Private network communication method, private network communication system and computer storage medium
By adding proxy protocol headers to traffic intercepting sidecars and forwarding request messages, the problem of security threats in existing private network communication methods is solved, and transparent proxy communication and secure and reliable interoperability between private networks are achieved.
Patent Information
- Application Number
- CN202411614361.5
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- Filing Date
- 2024-11-12
- Publication Date
- 2025-04-04
AI Technical Summary
The existing private network communication method requires the master to modify the requested destination address to the forward proxy IP and port, resulting in the security of the private network being compromised.
By adding a proxy protocol header to the traffic intercepting sidecar, writing to the second private network network socket, generating a second request message, and forwarding it through the public network gateway and the forward proxy gateway, ultimately realizing transparent proxy communication between the private networks.
It realizes a transparent proxy for private network communication, and the non-invasiveness of interoperability between private networks, improving the security and reliability of communication.
Smart Images
Figure CN119766468A_ABST
Abstract
Description
Technical Field
[0001] The present application relates to the technical field of private network communication of computer software, and in particular to a private network communication method, a private network communication system and a computer storage medium. Background Art
[0002] Today, more and more enterprises choose to migrate some of their enterprise data and services to the public cloud to improve service stability and reliability. To improve service availability, enterprises generally choose hybrid cloud and multi-region deployment at the same time. After moving to the cloud, how to communicate between the enterprise's local private network and the private network on the cloud, and between the private networks in different regions of the hybrid cloud becomes a problem.
[0003] The current private network communication method requires the main calling device to modify the destination address of the request to the forward proxy's IP (Internet Protocol) and port. It is not a transparent proxy, which poses a certain threat to the security of the private network. Summary of the invention
[0004] In order to solve the above technical problems, the present application proposes a private network communication method, a private network communication system and a computer storage medium.
[0005] In order to solve the above technical problems, the present application proposes a private network communication method, which includes:
[0006] The first application in the first private network sends a first request message to the traffic interception sidecar, wherein the first request message is written into the communication service message;
[0007] The traffic interception sidecar adds a proxy protocol header at the transport layer of the first request message, writes a second private network socket into the proxy protocol header, and generates a second request message;
[0008] The traffic interception sidecar forwards the second request message to the public network gateway in the first private network;
[0009] The public network gateway updates the second request message to a third request message according to the public network gateway network socket, and sends the third request message to the forward proxy gateway in the second private network;
[0010] The forward proxy gateway obtains the second private network socket from the proxy protocol header in the third request message and writes it into the connection layer to generate a fourth request message;
[0011] The forward proxy gateway sends the fourth request message to the second application in the second private network, and the second application parses the service message from the transport layer in the fourth request message.
[0012] Wherein, writing the second private network socket into the proxy protocol header to generate a second request message includes:
[0013] The traffic interception sidecar writes the second private network socket into the type-length-value vector of the proxy protocol header to generate the second request message.
[0014] Wherein, network traffic congestion management information is also written into the proxy protocol header;
[0015] The private network communication method further includes:
[0016] The forward proxy gateway parses the network traffic congestion management information from the proxy protocol header in the transport layer of the fourth request message;
[0017] The forward proxy gateway performs network traffic control according to the network traffic congestion management information.
[0018] Wherein, the private network communication method further includes:
[0019] The traffic interception sidecar encrypts the service message in the transport layer of the second request message, and writes the corresponding authentication information into the second request message;
[0020] The private network communication method further includes:
[0021] The forward proxy gateway parses the authentication information from the third request message or the fourth request message, and decrypts the service message according to the authentication information.
[0022] The first request message contains the first private network socket and the second private network socket.
[0023] Wherein, the private network communication method further includes:
[0024] The traffic interception sidecar modifies the first private network socket in the connection layer of the first request message or the second request message into a traffic interception sidecar network socket, and modifies the second private network socket in the connection layer of the first request message or the second request message into a forward proxy gateway network socket.
[0025] The public network gateway updates the second request message to a third request message according to the public network gateway network socket, including:
[0026] The public network gateway modifies the traffic interception sidecar network socket in the second request message connection layer to the public network gateway network socket to generate the third request message.
