A network access method, apparatus and electronic device
By unifying the conversion to target virtual IP addresses and managing the associated relationships, the problem of users needing to maintain multiple SNAT IP addresses in cloud networks is solved, improving the convenience of accessing the external network and simplifying firewall policy management.
Patent Information
- Authority / Receiving Office
- CN · China
- Patent Type
- Patents(China)
- Current Assignee / Owner
- CHINA TELECOM CORP LTD TECHNOLOGY INNOVATION CENTER
- Filing Date
- 2023-08-03
- Publication Date
- 2026-07-03
AI Technical Summary
In cloud networks, different cloud servers have different solutions, which means that users need to maintain multiple SNAT IP addresses and their corresponding firewall policies and backhaul routes, increasing workload and reducing the convenience of accessing the external network.
By uniformly converting the target virtual IP addresses of various cloud servers to the same target virtual IP address, all user virtual machines can access the external network using the same IP address. Furthermore, the association between firewall policies and backhaul routes is stored and managed on the cloud server side, reducing the amount of information that users need to maintain.
It improves the ease with which users can access the external network, reduces the amount of information users need to maintain, and simplifies the management of firewall policies and backhaul routes.
Smart Images
Figure CN117097697B_ABST
Abstract
Description
Technical Field
[0001] This application relates to the field of computer network technology, and in particular to a network access method, apparatus and electronic device. Background Technology
[0002] In cloud networks, each operator has its own cloud servers. To achieve unified operation and management of these cloud servers, a multi-cloud management platform has been introduced. A diagram illustrating how the multi-cloud management platform manages cloud servers is shown below. Figure 1 As shown, in Figure 1 In this context, subnet 1 contains three cloud servers operated by different carriers. Each cloud server is responsible for managing the virtual machines connected to each other in subnet 1.
[0003] In the process of users accessing the external network from the private network through virtual machines in subnet 1, different cloud servers have different solutions. Different solutions will assign different Source Network Address Translation (SNAT) IP addresses to virtual machines accessing the public network. The source address translation IP address is used to translate the private IP address of the virtual machine into a public IP address so that users can access the external network through the virtual machine. The public network firewall policy and return route corresponding to the virtual machine accessing the external network need to be configured separately for the SNAT IP.
[0004] Based on the above method, since different cloud servers have different solutions, and different solutions correspond to different SNAT IP addresses, when users access the external network through cloud server A, cloud server B, and cloud server C respectively, SNAT IP1, SNAT IP2, and SNAT IP3 are exposed to the users. When users receive the SNAT IP address issued by the cloud server, they need to configure firewall policies on the gateway based on the SNAT IP address, as well as the return route corresponding to the firewall policy. The firewall policy records the user's requirements, and the return route records the way to implement the requirements.
[0005] For example, if accessing subnet 2 from subnet 1, there is a route to subnet 2 on subnet 1. When a data packet is transmitted from subnet 1 to subnet 2, and subnet 2 receives the data packet and responds, subnet 2 needs to know how to reach subnet 1. The route from subnet 2 to subnet 1 is called the return route. Firewall policies can filter traffic based on IP address, port number, or protocol to allow the traffic required by the program and block traffic that does not match the rules. For example, configuring a firewall policy allows Hypertext Transfer Protocol Secure (HTTPS) traffic between subnet 1 and subnet 2 and blocks HTTP traffic.
[0006] In summary, users need to maintain SNAT IP1, SNAT IP2, and SNAT IP3, as well as the corresponding firewall policies and backhaul routes for SNAT IP1, SNAT IP2, and SNAT IP3, which increases the user's workload and reduces the convenience of accessing the external network. Summary of the Invention
[0007] This application provides a network access method, apparatus, and electronic device that improves the convenience of users accessing the external network by converting all target virtual IP addresses of various cloud servers to target virtual IP addresses, enabling all user virtual machines to access the external network using target virtual IP addresses.
[0008] In a first aspect, this application provides a network access method, the method comprising:
[0009] The cloud server receives external network access requests sent by the user's virtual machine.
[0010] Identify unused local virtual IP addresses and convert them into unique target virtual IP addresses;
[0011] The target virtual IP address is sent to the user virtual machine, enabling the user virtual machine to access the external network based on the target virtual IP address.
