Method and system for providing public IP address for private node

Abstract

The invention discloses a method and system for providing a public IP address for a private node. The method comprises the following steps: an industrial Internet identifier analysis request end sends an industrial Internet identifier analysis request to an analysis node, and the analysis node analyzes a node public network address and sends the industrial Internet identifier analysis request to a comprehensive service gateway; the integrated service gateway forwards the industrial internet identification analysis request to a node private address of the SD-WAN network according to a forwarding strategy; verifying the public network address of the access node, and obtaining enterprise node data information; and the SD-WAN network returns the enterprise node data information to the industrial internet identifier analysis request end through the comprehensive service gateway. According to the method, the enterprise node can still participate in industrial internet identification analysis and perform security verification when no fixed public network IP address exists, and the enterprise node state information is attached when the enterprise node data information is acquired, so that the public IP address is efficiently utilized, and the enterprise node has high controllability and security.

Description

Technical Field

[0001] The present application relates to the field of industrial Internet technology, and in particular to a method and system for providing fixed public IP addresses for distributed private nodes by using an SD-WAN network and a NAT gateway service. Background Art

[0002] Industrial Internet identifiers include barcodes and QR codes. Binding industrial Internet identifiers to enterprise nodes and obtaining public information of enterprises by resolving industrial Internet identifiers has been widely used. However, the industrial Internet identifier resolution system requires that each enterprise node must have a fixed public IP address to participate in recursive resolution. Therefore, IP usage fees and special maintenance fees need to be paid for fixed public IP addresses. For small and medium-sized enterprises, while meeting their own office and Internet needs, enterprises do not need to independently configure fixed public IP addresses. Private IP addresses can already meet business needs. In addition, compared with large enterprises, small and medium-sized enterprise nodes also have the characteristics of unstable status, changing between information update, node suspension, node deactivation and other states.

[0003] Therefore, there is an urgent need for a method that can still participate in industrial Internet identity resolution without a fixed public IP address, which meets the needs of not having a fixed public IP address, being able to flexibly respond to various states of nodes, having simple daily maintenance, and ensuring the security of interactive information. Summary of the invention

[0004] Based on this, it is necessary to propose a method and system for providing public IP addresses for private enterprise nodes based on SD-WAN networking and NAT services under IPv4 or IPv6 communication protocols to address the above problems, so as to solve the problem that the industrial Internet identity resolution process cannot target non-fixed public IP addresses and cannot flexibly respond to changes in enterprise node status.

[0005] In a first aspect, the present application provides a method for providing a public IP address for a private node, the method comprising: The industrial Internet identity resolution request end sends an industrial Internet identity resolution request to the resolution node, the resolution node resolves the enterprise node public network address and sends the industrial Internet identity resolution request to the integrated service gateway, wherein the resolution node includes a primary resolution node and / or a secondary resolution node, the enterprise node public network address includes a public network IP address and a port number, and the integrated service gateway includes a NAT (Network Address Translation) gateway forwarding module, a domain name forwarding module and a data packet forwarding module, wherein the NAT gateway forwarding module forwards data information based on the network IP address, the domain name forwarding module forwards data information based on the domain name, and the data packet forwarding module forwards data information based on the field data; The integrated service gateway forwards the industrial Internet identity resolution request to the enterprise node private address of the SD-WAN (Software Defined WAN) network according to the forwarding strategy, wherein the enterprise node private address includes a private IP address and a port number, and the enterprise node is deployed on the edge device of the SD-WAN network; Verify access to the public network address of the enterprise node and obtain enterprise node data information; The SD-WAN network returns the enterprise node data information to the industrial Internet identity resolution request end through the integrated service gateway.

[0006] In one embodiment, the industrial Internet identity resolution request end sends an industrial Internet identity resolution request to the resolution node, and previously registers the enterprise node public network address with the secondary resolution node through the integrated service gateway, including: The edge device accesses the SD-WAN network and generates a private IP address and port number. The edge device applies for a public IP address and port number from the integrated service gateway and configures them to the enterprise node, wherein the enterprise node is an edge device with a corresponding relationship between a public address and a private address; The enterprise node registers the public IP address and port number with the registration interface of the secondary resolution node.

[0007] In one embodiment, the edge device accesses the SD-WAN network and generates a private IP address and port number, including: In an Internet environment, connect the SD-WAN network to the integrated service gateway; Connecting a central server to the SD-WAN network, wherein the central server has an IP registration module and / or an IP mapping table; Connect edge devices to the SD-WAN network; The edge device sends a request for a private IP address to the SD-WAN network. The IP registration module of the central server records the private IP address and port number assigned by the edge device, and saves the private IP address and port number in the IP mapping table.

[0008] In one embodiment, the edge device applies for a public network IP address and port number from the integrated service gateway and configures them to the enterprise node, including: The edge device sends a request for applying for a public IP address to the integrated service gateway through the IP registration module of the central server of the SD-WAN network, wherein the edge device has a private IP address and port number; The integrated service gateway is configured with a public IP address and port number and returned to the SD-WAN network; The IP registration module of the central server of the SD-WAN network saves the public IP address and / or port number in the IP mapping table and matches it with the private IP address and port number of the edge device; The IP registration module of the central server of the SD-WAN synchronizes the public IP address and / or port number to the edge device to generate an enterprise node.

