Lightweight dpu protocol proxy configuration method and device, equipment and medium

Abstract

The application provides a lightweight DPU protocol agent configuration method and device, equipment and medium, comprising: receiving information including DPU protocol agent configuration, managing the content of filter resources in the format of DPU protocol agent, and identifying the configuration information; adding a speed limiting filter in the filter of a virtual outbound listener, the speed limiting filter is directed to the port of the routing configuration of the DPU protocol agent, the routing rule in the routing configuration of the DPU protocol agent is directed to the outbound cluster configuration of the same port, and the type of the cluster configuration is an endpoint type; determining the endpoint configuration with the same name according to the cluster configuration type and the name of the cluster; and determining the DPU protocol agent configuration in the case that the IP and service agent of the endpoint configuration are the same node or cross nodes respectively. Through the method shown in the application, the performance and parsing efficiency of the system can be greatly improved, and the time delay is reduced.

Description

TECHNICAL FIELD

[0001] The embodiments of the present application relate to the technical field of network communication, and particularly relate to a lightweight DPU protocol proxy configuration method, device, equipment and medium. BACKGROUND

[0002] The traditional service mesh can only parse http, tcp and other protocols, but many companies in the financial industry often design private protocols to protect sensitive data for security, and also increase DPU hardware in the cluster as an important technical means to accelerate network transmission rate. Although the proto configuration of the generic proxy is powerful, it may be too complex for private protocols, increasing the difficulty of configuration and maintenance, and may adversely affect parsing efficiency and latency, and redundant fields in the DPU high-speed network scene will cause additional encoding and decoding overhead. SUMMARY

[0003] The embodiments of the present application provide a lightweight DPU protocol proxy configuration method to improve the performance and parsing efficiency of the system and reduce the latency.

[0004] In a first aspect, the embodiments of the present application provide a lightweight DPU protocol proxy configuration method, comprising:

[0005] receiving first configuration information, wherein the first configuration information comprises the configuration of the DPU protocol proxy;

[0006] identifying the first configuration information of the management filter resource created in k8s, wherein the content of the management filter resource is in the format of the DPU protocol proxy;

[0007] adding a rate limiting filter in the filter of the virtual egress listener, wherein the rate limiting filter points to the routing configuration of the DPU protocol proxy, the routing rule in the routing configuration of the DPU protocol proxy points to the egress cluster configuration of the same port, and the type of the cluster configuration is an endpoint type;

[0008] determining the endpoint configuration with the same name according to the cluster configuration type and the name of the cluster;

[0009] in the case that the IP and service proxy of the endpoint configuration are the same node, when the load balancing configuration is performed, pointing to the internal listener named by the DPU network interface IP and port through the load balancing, adding the first filter of the routing configuration of the DPU protocol proxy in the internal listener, adding the rate limiting and fuse configuration in the inbound direction in the first filter, and pointing to the cluster configuration named by the internal DPU network interface IP and port through the internal listener;

[0010] In the case that the IP and service agent of the endpoint configuration is cross-node, a virtual inbound listener of another node is judged by the service agent, and a second filter of TCP agent is added on the virtual inbound listener, the content of the second filter points to a cluster configuration of an inbound listener function, a filter of a DPU network interface IP and port is matched, a filter of a DPU protocol agent configuration is added in the cluster configuration of the internal listener, and the internal listener points to a cluster configuration of a network interface IP and port of an internal DPU.

[0011] In a possible implementation, the cluster configuration includes an endpoint of an IP and a port of a DPU network interface.

[0012] In a possible implementation, the configuration of the DPU protocol agent includes a header of a protocol, meta information of the protocol, a protocol body, a matching field, a flow limiting configuration, and a matching manner.

[0013] In a possible implementation, the first configuration information of the management filter resource created in the k8s includes:

[0014] A software development kit (SDK) is called to identify and parse the first configuration information of the management filter resource created in the k8s.

[0015] In a possible implementation, the method further includes: sending the cluster configuration to a data plane network agent of a DPU grid, and the data plane network agent of the DPU grid extends a plug-in of a DPU protocol agent based on the cluster configuration.

