Proxy access method and system in single IP mode in distributed network target range

Abstract

The invention discloses a proxy access method and system in a single IP mode in a distributed network target range, and the method comprises the steps: carrying out the registration of a control module on a control node when an access module on a calculation node is started, distributing an access prefix for the access module through the control module, and updating the configuration of a proxy module; the client side inquires a uniform URL of a page access virtual machine or container resource from the control module, after the control module receives a request, a URL generation interface of an access module of a computing node where the resource is located is called, a URL containing an allocated access prefix is obtained, information before the access prefix is replaced, and the uniform URL is obtained and returned to the client side; and the client uses the uniform URL to access the agent module, and the agent module agents the request to the computing node according to the configuration and obtains the content, and returns the content to the page for rendering. According to the invention, the use of ports can be reduced, the capability of automatic address allocation is introduced, and the operation and maintenance cost is reduced.

Description

Technical Field

[0001] The present invention relates to a method and system for using a single IP address to access virtual machines or containers distributed in different host machines in a distributed network range, belonging to the technical field of network security. Background Art

[0002] When using the network range, many virtual machines or containers will be created in the cloud environment. In most business scenarios, it is necessary to access the virtual machine or container directly in the browser. Currently, there are many remote desktop access technologies that can meet this requirement, such as Guacamole, FreeRDP, etc. When accessing different virtual machines or container targets, these software can generate a separate URL for each machine, which can be accessed directly in the browser.

[0003] In order to simulate large-scale network scenarios, network ranges are often designed to be distributed, that is, composed of a control machine node and multiple computing nodes. Therefore, virtual machines and containers are scattered in different computing nodes. When using remote desktop software to generate access URLs, the IP and port may be different.

[0004] For security reasons, the network range system generally uses a single IP mode, that is, only the IP of the control node is exposed to the outside. At this time, in order to access virtual machines or containers on different computing nodes, port mapping is generally used. With the help of proxy tools, when accessing different ports of the control node, the proxy is directed to different computing nodes.

[0005] This method can solve the access problem, but it has a certain impact on security because it requires opening multiple ports. Moreover, when adding a host, it is necessary to reopen a port and add a port mapping, which has a high operation and maintenance cost. Summary of the invention

[0006] Purpose of the invention: In view of the problems existing in the above-mentioned prior art, the purpose of the present invention is to provide a proxy access method and system in a single IP mode in a distributed network target range, reduce the use of ports, and introduce the capability of automatic address allocation to reduce the cost of operation and maintenance.

[0007] Technical solution: To achieve the above-mentioned invention object, the present invention adopts the following technical solution:

[0008] A proxy access method in a single IP mode in a distributed network range includes the following steps:

[0009] When the access module on the computing node is started, it registers with the control module on the control node. The control module assigns an access prefix to the access module and updates the configuration of the proxy module.

[0010] The client queries the control module for the unified URL for accessing virtual machine or container resources. After receiving the request, the control module calls the URL generation interface of the access module of the computing node where the resource is located, obtains the URL containing the assigned access prefix, replaces the information before the access prefix, and obtains the unified URL and returns it to the client.

[0011] The client uses a unified URL to access the proxy module. The proxy module proxies the request to the computing node according to the configuration and obtains the content, which is returned to the page for rendering.

[0012] Furthermore, the access module registers with the control module, the control module assigns an access prefix to the access module, and updates the configuration of the proxy module, including:

[0013] The access module calls the access module registration interface of the control module, and the input parameters include the IP address of the access module, the identifier of the computing node where the access module is located, the access protocol used, and the access port used;

[0014] The control module determines whether the information in the access module information table already exists according to the computing node identifier. If it does, the corresponding data status in the access module information table is changed to online, and the corresponding access prefix is ​​returned; otherwise, a unique string is generated as the access prefix, a new record is added to the access module information table, and the protocol, IP, port and prefix used by the unified access URL, as well as the IP of the access module, the access protocol used, the access port and the assigned access prefix in the input parameters are added to the configuration of the proxy module, and the proxy module is restarted;

[0015] The access module obtains the assigned access prefix, and when subsequently generating access URLs, the assigned access prefix is ​​uniformly added.

