Automatic testing device and method for regional access control
Through the automated testing system, the problems of long configuration time, many steps and high cost in the WAF access control test in the prior art are solved, and fast and simplified automated testing of regional access control is realized, which improves the testing efficiency.
Patent Information
- Application Number
- CN202411547942.1
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- Filing Date
- 2024-11-01
- Publication Date
- 2025-03-04
AI Technical Summary
In the prior art, testing the access control function of WAF through an intermediate proxy server simulates traffic sources, there are problems such as long configuration time, many steps and high cost, especially when testing is required across the country or around the world.
It provides an automated testing system for regional access control, including a use case configuration module, a DUT configuration dispatch module, an initial traffic sending module, a traffic conversion proxy module and a test report management module. The system automatically generates and issues access control policies through the user input target geographic location and access control actions, and generates test traffic through the initial traffic request and traffic conversion agent module, simulates the test traffic of the target geographic location, and sends it to the WAF cluster system for testing.
Automatic testing is implemented, saving configuration time, simplifying configuration steps, reducing costs and improving testing efficiency.
Smart Images
Figure CN119561871A_ABST
Abstract
Description
Technical Field
[0001] The present application relates to the field of computer information processing technology, and in particular to a regional access control automated testing device and method. Background Art
[0002] As a special device for Web application security protection, the WAF application protection system provides access control functions, especially geographic access control policies, which are used to limit or allow access from specific sources. In order to detect the access control of WAF products, the existing technology mainly uses an intermediate proxy server to change the source of simulated traffic, thereby completing the test of the WAF access control function. Since this method requires the use of an intermediate proxy server, it is necessary to perform corresponding configurations on both the intermediate proxy service and the WAF and wait for them to take effect. In the case of needing to test all over the country and all over the world, more configuration costs are required. Therefore, this method has the problems of long configuration time, many configuration steps and high cost. Summary of the invention
[0003] In view of this, one of the technical problems solved by the embodiments of the present application is to provide a regional access control automated testing system and method, which solves the problems of long configuration time, many configuration steps and high cost in automated testing.
[0004] In a first aspect of an embodiment of the present application, a regional access control automated testing system is disclosed, the system comprising:
[0005] The use case configuration module is used to obtain the target geographical location to be access controlled, the access control action for the target geographical location and the WAF cluster system address input by the user;
[0006] The DUT configuration delivery module is used to obtain the target geographic location and the access control action delivered by the use case configuration module, and generate a corresponding access control policy according to the pre-configured test environment information and deliver it to the WAF cluster system according to the WAF cluster system address;
[0007] The initial traffic sending module is used to obtain the target geographic location sent by the use case configuration module, and after determining the IP address corresponding to the target geographic location, generate an initial traffic request according to the IP address;
[0008] The traffic conversion proxy module is used to obtain the WAF cluster system address issued by the use case configuration module and the initial traffic request issued by the initial traffic sending module, and after performing source address conversion and destination address conversion on the initial traffic request according to the IP address and the WAF cluster system address respectively, generate a test traffic request, and send the test traffic request to the WAF cluster system for testing;
[0009] The test report management module is used to obtain the response result of the WAF cluster system's test feedback on the test traffic request.
[0010] Furthermore, the use case configuration module also includes:
[0011] A location parameter determination submodule, used to obtain the target geographical location to be access controlled configured by the user;
[0012] The action parameter determination submodule is used to obtain the access control action input by the user for the target geographic location.
[0013] Furthermore, the use case configuration module is also used to obtain the user's selection operation on multiple preset test location combination strategies when it is detected that the number of the target geographic locations is greater than 1, and send the target test location combination strategy corresponding to the selection operation to the DUT configuration sending module.
[0014] Furthermore, the position parameter input interface includes:
[0015] a first location parameter determination unit, configured to obtain the editing information input by the user based on a preset text input interface, and verify the correctness of the editing information, and provide a predicted geographical location that may be tested based on the editing information if the correctness verification fails, and when detecting that the user has performed a selection operation on the predicted geographical location, use the predicted geographical location as the target geographical location; or use the geographical location pointed to by the editing information as the target geographical location if the correctness verification succeeds;
[0016] The second location parameter determination unit is used to provide a preset geographic location user interface, and after detecting a selection operation performed by the user on the geographic location user interface, use the geographic location corresponding to the selection operation as the target geographic location.
