Access processing method and device, equipment and storage medium

Abstract

The invention provides an access processing method and device, equipment and a storage medium. Relates to the technical field of resource management. The method comprises the following steps: acquiring an access request; the access request is initiated according to a local area network in a preset area, and the access request comprises a resource identifier of a to-be-accessed target resource. And analyzing the access request to obtain a target Internet protocol address. And if it is determined that the target internet protocol address accords with the preset redirection rule information, performing redirection processing on the target address to obtain a redirection address. Sending the redirection address to a local server in a preset area, receiving a target resource which is sent by the local server and corresponds to the resource identifier, and displaying the target resource; wherein the resources in the local server are sent and deployed by a preset main server, and a preset communication line is arranged between the main server and the local server. According to the method provided by the invention, the problem of loading delay of application access between distributed different-place parks in the prior art is solved.

Description

Technical Field

[0001] The present application relates to the field of resource management technology, and in particular to an access processing method, device, equipment and storage medium. Background Art

[0002] At present, some large financial enterprises have nationwide distributed office scenarios. There are both relatively independent work networks based on the park, namely local area networks, and cross-regional dedicated networks serving the whole country. The cross-regional dedicated networks are used to provide broadband to enterprise-level public applications. For the network environment of multiple parks in different locations in the enterprise, due to the limitations of network security and network deployment planning, global applications often encounter network congestion and obvious delays when providing services to multiple parks in different locations, and the network environment needs to be further improved.

[0003] In the prior art, access requests from all over the country are usually communicated based on the Content Delivery Network (CDN) technology of the public Internet. The CDN technology is implemented through the Domain Name System (DNS) settings. Specifically, when receiving the user's access request, the CDN technology can effectively pre-place the system's static data to a server close to the user based on the regional domain name resolution. At this time, the user directly obtains the static data in the nearby server, thereby reducing the access delay of resources and improving the user's browsing experience.

[0004] However, in the prior art, the above CDN technology is mainly used in public Internet networks. Within the enterprise, there are problems such as imperfect DNS facilities and complex multi-campus network connection conditions. The above technology commonly used in public Internet networks cannot be widely applied. Alternatively, for the network environment of multiple campuses in different locations in the enterprise, the bandwidth can be directly increased, but this cannot be achieved due to cost constraints, network deployment planning and other limitations. Alternatively, static resources can be directly deployed to the local servers of each campus through the network environment of multiple campuses in different locations, but considering the confidentiality of internal enterprise files and the fact that the network environment is an unconfidential network, this cannot be achieved.

[0005] Therefore, there is an urgent need for a method that can improve the loading speed of application access in distributed, remote multi-parks. Summary of the invention

[0006] The present application provides an access processing method, device, equipment and storage medium to solve the problem of loading delay in application access between distributed remote campuses in the prior art.

[0007] In a first aspect, the present application provides an access processing method, comprising:

[0008] Obtaining an access request; wherein the access request is initiated based on a local area network within a preset area, the access request is used to obtain resources stored in the preset area, and the access request includes a resource identifier of a target resource to be accessed;

[0009] Parsing the access request to obtain a target Internet Protocol address;

[0010] If it is determined that the target Internet Protocol address meets the preset redirection rule information, redirection processing is performed on the target address to obtain a redirection address;

[0011] The redirect address is sent to a local server in the preset area, a target resource corresponding to the resource identifier sent by the local server is received, and the target resource is displayed; wherein the resources in the local server are sent and deployed by a preset main server, and a preset communication line is between the main server and the local server.

[0012] In a possible design, if it is determined that the target Internet Protocol address meets the preset redirection rule information, redirection processing is performed on the target address to obtain a redirection address, including:

[0013] If it is determined that the target Internet Protocol address meets the preset redirection rule information, intercepting the access request;

[0014] According to the mapping relationship between the preset Internet Protocol address of the main server and the address of the local server, the redirection address corresponding to the target Internet Protocol address is determined; wherein the target Internet Protocol address is the access address of the main server, and the redirection address is the access address within the preset area.

[0015] In one possible design, the method further includes:

[0016] Obtaining a request address context in the access request;

[0017] If it is determined that the target address meets the preset redirection rule information, intercepting the access request includes:

[0018] If it is determined that both the target address and the request address context meet the preset redirection rule information, the access request is intercepted.

[0019] In one possible design, the method further includes:

[0020] An update flag of the redirection rule information is detected, and the latest redirection rule information is acquired according to the update flag; wherein the update flag indicates whether the redirection rule information is updated.

[0021] In a possible design, if it is determined that the target Internet Protocol address meets the preset redirection rule information, redirection processing is performed on the target address to obtain a redirection address, including:

[0022] If it is determined that the target Internet Protocol address complies with the latest preset redirection rule information, redirection processing is performed on the target address to obtain a redirection address.

[0023] In one possible design, the main server communicates with local servers in multiple preset areas respectively;

[0024] For each of the local servers, the resources in the local server are obtained according to the deployment and publishing instructions issued by the main server;

[0025] The deployment release instruction includes the distribution content and the target service location, the distribution content includes a preset release configuration and a release operation instruction, the release configuration includes the configuration information of the target deployment content and the content package to be deployed, and the release operation instruction includes any one or more of the following:

[0026] Resource deployment operation instructions, deployment method instructions, deployment operation instructions, and deletion operation instructions.