[0016] Furthermore, the process of the client querying the control module for the unified URL includes:

[0017] The client calls the unified URL generation interface of the control module, and the input parameters include the access resource ID, the computing node ID where the resource is located, the access resource IP, the access protocol used to access the resource, the access username and the access password;

[0018] The control module queries the corresponding access module information from the access module information table according to the computing node identifier where the resource is located, and obtains the access IP;

[0019] The control module calls the URL generation interface of the access module corresponding to the access IP, and the input parameters include the access resource ID, the access resource IP, the access protocol used by the access resource, the access username and the access password;

[0020] The access module generates a URL based on the input parameters and the assigned access prefix, and returns it to the control module;

[0021] After the control module obtains the URL returned by the access module, it combines the protocol, IP, port and prefix used by the unified access URL, replaces the information before the access prefix in the URL returned by the access module, and generates the final URL and returns it to the client.

[0022] Furthermore, when the access module is shut down, it performs a logout action on the control module, including:

[0023] Calling the access module deregistration interface of the control module, the input parameters include the identifier of the computing node where the access module is located;

[0024] The control module modifies the data corresponding to the computing node identifier in the access module information table, changes the state to offline, deletes the corresponding configuration in the proxy module configuration file, and restarts the proxy module.

[0025] Furthermore, the control module maintains a unified access information table and an access module information table, wherein the unified access information table stores the system access protocol, system access IP, system access port and system access unified prefix; the access module information table stores the computing node identifier, access protocol, access IP, access port, access prefix and status of each access module.

[0026] A proxy access system in a single IP mode in a distributed network range, comprising a control module and a proxy module installed on a control node, and an access module installed on each computing node;

[0027] The access module, when started, registers with the control module on the control node to obtain an access prefix assigned by the control module; the control module calls its URL generation interface to generate a URL containing the assigned access prefix and returns it to the control module;

[0028] The control module, when registering the access module, allocates an access prefix to the access module and updates the configuration of the proxy module; when receiving a request from a client to query a page for accessing a unified URL of a virtual machine or container resource, calls the access module to obtain the URL generated by the access module, replaces the information before the access prefix, obtains the unified URL and returns it to the client;

[0029] When receiving an access request from a client using a unified URL, the proxy module proxies the request to a computing node and obtains the content, and returns it to the page for rendering.

[0030] Furthermore, when the access module registers with the control module, the access module registration interface of the control module is called, and the input parameters include the IP of the access module, the computing node identifier where the access module is located, the access protocol used, and the access port used; the control module determines whether the information already exists in the access module information table based on the computing node identifier. If it does exist, the corresponding data status in the access module information table is changed to online, and the corresponding access prefix is ​​returned; otherwise, a unique string is generated as the access prefix, a new record is added to the access module information table, and the protocol, IP, port and prefix used by the unified access URL, as well as the access module IP, the access protocol used, the access port and the assigned access prefix in the input parameters are added to the configuration of the proxy module, and the proxy module is restarted.

[0031] Furthermore, when the client queries the control module for a unified URL, the unified URL generation interface of the control module is called, and the input parameters include the access resource ID, the computing node identifier where the resource is located, the access resource IP, the access protocol used for accessing the resource, the access user name and the access password; the control module queries the corresponding access module information from the access module information table according to the computing node identifier where the resource is located, and obtains the access IP; the control module calls the URL generation interface of the access module corresponding to the access IP, and the input parameters include the access resource ID, the access resource IP, the access protocol used for accessing the resource, the access user name and the access password; the access module generates a URL according to the input parameters and the assigned access prefix, and returns it to the control module; after obtaining the URL returned by the access module, the control module replaces the information before the access prefix in the URL returned by the access module in combination with the protocol, IP, port and prefix used by the unified access URL, and generates a final URL and returns it to the client.

