VPN data transmission method and device, medium and program product

Abstract

The embodiment of the invention provides a VPN data transmission method and device, a medium and a program product, and relates to the technical field of data transmission. The method comprises the following steps: acquiring a response message sent by a resource server, and storing the response message to a message buffer area; and carrying out merging processing on the response messages in the message buffer area, and sending the merged message after the merging processing to a VPN client of a target user host through a VPN channel. According to the embodiment of the invention, the buffer area is established in the VPN equipment to store the response messages, and the response messages are merged and then returned to the VPN client of the user host, so that the number of times of message transmission can be reduced, and the influence of network delay on the transmission rate can be reduced.

Description

Technical Field

[0001] The present application relates to the technical field of data transmission, and in particular to a VPN data transmission method, device, medium and program product. Background Art

[0002] SSL VPN protocol (Secure Socket Layer Virtual Private Network) is a remote access technology based on SSL / TLS protocol, which is used to achieve secure communication between users and servers. SSL VPN protocol downloads a client software plug-in in the browser and creates an encrypted, virtual point-to-point connection between the client and the VPN device, thereby ensuring the security of data when passing through the Internet.

[0003] In the application scenario of cloud security SSL VPN, the data deployed on the cloud server is transmitted in the wide area network after being processed by the SSL VPN device. Due to the uncontrollable network delay in the wide area network, when the network delay is large, on the one hand, it will directly lead to a slow transmission speed of the system. On the other hand, it will be affected by factors such as the retransmission mechanism of the network control protocol and the application protocol, which will further reduce the response speed of the transmission system.

[0004] Currently, the data transmission speed of the VPN channel can be accelerated by compressing the application layer data and packet header data. However, if only data compression technology is used, the data transmission speed will still be significantly affected when network delays occur.

[0005] In summary, there is an urgent need for a solution that can reduce the impact of network delay on transmission rate. Summary of the invention

[0006] The purpose of the embodiments of the present application is to provide a VPN data transmission method, device, medium and program product to reduce the impact of network delay on transmission rate.

[0007] In a first aspect, an embodiment of the present application provides a method for transmitting VPN data, including:

[0008] Obtaining a response message sent by the resource server, and storing the response message in a message buffer;

[0009] The response messages in the message buffer are merged and processed, and the merged message after the merger process is sent to the VPN client of the target user host through the VPN channel.

[0010] In the embodiment of the present application, by establishing a buffer in the VPN device to store response messages, and merging these response messages and returning them to the VPN client of the user host, the number of message transmissions can be reduced, thereby reducing the impact of network delay on the transmission rate.

[0011] In some possible embodiments, the merging of the response messages in the message buffer and sending the merged message to the VPN client of the target user host through the VPN channel includes:

[0012] When the bandwidth occupancy rate of the network transmission channel to which the target user host belongs is greater than a preset threshold, the response messages in the message buffer are merged and processed, and the merged message after the merge processing is sent to the VPN client of the target user host through the VPN channel.

[0013] In the embodiment of the present application, by determining whether to merge and transmit the messages according to the bandwidth occupancy rate of the network transmission channel, the flexibility and efficiency of VPN data transmission are further improved.

[0014] In some possible embodiments, the merging of the response messages in the message buffer and sending the merged message to the VPN client of the target user host through the VPN channel includes:

[0015] When the data receiving rate of the target user host is lower than the preset rate threshold, the response messages in the message buffer are merged and the merged message is sent to the VPN client of the target user host through the VPN channel.

[0016] In the embodiment of the present application, by determining whether to merge and transmit the messages according to the data receiving rate of the target user host, the flexibility and efficiency of VPN data transmission are further improved.

[0017] In some possible embodiments, the merging of the response messages in the message buffer and sending the merged message to the VPN client of the target user host through the VPN channel includes:

[0018] Dividing the response messages in the message buffer according to the user host IP address, and obtaining the data transmission rate corresponding to each user host IP address;

[0019] For target user host IP addresses whose data transmission rate is less than a preset transmission rate threshold, the response messages corresponding to each target user host IP address are merged and processed respectively, and the merged messages after the merge processing are sent to the VPN clients corresponding to each target user host IP address through the VPN channel respectively.

[0020] In the embodiment of the present application, the packets in the buffer are divided according to IP addresses, and packets corresponding to IP addresses with lower transmission rates are combined for transmission, thereby further improving the flexibility and efficiency of VPN data transmission.

