Data routing method based on virtual IP

Abstract

The invention provides a data routing method based on a virtual IP, and the method comprises the steps: generating at least two local area networks based on at least three devices, a first local area network and a second local area network in the at least two local area networks having a common device, and the first local area network and the second local area network being different local area networks. And configuring a virtual IP for each device, wherein the virtual IPs of the devices are different. Each local area network generates an IP address mapping table based on a mapping relation, and the mapping relation is broadcasted by each device to the local area network where the device is located. And generating a routing table based on the local area network virtual IPs, and forwarding the local area network virtual IPs among the plurality of local area networks where the public equipment is located by the public equipment. And when the original equipment receives the data transmission request, transmitting the data from the original equipment to the target equipment based on the real IP of the original equipment and the virtual IP of the target equipment in the data transmission request. According to the method provided by the invention, the safety of long-distance communication in the field can be improved.

Description

Technical Field

[0001] The present application relates to the field of electronic communication technology, and in particular to a data routing method based on a virtual IP. Background Art

[0002] With the continuous development of science and technology, long-distance communication is required in the wild in many cases. At present, long-distance communication in the wild is mostly to build an ad hoc network or use a central server to form a local area network communication. When building a local area network, all devices are in the same network. Once a device in the middle is attacked, the data of other devices may also be leaked. When using a central server for network communication, once the central server fails to work or is attacked, the network will be paralyzed and the security is poor.

[0003] Therefore, how to improve the security of long-distance communications in the wild has become a technical problem that technical personnel in this field urgently need to solve. Summary of the invention

[0004] Based on the above problems, the present application provides a data routing method based on virtual IP to improve the security of long-distance communications in the wild.

[0005] The present application provides a data routing method based on a virtual IP, the method comprising the following steps:

[0006] Generating at least two local area networks based on at least three devices, wherein a first local area network and a second local area network of the at least two local area networks have common devices, and the first local area network and the second local area network are different local area networks;

[0007] Configure a virtual IP for each device, where the virtual IP for each device is different;

[0008] Each of the local area networks generates an IP address mapping table based on a mapping relationship, wherein the mapping relationship is broadcast by each of the devices to the local area network in which the device is located, and the mapping relationship is a mapping relationship between a real IP and a virtual IP;

[0009] Generate a routing table based on the LAN virtual IP, and the public device forwards the LAN virtual IP between multiple LANs in which it is located;

[0010] When the source device receives the data transmission request, the data is transmitted from the source device to the destination device based on the real IP address of the source device and the virtual IP address of the destination device in the data transmission request.

[0011] In a possible implementation, when the original device receives a data transmission request, the method further includes:

[0012] The original device performs NAPT conversion on the data transmission request, and converts the IP address of the data transmission request into a virtual IP address of the original device.

[0013] In a possible implementation, the transmitting of data from the source device to the destination device based on the real IP of the source device and the virtual IP of the destination device in the data transmission request includes:

[0014] The original device transmits the data transmission request to a next-hop device of the original device;

[0015] The next hop device compares the virtual IP of the next hop device with the virtual IP of the destination device in the data transmission request to see whether they are consistent;

[0016] If they are consistent, the transmission is completed;

[0017] If they are inconsistent, the next-hop device is used as the original device to execute the step of the original device transmitting the data transmission request to the next-hop device of the original device.

[0018] In a possible implementation, the method further includes:

[0019] Public devices perform scanning and deduplication when forwarding LAN virtual IPs between multiple LANs in which they are located.

[0020] The present application also provides a data routing device based on a virtual IP, the device comprising:

[0021] A networking module, used for generating at least two local area networks based on at least three devices, wherein a first local area network and a second local area network of the at least two local area networks have common devices, and the first local area network and the second local area network are different local area networks;

[0022] A configuration module, used to configure a virtual IP for each device, wherein the virtual IP of each device is different;

[0023] An IP address mapping table module, used for each of the local area networks to generate an IP address mapping table based on a mapping relationship, wherein the mapping relationship is broadcast by each of the devices to the local area network where the device is located, and the mapping relationship is a mapping relationship between a real IP and a virtual IP;

[0024] A routing table module, used to generate a routing table based on a LAN virtual IP, wherein the public device forwards the LAN virtual IP between the multiple LANs in which it is located;

[0025] The transmission module is used to transmit data from the original device to the destination device based on the real IP of the original device and the virtual IP of the destination device in the data transmission request when the original device receives the data transmission request.

