A dynamic communication method between internal and external network and cross-server platforms

Abstract

The present invention provides a dynamic communication method for an intranet and an extranet cross-service platform, relates to a communication method, specifically a dynamic communication method for an intranet and an extranet cross-service platform, and belongs to the field of communication technology; the method comprises the following steps: S1, establishing a middleware server; S2, an intranet server quantitatively applies for a network Socket long connection link, and connects to the middleware server; S3, heartbeat detection; S4, dynamically adjusting the number of connections; S5, judging whether an IP source and request data are reasonable through the middleware server, returning to execute S2 if unreasonable, and executing S6 if reasonable; the present invention uses an intranet server to connect to an extranet server in a way of applying in advance through a middleware server, thereby eliminating the need to repeatedly load network resources, so as to more quickly realize the instant communication requirements of the intranet and an extranet cross-service platform, and can utilize dynamic network resource allocation adjustment to cooperate with the load function of the middleware server to realize the dynamic allocation of efficient response resources, and ensure the security of the network environment.

Description

Technical Field

[0001] The present invention relates to a communication method, in particular to an intranet and extranet cross-server platform dynamic communication method, belonging to the technical field of communication. Background Art

[0002] Intranet: Also known as local area network, it is a closed network composed of multiple computers. Only an estimated group of users are allowed to access it. It has a high security factor and is generally a professional network.

[0003] Extranet: It is the common I nternet network that is connected by a set of common protocols. All users can access it and the security factor is relatively low.

[0004] Due to the rapid development of the network environment, society now pays more and more attention to network security and personal data information security. In order to protect servers and data, more and more corporate entities usually need to deploy them in an independent intranet environment. External network users cannot access the intranet server, and internal network users cannot access the external network. How to link two independent network environments so that internal network users can effectively access and interact with external network resources and ensure the security of the internal network environment has become a problem that restricts the development of enterprises. For this reason, a dynamic communication method between internal and external network cross-service platforms is proposed. Summary of the invention

[0005] In view of this, the present invention provides a dynamic communication method between internal and external network and cross-server platforms to solve or alleviate the technical problems existing in the prior art and at least provide a beneficial choice.

[0006] The technical solution of the embodiment of the present invention is implemented as follows: a dynamic communication method between internal and external network cross-server platforms, comprising the following steps:

[0007] S1. Establish a middleware server;

[0008] S2. The intranet server applies for a certain amount of network socket long-term connection and connects to the middleware server;

[0009] S3, heartbeat detection;

[0010] S4, dynamically adjust the number of connections;

[0011] S5, determine whether the IP source and request data are reasonable through the middleware server, if not reasonable, return to execute S2, if reasonable, execute S6;

[0012] S6. Allocate upstream external network server to form a communication channel;

[0013] S7. After the external network server completes the data processing, the middleware server feeds back the data to the downstream internal network server.

[0014] Further preferably, in S2, the application amount of the network Socket long connection link is a multiple of 1024kb, and the multiple ranges from 1 to 1024.

[0015] Further preferably, in S3, a data packet is periodically sent to the intranet server through the middleware server to perform heartbeat detection;

[0016] Among them, the sending interval is 10-50S;

[0017] If the heartbeat detection is successful, the access is smooth and subsequent operations are performed normally; if the heartbeat detection fails, the access is blocked, the Socket channel is destroyed, and the connection is re-established.

[0018] Further preferably, in S4, after the intranet server client exits, the channel resources will be automatically destroyed, and every 0.5-1.5 minutes, according to the number of client connections, it is detected whether the number of network resources is insufficient or excessive;

[0019] Among them, the number of connections is 120-140% of the number of clients;

[0020] When the number of network resources is insufficient, the allocation ratio between the number of connections and the number of clients is reduced; when the number of network resources is excessive, the allocation ratio between the number of connections and the number of clients is increased.

[0021] Further preferably, in S5, the criterion for judging whether the IP source is reasonable is whether the IP group has been approved and configured. The IP source that has been approved and configured is a reasonable source, and the reasonableness of the request data is judged normally. The IP source that has not been approved and configured is an unreasonable source, and the link is disconnected. If the result of the judgment is unreasonable for 3-5 consecutive times, the IP is banned.

[0022] Further preferably, in S5, the judgment standard of whether the request data is reasonable is whether the network data packet has been verified by encryption parameters. The network data packet that has been verified by encryption parameters is reasonable request data, and S6 is executed. The network data packet that has not been verified by encryption parameters is unreasonable request data, and the link is disconnected. When the result of unreasonable judgment is repeated for 3-5 times in a row, the IP is blocked.