[0027] In a second aspect, the present application provides an access processing device, including:

[0028] An acquisition module, used to acquire an access request; wherein the access request is initiated based on a local area network within a preset area, the access request is used to acquire resources stored in the preset area, and the access request includes a resource identifier of a target resource to be accessed;

[0029] A parsing module, used to parse the access request to obtain a target Internet Protocol address;

[0030] A redirection module, configured to redirect the target Internet Protocol address to obtain a redirection address if it is determined that the target Internet Protocol address meets the preset redirection rule information;

[0031] A sending module is used to send the redirection address to the local server in the preset area, receive the target resource corresponding to the resource identifier sent by the local server, and display the target resource; wherein the resources in the local server are sent and deployed by the preset main server, and there is a preset communication line between the main server and the local server.

[0032] In a possible design, the redirection module includes:

[0033] an interception unit, configured to intercept the access request if it is determined that the target Internet Protocol address complies with preset redirection rule information;

[0034] A determination unit is used to determine the redirection address corresponding to the target Internet Protocol address based on the mapping relationship between the Internet Protocol address of the preset main server and the address of the local server; wherein the target Internet Protocol address is the access address of the main server, and the redirection address is the access address within the preset area.

[0035] In a possible design, the device is further specifically used for:

[0036] Obtaining a request address context in the access request;

[0037] The interception unit is specifically used for:

[0038] If it is determined that both the target address and the request address context meet the preset redirection rule information, the access request is intercepted.

[0039] In one possible design, the device further includes:

[0040] An update flag of the redirection rule information is detected, and the latest redirection rule information is acquired according to the update flag; wherein the update flag indicates whether the redirection rule information is updated.

[0041] In a possible design, the redirection module is specifically used to:

[0042] If it is determined that the target Internet Protocol address complies with the latest preset redirection rule information, redirection processing is performed on the target address to obtain a redirection address.

[0043] In one possible design, the main server communicates with local servers in multiple preset areas respectively;

[0044] For each of the local servers, the resources in the local server are obtained according to the deployment and publishing instructions issued by the main server;

[0045] The deployment release instruction includes the distribution content and the target service location, the distribution content includes a preset release configuration and a release operation instruction, the release configuration includes the configuration information of the target deployment content and the content package to be deployed, and the release operation instruction includes any one or more of the following:

[0046] Resource deployment operation instructions, deployment method instructions, deployment operation instructions, and deletion operation instructions.

[0047] In a third aspect, an embodiment of the present application provides an electronic device, comprising: at least one processor and a memory; the memory stores computer execution instructions; the at least one processor executes the computer execution instructions stored in the memory, so that the at least one processor executes the access processing method described in the first aspect and various possible designs of the first aspect.

[0048] In a fourth aspect, an embodiment of the present application provides a computer-readable storage medium, in which computer execution instructions are stored. When a processor executes the computer execution instructions, the access processing method described in the first aspect and various possible designs of the first aspect is implemented.

[0049] In a fifth aspect, an embodiment of the present application provides a computer program product, including a computer program. When the computer program is executed by a processor, it implements the access processing method described in the first aspect and various possible designs of the first aspect.

[0050] The access processing method, device, equipment and storage medium provided by the present application obtain an access request; wherein the access request is initiated according to a local area network in a preset area, the access request is used to obtain resources stored in the preset area, and the access request includes a resource identifier of the target resource to be accessed. The access request is parsed to obtain a target Internet Protocol address. If it is determined that the target Internet Protocol address meets the preset redirection rule information, the target address is redirected to obtain a redirection address. The redirection address is sent to a local server in a preset area, the target resource corresponding to the resource identifier sent by the local server is received, and the target resource is displayed; wherein the resources in the local server are sent and deployed by a preset main server, and the main server and the local server are preset communication lines. In this scheme, if it is determined that the target Internet Protocol address used to access the resource meets the preset redirection rule information, the target address is redirected to obtain a redirection address, and the redirection address is sent to a local server in a preset area, so that when the local server receives the redirection address, it searches for the target resource corresponding to the resource identifier under the redirection address. The target resource corresponding to the resource identifier sent by the local server is received, and the target resource is rendered and displayed. Therefore, in the internal distributed campus of the enterprise, the enterprise application deploys the preset communication line between the main server and the local server for global applications under the condition that the DNS and public content distribution network conditions are incomplete, and the resources in the main server are deployed to the local server in the preset area through the preset communication line, so as to realize the "near-ground" deployment operation of static resources of the enterprise's internal applications. Because in the actual financial enterprise network, different networks have specific isolation and security requirements, this application uses the controlled IP slave orientation mechanism, without changing the initial address input by the browser, and uses the underlying redirection mechanism, that is, the redirection rule information, to ensure the security filtering rules of the enterprise network based on the request uniform resource locator (URL), and performs redirection processing, and accesses resources according to the redirection address of the redirection, so that users can access the resources in the local server in the preset area nearby, solving the problem of loading delay of application access between distributed remote campuses in the prior art. BRIEF DESCRIPTION OF THE DRAWINGS

[0051] The accompanying drawings, which are incorporated in and constitute a part of this specification, illustrate embodiments consistent with the present application and, together with the description, serve to explain the principles of the present application.

[0052] Figure 1 A flowchart of an access processing method provided in an embodiment of the present application;

[0053] Figure 2 A flowchart of another access processing method provided in an embodiment of the present application;

[0054] Figure 3 A flowchart of another access processing method provided in an embodiment of the present application;

[0055] Figure 4 A schematic diagram of a resource publishing process provided in an embodiment of the present application;

[0056] Figure 5 A flowchart of another access processing method provided in an embodiment of the present application;

[0057] Figure 6 A schematic diagram of the structure of an access processing device provided in an embodiment of the present application;

[0058] Figure 7 A schematic diagram of the structure of another access processing device provided in an embodiment of the present application;

[0059] Figure 8 A schematic diagram of the structure of an electronic device provided in an embodiment of the present application.