[0017] Furthermore, the second location parameter determination unit is further configured to, upon detecting a selection operation performed by the user on the location user interface, provide a regional location user interface to enable the user to select a regional location corresponding to the target location.
[0018] Furthermore, the use case configuration module also includes:
[0019] The time parameter determination submodule is used to obtain the access time to the target geographic location configured by the user, so as to send the access time to the DUT configuration sending module.
[0020] Furthermore, the initial traffic sending module is also used to query the target geographical location in a preset IP address library to obtain the IP address of the target geographical location, and the IP address library includes IP addresses corresponding to multiple geographical locations.
[0021] Furthermore, the initial traffic sending module is also used to configure multiple command tools, and configure one of the command tools as a default command tool, so as to generate an initial traffic request according to the IP address based on the default command tool.
[0022] Furthermore, the traffic conversion proxy module is also used to cache the test traffic request when it is detected that the test traffic request has timed out.
[0023] In a second aspect of an embodiment of the present application, a regional access control automated testing method is disclosed, which is applied to a regional access control automated testing system, wherein the regional access control automated testing system includes a use case configuration module, a DUT configuration delivery module, an initial traffic sending module, a traffic conversion agent module, and a test report management module, and the method includes:
[0024] Using the use case configuration module to obtain the target geographic location to be access controlled, the access control action for the target geographic location, and the WAF cluster system address, controlling the use case configuration module to send the target geographic location to the initial traffic sending module, sending the target geographic location and the access control action to the DUT configuration sending module, and sending the WAF cluster system address to the WAF cluster system;
[0025] The DUT configuration delivery module generates a corresponding access control policy according to the received target geographic location and the access control action and the pre-configured test environment information, and delivers it to the WAF cluster system according to the WAF cluster system address;
[0026] The initial traffic sending module determines the corresponding IP address according to the acquired target geographical location, generates an initial traffic request according to the IP address, and sends the initial traffic request to the traffic conversion proxy module;
[0027] After receiving the WAF cluster system address and the initial traffic request, the traffic conversion proxy module converts the source address and the destination address of the initial traffic request according to the IP address and the WAF cluster system address respectively, generates a test traffic request, and sends the test traffic request to the WAF cluster system for testing;
[0028] The test report management module obtains a response result of the WAF cluster system performing test feedback on the test traffic request.
[0029] Furthermore, the initial traffic sending generates an initial traffic request according to the IP address, including:
[0030] An initial traffic request is constructed based on a preset command tool, wherein the initial traffic request includes the IP address.
[0031] The present application has the following advantages: after encapsulating the IP of the test geographic location configured by the user to obtain the initial traffic request, the source address of the initial traffic request is replaced by the IP to obtain the final test traffic request, thereby simulating the test traffic of the target geographic location, and sending the test traffic to the WAF cluster system. Since the WAF cluster system has been configured with corresponding access control policies based on the user's dynamically configured geographic location and access control actions, it is possible to simulate the corresponding traffic based on the user's dynamic configuration and complete the corresponding policy configuration. Compared with the existing test method, the user can automatically complete the WAF cluster system and test traffic generation by performing one configuration, saving configuration time and improving test efficiency. BRIEF DESCRIPTION OF THE DRAWINGS
[0032] Figure 1 A block diagram of a regional access control automation test device provided by an embodiment of the present application;
[0033] Figure 2 A schematic diagram of an initial traffic request constructed by a regional access control automation test device using a postman tool according to an embodiment of the present application;
[0034] Figure 3 A schematic diagram of an initial traffic request constructed using a python tool by a regional access control automation test device provided in one embodiment of the present application;
[0035] Figure 4 A schematic diagram of the system structure of an automated testing device for application regional access control provided by one embodiment of the present application;
[0036] Figure 5A schematic diagram of a WAF configuration issued by a DUT in a system of an automated test device for application regional access control provided by an embodiment of the present application;
[0037] Figure 6 A flowchart of an automated testing method for regional access control provided in accordance with an embodiment of the present application. DETAILED DESCRIPTION
[0038] In order to make the purpose, technical solution and advantages of the present application more clearly understood, the present application is further described in detail below in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are only used to explain the present application and are not used to limit the present application.