[0009] In one embodiment, the enterprise node registers the public IP address and port number with the registration interface of the secondary resolution node, including: The enterprise node sends a registration application to the secondary resolution node, wherein the enterprise node has applied for a public network IP address and port number from the integrated service gateway; The public IP address and port number are registered through the designated interface of the secondary resolution node through the SD-WAN network and the integrated service gateway.

[0010] In one embodiment, the edge device sends a request for applying for a public network IP address to the integrated service gateway through the IP registration module of the central server of the SD-WAN network, including: The IP registration module of the central server of the SD-WAN network assigns a public IP address and port number to the edge device in at least one of the following ways: Based on the IP addresses and port numbers processed by the NAT forwarding module of the integrated service gateway, public network IP addresses and port numbers are allocated to the corresponding enterprise nodes; Based on the domain name processed by the domain name forwarding module of the integrated service gateway, a public network IP address and port number are allocated to the corresponding enterprise node; Based on the prefix data of the preset field of the message parsed by the data packet forwarding module of the integrated service gateway, a public IP address and port number are allocated to the corresponding enterprise node.

[0011] In one embodiment, the IP address and port number processed by the NAT forwarding module of the integrated service gateway are used to allocate a public network IP address and port number to the corresponding enterprise node, including: The IP registration module of the central server of the SD-WAN network obtains the IP address and port number processed by the NAT forwarding module of the integrated service gateway; Allocating the same public IP address to multiple different enterprise nodes by port segmentation, wherein the multiple different enterprise nodes have the same public IP address and different port numbers; Reassign the public IP address and port number of the abolished enterprise node to the newly added enterprise node.

[0012] In one embodiment, the domain name processed by the domain name forwarding module based on the integrated service gateway allocates a public network IP address and a port number to the corresponding enterprise node, including: The IP registration module of the central server of the SD-WAN network obtains the domain name processed by the domain name forwarding module of the integrated service gateway; Using domain name reverse proxy technology for the same public IP address and port number, assigning different domain names to multiple different enterprise nodes, wherein the domain names may have the same port number; Reassign the domain name of the abolished enterprise node to the newly added enterprise node.

[0013] In one embodiment, the prefix data of the preset field of the message parsed by the data packet forwarding module based on the integrated service gateway is used to allocate a public network IP address and a port number to the corresponding enterprise node, including: The IP registration module of the central server of the SD-WAN network obtains the prefix data of the preset field of the message parsed by the data packet forwarding module of the integrated service gateway; For the same public IP address, data packet detection technology is used to correspond prefix data of different message preset fields to different enterprise nodes, wherein the prefix data of the message preset fields correspond to the enterprise nodes one by one.

[0014] In one embodiment, the verifying access to the public network address of the enterprise node to obtain the enterprise node data information includes: The SD-WAN network obtains the private IP address and port number of the enterprise node from the IP mapping table of the central server based on the public IP address and port number of the access enterprise node, the domain name, and the prefix data of the preset field of the message; Locating the enterprise node according to the private IP address and port number of the enterprise node; When the enterprise node is online, the enterprise node information, current time, online identifier and change history of the enterprise node are returned, wherein the change history of the enterprise node is obtained from the edge device backup data of the central server; When the enterprise node is offline, the enterprise node update information, update time, offline identifier and change history of the enterprise node are returned, wherein the enterprise node update information, update time and change history of the enterprise node are obtained from the edge device backup data of the central server.

[0015] In one embodiment, the verification of access to the public network address of the enterprise node includes: the edge device monitoring module detects the IP address and port number of access to the enterprise node, and when the IP address and port number of the enterprise node are the same as the preset public network IP address and port number, returns the enterprise node information, wherein the preset public network IP address and port number are the IP address and port number of the enterprise node synchronized to the edge device when the enterprise node is generated.

[0016] In a second aspect, an embodiment of the present application also provides a system for providing a public IP address for a private node, which is used for a method for providing a public IP address for a private node described in any of the above embodiments, comprising an industrial Internet identity resolution request end, a resolution node, an integrated service gateway, an SD-WAN network, a central server and an edge device. The industrial Internet identity resolution request end sends an industrial Internet identity resolution request to the resolution node. The resolution node includes a primary resolution node and a secondary resolution node, which recursively resolve the industrial Internet identity. The integrated service gateway connects the resolution node to the SD-WAN network and configures a public IP address and port number for the enterprise node. The SD-WAN network networks the central server and the edge device, and assigns a private IP address and port number to the edge device. The central server manages the edge device and backs up enterprise node data. The edge device is composed of a plurality of edge devices, each of which has enterprise node data.

[0017] In a third aspect, an embodiment of the present application provides a computer device, comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor implements the steps of the method provided in any one of the embodiments of the first aspect when executing the computer program.