[0060] The above drawings have shown clear embodiments of the present application, which will be described in more detail later. These drawings and text descriptions are not intended to limit the scope of the present application in any way, but to illustrate the concept of the present application to those skilled in the art by referring to specific embodiments. DETAILED DESCRIPTION

[0061] Exemplary embodiments will be described in detail herein, examples of which are shown in the accompanying drawings. When the following description refers to the drawings, the same numbers in different drawings represent the same or similar elements unless otherwise indicated. The implementations described in the following exemplary embodiments do not represent all implementations consistent with the present application. Instead, they are merely examples of devices and methods consistent with some aspects of the present application as detailed in the appended claims.

[0062] It should be noted that in the technical solution of this application, the collection, storage, use, processing, transmission, provision and disclosure of information such as financial data or user data involved are in compliance with the provisions of relevant laws and regulations and do not violate public order and good morals. The user information (including but not limited to user device information, user personal information, etc.) and data (including but not limited to data for analysis, stored data, displayed data, etc.) involved in this application are all information and data authorized by the user or fully authorized by all parties, and the collection, use and processing of relevant data need to comply with relevant laws, regulations and standards, and provide corresponding operation entrances for users to choose to authorize or refuse. In addition, in the embodiments of this application, some existing solutions in the industry such as certain software, components, models, etc. may be mentioned, and they should be considered as exemplary, and their purpose is only to illustrate the feasibility of the implementation of the technical solution of this application, but it does not mean that the applicant has or must use the solution.

[0063] At present, some large financial enterprises have nationwide distributed office scenarios. There are both relatively independent work networks based on the park, namely local area networks, and cross-regional dedicated networks serving the whole country. The cross-regional dedicated networks are used to provide broadband to enterprise-level public applications. For the network environment of multiple parks in different locations in the enterprise, due to the limitations of network security and network deployment planning, global applications often encounter network congestion and obvious delays when providing services to multiple parks in different locations, and the network environment needs to be further improved.

[0064] In one example, for access requests from all over the country, communication is usually carried out based on the content delivery network (CDN) technology of the public Internet, and the CDN technology is implemented through the domain name system (DNS) setting. Specifically, when receiving the user's access request, the CDN technology can effectively pre-place the static data of the system to the server close to the user based on the domain name resolution of the region. At this time, the user directly obtains the static data in the close server, thereby reducing the access delay of the resource and improving the user's browsing experience. However, in the prior art, the above-mentioned CDN technology is mainly used in the public Internet. Within the enterprise, there are problems such as imperfect DNS facilities and complex multi-campus network connection conditions. The above-mentioned technology commonly used in the public Internet cannot be widely applied, and a large number of static file resources based on web applications in the enterprise obviously occupy the network loan, which aggravates the network pressure and web page loading problems. Alternatively, for the network environment of multiple parks in different locations in the enterprise, the bandwidth is directly increased, but it cannot be achieved due to restrictions in cost constraints, network deployment planning, etc. Alternatively, static resources can be directly deployed to local servers in each park through a remote multi-campus network environment, but this cannot be achieved due to the confidentiality of internal enterprise files and the fact that the network environment is an unconfidential network. Therefore, a method for improving the network speed of a remote multi-campus network environment is urgently needed.

[0065] The technical solution of the present application and how the technical solution of the present application solves the above-mentioned technical problems are described in detail below with specific embodiments. The following specific embodiments can be combined with each other, and the same or similar concepts or processes may not be repeated in some embodiments. The embodiments of the present application will be described below in conjunction with the accompanying drawings.

[0066] Figure 1 A flowchart of an access processing method provided in an embodiment of the present application is shown as follows: Figure 1 As shown, the method includes:

[0067] Step 101, obtaining an access request; wherein the access request is initiated based on a local area network within a preset area, the access request is used to obtain resources stored in the preset area, and the access request includes a resource identifier of a target resource to be accessed.

[0068] For example, the execution subject of this embodiment may be an electronic device, or a terminal device, or an access processing device or device, or other devices or equipment that can execute this embodiment, and there is no limitation on this. In this embodiment, the execution subject is introduced as an electronic device.

[0069] First, the electronic device is located in a preset area, for example, the electronic device is located in a preset park of the enterprise; the enterprise has multiple preset parks, each of which has a local server, and there is a preset communication line between the main server and each local server. The main server can communicate with each local server respectively through the preset communication line, that is, the main server can send and deploy the resources in the local server to each local server respectively through the preset communication line. The preset communication line can be an optical cable, telecommunication cable, etc., and there is no limitation on this; the electronic equipment located in the park can only access requests within its own park; the communication network within the preset area is a local area network; a preset browser client is deployed on the electronic device, and both the main server and the local server in the park where the electronic device is located are deployed with remote distributed networks, park static resource services, content distribution networks, application deployment management services, and network redirection management services.

[0070] The browser client is a customized enterprise application browser that can be implemented based on an open source browser such as Chromium, and there is no limitation on this. In addition, a network redirection client component is installed on the browser client. For each request sent to the outside, the client component performs server address conversion according to the preset redirection rule information of the network redirection component. At the same time, the client component obtains the redirection configuration through the network redirection management service.