[0039] It should be noted that although the functional modules are divided in the device schematic and the logical order is shown in the flowchart, in some cases, the steps shown or described may be performed in a different order than the module division in the device or the order in the flowchart.
[0040] In order to make the objectives, technical solutions and advantages of the present application clearer, the implementation methods of the present application will be further described in detail below in conjunction with the accompanying drawings.
[0041] According to an embodiment of the present application, a regional access control automated testing device is provided, such as Figure 1 As shown, the system 10 includes a use case configuration module 101 , a DUT configuration delivery module 102 , an initial traffic sending module 103 , a traffic conversion agent module 104 , and a test report management module 105 .
[0042] Among them, the use case configuration module 101 is used to obtain the target geographic location to be access controlled, the access control action for the target geographic location, and the WAF cluster system address input by the user. Specifically, the geographic location that needs to be tested configured by the user can be collected through a text box, or the geographic location that needs to be tested configured by the user can be determined through a preset user interface. Specifically, the access control rules include the target geographic location and the access control action for the target geographic location (such as "intercept" and "release").
[0043] The DUT configuration sending module 102 is used to obtain the target geographic location and the access control action sent by the use case configuration module, and generate a corresponding access control policy based on the pre-configured test environment information, and then send it to the WAF cluster system according to the WAF cluster system address; specifically, the pre-configured test environment information in the DUT configuration module can generally include the test device IP address, port, the name of the WAF used for testing and its password, etc.
[0044] The initial traffic sending module 103 is used to obtain the target geographic location sent by the use case configuration module, and after determining the IP address corresponding to the target geographic location, generate an initial traffic request according to the IP address. Specifically, the initial traffic sending module can provide a variety of construction instructions, and use one of them as a default construction instruction as the target construction instruction. For example, the curl command can be combined with the IP address of the target geographic location to generate test traffic. More specifically, the traffic request can include the domain name of the requested traffic, request header data, etc.
[0045] The traffic conversion proxy module 104 is used to obtain the WAF cluster system address issued by the use case configuration module and the initial traffic request issued by the initial traffic sending module, and after performing source address conversion and destination address conversion on the initial traffic request according to the IP address and the WAF cluster system address respectively, generate a test traffic request and send the test traffic request to the WAF cluster system for testing.
[0046] The test report management module 105 is used to obtain the response result of the WAF cluster system's test feedback on the test traffic request.
[0047] The embodiment of the present application obtains the final test traffic request by encapsulating the IP of the test geographic location configured by the user to obtain the initial traffic request, and then replaces the source address of the initial traffic request with the IP, thereby simulating the test traffic of the target geographic location, and sending the test traffic to the WAF cluster system. Since the WAF cluster system has been configured with corresponding access control policies based on the user's dynamically configured geographic location and access control actions, it is possible to simulate the corresponding traffic based on the user's dynamic configuration and complete the corresponding policy configuration. Compared with the existing test method, the user can automatically complete the WAF cluster system and test traffic generation with just one configuration, saving configuration time and improving test efficiency.
[0048] Furthermore, the use case configuration module also includes: a location parameter determination submodule, which is used to obtain the target geographic location to be access controlled configured by the user; and an action parameter determination submodule, which is used to obtain the access control action for the target geographic location input by the user. Specifically, the target geographic location and the corresponding access control action can be provided by a user interface, or can be obtained through a corresponding command tool. The user configuration module provides the purpose of obtaining the target geographic location and input test parameters for the access control action, reduces the amount of information configuration for automated testing, simplifies the configuration cost of automated testing of regional access control, and provides tool support for automated testing.
[0049] Furthermore, when it is detected that the number of the target geographical locations is greater than 1, the use case configuration module is further configured to obtain a selection operation of the user on a plurality of preset test location combination strategies, and send the target test location combination strategy corresponding to the selection operation to the DUT configuration sending module. For example, assume that the target geographical locations configured by the user include several countries such as China, Japan, Brazil, France, the United Kingdom, and Germany. The test location combination strategy may be an independent test strategy for separately sending configurations and testing executions for each country, or a random mixed test for randomly selecting several of these countries for testing, etc.
