Service request transmission method and device, electronic equipment and computer program product

Abstract

The invention discloses a service request transmission method and device, electronic equipment and a computer program product. The method comprises the steps that the working state of a firewall of a source platform is monitored, and the working state at least comprises the following steps: the starting state represents the starting state of migration of a service pre-configured by the source platform to a target platform; when the firewall is in the open state, the source platform operates a preset rule to forward the flow received by the source platform to the target platform; under the condition that the source platform runs the preset rule, a service request received by the source platform is monitored, and the service request is flow initiated by a client side and is used for requesting to provide target service pre-configured in the source platform for the client side; before the source platform provides the service based on the service request, the service request is forwarded to a target platform, and the target platform at least comprises a target service transferred from the source platform. According to the invention, the technical problem that the service cannot be ensured to be uninterrupted under the condition of cloud migration is solved.

Description

Technical Field

[0001] The present invention relates to the field of cloud computing, and in particular to a method, device, electronic device and computer program product for transmitting a service request. Background Art

[0002] Cloud migration refers to the process of migrating existing applications, data, and business processes from one or more local environments or other cloud service providers' environments to a cloud computing environment. This process may involve redesigning and refactoring applications to adapt to the cloud environment, and is usually planned and executed by professional cloud service providers or cloud consulting companies. Many factors need to be considered during the migration process, including business availability, data security, performance optimization, cost control, compliance, etc.

[0003] In many cloud migration projects, users may have fixed the original business platform configuration and hard-integrated it into the coding system; or they may be worried about the impact on the original business process system, and often ask to keep the business uninterrupted and the IP address unchanged during the migration process to achieve smooth and seamless cutover. That is, to ensure that during the migration process, the corresponding service capabilities can still be provided according to the original IP address to achieve seamless migration; at the same time, due to their own general IT capabilities, they often submit this requirement to the cloud service provider or migration service provider.

[0004] Figure 1 is a schematic diagram of a cloud migration solution based on the prior art, such as Figure 1 As shown in the figure, among the various migration solutions provided by mainstream migration service providers in the industry, the common method is to install agents on the source platform (i.e., source server) and the cloud platform (i.e., virtual machine) and perform migration through the migration service console (i.e., migration server). This requires that the three parties be configured with independent IP addresses and that the IP addresses between them are reachable. However, in the scenario where the business is not interrupted and the IP address remains unchanged, this mainstream migration solution is not feasible.

[0005] Figure 2 This is a schematic diagram of an IP after cloud migration according to the prior art, such as Figure 2 As shown in the figure, in the cloud dedicated line cloud mode, before cloud migration, the IP address of the source server in the cloud is: 192.168.26.140, and the IP address of the cloud platform after cloud migration is: 192.168.26.140, and its IP address has changed after cloud migration. However, the cloud dedicated line uses a three-layer static routing protocol. If the IP addresses at both ends need to remain unchanged, due to the IP address routing selection principle, the local subnet route is given priority, and the search will be flooded locally without entering the routing selection.

[0006] During the cloud migration process, the user's original business platform / system is involved. Some business systems are not standardized during development, and the IP address is hard-coded and integrated into the system; some business platform integrators no longer provide technical support. After the IP address changes, it will cause service anomalies or even the service cannot be started, and the IP can only be required to remain unchanged. In addition, in the scenario where the user's business provides services, a system often contains multiple platform clusters. In the process of overall migration of the business system to the cloud, it is usually adopted in steps and batches. There is a process stage in which the cloud + source platform collaborate to provide services. The same IP address needs to be used to ensure business continuity (uninterrupted). However, in the case of traditional cloud migration solutions, the user's source platform, the cloud migration console provided by the third party, and the cloud platform need to achieve IP reachability between each other. According to the principle of IP routing, it is impossible to address the cloud under the same IP address, so the IPs of the three cannot be the same.

[0007] That is, in the mainstream cloud migration solutions in the industry, in response to the user's cloud migration needs, a new IP address is often configured on the cloud platform first to ensure that the migration is completed; then the IP address change and cutover action is performed. Combined with the pain point scenarios mentioned above, the following risks will be caused:

[0008] 1. During the IP address change process, the cloud host cannot provide services, and even the service cannot be started due to IP hard coding.

[0009] 2. During the migration process, the IP address of the host platform that was previously migrated to the cloud was temporarily changed, and it was unable to coordinate with the source platform to provide services, which affected the service availability.

[0010] 3. Since the cutover involves IP address changes, it is difficult to verify the service before the cutover. If the service is abnormal after the cutover is completed, it will take a lot of time and energy to investigate. Considering the RTO and RPO that users can accept, there is a great risk.

[0011] In summary, in the case of traditional cloud migration, the user source platform and the cloud platform need to use different IP addresses to migrate services first, and then change and cut over the IP addresses. During the IP address change and cutover phase, service requests can only be sent to the user source platform. However, the services of the user source platform have already been migrated, so it is unable to respond to service requests. The cloud platform cannot receive service requests, so it is unable to respond to service requests, resulting in service interruptions.

[0012] With respect to the above-mentioned problem of being unable to ensure uninterrupted services in the case of cloud migration, no effective solution has been proposed so far. Summary of the invention

[0013] The embodiments of the present invention provide a method, device, electronic device and computer program product for transmitting a service request, so as to at least solve the technical problem that it is impossible to ensure uninterrupted service in the case of cloud migration.

[0014] According to one aspect of an embodiment of the present invention, a method for transmitting a service request is provided, comprising: monitoring the working status of a firewall of a source platform, wherein the working status at least includes: an on status, wherein the on status indicates that the service pre-configured on the source platform is being migrated to a target platform; when the firewall is in the on status, the source platform runs a preset rule, wherein the preset rule is used to instruct that the traffic received by the source platform is forwarded to the target platform; when the source platform runs the preset rule, monitoring the service request received by the source platform, wherein the service request is traffic initiated by a client, and is used to request that a target service pre-configured in the source platform be provided to the client; before the source platform provides a service based on the service request, forwarding the service request to the target platform, wherein the target platform at least includes: the target service transferred from the source platform.

[0015] Optionally, the method also includes: obtaining a first platform address of the source platform and a second platform address of the target platform; configuring the preset rules using the first platform address and the second platform address, wherein the preset rules are used to disguise the first platform address and forward the traffic sent to the first platform address to the second platform address.

[0016] Optionally, before the source platform provides service based on the service request, forwarding the service request to the target platform includes: before the source platform provides service based on the service request, obtaining the target customer address of the client that initiates the service request; using the target customer address as the source address and the second platform address of the target platform as the destination address, encapsulating the service request based on the virtual extended LAN protocol to obtain a forwarding traffic packet; and sending the forwarding traffic packet to the target platform.

[0017] According to another aspect of an embodiment of the present invention, a method for transmitting a service request is also provided, comprising: receiving a forwarding traffic packet forwarded by a source platform through a target platform, wherein the forwarding traffic packet at least includes: a service request initiated by a client, the service request being used to request that a target service pre-configured in the source platform be provided to the client, the target platform providing services transferred from the source platform through multiple service terminals, the multiple service terminals at least including: a target service terminal that provides the target service; sending the service request in the forwarding traffic packet to the target server terminal, wherein the target server terminal is used to respond to the service request and generate a response data packet based on the target service; and sending the response data packet to the client.

[0018] Optionally, sending the service request to the target service end includes: unpacking the forwarding traffic packet based on the virtual extended local area network protocol through the terminal node pre-configured for the target platform in the virtual private cloud to obtain the service request, wherein the terminal node is used to receive the traffic forwarded by the source platform and transmit the received traffic to the terminal service connected to the terminal node, and the forwarding traffic packet is: using the target customer address of the client as the source address, the second platform address of the terminal node as the destination address, and the service request encapsulated based on the virtual extended local area network protocol; searching for the service request in multiple preset virtual addresses recorded in the service mapping relationship table. The method comprises the steps of: encapsulating the service request based on the virtual extended local area network protocol and obtaining a first traffic packet; sending the first traffic packet to the target server based on the virtual address, wherein the target server is further configured to decapsulate the first traffic packet based on the virtual extended local area network protocol to obtain the service request.

[0019] Optionally, before taking the service address of the terminal service as the source address and the virtual address as the destination address, encapsulating the service request based on the virtual extended LAN protocol to obtain the first traffic packet, the method also includes: performing source address conversion on the source address of the forwarded traffic packet through the terminal node, wherein the terminal node is also used to convert the source address from the target customer address to the service address; performing destination address conversion on the destination address of the forwarded traffic packet through the terminal node, wherein the terminal node is also used to convert the destination address from the second platform address to the virtual address.

[0020] Optionally, based on the virtual address, sending the first traffic packet to the target server includes: based on the virtual address, sending the first traffic packet to an elastic load balancing device, wherein the elastic load balancing device is used to perform load balancing on multiple target servers, selecting one of the multiple target servers as a response server to respond to the service request, and the elastic load balancing device is connected to the client through the virtual address and to the server through the real address; decapsulating the first traffic packet based on the virtual extended LAN protocol by the elastic load balancing device to obtain the service request; using the real address of the elastic load balancing device as the source address and the response address of the response server as the destination address, encapsulating the service request based on the virtual extended LAN protocol to obtain a second traffic packet; sending the first traffic packet to the response server based on the response address, wherein the response server is used to decapsulate the second traffic packet based on the virtual extended LAN protocol to obtain the service request, and respond to the service request to generate the response data packet.

[0021] Optionally, before taking the real address of the elastic load balancing device as the source address, taking the response address of the responding server as the destination address, and encapsulating the service request based on the virtual extended LAN protocol to obtain the second traffic packet, the method also includes: performing source address conversion on the source address of the first traffic packet through the elastic load balancing device, wherein the elastic load balancing device is also used to convert the source address from the service address to the real address; performing destination address conversion on the destination address of the first traffic packet through the elastic load balancing device, wherein the elastic load balancing device is also used to convert the destination address from the virtual address to the response address.

[0022] Optionally, sending the response data packet to the client includes: pre-configuring a terminal node for the target platform in a virtual private cloud, decapsulating a first data packet provided by the target server based on a virtual extended local area network protocol, and obtaining response data generated by the target server in response to the service request, wherein the virtual private cloud also includes: a terminal service connected to the terminal node, the terminal service being used to receive the response data packet provided by the target server and transmit the response data packet to the terminal node, the first data packet being: the response data encapsulated based on the virtual extended local area network protocol and taking the virtual address of the target server as the source address and the service address of the terminal service as the destination address; selecting a target customer address corresponding to the service request for generating the response data from among a plurality of preset customer addresses recorded in a preset session table, wherein the preset session table record is used to record a plurality of the preset customer addresses and service requests respectively initiated by a client corresponding to each of the customer addresses; taking the second platform address of the terminal node as the source address and the target customer address as the destination address, encapsulating the response data based on the virtual extended local area network protocol to obtain the response data packet; and sending the response data packet to the client based on the target customer address.

[0023] Optionally, before taking the second platform address of the terminal node as the source address and the target customer address as the destination address, and encapsulating the response data based on the virtual extended LAN protocol to obtain the response data packet, the method also includes: performing source address conversion on the source address of the first data packet through the terminal node, wherein the terminal node is also used to convert the source address from the virtual address to the second platform address; performing destination address conversion on the destination address of the first data packet through the terminal node, wherein the terminal node is also used to convert the destination address from the service address to the target customer address.

[0024] Optionally, before pre-configuring a terminal node for the target platform in a virtual private cloud, unpacking the first data packet provided by the target server based on the virtual extended LAN protocol, and obtaining the response data generated by the target server in response to the service request, the method also includes: unpacking the received second data packet based on the virtual extended LAN protocol through an elastic load balancing device to obtain the response data, wherein the elastic load balancing device is used to load balance multiple target servers, select one of the multiple target servers as a response server to respond to the service request, and forward the second data packet returned by the response server to the client, the elastic load balancing device is connected to the client through a virtual address, and to the server through a real address, and the second data packet is: the response address of the response server is the source address, the real address is the destination address, and the response data is encapsulated based on the virtual extended LAN protocol; the virtual address is used as the source address, the service address is used as the destination address, and the response data is encapsulated based on the virtual extended LAN protocol to obtain the first data packet.

