and the complex programmable logic device complete the communication connection, so that the central processing unit can write data to the register of the complex programmable logic device through this communication connection.

[0183] In one embodiment, Figure 4 As shown, step 204 writes the configuration data for the network security device sent by the central processor into the network security device. The specific processing process includes:

[0184] Step 402: Receive configuration data for the network security device sent by the central processor.

[0185] In the embodiment of the present application, after the complex programmable logic device establishes a communication connection with the central processor according to the I2C bus protocol, the central processor sends configuration data for the network security device to the complex programmable logic device. Among them, this configuration data can configure the mode of the network security device, for example, Figure 5 As shown, configure WatchDog (a detection tool in the computer field) of the network security device so that the network security device restarts the device or executes the Bypass mode when WatchDog is triggered; configure Poweroff Bypass (Bypass in normal shutdown or reset mode), in normal shutdown or restart mode, configure MCU (microprocessor) related registers, the register values ​​represent the first to eighth groups of transmission channels, Bypass poweroff is closed or opened, and it is closed by default; configure Poweron Bypass (Bypass in normal startup or restart mode), in normal startup or restart mode, configure MCU (microprocessor) related registers, the register values ​​represent the first to eighth groups of transmission channels, control the Bypass Poweroff mode to be closed or opened, and it is closed by default; configure Runtime Bypass: the configuration will take effect after completion in this system, the register values ​​represent the first to eighth groups of transmission channels, control the Bypass runtime mode to be closed or opened, and it is closed by default; configure WatchDog Bypass: if WatchDog is turned on and the network security device is configured in Bypass mode, after WatchDog times out, configure MCU related registers, the register values ​​represent the first to eighth groups of transmission channels, and the device Watchdog Bypass is turned off or on, and is turned off by default.

[0186] Step 404: Establish a communication connection with a network security device.

[0187] In an embodiment of the present application, a complex programmable logic device establishes a communication connection with a network security device through a routing chip. Specifically, the complex programmable logic device first establishes a communication connection with the routing chip, and then establishes a communication connection with the network security device based on the target transmission channel selected by the routing chip.

[0188] Step 406: Write the configuration data into a register of the network security device based on the target transmission channel corresponding to the communication connection.

[0189] In an embodiment of the present application, when establishing a communication connection with a network security device, the complex programmable logic device uses the transmission channel selected by the routing chip as the target transmission channel, and writes the configuration data for the network security device into the register of the network security device through this target transmission channel, so that the network security device can switch between different modes.

[0190] Optionally, when the current target transmission channel fails, the complex programmable logic device returns a feedback signal to the central processing unit. In response to the feedback signal, the value corresponding to the transmission channel is updated in the configuration data of the central processing unit, so that the routing chip opens other transmission channels and completes writing the configuration data to the register of the network security device.

[0191] In this embodiment, by establishing communication between a complex programmable logic device and a network security device, the central processor can write configuration data to the network security device, so that the network security device can turn on the Bypass mode, and write data to the register of the network security device through multiple channels, thereby improving the reliability of the Bypass mode of the network security device.

[0192] In one embodiment, Figure 6 As shown, step 404 establishes a communication connection with the network security device, and the specific processing process includes:

[0193] Step 602: When the complex programmable logic device is in a transmission initiating state, second addressing address information is sent to the routing chip.

[0194] The second addressing address information is the address information of the routing chip.

[0195] In an embodiment of the present application, the I2C bus of the complex programmable logic device sends a start command. Optionally, the complex programmable logic device pulls the SDA signal from high to low and keeps the SCL signal high to start the transmission state of the complex programmable logic device. When the complex programmable logic device is in the state of initiating transmission, the complex programmable logic device sends the second addressing address information to the routing chip.

[0196] Optionally, the routing chip may be, but is not limited to, a TI TCA9548APWR chip.

[0197] Step 604: receiving a first response signal from the routing chip to control the routing chip to start up.

[0198] In the embodiment of the present application, after the routing chip receives the second addressing address information, after the address of the routing chip can match the second addressing address information, the routing chip sends a first response signal to the complex programmable logic device to control the opening of the routing chip. Optionally, the second addressing address information can be a seven-bit routing chip address and a one-bit write flag.