[0032] Furthermore, when shutting down, the access module executes a logout action to the control module, calls the access module logout interface of the control module, and the input parameters include the computing node identifier where the access module is located; the control module modifies the data corresponding to the computing node identifier in the access module information table, changes the status to offline, deletes the corresponding configuration in the proxy module configuration file, and restarts the proxy module.

[0033] Furthermore, the control module maintains a unified access information table and an access module information table, wherein the unified access information table stores the system access protocol, system access IP, system access port and system access unified prefix; the access module information table stores the computing node identifier, access protocol, access IP, access port, access prefix and status of each access module.

[0034] Beneficial effects: Compared with the prior art, the present invention has the following advantages: the present invention assigns different access prefixes to each access module through the control module to distinguish different computing node resources, which can meet the needs of accessing virtual machines on multiple computing nodes under a single IP, and introduces a registration and deregistration mechanism to automatically generate special prefixes when computing nodes are added, so that virtual machines on newly added computing nodes can also be accessed using a unified single IP. The present invention does not need to use ports to map computing nodes, which enhances the security of control nodes; the present invention realizes automatic registration and deregistration of computing nodes, greatly improving the convenience of operation and maintenance. BRIEF DESCRIPTION OF THE DRAWINGS

[0035] Figure 1 It is a module schematic diagram of an embodiment of the present invention.

[0036] Figure 2 This is a flowchart of access module registration in an embodiment of the present invention.

[0037] Figure 3 The following is a flowchart of querying a unified URL in an embodiment of the present invention.

[0038] Figure 4 This is a flowchart of using a unified URL access in an embodiment of the present invention.

[0039] Figure 5 This is a flowchart of access module deregistration in an embodiment of the present invention. DETAILED DESCRIPTION

[0040] The technical solution of the present invention will be clearly and completely described below in conjunction with the accompanying drawings and specific embodiments.

[0041] The embodiment of the present invention discloses a proxy access method in a single IP mode in a distributed network range, which is mainly implemented by three modules: a proxy module, a control module and an access module. The main relationship between the three modules is as follows Figure 1 As shown. The proxy module is installed on the control node and is used for client pages to access virtual machine resources. The control module is installed on the control node, which can control the proxy configuration generation, configuration loading and service restart of the proxy module, and provide the function of querying a unified URL to the outside world. The access module is installed in the computing node and is implemented based on remote desktop access technology (such as Guacamole). It can generate a URL for each virtual machine on the computing node, and the virtual machine can be directly accessed and operated through the URL connection. When the access module is started or shut down, it will register and unregister with the control module.

[0042] The steps of the proxy access method in the single IP mode in the distributed network range according to the embodiment of the present invention include:

[0043] When the access module on the computing node is started, it registers with the control module on the control node. The control module assigns an access prefix to the access module and updates the configuration of the proxy module.

[0044] The client queries the control module for the unified URL for accessing virtual machine or container resources. After receiving the request, the control module calls the URL generation interface of the access module of the computing node where the resource is located, obtains the URL containing the assigned access prefix, replaces the information before the access prefix, and obtains the unified URL and returns it to the client.

[0045] The client uses a unified URL to access the proxy module. The proxy module proxies the request to the computing node according to the configuration and obtains the content, which is returned to the page for rendering.

[0046] In the embodiment of the present invention, the proxy module may be composed of an nginx service, which is a high-performance HTTP and reverse proxy web server. When a user uses a unified URL to access, the nginx service can access the corresponding computing node according to the configuration.

[0047] In the embodiment of the present invention, the control module maintains two tables, namely, a unified access information table and an access module information table, and provides three interfaces, namely, unified URL generation, access module registration, and access module deregistration.

[0048] The unified access information table stores the system's external unified IP and port information, and its structure is shown in Table 1.

[0049] Table 1: Unified access information table

[0050] System Access Protocol System access ip System access port System access unified prefix http 10.10.2.50 80 A0000

[0051] The access module information table stores information such as the IP address and URL prefix of each access module, and its structure is shown in Table 2.