[0027] The forward proxy gateway obtains the second private network socket from the proxy protocol header in the third request message and writes it into the connection layer to generate a fourth request message, including:
[0028] The forward proxy gateway obtains the second private network socket from the proxy protocol header in the third request message;
[0029] The forward proxy gateway modifies the public network gateway network socket in the connection layer of the third request message to the second private network socket to generate the fourth request message.
[0030] In order to solve the above technical problems, the present application also proposes a private network communication system, the private network communication system comprising:
[0031] A first application in a first private network is used to send a first request message to a traffic interception sidecar, wherein the first request message is written into a communication service message;
[0032] The traffic interception sidecar is used to add a proxy protocol header at the transport layer of the first request message, write a second private network socket into the proxy protocol header, and generate a second request message;
[0033] The traffic interception sidecar is used to forward the second request message to the public network gateway in the first private network;
[0034] The public network gateway is used to update the second request message to a third request message according to the public network gateway network socket, and send the third request message to the forward proxy gateway in the second private network;
[0035] The forward proxy gateway is used to obtain the second private network socket from the proxy protocol header in the third request message and write it into the connection layer to generate a fourth request message;
[0036] The forward proxy gateway is used to send the fourth request message to the second application in the second private network, and the second application parses the service message from the transport layer in the fourth request message.
[0037] In order to solve the above technical problems, the present application also proposes a computer storage medium, which is used to store program data. When the program data is executed by a computer, it is used to implement the above private network communication method.
[0038] Compared with the prior art, the beneficial effects of the present application are as follows: the first application in the first private network sends a first request message to the traffic interception sidecar, wherein the first request message is written into the communication service message; the traffic interception sidecar adds a proxy protocol header at the transport layer of the first request message, writes the second private network network socket into the proxy protocol header, and generates a second request message; the traffic interception sidecar forwards the second request message to the public network gateway in the first private network; the public network gateway updates the second request message to the third request message according to the public network gateway network socket, and sends the third request message to the forward proxy gateway in the second private network; the forward proxy gateway obtains the second private network network socket from the proxy protocol header in the third request message and writes it into the connection layer, generating a fourth request message; the forward proxy gateway sends the fourth request message to the second application in the second private network, and the second application parses the service message from the transport layer in the fourth request message. Through the above-mentioned private network communication method, a transparent proxy for private network communication and non-intrusive communication between private networks are realized. BRIEF DESCRIPTION OF THE DRAWINGS
[0039] In order to more clearly illustrate the technical solutions in the embodiments of the present application, the drawings required for use in the description of the embodiments will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present application. For ordinary technicians in this field, other drawings can be obtained based on these drawings without creative work.
[0040] in:
[0041] Figure 1 It is a flowchart of an embodiment of a private network communication method provided by the present application;
[0042] Figure 2 It is a schematic diagram of the framework of the private network communication system provided by this application;
[0043] Figure 3 It is a private network communication signaling schematic diagram provided by this application;
[0044] Figure 4 It is a private network communication flow chart provided by this application;
[0045] Figure 5 It is a flowchart of another embodiment of the private network communication method provided by the present application;
[0046] Figure 6 It is a schematic diagram of the framework of an embodiment of a private network communication system provided by the present application;
[0047] Figure 7 It is a structural diagram of an embodiment of a computer storage medium provided by the present application. DETAILED DESCRIPTION
[0048] The following will be combined with the drawings in the embodiments of the present application to clearly and completely describe the technical solutions in the embodiments of the present application. Obviously, the described embodiments are only part of the embodiments of the present application, not all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of this application.
[0049] The terms "first", "second", "third", "fourth", etc. (if any) in the specification and claims of the present application and the above-mentioned drawings are used to distinguish similar objects, and are not necessarily used to describe a specific order or sequence. It should be understood that the data used in this way can be interchangeable where appropriate, so that the embodiments of the present application described herein can, for example, be implemented in an order other than those illustrated or described herein. In addition, the terms "including" and "having" and any of their variations are intended to cover non-exclusive inclusions, for example, a process, method, system, product or device that includes a series of steps or units is not necessarily limited to those steps or units that are clearly listed, but may include other steps or units that are not clearly listed or inherent to these processes, methods, products or devices.