[0071] Remote distributed network: An enterprise cross-regional distributed network built using existing standard network equipment and operator dedicated lines and other facilities, which is not connected to the public Internet or is connected through a specific gateway. The characteristics of this network are that high-speed networks are generally built between parks in the same region through high-bandwidth network links, while cross-regional parks generally communicate through dedicated communication lines provided by operators.

[0072] Campus static resource service: provides HTTP request service for static resources, which is deployed in each campus and can be accessed by browser clients of electronic devices in the campus.

[0073] Content distribution network: Deployed in the LAN of the entire enterprise, it is used to send the deployment content to the specified location of the static server in the specified park according to the instructions of the application deployment management service. Or modify or delete the specified static resources according to the instructions of the application deployment management service.

[0074] Application deployment management service: interactive devices and services for application deployment personnel to upload and deploy target applications. The device receives deployment instructions from deployment personnel and sends the received deployment content to the target server location in the park through the content distribution network. At the same time, it also accepts deployment personnel's instructions to update specified content or delete specific content.

[0075] Network redirection management service; used to manage the redirection relationship between multiple main service nodes and mirror nodes within the enterprise network. Each browser client needs to obtain the latest redirection configuration through the redirection management service. The main service node generally refers to the first node where the deployer executes the release of the target resource, such as the main server, or other servers, without limitation. Mirror nodes generally rely on specific replication and distribution technologies, and are copied from the main service node to the local node by the resource management system according to specific rules, and are nodes that provide resource request services to the outside world, such as local servers.

[0076] In this step, after the resource deployment of the local server is completed, the user initiates a request to the target web application resource through the preset browser client, including: initiating an access request from the browser client with the standard address announced by the resource publishing configuration, and the address can be a resource address based on a resolvable domain name, or it can be based on the actual IP service resource address of the enterprise network, and there is no limitation on this. The electronic device obtains the access request, and the access request is initiated by the browser client deployed in the electronic device according to the local area network in the preset area. The access request is used to obtain the resources stored in the preset area, and the access request includes the resource identifier of the target resource to be accessed.

[0077] Step 102: Parse the access request to obtain the target Internet Protocol address.

[0078] Exemplarily, the access request is parsed to obtain a target Internet Protocol Address (IP address).

[0079] Step 103: If it is determined that the target Internet Protocol address meets the preset redirection rule information, redirection processing is performed on the target address to obtain a redirection address.

[0080] Exemplarily, the preset redirection rule information includes a preset redirection condition, a mapping relationship between the Internet Protocol address of the preset main server for redirection and the address of the local server, i.e., a redirection strategy. It is determined whether the target Internet Protocol address conforms to the redirection rule information. If it is determined that the target Internet Protocol address conforms to the redirection rule information, the target address is redirected to obtain a redirection address.

[0081] Step 104: Send the redirect address to the local server in the preset area, receive the target resource corresponding to the resource identifier sent by the local server, and display the target resource; wherein the resources in the local server are sent and deployed by the preset main server, and there is a preset communication line between the main server and the local server.

[0082] Exemplarily, the redirection address is sent to a local server in a preset area. When the local server receives the redirection address, it returns the pre-deployed resources, searches for the target resource corresponding to the resource identifier under the redirection address, and sends the target resource to the electronic device. The electronic device receives the target resource corresponding to the resource identifier sent by the local server, performs a rendering operation, and displays the target resource on a page of the browser client of the electronic device.

[0083] It should be noted that in the present application, for the request input by the user at the browser interaction layer, the address redirection operation of the interaction layer is not performed by relying on the HTTP request standard redirection protocol, but the connection-level redirection is performed at the network request link layer. This is because in a specific browser, the address redirection operation of the interaction layer depends on the characteristics of the URL address and different levels of network security restrictions are implemented. The security technology based on the standard HTTP network redirection protocol can realize the redirection mechanism of content distribution, but to a certain extent, it also destroys the security control mechanism based on the web page URL address, which is not applicable to the present application.

[0084] However, this application performs connection-level redirection at the network request link layer. For the public Internet, connection-level redirection changes the interaction orientation between the user and the target server, which poses a huge public security risk. However, in enterprise intranet applications, this redirection itself, from the preset browser client, redirection configuration mechanism, the main server and the target server of the redirection pair are all within the enterprise's trusted network, and the network security risk caused by this operation is controllable. Therefore, the mechanism of this application is not applicable to untrusted networks such as the public Internet, but only to the preset communication lines built in this application.

[0085] In an embodiment of the present application, an access request is obtained; wherein the access request is initiated based on a local area network within a preset area, the access request is used to obtain resources stored in the preset area, and the access request includes a resource identifier of the target resource to be accessed. The access request is parsed to obtain a target Internet Protocol address. If it is determined that the target Internet Protocol address meets the preset redirection rule information, the target address is redirected to obtain a redirection address. The redirection address is sent to a local server within the preset area, the target resource corresponding to the resource identifier sent by the local server is received, and the target resource is displayed; wherein the resources in the local server are sent and deployed by a preset main server, and the main server and the local server are preset communication lines. In this scheme, if it is determined that the target Internet Protocol address used to access the resource meets the preset redirection rule information, the target address is redirected to obtain a redirection address, and the redirection address is sent to a local server within the preset area, so that when the local server receives the redirection address, it searches for the target resource corresponding to the resource identifier under the redirection address. The target resource corresponding to the resource identifier sent by the local server is received, and the target resource is rendered and displayed. Therefore, in the internal distributed campus of the enterprise, the enterprise application deploys the preset communication line between the main server and the local server for global applications under the condition that the DNS and public content distribution network conditions are incomplete, and the resources in the main server are deployed to the local server in the preset area through the preset communication line, so as to realize the "near-ground" deployment operation of static resources of the enterprise's internal applications. Because in the actual financial enterprise network, different networks have specific isolation and security requirements, this application uses the controlled IP slave orientation mechanism, without changing the initial address input by the browser, and uses the underlying redirection mechanism, that is, the redirection rule information, to ensure the security filtering rules of the enterprise network based on the request uniform resource locator (URL) and perform redirection processing, so that users can access resources according to the redirection address through the preset browser client, main server, local server, content distribution network and other combinable components, and access the resources in the local server in the preset area nearby, solving the problem of loading delay of application access between distributed remote campuses in the prior art.

