Domain name configuration method and device for content distribution network, equipment, medium and product

Abstract

The invention relates to the technical field of computers, and discloses a domain name configuration method and device for a content distribution network, equipment, a medium and a product, the method comprises the following steps: in response to an agent request of a client, obtaining a target server to be in agent connection and first address information of the target server, the client being in a first network, the target server being in a second network, network isolation exists between the first network and the second network; establishing a first session with a first intermediate device, the first intermediate device being in a first network; establishing a second session between the first intermediate device and a second intermediate device based on the first session, wherein the second intermediate device is in a second network; based on the first session, the second session and the first address information, establishing a data forwarding process between the second intermediate device and the target server; and performing domain name configuration on the target server based on the first session, the second session and the data forwarding process. According to the invention, the problem of performing domain name configuration on the network isolated server in the content distribution network can be solved.

Description

Technical Field

[0001] The present disclosure relates to the field of computer technology, and in particular to a domain name configuration method, device, equipment, medium and product for a content distribution network. Background Art

[0002] In the content distribution network, there is a type of server that is deployed in the operator network and only serves the internal local area network. It is difficult to directly access the server from the public network or across operators. If the content distribution network vendor wants to access the server, they need to use the character terminal of the Secure Shell Protocol (SSH) to access the intermediate device of the local network where the server is located using a fixed network address on the public network, and log in to the host inside the local area network through the intermediate device for management. However, this access method only supports simple management of the target device by entering character commands in the character terminal, and it is difficult to implement domain name configuration for the network-isolated server. Summary of the invention

[0003] In view of this, the present disclosure provides a method, apparatus, device, medium and product for configuring a domain name of a content distribution network to solve the problem that it is difficult to configure a domain name for a network-isolated server in a content distribution network.

[0004] In a first aspect, the present disclosure provides a domain name configuration method for a content distribution network, which is applicable to a proxy server of a client in the content distribution network, and the method includes:

[0005] In response to the proxy request of the client, a target server of the content distribution network to be connected by proxy and first address information of the target server are obtained, the client is in a first network, the target server is in a second network, and there is network isolation between the first network and the second network;

[0006] Establishing a first session with a first intermediate device, the first intermediate device being in the first network;

[0007] Establishing a second session between the first intermediate device and a second intermediate device based on the first session, wherein the second intermediate device is located in the second network;

[0008] Establishing a data forwarding process between the second intermediate device and the target server based on the first session, the second session and the first address information;

[0009] A domain name is configured for the target server based on the first session, the second session, and the data forwarding process.

[0010] In a second aspect, the present disclosure provides a domain name configuration device for a content distribution network, which is applicable to a proxy server of a client in the content distribution network, and the device includes:

[0011] A request response module, configured to obtain, in response to a proxy request of the client, a target server of a content distribution network to be connected by proxy and first address information of the target server, wherein the client is in a first network, the target server is in a second network, and there is network isolation between the first network and the second network;

[0012] A first establishing module, configured to establish a first session with a first intermediate device, wherein the first intermediate device is located in the first network;

[0013] A second establishing module, configured to establish a second session between the first intermediate device and a second intermediate device based on the first session, wherein the second intermediate device is located in the second network;

[0014] A third establishing module, configured to establish a data forwarding process between the second intermediate device and the target server based on the first session, the second session and the first address information, so as to obtain a target session;

[0015] A domain name configuration module is used to configure the domain name of the target server based on the first session, the second session and the data forwarding process.

[0016] In a third aspect, the present disclosure provides an electronic device, comprising: a memory and a processor, the memory and the processor are communicatively connected to each other, the memory stores computer instructions, and the processor executes the above-mentioned domain name configuration method of the content distribution network by executing the computer instructions.

[0017] In a fourth aspect, the present disclosure provides a computer-readable storage medium having computer instructions stored thereon, the computer instructions being used to enable a computer to execute the above-mentioned method for configuring a domain name of a content distribution network.

[0018] In a fifth aspect, the present disclosure provides a computer program product, including computer instructions, where the computer instructions are used to enable a computer to execute the above-mentioned domain name configuration method of the content distribution network.

[0019] The domain name configuration method of the content distribution network provided by the embodiment of the present disclosure configures the proxy server of the client in the case of network isolation between the client and the target server to be connected, and the proxy server establishes a first session with the first intermediate device of the first network where the client is located, and establishes a second session with the first intermediate device and the second intermediate device of the second network where the target server is located on the first session, thereby using the first session and the second session to open up the transmission channel between the first network and the second network. And using the first session and the second session, establish a data forwarding process between the second intermediate device and the target server, thereby establishing a data transmission channel between the client and the target server. Furthermore, when the client configures the domain name of the target server, the proxy server can forward the relevant configuration to the target server through the first session, the second session and the data forwarding process, so as to configure the domain name of the network-isolated target server in the content distribution network. BRIEF DESCRIPTION OF THE DRAWINGS

[0020] In order to more clearly illustrate the specific embodiments of the present disclosure or the technical solutions in the prior art, the drawings required for use in the specific embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are some embodiments of the present disclosure. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying any creative work.