[0016] In a possible implementation, the network agent encodes and decodes traffic through the plug-in.

[0017] In a second aspect, an embodiment of the present application provides a lightweight DPU protocol agent configuration device, which includes:

[0018] A receiving module is configured to receive first configuration information, and the first configuration information includes a configuration of a DPU protocol agent.

[0019] A recognizing module is configured to identify first configuration information of a management filter resource created in k8s, and the content of the management filter resource is in a format of a DPU protocol agent.

[0020] An adding module is configured to add a rate limiting filter in a filter of a virtual outbound listener, the rate limiting filter points to a routing configuration of a DPU protocol agent, a routing rule in the routing configuration of the DPU protocol agent points to an outbound cluster configuration of the same port, and the cluster configuration is of an endpoint type.

[0021] A determination module is configured to determine an endpoint configuration with the same name according to the cluster configuration type and the name of the cluster.

[0022] The first configuration module is configured to, in the case that the IP and service proxy of the endpoint configuration are the same node, add a first filter of the routing configuration of the DPU protocol proxy in an internal listener named by the DPU network interface IP and port through the load balancing configuration, add a rate limiting fuse configuration in the inbound direction in the first filter, and point the internal listener to a cluster configuration named by the internal DPU network interface IP and port.

[0023] The second configuration module is configured to, in the case that the IP and service proxy of the endpoint configuration are cross nodes, judge a virtual inbound listener of another node through the service proxy, add a second filter of the TCP proxy on the virtual inbound listener, the content of the second filter points to a cluster configuration of the inbound internal listener function, match the filter through the DPU network interface IP and port, add a filter of the DPU protocol proxy configuration in the internal listener configuration, and point the internal listener to a cluster configuration named by the internal DPU network interface IP and port.

[0024] In a possible implementation, the cluster configuration includes an endpoint of the IP and port of the DPU network interface.

[0025] In a possible implementation, the configuration of the DPU protocol proxy includes a header of a protocol, meta information of the protocol, a protocol body, a matching field, a flow limiting configuration and a matching manner.

[0026] In a possible implementation, the identification module is configured to call a software development kit (SDK) to identify and parse first configuration information of a management filter resource created in k8s.

[0027] In a possible implementation, the apparatus further includes a sending module configured to send the cluster configuration to a data plane network agent of a DPU grid, and the data plane network agent of the DPU grid extends a plug-in of the DPU protocol proxy based on the cluster configuration.

[0028] In a possible implementation, the network agent encodes and decodes traffic through the plug-in.

[0029] In a third aspect, an electronic device is also provided, which includes:

[0030] at least one processor;

[0031] and a memory in communication with the at least one processor;

[0032] The memory stores instructions executable by the at least one processor, and the instructions are executed by the at least one processor to enable the electronic device to perform the method corresponding to any of the embodiments of the first aspect of the present application.

[0033] In a fourth aspect, the embodiments of the present application further provide a computer-readable storage medium, and the computer-readable storage medium stores computer execution instructions. When the computer execution instructions are executed by a processor, the computer execution instructions are used to implement any method of the first aspect of the embodiments of the present application.

[0034] In a fifth aspect, the present disclosure further provides a computer program product, and the program product contains computer execution instructions. When the computer execution instructions are executed by a processor, the computer execution instructions are used to implement the method.

[0035] To sum up, the method shown in the embodiments of the present application further optimizes the communication between services in Istio, improves the performance, reliability and resource utilization of the system. And it can make Istio support the flow limiting and fusing of private protocols, improve the flexibility and adaptability of Istio in processing private protocols and cross-node communication, improve the performance and parsing efficiency of the system, reduce the time delay, and at the same time maintain the scalability and customizability. BRIEF DESCRIPTION OF DRAWINGS

[0036] The accompanying drawings, which are incorporated into and form part of the specification, illustrate embodiments consistent with the present disclosure and, together with the specification, serve to explain the principles of the present disclosure.

[0037] In order to more clearly illustrate the technical solutions in the embodiments of the present disclosure or the prior art, the drawings needed in the embodiments or the prior art description will be briefly introduced as follows. Obviously, for those skilled in the art, other drawings can also be obtained from these drawings without creative labor.