[0023] Further preferably, in S6, the link is allocated to the upstream external network server by using a load balancing method to form a communication channel to achieve interaction between the client and the external network server;

[0024] Among them, load balancing is to dynamically adjust the average distribution according to the number of connections between the middleware server and each upstream server.

[0025] Further preferably, in S7, the middleware server only performs IP and data packet security verification, and forwards the data packet if the verification is successful.

[0026] Further preferably, the access process of the communication method is intranet server->middleware server->extranet server, and only one-way connection application and data request interaction are allowed in the intranet, and reverse connection is restricted.

[0027] Since the embodiment of the present invention adopts the above technical solution, it has the following advantages: the present invention uses the intranet server to connect to the external network server in advance through the middleware server, thereby eliminating the need to repeatedly load network resources, so as to more quickly realize the instant communication requirements of the internal and external network cross-service platforms, and can utilize dynamic network resource allocation adjustment to cooperate with the middleware server load function to achieve dynamic allocation of efficient response resources and ensure the security of the network environment.

[0028] The above summary is for illustrative purposes only and is not intended to be limiting in any way. In addition to the illustrative aspects, embodiments and features described above, further aspects, embodiments and features of the present invention will be readily apparent by reference to the accompanying drawings and the following detailed description. BRIEF DESCRIPTION OF THE DRAWINGS

[0029] In order to more clearly illustrate the embodiments of the present application or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present application. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.

[0030] Figure 1 It is a schematic diagram of the process of the present invention. DETAILED DESCRIPTION

[0031] In the following, only some exemplary embodiments are briefly described. As those skilled in the art will appreciate, the described embodiments may be modified in various ways without departing from the spirit or scope of the present invention. Therefore, the drawings and descriptions are considered to be exemplary and non-restrictive in nature.

[0032] It should be noted that the terms "first", "second", "symmetrical", "array", etc. are only used to distinguish between description and position description purposes, and cannot be understood as indicating or implying relative importance or implicitly indicating the number of the indicated technical features. Therefore, the definition of "first", "symmetrical", etc. can explicitly or implicitly include one or more of these features; similarly, when the number of certain features is not limited in the form of words such as "two" or "three", it should be noted that this feature also explicitly or implicitly includes one or more feature quantities.

[0033] The embodiments of the present invention are described in detail below with reference to the accompanying drawings.

[0034] Embodiment 1

[0035] like Figure 1 As shown, an embodiment of the present invention provides a method for dynamic communication between internal and external network cross-server platforms, including the following steps:

[0036] S1. Establish a middleware server;

[0037] S2. The intranet server applies for a certain amount of network socket long-term connection and connects to the middleware server;

[0038] S3, heartbeat detection;

[0039] S4, dynamically adjust the number of connections;

[0040] S5, determine whether the IP source and request data are reasonable through the middleware server, if not reasonable, return to execute S2, if reasonable, execute S6;

[0041] S6. Allocate upstream external network server to form a communication channel;

[0042] S7. After the external network server completes the data processing, the middleware server feeds back the data to the downstream internal network server.

[0043] In one embodiment, in S2, the application amount of the network socket long connection link is a multiple of 1024kb, and the multiple ranges from 100-1024.

[0044] The middleware server uses the intranet server to connect to the external network server in advance, eliminating the need to repeatedly load network resources, so that instant messaging requirements can be met more quickly.

[0045] In one embodiment, in S3, a data packet is periodically sent to the intranet server through the middleware server to perform heartbeat detection;

[0046] Among them, the sending interval is 30S;

[0047] If the heartbeat detection is successful, the access is smooth and subsequent operations are performed normally; if the heartbeat detection fails, the access is blocked, the Socket channel is destroyed, and the connection is re-established.

[0048] By setting the interval time, data packets can be sent regularly for heartbeat detection.

[0049] In one embodiment, in S4, after the intranet server client exits, the channel resources will be automatically destroyed, and every 1 minute, according to the number of client connections, it will be detected whether the number of network resources is insufficient or excessive;

[0050] Among them, the number of connections is 130% of the number of clients;

[0051] Among them, when the number of network resources is insufficient, the allocation ratio between the number of connections and the number of clients is reduced to 1.1:1; when the number of network resources is excessive, the allocation ratio between the number of connections and the number of clients is increased to 1.5:1.