[0086] Figure 2 A flowchart of another access processing method provided in an embodiment of the present application is shown as follows: Figure 2 As shown, the method includes:

[0087] Step 201, obtaining an access request; wherein the access request is initiated based on a local area network within a preset area, the access request is used to obtain resources stored in the preset area, and the access request includes a resource identifier of a target resource to be accessed.

[0088] For example, this step can be referred to Figure 1 Step 101 in the above is not described in detail.

[0089] Step 202: Parse the access request to obtain the target Internet Protocol address.

[0090] For example, this step can be referred to Figure 1 Step 102 in the above is not described in detail.

[0091] Step 203: Obtain the request address context in the access request.

[0092] Exemplarily, the electronic device reads the request address context in the access request.

[0093] Step 204: Detect an update flag of the redirection rule information, and obtain the latest redirection rule information according to the update flag; wherein the update flag indicates whether the redirection rule information is updated.

[0094] For example, Figure 3 A flowchart of another access processing method provided in an embodiment of the present application is shown as follows: Figure 3 As shown, the electronic device can obtain the latest redirection configuration information from the network redirection management service before processing the access request. This behavior can be performed when the browser is started, or synchronized at a specific frequency, including caching the redirection rule information in the browser locally offline according to specific rules. For example, when the electronic device is turned on, the update flag of the redirection rule information is detected, and the update flag indicates whether the redirection rule information is updated. If it is determined that the update flag indicates that it has been updated, the latest redirection rule information is obtained according to the update flag.

[0095] Step 205: If it is determined that the target Internet Protocol address meets the preset redirection rule information, the access request is intercepted.

[0096] In one example, if it is determined that both the target address and the request address context meet the preset redirection rule information, the access request is intercepted.

[0097] In one example, if it is determined that the target Internet Protocol address complies with the latest preset redirection rule information, the target address is redirected to obtain a redirection address.

[0098] For example, Figure 3 As shown, the electronic device performs resource redirection retrieval. Specifically, it determines whether the target address and the request address context both conform to the latest preset redirection rule information. If it is determined that the target address and the request address context both conform to the preset redirection rule information, the access request is intercepted, and then the target address is redirected to obtain the redirection address.

[0099] Step 206: Determine the redirection address corresponding to the target Internet Protocol address based on the mapping relationship between the preset Internet Protocol address of the main server and the address of the local server; wherein the target Internet Protocol address is the access address of the main server, and the redirection address is the access address within the preset area.

[0100] Exemplarily, the electronic device determines and changes the redirection address corresponding to the target Internet Protocol address based on the mapping relationship between the Internet Protocol address of the preset main server and the address of the local server. Correspondingly, if the request header host is IP, the changed request header host is determined based on the redirection rule information.

[0101] Step 207: Send the redirect address to the local server in the preset area, receive the target resource corresponding to the resource identifier sent by the local server, and display the target resource; wherein the resources in the local server are sent and deployed by the preset main server, and there is a preset communication line between the main server and the local server.

[0102] In one example, the main server communicates with local servers in multiple preset areas respectively; for each local server, the resources in the local server are obtained according to the deployment and release instructions issued by the main server; wherein the deployment and release instructions include distribution content and target service location, the distribution content includes preset release configuration and release operation instructions, the release configuration includes configuration information of the target deployment content and the content package to be deployed, and the release operation instructions include any one or more of the following: resource deployment operation instructions, deployment method instructions, deployment operation instructions, and deletion operation instructions.

[0103] For example, Figure 4 A schematic diagram of a resource publishing process provided in an embodiment of the present application, such as Figure 4As shown, first, the main server sends and deploys resources to each local server in each preset area, that is, publishes resources, and the resources are static resources, etc. For the front-end static resource publishing, the publisher configures and publishes at the interactive entrance of the application deployment management service on the main server side, and generates deployment distribution instructions according to the configuration. The deployment distribution instructions include distribution content and target service location. The distribution content includes preset publishing configuration and publishing operation instructions. The publishing configuration includes configuration information of the target deployment content and the content package to be deployed. The configuration information must at least include the application name. The content package to be deployed refers to the compressed package of the static directory file to be deployed. The publishing operation instruction includes any one or more of the following: resource deployment operation instruction (referring to compression deployment or decompression deployment), deployment mode instruction (referring to overwrite deployment or incremental deployment), deployment operation instruction, and deletion operation instruction. After receiving the deployment distribution instruction, the application deployment management service on the main server side first saves the distribution content and target service location in the deployment distribution instruction, and then, based on the content distribution network on the main server side, sends the deployment distribution instruction to the content distribution network of the local server according to the target service location in the distribution content.