[0021] In some possible embodiments, the merging of the response messages in the message buffer and sending the merged message to the VPN client of the target user host through the VPN channel includes:

[0022] The upper limit of the merging length is determined based on the bandwidth occupancy rate of the network transmission channel to which the target user host belongs, or the upper limit of the merging length is determined based on the data receiving rate of the target user host;

[0023] The response messages in the message buffer are merged based on the determined upper limit of the merging length, and the merged message after the merging is sent to the VPN client of the target user host through the VPN channel.

[0024] In the embodiment of the present application, the upper limit of the data length of the merged message is determined according to the bandwidth occupancy of the network transmission channel or the data receiving rate of the user host, thereby further improving the flexibility and efficiency of VPN data transmission.

[0025] In some possible embodiments, obtaining a response message sent by the resource server and storing the response message in a message buffer includes:

[0026] Obtain a response message sent by the resource server, determine that the destination IP address of the response message points to the target user host, and store the response message in a message buffer;

[0027] The target user host is a pre-configured user host that meets the message merging and sending conditions.

[0028] In the embodiment of the present application, by classifying the response messages according to IP when obtaining the response messages, only the data corresponding to the host IP that needs to be merged and transmitted is stored in the buffer, thereby further improving the flexibility and efficiency of VPN data transmission.

[0029] In some possible embodiments, before obtaining the response message sent by the resource server, determining that the destination IP of the response message points to the target user host, and storing the response message in the message buffer, the method further includes:

[0030] Respond to a data access request from a target user host and construct a message buffer corresponding to the target user host.

[0031] In the embodiment of the present application, by constructing a corresponding message buffer for a qualified host in response to a data access request, each user host can be individually cached and message merged, thereby further improving the flexibility and efficiency of VPN data transmission.

[0032] In a second aspect, an embodiment of the present application provides a VPN data transmission device, including:

[0033] A message cache module, used to obtain the response message sent by the resource server and store the response message in a message buffer;

[0034] The message merging module is used to merge the response messages in the message buffer and send the merged message to the VPN client of the target user host through the VPN channel.

[0035] In a third aspect, an embodiment of the present application provides an electronic device, comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor can implement the method described in any embodiment of the first aspect when executing the program.

[0036] In a fourth aspect, an embodiment of the present application provides a computer-readable storage medium, on which a computer program is stored. When the computer program is executed by a processor, the method described in any embodiment of the first aspect can be implemented.

[0037] In a fifth aspect, an embodiment of the present application provides a computer program product, wherein the computer program product includes a computer program, wherein when the computer program is executed by a processor, the method described in any embodiment of the first aspect can be implemented. BRIEF DESCRIPTION OF THE DRAWINGS

[0038] In order to more clearly illustrate the technical solutions of the embodiments of the present application, the drawings required for use in the embodiments of the present application will be briefly introduced below. It should be understood that the following drawings only show certain embodiments of the present application and therefore should not be regarded as limiting the scope. For ordinary technicians in this field, other related drawings can be obtained based on these drawings without paying creative work.

[0039] Figure 1 A flow chart of a VPN data transmission method provided in an embodiment of the present application;

[0040] Figure 2 A system architecture diagram of the VPN data transmission process provided in the embodiment of the present application;

[0041] Figure 3A schematic diagram of the encapsulation format for message merging provided in an embodiment of the present application;

[0042] Figure 4 A schematic diagram of the structure of a VPN data transmission device provided in an embodiment of the present application;

[0043] Figure 5 A schematic diagram of the structure of an electronic device provided in an embodiment of the present application. DETAILED DESCRIPTION

[0044] The technical solutions in the embodiments of the present application will be described below in conjunction with the drawings in the embodiments of the present application.

[0045] It should be noted that similar reference numerals and letters represent similar items in the following drawings, so once an item is defined in one drawing, it does not need to be further defined and explained in subsequent drawings. At the same time, in the description of this application, the terms "first", "second", etc. are only used to distinguish the description and cannot be understood as indicating or implying relative importance.

[0046] It should be noted that the existing technology mainly improves the efficiency of data packet transmission through data compression. However, when the network delay is large, since the data compression technology only reduces the size of the data packet but does not reduce the number of times the data packet is sent, the overall transmission rate of the data packet will still be greatly affected by the network delay, resulting in low data transmission efficiency.

