Database proxy method and device and electronic equipment

Abstract

The invention discloses a database proxy method and device and electronic equipment, and relates to the technical field of databases. Compared with the prior art, the database proxy method and device and the electronic equipment have the advantages that a database access request initiated by a database client is obtained through a unified proxy IP address and a unified proxy port number; and forwarding the database access request to a corresponding database service according to a pre-constructed database feature table. According to the embodiment of the invention, multiple same or different types of database services are agented through the unified agented IP address and port number, so that the management cost and maintenance cost of the agented service are greatly reduced.

Description

Technical Field

[0001] The present application relates to the field of database technology, and in particular to a database proxy method, device and electronic device. Background Art

[0002] In the digital age, databases are core components for information storage and processing, so their security and access control are particularly important. With the continuous expansion and diversification of corporate business, in order to meet the specific needs of different business modules for data storage, query and processing, it is often necessary to deploy multiple database services of the same or different types in the same business environment.

[0003] To ensure secure access and efficient management of these database services, the traditional approach is to forward database access requests from clients to the corresponding database services through proxy services with different IP addresses and port numbers.

[0004] However, with the development of business, the number and types of databases continue to increase, which will lead to a sharp increase in the number of IP addresses and port numbers that the proxy service needs to maintain, greatly increasing the management and maintenance costs of the proxy service. Summary of the invention

[0005] In view of this, the present application provides a database proxy method, device and electronic device, which proxy multiple database services of the same or different types through a unified proxy IP address and port number, greatly reducing the management cost and maintenance cost of the proxy service.

[0006] According to a first aspect of the present application, a database proxy method is provided, comprising:

[0007] Obtain database access requests initiated by database clients through a unified proxy IP address and port number;

[0008] According to the pre-built database feature table, the database access request is forwarded to the corresponding database service.

[0009] In some embodiments, constructing a database feature table includes:

[0010] Obtaining main feature information, sub-feature information and identification information of multiple databases;

[0011] The database feature table is constructed according to the main feature information, the sub-feature information and the identification information, wherein the main feature information, the sub-feature information and the identification information of each database are in a corresponding relationship.

[0012] In some embodiments, the main feature information includes database type information and database version number information, the sub-feature information includes database account, database name, platform information, and connection parameters, and the identification information includes the IP address and port number of the database.

[0013] In some embodiments, the database access request carries data configuration information;

[0014] The step of forwarding the database access request to a corresponding database service according to the pre-built database feature table includes:

[0015] Identifying the data configuration information to obtain target database type information of the database access request;

[0016] Extracting main feature information from the target database type information to obtain target database version number information;

[0017] Searching for the target database version number information in the database feature table;

[0018] If the unique target database version number information is found in the database feature table, the target database IP address and port number corresponding to the unique target database version number information in the database feature table are obtained, and the database access request is forwarded to the corresponding target database service through the target database IP address and port number.

[0019] In some embodiments, forwarding the database access request to a corresponding database service according to a pre-built database feature table includes:

[0020] If multiple target database version number information is found in the database feature table, sub-feature information is extracted from the target database type information, and the sub-feature information is searched in the database feature table;

[0021] If the unique sub-feature information is found in the database feature table, the target database IP address and port number corresponding to the unique sub-feature information in the database feature table are obtained, and the database access request is forwarded to the corresponding target database service through the target database IP address and port number.

[0022] In some embodiments, forwarding the database access request to a corresponding database service according to a pre-built database feature table includes:

[0023] If a plurality of the sub-feature information is found in the database feature table, access parameter information is generated based on the identification information in the database feature table, wherein each database corresponds to a unique access parameter information;

[0024] Obtaining a database access request initiated by a database client through a unified proxy IP address and port number, wherein the database access request carries target access parameter information;

[0025] Searching the target access parameter information in the database feature table;

[0026] If the target access parameter information is found in the database feature table, the target database IP address and port number corresponding to the target access parameter information in the database feature table are obtained, and the database access request is forwarded to the corresponding target database service through the target database IP address and port number.