[0018] At least one of the above technical solutions adopted in the embodiment of the present application can achieve the following beneficial effects: first, the industrial Internet identity resolution request end sends an industrial Internet identity resolution request to the resolution node, and the resolution node resolves the enterprise node address and sends an industrial Internet identity resolution request to the integrated service gateway; the industrial Internet identity resolution request is forwarded to the SD-WAN network through the integrated service gateway, and the enterprise node is located by the private IP address and port number of the enterprise node, and the public network address of the access enterprise node is verified, and then the enterprise node data information matching the enterprise node status is obtained according to the enterprise node status; the SD-WAN network returns the obtained enterprise node data information to the industrial Internet identity resolution request end through the integrated service gateway. Therefore, in the embodiment of the present application, the enterprise node with only a private IP address and port number is combined with the SD-WAN network and the integrated service gateway to have the corresponding public IP address and port number, so as to realize the function that the distributed enterprise node with only a private IP address can resolve the industrial Internet identity resolution with a public IP address. At the same time, the enterprise node also returns the resolution result of the industrial Internet identity including the enterprise node status, thereby improving the high controllability of the enterprise node for the industrial Internet identity resolution. In addition, the integrated service gateway can be based on the IP address processed by the NAT forwarding module, the domain name processed by the domain name forwarding module, and the prefix data of the preset field of the message parsed by the data packet forwarding module, and combined with the public IP address and port number parsed by the parsing node, to avoid the exhaustion of public IP address and port number resources, allocate public IP addresses to enterprise nodes, and achieve unlimited enterprise node access. In addition, when the edge device monitoring module detects that the public IP address and port number of the access enterprise node are the same as the preset public IP address and port number, it returns the enterprise node information, avoiding mutual access between enterprise nodes in the same SD-WAN and improving the security of enterprise node data. BRIEF DESCRIPTION OF THE DRAWINGS

[0019] The drawings described herein are used to provide a further understanding of the present application and constitute a part of the present application. The illustrative embodiments of the present application and their descriptions are used to explain the present application and do not constitute an improper limitation on the present application. In the drawings: Figure 1 A system architecture diagram for providing a public IP address for a private node provided in an embodiment of the present application; Figure 2 A flowchart of providing a public IP address for a private node provided in an embodiment of the present application; Figure 3 Flow chart of SD-WAN network access edge device provided for the embodiment of the present application; Figure 4 A flow chart of an edge device providing an embodiment of the present application registering an enterprise node at a secondary resolution node via a NAT gateway; Figure 5 A flowchart of an integrated service gateway provided in an embodiment of the present application allocating a public IP address to an edge device; Figure 6 A flowchart of obtaining enterprise node data according to enterprise node status provided in an embodiment of the present application; Figure 7 This is a structural diagram of a computer device in an embodiment of the present application. DETAILED DESCRIPTION

[0020] In order to make the purpose, technical solution and advantages of the present application clearer, the technical solution of the present application will be clearly and completely described below in combination with the specific embodiments of the present application and the corresponding drawings. Obviously, the described embodiments are only part of the embodiments of the present application, not all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in this field without making creative work are within the scope of protection of the present application.

[0021] The technical solutions provided by various embodiments of the present application are described in detail below in conjunction with the accompanying drawings.

[0022] Figure 1 This is a system architecture diagram for providing a public IP address for a private node provided in an embodiment of the present application. Figure 1 As shown, the architecture includes a public network 100 and a private network 200. The public network runs in an Internet environment, and the private network runs in a local area network environment. The public network and the private network are connected, and requests are sent to the private network through the public network.

[0023] The public network includes an industrial Internet identity resolution request end 101, a resolution node 102, an integrated service gateway 103, an SD-WAN network 104, and a central server 105. The resolution nodes include a first-level resolution node, namely a national top-level resolution node and a second-level resolution node. The integrated service gateway includes a NAT forwarding module, a domain name forwarding module, and a data packet forwarding module. The central server includes an IP registration module and a corresponding IP mapping table, an edge device monitoring module, and corresponding edge device backup data. The industrial Internet identity resolution request end sends an industrial Internet identity resolution request to the resolution node. The resolution node recursively resolves the industrial Internet identity, obtains the public network IP address and port number, and sends the industrial Internet identity, public network IP address, and port number information to the SD-WAN network through one of the NAT forwarding module, domain name forwarding module, and data packet forwarding module of the integrated service gateway according to the public network IP address and port number. The SD-WAN network then accesses the private network according to the private IP address and port number.

[0024] The private network 200 includes an edge device 201, which has a private IP address and port number and has enterprise node data. After the edge device receives the public IP and port number of the SD-WAN network for the first time, it registers the public IP and port number as an enterprise node to the resolution node through the SD-WAN network and the integrated service gateway. When the edge device receives the industrial Internet identity resolution request, the edge device monitoring module of the central server detects whether the IP address and port number of the access enterprise node are the same as the preset public IP address and port number, and returns the enterprise node data through the SD-WAN network and the integrated service gateway after detection. When the enterprise node data of the edge device is updated, the edge device monitoring module of the central server updates the enterprise node data to the edge device backup data. When the enterprise node data of the edge device is damaged, the edge device monitoring module of the central server restores the edge device backup data to the enterprise node of the edge device.

[0025] Figure 2 The flowchart for providing a public IP address for a private node provided in an embodiment of the present application includes steps 210 to 240. The industrial Internet identity resolution request accesses the enterprise node with a private IP address through the resolution node, the integrated service gateway, and the SD-WAN network and obtains the enterprise node data.

[0026] Step 210: The Industrial Internet identity resolution request end sends an Industrial Internet identity resolution request to the resolution node. The resolution node resolves the enterprise node address and sends an Industrial Internet identity resolution request to the integrated service gateway.