[0199] Step 606: Send the register address information of the network security device to the routing chip, and receive a second response signal from the routing chip to establish a communication connection with the network security device.

[0200] In the embodiment of the present application, after the routing chip is turned on, the complex programmable logic device sends the register address information of the network security device to the routing chip. The register address information of the network security device is derived from the I2C bus of the routing chip and is used by the complex programmable logic device to address the network security device to establish a communication connection between the complex programmable logic device and the network security device.

[0201] In this embodiment, after the complex programmable logic device completes communication with the routing chip, the complex programmable logic device can complete communication with the network security device through the routing chip, and the configuration data in the complex programmable logic device register can be written into the register of the network security device.

[0202] In one embodiment, after receiving the first response signal of the routing chip in step 604 to control the start of the routing chip, the method further includes:

[0203] Based on the value corresponding to the transmission channel included in the configuration data, the target transmission channel corresponding to the configuration data is opened.

[0204] The configuration data includes values ​​corresponding to the transmission channels; and the routing chip includes multiple transmission channels.

[0205] In the embodiment of the present application, the routing chip generally includes multiple transmission channels, and the routing chip opens the target transmission channel corresponding to the configuration data in the multiple transmission channels according to the value corresponding to the transmission channel included in the configuration data. Among them, when the complex programmable logic device forwards the configuration data of the central processor and writes the configuration data to the register of the network security device through the target transmission channel of the routing chip, the transmission can be performed according to the target transmission channel corresponding to the configuration data, so as to avoid the failure of the transmission channel causing the network security device to be unable to open the Bypass mode.

[0206] In this embodiment, by using a routing chip with multiple transmission channels, when one of the transmission channels fails, other transmission channels can be selected, thereby improving the reliability of the Bypass device.

[0207] In one embodiment, Figure 7 As shown, step 406 writes the configuration data into the register of the network security device based on the target transmission channel corresponding to the communication connection, including:

[0208] Step 702, transmitting the configuration data of the central processing unit through the integrated circuit bus preset in the routing chip.

[0209] The preset integrated circuit bus may be an I2C bus.

[0210] The configuration data satisfies the integrated circuit bus protocol.

[0211] In the embodiment of the present application, the complex programmable logic device writes the configuration data of the central processing unit into the register of the complex programmable logic device through the I2C bus protocol. The process of the central processing unit writing data to the register of the complex programmable logic device is the same as step 204, and will not be repeated here.

[0212] Step 704: When the target transmission channel is enabled, the configuration data is sent to the register of the network security device.

[0213] In an embodiment of the present application, after the routing chip determines the target transmission channel among multiple transmission channels, the complex programmable logic device sends the configuration data for the network security device to the register of the network security device to complete the configuration of the network security device.

[0214] In this embodiment, the central processing unit writes the configuration data of the network security device into the register of the complex programmable logic device through the I2C bus protocol, and forwards the configuration data to the network security device through the complex programmable logic device, thereby completing the configuration of the Bypass mode of the network security device and realizing the Bypass function of the network security device.

[0215] It should be understood that, although the steps in the flowcharts involved in the above embodiments are displayed in sequence according to the indication of the arrows, these steps are not necessarily executed in sequence according to the order indicated by the arrows. Unless there is a clear explanation in this article, the execution of these steps is not strictly limited in order, and these steps can be executed in other orders. Moreover, at least a part of the steps in the flowcharts involved in the above embodiments may include multiple steps or multiple stages, and these steps or stages are not necessarily executed at the same time, but can be executed at different times, and the execution order of these steps or stages is not necessarily carried out in sequence, but can be executed in turn or alternately with other steps or at least a part of the steps or stages in other steps.

[0216] Based on the same inventive concept, the embodiment of the present application also provides a circuit for implementing the method for implementing the network bypass function involved above. The implementation scheme for solving the problem provided by the circuit is similar to the implementation scheme recorded in the above method, so the specific limitations of the circuit embodiments of one or more methods for implementing the network bypass function provided below can refer to the limitations of the method for implementing the network bypass function above, and will not be repeated here.

