Transformation method, use method and related device of web link

Abstract

The invention discloses a web link transformation method, a web link use method and a related device, and relates to the technical field of computer networks. Comprising the following steps: generating a plurality of modified configuration files based on configuration files of a plurality of application programs of a merchant service center system and a load balancing address of a web server; determining a plurality of target web servers based on the load balancing addresses of the web servers; and adding Nginx in front of each target web server as a reverse proxy server. Therefore, the load balancing address of the web server is utilized to replace the address of the server of other systems in the bank in the original application program configuration file, such as the aggregation payment system, so that the decoupling of the merchant service center system and the aggregation payment system is realized; and therefore, the problem of unstable working state of the merchant service center system caused by faults of other systems can be reduced, and potential fault risks can be eliminated.

Description

Technical Field

[0001] The present application relates to the field of computer network technology, and in particular to a web link modification method, a use method and a related device. Background Art

[0002] The merchant service center system not only provides business services such as query, submission, modification and synchronization of merchant store information to the bank's internal business personnel, but also undertakes the important task of promoting the legal and compliant development of the merchant system; the bank's internal business personnel expect the merchant service center system to be able to achieve continuous and stable operation around the clock.

[0003] The internal management business of the current merchant service center system, including but not limited to the realization of various businesses such as system login and merchant operation, all rely on the cooperation of the servers of other systems in the bank, such as the servers of the aggregate payment system. If the server of the aggregate payment system is down or not started, the merchant service center will not be able to realize various businesses such as system login or merchant operation; that is, the working stability of the server of the aggregate payment system directly affects the stability of the merchant service center system. Summary of the invention

[0004] Based on the above problems, the present application provides a web link transformation method to achieve decoupling of the merchant service center system and the aggregated payment system, reduce the problem of unstable working status of the merchant service center system caused by failures of other systems or improper use, eliminate potential failure risks, and further improve the stability of the merchant service center system.

[0005] The embodiments of the present application disclose the following technical solutions:

[0006] The first aspect of the present application discloses a method for modifying a web link, comprising:

[0007] Based on the configuration files of multiple applications of the merchant service center system and the load balancing address of the web server, multiple modified configuration files are generated;

[0008] Determining multiple target web servers based on the load balancing addresses of the web servers;

[0009] Add Nginx as a reverse proxy server in front of each target web server; the Nginx is used to forward application requests from the merchant service center system to the corresponding target web server.

[0010] In an optional implementation, the method further includes:

[0011] Based on the target firewall rule and the original firewall rule, a modified firewall rule is obtained; the target firewall rule indicates that the client address group of the merchant service center system is allowed to access the address group of the multiple target web servers.

[0012] In an optional implementation, the method further includes:

[0013] The function of the web link composed of the modified configuration file, the multiple target web servers and the reverse proxy server is verified by a function verification tool; the function verification tool includes: a network terminal simulator and an API testing tool.

[0014] The second aspect of the present application discloses a method for using a web link, including:

[0015] Send target application request through merchant service center system;

[0016] Forwarding the target application request to a corresponding target Web server through a target web link of a merchant service center system, wherein the target web link is the web link described in any one of the first aspects;

[0017] The target application request is responded to through the target web server.

[0018] A third aspect of the present application discloses a web link modification device, the device comprising:

[0019] A configuration file update module, for generating a plurality of modified configuration files based on configuration files of a plurality of application programs of the merchant service center system and a load balancing address of a web server;

[0020] A target server determination module, used to determine multiple target web servers based on the load balancing addresses of the web servers;

[0021] The reverse proxy server setting module is used to add Nginx as a reverse proxy server in front of each target web server; the Nginx is used to forward application requests from the merchant service center system to the corresponding target web server.

[0022] In an optional implementation, the device further includes:

[0023] A rule updating module is used to obtain a modified firewall rule according to a target firewall rule and an original firewall rule; the target firewall rule indicates that a client address group of the merchant service center system is allowed to access an address group of the multiple target web servers.