[0027] A resolution node may be a primary resolution node and / or a secondary resolution node.

[0028] The enterprise node address includes the public IP address and port number.

[0029] In this embodiment, the Industrial Internet identity resolution request end sends an Industrial Internet identity resolution request to the resolution node, obtains the public IP address and port number of the enterprise node through iterative resolution of the first-level resolution node and the second-level resolution node, and then sends the Industrial Internet identity resolution request to the integrated service gateway.

[0030] Step 220: The integrated service gateway forwards the industrial Internet identity resolution request to the private address of the enterprise node of the SD-WAN network according to the forwarding strategy.

[0031] Enterprise nodes can be deployed on edge devices.

[0032] In the existing technology, the resolution of industrial Internet identifiers requires a fixed public IP address and port number.

[0033] In this application, the Industrial Internet identity resolution request is forwarded from the secondary resolution node to the SD-WAN network through the integrated service gateway, so that for the Industrial Internet identity resolution, the enterprise node no longer needs to have a public IP address and port number. It only needs to have an enterprise node with a private IP address and port number corresponding to the public IP address and port number to achieve Industrial Internet identity resolution.

[0034] That is to say, when resolving the industrial Internet identity, since the NAT gateway has a public IP address and port number, the enterprise nodes in the SD-WAN network only have private IP addresses and port numbers. Therefore, it is only necessary to match the public IP address and port number of the NAT gateway with the private IP address and port number of the enterprise node to solve the limitation that the enterprise node must have a public IP address.

[0035] Step 230: Verify the public network address of the access enterprise node and obtain the enterprise node data information.

[0036] Step 240: The SD-WAN network returns the obtained enterprise node data information to the industrial Internet identity resolution request end through the integrated service gateway.

[0037] In this application, the enterprise node data information obtained through SD-WAN is returned to the industrial Internet identity resolution request end through the integrated service gateway.

[0038] That is to say, the enterprise node data with a private IP address is obtained through SD-WAN, and then returned to the Industrial Internet identity resolution request end through the integrated service gateway with a public IP address.

[0039] Figure 3 The SD-WAN network access edge device flow chart provided for the embodiment of the present application includes steps 310~340, connecting the central server to the SD-WAN network, and connecting the edge device to the SD-WAN network and generating a private IP address and port number.

[0040] Step 310: In an Internet environment, connect the SD-WAN network to the integrated service gateway.

[0041] In this application, the integrated service gateway is configured with a public IP address and port number and assigned to the SD-WAN network, which connects the public network and the private network.

[0042] In other words, the SD-WAN network is used to connect private and public networks.

[0043] Step 320: Connect the central server to the SD-WAN network.

[0044] The central server may have an IP registration module and an IP mapping table.

[0045] In this application, the central server performs a one-to-one match between the public IP address and port number and the private IP address and port number, and records them in the IP mapping table.

[0046] Step 330: Connect the edge device to the SD-WAN network.

[0047] In this application, the SD-WAN network assigns private IP addresses and port numbers to edge devices and records them in the IP mapping table of the central server.

[0048] That is to say, the SD-WAN network generates private IP addresses and port numbers for edge devices and manages the edge devices.

[0049] Step 340: The edge device sends a request for a private IP address to the SD-WAN network. The IP registration module of the central server records the private IP address and port number assigned by the edge device, and saves the private IP address and port number in the IP mapping table.

[0050] In this application, the edge device applies for a private IP address and port number from the SD-WAN network, and the SD-WAN network allocates a private IP address and port number to the edge device and records it in the IP mapping table of the central server.

[0051] Figure 4 The flow chart of the edge device registering the enterprise node at the secondary resolution node through the integrated service gateway provided in the embodiment of the present application includes steps 410~450, the edge device applies for the public IP address and port number from the integrated service gateway and configures them to the enterprise node, and the enterprise node registers the public IP address and port number with the registration interface of the secondary resolution node, so that before the industrial Internet identity resolution request end sends the industrial Internet identity resolution request to the resolution node, the public address of the enterprise node is pre-registered with the secondary resolution node through the integrated service gateway.

[0052] Step 410: The edge device sends a request for a public IP address to the integrated service gateway through the IP registration module of the central server of the SD-WAN network.

[0053] Edge devices can have private IP addresses.

[0054] In this application, the edge device in the SD-WAN network sends a request for a public IP address to the NAT gateway through the IP registration module of the central server.

[0055] Step 420: The integrated service gateway configures the public IP address and port number and returns to the SD-WAN network.

[0056] In this application, after receiving the request to configure the public IP address, the integrated service gateway configures the public IP address.

[0057] Step 430: The IP registration module of the central server of the SD-WAN network saves the public IP address and port number in the IP mapping table and matches it with the private IP address and port number of the edge device.

[0058] In this application, the IP registration module of the central server of the SD-WAN network matches the public IP address and port number with the private IP address and port number of the edge device.

[0059] In other words, by mapping the public IP address and port number to the private IP address of the edge device, the edge device has the function of using the public IP address and port number.

[0060] Step 440: The IP registration module of the central server of the SD-WAN synchronizes the public IP address and port number to the edge device to generate an enterprise node.