[0038] Figure 1 A flowchart of a lightweight DPU protocol agent configuration method provided by the embodiments of the present application is shown in the figure.

[0039] Figure 2 A device schematic diagram of the lightweight DPU protocol agent configuration provided by the embodiments of the present application is shown in the figure.

[0040] Figure 3 An electronic device schematic diagram of the lightweight DPU protocol agent configuration provided by the embodiments of the present application is shown in the figure. DETAILED DESCRIPTION

[0041] The following description refers to the accompanying drawings. Unless otherwise noted, same or similar components in different drawings have same or similar reference numerals. The following exemplary embodiments are described in the context of apparatuses and methods consistent with some aspects of the embodiments of the present application as detailed in the appended claims.

[0042] The following specific embodiments can be combined with each other, and some embodiments may not be described again for the same or similar concepts or processes. The embodiments of the embodiments of the present application will be described below with reference to the accompanying drawings.

[0043] It should be noted that, in this document, relational terms such as“first” and“second”, and the like, are used solely to distinguish one entity or action from another entity or action, without necessarily requiring or implying any actual such relationship or order between such entities or actions. Moreover, the terms“comprising”,“having”,“including” or any other variant thereof are intended to cover non-exclusive inclusion, such that processes, methods, articles or apparatuses that comprise a list of elements are not limited to those elements, but can include other elements not expressly listed or inherent to such processes, methods, articles or apparatuses. Without further limitation, an element preceded by“comprises a” does not, without more limitations, preclude the existence of additional identical elements in the process, method, article or apparatus that includes the element.

[0044] DPU: Data Processing Unit, as a special hardware accelerator, is a new generation of computing processor oriented to data center, which integrates complete data center functions on a single chip. It, together with CPU and GPU, constitutes the three pillars of new computing. By using specially designed hardware accelerator, the data packets entering the DPU are processed quickly, which can reduce processing delay and improve processing throughput.

[0045] K8S: Its full name is kubernetes, and K8S is its abbreviation, which replaces the 8 characters of“ubernete” with“8”. It is a container-based cluster management platform, also known as an open source container orchestration platform, which is used to automate the deployment, expansion and management of containerized applications. It provides a flexible and scalable way to manage containerized applications and provides a series of functions to simplify the deployment, scheduling, self-healing and expansion of applications.

[0046] pod: Point of Delivery is an English abbreviation, Kubernetes encapsulates one or more containers into a high-level structure called a pod. Any containers in the same pod will share the same namespace and local network. Containers can easily communicate with other containers in the same container, maintaining a certain degree of isolation as if they were on the same machine.

[0047] Istio: It is an open source service mesh platform used to manage and control communication between services in a microservices architecture. Service mesh is an architectural pattern that handles the complexity of network communication, security, observability, and traffic management between different microservices in an application. In this application embodiment, we call it the management node of the service mesh.

[0048] XdS: xds is part of the Istio service mesh, which is a system for configuring and managing network proxies (Envoy). It represents a variety of different configuration and discovery services, such as CDS (Cluster Discovery Service), EDS (Endpoint Discovery Service), RDS (Route Discovery Service), etc. These services work together to ensure the correct configuration and dynamic update of Envoy proxies.

[0049] CDS: (Cluster Discovery Service) CDS is used to define and configure the cluster of Envoy proxies. It can specify the cluster of backend services and define load balancing strategies, connection pool sizes, etc.

[0050] EDS: (Endpoint Discovery Service) EDS is used to configure the endpoints of Envoy proxies, i.e. specific instances of backend services. It provides information about each service instance so that Envoy can route requests to the correct instance.

[0051] RDS: (Route Discovery Service) RDS is used to configure the routing rules of Envoy. Through RDS, you can define how requests should be routed to different services and versions, enabling traffic management, A / B testing, etc.

[0052] SDS: (Secret Discovery Service) SDS is used to configure the security certificates and keys of Envoy proxies to ensure the confidentiality and integrity of communication.