[0021] Figure 1 is a flowchart of a first method for configuring a domain name of a content distribution network according to an embodiment of the present disclosure;

[0022] Figure 2 is a flow chart of a second method for configuring a domain name of a content distribution network according to an embodiment of the present disclosure;

[0023] Figure 3 is a flowchart of a third method for configuring a domain name of a content distribution network according to an embodiment of the present disclosure;

[0024] Figure 4 is a flowchart of a fourth method for configuring a domain name of a content distribution network according to an embodiment of the present disclosure;

[0025] Figure 5 is a schematic diagram of a process of data transmission between a client and a target server according to an embodiment of the present disclosure;

[0026] Figure 6 is a structural block diagram of a domain name configuration device for a content distribution network according to an embodiment of the present disclosure;

[0027] Figure 7 is a structural block diagram of an electronic device according to an embodiment of the present disclosure. DETAILED DESCRIPTION

[0028] In order to make the purpose, technical solution and advantages of the embodiments of the present disclosure clearer, the technical solution in the embodiments of the present disclosure will be clearly and completely described below in conjunction with the drawings in the embodiments of the present disclosure. Obviously, the described embodiments are part of the embodiments of the present disclosure, rather than all the embodiments. Based on the embodiments in the present disclosure, all other embodiments obtained by those skilled in the art without creative work are within the scope of protection of the present disclosure.

[0029] It is understandable that before using the technical solutions disclosed in the embodiments of the present disclosure, the types, scope of use, usage scenarios, etc. of the personal information involved in the present disclosure should be informed to the user and the user's authorization should be obtained in an appropriate manner in accordance with relevant laws and regulations.

[0030] For example, in response to receiving an active request from a user, a prompt message is sent to the user to clearly prompt the user that the operation requested to be performed will require obtaining and using the user's personal information. Thus, the user can autonomously choose whether to provide personal information to software or hardware such as an electronic device, application, server, or storage medium that performs the operation of the technical solution of the present disclosure according to the prompt message.

[0031] As an optional but non-limiting implementation, in response to receiving an active request from the user, the prompt information may be sent to the user in the form of a pop-up window, in which the prompt information may be presented in text form. In addition, the pop-up window may also carry a selection control for the user to choose "agree" or "disagree" to provide personal information to the electronic device.

[0032] It is understandable that the above notification and the process of obtaining user authorization are merely illustrative and do not constitute a limitation on the implementation of the present disclosure. Other methods that meet the relevant laws and regulations may also be applied to the implementation of the present disclosure.

[0033] It is understandable that the data involved in this technical solution (including but not limited to the data itself, the acquisition or use of the data) shall comply with the requirements of relevant laws, regulations and relevant provisions.

[0034] Content Delivery Network (CDN) is a server that accelerates content distribution and optimizes user access experience by deploying servers (mainly cache servers) in multiple geographical locations. The vendor of the content delivery network manages the configuration data of the acceleration domain name in the central computer room and transmits the domain name and configuration data to all servers in various ways. The servers of the content delivery network are spread all over the world, and the network conditions of different types of servers are different.

[0035] In the content distribution network, there is a type of server that is deployed in the operator network and only serves the internal local area network. It is difficult to directly access the server from the public network or across operators. If the content distribution network vendor wants to access the server, they need to use the character terminal of the Secure Shell Protocol (SSH) to access the intermediate device of the local network where the server is located using a fixed network address on the public network, and log in to the host inside the local area network through the intermediate device for management. Among them, the intermediate device is outdated and does not support SSH port forwarding.

[0036] However, this access method only supports simple management of the target device by inputting character commands in the character terminal, and it is difficult to implement domain name configuration for the server in network isolation. For example, if the manufacturer needs to directly connect to the Transmission Control Protocol (TCP) port of the server inside the LAN in the central computer room and continuously push the configuration data of the domain name of the content distribution network, it is difficult to directly use the intermediate device operated by the character terminal to complete it. Therefore, a solution to the transmission control protocol communication between two isolated networks is urgently needed.

[0037] In view of this, according to an embodiment of the present disclosure, an embodiment of a domain name configuration method for a content distribution network is provided. It should be noted that the steps shown in the flowchart of the accompanying drawings can be executed in a computer system such as a set of computer executable instructions, and although a logical order is shown in the flowchart, in some cases, the steps shown or described can be executed in an order different from that shown here.

[0038] In this embodiment, a first domain name configuration method for a content distribution network is provided, which can be used for a proxy server of a client; wherein the client and the proxy server are in the same network, and the client and the proxy server can be configured on the same electronic device or on different electronic devices. The client is used to push configuration data of the content distribution network. The proxy server is implemented by using the firewall secure session conversion protocol (Socks: Protocol for sessions traversal across firewall securely, SOCKS). Figure 1 is a flowchart of a domain name configuration method for a first content distribution network according to an embodiment of the present disclosure, such as Figure 1 As shown, the process includes the following steps:

[0039] Step S101, in response to a proxy request from a client, obtain a target server of a content distribution network to be connected by proxy and first address information of the target server, the client is in a first network, the target server is in a second network, and there is network isolation between the first network and the second network.

[0040] Specifically, the client to be proxied is started, and the proxy address of the client is set to the transmission control protocol port of the proxy server. The proxy server receives the first transmission control protocol connection of the client, completes the SOCKS protocol negotiation and identity authentication with the client, and obtains the target server to be connected to the proxy from the client's proxy request. The target server is a cache server of the content distribution network. The proxy server receives the client's proxy request by monitoring the first transmission control protocol connection with the client.