[0050] Furthermore, the location parameter input interface includes: a first location parameter determination unit, configured to obtain the editing information input by the user based on a preset text input interface, verify the correctness of the editing information, provide predicted geographical locations that may be tested in the case of failed correctness verification, and use the predicted geographical location as the target geographical location when it is detected that the user selects the predicted geographical location; or use the geographical location pointed to by the editing information as the target geographical location in the case of successful correctness verification; a second location parameter determination unit, configured to provide a preset geographical location user interface, and use the geographical location corresponding to the selection operation as the target geographical location after it is detected that the user selects an operation on the geographical location user interface. Through the setting of the first location parameter determination unit, the functions of data verification and error correction prompt for the editing information input by the user are achieved, and the occurrence of problems that cannot be executed caused by incorrect user configuration is avoided. During application, the correctness verification includes verification of Chinese and non-Chinese. For example, assume that the user's input is in Chinese. The user's input can be directly matched with a preset geographical location library. If the match fails, it indicates that the correctness verification fails. Specifically, the user's input can be segmented, so as to calculate the similarity between the segmentation result and any geographical location in the geographical location library, and use the geographical location with a high similarity as an approximate geographical location for provision. Specific data verification and error correction prompt scenarios are as follows: when the user inputs "ru ben", it will first prompt that no target country is matched, and ask whether to use the approximation "Japan"; when the user inputs "ri", it will first prompt that no target country is matched, and ask whether to use the approximation "Japan"; again, when the user inputs "China Japan", it will first prompt that no target country is matched, and ask whether to use the two test options of "China" and "Japan" for the user to select; when the user inputs repeated parts, they will be de-duplicated and sent; support for the user to input China, USA, etc., will be translated into corresponding test options such as China and the United States.
[0051] Furthermore, the second location parameter determination unit is also used to provide a regional geographic location user interface to enable the user to select the subdivided regional location corresponding to the target geographic location when detecting the user's selection operation on the geographic location user interface. When applied, the target geographic location is generally a country, and the regional geographic location can belong to a region of the country, which can be the next level administrative region of the country or the next level administrative region of the next level administrative region. For example, if the target geographic country is China, the regional location can be a province, city, or county (such as XX city). The setting of the regional geographic location user interface plays a role in refining the visited area.
[0052] Furthermore, the use case configuration module also includes: a time parameter determination submodule, which is used to obtain the access time of the target geographic location configured by the user, so as to send the access time to the DUT configuration delivery module. Specifically, the access time can be configured through a preset time setting tool to limit the access time of the access control action of the target geographic location. For example, suppose the user is configured to intercept requests from China from XX / XX / XX to XX / XX / YY / XX.
[0053] Furthermore, the initial traffic sending module is also used to query the target geographical location in a preset IP address library to obtain the IP address of the target geographical location, and the IP address library includes IP addresses corresponding to multiple geographical locations. Specifically, the data recorded in the IP address library may include: China: 211.145.55.129; Japan: 203.0.113.1; Brazil: 2.16.0.1; France: 80.239.160.9; United Kingdom: 94.130.133.83; Germany: 82.165.80.1. By matching the IP address library, the IP address corresponding to the target geographical location configured by the user is obtained.
[0054] Furthermore, the initial traffic sending module is also used to configure a variety of command tools, and configure one of the command tools as a default command tool, so as to generate an initial traffic request according to the IP address based on the default command tool. The following is an example of using the curl command: curl-kvo / dev / null http: / / 10.95.17.135 / -H"Host:www.fortest.com"-H"SourceIP:211.145.55.129". Among them, in the curl command: "-kvo / dev / null" is mainly used for basic commands, does not output a response page, only displays the request and feedback header information, and is used for testing and verification; the "-H host" part is the domain name of the requested traffic, this domain name is a reference example, not actual valid data; the "-H SourceIP" part is the request header data of this traffic, which is mainly used for the "traffic conversion proxy module".
[0055] When applied, this application also provides wget, postman and python tools to construct the initial traffic request.
[0056] For example, taking the initial traffic request constructed by the curl command above as an example, the corresponding commands of different tools are as follows:
[0057] wget -d http: / / 10.95.17.135--header="Host:www.fortest.com"--header="SourceIP:211.145.55.129".
[0058] The tmp.postman_collection.json configuration file in the root path of the postman tool and the testrequests.py configuration file in the root path of the python tool are as follows Figure 2 , Figure 3 shown.
[0059] Furthermore, the traffic conversion proxy module is also used to cache the test traffic request when it is detected that the test traffic request has timed out.