[0027] In some embodiments, after forwarding the database access request to the corresponding target database service via the target database IP address and port number, the method further includes:

[0028] The access parameter information in the database feature table is deleted.

[0029] According to a second aspect of the present application, a database proxy device is provided, comprising:

[0030] The acquisition module is used to obtain the database access request initiated by the database client through the unified proxy IP address and port number;

[0031] The forwarding module is used to forward the database access request to the corresponding database service according to the pre-built database feature table.

[0032] According to a third aspect of the present application, a computer-readable storage medium is provided, on which a computer program is stored. When the computer program is executed by a processor, the database proxy method described in the first aspect is implemented.

[0033] According to a fourth aspect of the present application, an electronic device is provided, comprising a storage medium, a processor, and a computer program stored on the storage medium and executable on the processor, wherein the processor implements the database proxy method described in the first aspect when executing the computer program.

[0034] By means of the above technical solution, the present application provides a database proxy method, device and electronic device, which can obtain a database access request initiated by a database client through a unified proxy IP address and port number; and forward the database access request to the corresponding database service according to a pre-built database feature table. For the disclosed embodiment, multiple database services of the same or different types are represented through a unified proxy IP address and port number, which greatly reduces the management cost and maintenance cost of the proxy service.

[0035] The above description is only an overview of the technical solution of the present application. In order to more clearly understand the technical means of the present application, it can be implemented in accordance with the contents of the specification. In order to make the above and other purposes, features and advantages more obvious and easy to understand, the specific implementation methods of the present application are listed below. BRIEF DESCRIPTION OF THE DRAWINGS

[0036] The accompanying drawings, which are incorporated in and constitute a part of this specification, illustrate embodiments consistent with the present application and, together with the description, serve to explain the principles of the present application.

[0037] In order to more clearly illustrate the embodiments of the present application or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, for ordinary technicians in this field, other drawings can be obtained based on these drawings without paying any creative labor.

[0038] Figure 1 A flowchart of a database proxy method provided by an embodiment of the present disclosure;

[0039] Figure 2 A flowchart of a database proxy method provided by an embodiment of the present disclosure;

[0040] Figure 3 A flowchart of a database proxy method provided by an embodiment of the present disclosure;

[0041] Figure 4 A flowchart of a database proxy method provided by an embodiment of the present disclosure;

[0042] Figure 5 A schematic diagram of the structure of a database proxy device provided in an embodiment of the present disclosure. DETAILED DESCRIPTION

[0043] The following is a description of exemplary embodiments of the present disclosure in conjunction with the accompanying drawings, including various details of the embodiments of the present disclosure to aid understanding, which should be considered as merely exemplary. Therefore, it should be recognized by those of ordinary skill in the art that various changes and modifications may be made to the embodiments described herein without departing from the scope and spirit of the present disclosure. Similarly, for the sake of clarity and conciseness, descriptions of well-known functions and structures are omitted in the following description. It should be noted that the embodiments of the present disclosure and the features therein may be combined with each other without conflict.

[0044] The following describes the database proxy method, device, and electronic device according to the embodiments of the present disclosure with reference to the accompanying drawings.

[0045] In order to reduce the number of IP addresses and port numbers that the proxy service needs to maintain, the management cost and maintenance cost of the proxy service are greatly reduced. This embodiment provides a database proxy method, such as Figure 1 As shown, the method includes:

[0046] Step 101: Obtain a database access request initiated by a database client through a unified proxy IP address and port number.

[0047] The database access request may be a request sent by a database client (such as an application) to a database server for executing a specific database operation (such as query, update, delete, etc.).

[0048] For the embodiments of the present disclosure, Figure 2 As shown, the execution subject is the database access control and protection system.

[0049] In order to improve the security of the database and protect the data in the database, the database access control and protection system can be configured with a proxy service. When the database client wants to access the database server, the database client no longer directly accesses the real IP address and port number (i.e. IP:PORT) of the database server, but accesses the unified proxy IP address and port number provided by the database access control and protection system, so that all access traffic passing through the unified proxy IP address and port number will first be processed by the database access control and protection system. The processing may include identity authentication, permission checking, data desensitization, encryption and decryption and other measures. Only processed traffic will be allowed to continue to be sent to the database server.