[0024] In an optional implementation, the device further includes:

[0025] The function verification module is used to verify the function of the web link composed of the modified configuration file, the multiple target web servers and the reverse proxy server through a function verification tool; the function verification tool includes: a network terminal simulator and an API testing tool.

[0026] A fourth aspect of the present application provides a device for using a web link, the device comprising:

[0027] A target program determination module, used to send a target application request through a target program of a merchant service center system;

[0028] A service component loading module, used to forward the target application request to the corresponding target Web server through a target web link of the merchant service center system, wherein the target web link is the web link described in any one of the first aspects;

[0029] The request response module is used to respond to the target application request through the target web server.

[0030] In a fifth aspect, the present application provides a computer-readable storage medium having a computer program stored thereon, which, when executed by a processor, implements the steps of the method described in any implementation of the first aspect and the second aspect.

[0031] A sixth aspect of the present application provides an electronic device, including:

[0032] a memory having a computer program stored thereon;

[0033] A processor is used to execute the computer program in the memory to implement the steps of the method introduced in any implementation of the first aspect and the second aspect.

[0034] Compared with the prior art, this application has the following beneficial effects:

[0035] The present application discloses a web link modification method, use method and related device, including: generating multiple modified configuration files based on multiple application configuration files of the merchant service center system and the load balancing address of the web server; determining multiple target web servers based on the load balancing address of the web server; adding Nginx as a reverse proxy server in front of each target web server. In this way, by using the load balancing address of the web server to replace the address of the server of other systems in the bank, such as the aggregate payment system, in the original application configuration file, the merchant service center system is decoupled from the aggregate payment system, thereby reducing the problem of unstable working state of the merchant service center system caused by failures of other systems or improper use, eliminating potential failure risks, and further improving the stability of the merchant service center system. BRIEF DESCRIPTION OF THE DRAWINGS

[0036] In order to more clearly illustrate the embodiments of the present application or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present application. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative labor.

[0037] Figure 1 A schematic diagram of the structure of a web link of a traditional merchant service center system provided in an embodiment of the present application;

[0038] Figure 2 A flowchart of a web link modification method provided in an embodiment of the present application;

[0039] Figure 3 A schematic diagram of the structure of a web link of a modified merchant service center system provided in an embodiment of the present application;

[0040] Figure 4 A schematic diagram of the structure of a web link transformation device provided in an embodiment of the present application. DETAILED DESCRIPTION

[0041] The merchant service center system provides business services such as query, submission, modification and synchronization of merchant store information for internal bank business personnel; the merchant service center system also establishes a series of merchant management measures, including but not limited to the processing of merchants without transactions for three months, the processing of merchants with expired certificates, merchant blacklist query, industrial and commercial early warning reminders, core early warning reminders, and inspection reminders to promote the compliance development of the merchant system. The above business has extremely high requirements for the stability of the merchant service center system. Therefore, internal bank business personnel expect the merchant service center system to achieve continuous and stable operation around the clock.

[0042] The current operation logic of the merchant service center system, such as the login of the internal management business, depends on the servers of other systems in the bank, such as the server of the aggregate payment system, that is, the Nginx reverse proxy is configured in front of the server of the aggregate payment system to provide services to the application terminals of the merchant service center system. When the server of the aggregate payment system is down or not started, the internal business personnel of the bank will not be able to log in to the internal management business of the merchant service center system, that is, the working stability of the server of the aggregate payment system directly affects the stability of the merchant service center system.

[0043] The structural diagram of the web link of the traditional merchant service center system is as follows Figure 1 As shown. Combined Figure 1 As shown: Figure 1 The internal users in the bank refer to the internal business personnel of the bank; the OA (Office Automation) terminal refers to the office automation terminal of the merchant service center system. The online banking APP area can be understood as the functional area or user interface related to the online banking APP.