[0052] Table 2: Access module information table

[0053] Module Number Compute node ID Access Agreement Access IP Access Port Access prefix state 1 compute01 http 192.168.1.101 8200 A0001 Online 2 compute02 http 192.168.1.102 8200 A0002 Offline

[0054] The control module provides an access module registration interface, which can receive and record access module information on the computing node. Its input and output parameters are shown in Table 3.

[0055] Table 3: Access module registration interface

[0056]

[0057] The control module provides an access module deregistration interface, which can synchronously delete its information when the access module is destroyed. Its input and output parameters are shown in Table 4.

[0058] Table 4: Access module logout interface

[0059]

[0060] The control module provides a unified URL generation interface, which is provided to the system front end or other services to generate a resource access URL with the same protocol, IP, port and prefix. Its input and output parameters are shown in Table 5.

[0061] Table 5: Unified URL generation interface

[0062]

[0063] In the embodiment of the present invention, the access module is installed in the computing node, which provides a URL generation interface to the outside. The URL generation interface can generate a URL for each virtual machine on the computing node, and the virtual machine can be directly accessed and operated through the URL connection. Its input and output parameters are shown in Table 6.

[0064] Table 6: URL generation interface

[0065]

[0066] The embodiment of the present invention mainly involves four workflows: access module registration, querying the unified URL, accessing using the unified URL, and access module deregistration. In the embodiment of the present invention, the main process of a user accessing a virtual machine resource is as follows:

[0067] Access module registration: When the access module starts, it registers with the control module and obtains an assigned URL prefix;

[0068] Query unified URL: query the unified URL from the control module;

[0069] Use unified URL access: Use the same URL to access the proxy module, which proxies the request to the computing node and obtains the content, and returns it to the page for rendering;

[0070] Access module deregistration: When a computing node is finished using, the access module can be closed and the deregistration action can be performed to the control module.

[0071] For example, the access module registration process is as follows: Figure 2 As shown, the main steps are as follows:

[0072] N1: Access module startup. When starting, you need to enter the access module IP, current computing node ID, access protocol used, and access port used, which are recorded as ${ip},

[0073] ${computeId},${protocol},${port}. Go to step N2;

[0074] N2: Call the access module registration interface of the control module, and change ${ip},

[0075] ${computeId}, ${protocol}, ${port} are passed in as parameters. Enter judgment S1;

[0076] S1: According to ${computeId}, determine whether the information already exists in the access module information table. The query method is as follows: select * from access module information table where computing node identifier = ${computeId}. If it already exists, go to step N5, otherwise go to step N3;

[0077] N3: Generate a unique string using a random algorithm or numerical increment as the access prefix, and set the value to ${prefix}. The control module adds a record to calculate the node identifier.

[0078] =${computeId}, access protocol = ${protocol}, access ip = ${ip}, access port = ${port}, access prefix = ${prefix}, status = online. Then return the assigned prefix ${prefix} to the access module. Go to step N5

[0079] N4: From the unified access information table, you can get the protocol, ip, port, and prefix used by the current unified access URL. The assumed values ​​are ${protocol_unit}, ${ip_unit}, ${port_unit},

[0080] ${prefix_unit}, currently based on the obtained ${protocol}, ${ip}, ${port}, ${prefix}, add this information to the proxy configuration and restart the proxy module. Taking nginx proxy as an example, its proxy configuration is as follows, and then proceed to step N6;

[0081]

[0082]

[0083] N5: Change the corresponding data status in the access module information table to online, and then return the value of the access prefix ${prefix}, and go to step N6;

[0084] N6: The access module obtains the prefix, and adds the prefix to the subsequent access URLs. The process ends after returning.