[0041] Step S102: Establish a first session with a first intermediate device, where the first intermediate device is in a first network.

[0042] Specifically, the proxy server logs in to the first intermediate device to establish a first session with the first intermediate device, wherein the proxy server logs in to the first intermediate device via the SSH protocol.

[0043] Optionally, the first intermediate device is a bastion host.

[0044] Step S103: establishing a second session between the first intermediate device and the second intermediate device based on the first session, where the second intermediate device is in a second network.

[0045] Specifically, in the first session, a first character command for logging into the second intermediate device is sent to the first intermediate device to establish a second session between the first intermediate device and the second intermediate device.

[0046] It should be noted that the first intermediate device can access the first network and the second network at the same time.

[0047] Optionally, the first session and the second session are SSH sessions.

[0048] Step S104: establishing a data forwarding process between the second intermediate device and the target server based on the first session, the second session and the first address information.

[0049] Specifically, the second character command generated based on the first address information is sent to the second intermediate device through the first session and the second session in turn, so that the second intermediate device establishes a data forwarding process with the target server based on the second character command. After the data forwarding process is started, a transmission control protocol connection between the second intermediate device and the target server can be achieved.

[0050] Optionally, the second intermediate device is a jump host.

[0051] Step S105: performing domain name configuration on the target server based on the first session, the second session, and the data forwarding process.

[0052] Specifically, the client sends configuration data for the target server. When the proxy server monitors the configuration data, it forwards the configuration data to the target server in sequence through the first session, the second session and the data forwarding process, so that the target server performs domain name configuration according to the configuration data.

[0053] The domain name configuration method of the content distribution network provided in this embodiment configures the client's proxy server in the case of network isolation between the client and the target server to be connected, and the proxy server establishes a first session with the first intermediate device of the first network where the client is located, and establishes a second session with the first intermediate device and the second intermediate device of the second network where the target server is located on the first session, thereby using the first session and the second session to open up the transmission channel between the first network and the second network. And using the first session and the second session, establish a data forwarding process between the second intermediate device and the target server, thereby establishing a data transmission channel between the client and the target server. Furthermore, when the client configures the domain name of the target server, the proxy server can forward the relevant configuration to the target server through the first session, the second session and the data forwarding process, so as to configure the domain name of the network-isolated target server.

[0054] In this embodiment, a second method for configuring a domain name of a content distribution network is provided, which can be used for a proxy server of a client. Figure 2 is a flow chart of a second method for configuring a domain name of a content distribution network according to an embodiment of the present disclosure, such as Figure 2 As shown, the process includes the following steps:

[0055] Step S201, in response to the proxy request of the client, obtain the target server of the content distribution network to be connected by proxy and the first address information of the target server. Please refer to the above step S101, which will not be repeated here.

[0056] Step S202: Establish a first session with a first intermediate device, where the first intermediate device is in a first network. Please refer to the above step S102, which will not be described in detail here.

[0057] Step S203: Establish a second session between the first intermediate device and the second intermediate device based on the first session, where the second intermediate device is in a second network.

[0058] Specifically, the above step S203 includes:

[0059] Step S2031, obtaining the second address information of the second intermediate device.

[0060] Step S2032: Generate a first character command based on the second address information, where the first character command is used to log in to the second intermediate device.

[0061] Step S2033: Send a first character command to the first intermediate device based on the first session, and the first intermediate device is used to log in to the second intermediate device based on the first character command to establish a second session.

[0062] It should be noted that the first intermediate device and the second intermediate device retain the access capability of the character terminal. The proxy server can generate the first character command through the local character terminal. For example, if the second address information is "H2", the first character command "ssh user@H2" can be generated. The "ssh user@H2" is forwarded to the first intermediate device using the first session, so that the first intermediate device uses "ssh user@H2" to log in to the second intermediate device, thereby establishing a second session between the proxy server and the first intermediate device.

[0063] Step S204: Based on the first session, the second session and the first address information, a data forwarding process between the second intermediate device and the target server is established. Please refer to the above step S104, which will not be described in detail here.

[0064] Step S205: Based on the first session, the second session and the data forwarding process, the domain name of the target server is configured. Please refer to the above step S105, which will not be described in detail here.

[0065] The domain name configuration method of the content distribution network provided in this embodiment generates a first character command through the second address information of the second intermediate device, and transmits the first character command to the first intermediate device using the first session. Since both the first intermediate device and the second intermediate device have the access capability of the character terminal, the first intermediate device can log in to the second intermediate device using the first character command, thereby realizing data transmission between the first network and the second network.

[0066] In this embodiment, a third method for configuring a domain name of a content distribution network is provided, which can be used for a proxy server of a client. Figure 3 is a flow chart of a third method for configuring a domain name of a content distribution network according to an embodiment of the present disclosure, such as Figure 3 As shown, the process includes the following steps:

[0067] Step S301, in response to the proxy request of the client, obtain the target server of the content distribution network to be connected by proxy and the first address information of the target server. Please refer to the above step S101, which will not be repeated here.

[0068] Step S302: Establish a first session with a first intermediate device, where the first intermediate device is in a first network. Please refer to the above step S102, which will not be described in detail here.

[0069] Step S303: A second session is established between the first intermediate device and the second intermediate device based on the first session, and the second intermediate device is in a second network. Please refer to the above step S203, which will not be described in detail here.