[0044] The front office area refers to the front office area of ​​the bank, which can be understood as an area or functional module located between the front-end business operations and the back-end core processing system in the bank's business processing flow. The front office area is mainly responsible for receiving, pre-processing and forwarding business requests from the front desk (such as counters, ATMs, online banking, etc.), and passing them to the back-end processing system safely and efficiently. The front office area of ​​the bank is usually deployed by front-end servers (such as Figure 1 The web server at 11.103.16.131 / 130 and Figure 1 It is understood that the front-end office area can achieve physical or logical isolation of the front-end and back-end systems to a certain extent, thereby improving the security and stability of the system.

[0045] The mainframe area refers to the mainframe area of ​​the bank, which is the area where the mainframe equipment of the bank's core processing system is stored and managed. These mainframe equipment are the core of the bank's business operations and are responsible for processing a large amount of transaction data, customer information and other key business information. It is understandable that the bank's mainframe area is usually located in a highly secure data center with strict physical access control and environmental monitoring measures. Figure 1 The aggregate payment cold standby store with the address 11.99.133.101 is the server of the aggregate payment system mentioned in the above embodiment, and the server is located in the office host area.

[0046] Figure 1Two parallel web links of the merchant service center system are shown in the figure. The structure of each web link is the same. The benefits of preparing two or more web links with the same structure in the banking system are: improving the availability and stability of the system, improving system performance, enhancing scalability and flexibility, and ultimately improving user experience.

[0047] Below, Figure 1 Taking the web link on the left side of the figure as an example, the structure of the web link of the traditional merchant service center system is explained in detail. When the internal user initiates an application request through the OA terminal (the application request contains the domain name mermage.mcs.nb), the domain name in the application request is first resolved and forwarded through the DNS and F5 load balancer corresponding to the virtual address 11.103.16.129 in the office front area, and the application request is forwarded to the web server with the address 11.103.16.131 / 130; then the application request is forwarded to the virtual address 10.99.32.43 in the online banking APP area through the web server, and after being processed by the virtual address 10.99.32.43, it is forwarded to the APP server with the address 10.99.32.34 / 35 to obtain the front-end resources, that is, the login page of the merchant service center system.

[0048] It should be noted that Figure 1 Each virtual address, such as 11.103.16.129 and 10.99.32.43, has been registered through DNS and can be accessed through domain names. At the same time, the services behind these two virtual addresses have been configured through F5 load balancers to achieve load balancing and high availability.

[0049] After obtaining the front-end resources, the application request initiated by the internal user through the OA terminal is further forwarded to the aggregate payment cold standby database with the address of 11.99.133.101 in the office host area (that is, the server of the aggregate payment system). After being processed by the aggregate payment cold standby database, the application request is forwarded to the virtual address 10.99.32.43 in the online banking APP area, and then forwarded to the APP server with the address of 10.99.32.34 / 35 through the virtual address 10.99.32.43, and business operation resources are obtained, that is, the login operation can be performed on the login page, or after logging into the merchant service center system, various business operations such as merchant query can be performed.

[0050] From the above analysis, it can be seen that the stability of the traditional merchant service center system is affected by the operating stability of the aggregate payment system server; when there is a problem with the aggregate payment system server, when the bank's internal business personnel send application requests through the OA terminal, they will only receive the front-end resources of the merchant service center system, but cannot further log in to the merchant service center to retrieve back-end resources and realize merchant query and synchronization of merchant store information business services.

[0051] Based on the above problems, the present application discloses a method for modifying a web link, specifically: based on the configuration files of multiple applications of the merchant service center system and the load balancing address of the web server, multiple modified configuration files are generated; based on the load balancing address of the web server, multiple target web servers are determined; Nginx is added as a reverse proxy server in front of each target web server; Nginx is used to forward application requests from the merchant service center system to the corresponding target web server. In this way, by using the load balancing address of the web server to replace the addresses of other systems in the bank in the original application configuration file, such as the server addresses of the aggregate payment system, the merchant service center system and the aggregate payment system are decoupled, thereby reducing the problem of unstable working status of the merchant service center system caused by failures of other systems or improper use, and eliminating potential failure risks.

[0052] In order to enable those skilled in the art to better understand the solution of the present application, the technical solution in the embodiments of the present application will be clearly and completely described below in conjunction with the drawings in the embodiments of the present application. Obviously, the described embodiments are only part of the embodiments of the present application, not all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of this application.