[0050] By providing a unified proxy IP address and port number, the cost of managing and maintaining a large number of proxy IP addresses and port numbers can be significantly reduced, while also simplifying the configuration cost of database clients and applications accessing the database.

[0051] Step 102: forward the database access request to the corresponding database service according to the pre-built database feature table.

[0052] The database feature table may include the main feature information, sub-feature information and identification information of multiple databases; the main feature information may include database type information and database version number information, the sub-feature information may include database account, database name, platform information, and connection parameters, and the identification information may include the IP address and port number of the database;

[0053] The database service can be used to execute database access requests sent by database clients and return operation results.

[0054] For the embodiments of the present disclosure, the database characteristics of the database access request (such as the requested database type, database version number information, database account, database name, etc.) can be matched with the database service characteristics in the pre-constructed database characteristic table. After finding the matching target database service, the database access control and protection system can obtain the IP address and port number of the matching target database, and can forward the database access request to the corresponding target database service through the target database IP address and port number.

[0055] In summary, according to a database proxy method disclosed in the present invention, a database access request initiated by a database client can be obtained through a unified proxy IP address and port number; and the database access request is forwarded to the corresponding database service according to a pre-built database feature table. For the disclosed embodiment, a plurality of database services of the same or different types are represented by a unified proxy IP address and port number, which greatly reduces the management cost and maintenance cost of the proxy service.

[0056] Further, as a refinement and extension of the above embodiment, in order to fully illustrate the specific implementation process of the method of this embodiment, this embodiment provides the following Figure 3 The specific method shown comprises the following steps:

[0057] Step 201: Obtain main feature information, sub-feature information and identification information of multiple databases; and construct a database feature table according to the main feature information, sub-feature information and identification information.

[0058] For the embodiments of the present disclosure, in the database access control and protection system, the connection information of the database can be configured first, which may include the IP address and port number (IP:PORT) of the database, as well as the access method information required to access the database (such as the database type (such as MySQL, Oracle, SQL Server, etc.), user authentication information (such as user name, password, etc.) and other necessary connection parameters (such as database name, SSL configuration, etc.). Through the configured connection information, the database access control and protection system can be connected to the database service.

[0059] After connecting to the database service, the database access control and protection system can obtain the main feature information, sub-feature information and identification information (ie IP:PORT) of the database through access scanning as a possible implementation method.

[0060] The main characteristic information may be basic identity information used to identify a database, such as database type information, database version number information, etc.

[0061] The sub-feature information may be more specific and detailed database configuration information used to identify the database, such as database account, database name, platform information, connection parameters, etc.

[0062] The identification information may be information used to uniquely identify and locate a database server, such as an IP address, port number, etc. of the database.

[0063] For the embodiments of the present disclosure, a database feature table may be constructed based on the main feature information, sub-feature information, and identification information of the acquired database, as shown in Table 1 below, wherein the main feature information, sub-feature information, and identification information of each database are in a corresponding relationship.

[0064]

[0065] Table 1

[0066] Step 202: forward the database access request to the corresponding database service according to the constructed database feature table.

[0067] In the embodiment of the present disclosure, when a database client initiates a database access request, the database access request may carry data configuration information, and the data configuration information may include various parameters and settings related to the database connection.

[0068] After receiving a database access request, the database access control and protection system can identify and analyze the data configuration information in the database access request. By analyzing the characteristics of the data configuration information, such as the port number, the format of the connection string, specific commands or parameters, etc., the database access control and protection system can determine the target database type information requested by the database access request, such as MySQL database, Oracle database, etc.

[0069] The target database type information can be parsed according to different data protocol types to complete the extraction of main feature information, wherein the main feature information can be the version number information of the target database.

[0070] The extracted main feature information (i.e. the target database version number information) can be matched in the database feature table.

[0071] If unique target database version number information is found in the database feature table (i.e., a unique database is matched), the database access control and protection system can obtain the IP address and port number of the target database associated with the matching item (i.e., the unique target database version number information) from the database feature table, and establish a proxy connection through the IP address and port number of the target database to access the target database (i.e., forward the database access request to the corresponding target database service through the IP address and port number of the target database).