[0070] Step S304: establishing a data forwarding process between the second intermediate device and the target server based on the first session, the second session and the first address information.

[0071] Specifically, the above step S304 includes:

[0072] Step S3041: Generate a second character command based on the first address information, where the second character command is used to start a data forwarding service for a target server.

[0073] Step S3042: Based on the first session and the second session, a second character command is sent to the second intermediate device, and the second intermediate device is used to start a data forwarding service for the target server based on the second character command to establish a data forwarding process.

[0074] Specifically, the proxy server can generate a second character command through a local character terminal. For example, if the first address information is "Host3:Port3", then a second character command ". / Data forwarding Host3:Port3" can be generated. The ". / Data forwarding Host3:Port3" is forwarded to the second intermediate device using the first session and the second session, so that the second intermediate device uses ". / Data forwarding Host3:Port3" to start a data forwarding service for the target server, thereby establishing a data forwarding process between the second intermediate device and the target server.

[0075] Once the data forwarding process is started, the data transmission channel connection of the remote transmission control protocol between the local character terminal and the target server can be completed.

[0076] Furthermore, the first intermediate device and the second intermediate device are provided with character terminals. The above step S304 also includes:

[0077] Step a1, binding the character terminal input corresponding to the second session with the input of the data forwarding process.

[0078] Step a2: Bind the character terminal output corresponding to the second session to the output of the data forwarding process.

[0079] It should be noted that after the character terminal input corresponding to the second session is bound to the input (standard input) of the data forwarding process, the data written to the character terminal input of the second session will be read by the input of the data forwarding process, and the data will be forwarded to the target server. After the character terminal output corresponding to the second session is bound to the output (standard output) of the data forwarding process, the data written to the output of the data forwarding process will be written to the character terminal output of the second session. Then, it is transparently transmitted to the output of the first session through the second session and read by the proxy server.

[0080] Further, the data forwarding process is connected to the transmission control protocol port of the target server to establish a second transmission control protocol connection between the data forwarding process and the target server. If data is read by monitoring the input of the data forwarding process, the read data is written to the second transmission control protocol connection to be transmitted to the target server. If data is read by monitoring the second transmission control protocol connection, the read data is written to the output of the data forwarding process to be transmitted to the proxy server and the client.

[0081] Step S305: Based on the first session, the second session and the data forwarding process, the domain name of the target server is configured. Please refer to the above step S105, which will not be described in detail here.

[0082] The domain name configuration method of the content distribution network provided in this embodiment generates a second character command through the first address information of the target server, and transmits the second character command to the second intermediate device by using the first session and the second session. Since the second intermediate device has the ability to access the character terminal, the second intermediate device can respond to the second character command to start the data forwarding service for the target server in the same network, so as to establish a data forwarding process between the second intermediate device and the target server, thereby using the proxy server, the first session, the second session and the data forwarding process to establish a data transmission channel from the client to the target server. At the same time, the character terminal input and the character terminal output corresponding to the second session are respectively bound to the input and output of the data forwarding process, which can ensure that the data written into the character terminal input of the second session through the first session is read by the data forwarding process and sent to the target server, and the data written into the data forwarding process by the target server can also be transmitted to the first session through the character terminal output of the bound second session, so that the proxy server can read and forward it to the client, thereby building the domain name configuration conditions from the client to the target server, so that the client can perform domain name configuration on the target server.

[0083] In this embodiment, a fourth method for configuring a domain name of a content distribution network is provided, which can be used for a proxy server of a client deployed on an electronic device. Figure 4is a flowchart of a fourth method for configuring a domain name of a content distribution network according to an embodiment of the present disclosure, such as Figure 4 As shown, the process includes the following steps:

[0084] Step S401, in response to the proxy request of the client, obtain the target server of the content distribution network to be connected by proxy and the first address information of the target server. Please refer to the above step S101, which will not be repeated here.

[0085] Step S402: Establish a first session with a first intermediate device, where the first intermediate device is in a first network. Please refer to the above step S102, which will not be described in detail here.

[0086] Step S403: A second session is established between the first intermediate device and the second intermediate device based on the first session, and the second intermediate device is in a second network. Please refer to the above step S203, which will not be described in detail here.

[0087] Step S404: Based on the first session, the second session and the first address information, a data forwarding process between the second intermediate device and the target server is established. Please refer to the above step S304, which will not be described in detail here.

[0088] Step S405 , in response to the configuration data of the target server from the client, based on the first session, the second session and the data forwarding process, the configuration data is sent to the target server, where the configuration data is used to perform domain name configuration on the target server.

[0089] Specifically, when the proxy server monitors the configuration data for the target server from the client, it writes the configuration data into the character terminal corresponding to the first session, and uses the first session to transmit the configuration data to the character terminal input of the second session (i.e., the character terminal of the first intermediate device), so that it is read by the input of the data forwarding process on the second intermediate device. The data forwarding process writes the read configuration data into the second transmission control protocol connection with the target server, so that the target server performs domain name configuration according to the received configuration data. At the same time, the target server can write feedback data to the second transmission control protocol connection. If the data forwarding process reads feedback data from the second transmission control protocol connection, the feedback data is written into the output of the data forwarding process and transmitted to the first session through the second session. If the proxy server monitors the feedback data output by the first session, the feedback data is transmitted to the client.