[0047] To this end, an embodiment of the present application provides a VPN data transmission method. In a scenario where the data transmission speed is reduced due to large wide area network data transmission delay in a cloud security environment, the method combines multiple messages in the SSL VPN channel for transmission to increase the length of each transmitted message and reduce the number of message transmissions, thereby effectively reducing the impact of network delay on the transmission rate and improving the overall transmission efficiency of data messages.

[0048] like Figure 1 As shown, the embodiment of the present application provides a VPN data transmission method, which is executed by a VPN device and may include the following steps:

[0049] S1. Obtain the response message sent by the resource server and store the response message in the message buffer.

[0050] It should be noted that the embodiment of the present application takes SSL VPN as an example. Through SSL VPN technology, an encrypted, virtual point-to-point connection channel can be created between the SSLVPN client and the VPN device to ensure the security of the data therein when passing through the Internet. Among them, the SSLVPN client is deployed on the user host, and the user host that has successfully registered and logged in can request data access from the resource server through the VPN channel.

[0051] When the resource server receives the data access request from the user host, it will return the data that the user wants to access in the form of a response message according to the request. During this process, the response message sent by the resource server will first reach the VPN device.

[0052] A message buffer for caching data can be pre-created in the VPN device, wherein the message buffer can be one or more, and the storage space size of each message buffer can be set according to actual needs. When receiving the response message sent by the resource server, these response messages are stored in the message buffer.

[0053] S2. The response messages in the message buffer are merged and processed, and the merged message after the merger is sent to the VPN client of the target user host through the VPN channel.

[0054] Specifically, when there are response messages in the message buffer, it is necessary to merge the response messages in the message buffer, and send the merged message after the merge processing to the VPN client of the corresponding target user host through the VPN channel.

[0055] It can be understood that the VPN channel is a connection channel established between the target user host and the VPN device through the VPN client. The channel adopts tunnel transmission technology, encapsulates the data packets that need to be transmitted through the tunnel, and then realizes VPN remote access through data packet encryption / decryption and conversion of data packet target address.

[0056] It should be noted that step S2 may be to periodically extract response messages from the message buffer and merge them based on a preset frequency; or to extract response messages from the message buffer and merge them based on a preset upper limit of the merged message length.

[0057] Based on this, by establishing a buffer in the VPN device to store response messages, and merging these response messages and returning them to the user host through the VPN channel, the impact of network delay on the transmission rate can be reduced by reducing the number of message transmissions, thereby effectively improving the transmission efficiency of VPN data.

[0058] In some possible embodiments, step S2, merging the response messages in the message buffer and sending the merged message after merging to the VPN client of the target user host through the VPN channel, may include:

[0059] S201. When the bandwidth occupancy rate of the network transmission channel to which the target user host belongs is greater than a preset threshold, the response messages in the message buffer are merged and processed, and the merged message after the merge processing is sent to the VPN client of the target user host through the VPN channel.

[0060] It should be noted that before merging the response messages in the message buffer, a condition determination step may be added. For example, whether to merge the messages may be determined based on the bandwidth occupancy of the corresponding network transmission channel.

[0061] Specifically, when the bandwidth occupancy rate of the network transmission channel to which the target user host belongs is greater than the preset threshold, it means that the network transmission channel may have a certain degree of network delay, so it is necessary to merge the response messages in the message buffer, and then return the merged message to the target user host through the VPN channel. When the bandwidth occupancy rate of the network transmission channel is not greater than the preset threshold, it is considered that the number of times the message data is sent is likely to have no effect on the overall data transmission rate, so the response message in the message buffer can be directly returned to the target user host through the VPN channel in normal mode, thereby omitting the process of merging and sending messages, and avoiding affecting the overall transmission efficiency.

[0062] Based on this, by determining whether to merge and transmit the messages according to the bandwidth occupancy rate of the network transmission channel to which the target user host belongs, the flexibility and efficiency of VPN data transmission are further improved.

[0063] In some possible embodiments, step S2, merging the response messages in the message buffer and sending the merged message after merging to the VPN client of the target user host through the VPN channel, may include:

[0064] S202: When the data receiving rate of the target user host is lower than a preset rate threshold, the response messages in the message buffer are merged and the merged message is sent to the VPN client of the target user host through the VPN channel.

[0065] It should be noted that, in addition to using the bandwidth occupancy rate of the network transmission channel to which the target user host belongs as a basis for determination, the network delay situation can also be determined directly according to the data receiving rate of the target user host.