[0025] Optionally, before obtaining the first data packet by using the virtual address as the source address, the service address as the destination address, and the response data encapsulated based on the virtual extended LAN protocol, the method also includes: performing source address conversion on the source address of the second data packet through the elastic load balancing device, wherein the elastic load balancing device is also used to convert the source address from the response address to the virtual address; performing destination address conversion on the destination address of the second data packet through the elastic load balancing device, wherein the elastic load balancing device is also used to convert the destination address from the real address to the service address.

[0026] According to another aspect of an embodiment of the present invention, a transmission device for a service request is also provided, comprising: a monitoring module, configured to monitor the working status of a firewall of a source platform, wherein the working status at least includes: an on status, wherein the on status indicates that the service pre-configured on the source platform is being migrated to a target platform; an operation module, configured to enable the source platform to run preset rules when the firewall is in the on status, wherein the preset rules are used to instruct that the traffic received by the source platform is forwarded to the target platform; a monitoring module, configured to monitor the service request received by the source platform when the source platform runs the preset rules, wherein the service request is traffic initiated by a client, and is used to request that the target service pre-configured in the source platform be provided to the client; a forwarding module, configured to forward the service request to the target platform before the source platform provides a service based on the service request, wherein the target platform at least includes: the target service transferred from the source platform.

[0027] According to another aspect of an embodiment of the present invention, a transmission device for a service request is also provided, including: a receiving module, used to receive a forwarding traffic packet forwarded by a source platform through a target platform, wherein the forwarding traffic packet at least includes: a service request initiated by a client, the service request is used to request that a target service pre-configured in the source platform be provided to the client, and the target platform provides services transferred from the source platform through multiple service terminals, and the multiple service terminals at least include: a target server that provides the target service; a first sending module, used to send the service request in the forwarding traffic packet to the target server, wherein the target server is used to respond to the service request and generate a response data packet based on the target service; a second sending module, used to send the response data packet to the client.

[0028] According to another aspect of an embodiment of the present invention, there is further provided an electronic device, including a memory and a processor, wherein the memory stores a computer program, and the processor is configured to execute the method for transmitting the service request through the computer program.

[0029] According to another aspect of an embodiment of the present invention, a computer program product is provided, comprising computer instructions, and when the computer instructions are executed by a processor, the steps of the method for transmitting a service request are implemented.

[0030] In an embodiment of the present invention, the working state of the firewall of the source platform is monitored, wherein the working state at least includes: an open state, wherein the open state indicates that the service pre-configured by the source platform is being migrated to the target platform; when the firewall is in the open state, the source platform runs a preset rule, wherein the preset rule is used to instruct that the traffic received by the source platform is forwarded to the target platform; when the source platform runs the preset rule, the service request received by the source platform is monitored, wherein the service request is traffic initiated by the client, and is used to request that the target service pre-configured in the source platform be provided to the client; before the source platform provides a service based on the service request, the service request is forwarded to the target platform, wherein the target platform at least includes: the target service transferred from the source platform, so that when the source platform is cloud migrated to the target platform, the traffic received by the source platform can be forwarded to the target platform through the firewall of the source platform, and the source platform will not respond to the service request in the traffic, ensuring that in the case of cloud migration, the target platform that has received the migration service responds to the service request, thereby achieving the technical effect of ensuring that the service is not interrupted in the case of cloud migration, thereby solving the technical problem that the service cannot be ensured to be uninterrupted in the case of cloud migration. BRIEF DESCRIPTION OF THE DRAWINGS

[0031] The drawings described herein are used to provide a further understanding of the present invention and constitute a part of this application. The exemplary embodiments of the present invention and their descriptions are used to explain the present invention and do not constitute an improper limitation of the present invention. In the drawings:

[0032] Figure 1 is a schematic diagram of a cloud migration solution according to the prior art;

[0033] Figure 2 It is a schematic diagram of an IP after cloud migration according to the prior art;

[0034] Figure 3 The following is a flow chart of a method for transmitting a service request according to an embodiment of the present invention. Figure 1 ;

[0035] Figure 4 is a schematic diagram of cloud migration according to an embodiment of the present invention;

[0036] Figure 5 is a schematic diagram of traffic forwarding from a source platform to a target platform according to an embodiment of the present invention;

[0037] Figure 6 The following is a flow chart of a method for transmitting a service request according to an embodiment of the present invention. Figure 2 ;

[0038] Figure 7 is a schematic diagram of a downlink traffic trend according to an embodiment of the present invention;

[0039] Figure 8 is a schematic diagram of an upstream traffic flow according to an embodiment of the present invention;

[0040] Fig. 9 is a schematic diagram of a source platform according to an embodiment of the present invention;

[0041] Fig.10 is a schematic diagram of modifying a test homepage source code identifier according to an embodiment of the present invention;

[0042] Fig.11 is a schematic diagram of a cloud platform according to an embodiment of the present invention;

[0043] Fig.12 is a schematic diagram of a virtual private cloud according to an embodiment of the present invention;

[0044] Fig.13 is a schematic diagram of deploying a VPC terminal service according to an embodiment of the present invention;

[0045] Fig.14 is a schematic diagram of configuring a VPC terminal service according to an embodiment of the present invention;

[0046] Fig.15 is a schematic diagram of deploying a VPC terminal node according to an embodiment of the present invention;

[0047] Fig.16 is a schematic diagram of configuring a VPC terminal node and a VPC terminal service according to an embodiment of the present invention;

[0048] Fig.17 A schematic diagram of a network verification according to an embodiment of the present invention Figure 1 ;

[0049] Fig.18 A schematic diagram of a network verification according to an embodiment of the present invention Figure 2 ;

[0050] Fig.19 is a schematic diagram of a service verification according to an embodiment of the present invention;

[0051] Fig. 20 is a schematic diagram of a firewall of a startup source platform according to an embodiment of the present invention;

[0052] Fig.21 is a schematic diagram of traffic forwarding according to an embodiment of the present invention, such as Fig.21 As shown in the figure, the traffic directly reaches the target platform on the cloud (modify the source code of the web page to identify the host on the test cloud), and the user and the original business architecture are unaware of it.

[0053] Fig. 22is a schematic diagram of cloud migration according to an embodiment of the present invention;

[0054] Fig.23 is a schematic diagram of a cloud migration process according to an embodiment of the present invention;

[0055] Fig.24 A schematic diagram of a transmission device for a service request according to an embodiment of the present invention Figure 1 ;

[0056] Fig.25 A schematic diagram of a transmission device for a service request according to an embodiment of the present invention Figure 2 ;

[0057] Fig.26 It is a structural block diagram of a computer terminal according to an embodiment of the present invention. DETAILED DESCRIPTION

[0058] In order to enable those skilled in the art to better understand the scheme of the present invention, the technical scheme in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work should fall within the scope of protection of the present invention.

[0059] It should be noted that the terms "first", "second", etc. in the specification and claims of the present invention and the above-mentioned drawings are used to distinguish similar objects, and are not necessarily used to describe a specific order or sequence. It should be understood that the data used in this way can be interchanged where appropriate, so that the embodiments of the present invention described herein can be implemented in an order other than those illustrated or described herein. In addition, the terms "including" and "having" and any variations thereof are intended to cover non-exclusive inclusions, for example, a process, method, system, product or device that includes a series of steps or units is not necessarily limited to those steps or units that are clearly listed, but may include other steps or units that are not clearly listed or inherent to these processes, methods, products or devices.

[0060] According to an embodiment of the present invention, an embodiment of a method for transmitting a service request is provided. It should be noted that the steps shown in the flowchart of the accompanying drawings can be executed in a computer system such as a set of computer executable instructions, and although a logical order is shown in the flowchart, in some cases, the steps shown or described can be executed in an order different from that shown here.

[0061] Figure 3 The following is a flow chart of a method for transmitting a service request according to an embodiment of the present invention. Figure 1 ,like Figure 3 As shown, the method comprises the following steps:

[0062] Step S302, monitoring the working status of the firewall of the source platform, wherein the working status at least includes: an open state, which indicates that the services pre-configured on the source platform are being migrated to the target platform;

[0063] Step S304, when the firewall is in an open state, the source platform runs a preset rule, wherein the preset rule is used to instruct to forward the traffic received by the source platform to the target platform;

[0064] Step S306, when the source platform runs the preset rules, monitoring the service requests received by the source platform, wherein the service request is traffic initiated by the client, and is used to request to provide the client with the target service pre-configured in the source platform;

[0065] Step S308: before the source platform provides a service based on the service request, the service request is forwarded to the target platform, wherein the target platform at least includes: a target service transferred from the source platform.

[0066] In an embodiment of the present invention, the working state of the firewall of the source platform is monitored, wherein the working state at least includes: an open state, wherein the open state indicates that the service pre-configured by the source platform is being migrated to the target platform; when the firewall is in the open state, the source platform runs a preset rule, wherein the preset rule is used to instruct that the traffic received by the source platform is forwarded to the target platform; when the source platform runs the preset rule, the service request received by the source platform is monitored, wherein the service request is traffic initiated by the client, and is used to request that the target service pre-configured in the source platform be provided to the client; before the source platform provides a service based on the service request, the service request is forwarded to the target platform, wherein the target platform at least includes: the target service transferred from the source platform, so that when the source platform is cloud migrated to the target platform, the traffic received by the source platform can be forwarded to the target platform through the firewall of the source platform, and the source platform will not respond to the service request in the traffic, ensuring that in the case of cloud migration, the target platform that has received the migration service responds to the service request, thereby achieving the technical effect of ensuring that the service is not interrupted in the case of cloud migration, thereby solving the technical problem that the service cannot be ensured to be uninterrupted in the case of cloud migration.

[0067] In the above step S302, the source platform can be a device that uses a local server to provide services. Multiple preset services can be pre-configured inside the source platform. After receiving a service request from a user, the source platform can select a target service indicated by the service request from multiple preset services to respond; the source platform can also migrate its own pre-configured multiple preset services to a target platform provided by a server on the cloud, and during the migration stage, the service requests received by the source platform can be forwarded to the target platform on the cloud, and the target platform can respond.

[0068] In the above step S302, the source platform may be a local server pre-configured with preset services, and the process of transferring the preset services configured in the source platform to the target platform is called cloud migration. In the above step S302, the target platform may be a cloud platform, such as deployed in a virtual private cloud.

[0069] Figure 4 is a schematic diagram of a cloud migration according to an embodiment of the present invention, such as Figure 4 As shown, the source platform (also known as the source environment) transmits the preset services in the source platform (also known as the source environment) to the cloud environment (also known as the target platform) through a dedicated network (also known as a cloud dedicated line) to realize cloud migration of services.

[0070] It should be noted that in the cloud dedicated line part, since it has its own business model and regulatory constraints, it still follows the original model to allocate two non-duplicate IP addresses when connecting the user source platform and the cloud VPC (that is, the target platform).

[0071] It should be noted that in the user's source platform, in the initial state of the user and after the source platform completes the migration, based on the user's original state, the user will temporarily still access the service through the source platform. At this time, the target cloud platform (that is, the target platform) actually provides services. Therefore, the source platform needs to provide port forwarding for business traffic and forward the business traffic to the cloud IP (VPC1's IP, that is, the target platform's IP).

[0072] It should be noted that, for the target platform on the cloud (also known as the target platform), the IP address on the target platform on the cloud is configured to be consistent with the source platform to ensure maximum compatibility, thereby ensuring that the user's original hard-coded configuration is not affected.

[0073] Optionally, a VPC terminal node service solution is used on the cloud platform (i.e., the target platform) to implement this function through cross-VPC mapping. The required ports are mapped to service ports on demand, which not only implements the function but also hides the real information of the cloud host, shields non-critical ports, and improves security.