[0012] By using the above method, the local virtual IP address of the user's virtual machine when accessing the external network is converted into the target virtual IP address, so that the user's virtual machine uses the target virtual IP address when accessing the external network based on multiple cloud servers, thereby improving the convenience of the user's access to the external network.
[0013] In one possible design, before the cloud server receives the external network access request sent by the user's virtual machine, the following is also included:
[0014] The cloud server obtains all local virtual IP address sets and the target virtual IP address from the multi-cloud management platform.
[0015] Using the above method, the cloud server receives the local virtual IP address and the target virtual IP address sent by the multi-cloud management platform, enabling the cloud server to convert the local virtual IP address to the target virtual IP address.
[0016] In one possible design, identifying unused local virtual IP addresses and converting those local virtual IP addresses into unique target virtual IP addresses includes:
[0017] Obtain the association between the preset virtual IP address and the preset target virtual IP address;
[0018] Detect whether a preset virtual IP address that matches the local virtual IP address exists;
[0019] If so, then based on the association, determine the target virtual IP address corresponding to the preset virtual IP address that is consistent with the local virtual IP address;
[0020] Convert the local virtual IP address to the target virtual IP address.
[0021] By using the above method, the local virtual IP address is converted into the target virtual IP address, enabling the user's virtual machine to access the external network based on the target virtual IP address. This also reduces the amount of information that the user's virtual machine needs to maintain and improves the convenience of the user accessing the external network.
[0022] In one possible design, after sending the target virtual IP address to the user virtual machine, the method further includes:
[0023] Obtain the firewall policy and return route sent by the user virtual machine;
[0024] Associating the firewall policy and the backhaul route with the local virtual IP address to obtain a second association relationship;
[0025] Store the second association relationship and send the second association relationship to the multi-cloud management platform.
[0026] Using the methods described above, the cloud server stores and manages the firewall policies and backhaul routes sent by the user's virtual machine, thus enabling the cloud server to store complete information about the user's virtual machine.
[0027] In one possible design, after sending the target virtual IP address to the user virtual machine, the method further includes:
[0028] Receive data modification instructions issued by the multi-cloud management platform, wherein the data modification instructions include first modification data of the firewall policy and / or second modification data of the backhaul route;
[0029] Determine the first data in the firewall policy, extract the first modified data of the firewall policy in the data modification instruction, and replace the first data with the first modified data; and / or
[0030] The second data in the backhaul route is determined, the second modified data of the backhaul route in the data modification instruction is extracted, and the second data is replaced with the second modified data.
[0031] Using the methods described above, user virtual machines can modify firewall policies and backhaul routes, avoiding the problem of reduced convenience for user virtual machines to access the external network caused by fixed firewall policies and backhaul route information.
[0032] Secondly, this application provides a network access device, the device comprising:
[0033] The receiving module is used by the cloud server to receive external network access requests sent by the user's virtual machine;
[0034] The determination module is used to identify unused local virtual IP addresses and convert the local virtual IP addresses into unique target virtual IP addresses.
[0035] The access module is used to send the target virtual IP address to the user virtual machine, enabling the user virtual machine to access the external network based on the target virtual IP address.
[0036] In one possible design, the receiving module is specifically used for the cloud server to obtain all local virtual IP address sets of the multi-cloud management platform and the target virtual IP address.
[0037] In one possible design, the determining module is specifically used to obtain the association relationship between the preset virtual IP address and the preset target virtual IP address, detect whether there is a preset virtual IP address that is consistent with the local virtual IP address, and if so, determine the target virtual IP address corresponding to the preset virtual IP address that is consistent with the local virtual IP address based on the association relationship, and convert the local virtual IP address into the target virtual IP address.
[0038] In one possible design, the access module is specifically used to obtain the firewall policy and backhaul route sent by the user virtual machine, associate the firewall policy and the backhaul route with the local virtual IP address to obtain a second association relationship, store the second association relationship, and send the second association relationship to the multi-cloud management platform.
[0039] In one possible design, the access module is further configured to receive a data modification instruction issued by the multi-cloud management platform, determine the first data in the firewall policy, extract the first modified data of the firewall policy in the data modification instruction, replace the first data with the first modified data, and / or determine the second data in the backhaul route, extract the second modified data of the backhaul route in the data modification instruction, and replace the second data with the second modified data.
[0040] Thirdly, this application provides an electronic device, comprising:
[0041] Memory, used to store computer programs;
[0042] When a processor executes a computer program stored in the memory, it implements the above-described network access method steps.