[0072] For the disclosed embodiment, as a possible implementation method, if multiple target database version number information is found in the database feature table (i.e., multiple databases are matched), for example, there may be multiple MySQL 5.7.40 version databases in the database feature table for different applications or businesses. In this case, it is impossible to determine the unique target database that needs to be accessed only by relying on the main feature information. Sub-feature information can be further extracted from the target database type information. The sub-feature information may include more detailed information about the database. The sub-feature information is usually unique between database instances, so it can be used to distinguish different databases.

[0073] The extracted sub-feature information (such as database account, database name, platform information, connection parameters, etc.) can be matched in the database feature table. If unique sub-feature information is found in the database feature table (i.e., a unique database is matched), the database access control and protection system can obtain the IP address and port number of the target database associated with the matching item (i.e., the unique sub-feature information) from the database feature table, and establish a proxy connection to access the target database through the IP address and port number of the target database (i.e., forward the database access request to the corresponding target database service through the IP address and port number of the target database).

[0074] For the embodiments of the present disclosure, as a possible implementation method, when the database access control and protection system detects that the main features and sub-features of two or more database instances are completely consistent, a unique identifier (i.e., unique access parameter information, databaseid) can be automatically generated for each instance based on the identification information. The unique access parameter information can be a combination of numbers and / or letters.

[0075] For example, for two MySQL5.7.40 databases, if their IP addresses and port numbers are 1.1.1.1:3306 and 1.1.1.2:3306 respectively, then the database access control and protection system can assign databaseid=1 to MySQL5.7.40 (1.1.1.1:3306) in the database feature table, and the database access control and protection system can assign databaseid=2 to MySQL5.7.40 (1.1.1.2:3306) in the database feature table.

[0076] When a database client attempts to access a database, target access parameter information may be added to the connection string carried in the database access request. The target access parameter information is used to represent the unique identifier of the database instance that the client wishes to access.

[0077] For example, the connection string may be jdbc: / / IP:PORT (proxy port address)&databaseid=1;

[0078] Or, jdbc: / / IP:PORT(proxy port address)&databaseid=2.

[0079] When the database access and protection system receives a database access request initiated by a database client through a unified proxy IP address and port number, it can search in the database feature table according to the target access parameter information carried in the database access request. If the target access parameter information is found in the database feature table (i.e., a unique database is matched), the database access control and protection system can obtain the IP address and port number of the target database associated with the matching item (i.e., the target access parameter information) from the database feature table, and establish a proxy connection to access the target database through the IP address and port number of the target database (i.e., forward the database access request to the corresponding target database service through the IP address and port number of the target database), such as Figure 4 As shown, during the process of establishing a connection, the access parameter information in the customized database feature table can be removed.

[0080] In summary, according to a database proxy method disclosed in the present invention, a database access request initiated by a database client can be obtained through a unified proxy IP address and port number; and the database access request is forwarded to the corresponding database service according to a pre-built database feature table. For the disclosed embodiment, a plurality of database services of the same or different types are represented by a unified proxy IP address and port number, which greatly reduces the management cost and maintenance cost of the proxy service.

[0081] Based on the above Figure 1 , Figure 3 The specific implementation of the method shown in this embodiment provides a database proxy device, such as Figure 5 As shown, the device includes: an acquisition module 31 and a forwarding module 32;

[0082] An acquisition module 31 is used to acquire a database access request initiated by a database client through a unified proxy IP address and port number;

[0083] The forwarding module 32 is used to forward the database access request to the corresponding database service according to the pre-built database feature table.

[0084] In a specific application scenario, the device further includes: a construction module 33;

[0085] The construction module 33 is used to obtain the main feature information, sub-feature information and identification information of multiple databases; and construct the database feature table according to the main feature information, the sub-feature information and the identification information, wherein the main feature information, the sub-feature information and the identification information of each database are in a corresponding relationship.

[0086] In a specific application scenario, the main feature information includes database type information and database version number information, the sub-feature information includes database account, database name, platform information, and connection parameters, and the identification information includes the IP address and port number of the database.