[0085] For example, the query process of the unified URL is as follows: Figure 3 As shown, the main steps are as follows:

[0086] N1: Collect the required parameters, including the access resource ID, the computing node ID where the resource is located, the access resource IP, the access protocol used to access the resource (ssh, rdp, etc.), the access username, and the access password, and mark them as

[0087] ${resourceId}, ${resourceHost}, ${resourceIp}, ${resourceProtocol},

[0088] ${resourceUsername}, ${resourcePassword}, ​​go to step N2;

[0089] N2: Use the parameters in step N1 to call the unified URL generation interface of the control module and proceed to step N3;

[0090] N3: Query the corresponding access module information from the access module information table, using the query: select

[0091] *from access module information table where computing node identifier = ${resourceHost}. Assume that the query access protocol, access ip, access port, and access prefix values ​​are ${protocol}, ${ip}, ${port},

[0092] ${prefix}, go to step N4;

[0093] N4: Call the URL generation interface of the access module corresponding to ${ip}, pass in the parameters ${resourceId}, ${resourceIp}, ${resourceProtocol}, ${resourceUsername}, and ${resourcePassword}. The access module will generate a URL in the format of ${protocol}: / / ${ip}:${port} / ${prefix} / *****, and go to step N5;

[0094] N5: The access module returns the generated URL to the control module and goes to step N6;

[0095] N6: After the control module obtains the URL, it can obtain the protocol, IP, port, and prefix used by the current unified access URL from the unified access information table. The assumed values ​​are ${protocol_unit},

[0096] ${ip_unit}, ${port_unit}, ${prefix_unit}. In the URL returned by the access module, replace ${protocol} with ${protocol_unit}, ${ip} with ${ip_unit}, ${port} with ${port_unit}, and add a unified prefix ${prefix_unit}, which eventually becomes

[0097] ${protocol_unit}: / / ${ip_unit}:${port_unit} / ${prefix_unit} / ${prefix} / *****, go to step N7;

[0098] N7: Return the final URL to the client and end;

[0099] For example, the unified URL access process is as follows: Figure 4 As shown, the main steps are as follows:

[0100] N1: The client uses a unified URL to access, the request comes to the proxy module, and enters step N2;

[0101] N2: The proxy module automatically forwards the request to the access module of the computing node according to the configuration, and enters step N3;

[0102] N3: The access module connects to the virtual machine or container and returns rendering information, and then proceeds to step N4;

[0103] N4: The client renders the page based on the returned information and ends.

[0104] For example, the access module deregistration process is as follows: Figure 5 As shown, the main steps include:

[0105] N1: Collect the identifier of the computing node and the IP address of the control module, recorded as ${computeId}.

[0106] ${controllerIp}, go to step N2;

[0107] N2: Call the access module deregistration interface of the control module, whose interface IP is ${controllerIp}, pass in the parameter ${computeId}, and go to step N3;

[0108] N3: The control module modifies the data corresponding to ${computeId} and changes the status to offline. The SQL used is: update access module information table set status = offline where compute node ID =

[0109] ${computeId}. Delete the configuration corresponding to ${computeId} in the proxy module configuration file, restart the proxy, and the process ends.

[0110] The embodiment of the present invention discloses a proxy access system in a single IP mode in a distributed network range, comprising a control module and a proxy module installed on a control node, and an access module installed on each computing node; the access module, when started, registers with the control module on the control node to obtain an access prefix assigned by the control module; the control module calls its URL generation interface to generate a URL containing the assigned access prefix and returns it to the control module; the control module, when registering the access module, assigns an access prefix to the access module and updates the configuration of the proxy module; when receiving a request from a client to query a page for accessing a unified URL of a virtual machine or container resource, the access module is called to obtain the URL generated by the access module, and the information before the access prefix is ​​replaced to obtain the unified URL and return it to the client; when receiving an access request from the client using the unified URL, the proxy module proxies the request to the computing node and obtains the content, and returns it to the page for rendering.