[0026] In a possible implementation, the device further includes a NAPT conversion module, and the NAPT conversion module is specifically configured to:

[0027] The original device performs NAPT conversion on the data transmission request, and converts the IP address of the data transmission request into a virtual IP address of the original device.

[0028] In a possible implementation manner, the transmission module is specifically configured to:

[0029] The original device transmits the data transmission request to a next-hop device of the original device;

[0030] The next hop device compares the virtual IP of the next hop device with the virtual IP of the destination device in the data transmission request to see whether they are consistent;

[0031] If they are consistent, the transmission is completed;

[0032] If they are inconsistent, the next-hop device is used as the original device to execute the step of the original device transmitting the data transmission request to the next-hop device of the original device.

[0033] In a possible implementation, the device further includes a scanning deduplication module, and the scanning deduplication module is specifically used to:

[0034] Public devices perform scanning and deduplication when forwarding LAN virtual IPs between multiple LANs in which they are located.

[0035] The present application also provides an electronic device, the electronic device comprising a processor and a memory:

[0036] The memory is used to store a computer program and transmit the computer program to the processor;

[0037] The processor is used to execute the steps of the above-mentioned virtual IP-based data routing method according to the instructions in the computer program.

[0038] The present application also provides a computer-readable storage medium, which is used to store a computer program. When the computer program is executed by an electronic device, the steps of the above-mentioned virtual IP-based data routing method are implemented.

[0039] Compared with the prior art, this application has the following beneficial effects:

[0040] The method provided by the present application configures a virtual IP for each device, and generates a mapping relationship between a real IP and a virtual IP in a local area network, thereby enhancing the security of the network. Under this architecture, the real IP of the device is not directly exposed in the network, reducing the risk of data leakage. Even if a certain device in the middle is attacked or affected by a tool, due to the existence of the virtual IP, it is difficult for the attacker to directly locate and invade other devices, thereby improving the security of the entire network. By generating at least two local area networks and making the first local area network and the second local area network have public devices, the present application effectively enhances the robustness and reliability of the network. The public device forwards the virtual IP between multiple local area networks to form a redundant routing structure. When a device in a local area network fails, the public device can continue to maintain communication through another local area network, avoiding the problem of the entire network being paralyzed due to a single point of failure. The architecture of the present application allows devices to communicate flexibly between different local area networks. By generating a routing table based on the local area network virtual IP, the device can accurately transmit data from the original device to the destination device when receiving a data transmission request. This flexibility makes the communication between devices unaffected by changes in physical location and network topology, and more adaptable. This application has made significant progress in improving network security, enhancing robustness, achieving flexible communication, and simplifying management through innovative network configuration methods and virtual IP management mechanisms. These improvements not only improve the overall performance of the local area network, but also provide an efficient and secure solution for long-distance communications in the field. BRIEF DESCRIPTION OF THE DRAWINGS

[0041] In order to more clearly illustrate the embodiments of the present application or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present application. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative labor.

[0042] Figure 1 A flow chart of a data routing method based on a virtual IP provided in an embodiment of the present application;

[0043] Figure 2 A schematic diagram of the structure of a data routing device based on a virtual IP provided in an embodiment of the present application. DETAILED DESCRIPTION

[0044] As described above, current long-distance communications in the wild are mostly done by building an ad hoc network or using a central server to build a local area network. When building a local area network, all devices are on the same network. Once a device in the middle is attacked, the data of other devices may also be leaked. When using a central server for networking communication, once the central server fails to work or is attacked, the network will be paralyzed and the security is poor.

[0045] In order to enable those skilled in the art to better understand the solution of the present application, the technical solution in the embodiments of the present application will be clearly and completely described below in conjunction with the drawings in the embodiments of the present application. Obviously, the described embodiments are only part of the embodiments of the present application, not all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of this application.