[0066] Specifically, a separate thread can be configured to monitor the data receiving rate fed back by the target user host in real time. If its data receiving rate is lower than the preset rate threshold, it means that the network transmission channel may have a certain degree of network delay. Therefore, it is necessary to merge the response messages in the message buffer and then return the merged messages to the target user host through the VPN channel. If its data receiving rate is not lower than the preset rate threshold, it is considered that there is no network delay in the corresponding network transmission channel at this time, and data can be sent in normal mode.

[0067] Based on this, the data receiving rate of the target user host is used as the basis for determining the network delay, and whether to merge the messages for transmission is determined based on this, thereby further improving the flexibility and efficiency of VPN data transmission.

[0068] In some possible embodiments, step S2, merging the response messages in the message buffer and sending the merged message after merging to the VPN client of the target user host through the VPN channel, may include:

[0069] S203, dividing the response messages in the message buffer according to the user host IP address, and obtaining the data transmission rate corresponding to each user host IP address;

[0070] S204. For target user host IP addresses whose data transmission rates are lower than a preset transmission rate threshold, respectively merge the response messages corresponding to the target user host IP addresses, and send the merged messages to the VPN clients corresponding to the target user host IP addresses through VPN channels.

[0071] It should be noted that the message buffer can be used to store response messages corresponding to different user host IP addresses. When the message buffer stores response messages corresponding to different user host IP addresses, these response messages can be first divided according to the user host IP addresses, where one user host IP address corresponds to a group of response messages; then, the data transmission rate corresponding to each user host IP address is obtained respectively, where the data transmission rate can be determined according to the relevant parameters of the network transmission channel corresponding to each user host IP address monitored.

[0072] Then, determine whether the data transmission rate corresponding to each user host IP address is less than the preset transmission rate threshold; for the target user host IP address whose data transmission rate is less than the preset transmission rate threshold, it means that the network delay is likely to have a certain impact on its transmission rate, so the response messages corresponding to this part of the target user host IP addresses are merged and returned; otherwise, it means that its transmission rate is temporarily not affected by relevant factors and data can be sent in normal mode.

[0073] Based on this, the messages in the buffer are divided according to the IP addresses, and the messages corresponding to some host IP addresses with lower transmission rates are merged for transmission, thereby further improving the flexibility and efficiency of VPN data transmission.

[0074] In some possible embodiments, step S2, merging the response messages in the message buffer and sending the merged message after merging to the VPN client of the target user host through the VPN channel, may include:

[0075] S205: determining the upper limit of the combined length based on the bandwidth occupancy rate of the network transmission channel to which the target user host belongs, or determining the upper limit of the combined length based on the data receiving rate of the target user host;

[0076] S206: The response messages in the message buffer are merged based on the determined upper limit of the merge length, and the merged message after the merge is sent to the VPN client of the target user host through the VPN channel.

[0077] It should be noted that, under the condition of network delay, the higher the number of data packet transmissions, the longer the overall transmission time; on the other hand, since the data merging process needs to extract the response message in the message buffer, it is necessary to wait for the response message to be stored in the message buffer before merging and processing. At the same time, the duration of the message merging and parsing process is also related to the length of the merged data. Based on this, in order to maximize the overall transmission efficiency of the data packet, the upper limit of the length of the merged message can be adjusted according to the network delay.

[0078] Specifically, the network delay of the corresponding network channel can be measured according to the bandwidth occupancy rate of the network transmission channel to which the target user host belongs or the data receiving rate of the target user host, and the corresponding upper limit of the merge length can be determined according to a pre-set corresponding relationship; then, the messages are merged and transmitted according to the currently determined upper limit of the merge length.

[0079] It should be noted that since the network delay of the network transmission channel usually changes in real time, steps S205-S206 can be performed based on a preset period, that is, the corresponding upper limit of the merge length can be periodically determined according to the network delay at the current moment, and the messages can be merged and transmitted based on this upper limit of the merge length.

[0080] Based on this, the upper limit of the data length of the merged message is determined according to the bandwidth occupancy of the network transmission channel or the data receiving rate of the user host, thereby further improving the flexibility and efficiency of VPN data transmission.

[0081] In some possible embodiments, step S1, obtaining a response message sent by the resource server and storing the response message in a message buffer, may include:

[0082] S101, obtaining a response message sent by a resource server, determining that the destination IP address of the response message points to a target user host, and storing the response message in a message buffer;

[0083] The target user host is a pre-configured user host that meets the message merging and sending conditions.