[0087] In a specific application scenario, the database access request carries data configuration information; the forwarding module 32 can be used to identify the data configuration information and obtain the target database type information of the database access request;

[0088] Extracting main feature information from the target database type information to obtain target database version number information;

[0089] Searching for the target database version number information in the database feature table;

[0090] If the unique target database version number information is found in the database feature table, the target database IP address and port number corresponding to the unique target database version number information in the database feature table are obtained, and the database access request is forwarded to the corresponding target database service through the target database IP address and port number.

[0091] In a specific application scenario, the forwarding module 32 may be used to extract sub-feature information from the target database type information if multiple target database version number information is found in the database feature table, and search for the sub-feature information in the database feature table;

[0092] If the unique sub-feature information is found in the database feature table, the target database IP address and port number corresponding to the unique sub-feature information in the database feature table are obtained, and the database access request is forwarded to the corresponding target database service through the target database IP address and port number.

[0093] In a specific application scenario, the forwarding module 32 may be used to generate access parameter information based on the identification information in the database feature table if a plurality of the sub-feature information is found in the database feature table, wherein each database corresponds to a unique access parameter information;

[0094] Obtaining a database access request initiated by a database client through a unified proxy IP address and port number, wherein the database access request carries target access parameter information;

[0095] Searching the target access parameter information in the database feature table;

[0096] If the target access parameter information is found in the database feature table, the target database IP address and port number corresponding to the target access parameter information in the database feature table are obtained, and the database access request is forwarded to the corresponding target database service through the target database IP address and port number.

[0097] In a specific application scenario, the device further includes: a deletion module 34;

[0098] The deletion module 34 is used to delete the access parameter information in the database feature table.

[0099] It should be noted that for other corresponding descriptions of the functional units involved in the database proxy device provided in this embodiment, please refer to Figure 1 and Figure 3 The corresponding description of the method in will not be repeated here.

[0100] Based on the above Figure 1 and Figure 3 The method shown in the present disclosure, accordingly, also provides a computer-readable storage medium having a computer program stored thereon, which implements the above-mentioned Figure 1 and Figure 3 The method shown.

[0101] Based on this understanding, the technical solution of the present disclosure can be embodied in the form of a software product, which can be stored in a non-volatile storage medium (which can be a CD-ROM, a USB flash drive, a mobile hard disk, etc.), and includes a number of instructions for enabling a computer device (which can be a personal computer, a server, or a network device, etc.) to execute the methods of various implementation scenarios of the present disclosure.

[0102] Based on the above Figure 1 and Figure 3 The method shown, and Figure 5 In order to achieve the above-mentioned purpose, the embodiment of the present disclosure also provides an electronic device that can be configured on the vehicle (such as an electric vehicle) side, and the device includes a storage medium and a processor; the storage medium is used to store a computer program; the processor is used to execute the computer program to achieve the above-mentioned Figure 1 and Figure 3 The method shown.

[0103] Optionally, the above-mentioned physical device may also include a user interface, a network interface, a camera, a radio frequency (RF) circuit, a sensor, an audio circuit, a WI-FI module, etc. The user interface may include a display, an input unit such as a keyboard, etc., and the optional user interface may also include a USB interface, a card reader interface, etc. The network interface may optionally include a standard wired interface, a wireless interface (such as a WI-FI interface), etc.

[0104] Those skilled in the art will appreciate that the above-mentioned physical device structure provided by the present disclosure does not constitute a limitation on the physical device, and may include more or fewer components, or a combination of certain components, or different arrangements of components.

[0105] The storage medium may also include an operating system and a network communication module. The operating system is a program that manages the hardware and software resources of the above-mentioned physical device, and supports the operation of the information processing program and other software and / or programs. The network communication module is used to realize the communication between the components inside the storage medium, and the communication with other hardware and software in the information processing physical device.