[0217] In one embodiment, Figure 8 As shown, a circuit for implementing a method for a network bypass function is provided, including: a central processor 802, a complex programmable logic device 804, and a routing chip 806, wherein:

[0218] The central processor 802 is used to send configuration data to the complex programmable logic device, and in the event of a network security device failure, send a Bypass start instruction according to a preset integrated circuit bus protocol.

[0219] The complex programmable logic device 804 is used to establish a communication connection with the central processing unit according to the configuration data; write the configuration data for the network security device sent by the central processing unit into the network security device; in the event of a failure of the network security device, according to a preset integrated circuit bus protocol, send the Bypass start instruction of the central processing unit to the network security device, instructing the network security device to control the network connectivity of the target port based on the Bypass mode.

[0220] The routing chip 806 is used to feed back a response signal based on the address information sent by the complex programmable logic device, and to open a target transmission channel corresponding to the configuration data based on a value corresponding to the transmission channel included in the configuration data.

[0221] In one of the embodiments, the address information includes second addressing address information and register address information of the network security device, and the response signal includes a first response signal and a second response signal;

[0222] The complex programmable logic device 804 is further configured to send the second addressing address information to the routing chip when the bus of the complex programmable logic device sends a start command;

[0223] The complex programmable logic device 804 is also used to send the register address information of the network security device to the routing chip based on the first response signal returned by the routing chip, and receive the second response signal of the routing chip to complete the communication connection with the network security device.

[0224] In one embodiment, the routing chip 806 includes multiple transmission channels, such as Figure 8 As shown, the multiple transmission channels are represented as Slot1-Slot8 respectively, and the routing chip 806 is also used to select a transmission channel as a target transmission channel, and send configuration data or a Bypass startup instruction to the network security device through the target transmission channel.

[0225] In one embodiment, the complex programmable logic device is specifically used for:

[0226] In the case of a transmission state of the central processing unit, first addressing address information of the central processing unit is received, the transmission state of the central processing unit is that the central processing unit is started based on the integrated circuit bus protocol; the first addressing address information is address information of the complex programmable logic device;

[0227] Performing address matching according to the first addressing address information, and feeding back first response information based on the first matching result;

[0228] Receive register address information of the complex programmable logic device sent by the central processor, perform address matching according to the register address information of the complex programmable logic device, and feed back second response information to the central processor based on a second matching result to establish a communication connection with the central processor.

[0229] In one embodiment, the complex programmable logic device is specifically used for:

[0230] receiving configuration data for network security devices sent by the central processor;

[0231] Establishing a communication connection with network security equipment;

[0232] The configuration data is written into the register of the network security device based on the target transmission channel corresponding to the communication connection.

[0233] In one embodiment, the complex programmable logic device is specifically used for:

[0234] When the complex programmable logic device is in a transmission initiating state, second addressing address information is sent to the routing chip; the second addressing address information is address information of the routing chip;

[0235] Receiving a first response signal from the routing chip to control the activation of the routing chip;

[0236] The register address information of the network security device is sent to the routing chip, and a second response signal of the routing chip is received to establish a communication connection with the network security device.

[0237] In one embodiment, the complex programmable logic device is specifically used for:

[0238] Based on the value corresponding to the transmission channel included in the configuration data, the target transmission channel corresponding to the configuration data is opened.

[0239] In one embodiment, the complex programmable logic device is specifically used for:

[0240] The configuration data of the central processing unit is transmitted through the integrated circuit bus preset in the routing chip; the configuration data meets the integrated circuit bus protocol;

[0241] With the target transmission channel selected, the configuration data is sent to the registers of the network security device.

[0242] Each module in the circuit for implementing the network bypass function can be implemented in whole or in part by software, hardware, or a combination thereof. Each module can be embedded in or independent of a processor in a computer device in the form of hardware, or can be stored in a memory in a computer device in the form of software, so that the processor can call and execute operations corresponding to each module.