[0084] It should be noted that the object scope of message merging transmission can be set in advance according to business requirements, that is, the user host can be configured to meet the message merging transmission conditions or not meet the message merging transmission conditions according to business requirements.

[0085] For the target user host that meets the message merging and sending conditions, when obtaining the response message sent by the resource server, if the destination IP of the response message points to the target user host, the response message is stored in the message buffer; based on this, a separate sending thread can be used to monitor whether there is a response message in the message buffer, and if so, these response messages are automatically obtained and merged for transmission. On the contrary, for user hosts that do not meet the message merging and sending conditions, when the response messages corresponding to these user hosts are obtained, they can be directly forwarded and returned in normal mode.

[0086] Based on this, by classifying the obtained response messages according to IP, only the messages corresponding to the host IP that need to be combined and transmitted are stored in the buffer, thereby further improving the flexibility and efficiency of VPN data transmission.

[0087] In some possible embodiments, before step S101, the following steps may also be included:

[0088] S1011. Respond to a data access request from a target user host and construct a message buffer corresponding to the target user host.

[0089] It should be noted that the message buffer can store response messages corresponding to different user hosts, and divide and merge these response messages according to the user host IP addresses for transmission.

[0090] In addition, in the embodiment of the present application, separate message buffers can also be constructed for different user hosts. Specifically, when responding to the data access request of the user host, it is determined whether the user host meets the message merging and sending conditions. For the target user host that meets the message merging and sending conditions, a message buffer corresponding to the target user host is constructed. When the response message returned by the resource server is subsequently received, it can be stored in the corresponding message buffer according to the IP information of the response message. Therefore, when the data in these message buffers are subsequently merged and transmitted, it is no longer necessary to divide them according to the IP address of the response message.

[0091] Based on this, by building a corresponding message buffer for qualified user hosts when responding to data access requests, each user host can be cached separately and message merged for transmission, thereby further improving the flexibility and efficiency of VPN data transmission.

[0092] See also Figure 2 The following specific examples are given to explain in detail the VPN data transmission method of the embodiment of the present application:

[0093] Step 1: First, create an SSL VPN client on user host A. By establishing an SSL VPN channel between the SSL VPN client and the VPN device, the interactive data between the user host and the resource server can be transmitted through the SSL VPN channel.

[0094] Step 2: User host A initiates a data access request;

[0095] Step 3: After receiving the data access request from user host A, the SSL VPN client encapsulates the data into a secure message and then sends the encapsulated secure message to the VPN device.

[0096] Step 4: After receiving the secure message, the VPN device decapsulates the secure message and then sends the parsed message to the resource server;

[0097] Step 5: After receiving the data access request sent by user host A, the resource server returns a response message corresponding to the request to the VPN device;

[0098] Step 6: After receiving the response message sent by the resource server, the VPN device stores the response message in the message buffer;

[0099] Step 7: The VPN device cyclically checks whether there is data (response message) in the message buffer. If there is data, it merges and processes the response messages belonging to user host A in the message buffer, and then uses SSL VPN channel packaging technology to encapsulate multiple response messages into one message.

[0100] When merging multiple messages, the message encapsulation format can be as follows: Figure 3 As shown, data length information is added to the header of each merged message, and this information includes but is not limited to the length of the data message, the data type identifier, etc.

[0101] Step 8: The VPN device sends the encapsulated secure message (the message after the combined processing) to the SSL VPN client through the VPN channel;

[0102] Step 9: The SSL VPN client parses the received secure message according to the multi-message encapsulation format and returns the parsed messages to user host A one by one.

[0103] It should be noted that when user host A initiates multiple data access requests, the VPN device can merge and assemble the response messages of different requests when processing the response messages returned by the resource server and return them to the SSL VPN client. Since each merged message contains data length information when the VPN device encapsulates the merged message, the SSLVPN client can read and parse these merged messages according to the data length information, so that the data can be classified according to the request without causing data confusion.

[0104] It should be noted that the embodiment of the present application merges and transmits the messages that need to be transmitted through the VPN channel, thereby increasing the transmission volume of the effective load under the same bandwidth, reducing the number of data transmission times, and reducing the number of operations for encryption and decryption of the messages by the VPN device and the SSL VPN client, thereby effectively saving computing resources for data transmission and improving the transmission efficiency of the messages.