[0090] The domain name configuration method of the content distribution network provided in this embodiment, after the data transmission channel from the proxy server to the target server is established through the first session, the second session and the data forwarding process, the proxy server monitors the configuration data from the client, and then uses the established data transmission channel to transparently transmit the configuration data to the target server to perform domain name configuration on the target server, thereby effectively improving the efficiency of domain name configuration.

[0091] In some optional implementations, the above step S405 includes:

[0092] Step b1, obtaining the establishment status of the data transmission channel between the first session, the second session and the data forwarding process.

[0093] Specifically, the above step b1 includes: writing a preset character to the output of the data forwarding process; if the preset character is read through the first session, determining that the establishment status is established successfully.

[0094] Optionally, the number of characters of the preset characters is 10. In addition, the number of characters of the preset characters can also be set to 9 characters, 8 characters, etc., which is not limited here.

[0095] Exemplarily, assuming that the preset characters are "TransferStart0000000", "TransferStart0000000" can be written to the output of the data forwarding process. If the proxy server reads "TransferStart0000000" through the first session, it indicates that the data transmission channel between the proxy server and the target server is successfully established, and the configuration data from the client can be forwarded through the data transmission channel.

[0096] Step b2: If the establishment status is successful, configuration data is sent to the target server based on the first session, the second session and the data forwarding process.

[0097] It should be noted that if the establishment status is unsuccessful, the configuration data will not be sent to the target server.

[0098] The domain name configuration method of the content distribution network provided in this embodiment sends configuration data to the target server based on the first session, the second session and the data forwarding process only after the data transmission channel between the first session, the second session and the data forwarding process is successfully established. Therefore, it can avoid the failure of the domain name configuration of the target server due to the failure of the data transmission channel to be successfully established, so as to improve the reliability of the domain name configuration.

[0099] In some optional implementations, the sending of configuration data to the target server based on the first session, the second session, and the data forwarding process in step S405 includes:

[0100] Step c1, encrypting the configuration data to obtain encrypted configuration data.

[0101] Optionally, the proxy server encrypts the configuration data through BASE64 encoding to obtain the encrypted configuration data. In addition, other encryption methods can also be selected to encrypt the configuration data according to actual needs to obtain the encrypted configuration data, which is not limited here.

[0102] Step c2: sending the encrypted configuration data to the target server based on the first session, the second session and the data forwarding process.

[0103] Specifically, based on the first session and the second session, the encrypted configuration data is transmitted to the data forwarding process on the second intermediate device. After the encrypted configuration data is read by the input of the data forwarding process, it is decrypted to obtain the decrypted configuration data. The data forwarding process writes the decrypted configuration data into the second transmission control protocol connection, and transmits the decrypted configuration data to the target server through the second transmission control protocol connection.

[0104] Optionally, the data forwarding process decrypts the encrypted configuration data through BASE64 to obtain decrypted configuration data.

[0105] The domain name configuration method of the content distribution network provided in this embodiment encrypts the configuration data and then sends the encrypted configuration data to the target server based on the first session, the second session and the data forwarding process, thereby ensuring the transmission security of the configuration data.

[0106] Furthermore, when the target server receives the decrypted configuration data, it generates feedback data for the decrypted configuration data. The target server writes the feedback data to the second transmission control protocol connection. If the data forwarding process reads the feedback data from the second transmission control protocol connection, the feedback data is encrypted and the encrypted feedback data is written to the output of the data forwarding process, thereby using the second session to transmit the encrypted feedback data to the first session. If the proxy server monitors the encrypted feedback data output by the first session, the encrypted feedback data is decrypted to obtain the decrypted feedback data. The proxy server transmits the decrypted feedback data to the client through the first transmission control protocol connection, so that the client can confirm the domain name configuration of the target server.

[0107] Optionally, the data forwarding process encrypts the feedback data of the target server through BASE64 encoding to obtain encrypted feedback data. In addition, other encryption methods can be selected to encrypt the feedback data according to actual needs to obtain encrypted feedback data, which is not limited here.

[0108] Optionally, the proxy server decrypts the encrypted feedback data through BASE64 to obtain decrypted feedback data.

[0109] As a specific application example, Figure 5 As shown, Figure 5 It is a complete process from the initiation of a proxy request to the reading and writing of data. The client establishes a proxy connection with the proxy server (i.e., the first transmission control protocol connection mentioned above), and the proxy server logs in to the first intermediate device through the SSH protocol to establish a first session. The proxy server sends a first character command remotely on the first session, remotely logs in to the second intermediate device through the SSH protocol, and establishes a second session. The proxy server uses the first session and the second session to send a second character command to the second intermediate device, so that the second intermediate device starts the data forwarding service for the target server to establish a data forwarding process. The data forwarding process is started, and a second transmission control protocol connection with the target server is established. The client sends the configuration data to be transmitted to the target server. The proxy server monitors the configuration data from the client, determines whether the data transmission channel between the proxy server and the target server is ready (i.e., whether it is successfully established), and if it is ready, performs BASE64 encoding on the configuration data to obtain the encrypted configuration data. The proxy server sends the encrypted configuration data to the first intermediate device through the first session, and the first intermediate device uses the second session to transmit the encrypted configuration data to the data forwarding process. If the input of the data forwarding process reads the encrypted configuration data, the decrypted configuration data is obtained by BASE64 decoding. The target server performs domain name configuration based on the decrypted configuration data and generates feedback data. The target server writes the feedback data to the second transmission control protocol connection. If the data forwarding process reads the feedback data from the second transmission control protocol connection, it performs BASE64 encoding on the feedback data to obtain encrypted feedback data. The data forwarding process writes the encrypted feedback data to the output of the data forwarding process, and uses the second session to transmit the encrypted feedback data to the first session. The proxy server monitors the encrypted feedback data output by the first session, performs BASE64 decoding on the encrypted feedback data, and obtains decrypted feedback data. The proxy server forwards the decrypted feedback data to the client so that the client can confirm the domain name configuration of the target server.