[0104] The content distribution network of the local server receives the deployment distribution instruction and executes the deployment, including distributing the content package to be deployed to the target service location of the park in sequence. Optionally, if the deployment distribution instruction includes a resource deployment operation instruction, the content package to be deployed is decompressed according to the resource deployment operation instruction; if the deployment distribution instruction includes a deployment mode instruction, the target service location is updated or incrementally deployed according to the deployment mode instruction in the deployment distribution instruction; and the existing deployed content is deleted according to the deletion operation instruction in the deployment distribution instruction. After completing the content distribution, the content distribution network of the local server feedbacks the distribution status to the application deployment management service of the local server. After confirming that the deployment is completed, the application deployment management service of the local server registers the redirectable content details with the network redirection device. The registration granularity can be server-level redirection or redirection based on specific URL rules, which is not limited. In addition, resources can be deployed to the main server and the local server target service location respectively through other servers. When there is a resource release update, the main server deploys the resource to the local server again, which is not limited.

[0105] In this step, after the resources on the local server are deployed, Figure 3As shown, the electronic device sends the redirection address to the local server in the preset area. When the local server receives the redirection address, it returns the pre-deployed resources, searches for the target resource corresponding to the resource identifier under the redirection address, and sends the target resource to the electronic device. The electronic device receives the target resource corresponding to the resource identifier sent by the local server, performs a rendering operation, and displays the target resource on the page of the browser client of the electronic device.

[0106] In an embodiment of the present application, an access request is obtained; wherein, the access request is initiated based on a local area network within a preset area, the access request is used to obtain resources stored in the preset area, and the access request includes a resource identifier of the target resource to be accessed. The access request is parsed to obtain the target Internet Protocol address. The request address context in the access request is obtained. The update identifier of the redirection rule information is detected, and the latest redirection rule information is obtained according to the update identifier; wherein the update identifier indicates whether the redirection rule information is updated. If it is determined that the target Internet Protocol address conforms to the preset redirection rule information, the access request is intercepted. According to the mapping relationship between the preset Internet Protocol address of the main server and the address of the local server, the redirection address corresponding to the target Internet Protocol address is determined; wherein, the target Internet Protocol address is the access address of the main server, and the redirection address is the access address within the preset area. The redirection address is sent to the local server within the preset area, the target resource corresponding to the resource identifier sent by the local server is received, and the target resource is displayed; wherein, the resources in the local server are sent and deployed by the preset main server, and the communication line between the main server and the local server is preset. Therefore, in the internal distributed campus of the enterprise, the enterprise application deploys the preset communication line between the main server and the local server for global applications under the condition that the DNS and public content distribution network conditions are incomplete, and the resources in the main server are deployed to the local server in the preset area through the preset communication line, so as to realize the "near-ground" deployment operation of static resources of the enterprise's internal applications. Because in the actual financial enterprise network, different networks have specific isolation and security requirements, this application uses the controlled IP slave orientation mechanism, without changing the initial address input by the browser, and uses the underlying redirection mechanism, that is, the redirection rule information, to ensure the security filtering rules of the enterprise network based on the request uniform resource locator (URL) and perform redirection processing, so that users can access resources according to the redirection address through the preset browser client, main server, local server, content distribution network and other combinable components, and access the resources in the local server in the preset area nearby, solving the problem of loading delay of application access between distributed remote campuses in the prior art.

[0107] In one example, Figure 5 A flowchart of another access processing method provided in an embodiment of the present application is shown as follows: Figure 5 As shown, each park in the park 1-N includes a local server, a local network, a browser client, and a gateway; the main server side includes a dynamic business processing module, an application deployment management service, a central network, and a network redirection management service; the park and the main server communicate through the data center gateway, and the communication is realized according to the preset communication line between the park and the main server.

[0108] Figure 6 A schematic diagram of the structure of an access processing device provided in an embodiment of the present application is shown in FIG. Figure 6 As shown, the device comprises:

[0109] The acquisition module 31 is used to acquire an access request; wherein the access request is initiated based on a local area network in a preset area, the access request is used to acquire resources stored in the preset area, and the access request includes a resource identifier of a target resource to be accessed.

[0110] The parsing module 32 is used to parse the access request to obtain the target Internet Protocol address.

[0111] The redirection module 33 is used to redirect the target address to obtain a redirection address if it is determined that the target Internet Protocol address meets the preset redirection rule information.

[0112] The sending module 34 is used to send the redirection address to the local server in the preset area, receive the target resource corresponding to the resource identifier sent by the local server, and display the target resource; wherein the resources in the local server are sent and deployed by the preset main server, and the communication line between the main server and the local server is preset.

[0113] The device of this embodiment can execute the technical solution in the above method. Its specific implementation process and technical principles are the same and will not be repeated here.

[0114] Figure 7 A schematic diagram of the structure of another access processing device provided in an embodiment of the present application, in Figure 6 Based on the embodiment shown, Figure 7 As shown, the redirection module 33 includes:

[0115] The interception unit 331 is used to intercept the access request if it is determined that the target Internet Protocol address meets the preset redirection rule information.

[0116] The determination unit 332 is used to determine the redirection address corresponding to the target Internet Protocol address based on the mapping relationship between the preset Internet Protocol address of the main server and the address of the local server; wherein the target Internet Protocol address is the access address of the main server, and the redirection address is the access address within the preset area.

[0117] In one example, the device is also specifically used for:

[0118] Get the request address context in the access request;

[0119] The interception unit 331 is specifically used for:

[0120] If it is determined that both the target address and the request address context meet the preset redirection rule information, the access request is intercepted.

[0121] In one example, the device further includes:

[0122] An update flag of the redirection rule information is detected, and the latest redirection rule information is obtained according to the update flag; wherein the update flag indicates whether the redirection rule information is updated.