[0074] In the above step S304, the preset rule can be implemented by adding a masquerade rule on the source platform. For example, if the original platform uses Linux, a masquerade rule is added on the system using firewalld (a dynamic firewall management tool for Linux), and the masquerade rule is permanent, which means that even if the system is restarted, the rule will be retained.

[0075] Optionally, the preset rules can be configured as follows:

[0076] Step S1, configure the following port forwarding command on the source platform: "firewall-cmd--add-masquerade-permanent" This command is used to add a masquerade rule on a system using firewalld (a dynamic firewall management tool for Linux), and this rule is permanent; that is, even if the system is restarted, this rule will be retained.

[0077] Step S2, configure and implement IP masquerade command:

[0078] "firewall-cmd --add-forward-port=port=81:proto=tcp:toport=81:toaddr=10.0.0.4-permanent", this command indicates: forward the TCP protocol traffic (such as service requests) arriving at port 81 of the local machine to port 81 of the device with IP address 10.0.0.4 (that is, the IP address of the target platform), and this rule is permanent, that is, it remains valid after restart.

[0079] Step S3, forwards the traffic (such as service requests) that originally accessed port 81 of the source platform to port 81 of the remote host with IP address 10.0.0.4 (that is, the target platform), and combines the VPC terminal node service to provide forwarding capabilities without changing the IP address and interrupting the business.

[0080] As an optional example, the source platform may use NAT technology to forward the service request originally sent to the source platform to the target platform.

[0081] It should be noted that NAT (Network Address Translation) refers to network address translation, which is a technology used to use private addresses in local networks and switch to global IP addresses when connecting to the Internet. It aims to convert IP addresses by mapping an external IP address and port to a larger set of internal IP addresses. Basically, NAT uses a traffic table to route traffic from an external (host) IP address and port number to the correct internal IP address associated with an endpoint on the network.

[0082] Figure 5 FIG. 1 is a schematic diagram of a source platform forwarding traffic to a target platform according to an embodiment of the present invention. Figure 5 As shown, the source platform can use the Linux platform. Due to the characteristics of the netfilter module of the Linux kernel, the priority of NAT is higher than that of input. Therefore, the source platform does not need to stop the original service to complete traffic forwarding.

[0083] As an optional embodiment, the method also includes: obtaining a first platform address of the source platform and a second platform address of the target platform; configuring preset rules using the first platform address and the second platform address, wherein the preset rules are used to disguise the first platform address and forward the traffic sent to the first platform address to the second platform address.

[0084] In the above-mentioned embodiment of the present application, the preset rules are configured based on the first platform address of the source platform and the second platform address of the target platform. Based on the preset rules, the second platform address of the target platform can be disguised as the first platform address of the source platform, thereby forwarding the traffic (such as service requests) sent to the source platform to the target platform, thereby realizing the forwarding of the service request.

[0085] As an optional embodiment, before the source platform provides service based on the service request, forwarding the service request to the target platform includes: before the source platform provides service based on the service request, obtaining the target client address of the client that initiates the service request; using the target client address as the source address and the second platform address of the target platform as the destination address, encapsulating the service request based on the virtual extended LAN protocol to obtain a forwarding traffic packet; and sending the forwarding traffic packet to the target platform.

[0086] It should be noted that the virtual extended LAN is VXLAN, which is a network virtualization technology that can improve the expansion problem of large-scale cloud computing during deployment and is an extension of VLAN. VXLAN is a powerful tool that can penetrate the third-layer network to extend the second layer. It can solve the portability limitations of VMS (virtual memory system) by encapsulating traffic and extending it to the third-layer gateway, making it possible to access servers on external IP subnets.

[0087] In the above-mentioned embodiment of the present application, when forwarding a service request from a source platform to a target platform, the service request can be encapsulated using a virtual extended LAN protocol, so that the encapsulated forwarding traffic packet carries the destination address of the target platform and the target client address of the client that issued the service request, so that when the cloud platform responds to the service request, it can know the object that responds to the service request, and the response result can be sent to the client that issued the service request.

[0088] The above embodiments of the present application combine relevant technologies such as VPCE, NAT, VXLAN, etc., and integrate them at the underlying technical level. Users are unaware of the overlay network. At the same time, due to the natural technical isolation of VPCE and VXLAN, the security and privacy of user traffic are ensured.

[0089] Figure 6 The following is a flow chart of a method for transmitting a service request according to an embodiment of the present invention. Figure 2 ,like Figure 6 As shown, the method comprises the following steps:

[0090] Step S602, receiving a forwarding traffic packet forwarded by the source platform through the target platform, wherein the forwarding traffic packet at least includes: a service request initiated by the client, the service request is used to request to provide the client with a target service pre-configured in the source platform, and the target platform provides the service transferred from the source platform through multiple service terminals, and the multiple service terminals at least include: a target service terminal that provides the target service;

[0091] Step S604, sending the service request in the forwarded traffic packet to the target server, wherein the target server is used to respond to the service request and generate a response data packet based on the target service;

[0092] Step S606: Send the response data packet to the client.

[0093] In an embodiment of the present invention, the working state of the firewall of the source platform is monitored, wherein the working state at least includes: an open state, wherein the open state indicates that the service pre-configured by the source platform is being migrated to the target platform; when the firewall is in the open state, the source platform runs a preset rule, wherein the preset rule is used to instruct that the traffic received by the source platform is forwarded to the target platform; when the source platform runs the preset rule, the service request received by the source platform is monitored, wherein the service request is traffic initiated by the client, and is used to request that the target service pre-configured in the source platform be provided to the client; before the source platform provides a service based on the service request, the service request is forwarded to the target platform, wherein the target platform at least includes: the target service transferred from the source platform, so that when the source platform is cloud migrated to the target platform, the traffic received by the source platform can be forwarded to the target platform through the firewall of the source platform, and the source platform will not respond to the service request in the traffic, ensuring that in the case of cloud migration, the target platform that has received the migration service responds to the service request, thereby achieving the technical effect of ensuring that the service is not interrupted in the case of cloud migration, thereby solving the technical problem that the service cannot be ensured to be uninterrupted in the case of cloud migration.

[0094] In the above step S602, the client may be a terminal that initiates a service request, such as a smart terminal such as a mobile phone or a computer, or an application installed on the terminal, such as an APP.

[0095] In the above step S602, the target platform can be configured with multiple cloud servers, each of which can serve as a server. Then, the target platform can use multiple cloud servers to store and respond to preset services, achieve service load balancing, and improve the response efficiency and response quantity of the target platform to service requests.

[0096] In the above step S602, the target platform may be deployed in a virtual private cloud, and the virtual private cloud may use VPCE technology.

[0097] It should be noted that VPC endpoint (VPCE) is a network networking method used to achieve efficient cross-VPC communication within a virtual private cloud (VPC) without using elastic public IP addresses.

[0098] As an optional embodiment, sending a service request to a target server includes: unpacking a forwarded traffic packet based on a virtual extended local area network protocol through a terminal node pre-configured for a target platform in a virtual private cloud to obtain a service request, wherein the terminal node is used to receive traffic forwarded by a source platform and transmit the received traffic to a terminal service connected to the terminal node, and the forwarded traffic packet is: a service request encapsulated based on the virtual extended local area network protocol and having a target customer address of the client as a source address and a second platform address of the terminal node as a destination address; searching for a virtual address corresponding to a target service among a plurality of preset virtual addresses recorded in a service mapping relationship table, wherein the service mapping relationship table pre-records a plurality of preset services and a preset virtual address corresponding to each preset service, and the preset virtual address is an interface of a server providing a preset service; using the service address of the terminal service as a source address and the virtual address as a destination address, encapsulating the service request based on the virtual extended local area network protocol to obtain a first traffic packet; sending the first traffic packet to a target server based on the virtual address, wherein the target server is also used to unpack the first traffic packet based on the virtual extended local area network protocol to obtain a service request.

[0099] In the above-mentioned embodiment of the present application, a terminal node can be deployed in a virtual private cloud in the target platform, and the terminal node receives the forwarding traffic packet provided by the source platform, and transmits the forwarding traffic packet to the terminal service (such as VPC-main) corresponding to the terminal node (such as VPC-transfer) to unseal it, obtain the service request encapsulated in the forwarding traffic packet, and record the source address (i.e., the target customer address) and the destination address (i.e., the second platform address) in the forwarding traffic packet, and then in the preset service mapping relationship table, find the target service pointed to by the destination address (i.e., the second platform address), and determine the virtual address of the target service, and then use the service address of the terminal service as the source service. The service request is encapsulated with the virtual address of the target service, so that the encapsulated first traffic packet can be sent to the target server providing the target service according to the virtual address, and after receiving the first traffic packet, the target server can unpack the first traffic packet, so that the target server can respond to the service request encapsulated in the first traffic packet. Since the service request forwarded to the target server providing the target service is based on the virtual address of the target server, the communication security of the target server is further ensured, and in the process of IP address cutover between the target platform and the source platform, the server in the target platform can also transmit traffic based on the virtual address to ensure uninterrupted service.

[0100] As an optional embodiment, before taking the service address of the terminal service as the source address and the virtual address as the destination address, encapsulating the service request based on the virtual extended LAN protocol to obtain the first traffic packet, the method also includes: performing source address conversion on the source address of the forwarded traffic packet through the terminal node, wherein the terminal node is also used to convert the source address from the target customer address to the service address; performing destination address conversion on the destination address of the forwarded traffic packet through the terminal node, wherein the terminal node is also used to convert the destination address from the second platform address to the virtual address.

[0101] In the above-mentioned embodiment of the present application, after the terminal node receives a service request, before forwarding the service request to the target server, it can perform address conversion on the forwarded traffic packet, convert the source address from the target customer address to the service address, and convert the destination address from the second platform address to the virtual address, thereby obtaining a first traffic packet that can be sent to the target server.

[0102] As an optional embodiment, sending a first traffic packet to a target server based on a virtual address includes: sending a first traffic packet to an elastic load balancing device based on the virtual address, wherein the elastic load balancing device is used to perform load balancing on multiple target servers, selecting one of the multiple target servers as a response server to respond to a service request, and the elastic load balancing device is connected to the client through the virtual address and to the server through the real address; decapsulating the first traffic packet based on a virtual extended LAN protocol by the elastic load balancing device to obtain a service request; using the real address of the elastic load balancing device as the source address and the response address of the response server as the destination address, encapsulating the service request based on the virtual extended LAN protocol to obtain a second traffic packet; sending the first traffic packet to the response server based on the response address, wherein the response server is used to decapsulate the second traffic packet based on the virtual extended LAN protocol to obtain a service request, and respond to the service request to generate a response data packet.

[0103] In the above-mentioned embodiments of the present application, in order to improve the response efficiency to service requests, the same service can be deployed in multiple server terminals, and then when forwarding the service request to the target server terminal, the first traffic packet can be received by the elastic load balancing device ELB, and the elastic load balancing device ELB unpacks the received first traffic packet, and selects the response server terminal that can respond to the current service request from the multiple target server terminals that provide the target service according to the purpose of load balancing, thereby achieving the purpose of sending the service request to the response server terminal that can respond the fastest, and realizing a quick response to the service request.

[0104] As an optional embodiment, before taking the real address of the elastic load balancing device as the source address and the response address of the responding server as the destination address, and encapsulating the service request based on the virtual extended LAN protocol to obtain the second traffic packet, the method also includes: performing source address conversion on the source address of the first traffic packet through the elastic load balancing device, wherein the elastic load balancing device is also used to convert the source address from the service address to the real address; performing destination address conversion on the destination address of the first traffic packet through the elastic load balancing device, wherein the elastic load balancing device is also used to convert the destination address from the virtual address to the response address.

[0105] In the above-mentioned embodiment of the present application, when using an elastic load balancing device to forward a service request to a response server, the elastic load balancing device can perform address translation on the first traffic packet, convert the source address from the service address to the real address, and convert the destination address from the virtual address to the response address, thereby obtaining a second traffic packet that can be sent to the response server.