[0053] The application solves the problems that the management node Istio cannot support the customized communication protocol and cannot identify the DPU network configuration. In particular, in some industries with high requirements for data security, a communication protocol different from the common HTTP or gRPC may be used, and an enterprise's own network protocol is adopted, and in order to speed up the network transmission efficiency, a multi-container network is adopted, so that the time-efficient business uses the DPU network, and the traditional istio cannot support this scenario.

[0054] The application provides a private protocol flow limiting and fuse management configuration issuing of a lightweight DPU protocol proxy, and a data encoding and decoding technology, which simplifies the Codec configuration, so that the user can maintain the flow limiting and fuse function while improving the performance and parsing efficiency and reducing the time delay in the cloud native service mesh scenario.

[0055] The following is a detailed description of the lightweight DPU protocol proxy configuration method related to the application.

[0056] Figure 1 A lightweight DPU protocol proxy configuration method is provided for the embodiments of the application. Figure 1 In the method, steps S101 to S106 are included. Each step is described in detail as follows.

[0057] S101, receiving first configuration information, wherein the first configuration information includes the configuration of the DPU protocol proxy.

[0058] In a possible implementation, the configuration of the DPU protocol proxy (DPU Protocol Proxy) includes the header of the protocol, the meta information of the protocol, the protocol body, the matching field, the flow limiting configuration and the matching mode.

[0059] In a possible implementation, the first configuration information of the management filter resource created in k8s includes calling a software development kit (SDK) to identify and parse the first configuration information of the management filter resource created in k8s.

[0060] S102, identifying the first configuration information of the management filter resource created in k8s, wherein the content of the management filter resource is in the format of the DPU protocol proxy.

[0061] In the embodiments of the application, the management module (Istio) of the service mesh issues the first configuration information, and the Istio identifies the resource (envoyfilter) of the management filter created in the k8s cluster, wherein the resource of the management filter includes the creation, deletion and merging of the filter resource.

[0062] Through the configuration and custom resources of Istio, the support for private protocols and the processing logic can be easily extended and adjusted to meet the needs of different scenarios.

[0063] S103、In the filter of the virtual outbound listener, a rate limiting filter is added, the rate limiting filter points to a routing configuration of a DPU protocol agent, a routing rule in the routing configuration of the DPU protocol agent points to an outbound cluster configuration of the same port, and the cluster configuration is of an endpoint type;

[0064] In the embodiments of the present application, a rate limiting filter of a DPU protocol agent is added in a filter of a virtual outbound listener, the rate limiting filter is used to limit the speed of network traffic, and the rate limiting filter points to a routing configuration of a DPU protocol agent. A routing rule in the routing configuration of the DPU protocol agent points to an outbound cluster configuration of the same port, and the type of the cluster configuration is set to an endpoint type.

[0065] S104, according to the cluster configuration type and the name of the cluster, determine the endpoint configuration with the same name.

[0066] S105A, in the case that the IP and the service agent of the endpoint configuration are the same node, when performing load balancing configuration, point to an internal listener named with the IP and the port of the DPU network interface through the load balancing, add a first filter of the routing configuration of the DPU protocol agent in the internal listener, and add a rate limiting fuse configuration in the inbound direction in the first filter; and point the internal listener to a cluster configuration named with the IP and the port of the internal DPU network interface.

[0067] In a possible implementation, the cluster configuration includes an endpoint of the IP and the port of the DPU network interface.

[0068] In a possible implementation, in the case that the IP and the envoy of the endpoint configuration are the same node, when performing load balancing configuration, point to an internal listener named with the IP and the port of the DPU network interface through the load balancing; add a first filter of the routing configuration of the DPU protocol agent in the internal listener, and add a rate limiting fuse configuration in the inbound direction in the first filter, the configuration including a header of a protocol, meta information of the protocol, a body of the protocol, a matching field, and a rate limiting configuration and a matching mode. Point the internal listener to a cluster configuration named with the IP and the port of the internal DPU network interface, and the cluster configuration includes an endpoint of the IP and the port of the DPU network interface.

[0069] After the above endpoint matching is successful, the traffic is processed, the traffic is not passed through when the fusing mechanism is present, and whether the traffic can reach the opposite end server is judged according to the flow limiting configuration.