[0046] It is understandable that the method provided in the present application can be applied to a processing device, which is a processing device that can generate at least two local area networks based on at least three devices, for example, a terminal device or server that can generate at least two local area networks based on at least three devices. The method provided in the present application can be executed independently by a terminal device or a server, and can also be applied to a network scenario in which a terminal device and a server communicate, and is executed by the cooperation of a terminal device and a server. Among them, the terminal device can be a computer, a mobile phone and other devices. The server can be understood as an application server or a Web server. In actual deployment, the server can be a stand-alone server or a cluster server.

[0047] Figure 1 A flow chart of a data routing method based on a virtual IP provided in this application, the method comprising the following steps:

[0048] S101: Generate at least two local area networks based on at least three devices.

[0049] The processing device generates at least two local area networks based on at least three devices. A first local area network and a second local area network of the at least two local area networks have common devices, and the first local area network and the second local area network are different local area networks.

[0050] Assume that three devices generate two LANs, which are composed of three devices A, B, and C. Device A and device B are in LAN 1, and device B and device C are in LAN 2. In LAN 1, the IP of device A is 192.168.1.11, and the IP of device B is 192.168.1.12. In LAN 2, the IP of device B is 192.168.2.12, and the IP of device C is 192.168.2.13. All devices are virtualized into a public network, and the virtual IPs of device A, device B, and device C are 172.178.1.11, 172.178.1.12, and 172.178.1.13 respectively. Any terminal connected to the public network can access other online services and provide services to the outside world.

[0051] It is understandable that if the situation of long-distance communication in the wild is more complicated, the more complicated the situation of long-distance communication in the wild is, the more equipment is needed, and the more local area networks are generated. In a possible implementation, multiple local area networks can be connected in series through a common device, for example, multiple devices generate four local area networks, the first local area network, the second local area network, the third local area network and the fourth local area network. The common device of the first local area network and the second local area network is device A, the common device of the second local area network and the third local area network is device B, and the common device of the third local area network and the fourth local area network is device C. In another possible implementation, multiple local area networks can be connected in parallel through a common device, for example, multiple devices generate four local area networks, the first local area network, the second local area network, the third local area network and the fourth local area network. The common device of the first local area network and the second local area network is device A, the common device of the first local area network and the third local area network is device B, and the common device of the first local area network and the fourth local area network is device C.

[0052] S102: Configure a virtual IP for each device.

[0053] The processing device configures a virtual IP for each device, and the virtual IP of each device is different.

[0054] S103: Each local area network generates an IP address mapping table based on the mapping relationship.

[0055] Each of the local area networks generates an IP address mapping table based on a mapping relationship, where the mapping relationship is broadcast by each device to the local area network where the device is located, and the mapping relationship is a mapping relationship between a real IP and a virtual IP.

[0056] For example, three devices generate two LANs, and the two LANs are composed of three devices A, B, and C. Device A and device B are in LAN 1, and device B and device C are in LAN 2.

[0057] Device A, device B and device C broadcast the mapping relationship to the LAN where the devices are located. Device A broadcasts the mapping relationship between the real IP and the virtual IP of device A to LAN 1. Device B broadcasts the mapping relationship between the real IP and the virtual IP of device B to LAN 1 and LAN 2. Device C broadcasts the mapping relationship between the real IP and the virtual IP of device C to LAN 2.

[0058] S104: Generate a routing table based on the LAN virtual IP.

[0059] The processing device generates a routing table based on the LAN virtual IP, and the public device forwards the LAN virtual IP between multiple LANs in which it is located.

[0060] For example, three devices generate two LANs, and the two LANs are composed of three devices A, B, and C. Device A and device B are in LAN 1, and device B and device C are in LAN 2.

[0061] Device B is a public device of LAN 1 and LAN 2. Device B sends the LAN virtual IP of the device in LAN 2 to LAN 1, and sends the LAN virtual IP of the device in LAN 1 to LAN 2.

[0062] In a possible implementation, the public device may perform scanning and deduplication when forwarding LAN virtual IPs between multiple LANs in which it is located, thereby preventing broadcasts from spreading within the network through scanning and deduplication.