[0243] In one embodiment, a computer device is provided. The computer device may be a server, and its internal structure diagram may be as follows: Fig. 9 As shown. The computer device includes a processor, a memory and a network interface connected through a system bus. Among them, the processor of the computer device is used to provide computing and control capabilities. The memory of the computer device includes a non-volatile storage medium and an internal memory. The non-volatile storage medium stores an operating system, a computer program and a database. The internal memory provides an environment for the operation of the operating system and the computer program in the non-volatile storage medium. The database of the computer device is used to store configuration data. The network interface of the computer device is used to communicate with an external terminal through a network connection. When the computer program is executed by the processor, a method for realizing a network bypass function is implemented.

[0244] Those skilled in the art will understand that Fig. 9 The structure shown in the figure is only a block diagram of a part of the structure related to the solution of the present application, and does not constitute a limitation on the computer device to which the solution of the present application is applied. The specific computer device may include more or fewer components than those shown in the figure, or combine certain components, or have a different arrangement of components.

[0245] In one embodiment, a computer device is provided, including a memory and a processor, wherein a computer program is stored in the memory, and when the processor executes the computer program, the following steps are implemented:

[0246] Establishing a communication connection with the central processing unit;

[0247] In the case of communication connection, the configuration data for the network security device sent by the central processor is written into the network security device; the configuration data is used to configure the network security device to switch to the Bypass mode;

[0248] In the event of a network security device failure, the Bypass start instruction of the central processor is sent to the network security device according to the preset integrated circuit bus protocol, instructing the network security device to switch to Bypass mode to control the network connectivity of the target port.

[0249] In one embodiment, when the processor executes the computer program, the processor further implements the following steps:

[0250] In the case of a transmission state of the central processing unit, first addressing address information of the central processing unit is received, the transmission state of the central processing unit is that the central processing unit is started based on the integrated circuit bus protocol; the first addressing address information is address information of the complex programmable logic device;

[0251] Performing address matching according to the first addressing address information, and feeding back first response information based on the first matching result;

[0252] Receive register address information of the complex programmable logic device sent by the central processor, perform address matching according to the register address information of the complex programmable logic device, and feed back second response information to the central processor based on a second matching result to establish a communication connection with the central processor.

[0253] In one embodiment, when the processor executes the computer program, the processor further implements the following steps:

[0254] receiving configuration data for network security devices sent by the central processor;

[0255] Establishing a communication connection with network security equipment;

[0256] The configuration data is written into the register of the network security device based on the target transmission channel corresponding to the communication connection.

[0257] In one embodiment, when the processor executes the computer program, the processor further implements the following steps:

[0258] When the complex programmable logic device is in a transmission initiating state, second addressing address information is sent to the routing chip; the second addressing address information is address information of the routing chip;

[0259] Receiving a first response signal from the routing chip to control the activation of the routing chip;

[0260] The register address information of the network security device is sent to the routing chip, and a second response signal of the routing chip is received to establish a communication connection with the network security device.

[0261] In one embodiment, when the processor executes the computer program, the processor further implements the following steps:

[0262] Based on the value corresponding to the transmission channel included in the configuration data, the target transmission channel corresponding to the configuration data is opened.

[0263] In one embodiment, writing configuration data into a register of a network security device based on a target transmission channel corresponding to a communication connection includes:

[0264] The configuration data of the central processing unit is transmitted through the integrated circuit bus preset in the routing chip; the configuration data meets the integrated circuit bus protocol;

[0265] With the target transmission channel selected, the configuration data is sent to the registers of the network security device.

[0266] In one embodiment, a computer-readable storage medium is provided, on which a computer program is stored. When the computer program is executed by a processor, the steps in the above-mentioned method embodiments are implemented.

[0267] In one embodiment, a computer program product is provided, including a computer program, which implements the steps in the above method embodiments when executed by a processor.

[0268] It should be noted that the user information (including but not limited to user device information, user personal information, etc.) and data (including but not limited to data used for analysis, stored data, displayed data, etc.) involved in this application are all information and data authorized by the user or fully authorized by all parties.