[0053] Figure 2 A flowchart of a web link modification method provided in an embodiment of the present application. Figure 2 As shown, the web link transformation method disclosed in the present application includes:

[0054] S201, generating multiple modified configuration files based on configuration files of multiple application programs of the merchant service center system and the load balancing address of the web server.

[0055] In this step, the configuration of the relevant application in the merchant service center system is modified to ensure that operations such as login do not rely on the aggregated payment system server, but directly access the front-end server of the zone.

[0056] Combination Figure 1As shown, after obtaining configuration files of multiple applications of the merchant service center, such as the configuration file of the merchant center login interface, the configuration file of the merchant center callback address, etc.; the original recorded position pointing to the aggregate payment system service address (11.99.133.101) in each configuration file is modified to point to the load balancing address (11.103.16.129, 21.103.16.129) of the web server, to obtain multiple modified configuration files; and the modified configuration files are backed up and stored.

[0057] S202: Determine multiple target web servers based on the load balancing address of the web server.

[0058] It is understandable that multiple web servers can be configured under the load balancing address of the web server (referred to as F5 address) to achieve efficient load balancing and request distribution.

[0059] For example, two F5 members 21.103.16.131:9005 and 21.103.16.130:9005 may be added to the F5 address 21.103.16.129:9010. Two F5 members 11.103.16.131:9005 and 11.103.16.130:9005 may be added to the F5 address 11.103.16.129:9010 to set load balancing to ensure high availability and load balancing of services.

[0060] In this way, it is determined that the load balancing address of the web server corresponds to 4 target web servers; the addresses of each target web server are: 11.103.16.131, 11.103.16.130, 21.103.16.131, 11.103.16.130.

[0061] S203, adding Nginx as a reverse proxy server in front of each target web server.

[0062] Among them, Nginx (engine x) is a high-performance HTTP and reverse proxy web server, and it also provides IMAP / POP3 / SMTP services. As a reverse proxy server, Nginx forwards client requests to multiple servers at the back end to achieve load balancing and fault tolerance.

[0063] In this step, Nginx is added as a reverse proxy server in front of each target web server. Based on the function of Nginx, the application request from the merchant service center system is forwarded to the corresponding target web server.

[0064] It should be noted that since adding Nginx as a reverse proxy server in front of each target web server is well known to those skilled in the art, this application will not go into further detail on this matter.

[0065] pass Figure 2 The web link modification method described in Figure 1 After the web link of the merchant service center system in the traditional solution is transformed, the structural diagram of the new web link is obtained as follows Figure 3 shown. Figure 3 For the meaning of the relevant content, see Figure 1 The introduction in will not be repeated here.

[0066] Below, Figure 3 Taking the web link on the left side of the figure as an example, the structure of the web link of the transformed merchant service center system is described in detail. When the internal user initiates an application request through the OA terminal, the application request is first forwarded to the web server with the address 11.103.16.131 / 130 through the virtual address 11.103.16.129 in the office front area; then the application request is forwarded to the virtual address 10.99.32.43 in the online banking APP area through the web server, and after being processed by the DNS and F5 load balancer corresponding to the virtual address 10.99.32.43, it is forwarded to the APP server with the address 10.99.32.34 / 35 to obtain the front-end resources, that is, the login page of the merchant service center system.

[0067] After obtaining the front-end resources, the application request initiated by the internal user through the OA terminal is first forwarded to the web server with the address 11.103.16.131 / 130 through the DNS and F5 load balancer corresponding to the virtual address 11.103.16.129 in the office front area; the application request is forwarded to the virtual address 10.99.32.43 in the online banking APP area through the web server with the address 11.103.16.131 / 130, and then forwarded to the APP server with the address 10.99.32.34 / 35 through the DNS and F5 load balancer corresponding to the virtual address 10.99.32.43, and the business operation resources are obtained, that is, the login operation can be performed on the login page, or after logging into the merchant service center system, various business operations such as merchant query can be performed.