[0063] S105: When the source device receives the data transmission request, the data is transmitted from the source device to the destination device based on the real IP address of the source device and the virtual IP address of the destination device in the data transmission request.

[0064] When the original device receives the data transmission request, the processing device transmits the data from the original device to the destination device based on the real IP address of the original device and the virtual IP address of the destination device in the data transmission request.

[0065] In a possible implementation, the original device may perform NAPT conversion on the data transmission request, and convert the IP address of the data transmission request into a virtual IP address of the original device.

[0066] Specifically, when performing data transmission, the original device can transmit the data transmission request to the next-hop device of the original device. The next-hop device compares whether the virtual IP of the next-hop device is consistent with the virtual IP of the destination device in the data transmission request. If they are consistent, the transmission is completed. If they are inconsistent, the next-hop device is used as the original device to execute the step of transmitting the data transmission request from the original device to the next-hop device of the original device.

[0067] The method provided by the present application configures a virtual IP for each device, and generates a mapping relationship between a real IP and a virtual IP in a local area network, thereby enhancing the security of the network. Under this architecture, the real IP of the device is not directly exposed in the network, reducing the risk of data leakage. Even if a certain device in the middle is attacked or affected by a tool, due to the existence of the virtual IP, it is difficult for the attacker to directly locate and invade other devices, thereby improving the security of the entire network. By generating at least two local area networks and making the first local area network and the second local area network have public devices, the present application effectively enhances the robustness and reliability of the network. The public device forwards the virtual IP between multiple local area networks to form a redundant routing structure. When a device in a local area network fails, the public device can continue to maintain communication through another local area network, avoiding the problem of the entire network being paralyzed due to a single point of failure. The architecture of the present application allows devices to communicate flexibly between different local area networks. By generating a routing table based on the local area network virtual IP, the device can accurately transmit data from the original device to the destination device when receiving a data transmission request. This flexibility makes the communication between devices unaffected by changes in physical location and network topology, and more adaptable. This application has made significant progress in improving network security, enhancing robustness, achieving flexible communication, and simplifying management through innovative network configuration methods and virtual IP management mechanisms. These improvements not only improve the overall performance of the local area network, but also provide an efficient and secure solution for long-distance communications in the field.

[0068] The present application also provides a Figure 2 The structure diagram of the data routing device based on virtual IP shown in FIG. 200 includes the following modules:

[0069] A networking module 201, configured to generate at least two local area networks based on at least three devices, wherein a first local area network and a second local area network of the at least two local area networks have common devices, and the first local area network and the second local area network are different local area networks;

[0070] A configuration module 202, configured to configure a virtual IP for each device, wherein the virtual IP of each device is different;

[0071] An IP address mapping table module 203, used for each of the local area networks to generate an IP address mapping table based on a mapping relationship, wherein the mapping relationship is broadcast by each of the devices to the local area network where the device is located, and the mapping relationship is a mapping relationship between a real IP and a virtual IP;

[0072] The routing table module 204 is used to generate a routing table based on the LAN virtual IP, and the public device forwards the LAN virtual IP between the multiple LANs in which it is located;

[0073] The transmission module 205 is used to transmit data from the source device to the destination device based on the real IP of the source device and the virtual IP of the destination device in the data transmission request when the source device receives the data transmission request.

[0074] In a possible implementation, the device further includes a NAPT conversion module, and the NAPT conversion module is specifically configured to:

[0075] The original device performs NAPT conversion on the data transmission request, and converts the IP address of the data transmission request into a virtual IP address of the original device.

[0076] In a possible implementation manner, the transmission module is specifically configured to:

[0077] The original device transmits the data transmission request to a next-hop device of the original device;

[0078] The next hop device compares the virtual IP of the next hop device with the virtual IP of the destination device in the data transmission request to see whether they are consistent;

[0079] If they are consistent, the transmission is completed;

[0080] If they are inconsistent, the next-hop device is used as the original device to execute the step of the original device transmitting the data transmission request to the next-hop device of the original device.

[0081] In a possible implementation, the device further includes a scanning deduplication module, and the scanning deduplication module is specifically used to:

[0082] Public devices perform scanning and deduplication when forwarding LAN virtual IPs between multiple LANs in which they are located.