[0070] In this way, through the EnvoyFilter custom resource, the listener of Istio can be flexibly configured, the speed limiting filter of the Dpuprotocol Proxy is added to the outbound listener, and the traffic control and forwarding of the same-named endpoints under different conditions are performed.

[0071] S105B, in the case of the IP and service agent of the endpoint configuration being cross-node, judging a virtual inbound listener of another node through the service agent, and adding a second filter of the TCP agent to the virtual inbound listener, the content of the second filter pointing to a cluster configuration of an inbound to internal listener function, filtering through the DPU network interface IP and port, adding a filter of the DPU protocol agent configuration in the internal listener configuration, and the internal listener pointing to a cluster configuration of the network interface IP and port naming of the internal DPU.

[0072] In a possible implementation, in the case of the IP and envoy of the endpoint configuration being cross-node, the traffic reaches another node, the service agent (envoy) judges a virtual inbound listener of another node, the management module adds a second filter of the TCP agent to the virtual inbound listener, the content of the second filter pointing to a cluster configuration of an inbound to internal listener function, filtering through the DPU network interface IP and port. The cluster configuration information of the inbound to internal listener function points to an internal listener configuration, the internal listener configuration adds a filter of the DPU protocol configuration, the content of the filter being the same as the inbound DPU flow limiting and fusing conditions; the internal listener points to a cluster configuration of the network interface IP and port naming of the internal DPU; and the cluster configuration includes the endpoint of the network interface IP and port of the DPU.

[0073] For cross-node traffic, by configuring the inbound listener and the filter of the TCP agent of another node, the import and forwarding of the traffic can be realized, thereby supporting the communication between nodes.

[0074] In this way, the dpu network generally has higher bandwidth and lower congestion rate, and can more effectively utilize network resources and improve the resource utilization rate of the system. By using the network interface IP address of the DPU for communication, the resource advantages of the dpu network can be fully utilized, and the overall efficiency of the system is improved; by using the network interface IP address of the DPU for communication, the reliability of the communication between services can be enhanced, and the stability of the system is improved.

[0075] Since the DPU network usually has a shorter transmission delay, directing the communication traffic between services into the network where the IP address of the network interface of the DPU is located can reduce the delay of communication and improve the speed and quality of service response. And the lightweight protocol has better latency advantage.

[0076] In a possible implementation, the method further includes: sending the cluster configuration to a data plane network agent of the grid on the DPU, and the data plane network agent of the grid on the DPU extends a plug-in of the DPU protocol agent based on the cluster configuration.

[0077] In a possible implementation, the network agent encodes and decodes the traffic through the plug-in.

[0078] When the xds of the above cluster configuration is issued to the soc envoy (the data plane network agent of the grid on the DPU) identifying the DPU protocol agent, the soc envoy extends the plug-in of the DPU protocol agent, so that the envoy can efficiently encode and decode the private protocol, and achieve the purpose of flow limiting and fusing of the private protocol high-speed DPU network.

[0079] In summary, the method shown in the embodiments of the present application further optimizes the communication between services in Istio, improves the performance, reliability and resource utilization of the system. And can make Istio support flow limiting and fusing of private protocol, improve the flexibility and adaptability of Istio in processing private protocol and cross-node communication, improve the performance and parsing efficiency of the system, reduce the delay, while maintaining scalability and customization.

[0080] Figure 2 A lightweight DPU protocol agent configuration device is provided for the embodiments of the present application. Figure 2 In the embodiments of the present application, the device comprises:

[0081] The receiving module 201 is configured to receive first configuration information, wherein the first configuration information comprises a configuration of a DPU protocol agent.

[0082] The identifying module 202 is configured to identify first configuration information of a management filter resource created in k8s, wherein the content of the management filter resource is in the format of a DPU protocol agent

[0083] The adding module 203 is configured to add a speed limiting filter in a filter of a virtual egress listener, wherein the speed limiting filter points to a routing configuration of a DPU protocol agent, a routing rule in the routing configuration of the DPU protocol agent points to an egress cluster configuration of the same port, and the type of the cluster configuration is an endpoint type.

[0084] The determining module 204 is configured to determine the endpoint configuration with the same name according to the cluster configuration type and the name of the cluster.