[0052] Through dynamic network resource allocation adjustment and middleware server load function, dynamic allocation of efficient response resources can be achieved.

[0053] In one embodiment, in S5, the criterion for judging whether the IP source is reasonable is whether the IP group has been approved and configured. The IP source that has been approved and configured is a reasonable source, and the request data is judged normally. The IP source that has not been approved and configured is an unreasonable source, and the link is disconnected. When the result of the judgment is unreasonable for four consecutive times, the IP is banned. In S5, the criterion for judging whether the request data is reasonable is whether the network data packet has been verified by encryption parameters. The network data packet that has been verified by encryption parameters is reasonable request data, and S6 is executed. The network data packet that has not been verified by encryption parameters is unreasonable request data, and the link is disconnected. When the result of the judgment is unreasonable for four consecutive times, the IP is banned.

[0054] The security of the network environment is ensured by performing conditional judgments on the IP source and request data in turn to determine whether they are reasonable.

[0055] In one embodiment, in S6, the link is allocated to the upstream external network server by using a load balancing method to form a communication channel to achieve interaction between the client and the external network server;

[0056] Among them, load balancing is to dynamically adjust the average distribution according to the number of connections between the middleware server and each upstream server.

[0057] After the judgment is completed, the connection will be distributed to upstream external network servers with various functions through load balancing, such as web sites, game engine services, etc., to form a connected channel so that the client can interact with the external network server, such as game data interaction, news dynamics acquisition, etc.

[0058] In one embodiment, in S7, the middleware server only performs IP and data packet security verification, and forwards the data packet if the verification is successful.

[0059] After the external network server completes the data processing, it is returned to the middleware, and then fed back to the downstream internal network server by the middleware, completing the dynamic communication between the internal and external network cross-server platforms.

[0060] In one embodiment, the access process of the communication method is intranet server->middleware server->extranet server, and only one-way connection application and data request interaction are allowed in the intranet, and reverse connection is restricted.

[0061] This process is irreversible and requests can only be initiated by the intranet server, ensuring the security of the network environment.

[0062] Embodiment 2

[0063] like Figure 1 As shown, an embodiment of the present invention provides a method for dynamic communication between internal and external network cross-server platforms, including the following steps:

[0064] S1. Establish a middleware server;

[0065] S2. The intranet server applies for a certain amount of network socket long-term connection and connects to the middleware server;

[0066] S3, heartbeat detection;

[0067] S4, dynamically adjust the number of connections;

[0068] S5, determine whether the IP source and request data are reasonable through the middleware server, if not reasonable, return to execute S2, if reasonable, execute S6;

[0069] S6. Allocate upstream external network server to form a communication channel;

[0070] S7. After the external network server completes the data processing, the middleware server feeds back the data to the downstream internal network server.

[0071] In one embodiment, in S2, the application amount of the network socket long connection link is a multiple of 1024kb, and the multiple ranges from 1 to 1024.

[0072] The middleware server uses the intranet server to connect to the external network server in advance, eliminating the need to repeatedly load network resources, so that instant messaging requirements can be met more quickly.

[0073] In one embodiment, in S3, a data packet is periodically sent to the intranet server through the middleware server to perform heartbeat detection;

[0074] Among them, the sending interval is 10S;

[0075] If the heartbeat detection is successful, the access is smooth and subsequent operations are performed normally; if the heartbeat detection fails, the access is blocked, the Socket channel is destroyed, and the connection is re-established.

[0076] By setting the interval time, data packets can be sent regularly for heartbeat detection.

[0077] In one embodiment, in S4, after the intranet server client exits, the channel resources will be automatically destroyed, and every 0.5 minutes, the number of network resources will be detected to see if they are insufficient or excessive according to the number of client connections;

[0078] Among them, the number of connections is 120% of the number of clients;

[0079] Among them, when the number of network resources is insufficient, the allocation ratio between the number of connections and the number of clients is reduced to 1.1:1; when the number of network resources is excessive, the allocation ratio between the number of connections and the number of clients is increased to 1.3:1.

[0080] Through dynamic network resource allocation adjustment and middleware server load function, dynamic allocation of efficient response resources can be achieved.

[0081] In one embodiment, in S5, the criterion for judging whether the IP source is reasonable is whether the IP group has been approved and configured. The IP source that has been approved and configured is a reasonable source, and the request data is judged normally. The IP source that has not been approved and configured is an unreasonable source, and the link is disconnected. If the result of the judgment is unreasonable for three consecutive times, the IP is banned. In S5, the criterion for judging whether the request data is reasonable is whether the network data packet has been verified by encryption parameters. The network data packet that has been verified by encryption parameters is reasonable request data, and S6 is executed. The network data packet that has not been verified by encryption parameters is unreasonable request data, and the link is disconnected. If the result of the judgment is unreasonable for three consecutive times, the IP is banned.