[0068] In this way, by modifying the configuration of related applications in the merchant service center system, ensuring that operations such as login do not rely on the aggregate payment system server, but directly access the server in the front zone, and adding Nginx as a reverse proxy server in front of each target web server, the Web link of the merchant service center system in the traditional solution is transformed; the decoupling of the merchant service center system and the aggregate payment system is achieved, thereby reducing the problem of unstable working status of the merchant service center system caused by failures of other systems or improper use, and eliminating potential failure risks.

[0069] According to the "Data Center Area Access Permission Matrix" issued by the Network Department, the application terminal of the merchant service center system mentioned in the above embodiment, that is, the OA terminal, is only allowed to interact with the host in the bank's front office area. If the OA terminal is in the bank's office host area, such as Figure 1 When interacting with the aggregate payment cold standby database with the address 11.99.133.1.1, the firewall rules were violated.

[0070] Based on this problem, this application not only realizes the transformation of the web link of the application terminal of the merchant service center, but also improves the original firewall rules of the merchant service center system.

[0071] Specifically, a target firewall rule is obtained, wherein the target firewall rule indicates that a client address group of the merchant service center system is allowed to access address groups of multiple target web servers, and the original firewall rule is modified based on the target firewall rule to obtain a modified firewall rule.

[0072] by Figure 3 For example, the modified firewall rules indicate that the "OA client address group" is allowed to access the new web server address (21.103.16.129:9010, 11.103.16.129:9010).

[0073] It is understandable that after completing the transformation of the web link of the merchant service center system and upgrading the firewall rules of the merchant service center system, the function of the transformed link can be verified through functional verification tools such as network interruption simulator (xshell network command) and API testing tools (postman).

[0074] Based on the modification method of a web link disclosed in the above embodiment, the present application also discloses a method for using a web link. Specifically, when the business personnel within the bank sends a target application request through the service center system, the target application request is forwarded to the corresponding target Web server through the web link modified by the merchant service center (it may not pass through the aggregated payment system server, but only through the web server in the office front area); and then the target application request is responded to through the target Web server.

[0075] Based on the web link modification method disclosed in the aforementioned embodiment, the present application also discloses a web link modification device. Figure 4 A schematic diagram of the structure of a web link modification device provided in an embodiment of the present application. Figure 4 As shown, the web link transformation device 400 includes:

[0076] The configuration file updating module 401 is used to generate a plurality of modified configuration files based on the configuration files of a plurality of application programs of the merchant service center system and the load balancing address of the web server;

[0077] A target server determination module 402, configured to determine a plurality of target web servers based on the load balancing addresses of the web servers;

[0078] The reverse proxy server setting module 403 is used to add Nginx as a reverse proxy server in front of each target web server; the Nginx is used to forward the application request from the merchant service center system to the corresponding target web server.

[0079] In an optional implementation, the web link transformation device 400 further includes:

[0080] A rule updating module is used to obtain a modified firewall rule according to a target firewall rule and an original firewall rule; the target firewall rule indicates that a client address group of the merchant service center system is allowed to access an address group of the multiple target web servers.

[0081] In an optional implementation, the web link transformation device 400 further includes:

[0082] The function verification module is used to verify the function of the web link composed of the modified configuration file, the multiple target web servers and the reverse proxy server through a function verification tool; the function verification tool includes: a network terminal simulator and an API testing tool.

[0083] Based on the method for using a web link disclosed in the above embodiment, the present application further discloses a device for using a web link, including:

[0084] A target application determination module, used to send a target application request through a merchant service center system;

[0085] A service component loading module, used to forward the target application request to the corresponding target Web server through a target web link of the merchant service center system, wherein the target web link is the web link described in any one of the first aspects;

[0086] The request response module is used to respond to the target application request through the target web server.

[0087] Based on the web link modification method, use method and device provided in the aforementioned embodiments, the present application also provides a computer-readable storage medium, on which a computer program is stored, which, when executed by a processor, implements some or all of the steps in the web link modification method and use method mentioned above.