[0106] Through the description of the above implementation methods, those skilled in the art can clearly understand that the present disclosure can be implemented by means of software plus a necessary general hardware platform, or by hardware. Compared with the prior art, the database proxy method, device, and electronic device provided by the present disclosure obtain database access requests initiated by database clients through a unified proxy IP address and port number; and forward the database access requests to the corresponding database service according to a pre-constructed database feature table. For the embodiments of the present disclosure, a plurality of database services of the same or different types are represented by a unified proxy IP address and port number, which greatly reduces the management cost and maintenance cost of the proxy service.

[0107] It should be noted that, in this article, relational terms such as "first" and "second" are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Moreover, the term "comprising" or any other variant thereof is intended to cover non-exclusive inclusion, so that a process, method, article or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or device. In the absence of further restrictions, the elements defined by the sentence "comprising a ..." do not exclude the existence of other identical elements in the process, method, article or device including the elements.

[0108] The above is only a specific implementation of the present application, so that those skilled in the art can understand or implement the present application. Various modifications to these embodiments will be apparent to those skilled in the art, and the general principles defined herein can be implemented in other embodiments without departing from the spirit or scope of the present application. Therefore, the present application will not be limited to these embodiments herein, but will conform to the widest scope consistent with the principles and novel features applied for herein.

Claims

1. A database proxy method, characterized in that: include: Obtain database access requests initiated by database clients through a unified proxy IP address and port number; According to the pre-built database feature table, the database access request is forwarded to the corresponding database service.

2. The method according to claim 1, characterized in that Construct database feature tables, including: Obtaining main feature information, sub-feature information and identification information of multiple databases; The database feature table is constructed according to the main feature information, the sub-feature information and the identification information, wherein the main feature information, the sub-feature information and the identification information of each database are in a corresponding relationship.

3. The method according to claim 2, characterized in that The main feature information includes database type information and database version number information, the sub-feature information includes database account, database name, platform information, and connection parameters, and the identification information includes the IP address and port number of the database.

4. The method according to claim 1, characterized in that: The database access request carries data configuration information; The step of forwarding the database access request to a corresponding database service according to the pre-built database feature table includes: Identifying the data configuration information to obtain target database type information of the database access request; Extracting main feature information from the target database type information to obtain target database version number information; Searching for the target database version number information in the database feature table; If the unique target database version number information is found in the database feature table, the target database IP address and port number corresponding to the unique target database version number information in the database feature table are obtained, and the database access request is forwarded to the corresponding target database service through the target database IP address and port number.

5. The method according to claim 4, characterized in that The step of forwarding the database access request to a corresponding database service according to the pre-built database feature table includes: If multiple target database version number information is found in the database feature table, sub-feature information is extracted from the target database type information, and the sub-feature information is searched in the database feature table; If the unique sub-feature information is found in the database feature table, the target database IP address and port number corresponding to the unique sub-feature information in the database feature table are obtained, and the database access request is forwarded to the corresponding target database service through the target database IP address and port number.

6. The method according to claim 5, characterized in that The step of forwarding the database access request to a corresponding database service according to the pre-built database feature table includes: If a plurality of the sub-feature information is found in the database feature table, access parameter information is generated based on the identification information in the database feature table, wherein each database corresponds to a unique access parameter information; Obtaining a database access request initiated by a database client through a unified proxy IP address and port number, wherein the database access request carries target access parameter information; Searching the target access parameter information in the database feature table; If the target access parameter information is found in the database feature table, the target database IP address and port number corresponding to the target access parameter information in the database feature table are obtained, and the database access request is forwarded to the corresponding target database service through the target database IP address and port number.

7. The method according to claim 6, characterized in that After forwarding the database access request to the corresponding target database service through the target database IP address and port number, the method further includes: The access parameter information in the database feature table is deleted.

8. A database proxy device, characterized in that: include: The acquisition module is used to obtain the database access request initiated by the database client through the unified proxy IP address and port number; The forwarding module is used to forward the database access request to the corresponding database service according to the pre-built database feature table.

9. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the computer program is executed by a processor, the method according to any one of claims 1 to 7 is implemented.

10. An electronic device comprising a storage medium, a processor, and a computer program stored in the storage medium and executable on the processor, characterized in that: When the processor executes the computer program, the method according to any one of claims 1 to 7 is implemented.

Images