[0085] The first configuration module 205A is configured to, in the case that the IP and the service agent of the endpoint configuration are the same node, add a first filter of the routing configuration of the DPU protocol agent in an internal listener named by the DPU network interface IP and the port through the load balancing configuration, add a rate limiting fuse configuration in the inbound direction in the first filter, and point the internal listener to the cluster configuration of the internal DPU network interface IP and the port.

[0086] The second configuration module 205B is configured to, in the case that the IP and the service agent of the endpoint configuration are cross nodes, determine a virtual inbound listener of another node through the service agent, add a second filter of the TCP agent on the virtual inbound listener, the content of the second filter points to the cluster configuration of the inbound internal listener function, match the filter through the DPU network interface IP and the port, add a filter of the DPU protocol agent configuration in the internal listener configuration, and point the internal listener to the cluster configuration of the internal DPU network interface IP and the port.

[0087] In a possible implementation, the cluster configuration includes an endpoint of the IP and the port of the DPU network interface.

[0088] In a possible implementation, the configuration of the DPU protocol agent includes a header of a protocol, meta information of the protocol, a protocol body, a matching field, a flow limiting configuration, and a matching manner.

[0089] In a possible implementation, the identifying module is configured to: call a software development kit (SDK) to identify and parse first configuration information of a management filter resource created in k8s.

[0090] In a possible implementation, the apparatus further includes a sending module configured to: send the cluster configuration to a data plane network agent of a DPU grid, and the data plane network agent of the DPU grid extends a plug-in of the DPU protocol agent based on the cluster configuration.

[0091] In a possible implementation, the network agent encodes and decodes the traffic through the plug-in.

[0092] The apparatus is used for implementing Figure 1 any of the embodiments of the method shown.

[0093] Figure 3 A structural schematic diagram of an electronic device provided by an embodiment of the present application is shown in Figure 3As shown, the electronic device 300 includes a memory 310 and a processor 320.

[0094] The memory 310 stores a computer program executable by the at least one processor 320. The computer program is executed by the at least one processor 320 to enable the electronic device to implement the method provided in any of the above embodiments.

[0095] The memory 310 and the processor 320 can be connected through a bus 330.

[0096] The relevant description can be understood in correspondence with the relevant description and effects of the method embodiments, which will not be repeated here.

[0097] An embodiment of the present application provides a computer readable storage medium, which stores a computer program. The computer program is executed by a processor to implement the method of any of the above embodiments. Figure 1 The method of any of the above embodiments.

[0098] The computer readable storage medium can be a ROM, a random access memory (RAM), a CD-ROM, a magnetic tape, a floppy disk, an optical data storage device, etc.

[0099] An embodiment of the present application provides a computer program product, which contains computer execution instructions. The computer execution instructions are executed by a processor to implement the method of any of the above embodiments. Figure 1 The method of any of the above embodiments.

[0100] In several embodiments provided in the present application, it should be understood that the disclosed apparatus and method can be implemented by other ways. For example, the apparatus embodiments described above are merely illustrative, for example, the division of the modules is only a logical function division, and actual implementation can have another division way, for example, a plurality of modules or components can be combined or integrated into another system, or some features can be ignored or not executed. In addition, the coupling or direct coupling or communication connection between the displayed or discussed ones can be indirect coupling or communication connection through some interfaces, apparatuses or modules, which can be electrical, mechanical or other forms.

[0101] Other embodiments of the application will be apparent to those skilled in the art from consideration of the specification and practice of the application disclosed herein. It is intended that the specification and examples be considered as exemplary only, with the true scope of the application being indicated by the following claims.

[0102] It is to be understood that the application is not limited to the precise construction already described above and shown in the drawings, and that various modifications and changes can be made by those skilled in the art without departing from the scope thereof.