[0110] It is worth noting that although there is isolation between the two isolated networks, a character terminal based on SSH multi-layer login is available (located on the intermediate device of the network). The domain name configuration method of the content distribution network disclosed in the present invention starts the SOCKS proxy service for the client of the first network, deploys the proxy server of the client, and the proxy server establishes a first session, a second session, and a data forwarding process between the first intermediate device of the first network, the second intermediate device of the second network, and the target server, thereby establishing a data transmission channel from the client to the transmission control protocol port of the target server. Therefore, it is possible to achieve secure transmission of proxy data (such as configuration data) on this data transmission channel, and provide a general transmission control protocol proxy service for the first network and the second network that were originally isolated from each other, meeting the transmission control protocol connection requirements between the isolated networks. As a result, the manufacturer of the content distribution network can establish a connection between the transmission control protocol port of the server in the central computer room and the local area network through the domain name configuration method disclosed in the present invention, so that the central computer room pushes configuration data to the server in the local area network, thereby performing domain name configuration on the server.

[0111] In other words, the domain name configuration method of the content distribution network disclosed in the present invention establishes a data transmission channel from the client to the target server with network isolation through the character terminal on the link of the character terminal based on SSH multi-layer login retained by the two isolated networks, that is, the data transmission channel composed of the first transmission control protocol connection, the first session, the second session, the data forwarding process, and the second transmission control protocol connection. In combination with the standard SOCKS proxy service, a universal transmission control protocol proxy service is provided for the original different networks, which can meet the transmission control protocol requirements between the two isolated networks. Through this data transmission channel, the client of the content distribution network configuration push that originally worked in the public network direct connection mode can push the configuration data for domain name configuration to the cache server of the content distribution network in the restricted network without significantly modifying the code, so as to realize the domain name configuration.

[0112] In this embodiment, a domain name configuration device for a content distribution network is also provided, and the device is used to implement the above-mentioned embodiments and preferred implementation modes, and the descriptions that have been made are not repeated here. As used below, the term "module" can be a combination of software and / or hardware that implements a predetermined function. Although the devices described in the following embodiments are preferably implemented in software, the implementation of hardware, or a combination of software and hardware, is also possible and conceivable.

[0113] This embodiment provides a domain name configuration device for a content distribution network, such as Figure 6 As shown, including:

[0114] The request response module 601 is used to respond to the proxy request of the client, obtain the target server of the content distribution network to be connected by the proxy and the first address information of the target server, the client is in the first network, the target server is in the second network, and there is network isolation between the first network and the second network;

[0115] A first establishing module 602, configured to establish a first session with a first intermediate device, the first intermediate device being in a first network;

[0116] A second establishing module 603, configured to establish a second session between the first intermediate device and the second intermediate device based on the first session, wherein the second intermediate device is in a second network;

[0117] A third establishing module 604 is used to establish a data forwarding process between the second intermediate device and the target server based on the first session, the second session and the first address information to obtain a target session;

[0118] The domain name configuration module 605 is used to configure the domain name of the target server based on the first session, the second session and the data forwarding process.

[0119] In some optional implementations, the second establishing module 603 includes:

[0120] An address acquisition unit, used to acquire second address information of a second intermediate device;

[0121] A first command generating unit, configured to generate a first character command based on the second address information, wherein the first character command is used to log in to the second intermediate device;

[0122] The session establishing unit is used to send a first character command to a first intermediate device based on a first session, and the first intermediate device is used to log in to a second intermediate device based on the first character command to establish a second session.

[0123] In some optional implementations, the third establishing module 604 includes:

[0124] A second command generating unit, used for generating a second character command based on the first address information, wherein the second character command is used for starting a data forwarding service for a target server;

[0125] The process establishing unit is used to send a second character command to the second intermediate device based on the first session and the second session, and the second intermediate device is used to start a data forwarding service for the target server based on the second character command to establish a data forwarding process.

[0126] In some optional implementations, the first intermediate device and the second intermediate device are provided with character terminals.

[0127] The third establishing module 604 also includes:

[0128] A first binding unit, used to bind the character terminal input corresponding to the second session with the input of the data forwarding process;

[0129] The second binding unit is used to bind the character terminal output corresponding to the second session with the output of the data forwarding process.

[0130] In some optional implementations, the domain name configuration module 605 includes:

[0131] The data sending unit is used to respond to the configuration data of the target server from the client, send the configuration data to the target server based on the first session, the second session and the data forwarding process, and the configuration data is used to perform domain name configuration on the target server.