[0269] Those skilled in the art can understand that all or part of the processes in the above-mentioned embodiment methods can be completed by instructing the relevant hardware through a computer program, and the computer program can be stored in a non-volatile computer-readable storage medium. When the computer program is executed, it can include the processes of the embodiments of the above-mentioned methods. Among them, any reference to the memory, database or other medium used in the embodiments provided in the present application can include at least one of non-volatile and volatile memory. Non-volatile memory can include read-only memory (ROM), magnetic tape, floppy disk, flash memory, optical memory, high-density embedded non-volatile memory, resistive random access memory (ReRAM), magnetoresistive random access memory (MRAM), ferroelectric random access memory (FRAM), phase change memory (PCM), graphene memory, etc. Volatile memory can include random access memory (RAM) or external cache memory, etc. As an illustration and not limitation, RAM can be in various forms, such as static random access memory (SRAM) or dynamic random access memory (DRAM). The database involved in each embodiment provided in this application may include at least one of a relational database and a non-relational database. Non-relational databases may include distributed databases based on blockchains, etc., but are not limited to this. The processor involved in each embodiment provided in this application may be a general-purpose processor, a central processing unit, a graphics processor, a digital signal processor, a programmable logic device, a data processing logic device based on quantum computing, etc., but are not limited to this.

[0270] The technical features of the above embodiments may be combined arbitrarily. To make the description concise, not all possible combinations of the technical features in the above embodiments are described. However, as long as there is no contradiction in the combination of these technical features, they should be considered to be within the scope of this specification.

[0271] The above-described embodiments only express several implementation methods of the present application, and the descriptions thereof are relatively specific and detailed, but they cannot be understood as limiting the scope of the present application. It should be pointed out that, for a person of ordinary skill in the art, several variations and improvements can be made without departing from the concept of the present application, and these all belong to the protection scope of the present application. Therefore, the protection scope of the present application shall be subject to the attached claims.

Claims

1. A method for implementing a network bypass function, characterized in that: The method is applied to a complex programmable logic device, and the method comprises: Simulating the I2C communication protocol through the complex programmable logic device to establish an I2C communication connection with the central processing unit; In the case of the I2C communication connection, the configuration data for the network security device sent by the central processor is written into the network security device through the I2C communication connection; the configuration data is used to configure the network security device to restart the device or switch the Bypass mode when WatchDog is triggered, and the configuration data is specifically used to configure MCU (microprocessor) related registers, and the register values ​​represent transmission channels respectively, and control the Bypass Poweroff mode to be turned off or on; In the event of a failure of the network security device, the Bypass start instruction of the central processor is sent to the network security device according to a preset integrated circuit bus protocol, instructing the network security device to switch the Bypass mode to control the network conduction of the target port; the preset integrated circuit bus protocol is an I2C bus protocol; Writing the configuration data for the network security device sent by the central processor into the network security device through the I2C communication connection includes: Receiving configuration data for network security devices sent by the central processor; Establishing an I2C communication connection with the network security device; Based on the target transmission channel corresponding to the I2C communication connection, writing the configuration data into a register of the network security device; The establishing of an I2C communication connection with the network security device comprises: When the complex programmable logic device is in a transmission initiating state, second addressing address information is sent to the routing chip by simulating the I2C bus protocol; the second addressing address information is the address information of the routing chip; receiving a first response signal of the routing chip to control the activation of the routing chip; the activation of the routing chip refers to connecting the routing chip and the target transmission channel through I2C communication to activate the transmission capability of the routing chip; The register address information of the network security device is sent to the routing chip, and a second response signal of the routing chip is received to establish an I2C communication connection with the network security device.

2. The method according to claim 1, characterized in that The establishing of a communication connection with the central processing unit comprises: In the case of the transmission state of the central processing unit, receiving first addressing address information of the central processing unit, the transmission state of the central processing unit is that the central processing unit is started based on the integrated circuit bus protocol; the first addressing address information is the address information of the complex programmable logic device; Performing address matching according to the first addressing address information, and feeding back first response information based on the first matching result; Receive the register address information of the complex programmable logic device sent by the central processor, perform address matching according to the register address information of the complex programmable logic device, and feed back second response information to the central processor based on a second matching result to establish a communication connection with the central processor.