[0106] As an optional embodiment, sending a response data packet to a client includes: pre-configuring a terminal node for a target platform in a virtual private cloud, decapsulating a first data packet provided by a target server based on a virtual extended local area network protocol, and obtaining response data generated by the target server in response to a service request, wherein the virtual private cloud also includes: a terminal service connected to the terminal node, the terminal service being used to receive a response data packet provided by the target server, and transmitting the response data packet to the terminal node, the first data packet being: a response data encapsulated based on the virtual extended local area network protocol and taking a virtual address of the target server as a source address and a service address of the terminal service as a destination address; selecting a target customer address corresponding to a service request for generating response data from among a plurality of preset customer addresses recorded in a preset session table, wherein the preset session table record is used to record a plurality of preset customer addresses and service requests respectively initiated by a client corresponding to each customer address; taking a second platform address of the terminal node as a source address and a target customer address as a destination address, encapsulating the response data based on the virtual extended local area network protocol, and obtaining a response data packet; and sending a response data packet to the client based on the target customer address.

[0107] In the above-mentioned embodiment of the present application, after the target server responds to the service request, a first data packet can be generated, and the first data packet carries the response data generated by the target server, as well as the virtual address of the target server and the service address of the terminal service. Then, the terminal service pre-configured in the virtual private cloud transmits the unsealed response data to the terminal node after unsealing the first data packet. Then, the terminal node can query the sending object of the service request corresponding to the response data in the preset session table record, that is, determine the target customer address of the client that issued the service request, and use the second platform address of the terminal node as the source address, and use the target customer address as the destination address. Based on the virtual extended LAN protocol, the response data is encapsulated to obtain a response data packet that can be sent to the client. Since the target server uses the virtual address of the target server as the source address in the first data packet providing the response data, the communication security of the target server is further ensured, and in the process of IP address cutover between the target platform and the source platform, the server in the target platform can also transmit traffic based on the virtual address to ensure uninterrupted service.

[0108] As an optional embodiment, before taking the second platform address of the terminal node as the source address and the target customer address as the destination address, encapsulating the response data based on the virtual extended LAN protocol to obtain a response data packet, the method also includes: performing source address conversion on the source address of the first data packet through the terminal node, wherein the terminal node is also used to convert the source address from the virtual address to the second platform address; performing destination address conversion on the destination address of the first data packet through the terminal node, wherein the terminal node is also used to convert the destination address from the service address to the target customer address.

[0109] In the above-mentioned embodiment of the present application, after the terminal node receives the response data and before forwarding the response data to the client, the address conversion can be performed on the first data packet, the source address can be converted from the virtual address to the second platform address, and the destination address can be converted from the service address to the target customer address, so as to obtain a response data packet that can be sent to the client.

[0110] As an optional embodiment, before pre-configuring a terminal node for the target platform in a virtual private cloud, unpacking the first data packet provided by the target server based on the virtual extended LAN protocol, and obtaining response data generated by the target server in response to the service request, the method also includes: unpacking the received second data packet based on the virtual extended LAN protocol by an elastic load balancing device to obtain response data, wherein the elastic load balancing device is used to load balance multiple target servers, select one of the multiple target servers as a response server to respond to the service request, and forward the second data packet returned by the response server to the client, the elastic load balancing device connects to the client through a virtual address, and connects to the server through a real address, and the second data packet is: using the response address of the response server as the source address, the real address as the destination address, and encapsulating the response data based on the virtual extended LAN protocol; using the virtual address as the source address, the service address as the destination address, and encapsulating the response data based on the virtual extended LAN protocol to obtain the first data packet.

[0111] In the above-mentioned embodiment of the present application, the elastic load balancing device can also receive a second data packet returned by the target server in response to the service request based on sending a service request to the target server according to the load balancing strategy. Since the second data packet uses the response address of the responding server as the source address and the real address of the elastic load balancing device as the destination address to encapsulate the response data, the response data returned by the target server can be obtained by unpacking the second data packet. Then the elastic load balancing device can use the virtual address of the elastic load balancing device as the source address and the service address as the destination address, and re-encapsulate the response data based on the virtual extended LAN protocol to obtain a first data packet that can be sent to the client. Since the first data packet is encapsulated with the real address of the elastic load balancing device, it can ensure that the elastic load balancing device and the server in the target platform perform reliable data transmission based on the real address. Since the first data packet is encapsulated with the virtual address of the elastic load balancing device, the client and the elastic load balancing device perform data transmission based on the virtual address, thereby ensuring the network security of the elastic load balancing device. In the process of IP address cutover between the target platform and the source platform, the server in the target platform can also transmit traffic based on the virtual address to ensure uninterrupted service.

[0112] As an optional embodiment, before obtaining the first data packet by using the virtual address as the source address, the service address as the destination address, and the response data encapsulated based on the virtual extended LAN protocol, the method also includes: performing source address conversion on the source address of the second data packet through an elastic load balancing device, wherein the elastic load balancing device is also used to convert the source address from the response address to the virtual address; performing destination address conversion on the destination address of the second data packet through the elastic load balancing device, wherein the elastic load balancing device is also used to convert the destination address from the real address to the service address.

[0113] In the above-mentioned embodiment of the present application, before the elastic load balancing device transmits response data to the client, address conversion can be performed on the second data packet, the source address can be converted from the response address to the virtual address, and the destination address can be converted from the real address to the service address, so as to obtain the first data packet that can be sent to the client.

[0114] The present invention also provides an optional embodiment, which provides a method for keeping the IP address unchanged and the service uninterrupted during the cloud migration process in a cloud computing / cloud resource pool scenario. This method is implemented by adopting rich rules on the user source platform side, so that the service traffic port of the cloud dedicated line is forwarded to the cloud platform; on the cloud platform side, through the terminal node service function of the virtual private cloud VPC, the IP addresses on and off the cloud remain unchanged, and the three-party mutual access between the cloud platform, the cloud migration node console, and the source platform off the cloud is achieved, so as to comprehensively solve the needs and pain points raised by users in cloud migration, keep the IP address unchanged, and not interrupt the service. In addition, this method can achieve rapid service recovery, seamless switching of the entire platform, etc., which is of great representative significance and forms a standard scenario-based solution.

[0115] Optionally, in the cloud dedicated line part, since it has its own business model and regulatory constraints, it still follows the original model to allocate two non-repetitive IP addresses when connecting the user source platform and the cloud VPC (also known as the virtual private cloud).

[0116] Optionally, in the user source platform part, after the source platform completes the migration, the user can temporarily access the service through the source platform based on the original status of the user, but at this time the service is actually provided by the target cloud platform, so the source platform is required to provide port forwarding for the service traffic and forward the service traffic to the cloud IP (i.e., the IP of VPC1).

[0117] Optionally, in the on-cloud target platform portion, the on-cloud target platform configuration is consistent with the source platform IP address to ensure maximum compatibility, thereby ensuring that the user's original hard-coded configuration is not affected.

[0118] As an optional example, on the cloud platform, the VPC terminal node service solution is used to implement this function through cross-VPC mapping. The required ports are mapped to service ports on demand, which not only implements the function but also hides the real information of the cloud host, shields non-critical ports, and improves security.

[0119] The technical solution provided in this application combines VPCE, NAT, VXLAN and other related technologies, and integrates them at the underlying technical level. Users are unaware of the overlay network (i.e., logical network). At the same time, due to the natural technical isolation of VPCE and VXLAN, the security and privacy of user traffic are ensured.

[0120] Figure 7 is a schematic diagram of a downlink traffic flow according to an embodiment of the present invention. Figure 7As shown in the figure, the customer VM accesses the VPCE (virtual private cloud service) terminal node IP, the source IP address is the VM address, the destination address is the terminal node address, and the traffic reaches the VPCE after being encapsulated by the host VXLAN (virtual extended local area network); the VPCE decapsulates the VXLAN, and according to the service mapping relationship table of the VPCE, the customer VM IP SNAT (source address translation) is converted to the IP of the VPCE terminal service, and the destination IP address is DNAT (destination address translation) from the VPCE terminal node IP to the front-end VIP address of the ELB (elastic load balancing) (the address used by the customer to access the service), encapsulates the VXLAN and records the session, and then sends it to XGW / 7 (the subdomain); after XWG / 7 decapsulates the VXLAN, according to the load balancing algorithm, the destination IP address of the data packet is DNATed from the VIP address to the local IP of a VM at the back end, and the source IP address is changed to the real IP of the LB (load balancing); after encapsulating the VXLAN, it is sent to the destination host, and after the host decapsulates the VXLAN, the data is delivered to the VM.

[0121] Figure 8 is a schematic diagram of an upstream traffic flow according to an embodiment of the present invention, such as Figure 8 As shown, the server VM outputs a data packet, the source IP is the IP of the server virtual machine, the destination IP is the real address of the ELB, and it is sent to XGW / 7 after being encapsulated by the host VXLAN; XGW / 7 decapsulates the VXLAN, changes the source IP from the local IP address of the server VM to the VIP address of the ELB through SNAT, and changes the destination IP from the real IP of the ELB to the IP of the VPCE terminal service, encapsulates the VXLAN, and sends it to VPCE; after decapsulating the VXLAN, VPCE changes the source IP address of the data packet from the VIP of the ELB to the IP of the VPCE terminal node according to the session table, and changes the destination IP address from the terminal node service IP address to the IP address of the customer VM, re-encapsulates the VXLAN, and sends it to the host where the customer VM is located. After the host decapsulates the VXLAN, the data is delivered to the customer VM.

[0122] Optionally, in the cloud migration console part, the cloud migration console part required by the cloud migration service provider is deployed normally, and the source and destination platforms are accessed normally through the cloud dedicated line and VPC terminal service.

[0123] It should be noted that the VPC terminal node consists of two resources: "terminal service (such as VPC-main)" and "terminal node (such as VPC-transfer)", and the two resources are created by the service provider and service user respectively.

[0124] Among them, terminal services: currently support user private services. Users can create their own applications on cloud servers in VPC and configure them as services supported by VPC endpoints.

[0125] Among them, the endpoint: provides a connection channel between the VPC and the endpoint service. Users can create their own applications on the cloud server in the VPC and configure them as endpoint services. Other VPCs in the same region can create endpoints in their own VPCs to obtain connections and communicate with the endpoint service.

[0126] Optionally, in the cloud migration console part, the cloud migration console part required by the cloud migration service provider is deployed normally, and the source and destination platforms are accessed normally through the cloud dedicated line and VPC terminal service.

[0127] As an optional implementation method, in the cloud dedicated line part, as a standard product, you can apply for the cloud dedicated line normally and allocate two non-duplicate IP addresses in the user source platform and the cloud VPC according to the original mode. Ensure that the three-layer IP addresses of the user source platform and the cloud platform are reachable and can access each other.

[0128] For example, based on the Shanghai IP metropolitan area network capabilities, Shanghai Telecom provides customers with diverse, stable and reliable Tianyi Cloud dedicated line access capabilities, including IPRAN access, MPLS VPN access, PON VPN access, etc. It has currently completed adaptation with Tianyi Cloud Shanghai 4, Shanghai 7, Shanghai 32, Shanghai 33, Shanghai 36 and other resource pools, achieving convenient and fast activation.

[0129] Fig. 9 is a schematic diagram of a source platform according to an embodiment of the present invention, such as Fig. 9 As shown, it can be determined that the public IP address of the source platform (such as the first platform address) is 114.80.36.177.

[0130] Fig.10 is a schematic diagram of modifying a test homepage source code identifier according to an embodiment of the present invention, such as Fig.10 As shown, on the source platform side, confirm that the user source platform can provide services normally. By modifying the test homepage source code identifier and obtaining the IP address, it can be seen that the intranet IP address of the user source platform is 192.168.26.140.