[0111] When the access module registers with the control module, the access module registration interface of the control module is called, and the input parameters include the IP of the access module, the computing node identifier where the access module is located, the access protocol used, and the access port used; the control module determines whether the information already exists in the access module information table based on the computing node identifier. If it does, the corresponding data status in the access module information table is changed to online, and the corresponding access prefix is ​​returned; otherwise, a unique string is generated as the access prefix, a new record is added to the access module information table, and the protocol, IP, port and prefix used by the unified access URL, as well as the access module IP, the access protocol used, the access port and the assigned access prefix in the input parameters are added to the configuration of the proxy module, and the proxy module is restarted.

[0112] When the client queries the control module for a unified URL, the unified URL generation interface of the control module is called, and the input parameters include the access resource ID, the computing node identifier where the resource is located, the access resource IP, the access protocol used for accessing the resource, the access user name and the access password; the control module queries the corresponding access module information from the access module information table according to the computing node identifier where the resource is located, and obtains the access IP; the control module calls the URL generation interface of the access module corresponding to the access IP, and the input parameters include the access resource ID, the access resource IP, the access protocol used for accessing the resource, the access user name and the access password; the access module generates a URL according to the input parameters and the assigned access prefix, and returns it to the control module; after obtaining the URL returned by the access module, the control module replaces the information before the access prefix in the URL returned by the access module in combination with the protocol, IP, port and prefix used by the unified access URL, and generates a final URL and returns it to the client.

[0113] When shutting down, the access module executes a logout action to the control module, calls the access module logout interface of the control module, and the input parameters include the computing node identifier where the access module is located; the control module modifies the data corresponding to the computing node identifier in the access module information table, changes the status to offline, deletes the corresponding configuration in the proxy module configuration file, and restarts the proxy module.

[0114] The control module maintains a unified access information table and an access module information table. The unified access information table stores the system access protocol, system access IP, system access port and system access unified prefix; the access module information table stores the computing node identifier, access protocol, access IP, access port, access prefix and status of each access module.

Claims

1. A proxy access method in a distributed network range under a single IP mode, characterized in that: The steps include: When the access module on the computing node is started, it registers with the control module on the control node. The control module assigns an access prefix to the access module and updates the configuration of the proxy module. The client queries the control module for the unified URL for accessing virtual machine or container resources. After receiving the request, the control module calls the URL generation interface of the access module of the computing node where the resource is located, obtains the URL containing the assigned access prefix, replaces the information before the access prefix, and obtains the unified URL and returns it to the client. The client uses a unified URL to access the proxy module. The proxy module proxies the request to the computing node according to the configuration and obtains the content, which is returned to the page for rendering.

2. According to claim 1, a proxy access method in a distributed network range under a single IP mode is characterized in that: The access module registers with the control module, which assigns an access prefix to the access module and updates the configuration of the proxy module, including: The access module calls the access module registration interface of the control module, and the input parameters include the IP address of the access module, the identifier of the computing node where the access module is located, the access protocol used, and the access port used; The control module determines whether the information in the access module information table already exists according to the computing node identifier. If it does, the corresponding data status in the access module information table is changed to online, and the corresponding access prefix is ​​returned; otherwise, a unique string is generated as the access prefix, a new record is added to the access module information table, and the protocol, IP, port and prefix used by the unified access URL, as well as the IP of the access module, the access protocol used, the access port and the assigned access prefix in the input parameters are added to the configuration of the proxy module, and the proxy module is restarted; The access module obtains the assigned access prefix, and when subsequently generating access URLs, the assigned access prefix is ​​uniformly added.

3. According to claim 1, a proxy access method in a distributed network range under a single IP mode is characterized in that: The process of the client querying the control module for the unified URL includes: The client calls the unified URL generation interface of the control module, and the input parameters include the access resource ID, the computing node ID where the resource is located, the access resource IP, the access protocol used to access the resource, the access username and the access password; The control module queries the corresponding access module information from the access module information table according to the computing node identifier where the resource is located, and obtains the access IP; The control module calls the URL generation interface of the access module corresponding to the access IP, and the input parameters include the access resource ID, the access resource IP, the access protocol used by the access resource, the access username and the access password; The access module generates a URL based on the input parameters and the assigned access prefix, and returns it to the control module; After the control module obtains the URL returned by the access module, it combines the protocol, IP, port and prefix used by the unified access URL, replaces the information before the access prefix in the URL returned by the access module, and generates the final URL and returns it to the client.