3. The method according to claim 1, characterized in that The configuration data includes a value corresponding to the transmission channel; the routing chip includes a plurality of transmission channels, and after receiving a first response signal of the routing chip to control the opening of the routing chip, the method further includes: Based on the value corresponding to the transmission channel included in the configuration data, the target transmission channel corresponding to the configuration data is enabled.

4. The method according to claim 1, characterized in that: The step of writing the configuration data into a register of the network security device based on the target transmission channel corresponding to the communication connection comprises: Transmitting the configuration data of the central processing unit via an integrated circuit bus pre-set in the routing chip; the configuration data meets the integrated circuit bus protocol; When the target transmission channel is enabled, the configuration data is sent to a register of the network security device.

5. A circuit for realizing a network bypass function, characterized in that: The circuit comprises: A central processing unit, used to send configuration data to the complex programmable logic device, and in the event of a network security device failure, send a Bypass start instruction according to a preset integrated circuit bus protocol; A complex programmable logic device, used to simulate an I2C communication protocol to establish an I2C communication connection with the central processor according to the configuration data; write the configuration data for the network security device sent by the central processor into the network security device through the I2C communication connection; the configuration data is used to configure the network security device to restart the device or switch the Bypass mode when WatchDog is triggered, and the configuration data is specifically used to configure MCU (microprocessor) related registers, and the register values ​​represent transmission channels respectively, controlling the Bypass Poweroff mode to be turned off or on; in the case of a failure of the network security device, according to a preset integrated circuit bus protocol, the Bypass start instruction of the central processor is sent to the network security device, instructing the network security device to control the network conduction of the target port based on the Bypass mode; the preset integrated circuit bus protocol is the I2C bus protocol; The complex programmable logic device is specifically used to establish an I2C communication connection with the network security device; based on the target transmission channel corresponding to the I2C communication connection, write the configuration data into the register of the network security device; A routing chip, used for feeding back a response signal based on the address information sent by the complex programmable logic device, and opening a target transmission channel corresponding to the configuration data based on a value corresponding to the transmission channel included in the configuration data; The configuration data includes a value corresponding to the transmission channel, the address information includes second addressing address information and register address information of the network security device, and the response signal includes a first response signal and a second response signal; The complex programmable logic device is further used to simulate the I2C bus protocol to send the second addressing address information to the routing chip when the I2C bus of the complex programmable logic device sends a start command; The complex programmable logic device is also used to send the register address information of the network security device to the routing chip based on the first response signal returned by the routing chip, and receive the second response signal of the routing chip to complete the I2C communication connection with the network security device.

6. The circuit according to claim 5, characterized in that The routing chip includes multiple transmission channels, and the routing chip is further used to select the transmission channel as the target transmission channel, and send the configuration data or Bypass startup instruction to the network security device through the target transmission channel.

7. The circuit according to claim 5, characterized in that The complex programmable logic device is specifically used to receive the first addressing address information of the central processing unit in the case of the transmission state of the central processing unit, the transmission state of the central processing unit is that the central processing unit is started based on the integrated circuit bus protocol; the first addressing address information is the address information of the complex programmable logic device; Performing address matching according to the first addressing address information, and feeding back first response information based on the first matching result; Receive the register address information of the complex programmable logic device sent by the central processor, perform address matching according to the register address information of the complex programmable logic device, and feed back second response information to the central processor based on a second matching result to establish a communication connection with the central processor.

8. A computer device comprising a memory and a processor, wherein the memory stores a computer program, wherein: When the processor executes the computer program, the steps of the method according to any one of claims 1 to 4 are implemented.

9. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the computer program is executed by a processor, the steps of the method according to any one of claims 1 to 4 are implemented.

10. A computer program product, comprising a computer program, characterized in that When the computer program is executed by a processor, the steps of the method according to any one of claims 1 to 4 are implemented.

Images