[0131] Optionally, configure port forwarding on the test host of the source platform as follows: "firewall-cmd--add-masquerade-permanent"; configure the code for implementing IP masquerading: "firewall-cmd--add-forward-port=port=81:proto=tcp:toport=81:toaddr=10.0.0.4-permanent" to forward the traffic originally accessing port 81 of the source platform to port 81 of the remote host with IP address 10.0.0.4. Combined with the VPC endpoint service, it provides forwarding capabilities without changing the IP address and interrupting services.

[0132] Fig.11 is a schematic diagram of a cloud platform according to an embodiment of the present invention, such as Fig.11 As shown, on the cloud platform side, the target platform cloud host cloud and the migration service cloud platform controller are opened in the terminal service VPC (VPC-main) and the terminal node VPC (VPC-transfer). The IPv4-based intranet address of the target platform cloud host cloud is 192.168.26.140, and the public network address is 114.80.36.126; the IPv4-based intranet address of the migration service cloud platform controller is 10.0.0.22, and the public network address is 114.80.36.178.

[0133] Fig.12 is a schematic diagram of a virtual private cloud according to an embodiment of the present invention, such as Fig.12 As shown, the virtual private cloud can monitor the status of VPC-main and VPC-transfer.

[0134] Fig.13 is a schematic diagram of deploying a VPC terminal service according to an embodiment of the present invention, such as Fig.13 As shown in the figure, the name / ID of the deployed VPC endpoint service is "vpce-serverc719 endpser-iot3ksivly".

[0135] Fig.14 is a schematic diagram of configuring a VPC terminal service according to an embodiment of the present invention, such as Fig.14 As shown in the figure, configure the corresponding connection management, port mapping, and backend resources of the VPC terminal service one by one.

[0136] Fig.15 is a schematic diagram of deploying a VPC terminal node according to an embodiment of the present invention, such as Fig.15As shown in the figure, the name / ID of the deployed VPC endpoint is "VPCE-b13 cf8c490e-bbf-429a-9b5d-39a284eb3d6e", and the name / service ID of the corresponding VPC endpoint service is "vpce-serverc719 endpser-iot3ksivly".

[0137] Fig.16 is a schematic diagram of configuring a VPC terminal node and a VPC terminal service according to an embodiment of the present invention, such as Fig.16 As shown in the figure, for the VPC terminal node with ID "cf8c490e-bbf-429a-9b5d-39a284eb3d6e", the corresponding VPC terminal service ID is configured as "endpser-iot3ksivly", and the node IP of the VPC terminal service is obtained as "10.0.0.4".

[0138] Fig.17 A schematic diagram of a network verification according to an embodiment of the present invention Figure 1 ,like Fig.17 As shown, the cloud migration service control platform can access the source and target platforms at the same time.

[0139] Fig.18 A schematic diagram of a network verification according to an embodiment of the present invention Figure 2 ,like Fig.18 As shown, the source platform and the target platform can directly access each other.

[0140] Alternatively, if Fig.17 and 18 As shown, the migration control server, source platform, and target platform can directly access each other. At this point, the migration capability with unchanged IP address is available.

[0141] Fig.19 is a schematic diagram of a service verification according to an embodiment of the present invention, such as Fig.19 As shown, in the initial state, the access source platform IP: 114.80.36.177 can be accessed normally (modify the web page source code to identify the source platform test host).

[0142] Fig. 20 is a schematic diagram of a firewall of a startup source platform according to an embodiment of the present invention, such as Fig. 20 As shown in the figure, after the firewall is started, the firewall rules take effect and automatically forward the traffic to the target platform on the cloud.

[0143] It should be noted that due to the characteristics of the netfilter module of the Linux kernel, NAT has a higher priority than input. At this time, the source platform does not need to stop the original service to complete traffic forwarding.

[0144] Fig.21 is a schematic diagram of traffic forwarding according to an embodiment of the present invention, such as Fig.21 As shown in the figure, the traffic directly reaches the target platform on the cloud (modify the source code of the web page to identify the host on the test cloud), and the user and the original business architecture are unaware of it.

[0145] Fig. 22 is a schematic diagram of a cloud migration according to an embodiment of the present invention, such as Fig. 22 As shown in the figure, the intranet address of the target platform is consistent with that of the source platform, which enables cloud migration without changing the IP address and interrupting the business.

[0146] In the above-mentioned embodiment of the present application, after completing the migration of the entire platform to the cloud, since the cloud platform has not made any changes to the business logic architecture of the user source platform, the user side hardly needs to make any configuration changes, and can directly complete the public network IP / exit switching to achieve seamless / imperceptible business cutover.

[0147] Fig.23 is a schematic diagram of a cloud migration process according to an embodiment of the present invention. Fig.23 As shown, in the original form, users directly access the source platform to obtain services; when the source platform is cloud migrated to the target platform (that is, the target cloud platform), users access the source platform based on the original IP, and then the source platform forwards the user's traffic to the target platform; after the cloud migration is completed, users can directly access the target platform based on the original IP.

[0148] Alternatively, if Fig.23 As shown, the migration control server is used to control the cloud migration of the source platform to the target platform (ie, the target cloud platform), that is, to migrate the preset services in the source platform to the target platform (ie, the target cloud platform).

[0149] According to an embodiment of the present invention, a transmission device embodiment of a service request is also provided. It should be noted that the transmission device of the service request can be used to execute the transmission method of the service request in the embodiment of the present invention, and the transmission method of the service request in the embodiment of the present invention can be executed in the transmission device of the service request.

[0150] Fig.24 A schematic diagram of a transmission device for a service request according to an embodiment of the present invention Figure 1 ,like Fig.24As shown, the device may include: a monitoring module 2402, which is used to monitor the working status of the firewall of the source platform, wherein the working status at least includes: an on state, which indicates that the services pre-configured by the source platform are migrating to the target platform; an operation module 2404, which is used for the source platform to run preset rules when the firewall is in the on state, wherein the preset rules are used to indicate that the traffic received by the source platform is forwarded to the target platform; a monitoring module 2406, which is used to monitor the service requests received by the source platform when the source platform runs the preset rules, wherein the service request is the traffic initiated by the client, and is used to request to provide the client with the target service pre-configured in the source platform; a forwarding module 2408, which is used to forward the service request to the target platform before the source platform provides the service based on the service request, wherein the target platform at least includes: the target service transferred from the source platform.

[0151] It should be noted that the monitoring module 2402 in this embodiment can be used to execute step S302 in the embodiment of the present application, the running module 2404 in this embodiment can be used to execute step S304 in the embodiment of the present application, the monitoring module 2406 in this embodiment can be used to execute step S306 in the embodiment of the present application, and the forwarding module 2408 in this embodiment can be used to execute step S308 in the embodiment of the present application. The examples and application scenarios implemented by the above modules and corresponding steps are the same, but are not limited to the contents disclosed in the above embodiments.

[0152] In an embodiment of the present invention, the working state of the firewall of the source platform is monitored, wherein the working state at least includes: an open state, wherein the open state indicates that the service pre-configured by the source platform is being migrated to the target platform; when the firewall is in the open state, the source platform runs a preset rule, wherein the preset rule is used to instruct that the traffic received by the source platform is forwarded to the target platform; when the source platform runs the preset rule, the service request received by the source platform is monitored, wherein the service request is traffic initiated by the client, and is used to request that the target service pre-configured in the source platform be provided to the client; before the source platform provides a service based on the service request, the service request is forwarded to the target platform, wherein the target platform at least includes: the target service transferred from the source platform, so that when the source platform is cloud migrated to the target platform, the traffic received by the source platform can be forwarded to the target platform through the firewall of the source platform, and the source platform will not respond to the service request in the traffic, ensuring that in the case of cloud migration, the target platform that has received the migration service responds to the service request, thereby achieving the technical effect of ensuring that the service is not interrupted in the case of cloud migration, thereby solving the technical problem that the service cannot be ensured to be uninterrupted in the case of cloud migration.

[0153] As an optional embodiment, the device also includes: an acquisition submodule, used to obtain a first platform address of a source platform and a second platform address of a target platform; a configuration submodule, used to configure preset rules using the first platform address and the second platform address, wherein the preset rules are used to disguise the first platform address and forward traffic sent to the first platform address to the second platform address.

[0154] As an optional embodiment, the forwarding module includes: an acquisition submodule, used to obtain the target customer address of the client that initiates the service request before the source platform provides the service based on the service request; an encapsulation subunit, used to use the target customer address as the source address and the second platform address of the target platform as the destination address, and encapsulate the service request based on the virtual extended LAN protocol to obtain a forwarding traffic packet; and a forwarding unit, used to send the forwarding traffic packet to the target platform.

[0155] Fig.25 A schematic diagram of a transmission device for a service request according to an embodiment of the present invention Figure 2 ,like Fig.25 As shown, the device may include: a receiving module 2502, which is used to receive a forwarding traffic packet forwarded by a source platform through a target platform, wherein the forwarding traffic packet at least includes: a service request initiated by a client, the service request is used to request to provide a target service pre-configured in the source platform to the client, and the target platform provides services transferred from the source platform through multiple servers, and the multiple servers at least include: a target server that provides the target service; a first sending module 2504, which is used to send the service request in the forwarding traffic packet to the target server, wherein the target server is used to respond to the service request and generate a response data packet based on the target service; a second sending module 2506, which is used to send the response data packet to the client.

[0156] It should be noted that the receiving module 2502 in this embodiment can be used to execute step S602 in the embodiment of the present application, the first sending module 2504 in this embodiment can be used to execute step S604 in the embodiment of the present application, and the second sending module 2506 in this embodiment can be used to execute step S606 in the embodiment of the present application. The examples and application scenarios implemented by the above modules and corresponding steps are the same, but are not limited to the contents disclosed in the above embodiments.

[0157] In an embodiment of the present invention, the working state of the firewall of the source platform is monitored, wherein the working state at least includes: an open state, wherein the open state indicates that the service pre-configured by the source platform is being migrated to the target platform; when the firewall is in the open state, the source platform runs a preset rule, wherein the preset rule is used to instruct that the traffic received by the source platform is forwarded to the target platform; when the source platform runs the preset rule, the service request received by the source platform is monitored, wherein the service request is traffic initiated by the client, and is used to request that the target service pre-configured in the source platform be provided to the client; before the source platform provides a service based on the service request, the service request is forwarded to the target platform, wherein the target platform at least includes: the target service transferred from the source platform, so that when the source platform is cloud migrated to the target platform, the traffic received by the source platform can be forwarded to the target platform through the firewall of the source platform, and the source platform will not respond to the service request in the traffic, ensuring that in the case of cloud migration, the target platform that has received the migration service responds to the service request, thereby achieving the technical effect of ensuring that the service is not interrupted in the case of cloud migration, thereby solving the technical problem that the service cannot be ensured to be uninterrupted in the case of cloud migration.

[0158] As an optional embodiment, the first sending module includes: a first unpacking unit, which is used to unpack the forwarding traffic packet based on the virtual extended LAN protocol through the terminal node pre-configured for the target platform in the virtual private cloud to obtain a service request, wherein the terminal node is used to receive the traffic forwarded by the source platform and transmit the received traffic to the terminal service connected to the terminal node, and the forwarding traffic packet is: with the target customer address of the client as the source address, the second platform address of the terminal node as the destination address, and the service request encapsulated based on the virtual extended LAN protocol; a search unit, which is used to record multiple preset virtual addresses in the service mapping relationship table In the method, a virtual address corresponding to a target service is searched, wherein a service mapping relationship table pre-records a plurality of preset services and a preset virtual address corresponding to each preset service, and the preset virtual address is an interface of a server that provides the preset service; a first encapsulation unit is used to use the service address of the terminal service as the source address and the virtual address as the destination address, and encapsulate the service request based on the virtual extended LAN protocol to obtain a first traffic packet; a first sending unit is used to send the first traffic packet to the target server based on the virtual address, wherein the target server is also used to decapsulate the first traffic packet based on the virtual extended LAN protocol to obtain a service request.