[0132] In some optional implementations, the data sending unit includes:

[0133] A status acquisition subunit, used to acquire the establishment status of the data transmission channel between the first session, the second session and the data forwarding process;

[0134] The data sending subunit is used to send configuration data to the target server based on the first session, the second session and the data forwarding process if the establishment status is successful.

[0135] In some optional implementations, the status acquisition subunit is specifically used to: write a preset character to the output of the data forwarding process; if the preset character is read through the first session, determine that the establishment status is successful.

[0136] In some optional embodiments, the data sending unit / data sending sub-unit is used to send configuration data to the target server based on the first session, the second session and the data forwarding process, including: encrypting the configuration data to obtain encrypted configuration data; based on the first session, the second session and the data forwarding process, sending the encrypted configuration data to the target server.

[0137] The further functional description of each of the above modules and units is the same as that of the above corresponding embodiments and will not be repeated here.

[0138] The domain name configuration device of the content distribution network in this embodiment is presented in the form of a functional unit, where the unit refers to an ASIC (Application Specific Integrated Circuit) circuit, a processor and memory that executes one or more software or fixed programs, and / or other devices that can provide the above functions.

[0139] The present disclosure also provides an electronic device having the above Figure 6 A domain name configuration device of a content distribution network is shown.

[0140] See also Figure 7 , Figure 7 is a structural block diagram of an electronic device provided by an optional embodiment of the present disclosure, such as Figure 7 As shown, the electronic device includes: one or more processors 701, memory 702, and interfaces for connecting various components, including high-speed interfaces and low-speed interfaces. Various components are connected to each other using different buses for communication, and can be installed on a common mainboard or installed in other ways as needed. The processor can process instructions executed in the electronic device, including instructions stored in or on the memory to display the graphical information of the GUI on an external input / output device (such as a display device coupled to the interface). In some optional embodiments, if necessary, multiple processors and / or multiple buses can be used together with multiple memories and multiple memories. Similarly, multiple electronic devices can be connected, and each device provides some necessary operations (for example, as a server array, a group of blade servers, or a multi-processor system). Figure 7 A processor 701 is taken as an example.

[0141] The processor 701 may be a central processing unit, a network processor or a combination thereof. The processor 701 may further include a hardware chip. The hardware chip may be a dedicated integrated circuit, a programmable logic device or a combination thereof. The programmable logic device may be a complex programmable logic device, a field programmable logic gate array, a general purpose array logic or any combination thereof.

[0142] The memory 702 stores instructions executable by at least one processor 701, so that the at least one processor 701 executes the method shown in the above embodiment.

[0143] The memory 702 may include a program storage area and a data storage area, wherein the program storage area may store an operating system, an application required for at least one function; the data storage area may store data created according to the use of the electronic device, etc. In addition, the memory 702 may include a high-speed random access memory, and may also include a non-transient memory, such as at least one disk storage device, a flash memory device, or other non-transient solid-state storage device. In some optional embodiments, the memory 702 may optionally include a memory remotely arranged relative to the processor 701, and these remote memories may be connected to the electronic device via a network. Examples of the above-mentioned network include, but are not limited to, the Internet, an intranet, a local area network, a mobile communication network, and combinations thereof.

[0144] The memory 702 may include a volatile memory, such as a random access memory; the memory may also include a non-volatile memory, such as a flash memory, a hard disk or a solid state drive; the memory 702 may also include a combination of the above types of memory.

[0145] The electronic device also includes an input device 703 and an output device 704. The processor 701, the memory 702, the input device 703 and the output device 704 may be connected via a bus or other means. Figure 7 The example of connecting through bus is taken in the following.

[0146] The input device 703 can receive input digital or character information, and generate key signal input related to the user settings and function control of the electronic device, such as a touch screen, a keypad, a mouse, a track pad, a touch pad, an indicator rod, one or more mouse buttons, a trackball, a joystick, etc. The output device 704 may include a display device, an auxiliary lighting device (e.g., an LED) and a tactile feedback device (e.g., a vibration motor), etc. The above-mentioned display device includes but is not limited to a liquid crystal display, a light emitting diode, a display and a plasma display. In some optional embodiments, the display device can be a touch screen.

[0147] The embodiments of the present disclosure also provide a computer-readable storage medium. The above-mentioned method according to the embodiments of the present disclosure can be implemented in hardware, firmware, or can be implemented as a computer code that can be recorded in a storage medium, or can be implemented as a computer code that is originally stored in a remote storage medium or a non-temporary machine-readable storage medium and will be stored in a local storage medium and downloaded through a network, so that the method described herein can be stored in such software processing on a storage medium using a general-purpose computer, a dedicated processor, or programmable or dedicated hardware. Among them, the storage medium can be a magnetic disk, an optical disk, a read-only storage memory, a random access memory, a flash memory, a hard disk or a solid-state drive, etc.; further, the storage medium can also include a combination of the above-mentioned types of memory. It can be understood that a computer, a processor, a microprocessor controller, or programmable hardware includes a storage component that can store or receive software or computer code. When the software or computer code is accessed and executed by a computer, a processor, or hardware, the method shown in the above embodiment is implemented.