[0043] Fourthly, a computer-readable storage medium storing a computer program that, when executed by a processor, implements the above-described network access method steps.
[0044] For details on each of the above-mentioned aspects one through four, and the technical effects that each aspect may achieve, please refer to the above description of the technical effects that can be achieved for the first aspect or the various possible solutions in the first aspect. These details will not be repeated here. Attached Figure Description
[0045] Figure 1 A schematic diagram illustrating how the multi-cloud management platform provided in this application manages cloud servers;
[0046] Figure 2 A flowchart of the steps of a network access method provided in this application;
[0047] Figure 3 A schematic diagram of the applicable scenario provided for this application;
[0048] Figure 4 This application provides a schematic diagram illustrating changes to user maintenance information.
[0049] Figure 5 A schematic diagram of the structure of a network access device provided in this application;
[0050] Figure 6 This is a schematic diagram of the structure of an electronic device provided in this application. Detailed Implementation
[0051] To make the objectives, technical solutions, and advantages of this application clearer, the application will be further described in detail below with reference to the accompanying drawings. The specific operational methods in the method embodiments can also be applied to the device embodiments or system embodiments. It should be noted that in the description of this application, "multiple" is understood as "at least two". "And / or" describes the relationship between related objects, indicating that three relationships can exist. For example, A and / or B can represent: A existing alone, A and B existing simultaneously, and B existing alone. A connected to B can represent: A and B directly connected, and A and B connected through C. Furthermore, in the description of this application, terms such as "first" and "second" are used only for distinguishing the purpose of description and should not be construed as indicating or implying relative importance or order.
[0052] In previous technologies, when users accessed the external network from their private network, each cloud server had a different solution, and each solution corresponded to a different SNAT IP address. When users accessed the external network through cloud server A, cloud server B, and cloud server C, they needed to maintain the SNAT IP address issued by each cloud server, as well as the firewall policy and backhaul route associated with each SNAT IP address. Because users had to maintain the SNAT IP address, firewall policy, and backhaul route for the SNAT IP address, the workload for users increased, and the convenience of accessing the external network was reduced.
[0053] To address the problems described above, embodiments of this application provide a network access method to reduce the workload on the user end and improve the convenience of accessing the external network. The methods and apparatus described in these embodiments are based on the same technical concept. Since the principles by which the methods and apparatus solve the problems are similar, embodiments of the apparatus and methods can be referred to interchangeably, and repeated details will not be elaborated further.
[0054] The embodiments of this application will now be described in detail with reference to the accompanying drawings.
[0055] Reference Figure 2 This application provides a network access method that improves the convenience for users to access the external network. The implementation process of this method is as follows:
[0056] Step S21: The cloud server receives the external network access request sent by the user's virtual machine.
[0057] The schematic diagram of the scenario applicable to the embodiments of this application is shown below. Figure 3 As shown, in Figure 3 In this process, each virtual machine is indirectly connected to the multi-cloud management platform through a cloud server. The multi-cloud manager can connect to multiple cloud servers. Here, we take one cloud server as an example. The cloud server also needs to obtain all local virtual IP address sets and target virtual IP addresses from the multi-cloud management platform. The target virtual IP address is unique, and both the local virtual IP address and the target virtual IP address are SNAT IP addresses.
[0058] When a user needs to access the external network, the cloud server will receive an external network access request sent by the user's virtual machine. The external network access request includes the IP address of the user's virtual machine and the access URL of the user's virtual machine.
[0059] Step S22: Identify unused local virtual IP addresses and convert them into unique target virtual IP addresses.
[0060] After the cloud server obtains all local virtual IP addresses and target virtual IP addresses, in order to ensure convenient access to the external network for users and to ensure that all user virtual machines display the same IP address when accessing the external network, it needs to obtain the association relationship between the preset virtual IP addresses and the preset target virtual IP addresses. Since the cloud server is assigned at least one local virtual IP address by the multi-cloud management platform, the cloud server needs to identify unused local virtual IP addresses. To ensure the accuracy of the identified target virtual IP addresses, it is necessary to check whether there is a preset virtual IP address that matches the unused local virtual IP address. When a preset virtual IP address that matches the local virtual IP address is detected, it means that the local virtual IP address is in the association relationship. Thus, the target virtual IP address corresponding to the preset virtual IP address that matches the local virtual IP address can be determined, and the local virtual IP address can be converted to the target virtual IP address.