[0061] In this application, the IP registration module of the central server of the SD-WAN network sends the public IP address and port number to the edge device, and the edge device saves the public IP address and port number, thereby corresponding the enterprise node with the private IP address and port number to the public IP address and port number.

[0062] Step 450: The enterprise node sends a registration application to the secondary resolution node.

[0063] The enterprise node may have applied for a public IP address from the NAT integrated service gateway.

[0064] In this application, after the edge device obtains and saves the public IP address and port number, it sends a registration application to the secondary resolution node through the SD-WAN network and the integrated service gateway.

[0065] Step 460: Register the public IP address and port number through the designated interface of the secondary resolution node through the SD-WAN network and the integrated service gateway.

[0066] In the present application, enterprise node registration of edge devices is implemented through the designated interface of the secondary resolution node, thereby registering an enterprise node with a private IP address and port number as an enterprise node with a public IP address and port number.

[0067] Figure 5The flowchart of the integrated service gateway provided in the embodiment of the present application allocating a public IP address to an edge device includes steps 510 to 540, which allocates a public IP address based on the IP processing, domain name resolution, and data analysis technology of the preset fields of the message of the NAT gateway.

[0068] Step 510: The integrated service gateway receives a request for applying for a public IP address.

[0069] In this application, the edge device sends a request for applying for a public IP address to the integrated service gateway through the IP registration module of the central server of the SD-WAN network, and the integrated service gateway receives the request for applying for a public IP address.

[0070] Step 520: Based on the IP address and port number processed by the NAT forwarding module of the integrated service gateway, a public network IP address and port number are allocated to the corresponding enterprise node.

[0071] In this application, the NAT forwarding module of the integrated service gateway sends the public IP address and port number to the IP registration module of the central server of the SD-WAN network through the NAT gateway and records it.

[0072] Furthermore, the IP registration module of the central server of the SD-WAN network obtains the IP address and port number processed by the NAT forwarding module of the integrated service gateway; allocates the same public IP address to multiple different enterprise nodes through port segmentation, wherein the multiple different enterprise nodes have the same public IP address and different port numbers; and reallocates the public IP address and port number of the abolished enterprise node to the newly added enterprise node.

[0073] In the present application, the public IP address can be allocated to multiple different enterprise nodes through port segmentation, and the public IP address and port number of the enterprise node that is no longer in use can also be reallocated to the newly added enterprise node.

[0074] In other words, by splitting the ports of public IP addresses, one public IP can be divided into multiple different ports, and by recycling public IP addresses and port numbers that are no longer in use, public IP addresses can be saved, thereby reducing the cost of using enterprise nodes.

[0075] Step 530: Based on the domain name processed by the domain name forwarding module of the integrated service gateway, a public IP address and port number are allocated to the corresponding enterprise node.

[0076] In this application, the domain name forwarding module of the integrated service gateway obtains the domain name of the requested end of the industrial Internet identity resolution through the reverse proxy technology of the domain name, and then realizes the correspondence between the public IP address, port number, domain name and the corresponding enterprise node, thereby allocating a public IP address to the enterprise node.

[0077] Furthermore, the IP registration module of the central server of the SD-WAN network obtains the domain name processed by the domain name forwarding module of the integrated service gateway; uses the domain name reverse proxy technology for the same public IP address and port number to assign different domain names to multiple different enterprise nodes, wherein the domain names may have the same port number; and reallocates the domain names of the abolished enterprise nodes to the newly added enterprise nodes.

[0078] In this application, based on the domain name information in the request, the reverse proxy technology of the domain name is used to manage the external services of the enterprise node through a unified port number.

[0079] In other words, by using the reverse proxy of the domain name, combined with the public IP address and port number resolved by the resolution node, unlimited enterprise node access can be achieved, thus avoiding the exhaustion of port number resources. This improves the flexibility of enterprise node management and network scalability, and simplifies the mapping management of domain names and port numbers.

[0080] Step 540: Based on the prefix data of the preset field of the message parsed by the data packet forwarding module of the integrated service gateway, a public IP address and port number are allocated to the corresponding enterprise node.

[0081] In the present application, the data packet forwarding module of the integrated service gateway can parse the prefix data of the preset field of the message and identify the enterprise identification information corresponding to the prefix data through the port proxy function.

[0082] Furthermore, the IP registration module of the central server of the SD-WAN network obtains the prefix data of the preset field of the message parsed by the data packet forwarding module of the integrated service gateway; for the same public IP address, data packet detection technology is used to correspond the prefix data of different preset fields of the message to different enterprise nodes, wherein the prefix data of the preset field of the message corresponds one-to-one to the enterprise node.

[0083] In the present application, the data packet forwarding module of the integrated service gateway parses the prefix data of the preset field of the message through the function of the port proxy, combines the deep data packet inspection technology, identifies the enterprise identification information corresponding to the prefix data, and forwards the request to the corresponding enterprise node.

[0084] In other words, the prefix data of the preset field of the parsed message, combined with the public network IP address and port number parsed by the parsing node, can improve the utilization rate of IP resources. By dynamically analyzing the content of the data packet, it can ensure that the data is accurately routed and reduce the risk of incorrect forwarding. The data packet forwarding technology can adapt to a variety of environments such as wide area networks and local area networks, improving the compatibility and scalability of the system.