[0060] Combine the following Figure 4The provided system describes the present application in detail. The system includes a regional access control automated testing device 10 and a WAF cluster system 20. First, the user inputs the test parameters through the use case configuration module. The input parameters include the target geographic location and the access control action for the target geographic location. The use case configuration module sends the target geographic location and the access control action for the target geographic location to the DUT configuration sending module, and the DUT configuration sending module generates the WAF configuration (i.e., the access control policy for the target geographic location) and sends it to the WAF cluster system 20. Specifically, the WAF configuration sent by the ETU can be shown in Figure 5. At the same time, the use case configuration module sends the target geographic location to the initial traffic sending module, and the initial traffic sending module queries the IP of the target geographic location. Assuming that the test item pointed to by the target geographic location is "China", the initial traffic sending module queries the IP address of China as "211.145.55.129", and uses the curl command to construct the initial traffic request.
[0061] The initial traffic request is as follows:
[0062] curl -kvo / dev / null http: / / 10.95.17.135 / -H"Host:www.fortest.com"-H"SourceIP:211.145.55.129".
[0063] At this time, the initial traffic request of the initial traffic sending module is sent to the traffic conversion agent module. The traffic conversion agent module extracts the header information of the initial traffic request sent by the initial traffic sending module, and converts the source IP according to "SourceIP:211.145.55.129" in the initial traffic request to obtain the expected test traffic request, and sends it to the WAF cluster system. The WAF cluster system tests and processes the test traffic request. After the test is completed, the WAF cluster system returns the test results to the regional access control automatic testing device 10.
[0064] According to an embodiment of the present application, a regional access control automated testing method is provided, which is applied to a regional access control automated testing system. The regional access control automated testing system includes a use case configuration module, a DUT configuration delivery module, an initial traffic sending module, a traffic conversion agent module, and a test report management module. Figure 6 As shown, the method includes steps S101 to S105.
[0065] Step S101: using the use case configuration module to obtain the target geographic location to be access controlled, the access control action for the target geographic location, and the WAF cluster system address, controlling the use case configuration module to send the target geographic location to the initial traffic sending module, sending the target geographic location and the access control action to the DUT configuration sending module, and sending the WAF cluster system address to the WAF cluster system;
[0066] Step S102: the DUT configuration delivery module generates a corresponding access control policy according to the received target geographic location and the access control action and the pre-configured test environment information, and delivers it to the WAF cluster system according to the WAF cluster system address;
[0067] Step S103: the initial traffic sending module determines the corresponding IP address according to the acquired target geographical location, generates an initial traffic request according to the IP address, and sends the initial traffic request to the traffic conversion proxy module;
[0068] Step S104: After receiving the WAF cluster system address and the initial traffic request, the traffic conversion proxy module converts the source address and the destination address of the initial traffic request according to the IP address and the WAF cluster system address respectively, generates a test traffic request, and sends the test traffic request to the WAF cluster system for testing;
[0069] Step S105: the test report management module obtains a response result of the WAF cluster system performing test feedback on the test traffic request.
[0070] The embodiment of the present application obtains an initial traffic request by encapsulating the IP of the test geographic location configured by the user, and then replaces the source address of the initial traffic request with the IP to obtain the final test traffic request, thereby simulating the test traffic of the target geographic location, and sending the test traffic to the WAF cluster system. Since the WAF cluster system has configured the corresponding access control policy according to the user's dynamically configured geographic location and its access control action, it is possible to simulate the corresponding traffic according to the user's dynamic configuration and complete the corresponding policy configuration. Compared with the existing testing methods, it saves configuration time and improves testing efficiency.
[0071] In some embodiments, the initial traffic sending generates an initial traffic request according to the IP address further comprising:
[0072] An initial traffic request is constructed based on a preset command tool, where the initial traffic request includes an IP address.
[0073] The above is a specific description of the preferred implementation of the present application, but the present application is not limited to the above-mentioned implementation mode. Technical personnel familiar with the field can also make various equivalent deformations or substitutions without violating the spirit of the present application. These equivalent deformations or substitutions are all included in the scope defined by the claims of the present application.