[0083] The device provided by the present application configures a virtual IP for each device, and generates a mapping relationship between a real IP and a virtual IP in a local area network, thereby enhancing the security of the network. Under this architecture, the real IP of the device is not directly exposed in the network, reducing the risk of data leakage. Even if a certain device in the middle is attacked or affected by a tool, due to the existence of the virtual IP, it is difficult for the attacker to directly locate and invade other devices, thereby improving the security of the entire network. By generating at least two local area networks and making the first local area network and the second local area network have public devices, the present application effectively enhances the robustness and reliability of the network. The public device forwards the virtual IP between multiple local area networks to form a redundant routing structure. When a device in a local area network fails, the public device can continue to maintain communication through another local area network, avoiding the problem of the entire network being paralyzed due to a single point of failure. The architecture of the present application allows devices to communicate flexibly between different local area networks. By generating a routing table based on the local area network virtual IP, the device can accurately transmit data from the original device to the destination device when receiving a data transmission request. This flexibility makes the communication between devices unaffected by changes in physical location and network topology, and more adaptable. This application has made significant progress in improving network security, enhancing robustness, achieving flexible communication, and simplifying management through innovative network configuration methods and virtual IP management mechanisms. These improvements not only improve the overall performance of the local area network, but also provide an efficient and secure solution for long-distance communications in the field.

[0084] An embodiment of the present application also provides a data routing device based on a virtual IP, wherein the device includes a memory and a processor, the memory is used to store instructions or codes, and the processor is used to execute the instructions or codes so that the device performs the steps of the data routing method based on the virtual IP described in any embodiment of the present application.

[0085] In practical applications, the computer-readable storage medium may be any combination of one or more computer-readable media, which may be a computer-readable signal medium or a computer-readable storage medium.

[0086] The computer-readable storage medium may be, for example, but not limited to, an electrical, magnetic, optical, electromagnetic, infrared, or semiconductor system, device or device, or any combination thereof. More specific examples of computer-readable storage media (a non-exhaustive list) include: an electrical connection with one or more wires, a portable computer disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination thereof. In the present embodiment, the computer-readable storage medium may be any tangible medium containing or storing a program that may be used by or in conjunction with an instruction execution system, device, or device.

[0087] Computer-readable signal media may include data signals propagated in baseband or as part of a carrier wave, which carry computer-readable program code. Such propagated data signals may take a variety of forms, including but not limited to electromagnetic signals, optical signals, or any suitable combination of the above. Computer-readable signal media may also be any computer-readable medium other than a computer-readable storage medium, which may send, propagate, or transmit a program for use by or in conjunction with an instruction execution system, apparatus, or device.

[0088] The program code embodied on the computer readable medium may be transmitted using any appropriate medium, including but not limited to wireless, wireline, optical fiber cable, RF, etc., or any suitable combination of the foregoing.

[0089] Computer program code for performing the operations of the present invention may be written in one or more programming languages ​​or a combination thereof, including object-oriented programming languages ​​such as Java, Smalltalk, C++, and conventional procedural programming languages ​​such as "C" or similar programming languages. The program code may be executed entirely on the user's computer, partially on the user's computer, as a separate software package, partially on the user's computer and partially on a remote computer, or entirely on a remote computer or server. In the case of a remote computer, the remote computer may be connected to the user's computer through any type of network, including a local area network (LAN) or a wide area network (WAN), or may be connected to an external computer (e.g., via the Internet using an Internet service provider).

[0090] It should be noted that each embodiment in this specification is described in a progressive manner, and the same or similar parts between the embodiments can be referred to each other, and each embodiment focuses on the differences from other embodiments. In particular, for the device embodiment, since it is basically similar to the method embodiment, the description is relatively simple, and the relevant parts can be referred to the partial description of the method embodiment. The device embodiment described above is merely schematic, in which the unit described as a separate component may or may not be physically separated, and the component prompted as a unit may or may not be a physical unit, that is, it may be located in one place, or it may be distributed on multiple network units. Some or all of the modules can be selected according to actual needs to achieve the purpose of the scheme of this embodiment. Ordinary technicians in this field can understand and implement it without paying creative work.