[0082] The security of the network environment is ensured by performing conditional judgments on the IP source and request data in turn to determine whether they are reasonable.

[0083] In one embodiment, in S6, the link is allocated to the upstream external network server by using a load balancing method to form a communication channel to achieve interaction between the client and the external network server;

[0084] Among them, load balancing is to dynamically adjust the average distribution according to the number of connections between the middleware server and each upstream server.

[0085] After the judgment is completed, the connection will be distributed to upstream external network servers with various functions through load balancing, such as web sites, game engine services, etc., to form a connected channel so that the client can interact with the external network server, such as game data interaction, news dynamics acquisition, etc.

[0086] In one embodiment, in S7, the middleware server only performs IP and data packet security verification, and forwards the data packet if the verification is successful.

[0087] After the external network server completes the data processing, it is returned to the middleware, and then fed back to the downstream internal network server by the middleware, completing the dynamic communication between the internal and external network cross-server platforms.

[0088] In one embodiment, the access process of the communication method is intranet server->middleware server->extranet server, and only one-way connection application and data request interaction are allowed in the intranet, and reverse connection is restricted.

[0089] This process is irreversible and requests can only be initiated by the intranet server, ensuring the security of the network environment.

[0090] Embodiment 3

[0091] like Figure 1 As shown, an embodiment of the present invention provides a method for dynamic communication between internal and external network cross-server platforms, including the following steps:

[0092] S1. Establish a middleware server;

[0093] S2. The intranet server applies for a certain amount of network socket long-term connection and connects to the middleware server;

[0094] S3, heartbeat detection;

[0095] S4, dynamically adjust the number of connections;

[0096] S5, determine whether the IP source and request data are reasonable through the middleware server, if not reasonable, return to execute S2, if reasonable, execute S6;

[0097] S6. Allocate upstream external network server to form a communication channel;

[0098] S7. After the external network server completes the data processing, the middleware server feeds back the data to the downstream internal network server.

[0099] In one embodiment, in S2, the application amount of the network socket long connection link is a multiple of 1024kb, and the multiple ranges from 500-1024.

[0100] The middleware server uses the intranet server to connect to the external network server in advance, eliminating the need to repeatedly load network resources, so that instant messaging requirements can be met more quickly.

[0101] In one embodiment, in S3, a data packet is periodically sent to the intranet server through the middleware server to perform heartbeat detection;

[0102] Among them, the sending interval is 50S;

[0103] If the heartbeat detection is successful, the access is smooth and subsequent operations are performed normally; if the heartbeat detection fails, the access is blocked, the Socket channel is destroyed, and the connection is re-established.

[0104] By setting the interval time, data packets can be sent regularly for heartbeat detection.

[0105] In one embodiment, in S4, after the intranet server client exits, the channel resources will be automatically destroyed, and every 1.5 minutes, the number of network resources will be detected to see if they are insufficient or excessive according to the number of client connections;

[0106] Among them, the number of connections is 140% of the number of clients;

[0107] Among them, when the number of network resources is insufficient, the allocation ratio between the number of connections and the number of clients is reduced to 1.2:1; when the number of network resources is excessive, the allocation ratio between the number of connections and the number of clients is increased to 1.5:1.

[0108] Through dynamic network resource allocation adjustment and middleware server load function, dynamic allocation of efficient response resources can be achieved.

[0109] In one embodiment, in S5, the criterion for judging whether the IP source is reasonable is whether the IP group has been approved and configured. The IP source that has been approved and configured is a reasonable source, and the request data is judged normally. The IP source that has not been approved and configured is an unreasonable source, and the link is disconnected. If the result of the judgment is unreasonable for five consecutive times, the IP is banned. In S5, the criterion for judging whether the request data is reasonable is whether the network data packet has been verified by encryption parameters. The network data packet that has been verified by encryption parameters is reasonable request data, and S6 is executed. The network data packet that has not been verified by encryption parameters is unreasonable request data, and the link is disconnected. If the result of the judgment is unreasonable for five consecutive times, the IP is banned.

[0110] The security of the network environment is ensured by performing conditional judgments on the IP source and request data in turn to determine whether they are reasonable.