[0159] As an optional embodiment, the device also includes: a first conversion unit, which is used to perform source address conversion on the source address of the forwarded traffic packet through the terminal node before encapsulating the service request based on the virtual extended LAN protocol using the service address of the terminal service as the source address and the virtual address as the destination address to obtain the first traffic packet, wherein the terminal node is also used to convert the source address from the target customer address to the service address; a second conversion unit, which is used to perform destination address conversion on the destination address of the forwarded traffic packet through the terminal node, wherein the terminal node is also used to convert the destination address from the second platform address to the virtual address.

[0160] As an optional embodiment, the first sending unit includes: a first sending sub-unit, used to send a first traffic packet to an elastic load balancing device based on a virtual address, wherein the elastic load balancing device is used to perform load balancing on multiple target servers, select one of the multiple target servers as a response server to respond to the service request, and the elastic load balancing device is connected to the client through the virtual address and to the server through the real address; a first unsealing sub-unit, used to unseale the first traffic packet based on the virtual extended LAN protocol through the elastic load balancing device to obtain a service request; a first encapsulation sub-unit, used to use the real address of the elastic load balancing device as the source address and the response address of the response server as the destination address, and encapsulate the service request based on the virtual extended LAN protocol to obtain a second traffic packet; a second sending sub-unit, used to send the first traffic packet to the response server based on the response address, wherein the response server is used to unseale the second traffic packet based on the virtual extended LAN protocol to obtain the service request, and respond to the service request to generate a response data packet.

[0161] As an optional embodiment, the device also includes: a first conversion sub-unit, which is used to perform source address conversion on the source address of the first traffic packet through the elastic load balancing device before encapsulating the service request based on the virtual extended LAN protocol using the real address of the elastic load balancing device as the source address and the response address of the responding server as the destination address to obtain the second traffic packet, wherein the elastic load balancing device is also used to convert the source address from the service address to the real address; a second conversion sub-unit, which is used to perform destination address conversion on the destination address of the first traffic packet through the elastic load balancing device, wherein the elastic load balancing device is also used to convert the destination address from the virtual address to the response address.

[0162] As an optional embodiment, the second sending module includes: a second unpacking unit, which is used to pre-configure a terminal node for the target platform in the virtual private cloud, unpack the first data packet provided by the target server based on the virtual extended local area network protocol, and obtain response data generated by the target server in response to the service request, wherein the virtual private cloud also includes: a terminal service connected to the terminal node, the terminal service is used to receive the response data packet provided by the target server, and transmit the response data packet to the terminal node, the first data packet is: a virtual address of the target server as the source address, a service address of the terminal service as the destination address, and response data encapsulated based on the virtual extended local area network protocol; a selection unit, which is used to select the service request corresponding to the target customer address for generating the response data from a plurality of preset customer addresses recorded in a preset session table, wherein the preset session table record is used to record a plurality of preset customer addresses and service requests respectively initiated by the client corresponding to each customer address; a second encapsulation unit, which is used to use the second platform address of the terminal node as the source address and the target customer address as the destination address, and encapsulate the response data based on the virtual extended local area network protocol to obtain a response data packet; and a second sending unit, which is used to send the response data packet to the client based on the target customer address.

[0163] As an optional embodiment, the device also includes: a third conversion unit, which is used to perform source address conversion on the source address of the first data packet through the terminal node before encapsulating the response data based on the virtual extended LAN protocol using the second platform address of the terminal node as the source address and the target customer address as the destination address to obtain the response data packet, wherein the terminal node is also used to convert the source address from the virtual address to the second platform address; a fourth conversion unit, which is used to perform destination address conversion on the destination address of the first data packet through the terminal node, wherein the terminal node is also used to convert the destination address from the service address to the target customer address.

[0164] As an optional embodiment, the device also includes: a first unpacking sub-unit, which is used to pre-configure the terminal node for the target platform in the virtual private cloud, unpack the first data packet provided by the target server based on the virtual extended LAN protocol, and obtain the response data generated by the target server in response to the service request, and then unpack the received second data packet based on the virtual extended LAN protocol through an elastic load balancing device to obtain the response data, wherein the elastic load balancing device is used to load balance multiple target servers, select one of the multiple target servers as the response server to respond to the service request, and forward the second data packet returned by the response server to the client, the elastic load balancing device is connected to the client through the virtual address, and to the server through the real address, and the second data packet is: the response address of the response server is used as the source address, the real address is used as the destination address, and the response data is encapsulated based on the virtual extended LAN protocol; the second encapsulation sub-unit is used to use the virtual address as the source address, the service address as the destination address, and the response data is encapsulated based on the virtual extended LAN protocol to obtain the first data packet.

[0165] As an optional embodiment, the device also includes: a third conversion sub-unit, which is used to perform source address conversion on the source address of the second data packet through an elastic load balancing device before obtaining the first data packet by using the virtual address as the source address, the service address as the destination address, and the response data encapsulated based on the virtual extended LAN protocol, wherein the elastic load balancing device is also used to convert the source address from the response address to the virtual address; a fourth conversion sub-unit, which is used to perform destination address conversion on the destination address of the second data packet through the elastic load balancing device, wherein the elastic load balancing device is also used to convert the destination address from the real address to the service address.

[0166] An embodiment of the present invention may provide an electronic device, which may be a computer terminal, and the computer terminal may be any computer terminal device in a computer terminal group. Optionally, in this embodiment, the computer terminal may also be replaced by a terminal device such as a mobile terminal.

[0167] Optionally, in this embodiment, the computer terminal may be located in at least one network device among a plurality of network devices of the computer network.

[0168] In this embodiment, the above-mentioned computer terminal can execute the program code of the following steps in the service request transmission method: monitoring the working status of the firewall of the source platform, wherein the working status at least includes: an on state, wherein the on state indicates that the service pre-configured by the source platform is being migrated to the target platform; when the firewall is in the on state, the source platform runs the preset rules, wherein the preset rules are used to instruct that the traffic received by the source platform is forwarded to the target platform; when the source platform runs the preset rules, monitoring the service requests received by the source platform, wherein the service request is traffic initiated by the client, and is used to request to provide the client with the target service pre-configured in the source platform; before the source platform provides a service based on the service request, forwarding the service request to the target platform, wherein the target platform at least includes: the target service transferred from the source platform.

[0169] In this embodiment, the above-mentioned computer terminal can execute the program code of the following steps in the service request transmission method: receiving a forwarding traffic packet forwarded by a source platform through a target platform, wherein the forwarding traffic packet at least includes: a service request initiated by a client, the service request is used to request to provide a target service pre-configured in the source platform to the client, the target platform provides services transferred from the source platform through multiple service terminals, and the multiple service terminals at least include: a target server terminal that provides the target service; sending the service request in the forwarding traffic packet to the target server terminal, wherein the target server terminal is used to respond to the service request and generate a response data packet based on the target service; and sending the response data packet to the client.

[0170] Fig.26 is a structural block diagram of a computer terminal according to an embodiment of the present invention. Fig.26 As shown, the computer terminal 2600 may include: one or more (only one is shown in the figure) processors 2602 and a memory 2604 .

[0171] Among them, the memory can be used to store software programs and modules, such as the program instructions / modules corresponding to the method and device for transmitting service requests in the embodiments of the present invention. The processor executes various functional applications and data processing by running the software programs and modules stored in the memory, that is, realizing the above-mentioned method for transmitting service requests. The memory may include a high-speed random access memory, and may also include a non-volatile memory, such as one or more magnetic storage devices, flash memory, or other non-volatile solid-state memory. In some instances, the memory may further include a memory remotely arranged relative to the processor, and these remote memories may be connected to the terminal 2500 via a network. Examples of the above-mentioned network include, but are not limited to, the Internet, an intranet, a local area network, a mobile communication network, and combinations thereof.

[0172] The processor can call the information and application stored in the memory through the transmission device to perform the following steps: monitor the working status of the firewall of the source platform, wherein the working status at least includes: an on state, which indicates that the services pre-configured by the source platform are migrating to the target platform; when the firewall is in the on state, the source platform runs the preset rules, wherein the preset rules are used to instruct the traffic received by the source platform to be forwarded to the target platform; when the source platform runs the preset rules, monitor the service requests received by the source platform, wherein the service request is the traffic initiated by the client, which is used to request the client to provide the target service pre-configured in the source platform; before the source platform provides the service based on the service request, forward the service request to the target platform, wherein the target platform at least includes: the target service transferred from the source platform.

[0173] Optionally, the processor may also execute the following program code steps: obtaining the first platform address of the source platform and the second platform address of the target platform; configuring preset rules using the first platform address and the second platform address, wherein the preset rules are used to disguise the first platform address and forward the traffic sent to the first platform address to the second platform address.

[0174] Optionally, the processor may also execute the following program code: before the source platform provides a service based on the service request, obtain the target client address of the client that initiates the service request; use the target client address as the source address and the second platform address of the target platform as the destination address, encapsulate the service request based on the virtual extended LAN protocol, and obtain a forwarding traffic packet; and send the forwarding traffic packet to the target platform.

[0175] The processor can call the information and application programs stored in the memory through the transmission device to perform the following steps: receiving a forwarding traffic packet forwarded by the source platform through the target platform, wherein the forwarding traffic packet at least includes: a service request initiated by the client, the service request is used to request to provide the client with a target service pre-configured in the source platform, the target platform provides the service transferred from the source platform through multiple service terminals, and the multiple service terminals at least include: a target server terminal that provides the target service; sending the service request in the forwarding traffic packet to the target server terminal, wherein the target server terminal is used to respond to the service request and generate a response data packet based on the target service; and sending the response data packet to the client.

[0176] Optionally, the processor may also execute the following program code: by pre-configuring a terminal node for the target platform in the virtual private cloud, unpacking the forwarded traffic packet based on the virtual extended LAN protocol to obtain a service request, wherein the terminal node is used to receive the traffic forwarded by the source platform and transmit the received traffic to the terminal service connected to the terminal node, and the forwarded traffic packet is: using the target customer address of the client as the source address, the second platform address of the terminal node as the destination address, and encapsulating the service request based on the virtual extended LAN protocol; searching for the virtual address corresponding to the target service in the multiple preset virtual addresses recorded in the service mapping relationship table, wherein the service mapping relationship table pre-records multiple preset services and the preset virtual address corresponding to each preset service, and the preset virtual address is the interface of the server providing the preset service; using the service address of the terminal service as the source address and the virtual address as the destination address, encapsulating the service request based on the virtual extended LAN protocol to obtain a first traffic packet; sending the first traffic packet to the target server based on the virtual address, wherein the target server is also used to unpack the first traffic packet based on the virtual extended LAN protocol to obtain the service request.

[0177] Optionally, the processor may also execute the program code of the following steps: performing source address conversion on the source address of the forwarded traffic packet through the terminal node, wherein the terminal node is also used to convert the source address from the target customer address to the service address; performing destination address conversion on the destination address of the forwarded traffic packet through the terminal node, wherein the terminal node is also used to convert the destination address from the second platform address to the virtual address.

[0178] Optionally, the processor may also execute the program code of the following steps: based on the virtual address, sending a first traffic packet to the elastic load balancing device, wherein the elastic load balancing device is used to perform load balancing on multiple target servers, selecting one of the multiple target servers as a response server to respond to the service request, and the elastic load balancing device is connected to the client through the virtual address and to the server through the real address; the elastic load balancing device decapsulates the first traffic packet based on the virtual extended LAN protocol to obtain the service request; uses the real address of the elastic load balancing device as the source address and the response address of the response server as the destination address, encapsulates the service request based on the virtual extended LAN protocol to obtain a second traffic packet; based on the response address, sends the first traffic packet to the response server, wherein the response server is used to decapsulate the second traffic packet based on the virtual extended LAN protocol to obtain the service request, and responds to the service request to generate a response data packet.