[0123] In one example, the redirection module 33 is specifically configured to:

[0124] If it is determined that the target Internet Protocol address complies with the latest preset redirection rule information, redirection processing is performed on the target address to obtain a redirection address.

[0125] In one example, the main server communicates with local servers in multiple preset areas respectively;

[0126] For each local server, the resources in the local server are obtained according to the deployment and release instructions issued by the main server;

[0127] The deployment release instruction includes the distribution content and the target service location. The distribution content includes the preset release configuration and the release operation instruction. The release configuration includes the configuration information of the target deployment content and the content package to be deployed. The release operation instruction includes any one or more of the following:

[0128] Resource deployment operation instructions, deployment method instructions, deployment operation instructions, and deletion operation instructions.

[0129] The device of this embodiment can execute the technical solution in the above method. Its specific implementation process and technical principles are the same and will not be repeated here.

[0130] It should be noted that it should be understood that the division of the various modules of the above device is only a division of logical functions. In actual implementation, they can be fully or partially integrated into one physical entity, or they can be physically separated. And these modules can all be implemented in the form of software called by processing elements; they can also be all implemented in the form of hardware; some modules can also be implemented in the form of software called by processing elements, and some modules can be implemented in the form of hardware. Each module can be a separately established processing element, or it can be integrated in a chip of the above device. In addition, it can also be stored in the memory of the above device in the form of program code, and called and executed by a processing element of the above device. The functions of each module. In addition, all or part of these modules can be integrated together, or they can be implemented independently. The processing element here can be an integrated circuit with signal processing capabilities. In the implementation process, each step of the above method or each module above can be completed by an integrated logic circuit of hardware in the processor element or instructions in the form of software.

[0131] Figure 8 This is a schematic diagram of the structure of an electronic device provided in an embodiment of the present application. Figure 8 As shown, the electronic device may include: a transceiver 121 , a processor 122 , and a memory 123 .

[0132] The processor 122 executes the computer execution instructions stored in the memory, so that the processor 122 executes the scheme in the above embodiment. The processor 122 can be a general-purpose processor, including a central processing unit CPU, a network processor (network processor, NP), etc.; it can also be a digital signal processor DSP, an application-specific integrated circuit ASIC, a field programmable gate array FPGA or other programmable logic devices, discrete gates or transistor logic devices, discrete hardware components.

[0133] The memory 123 is connected to the processor 122 via a system bus and completes communication between them. The memory 123 is used to store computer program instructions.

[0134] The transceiver 121 may be used to obtain tasks to be executed and configuration information of the tasks to be executed.

[0135] The system bus can be a peripheral component interconnect (PCI) bus or an extended industry standard architecture (EISA) bus, etc. The system bus can be divided into an address bus, a data bus, a control bus, etc. For ease of representation, only one thick line is used in the figure, but it does not mean that there is only one bus or one type of bus. The transceiver is used to realize the communication between the database access device and other computers (such as clients, read-write libraries, and read-only libraries). The memory may include random access memory (RAM) and may also include non-volatile memory.

[0136] The electronic device provided in the embodiment of the present application may be the terminal device of the above embodiment.

[0137] An embodiment of the present application also provides a chip for executing instructions, which is used to execute the technical solution of the access processing method in the above embodiment.

[0138] An embodiment of the present application further provides a computer-readable storage medium, in which computer instructions are stored. When the computer instructions are executed on a computer, the computer executes the technical solution of the access processing method of the above embodiment.

[0139] An embodiment of the present application also provides a computer program product, which includes a computer program stored in a computer-readable storage medium. At least one processor can read the computer program from the computer-readable storage medium. When at least one processor executes the computer program, the technical solution of the access processing method in the above embodiment can be implemented.

[0140] In the several embodiments provided in the present application, it should be understood that the disclosed devices and methods can be implemented in other ways. For example, the device embodiments described above are only schematic, for example, the division of modules is only a logical function division, and there may be other division methods in actual implementation, such as multiple modules can be combined or integrated into another system, or some features can be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed can be an indirect coupling or communication connection through some interfaces, devices or modules, which can be electrical, mechanical or other forms.

[0141] The modules described as separate components may or may not be physically separated, and the components shown as modules may or may not be physical units, that is, they may be located in one place or distributed on multiple network units. Some or all of the modules may be selected according to actual needs to implement the solution of this embodiment.

[0142] In addition, each functional module in each embodiment of the present application can be integrated into one processing unit, or each module can exist physically separately, or two or more modules can be integrated into one unit. The above-mentioned module-composed unit can be implemented in the form of hardware or in the form of hardware plus software functional units.

[0143] The above-mentioned integrated module implemented in the form of a software function module can be stored in a computer-readable storage medium. The above-mentioned software function module is stored in a storage medium, including a number of instructions for enabling a computer device (which can be a personal computer, a server, or a network device, etc.) or a processor to perform some steps of the methods of various embodiments of the present application.

[0144] It should be understood that the processor may be a central processing unit (CPU), or other general-purpose processors, digital signal processors (DSP), application-specific integrated circuits (ASIC), etc. A general-purpose processor may be a microprocessor or any conventional processor. The steps of the method disclosed in the invention may be directly implemented as being executed by a hardware processor, or may be implemented by a combination of hardware and software modules in the processor.

[0145] The memory may include a high-speed RAM memory, and may also include a non-volatile storage NVM, such as at least one disk memory, and may also be a USB flash drive, a mobile hard disk, a read-only memory, a magnetic disk or an optical disk, etc.