[0105] Please refer to Figure 4 , Figure 4 The following is a block diagram showing the composition of the VPN data transmission device provided by some embodiments of the present application. It should be understood that the VPN data transmission device is similar to the above-mentioned Figure 1 Corresponding to the method embodiment, each step involved in the above method embodiment can be executed. The specific functions of the VPN data transmission device can refer to the above description. To avoid repetition, the detailed description is appropriately omitted here.

[0106] Figure 4 The VPN data transmission device includes at least one software function module that can be stored in a memory in the form of software or firmware or fixed in the VPN data transmission device, and the VPN data transmission device includes:

[0107] The message cache module 410 is used to obtain the response message sent by the resource server and store the response message in the message buffer;

[0108] The message merging module 420 is used to merge the response messages in the message buffer and send the merged message to the VPN client of the target user host through the VPN channel.

[0109] It can be understood that the above-mentioned device item embodiment corresponds to the method item embodiment of the present invention. A VPN data transmission device provided by the embodiment of the present invention can implement the VPN data transmission method provided by any method item embodiment of the present invention.

[0110] Those skilled in the art can clearly understand that, for the convenience and brevity of description, the specific working process of the device described above can refer to the corresponding process in the aforementioned method, and will not be described in detail here.

[0111] like Figure 5 As shown, some embodiments of the present application provide an electronic device 500, which includes: a memory 510, a processor 520, and a computer program stored in the memory 510 and executable on the processor 520, wherein the processor 520 reads the program from the memory 510 through a bus 530 and executes the program to implement a method of any embodiment included in the above-mentioned VPN data transmission method.

[0112] Processor 520 can process digital signals and can include various computing structures, such as complex instruction set computer structure, reduced instruction set computer structure, or a structure that implements a combination of multiple instruction sets. In some examples, processor 520 can be a microprocessor.

[0113] The memory 510 may be used to store instructions executed by the processor 520 or data related to the execution of instructions. These instructions and / or data may include codes for implementing some or all functions of one or more modules described in the embodiments of the present application. The processor 520 of the disclosed embodiment may be used to execute instructions in the memory 510 to implement the method shown above. The memory 510 includes a dynamic random access memory, a static random access memory, a flash memory, an optical memory, or other memory known to those skilled in the art.

[0114] Some embodiments of the present application further provide a computer-readable storage medium having a computer program stored thereon. The computer program is executed by a processor to execute the method described in the method embodiment.

[0115] Some embodiments of the present application further provide a computer program product, which, when executed on a computer, enables the computer to execute the method described in the method embodiment.

[0116] It should be noted that each embodiment in this specification is described in a progressive manner, and each embodiment focuses on the differences from other embodiments, and the same or similar parts between the embodiments can be referred to each other. For the device embodiment, since it is basically similar to the method embodiment, the description is relatively simple, and the relevant parts can be referred to the partial description of the method embodiment.

[0117] In several embodiments provided by the present application, it should be understood that the disclosed devices and methods can also be implemented in other ways. The device embodiments described above are merely schematic. For example, the flowcharts and block diagrams in the accompanying drawings show the possible architecture, functions and operations of the devices, methods and computer program products according to multiple embodiments of the present application. In this regard, each box in the flowchart or block diagram can represent a module, a program segment or a part of a code, and the module, a program segment or a part of a code contains one or more executable instructions for implementing the specified logical function. It should also be noted that in some alternative implementations, the functions marked in the box can also occur in a different order from the order marked in the accompanying drawings. For example, two consecutive boxes can actually be executed substantially in parallel, and they can sometimes be executed in the opposite order, depending on the functions involved. It should also be noted that each box in the block diagram and / or flowchart, and the combination of boxes in the block diagram and / or flowchart can be implemented with a dedicated hardware-based system that performs a specified function or action, or can be implemented with a combination of dedicated hardware and computer instructions.

[0118] In addition, the functional modules in the various embodiments of the present application may be integrated together to form an independent part, or each module may exist separately, or two or more modules may be integrated to form an independent part.

[0119] If the functions are implemented in the form of software function modules and sold or used as independent products, they can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present application can be essentially or partly embodied in the form of a software product that contributes to the prior art. The computer software product is stored in a storage medium, including several instructions to enable a computer device (which can be a personal computer, a server, or a network device, etc.) to perform all or part of the steps of the methods described in each embodiment of the present application. The aforementioned storage medium includes: various media that can store program codes, such as a USB flash drive, a mobile hard disk, a read-only memory (ROM), a random access memory (RAM), a magnetic disk or an optical disk.