[0179] Optionally, the processor may also execute the program code of the following steps: performing source address conversion on the source address of the first traffic packet through an elastic load balancing device, wherein the elastic load balancing device is also used to convert the source address from a service address to a real address; performing destination address conversion on the destination address of the first traffic packet through an elastic load balancing device, wherein the elastic load balancing device is also used to convert the destination address from a virtual address to a response address.

[0180] Optionally, the processor may also execute the following program code: by pre-configuring a terminal node for the target platform in the virtual private cloud, decapsulating the first data packet provided by the target server based on the virtual extended local area network protocol, and obtaining response data generated by the target server in response to the service request, wherein the virtual private cloud also includes: a terminal service connected to the terminal node, the terminal service is used to receive the response data packet provided by the target server, and transmit the response data packet to the terminal node, the first data packet is: using the virtual address of the target server as the source address, the service address of the terminal service as the destination address, and encapsulating the response data based on the virtual extended local area network protocol; selecting the target customer address corresponding to the service request for generating the response data from among the multiple preset customer addresses recorded in the preset session table, wherein the preset session table record is used to record multiple preset customer addresses and the service requests initiated by the client corresponding to each customer address; using the second platform address of the terminal node as the source address, and the target customer address as the destination address, encapsulating the response data based on the virtual extended local area network protocol to obtain a response data packet; sending the response data packet to the client based on the target customer address.

[0181] Optionally, the processor may also execute the program code of the following steps: performing source address conversion on the source address of the first data packet through the terminal node, wherein the terminal node is also used to convert the source address from the virtual address to the second platform address; performing destination address conversion on the destination address of the first data packet through the terminal node, wherein the terminal node is also used to convert the destination address from the service address to the target customer address.

[0182] Optionally, the processor may also execute the program code of the following steps: unpacking the received second data packet based on the virtual extended LAN protocol through an elastic load balancing device to obtain response data, wherein the elastic load balancing device is used to load balance multiple target server ends, select one of the multiple target server ends as the response server end to respond to the service request, and forward the second data packet returned by the response server end to the client end, the elastic load balancing device connects with the client end through a virtual address and connects with the server end through a real address, and the second data packet is: using the response address of the response server end as the source address, the real address as the destination address, and the response data encapsulated based on the virtual extended LAN protocol; using the virtual address as the source address, the service address as the destination address, and the response data encapsulated based on the virtual extended LAN protocol to obtain the first data packet.

[0183] Optionally, the processor may also execute the program code of the following steps: performing source address conversion on the source address of the second data packet through an elastic load balancing device, wherein the elastic load balancing device is also used to convert the source address from a response address to a virtual address; performing destination address conversion on the destination address of the second data packet through an elastic load balancing device, wherein the elastic load balancing device is also used to convert the destination address from a real address to a service address.

[0184] The embodiment of the present invention provides a scheme for transmitting a service request. In the embodiment of the present invention, the working state of the firewall of the source platform is monitored, wherein the working state at least includes: an open state, wherein the open state indicates that the service pre-configured by the source platform is being migrated to the target platform; when the firewall is in the open state, the source platform runs a preset rule, wherein the preset rule is used to indicate that the traffic received by the source platform is forwarded to the target platform; when the source platform runs the preset rule, the service request received by the source platform is monitored, wherein the service request is traffic initiated by a client, and is used to request that the target service pre-configured in the source platform be provided to the client; before the source platform provides a service based on the service request, the service request is forwarded to the target platform, wherein the target platform at least includes: a target service transferred from the source platform, so that when the source platform is cloud-migrated to the target platform, the traffic received by the source platform can be forwarded to the target platform through the firewall of the source platform, and the source platform will not respond to the service request in the traffic, ensuring that in the case of cloud migration, the target platform that has received the migration service responds to the service request, achieving the technical effect of ensuring that the service is not interrupted in the case of cloud migration, thereby solving the technical problem that the service cannot be ensured to be not interrupted in the case of cloud migration.

[0185] It can be understood by those skilled in the art that Fig.26The structure shown is for illustration only, and the computer terminal may also be a smart phone (such as an Android phone, an iOS phone, etc.), a tablet computer, a handheld computer, a mobile Internet device (Mobile Internet Devices, MID), a PAD, or other terminal devices. Fig.26 The structure of the electronic device is not limited. For example, the computer terminal 2600 may also include Fig.26 More or fewer components (such as network interfaces, display devices, etc.) shown in, or having Fig.26 Different configurations are shown.

[0186] A person of ordinary skill in the art can understand that all or part of the steps in the various methods of the above embodiments can be completed by instructing the hardware related to the terminal device through a computer program. The computer program can be stored in a non-volatile medium. The non-volatile storage medium may include: a flash drive, a read-only memory (ROM), a random access memory (RAM), a magnetic disk or an optical disk, etc.

[0187] The embodiment of the present invention further provides a non-volatile storage medium. Optionally, in this embodiment, the non-volatile storage medium can be used to store the program code executed by the service request transmission method provided in the above embodiment.

[0188] Optionally, in this embodiment, the non-volatile storage medium may be located in any computer terminal in a computer terminal group in a computer network, or in any mobile terminal in a mobile terminal group.

[0189] Optionally, in this embodiment, the non-volatile storage medium is configured to store program codes for executing the following steps: monitoring the working status of the firewall of the source platform, wherein the working status includes at least: an on state, wherein the on state indicates that the services pre-configured by the source platform are being migrated to the target platform; when the firewall is in the on state, the source platform runs preset rules, wherein the preset rules are used to instruct that the traffic received by the source platform is forwarded to the target platform; when the source platform runs the preset rules, monitoring the service requests received by the source platform, wherein the service request is traffic initiated by the client, and is used to request that the target service pre-configured in the source platform be provided to the client; before the source platform provides a service based on the service request, forwarding the service request to the target platform, wherein the target platform includes at least: the target service transferred from the source platform.

[0190] Optionally, in this embodiment, the non-volatile storage medium is configured to store program code for executing the following steps: obtaining a first platform address of a source platform and a second platform address of a target platform; configuring preset rules using the first platform address and the second platform address, wherein the preset rules are used to disguise the first platform address and forward traffic sent to the first platform address to the second platform address.

[0191] Optionally, in this embodiment, the non-volatile storage medium is configured to store program code for executing the following steps: before the source platform provides a service based on the service request, obtain the target client address of the client that initiates the service request; use the target client address as the source address and the second platform address of the target platform as the destination address, encapsulate the service request based on the virtual extended LAN protocol to obtain a forwarding traffic packet; and send the forwarding traffic packet to the target platform.

[0192] Optionally, in this embodiment, the non-volatile storage medium is configured to store program code for performing the following steps: receiving a forwarding traffic packet forwarded by a source platform through a target platform, wherein the forwarding traffic packet includes at least: a service request initiated by a client, the service request is used to request that a target service pre-configured in the source platform be provided to the client, the target platform provides services transferred from the source platform through multiple server terminals, and the multiple server terminals include at least: a target server terminal that provides the target service; sending the service request in the forwarding traffic packet to the target server terminal, wherein the target server terminal is used to respond to the service request and generate a response data packet based on the target service; and sending the response data packet to the client.

[0193] Optionally, in this embodiment, the non-volatile storage medium is configured to store program codes for executing the following steps: by pre-configuring a terminal node for the target platform in the virtual private cloud, unpacking the forwarded traffic packet based on the virtual extended local area network protocol to obtain a service request, wherein the terminal node is used to receive the traffic forwarded by the source platform and transmit the received traffic to the terminal service connected to the terminal node, and the forwarded traffic packet is: a service request encapsulated based on the virtual extended local area network protocol with the target customer address of the client as the source address and the second platform address of the terminal node as the destination address; searching for the virtual address corresponding to the target service among the multiple preset virtual addresses recorded in the service mapping relationship table, wherein the service mapping relationship table pre-records multiple preset services and the preset virtual address corresponding to each preset service, and the preset virtual address is the interface of the server providing the preset service; using the service address of the terminal service as the source address and the virtual address as the destination address, encapsulating the service request based on the virtual extended local area network protocol to obtain a first traffic packet; sending the first traffic packet to the target server based on the virtual address, wherein the target server is also used to unpack the first traffic packet based on the virtual extended local area network protocol to obtain the service request.

[0194] Optionally, in this embodiment, the non-volatile storage medium is configured to store program code for executing the following steps: performing source address conversion on the source address of the forwarded traffic packet through the terminal node, wherein the terminal node is also used to convert the source address from the target customer address to the service address; performing destination address conversion on the destination address of the forwarded traffic packet through the terminal node, wherein the terminal node is also used to convert the destination address from the second platform address to the virtual address.

[0195] Optionally, in this embodiment, the non-volatile storage medium is configured to store program codes for executing the following steps: based on the virtual address, sending a first traffic packet to the elastic load balancing device, wherein the elastic load balancing device is used to load balance multiple target server ends, selecting one of the multiple target server ends as a response server end to respond to the service request, and the elastic load balancing device is connected to the client end through the virtual address and to the server end through the real address; the first traffic packet is unsealed by the elastic load balancing device based on the virtual extended LAN protocol to obtain a service request; the real address of the elastic load balancing device is used as the source address, and the response address of the response server end is used as the destination address, and the service request is encapsulated based on the virtual extended LAN protocol to obtain a second traffic packet; based on the response address, the first traffic packet is sent to the response server end, wherein the response server end is used to unseale the second traffic packet based on the virtual extended LAN protocol to obtain the service request, and respond to the service request to generate a response data packet.

[0196] Optionally, in this embodiment, the non-volatile storage medium is configured to store program codes for executing the following steps: performing source address conversion on the source address of the first traffic packet through an elastic load balancing device, wherein the elastic load balancing device is also used to convert the source address from a service address to a real address; performing destination address conversion on the destination address of the first traffic packet through an elastic load balancing device, wherein the elastic load balancing device is also used to convert the destination address from a virtual address to a response address.

[0197] Optionally, in this embodiment, the non-volatile storage medium is configured to store program codes for executing the following steps: by pre-configuring a terminal node for the target platform in the virtual private cloud, unpacking the first data packet provided by the target server based on the virtual extended local area network protocol, and obtaining response data generated by the target server in response to the service request, wherein the virtual private cloud also includes: a terminal service connected to the terminal node, the terminal service is used to receive the response data packet provided by the target server, and transmit the response data packet to the terminal node, the first data packet is: using the virtual address of the target server as the source address, the service address of the terminal service as the destination address, and encapsulating the response data based on the virtual extended local area network protocol; selecting the target customer address corresponding to the service request for generating the response data from among multiple preset customer addresses recorded in the preset session table, wherein the preset session table record is used to record multiple preset customer addresses and service requests initiated by the client corresponding to each customer address; using the second platform address of the terminal node as the source address and the target customer address as the destination address, encapsulating the response data based on the virtual extended local area network protocol to obtain a response data packet; sending the response data packet to the client based on the target customer address.

[0198] Optionally, in this embodiment, the non-volatile storage medium is configured to store program code for performing the following steps: performing source address conversion on the source address of the first data packet through the terminal node, wherein the terminal node is also used to convert the source address from the virtual address to the second platform address; performing destination address conversion on the destination address of the first data packet through the terminal node, wherein the terminal node is also used to convert the destination address from the service address to the target customer address.

[0199] Optionally, in this embodiment, the non-volatile storage medium is configured to store program code for executing the following steps: unpacking the received second data packet based on the virtual extended LAN protocol through an elastic load balancing device to obtain response data, wherein the elastic load balancing device is used to load balance multiple target server ends, select one of the multiple target server ends as the response server end to respond to the service request, and forward the second data packet returned by the response server end to the client end, the elastic load balancing device connects with the client end through a virtual address and connects with the server end through a real address, and the second data packet is: using the response address of the response server end as the source address, the real address as the destination address, and the response data encapsulated based on the virtual extended LAN protocol; using the virtual address as the source address, the service address as the destination address, and the response data encapsulated based on the virtual extended LAN protocol to obtain the first data packet.