4. According to claim 1, a proxy access method in a distributed network range under a single IP mode is characterized in that: When the access module is shut down, it performs the logout action to the control module, including: Calling the access module deregistration interface of the control module, the input parameters include the identifier of the computing node where the access module is located; The control module modifies the data corresponding to the computing node identifier in the access module information table, changes the state to offline, deletes the corresponding configuration in the proxy module configuration file, and restarts the proxy module.

5. According to claim 1, a proxy access method in a distributed network range under a single IP mode is characterized in that: The control module maintains a unified access information table and an access module information table. The unified access information table stores the system access protocol, system access IP, system access port and system access unified prefix; the access module information table stores the computing node identifier, access protocol, access IP, access port, access prefix and status of each access module.

6. A proxy access system in a distributed network range under single IP mode, characterized in that: It includes a control module and an agent module installed on the control node, and an access module installed on each computing node; The access module, when started, registers with the control module on the control node to obtain an access prefix assigned by the control module; the control module calls its URL generation interface to generate a URL containing the assigned access prefix and returns it to the control module; The control module, when registering the access module, allocates an access prefix to the access module and updates the configuration of the proxy module; when receiving a request from a client to query a page for accessing a unified URL of a virtual machine or container resource, calls the access module to obtain the URL generated by the access module, replaces the information before the access prefix, obtains the unified URL and returns it to the client; When receiving an access request from a client using a unified URL, the proxy module proxies the request to a computing node and obtains the content, and returns it to the page for rendering.

7. According to claim 6, a proxy access system in a distributed network range in a single IP mode is characterized in that: When the access module registers with the control module, the access module registration interface of the control module is called, and the input parameters include the IP of the access module, the computing node identifier where the access module is located, the access protocol used, and the access port used; the control module determines whether the information already exists in the access module information table based on the computing node identifier. If it does, the corresponding data status in the access module information table is changed to online, and the corresponding access prefix is ​​returned; otherwise, a unique string is generated as the access prefix, a new record is added to the access module information table, and the protocol, IP, port and prefix used by the unified access URL, as well as the access module IP, the access protocol used, the access port and the assigned access prefix in the input parameters are added to the configuration of the proxy module, and the proxy module is restarted.

8. According to claim 6, a proxy access system in a distributed network range in a single IP mode is characterized in that: When the client queries the control module for a unified URL, the unified URL generation interface of the control module is called, and the input parameters include the access resource ID, the computing node identifier where the resource is located, the access resource IP, the access protocol used for accessing the resource, the access user name and the access password; the control module queries the corresponding access module information from the access module information table according to the computing node identifier where the resource is located, and obtains the access IP; the control module calls the URL generation interface of the access module corresponding to the access IP, and the input parameters include the access resource ID, the access resource IP, the access protocol used for accessing the resource, the access user name and the access password; the access module generates a URL according to the input parameters and the assigned access prefix, and returns it to the control module; after obtaining the URL returned by the access module, the control module replaces the information before the access prefix in the URL returned by the access module in combination with the protocol, IP, port and prefix used by the unified access URL, and generates a final URL and returns it to the client.

9. The proxy access system in a distributed network range in a single IP mode according to claim 6, characterized in that: When shutting down, the access module executes a logout action to the control module, calls the access module logout interface of the control module, and the input parameters include the computing node identifier where the access module is located; the control module modifies the data corresponding to the computing node identifier in the access module information table, changes the status to offline, deletes the corresponding configuration in the proxy module configuration file, and restarts the proxy module.

10. The proxy access system in a distributed network range in a single IP mode according to claim 6, characterized in that: The control module maintains a unified access information table and an access module information table. The unified access information table stores the system access protocol, system access IP, system access port and system access unified prefix; the access module information table stores the computing node identifier, access protocol, access IP, access port, access prefix and status of each access module.

Images