[0111] In one embodiment, in S6, the link is allocated to the upstream external network server by using a load balancing method to form a communication channel to achieve interaction between the client and the external network server;

[0112] Among them, load balancing is to dynamically adjust the average distribution according to the number of connections between the middleware server and each upstream server.

[0113] After the judgment is completed, the connection will be distributed to upstream external network servers with various functions through load balancing, such as web sites, game engine services, etc., to form a connected channel so that the client can interact with the external network server, such as game data interaction, news dynamics acquisition, etc.

[0114] In one embodiment, in S7, the middleware server only performs IP and data packet security verification, and forwards the data packet if the verification is successful.

[0115] After the external network server completes the data processing, it is returned to the middleware, and then fed back to the downstream internal network server by the middleware, completing the dynamic communication between the internal and external network cross-server platforms.

[0116] In one embodiment, the access process of the communication method is intranet server->middleware server->extranet server, and only one-way connection application and data request interaction are allowed in the intranet, and reverse connection is restricted.

[0117] This process is irreversible and requests can only be initiated by the intranet server, ensuring the security of the network environment.

[0118] The above are only specific embodiments of the present invention, but the protection scope of the present invention is not limited thereto. Any person skilled in the art can easily think of various changes or substitutions within the technical scope disclosed by the present invention, which should be included in the protection scope of the present invention. Therefore, the protection scope of the present invention should be based on the protection scope of the claims.

Claims

1. A dynamic communication method between internal and external network and cross-server platforms, characterized in that: The following steps are involved: S1. Establish a middleware server; S2. The intranet server applies for a certain amount of network socket long-term connection and connects to the middleware server; S3, heartbeat detection; S4, dynamically adjust the number of connections, in said S4, after the intranet server client exits, this channel resource will be automatically destroyed, and every 0.5-1.5 minutes, according to the number of client connections, detect whether the number of network resources is insufficient or excessive; wherein the number of connections is 120-140% of the number of clients; wherein, when the number of network resources is insufficient, the allocation ratio between the number of connections and the number of clients is reduced; when the number of network resources is excessive, the allocation ratio between the number of connections and the number of clients is increased; S5, determine whether the IP source and request data are reasonable through the middleware server, if not reasonable, return to execute S2, if reasonable, execute S6; S6. Allocate upstream external network server to form a communication channel; S7, after the data processing of the external network server is completed, the middleware server feeds back to the downstream internal network server; In S2, the application amount of the network socket long connection link is a multiple of 1024kb, and the multiple value range is 1-1024; In S3, a data packet is periodically sent to the intranet server through the middleware server to perform heartbeat detection; Among them, the sending interval is 10-50S; If the heartbeat detection is successful, the access is smooth and subsequent operations are performed normally; if the heartbeat detection fails, the access is blocked, the Socket channel is destroyed, and the connection is re-established.

2. The method for dynamic communication between internal and external network and cross-server platforms according to claim 1, characterized in that: In S5, the criterion for judging whether the IP source is reasonable is whether the IP group has been approved and configured. The IP source that has been approved and configured is a reasonable source, and the request data is judged normally. The IP source that has not been approved and configured is an unreasonable source, and the link is disconnected. If the result is unreasonable for 3-5 consecutive times, the IP is banned.

3. The method for dynamic communication between internal and external network and cross-server platforms according to claim 2, characterized in that: In S5, the judgment standard for whether the request data is reasonable is whether the network data packet has been verified by encryption parameters. The network data packet that has been verified by encryption parameters is reasonable request data, and S6 is executed. The network data packet that has not been verified by encryption parameters is unreasonable request data, and the link is disconnected. If the result is unreasonable for 3-5 consecutive times, the IP is banned.

4. The method for dynamic communication between internal and external network and cross-server platforms according to claim 3, characterized in that: In S6, the link is distributed to the upstream external network server by using a load balancing method to form a communication channel to achieve interaction between the client and the external network server; Among them, load balancing is to dynamically adjust the average distribution according to the number of connections between the middleware server and each upstream server.

5. The method for dynamic communication between internal and external network and cross-server platforms according to claim 4, characterized in that: In S7, the middleware server only performs IP and data packet security verification, and forwards the data packet if the verification succeeds.

6. The method for dynamic communication between internal and external network and cross-server platforms according to claim 5, characterized in that: The access process of the communication method is intranet server->middleware server->extranet server, which only allows one-way connection application and data request interaction in the intranet, and restricts the reverse connection.

Images