[0200] Optionally, in this embodiment, the non-volatile storage medium is configured to store program code for executing the following steps: performing source address conversion on the source address of the second data packet through an elastic load balancing device, wherein the elastic load balancing device is also used to convert the source address from a response address to a virtual address; performing destination address conversion on the destination address of the second data packet through an elastic load balancing device, wherein the elastic load balancing device is also used to convert the destination address from a real address to a service address.

[0201] The embodiment of the present invention further provides a computer program product, including a computer program. Optionally, in this embodiment, when the computer program is executed by a processor, the steps of the service request transmission method provided in the above embodiment are implemented.

[0202] The serial numbers of the above embodiments of the present invention are only for description and do not represent the advantages or disadvantages of the embodiments.

[0203] In the above embodiments of the present invention, the description of each embodiment has its own emphasis. For parts that are not described in detail in a certain embodiment, reference can be made to the relevant descriptions of other embodiments.

[0204] In the several embodiments provided in this application, it should be understood that the disclosed technical content can be implemented in other ways. Among them, the device embodiments described above are only schematic. For example, the division of the units can be a logical function division. There may be other division methods in actual implementation. For example, multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed can be through some interfaces, indirect coupling or communication connection of units or modules, which can be electrical or other forms.

[0205] The units described as separate components may or may not be physically separated, and the components shown as units may or may not be physical units, that is, they may be located in one place or distributed on multiple units. Some or all of the units may be selected according to actual needs to achieve the purpose of the present embodiment.

[0206] In addition, each functional unit in each embodiment of the present invention may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit. The above-mentioned integrated unit may be implemented in the form of hardware or in the form of software functional units.

[0207] If the integrated unit is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a non-volatile storage medium. Based on this understanding, the technical solution of the present invention, in essence, or the part that contributes to the prior art, or all or part of the technical solution can be embodied in the form of a software product. The computer software product is stored in a non-volatile storage medium, including several instructions for a computer device (which can be a personal computer, server or network device, etc.) to perform all or part of the steps of the method described in each embodiment of the present invention. The aforementioned non-volatile storage medium includes: U disk, read-only memory (ROM, Read-Only Memory), random access memory (RAM, Random Access Memory), mobile hard disk, magnetic disk or optical disk and other media that can store program codes.

[0208] The above is only a preferred embodiment of the present invention. It should be pointed out that for ordinary technicians in this technical field, several improvements and modifications can be made without departing from the principle of the present invention. These improvements and modifications should also be regarded as the scope of protection of the present invention.

Claims

1. A method for transmitting a service request, characterized in that: include: Monitoring the working state of the firewall of the source platform, wherein the working state at least includes: an open state, wherein the open state indicates that the services pre-configured on the source platform are being migrated to the target platform; When the firewall is in the open state, the source platform runs a preset rule, wherein the preset rule is used to instruct to forward the traffic received by the source platform to the target platform; In the case where the source platform runs the preset rule, monitoring the service request received by the source platform, wherein the service request is traffic initiated by the client and is used to request to provide the client with a target service pre-configured in the source platform; Before the source platform provides a service based on the service request, the service request is forwarded to the target platform, wherein the target platform at least includes: the target service transferred from the source platform.

2. The method according to claim 1, characterized in that The method further comprises: Obtaining a first platform address of the source platform and a second platform address of the target platform; The preset rule is configured using the first platform address and the second platform address, wherein the preset rule is used to disguise the first platform address and forward traffic sent to the first platform address to the second platform address.

3. The method according to claim 1, characterized in that: Before the source platform provides a service based on the service request, forwarding the service request to the target platform includes: Before the source platform provides a service based on the service request, obtaining a target client address of the client that initiates the service request; Taking the target customer address as the source address and the second platform address of the target platform as the destination address, encapsulating the service request based on the virtual extended local area network protocol to obtain a forwarding traffic packet; Send the forwarding traffic packet to the target platform.

4. A method for transmitting a service request, characterized in that: include: Receiving, through the target platform, a forwarding traffic packet forwarded by the source platform, wherein the forwarding traffic packet at least includes: a service request initiated by a client, the service request is used to request to provide the client with a target service pre-configured in the source platform, the target platform provides the service transferred from the source platform through multiple service terminals, and the multiple service terminals at least include: a target service terminal that provides the target service; Sending the service request in the forwarded traffic packet to the target server, wherein the target server is used to respond to the service request and generate a response data packet based on the target service; The response data packet is sent to the client.

5. The method according to claim 4, characterized in that Sending the service request to the target server includes: The service request is obtained by decapsulating the forwarding traffic packet based on the virtual extended local area network protocol through the terminal node pre-configured for the target platform in the virtual private cloud, wherein the terminal node is used to receive the traffic forwarded by the source platform and transmit the received traffic to the terminal service connected to the terminal node, and the forwarding traffic packet is: the target customer address of the client is used as the source address, the second platform address of the terminal node is used as the destination address, and the service request is encapsulated based on the virtual extended local area network protocol; Searching for a virtual address corresponding to the target service in a plurality of preset virtual addresses recorded in a service mapping relationship table, wherein the service mapping relationship table pre-records a plurality of preset services and the preset virtual address corresponding to each of the preset services, and the preset virtual address is an interface of the server providing the preset service; Taking the service address of the terminal service as the source address and the virtual address as the destination address, encapsulating the service request based on the virtual extended local area network protocol to obtain a first traffic packet; Based on the virtual address, the first traffic packet is sent to the target server, wherein the target server is further used to decapsulate the first traffic packet based on the virtual extended LAN protocol to obtain the service request.

6. The method according to claim 5, characterized in that Before taking the service address of the terminal service as the source address and the virtual address as the destination address, and encapsulating the service request based on the virtual extended local area network protocol to obtain the first traffic packet, the method further includes: Performing source address conversion on the source address of the forwarded traffic packet through the terminal node, wherein the terminal node is also used to convert the source address from the target customer address to the service address; The destination address of the forwarded traffic packet is converted through the terminal node, wherein the terminal node is also used to convert the destination address from the second platform address to the virtual address.

7. The method according to claim 5, characterized in that Based on the virtual address, sending the first traffic packet to the target server includes: Based on the virtual address, the first traffic packet is sent to an elastic load balancing device, wherein the elastic load balancing device is used to perform load balancing on multiple target servers, select one of the multiple target servers as a response server to respond to the service request, and the elastic load balancing device is connected to the client through the virtual address and to the server through the real address; Decapsulating the first traffic packet based on the virtual extended local area network protocol through the elastic load balancing device to obtain the service request; Using the real address of the elastic load balancing device as the source address, using the response address of the response server as the destination address, and encapsulating the service request based on the virtual extended LAN protocol to obtain a second traffic packet; Based on the response address, the first traffic packet is sent to the response server, wherein the response server is used to decapsulate the second traffic packet based on the virtual extended LAN protocol, obtain the service request, respond to the service request, and generate the response data packet.

8. The method according to claim 7, characterized in that Before taking the real address of the elastic load balancing device as the source address and the response address of the response server as the destination address, encapsulating the service request based on the virtual extended local area network protocol to obtain the second traffic packet, the method further includes: Performing source address conversion on the source address of the first traffic packet through the elastic load balancing device, wherein the elastic load balancing device is further used to convert the source address from the service address to the real address; The destination address of the first traffic packet is converted by the elastic load balancing device, wherein the elastic load balancing device is further used to convert the destination address from the virtual address to the response address.

9. The method according to claim 4, characterized in that Sending the response data packet to the client includes: By pre-configuring a terminal node for the target platform in a virtual private cloud, decapsulating a first data packet provided by the target server based on a virtual extended local area network protocol, and obtaining response data generated by the target server in response to the service request, wherein the virtual private cloud further comprises: a terminal service connected to the terminal node, the terminal service being used to receive the response data packet provided by the target server and transmit the response data packet to the terminal node, the first data packet being: the response data encapsulated based on the virtual extended local area network protocol and having the virtual address of the target server as the source address and the service address of the terminal service as the destination address; Selecting a target client address corresponding to the service request generating the response data from among a plurality of preset client addresses recorded in a preset session table, wherein the preset session table record is used to record a plurality of the preset client addresses and service requests respectively initiated by a client corresponding to each of the client addresses; Taking the second platform address of the terminal node as the source address and the target client address as the destination address, encapsulating the response data based on the virtual extended local area network protocol to obtain the response data packet; Based on the target client address, the response data packet is sent to the client.

10. The method according to claim 9, characterized in that Before taking the second platform address of the terminal node as the source address and the target client address as the destination address, encapsulating the response data based on the virtual extended local area network protocol to obtain the response data packet, the method further includes: Performing source address conversion on the source address of the first data packet by the terminal node, wherein the terminal node is further used to convert the source address from the virtual address to the second platform address; The destination address of the first data packet is converted through the terminal node, wherein the terminal node is further used to convert the destination address from the service address to the target client address.

11. The method according to claim 9, characterized in that Before pre-configuring a terminal node for the target platform in a virtual private cloud, decapsulating a first data packet provided by the target server based on a virtual extended local area network protocol, and obtaining response data generated by the target server in response to the service request, the method further includes: The received second data packet is unpacked based on the virtual extended LAN protocol through an elastic load balancing device to obtain the response data, wherein the elastic load balancing device is used to load balance the multiple target server ends, select one of the multiple target server ends as the response server end to respond to the service request, and forward the second data packet returned by the response server end to the client end, the elastic load balancing device is connected to the client end through a virtual address, and is connected to the server end through a real address, and the second data packet is: the response address of the response server end is the source address, the real address is the destination address, and the response data is encapsulated based on the virtual extended LAN protocol; The first data packet is obtained by taking the virtual address as the source address, taking the service address as the destination address, and encapsulating the response data based on the virtual extended local area network protocol.

12. The method according to claim 11, characterized in that Before obtaining the first data packet by taking the virtual address as the source address, taking the service address as the destination address, and encapsulating the response data based on the virtual extended local area network protocol, the method further includes: Performing source address conversion on the source address of the second data packet through the elastic load balancing device, wherein the elastic load balancing device is further used to convert the source address from the response address to the virtual address; The destination address of the second data packet is converted by the elastic load balancing device, wherein the elastic load balancing device is further used to convert the destination address from the real address to the service address.

13. A transmission device for a service request, characterized in that: include: A monitoring module, used to monitor the working status of the firewall of the source platform, wherein the working status at least includes: an open state, wherein the open state indicates that the service pre-configured on the source platform is being migrated to the target platform; An operation module, configured to enable the source platform to execute a preset rule when the firewall is in the open state, wherein the preset rule is used to instruct to forward the traffic received by the source platform to the target platform; A monitoring module, configured to monitor service requests received by the source platform when the source platform runs the preset rule, wherein the service request is traffic initiated by a client and is used to request that a target service pre-configured in the source platform be provided to the client; A forwarding module is used to forward the service request to the target platform before the source platform provides a service based on the service request, wherein the target platform at least includes: the target service transferred from the source platform.

14. A transmission device for a service request, characterized in that: include: A receiving module, configured to receive, through a target platform, a forwarding traffic packet forwarded by a source platform, wherein the forwarding traffic packet at least includes: a service request initiated by a client, the service request being used to request that a target service pre-configured in the source platform be provided to the client, the target platform providing a service transferred from the source platform through a plurality of service terminals, the plurality of service terminals at least including: a target service terminal providing the target service; A first sending module, used to send the service request in the forwarded traffic packet to the target server, wherein the target server is used to respond to the service request and generate a response data packet based on the target service; The second sending module is used to send the response data packet to the client.

15. An electronic device comprising a memory and a processor, characterized in that: The memory stores a computer program, and the processor is configured to execute the method for transmitting a service request according to any one of claims 1 to 12 through the computer program.

16. A computer program product comprising computer instructions, characterized in that When the computer instructions are executed by a processor, the steps of the method for transmitting a service request as claimed in any one of claims 1 to 12 are implemented.

Images