[0120] The above description is only an embodiment of the present application and is not intended to limit the scope of protection of the present application. For those skilled in the art, the present application may have various changes and variations. Any modifications, equivalent substitutions, improvements, etc. made within the spirit and principles of the present application should be included in the scope of protection of the present application. It should be noted that similar reference numerals and letters represent similar items in the following drawings, so once an item is defined in one drawing, it does not need to be further defined and explained in the subsequent drawings.

[0121] The above is only a specific implementation of the present application, but the protection scope of the present application is not limited thereto. Any person skilled in the art who is familiar with the present technical field can easily think of changes or substitutions within the technical scope disclosed in the present application, which should be included in the protection scope of the present application. Therefore, the protection scope of the present application should be based on the protection scope of the claims.

[0122] It should be noted that, in this article, relational terms such as first and second, etc. are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Moreover, the terms "include", "comprise" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or device. In the absence of further restrictions, the elements defined by the sentence "comprise a ..." do not exclude the existence of other identical elements in the process, method, article or device including the elements.

Claims

1. A method for transmitting VPN data, characterized in that: include: Obtaining a response message sent by the resource server, and storing the response message in a message buffer; The response messages in the message buffer are merged and processed, and the merged message after the merger process is sent to the VPN client of the target user host through the VPN channel.

2. The VPN data transmission method according to claim 1, characterized in that: The step of merging the response messages in the message buffer and sending the merged message to the VPN client of the target user host through the VPN channel includes: When the bandwidth occupancy rate of the network transmission channel to which the target user host belongs is greater than a preset threshold, the response messages in the message buffer are merged and processed, and the merged message after the merge processing is sent to the VPN client of the target user host through the VPN channel.

3. The VPN data transmission method according to claim 1, characterized in that: The step of merging the response messages in the message buffer and sending the merged message to the VPN client of the target user host through the VPN channel includes: When the data receiving rate of the target user host is lower than the preset rate threshold, the response messages in the message buffer are merged and the merged message is sent to the VPN client of the target user host through the VPN channel.

4. The VPN data transmission method according to claim 1, characterized in that: The step of merging the response messages in the message buffer and sending the merged message to the VPN client of the target user host through the VPN channel includes: Dividing the response messages in the message buffer according to the user host IP address, and obtaining the data transmission rate corresponding to each user host IP address; For target user host IP addresses whose data transmission rate is less than a preset transmission rate threshold, the response messages corresponding to each target user host IP address are merged and processed respectively, and the merged messages after the merge processing are sent to the VPN clients corresponding to each target user host IP address through the VPN channel respectively.

5. The VPN data transmission method according to claim 1, characterized in that: The step of merging the response messages in the message buffer and sending the merged message to the VPN client of the target user host through the VPN channel includes: The upper limit of the merging length is determined based on the bandwidth occupancy rate of the network transmission channel to which the target user host belongs, or the upper limit of the merging length is determined based on the data receiving rate of the target user host; The response messages in the message buffer are merged based on the determined upper limit of the merging length, and the merged message after the merging is sent to the VPN client of the target user host through the VPN channel.

6. The VPN data transmission method according to claim 1, characterized in that: The obtaining of the response message sent by the resource server and storing the response message in the message buffer includes: Obtain a response message sent by the resource server, determine that the destination IP address of the response message points to the target user host, and store the response message in a message buffer; The target user host is a pre-configured user host that meets the message merging and sending conditions.

7. The VPN data transmission method according to claim 6, characterized in that: Before obtaining the response message sent by the resource server, determining that the destination IP of the response message points to the target user host, and storing the response message in the message buffer, the method further includes: Respond to a data access request from a target user host and construct a message buffer corresponding to the target user host.

8. An electronic device, characterized in that: The invention comprises a memory, a processor and a computer program stored in the memory and executable on the processor, wherein the method for transmitting VPN data according to any one of claims 1 to 7 can be implemented when the processor executes the program.

9. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, the VPN data transmission method according to any one of claims 1 to 7 is executed.

10. A computer program product, characterized in that The computer program product comprises a computer program, and when the computer program is executed by a processor, the VPN data transmission method according to any one of claims 1 to 7 is implemented.

Images