[0085] Figure 6The flowchart for obtaining enterprise node data according to the enterprise node status provided in the embodiment of the present application includes steps 610~650, verifying the public network address for accessing the enterprise node, obtaining enterprise node data information, and returning enterprise node status information according to the enterprise node status.

[0086] Step 610: The SD-WAN network obtains the private IP address and port number of the enterprise node from the IP mapping table of the central server based on the public IP address and port number of the accessed enterprise node.

[0087] In the present application, the SD-WAN network obtains the private IP address and port number corresponding to the public IP address and port number from the IP mapping table of the central server for the public IP address and port number from the integrated service gateway.

[0088] In other words, the public IP address and port number of the access enterprise node are matched with the private IP address and port number of the SD-WAN network in real time.

[0089] Step 620: Locate the enterprise node according to the private IP address and port number of the enterprise node.

[0090] In this application, after the public IP address and port number from the integrated service gateway successfully match the private IP address of the SD-WAN network, the SD-WAN network locates the enterprise node.

[0091] Step 630 , determine whether the edge device of the enterprise node is online. When the enterprise node is online, execute step 640 , otherwise execute step 650 .

[0092] In the prior art, an enterprise node parses the industrial Internet identifier to obtain enterprise node data, which does not include the status of the enterprise node.

[0093] In this application, the edge device monitoring module of the central server of the SD-WAN network can obtain the latest enterprise node data or the most recently updated enterprise node data based on the current status of the enterprise node.

[0094] In other words, the method of obtaining enterprise node data according to the enterprise node status improves the controllability of enterprise node data.

[0095] Step 640: The enterprise node returns the enterprise node information, current time, online identification, and change history of the enterprise node.

[0096] The change history of the enterprise node can be obtained from the edge device backup data of the central server.

[0097] In the present application, in addition to returning the enterprise node information, the enterprise node also returns the online identification of the enterprise node and the change history of the enterprise node.

[0098] In other words, the enterprise node data, enterprise node status and data change history are all returned to the enterprise node parsing request end, thereby improving the high controllability of the enterprise node.

[0099] Furthermore, the edge device monitoring module detects the IP address and port number of the access enterprise node. When the IP address and port number of the enterprise node are the same as the preset public network IP address and port number, the enterprise node information is returned, wherein the preset public network IP address and port number are the IP address and port number of the enterprise node synchronized to the edge device when the enterprise node is generated.

[0100] In the present application, the edge device detection module detects the public IP address and port number of the access enterprise node. If the public IP address and port number of the enterprise node are the same as the public IP address and port number preset in the enterprise node, the enterprise node data is returned.

[0101] That is to say, by checking whether the public IP address and port number used to access the enterprise node are the same as the public IP address and port number preset in the enterprise node, malicious tampering with the public IP address and the corresponding private IP address stored in the integrated service gateway and malicious tampering with the public IP address and the corresponding private IP address stored in the edge device can be prevented, thereby improving the security of enterprise node data.

[0102] Step 650: The enterprise node returns the enterprise node update information, update time, offline flag, and change history of the enterprise node.

[0103] Enterprise node update information, update time, and enterprise node change history can be obtained from the edge device backup data of the central server.

[0104] In the present application, in addition to returning the enterprise node information, the enterprise node also returns the offline identification of the enterprise node and the change history of the enterprise node.

[0105] In other words, the enterprise node data, enterprise node status and data change history are all returned to the enterprise node parsing request end, thereby improving the high controllability of the enterprise node.

[0106] Figure 7 This is a structural diagram of a computer device in an embodiment of the present application.

[0107] Furthermore, the present application also proposes a computer device (or computing device), including a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor implements the method described in any embodiment of the present application when executing the computer program.

[0108] like Figure 7 As shown, the electronic device 700 includes a processor 720, a storage device 710, an input device 730, and an output device 740; the number of processors in the electronic device can be one or more. Figure 7 A processor is taken as an example; the processor, storage device, input device and output device in the electronic device can be connected by a bus or other means. Figure 7 The connection via bus 750 is taken as an example.

[0109] The storage device, as a computer-readable storage medium, can be used to store software programs, computer-executable programs and module units, such as program instructions corresponding to the method for determining the cloud base height in the embodiment of the present application.

[0110] The storage device may mainly include a program storage area and a data storage area, wherein the program storage area may store an operating system and at least one application required for a function; the data storage area may store data created according to the use of the terminal, etc. In addition, the storage device may include a high-speed random access memory, and may also include a non-volatile memory, such as at least one disk storage device, a flash memory device, or other non-volatile solid-state storage device. In some instances, the storage device may further include a memory remotely arranged relative to the processor 720, and these remote memories may be connected via a network. Examples of the above-mentioned network include, but are not limited to, the Internet, an intranet, a local area network, a mobile communication network, and combinations thereof.

[0111] The input device can be used to receive input numbers, character information or voice information, and generate key signal input related to user settings and function control of the electronic device. The output device can include electronic devices such as display screens and speakers.

[0112] The present invention is described with reference to flowcharts and / or block diagrams of methods, devices (systems), and computer program products according to embodiments of the present invention. It should be understood that each process and / or block in the flowchart and / or block diagram, as well as the combination of processes and / or blocks in the flowchart and / or block diagram, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing device to produce a machine, so that the instructions executed by the processor of the computer or other programmable data processing device generate instructions for implementing the processes in the flowchart and / or block diagram. Figure 1 A process or multiple processes and / or boxes Figure 1 A device that provides the functions specified in a block or multiple blocks.