Claims
1. A regional access control automated testing device, characterized in that: The device comprises: The use case configuration module is used to obtain the target geographical location to be access controlled, the access control action for the target geographical location and the WAF cluster system address input by the user; The DUT configuration delivery module is used to obtain the target geographic location and the access control action delivered by the use case configuration module, and generate a corresponding access control policy according to the pre-configured test environment information and deliver it to the WAF cluster system according to the WAF cluster system address; The initial traffic sending module is used to obtain the target geographic location sent by the use case configuration module, and after determining the IP address corresponding to the target geographic location, generate an initial traffic request according to the IP address; The traffic conversion proxy module is used to obtain the WAF cluster system address issued by the use case configuration module and the initial traffic request issued by the initial traffic sending module, and after performing source address conversion and destination address conversion on the initial traffic request according to the IP address and the WAF cluster system address respectively, generate a test traffic request, and send the test traffic request to the WAF cluster system for testing; The test report management module is used to obtain the response result of the WAF cluster system's test feedback on the test traffic request.
2. The device according to claim 1, characterized in that The use case configuration module also includes: A location parameter determination submodule, used to obtain the target geographical location to be access controlled configured by the user; The action parameter determination submodule is used to obtain the access control action input by the user for the target geographic location.
3. The device according to claim 2, characterized in that The use case configuration module is also used to obtain the user's selection operation on multiple preset test location combination strategies when it is detected that the number of the target geographic locations is greater than 1, and send the target test location combination strategy corresponding to the selection operation to the DUT configuration sending module.
4. The device according to claim 2, characterized in that The position parameter input interface includes: a first location parameter determination unit, configured to obtain the editing information input by the user based on a preset text input interface, and verify the correctness of the editing information, and provide a predicted geographical location that may be tested based on the editing information if the correctness verification fails, and when detecting that the user has performed a selection operation on the predicted geographical location, use the predicted geographical location as the target geographical location; or use the geographical location pointed to by the editing information as the target geographical location if the correctness verification succeeds; The second location parameter determination unit is used to provide a preset geographic location user interface, and after detecting a selection operation performed by the user on the geographic location user interface, use the geographic location corresponding to the selection operation as the target geographic location.
5. The device according to claim 4, characterized in that The second location parameter determination unit is further configured to, upon detecting a selection operation by the user on the location user interface, provide a regional location user interface to enable the user to select a regional location corresponding to the target location.
6. The device according to claim 1, characterized in that The initial traffic sending module is further used to query the target geographical location in a preset IP address library to obtain the IP address of the target geographical location, and the IP address library includes IP addresses corresponding to multiple geographical locations.
7. The device according to claim 1, characterized in that The initial traffic sending module is further used to configure multiple command tools, and configure one of the command tools as a default command tool, so as to generate an initial traffic request according to the IP address based on the default command tool.
8. The device according to claim 1, characterized in that The traffic conversion proxy module is also used to cache the test traffic request when it is detected that the test traffic request has timed out.
9. A regional access control automated testing method, applied to a regional access control automated testing system, characterized in that: The regional access control automated testing system comprises a use case configuration module, a DUT configuration delivery module, an initial traffic sending module, a traffic conversion proxy module and a test report management module, and the method comprises: Using the use case configuration module to obtain the target geographic location to be access controlled, the access control action for the target geographic location, and the WAF cluster system address, controlling the use case configuration module to send the target geographic location to the initial traffic sending module, sending the target geographic location and the access control action to the DUT configuration sending module, and sending the WAF cluster system address to the WAF cluster system; The DUT configuration delivery module generates a corresponding access control policy according to the received target geographic location and the access control action and the pre-configured test environment information, and delivers it to the WAF cluster system according to the WAF cluster system address; The initial traffic sending module determines the corresponding IP address according to the acquired target geographical location, generates an initial traffic request according to the IP address, and sends the initial traffic request to the traffic conversion proxy module; After receiving the WAF cluster system address and the initial traffic request, the traffic conversion proxy module converts the source address and the destination address of the initial traffic request according to the IP address and the WAF cluster system address respectively, generates a test traffic request, and sends the test traffic request to the WAF cluster system for testing; The test report management module obtains a response result of the WAF cluster system performing test feedback on the test traffic request.
10. The method according to claim 9, characterized in that The initial traffic sending generates an initial traffic request according to the IP address, including: An initial traffic request is constructed based on a preset command tool, wherein the initial traffic request includes the IP address.