[0061] Furthermore, when no preset virtual IP address matching the local virtual IP address is detected, the user's virtual machine accesses the external network through the local virtual IP address.
[0062] Step S23: Send the target virtual IP address to the user virtual machine so that the user virtual machine can access the external network based on the target virtual IP address.
[0063] After the cloud server translates the local virtual IP address into the target virtual IP address, it sends the target virtual IP address to the user's virtual machine. After receiving the target virtual IP address, the user needs to configure firewall policies and backhaul routes on the user's virtual machine and then send the firewall policies and backhaul routes to the cloud server through the user's virtual machine.
[0064] After receiving the firewall policy and backhaul route, the cloud server associates the firewall policy and backhaul route with the local virtual IP address, stores this association as a second association, and sends the second association to the multi-cloud management platform.
[0065] Furthermore, the cloud server needs to generate the target firewall policy and target backhaul route corresponding to the target virtual IP address based on the firewall policy and backhaul route. The target virtual IP address, target firewall policy, and target backhaul route are maintained by the user's virtual machine.
[0066] In addition, when a user needs to modify firewall policies and / or backhaul routes, the user's virtual machine will send the modification information directly to the multi-cloud management platform. After receiving the modification information, the multi-cloud management platform will issue a data modification instruction to the cloud server. This data modification instruction includes the first modification data for the firewall policy and / or the second modification data for the backhaul route.
[0067] The cloud server determines the first modified data corresponding to the firewall policy in the data modification instruction, then determines the first data corresponding to the first modified data from the firewall policy. This first data is the original data in the firewall policy. Finally, the first data is replaced with the first modified data, thus modifying the firewall policy. And / or
[0068] The cloud server determines the second modified data corresponding to the backhaul route in the data modification instruction, determines the second data corresponding to the second modified data from the backhaul route, the second data is the original data in the backhaul route, and then replaces the second data with the second modified data, thereby realizing the modification of the backhaul route.
[0069] For example: a diagram illustrating changes in user maintenance information. Figure 4 As shown, in Figure 4 In the current method, if a user accesses the external network through cloud server A, cloud server B, and cloud server C respectively, then the user needs to maintain SNAT IP1, SNAT IP2, SNAT IP3, as well as the IP1 firewall policy and IP1 backhaul route corresponding to SNAT IP1, the IP2 firewall policy and IP2 backhaul route corresponding to SNAT IP2, and the IP3 firewall policy and IP3 backhaul route corresponding to SNAT IP3.
[0070] Using the method described in this application, users only need to maintain the target virtual IP address, the target firewall policy, and the target backhaul route.
[0071] Based on the above description, all IP addresses used by user virtual machines to access the external network are unified to the target virtual IP address, and target firewall policies and target routes are configured for the target virtual IP address. This greatly reduces the information that user virtual machines need to maintain when accessing the external network, and improves the convenience of users accessing the external network.
[0072] Based on the same inventive concept, this application also provides an external network access device, which implements the function of an external network access method, as described above. Figure 5 The device includes:
[0073] Receiver module 501 is used for cloud servers to receive external network access requests sent by user virtual machines;
[0074] The determining module 502 is used to determine unused local virtual IP addresses and convert the local virtual IP addresses into unique target virtual IP addresses;
[0075] Access module 503 is used to send the target virtual IP address to the user virtual machine, so that the user virtual machine can access the external network based on the target virtual IP address.
[0076] In one possible design, the receiving module 501 is specifically used for the cloud server to obtain all local virtual IP address sets of the multi-cloud management platform and the target virtual IP address.
[0077] In one possible design, the determining module 502 is specifically used to obtain the association relationship between the preset virtual IP address and the preset target virtual IP address, detect whether there is a preset virtual IP address that is consistent with the local virtual IP address, and if so, determine the target virtual IP address corresponding to the preset virtual IP address that is consistent with the local virtual IP address based on the association relationship, and convert the local virtual IP address into the target virtual IP address.
[0078] In one possible design, the access module 503 is specifically used to obtain the firewall policy and backhaul route sent by the user virtual machine, associate the firewall policy and the backhaul route with the local virtual IP address to obtain a second association relationship, store the second association relationship, and send the second association relationship to the multi-cloud management platform.