[0113] These computer program instructions may also be stored in a computer-readable memory capable of directing a computer or other programmable data processing device to operate in a specific manner, so that the instructions stored in the computer-readable memory produce an article of manufacture comprising an instruction device, which implements the process Figure 1 A process or multiple processes and / or boxes Figure 1 A function specified in one or more boxes.

[0114] These computer program instructions can also be loaded onto a computer or other programmable data processing device so that a series of operating steps are executed on the computer or other programmable device to produce a computer-implemented process, thereby providing instructions for implementing the process. Figure 1 A process or multiple processes and / or boxes Figure 1 The steps for the functions specified in one or more boxes.

[0115] In a typical configuration, a computing device includes one or more processors (CPU), input / output interfaces, network interfaces, and memory.

[0116] Memory may include non-permanent storage in a computer-readable medium, in the form of random access memory (RAM) and / or non-volatile memory, such as read-only memory (ROM) or flash RAM. Memory is an example of a computer-readable medium.

[0117] Computer readable media include permanent and non-permanent, removable and non-removable media that can be implemented by any method or technology to store information. Information can be computer readable instructions, data structures, program modules or other data. Examples of computer storage media include, but are not limited to, phase change memory (PRAM), static random access memory (SRAM), dynamic random access memory (DRAM), other types of random access memory (RAM), read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM), flash memory or other memory technology, compact disk read-only memory (CD-ROM), digital versatile disk (DVD) or other optical storage, magnetic cassettes, magnetic tape magnetic disk storage or other magnetic storage devices or any other non-transmission media that can be used to store information that can be accessed by a computing device. As defined herein, computer readable media does not include temporary computer readable media (transitory media), such as modulated data signals and carrier waves.

[0118] It should also be noted that the terms "include", "comprises" or any other variations thereof are intended to cover non-exclusive inclusion, so that a process, method, commodity or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, commodity or device. In the absence of more restrictions, the elements defined by the sentence "comprises a ..." do not exclude the existence of other identical elements in the process, method, commodity or device including the elements.

[0119] The above is only an embodiment of the present application and is not intended to limit the present application. For those skilled in the art, the present application may have various changes and variations. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of the present application should be included in the scope of the claims of the present application.

Claims

1. A method for providing a public IP address for a private node, characterized in that: The industrial Internet identity resolution request end sends an industrial Internet identity resolution request to the resolution node, the resolution node resolves the enterprise node public network address and sends the industrial Internet identity resolution request to the integrated service gateway, wherein the resolution node includes a primary resolution node and / or a secondary resolution node, the enterprise node public network address includes a public network IP address and a port number, and the integrated service gateway includes a NAT gateway forwarding module, a domain name forwarding module and a data packet forwarding module, wherein the NAT gateway forwarding module forwards data information based on the network IP address, the domain name forwarding module forwards data information based on the domain name, and the data packet forwarding module forwards data information based on the field data; The integrated service gateway forwards the industrial Internet identity resolution request to the private address of the enterprise node of the SD-WAN network according to the forwarding strategy, wherein the private address of the enterprise node includes a private IP address and a port number, and the enterprise node is deployed on the edge device of the SD-WAN network; Verify access to the public network address of the enterprise node and obtain enterprise node data information; The SD-WAN network returns the enterprise node data information to the industrial Internet identity resolution request end through the integrated service gateway.

2. A method for providing a public IP address for a private node according to claim 1, wherein the industrial Internet identity resolution request end sends an industrial Internet identity resolution request to the resolution node, and previously registers the enterprise node public network address with the secondary resolution node through the integrated service gateway, characterized in that: The edge device accesses the SD-WAN network and generates a private IP address and port number. The edge device applies for a public IP address and port number from the integrated service gateway and configures them to the enterprise node, wherein the enterprise node is an edge device with a corresponding relationship between a public address and a private address; The enterprise node registers the public IP address and port number with the registration interface of the secondary resolution node.

3. A method for providing a public IP address for a private node according to claim 2, wherein the edge device accesses the SD-WAN network and generates a private IP address and a port number, characterized in that: In an Internet environment, connect the SD-WAN network to the integrated service gateway; Connecting a central server to the SD-WAN network, wherein the central server has an IP registration module and / or an IP mapping table; Connect edge devices to the SD-WAN network; The edge device sends a request for a private IP address to the SD-WAN network. The IP registration module of the central server records the private IP address and port number assigned by the edge device, and saves the private IP address and port number in the IP mapping table.

4. A method for providing a public IP address for a private node as claimed in claim 2, wherein the edge device applies for a public IP address and port number from an integrated service gateway and configures the public IP address and port number to the enterprise node, characterized in that: The edge device sends a request for applying for a public IP address to the integrated service gateway through the IP registration module of the central server of the SD-WAN network, wherein the edge device has a private IP address and port number; The integrated service gateway is configured with a public IP address and port number and returned to the SD-WAN network; The IP registration module of the central server of the SD-WAN network saves the public IP address and / or port number in the IP mapping table and matches it with the private IP address and port number of the edge device; The IP registration module of the central server of the SD-WAN synchronizes the public IP address and / or port number to the edge device to generate an enterprise node.