[0146] The bus may be an Industry Standard Architecture (ISA) bus, a Peripheral Component Interconnect (PCI) bus, or an Extended Industry Standard Architecture (EISA) bus, etc. The bus may be divided into an address bus, a data bus, a control bus, etc. For ease of representation, the bus in the drawings of the present application is not limited to only one bus or one type of bus.

[0147] The above storage medium can be implemented by any type of volatile or non-volatile storage device or a combination thereof, such as static random access memory (SRAM), electrically erasable programmable read-only memory (EEPROM), erasable programmable read-only memory (EPROM), programmable read-only memory (PROM), read-only memory (ROM), magnetic memory, flash memory, magnetic disk or optical disk. The storage medium can be any available medium that can be accessed by a general or special purpose computer.

[0148] An exemplary storage medium is coupled to a processor so that the processor can read information from the storage medium and write information to the storage medium. Of course, the storage medium can also be a component of the processor. The processor and the storage medium can be located in an application specific integrated circuit (ASIC). Of course, the processor and the storage medium can also exist as discrete components in an electronic control unit or a main control device.

[0149] Those skilled in the art can understand that all or part of the steps of implementing the above-mentioned method embodiments can be completed by hardware related to program instructions. The aforementioned program can be stored in a computer-readable storage medium. When the program is executed, the steps of the above-mentioned method embodiments are executed; and the aforementioned storage medium includes: ROM, RAM, disk or optical disk and other media that can store program codes.

[0150] Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the present application, rather than to limit it. Although the present application has been described in detail with reference to the aforementioned embodiments, those skilled in the art should understand that they can still modify the technical solutions described in the aforementioned embodiments, or replace some or all of the technical features therein with equivalents. However, these modifications or replacements do not cause the essence of the corresponding technical solutions to deviate from the scope of the technical solutions of the embodiments of the present application.

Claims

1. An access processing method, characterized in that: The method comprises: Obtaining an access request; wherein the access request is initiated based on a local area network within a preset area, the access request is used to obtain resources stored in the preset area, and the access request includes a resource identifier of a target resource to be accessed; Parsing the access request to obtain a target Internet Protocol address; If it is determined that the target Internet Protocol address meets the preset redirection rule information, redirection processing is performed on the target address to obtain a redirection address; The redirect address is sent to a local server in the preset area, a target resource corresponding to the resource identifier sent by the local server is received, and the target resource is displayed; wherein the resources in the local server are sent and deployed by a preset main server, and a preset communication line is between the main server and the local server.

2. The method according to claim 1, characterized in that If it is determined that the target Internet Protocol address meets the preset redirection rule information, redirection processing is performed on the target address to obtain a redirection address, including: If it is determined that the target Internet Protocol address meets the preset redirection rule information, intercepting the access request; According to the mapping relationship between the preset Internet Protocol address of the main server and the address of the local server, the redirection address corresponding to the target Internet Protocol address is determined; wherein the target Internet Protocol address is the access address of the main server, and the redirection address is the access address within the preset area.

3. The method according to claim 2, characterized in that The method further comprises: Obtaining a request address context in the access request; If it is determined that the target address meets the preset redirection rule information, intercepting the access request includes: If it is determined that both the target address and the request address context meet the preset redirection rule information, the access request is intercepted.

4. The method according to claim 1, characterized in that The method further comprises: An update flag of the redirection rule information is detected, and the latest redirection rule information is acquired according to the update flag; wherein the update flag indicates whether the redirection rule information is updated.

5. The method according to claim 4, characterized in that If it is determined that the target Internet Protocol address meets the preset redirection rule information, redirection processing is performed on the target address to obtain a redirection address, including: If it is determined that the target Internet Protocol address complies with the latest preset redirection rule information, redirection processing is performed on the target address to obtain a redirection address.

6. The method according to any one of claims 1 to 5, characterized in that: The main server communicates with local servers in multiple preset areas respectively; For each of the local servers, the resources in the local server are obtained according to the deployment and publishing instructions issued by the main server; The deployment release instruction includes the distribution content and the target service location, the distribution content includes a preset release configuration and a release operation instruction, the release configuration includes the configuration information of the target deployment content and the content package to be deployed, and the release operation instruction includes any one or more of the following: Resource deployment operation instructions, deployment method instructions, deployment operation instructions, and deletion operation instructions.

7. An access processing device, characterized in that: include: An acquisition module, used to acquire an access request; wherein the access request is initiated based on a local area network within a preset area, the access request is used to acquire resources stored in the preset area, and the access request includes a resource identifier of a target resource to be accessed; A parsing module, used to parse the access request to obtain a target Internet Protocol address; A redirection module, configured to redirect the target Internet Protocol address to obtain a redirection address if it is determined that the target Internet Protocol address meets the preset redirection rule information; A sending module is used to send the redirection address to the local server in the preset area, receive the target resource corresponding to the resource identifier sent by the local server, and display the target resource; wherein the resources in the local server are sent and deployed by the preset main server, and there is a preset communication line between the main server and the local server.

8. An electronic device, characterized in that: include: A processor, and a memory communicatively connected to the processor; The memory stores computer-executable instructions; The processor executes the computer-executable instructions stored in the memory to implement the method according to any one of claims 1 to 6.

9. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores computer-executable instructions, which are used to implement the method according to any one of claims 1 to 6 when executed by a processor.

10. A computer program product, characterized in that The invention comprises a computer program, which implements the method according to any one of claims 1 to 6 when being executed by a processor.

Images