[0079] In one possible design, the access module 503 is further configured to receive a data modification instruction issued by the multi-cloud management platform, determine the first data in the firewall policy, extract the first modified data of the firewall policy in the data modification instruction, replace the first data with the first modified data, and / or determine the second data in the backhaul route, extract the second modified data of the backhaul route in the data modification instruction, and replace the second data with the second modified data.
[0080] Based on the same inventive concept, this application also provides an electronic device that can realize the function of the aforementioned network access device. (Refer to...) Figure 6 The electronic device includes:
[0081] At least one processor 601 and a memory 602 connected to at least one processor 601. In this embodiment, the specific connection medium between the processor 601 and the memory 602 is not limited. Figure 6 The example shown is the connection between processor 601 and memory 602 via bus 600. Bus 600 is... Figure 6 The connections between other components are indicated by thick lines and are for illustrative purposes only, not as limiting information. The 600 bus can be divided into address bus, data bus, control bus, etc., for ease of representation. Figure 6 The term is represented by a single thick line, but this does not imply that there is only one bus or one type of bus. Alternatively, the processor 601 can also be called a controller; there is no restriction on the name.
[0082] In this embodiment, memory 602 stores instructions executable by at least one processor 601. By executing the instructions stored in memory 602, at least one processor 601 can execute a network access method described above. Processor 601 can implement... Figure 5 The functions of each module in the device shown.
[0083] The processor 601 is the control center of the device. It can connect to various parts of the control device through various interfaces and lines. By running or executing instructions stored in memory 602 and calling data stored in memory 602, the processor can perform various functions and process data, thereby monitoring the device as a whole.
[0084] In one possible design, processor 601 may include one or more processing units. Processor 601 may integrate an application processor and a modem processor, wherein the application processor mainly handles the operating system, user interface, and applications, and the modem processor mainly handles wireless communication. It is understood that the modem processor may also not be integrated into processor 601. In some embodiments, processor 601 and memory 602 may be implemented on the same chip; in some embodiments, they may also be implemented on separate chips.
[0085] Processor 601 can be a general-purpose processor, such as a central processing unit (CPU), digital signal processor, application-specific integrated circuit, field-programmable gate array or other programmable logic device, discrete gate or transistor logic device, or discrete hardware component, capable of implementing or executing the methods, steps, and logic block diagrams disclosed in the embodiments of this application. The general-purpose processor can be a microprocessor or any conventional processor. The steps of a network access method disclosed in the embodiments of this application can be directly manifested as being executed by a hardware processor, or executed by a combination of hardware and software modules within the processor.
[0086] Memory 602, as a non-volatile computer-readable storage medium, can be used to store non-volatile software programs, non-volatile computer-executable programs, and modules. Memory 602 may include at least one type of storage medium, such as flash memory, hard disk, multimedia card, card-type memory, random access memory (RAM), static random access memory (SRAM), programmable read-only memory (PROM), read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM), magnetic storage, magnetic disk, optical disk, etc. Memory 602 can be any other medium capable of carrying or storing desired program code in the form of instructions or data structures that can be accessed by a computer, but is not limited thereto. In the embodiments of this application, memory 602 may also be a circuit or any other device capable of implementing storage functions for storing program instructions and / or data.
[0087] By designing and programming the processor 601, the code corresponding to a network access method described in the foregoing embodiments can be embedded into the chip, enabling the chip to execute it during operation. Figure 2The illustrated embodiment presents a network access step. How to design and program the processor 601 is a technique well-known to those skilled in the art and will not be described further here.
[0088] Based on the same inventive concept, embodiments of this application also provide a storage medium storing computer instructions that, when executed on a computer, cause the computer to perform a network access method described above.
[0089] In some possible implementations, various aspects of the network access method provided by this application can also be implemented in the form of a program product, which includes program code that, when the program product is run on a device, causes the control device to perform the steps in a network access method according to various exemplary embodiments of this application as described above.
[0090] Those skilled in the art will understand that embodiments of this application can be provided as methods, systems, or computer program products. Therefore, this application can take the form of a completely hardware embodiment, a completely software embodiment, or an embodiment combining software and hardware aspects. Furthermore, this application can take the form of a computer program product embodied on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) containing computer-usable program code.
[0091] This application is described with reference to flowchart illustrations and / or block diagrams of methods, apparatus (systems), and computer program products according to this application. It should be understood that each block of the flowchart illustrations and / or block diagrams, and combinations of blocks in the flowchart illustrations and / or block diagrams, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, special-purpose computer, embedded processor, or other programmable data processing apparatus to produce a machine, such that the instructions, which execute via the processor of the computer or other programmable data processing apparatus, generate instructions for implementing the flowchart illustrations. Figure 1 One or more processes and / or boxes Figure 1 A device that provides the functions specified in one or more boxes.