5. A method for providing a public IP address for a private node according to claim 2, wherein the enterprise node registers the public IP address and port number with the registration interface of the secondary resolution node, characterized in that: The enterprise node sends a registration application to the secondary resolution node, wherein the enterprise node has applied for a public network IP address and port number from the integrated service gateway; The public IP address and port number are registered through the designated interface of the secondary resolution node through the SD-WAN network and the integrated service gateway.

6. A method for providing a public IP address for a private node according to claim 4, wherein the edge device sends a request for a public IP address to the integrated service gateway through the IP registration module of the central server of the SD-WAN network, characterized in that: Also includes: The IP registration module of the central server of the SD-WAN network assigns a public IP address and port number to the edge device in at least one of the following ways: Based on the IP addresses and port numbers processed by the NAT forwarding module of the integrated service gateway, public network IP addresses and port numbers are allocated to the corresponding enterprise nodes; Based on the domain name processed by the domain name forwarding module of the integrated service gateway, a public network IP address and port number are allocated to the corresponding enterprise node; Based on the prefix data of the preset field of the message parsed by the data packet forwarding module of the integrated service gateway, a public IP address and port number are allocated to the corresponding enterprise node.

7. A method for providing a public IP address for a private node as claimed in claim 6, wherein the public IP address and port number are allocated to the corresponding enterprise node based on the IP address and port number processed by the NAT forwarding module of the integrated service gateway, characterized in that: The IP registration module of the central server of the SD-WAN network obtains the IP address and port number processed by the NAT forwarding module of the integrated service gateway; Allocating the same public IP address to multiple different enterprise nodes by port segmentation, wherein the multiple different enterprise nodes have the same public IP address and different port numbers; Reassign the public IP address and port number of the abolished enterprise node to the newly added enterprise node.

8. A method for providing a public IP address for a private node as claimed in claim 6, wherein the domain name processed by the domain name forwarding module based on the integrated service gateway allocates a public IP address and a port number to the corresponding enterprise node, characterized in that: The IP registration module of the central server of the SD-WAN network obtains the domain name processed by the domain name forwarding module of the integrated service gateway; Using domain name reverse proxy technology for the same public IP address and port number, assigning different domain names to multiple different enterprise nodes, wherein the domain names may have the same port number; Reassign the domain name of the abolished enterprise node to the newly added enterprise node.

9. A method for providing a public IP address for a private node as claimed in claim 6, wherein the prefix data of the preset field of the message parsed by the data packet forwarding module of the integrated service gateway is used to allocate a public network IP address and a port number to the corresponding enterprise node, characterized in that: The IP registration module of the central server of the SD-WAN network obtains the prefix data of the preset field of the message parsed by the data packet forwarding module of the integrated service gateway; For the same public IP address, data packet detection technology is used to correspond prefix data of different message preset fields to different enterprise nodes, wherein the prefix data of the message preset fields correspond to the enterprise nodes one by one.

10. A method for providing a public IP address for a private node according to claim 1, wherein the verification accesses the public network address of the enterprise node to obtain enterprise node data information, characterized in that: The SD-WAN network obtains the private IP address and port number of the enterprise node from the IP mapping table of the central server based on the public IP address and port number of the access enterprise node, the domain name, and the prefix data of the preset field of the message; Locating the enterprise node according to the private IP address and port number of the enterprise node; When the enterprise node is online, the enterprise node information, current time, online identifier and change history of the enterprise node are returned, wherein the change history of the enterprise node is obtained from the edge device backup data of the central server; When the enterprise node is offline, the enterprise node update information, update time, offline identifier and change history of the enterprise node are returned, wherein the enterprise node update information, update time and change history of the enterprise node are obtained from the edge device backup data of the central server.

11. A method for providing a public IP address for a private node according to claim 1, wherein the verification accesses the public network address of the enterprise node, characterized in that: The edge device monitoring module detects the IP address and port number of the enterprise node accessed. When the IP address and port number of the enterprise node are the same as the preset public network IP address and port number, the enterprise node information is returned, wherein the preset public network IP address and port number are the IP address and port number of the enterprise node synchronized to the edge device when the enterprise node is generated.

12. A system for providing a public IP address for a private node, used to implement a method for providing a public IP address for a private node as described in any one of claims 1 to 11, comprising an industrial Internet identity resolution request end, a resolution node, an integrated service gateway, an SD-WAN network, a central server and an edge device; The industrial Internet identity resolution request end sends an industrial Internet identity resolution request to the resolution node; The resolution nodes include a primary resolution node and a secondary resolution node, which recursively resolve the industrial Internet identifier: The integrated service gateway connects the resolution node to the SD-WAN network and configures a public network IP address and port number for the enterprise node; The SD-WAN network networks the central server and the edge device, and allocates a private IP address and port number to the edge device: The central server manages the edge device and backs up enterprise node data; The edge device is composed of multiple edge devices, and each edge device has enterprise node data.

13. A computer device comprising a memory, a processor and a computer program stored in the memory and executable on the processor, characterized in that: When the processor executes the computer program, the method according to any one of claims 1 to 11 is implemented.

Images