[0088] Based on the web link modification method, use method and device provided in the above embodiments, the present application further provides an electronic device, including:

[0089] a memory having a computer program stored thereon;

[0090] The processor is used to execute the computer program in the memory to implement part or all of the steps in the web link transformation method and use method provided in the above embodiments.

[0091] It should be noted that each embodiment in this specification is described in a progressive manner, and the same or similar parts between the embodiments can be referred to each other, and each embodiment focuses on the differences from other embodiments. In particular, for the device embodiment, since it is basically similar to the method embodiment, the description is relatively simple, and the relevant parts can be referred to the partial description of the method embodiment. The device embodiment described above is merely schematic, in which the unit described as a separate component may or may not be physically separated, and the component prompted as a unit may or may not be a physical unit, that is, it may be located in one place, or it may be distributed on multiple network units. Some or all of the modules can be selected according to actual needs to achieve the purpose of the scheme of this embodiment. Ordinary technicians in this field can understand and implement it without paying creative work.

[0092] The above is only a specific implementation of the present application, but the protection scope of the present application is not limited thereto. Any changes or substitutions that can be easily thought of by a person skilled in the art within the technical scope disclosed in the present application should be included in the protection scope of the present application. Therefore, the protection scope of the present application should be based on the protection scope of the claims.

Claims

1. A method for modifying a web link, characterized in that: The method comprises: Based on the configuration files of multiple applications of the merchant service center system and the load balancing address of the web server, multiple modified configuration files are generated; Determining multiple target web servers based on the load balancing addresses of the web servers; Add Nginx as a reverse proxy server in front of each target web server; the Nginx is used to forward application requests from the merchant service center system to the corresponding target web server.

2. The method according to claim 1, characterized in that: The method further comprises: Based on the target firewall rule and the original firewall rule, a modified firewall rule is obtained; the target firewall rule indicates that the client address group of the merchant service center system is allowed to access the address group of the multiple target web servers.

3. The method according to claim 2, characterized in that The method further comprises: The function of the web link composed of the modified configuration file, the multiple target web servers and the reverse proxy server is verified by a function verification tool; the function verification tool includes: a network terminal simulator and an API testing tool.

4. A method for using a web link, characterized in that: The method comprises: Send target application request through merchant service center system; Forwarding the target application request to a corresponding target Web server through a target Web link of a merchant service center system, wherein the target Web link is a Web link as described in any one of claims 1 to 3; The target application request is responded to through the target web server.

5. A web link modification device, characterized in that: The device comprises: A configuration file update module, for generating a plurality of modified configuration files based on configuration files of a plurality of application programs of the merchant service center system and a load balancing address of a web server; A target server determination module, used to determine multiple target web servers based on the load balancing addresses of the web servers; The reverse proxy server setting module is used to add Nginx as a reverse proxy server in front of each target web server; the Nginx is used to forward application requests from the merchant service center system to the corresponding target web server.

6. The device according to claim 5, characterized in that The device also includes: A rule updating module is used to obtain a modified firewall rule based on a target firewall rule and an original firewall rule; the target firewall rule indicates that a client address group of the merchant service center system is allowed to access an address group of the multiple target web servers.

7. The device according to claim 6, characterized in that The device also includes: The function verification module is used to verify the function of the web link composed of the modified configuration file, the multiple target web servers and the reverse proxy server through a function verification tool; the function verification tool includes: a network terminal simulator and an API testing tool.

8. A device for using a web link, characterized in that: The device comprises: A target application determination module, used to send a target application request through a merchant service center system; A service component loading module, used to forward the target application request to the corresponding target Web server through a target web link of the merchant service center system, wherein the target web link is a web link as described in any one of claims 1 to 3; The request response module is used to respond to the target application request through the target web server.

9. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the program is executed by a processor, the steps of the method described in any one of claims 1 to 4 are implemented.

10. An electronic device, characterized in that: include: a memory having a computer program stored thereon; A processor, configured to execute the computer program in the memory to implement the steps of the method according to any one of claims 1 to 4.

Images