[0091] The above is only a specific implementation of the present application, but the protection scope of the present application is not limited thereto. Any changes or substitutions that can be easily thought of by a person skilled in the art within the technical scope disclosed in the present application should be included in the protection scope of the present application. Therefore, the protection scope of the present application should be based on the protection scope of the claims.

Claims

1. A data routing method based on virtual IP, characterized in that: include: Generating at least two local area networks based on at least three devices, wherein a first local area network and a second local area network of the at least two local area networks have common devices, and the first local area network and the second local area network are different local area networks; Configure a virtual IP for each device, where the virtual IP for each device is different; Each of the local area networks generates an IP address mapping table based on a mapping relationship, wherein the mapping relationship is broadcast by each of the devices to the local area network in which the device is located, and the mapping relationship is a mapping relationship between a real IP and a virtual IP; Generate a routing table based on the LAN virtual IP, and the public device forwards the LAN virtual IP between multiple LANs in which it is located; When the source device receives the data transmission request, the data is transmitted from the source device to the destination device based on the real IP address of the source device and the virtual IP address of the destination device in the data transmission request.

2. The method according to claim 1, characterized in that When the original device receives the data transmission request, the method further includes: The original device performs NAPT conversion on the data transmission request, and converts the IP address of the data transmission request into a virtual IP address of the original device.

3. The method according to claim 1, characterized in that The transmitting of data from the source device to the destination device based on the real IP of the source device and the virtual IP of the destination device in the data transmission request comprises: The original device transmits the data transmission request to a next-hop device of the original device; The next hop device compares the virtual IP of the next hop device with the virtual IP of the destination device in the data transmission request to see whether they are consistent; If they are consistent, the transmission is completed; If they are inconsistent, the next-hop device is used as the original device to execute the step of the original device transmitting the data transmission request to the next-hop device of the original device.

4. The method according to claim 1, characterized in that: The method further comprises: Public devices perform scanning and deduplication when forwarding LAN virtual IPs between multiple LANs in which they are located.

5. A data routing device based on virtual IP, characterized in that: include: A networking module, used for generating at least two local area networks based on at least three devices, wherein a first local area network and a second local area network of the at least two local area networks have common devices, and the first local area network and the second local area network are different local area networks; A configuration module, used to configure a virtual IP for each device, wherein the virtual IP of each device is different; An IP address mapping table module, used for each of the local area networks to generate an IP address mapping table based on a mapping relationship, wherein the mapping relationship is broadcast by each of the devices to the local area network where the device is located, and the mapping relationship is a mapping relationship between a real IP and a virtual IP; A routing table module, used to generate a routing table based on a LAN virtual IP, wherein the public device forwards the LAN virtual IP between the multiple LANs in which it is located; The transmission module is used to transmit data from the original device to the destination device based on the real IP of the original device and the virtual IP of the destination device in the data transmission request when the original device receives the data transmission request.

6. The device according to claim 5, characterized in that The device further comprises a NAPT conversion module, wherein the NAPT conversion module is specifically used for: The original device performs NAPT conversion on the data transmission request, and converts the IP address of the data transmission request into a virtual IP address of the original device.

7. The device according to claim 5, characterized in that The transmission module is specifically used for: The original device transmits the data transmission request to a next-hop device of the original device; The next hop device compares the virtual IP of the next hop device with the virtual IP of the destination device in the data transmission request to see whether they are consistent; If they are consistent, the transmission is completed; If they are inconsistent, the next-hop device is used as the original device to execute the step of the original device transmitting the data transmission request to the next-hop device of the original device.

8. The device according to claim 5, characterized in that The device further includes a scanning deduplication module, and the scanning deduplication module is specifically used to: Public devices perform scanning and deduplication when forwarding LAN virtual IPs between multiple LANs in which they are located.

9. An electronic device, characterized in that: comprising a memory and a processor, wherein: The memory is used to store the computer program; The processor is used to execute the computer program to implement the virtual IP-based data routing method as described in any one of claims 1-4.

10. A computer-readable storage medium, characterized in that: Used to store a computer program, wherein when the computer program is executed by a processor, the virtual IP-based data routing method according to any one of claims 1 to 4 is implemented.

Images