[0148] A part of the present disclosure may be applied as a computer program product, such as a computer program instruction, which, when executed by a computer, can call or provide the method and / or technical solution according to the present disclosure through the operation of the computer. Those skilled in the art should understand that the existence of computer program instructions in computer-readable media includes, but is not limited to, source files, executable files, installation package files, etc., and accordingly, the way in which computer program instructions are executed by a computer includes, but is not limited to: the computer directly executes the instruction, or the computer compiles the instruction and then executes the corresponding compiled program, or the computer reads and executes the instruction, or the computer reads and installs the instruction and then executes the corresponding installed program. Here, the computer-readable medium can be any available computer-readable storage medium or communication medium accessible to the computer.

[0149] Although the embodiments of the present disclosure have been described in conjunction with the accompanying drawings, those skilled in the art may make various modifications and variations without departing from the spirit and scope of the present disclosure, and such modifications and variations are all within the scope defined by the appended claims.

Claims

1. A method for configuring a domain name of a content distribution network, characterized in that: A proxy server applicable to a client, the method comprising: In response to the proxy request of the client, a target server of the content distribution network to be connected by proxy and first address information of the target server are obtained, the client is in a first network, the target server is in a second network, and there is network isolation between the first network and the second network; Establishing a first session with a first intermediate device, the first intermediate device being in the first network; Establishing a second session between the first intermediate device and a second intermediate device based on the first session, wherein the second intermediate device is located in the second network; Establishing a data forwarding process between the second intermediate device and the target server based on the first session, the second session and the first address information; A domain name is configured for the target server based on the first session, the second session, and the data forwarding process.

2. The method for configuring a domain name of a content distribution network according to claim 1, characterized in that: The establishing a second session between the first intermediate device and the second intermediate device based on the first session includes: Obtaining second address information of the second intermediate device; generating a first character command based on the second address information, where the first character command is used to log in to the second intermediate device; The first character command is sent to the first intermediate device based on the first session, and the first intermediate device is used to log in to the second intermediate device based on the first character command to establish the second session.

3. The method for configuring a domain name of a content distribution network according to claim 1, characterized in that: The establishing of a data forwarding process between the second intermediate device and the target server based on the first session, the second session and the first address information includes: generating a second character command based on the first address information, where the second character command is used to start a data forwarding service for the target server; Based on the first session and the second session, the second character command is sent to the second intermediate device, and the second intermediate device is used to start the data forwarding service for the target server based on the second character command to establish the data forwarding process.

4. The method for configuring a domain name of a content distribution network according to claim 3, characterized in that: The first intermediate device and the second intermediate device are provided with character terminals; the establishing of a data forwarding process between the second intermediate device and the target server based on the first session, the second session and the first address information further includes: Binding the character terminal input corresponding to the second session to the input of the data forwarding process; Bind the character terminal output corresponding to the second session to the output of the data forwarding process.

5. The method for configuring a domain name of a content distribution network according to claim 1, characterized in that: The configuring the domain name of the target server based on the first session, the second session, and the data forwarding process includes: In response to the configuration data of the target server by the client, based on the first session, the second session and the data forwarding process, the configuration data is sent to the target server, where the configuration data is used to perform domain name configuration on the target server.

6. The method for configuring a domain name of a content distribution network according to claim 5, characterized in that: The sending the configuration data to the target server based on the first session, the second session, and the data forwarding process includes: Acquire the establishment status of the data transmission channel between the first session, the second session and the data forwarding process; If the establishment status is successful, the configuration data is sent to the target server based on the first session, the second session, and the data forwarding process.

7. The method for configuring a domain name of a content distribution network according to claim 6, characterized in that: The obtaining the establishment status of the data transmission channel between the first session, the second session, and the data forwarding process includes: Writing a preset character to the output of the data forwarding process; If the preset character is read through the first conversation, it is determined that the establishment status is successfully established.

8. The method for configuring a domain name of a content distribution network according to claim 5, characterized in that: The sending the configuration data to the target server based on the first session, the second session, and the data forwarding process includes: Encrypting the configuration data to obtain encrypted configuration data; Based on the first session, the second session, and the data forwarding process, the encrypted configuration data is sent to the target server.

9. A domain name configuration device for a content distribution network, characterized in that: A proxy server applicable to a client, the device comprising: A request response module, configured to obtain, in response to a proxy request of the client, a target server of a content distribution network to be connected by proxy and first address information of the target server, wherein the client is in a first network, the target server is in a second network, and there is network isolation between the first network and the second network; A first establishing module, configured to establish a first session with a first intermediate device, wherein the first intermediate device is located in the first network; A second establishing module, configured to establish a second session between the first intermediate device and a second intermediate device based on the first session, wherein the second intermediate device is located in the second network; A third establishing module, configured to establish a data forwarding process between the second intermediate device and the target server based on the first session, the second session and the first address information, so as to obtain a target session; A domain name configuration module is used to configure the domain name of the target server based on the first session, the second session and the data forwarding process.

10. An electronic device, characterized in that: include: A memory and a processor, wherein the memory and the processor are communicatively connected to each other, the memory stores computer instructions, and the processor executes the domain name configuration method for a content distribution network according to any one of claims 1 to 8 by executing the computer instructions.

11. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores computer instructions, and the computer instructions are used to enable a computer to execute the domain name configuration method for a content distribution network according to any one of claims 1 to 8.

12. A computer program product, characterized in that The method comprises computer instructions, wherein the computer instructions are used to cause a computer to execute the domain name configuration method for a content distribution network according to any one of claims 1 to 8.

Images