Implementation method of software defined boundary based on hierarchical scheduling

By introducing a hierarchical scheduling implementation method in SDP, the performance and scalability problems of traditional SDP in large-scale distributed environments are solved, and data security is ensured through mTLS connections and encrypted tunnels, achieving more efficient and secure network resource management.

CN119697155APending Publication Date: 2025-03-25SHANGHAI DIANYIN INFORMATION TECH CO LTD
0 Cites 0 Cited by

Patent Information

Application Number
CN202411790647.9
Authority / Receiving Office
CN · China
Patent Type
Applications(China)
Current Assignee / Owner
Filing Date
2024-12-06
Publication Date
2025-03-25

AI Technical Summary

Technical Problem

Traditional software-defined boundary (SDP) solutions have shortcomings in performance bottlenecks, poor scalability, waste of resources, and inability to effectively defend against complex cyber attacks in large-scale distributed environments.

Method used

The software-defined boundary implementation method based on hierarchical scheduling is adopted. The enterprise-specific domain name is preferred through the SDP client. If it fails, it switches to the common domain name and escape channel. Combined with the authentication process of HttpDNS and SLB services, the request is distributed to the optimal server node, and data transmission security is ensured through mTLS connection and encrypted tunnel.

Benefits of technology

It improves the fault tolerance and scalability of the system, optimizes resource usage efficiency, ensures the security and integrity of data transmission, and effectively defends against complex network attacks.

✦ Generated by Eureka AI based on patent content.
Patent Text Reader

Abstract

The invention discloses a method for realizing a software defined boundary based on hierarchical scheduling, which comprises the following steps: an SDP client preferentially requests an enterprise exclusive domain name, and acquires an SLB address based on an HttpDNS; the SDP client accesses the SLB address to configure different scheduling strategies to obtain a POP list; the SDP client generates and sends a UDP (User Datagram Protocol) knock packet according to a POP address, and obtains a certificate service port and an authentication port; the SDP client accesses the certificate service port to obtain a TLS certificate; the SDP client accesses the authentication port and establishes mTLS connection with the SDP controller by using the TLS certificate; the SDP controller verifies the identity of the SDP client and establishes an encryption tunnel; and the SDP client exchanges data with the internal application through the encryption tunnel. A universal domain name and an escape channel are switched in time, so that the expansibility of the system is improved; through the SLB service, the request of the SDP client can be distributed to the optimal server node.
Need to check novelty before this filing date? Find Prior Art