[0092] These computer program instructions may also be stored in a computer-readable storage medium that can direct a computer or other programmable data processing device to function in a particular manner, such that the instructions stored in the computer-readable storage medium produce an article of manufacture including instruction means, which are implemented in a process Figure 1 One or more processes and / or boxes Figure 1 The function specified in one or more boxes.
[0093] These computer program instructions may also be loaded onto a computer or other programmable data processing equipment to cause a series of operational steps to be performed on the computer or other programmable equipment to produce a computer-implemented process, thereby providing instructions that execute on the computer or other programmable equipment for implementing the process. Figure 1 One or more processes and / or boxes Figure 1 The steps of the function specified in one or more boxes.
[0094] Obviously, those skilled in the art can make various modifications and variations to this application without departing from the spirit and scope of this application. Therefore, if such modifications and variations fall within the scope of the claims of this application and their equivalents, this application also intends to include such modifications and variations.
Claims
1. A network access method, characterized by, include: The cloud server receives external network access requests sent by the user's virtual machine. Identify unused local virtual IP addresses and convert them into unique target virtual IP addresses; The target virtual IP address is sent to the user virtual machine, enabling the user virtual machine to access the external network based on the target virtual IP address; Obtain the firewall policy and return route sent by the user virtual machine; Associating the firewall policy and the backhaul route with the local virtual IP address to obtain a second association relationship; Store the second association relationship and send the second association relationship to the multi-cloud management platform.
2. The method of claim 1, wherein, Before the cloud server receives external network access requests from user virtual machines, it also includes: The cloud server obtains all local virtual IP address sets and the target virtual IP address from the multi-cloud management platform.
3. The method of claim 1, wherein, The step of identifying unused local virtual IP addresses and converting them into unique target virtual IP addresses includes: Obtain the association between the preset virtual IP address and the preset target virtual IP address; Detect whether a preset virtual IP address that matches the local virtual IP address exists; If so, then based on the association, determine the target virtual IP address corresponding to the preset virtual IP address that is consistent with the local virtual IP address; Convert the local virtual IP address to the target virtual IP address.
4. The method of claim 1, wherein, After sending the target virtual IP address to the user virtual machine, the process further includes: Receive data modification instructions issued by the multi-cloud management platform, wherein the data modification instructions include first modification data of the firewall policy and / or second modification data of the backhaul route; Determine the first data in the firewall policy, extract the first modified data of the firewall policy in the data modification instruction, and replace the first data with the first modified data; and / or The second data in the backhaul route is determined, the second modified data of the backhaul route in the data modification instruction is extracted, and the second data is replaced with the second modified data.
5. A network access device, comprising: include: The receiving module is used by the cloud server to receive external network access requests sent by the user's virtual machine; The determination module is used to identify unused local virtual IP addresses and convert the local virtual IP addresses into unique target virtual IP addresses. An access module is used to send the target virtual IP address to the user virtual machine, enabling the user virtual machine to access the external network based on the target virtual IP address; Obtain the firewall policy and return route sent by the user virtual machine; Associating the firewall policy and the backhaul route with the local virtual IP address to obtain a second association relationship; Store the second association relationship and send the second association relationship to the multi-cloud management platform.
6. The apparatus of claim 5, wherein, The receiving module is specifically used for the cloud server to obtain all local virtual IP address sets of the multi-cloud management platform and the target virtual IP address.
7. The apparatus of claim 5, wherein, The determining module is specifically used to obtain the association relationship between the preset virtual IP address and the preset target virtual IP address, detect whether there is a preset virtual IP address that is consistent with the local virtual IP address, and if so, determine the target virtual IP address corresponding to the preset virtual IP address that is consistent with the local virtual IP address based on the association relationship, and convert the local virtual IP address into the target virtual IP address.
8. An electronic device, comprising: include: Memory, used to store computer programs; A processor, when executing a computer program stored in the memory, implements the steps of the method according to any one of claims 1-4.
9. A computer-readable storage medium, characterized in that, The computer-readable storage medium stores a computer program that, when executed by a processor, implements the steps of the method described in any one of claims 1-4.