Claims

1. A lightweight DPU protocol proxy configuration method, characterized in that: include: Receive first configuration information, where the first configuration information includes a configuration of a DPU protocol agent; Identify first configuration information of a management filter resource created in k8s, where the content of the management filter resource is in the format of a DPU protocol proxy; Add a rate limit filter to the filter of the virtual outbound listener. The rate limit filter points to the routing configuration of the DPU protocol agent, and the routing rule in the routing configuration of the DPU protocol agent points to the outbound cluster configuration of the same port. The type of the cluster configuration is endpoint type. Determine, according to the cluster configuration type and the cluster name, an endpoint configuration with the same name; When the IP configured on the endpoint and the service agent are the same node, during load balancing configuration, the load balancing is directed to an internal listener named after the DPU network interface IP and port, a first filter of the routing configuration of the DPU protocol agent is added to the internal listener, and a speed limit fuse configuration for the inbound direction is added to the first filter; the internal listener is directed to a cluster configuration named after the internal DPU network interface IP and port; In the case where the IP and service agent configured on the endpoint are cross-node, the virtual inbound listener of another node is determined through the service agent, and a second filter of the TCP agent is added to the virtual inbound listener. The content of the second filter points to the cluster configuration of the inbound to internal listener function. The filter is matched through the DPU network interface IP and port. The filter configured with the DPU protocol agent is added to the internal listener configuration. The internal listener points to the cluster configuration named by the network interface IP and port of the internal DPU.

2. The method according to claim 1, characterized in that The cluster configuration includes the IP and port endpoints of the DPU network interface.

3. The method according to claim 1, characterized in that The configuration of the DPU protocol agent includes: protocol header, protocol meta-information, protocol body, matching field, current limiting configuration and matching mode.

4. The method according to any one of claims 1 to 3, characterized in that The first configuration information of the management filter resource created in the identification k8s includes: Call the software development kit SDK to identify and parse the first configuration information of the management filter resource created in k8s.

5. The method according to any one of claims 1 to 4, characterized in that The method further comprises: The cluster configuration is sent to a data plane network agent of a grid on the DPU, and the data plane network agent of the grid on the DPU extends a plug-in of a DPU protocol agent based on the cluster configuration.

6. The method according to claim 5, characterized in that The network proxy encodes and decodes traffic through the plug-in.

7. A lightweight DPU protocol agent configuration device, characterized in that: include: A receiving module, configured to receive first configuration information, where the first configuration information includes a configuration of a DPU protocol agent; An identification module is used to identify first configuration information of a management filter resource created in k8s, where the content of the management filter resource adopts the format of a DPU protocol agent; An adding module is used to add a rate limit filter to the filter of the virtual outbound listener, wherein the rate limit filter points to the routing configuration of the DPU protocol agent, the routing rule in the routing configuration of the DPU protocol agent points to the outbound cluster configuration of the same port, and the type of the cluster configuration is endpoint type; A determination module, configured to determine an endpoint configuration with the same name according to the cluster configuration type and the cluster name; A first configuration module is configured to, when the IP configured on the endpoint and the service agent are the same node, point to an internal listener named after the DPU network interface IP and port through the load balancing configuration, add a first filter of the routing configuration of the DPU protocol agent in the internal listener, add a rate limit fuse configuration for the inbound direction in the first filter; and point the internal listener to a cluster configuration named after the internal DPU network interface IP and port; The second configuration module is used to determine the virtual inbound listener of another node through the service agent when the IP and service agent configured on the endpoint are cross-node, and add a second filter of the TCP agent on the virtual inbound listener. The content of the second filter points to the cluster configuration of the inbound to internal listener function, and matches the filter through the DPU network interface IP and port. The filter configured by the DPU protocol agent is added to the internal listener configuration. The internal listener points to the cluster configuration named by the network interface IP and port of the internal DPU.

8. An electronic device, characterized in that: include: at least one processor; and a memory communicatively coupled to the at least one processor; The memory stores instructions that can be executed by the at least one processor, and the instructions are executed by the at least one processor to enable the electronic device to perform the method according to any one of claims 1 to 6.

9. A computer-readable storage medium, characterized in that The computer-readable storage medium stores computer-executable instructions, which are used to implement the method according to any one of claims 1 to 6 when executed by a processor.

10. A computer program product comprising computer-executable instructions, characterized in that: When the computer-executable instructions are executed by a processor, the computer-executable instructions are used to implement the method according to any one of claims 1 to 6.

Images