[0050] The technical terms involved in the private network communication method of this application include but are not limited to the following terms:
[0051] Private network / VPC / Intranet: A logically isolated network area. This virtual network area enables users to control the virtual network environment, including selecting their own IP address range, creating subnets, configuring routing tables and network gateways.
[0052] Hybrid cloud: A mixed computing environment in which applications are run using a combination of compute, storage, and services from different environments (public and private clouds, including local data centers or "edge" locations).
[0053] Multi-region deployment: Multi-region deployment is recommended for applications that are business-critical and require high availability and robustness to prevent regional service outages. If a region becomes unavailable for any reason (even large-scale outages caused by natural disasters), application users will not experience any downtime. Traffic will be routed to applications in other available zones.
[0054] Proxy Protocol: It is a communication protocol used to transmit the client's original network connection information between the proxy server and the backend server. Usually, when the proxy server forwards the client request to the backend server, it will rewrite the request header and replace the client's source IP address and port information with the proxy server's own information. In this way, the backend server cannot obtain the client's real network connection information.
[0055] When using Proxy Protocol, the proxy server encapsulates the client's original network connection information in the request header when forwarding the request and sends it to the backend server. By parsing the Proxy Protocol header, the backend server can obtain the client's real network connection information, including the source IP address, source port, and transmission protocol. By using ProxyProtocol, the backend server can accurately obtain the client's original network connection information, thereby performing more accurate logging, access control, traffic monitoring, and other operations.
[0056] The proxy protocol v2 (binary version) supports custom extensions using TLV vectors (Type-Length-Value).
[0057] Sidecar: A lightweight network proxy that is deployed with the application to intercept all incoming and outgoing network requests and implement various network strategies, such as service discovery and load balancing, traffic splitting, fault injection, circuit breakers, and phased release.
[0058] Public NAT (Network Address Translation) Gateway: It is a network address translation gateway that converts and hides cloud service addresses to prevent direct address exposure, achieve secure access to the Internet, and improve network security. Public NAT Gateway also has features such as automatic elasticity, high performance, high availability, and flexible billing, which can help you better manage public network access traffic.
[0059] TLS (Transport Layer Security): A secure communication protocol that supports encryption and authentication.
[0060] Forward Proxy (Transport Layer Security): A proxy server that sits between the client and the server and sends requests to other servers on behalf of the client. It is commonly used when a client cannot directly access certain resources, but can access them through a forward proxy. The forward proxy server forwards the client's request to the target server and returns the response to the client.
[0061] QoS (Quality of Service): A network traffic congestion management mechanism that aims to ensure that various communication flows in the network can obtain appropriate data transmission priorities. For example, different priorities are defined for different services through QoS policies to ensure that high-priority services can obtain the required bandwidth first, thereby achieving smooth operation of the services.
[0062] To solve the problems of the prior art, the present application provides a method for private network communication interconnection based on a proxy protocol, which supports secure, transparent, and QoS-managed communication solutions between different private networks.
[0063] Please refer to Figure 1 and Figure 2 , Figure 1 is a flowchart of an embodiment of a private network communication method provided by the present application. Figure 2 It is a schematic diagram of the framework of the private network communication system provided by this application.
[0064] The private network communication method of the present application is applied to Figure 2 The private network communication system shown, Figure 2 The communication target of the private network communication system shown is: application A in private network Net-A accesses application B in private network Net-B.
[0065] The entire private network communication system consists of: client application A, traffic interception sidecar S, public network NAT gateway G, forward proxy gateway C, and server application B. Client application A, traffic interception sidecar S, and public network NAT gateway G are in private network Net-A; forward proxy gateway C and server application B are in private network Net-B. Among them, the public network NAT gateway can access the forward proxy gateway C through the public network; the traffic interception sidecar needs to be deployed on each server in private network Net-A; only one public network NAT gateway G and forward proxy gateway C are required.
[0066] like Figure 1 As shown, the specific steps are as follows:
[0067] Step S11: the first application in the first private network sends a first request message to the traffic interception sidecar, wherein the first request message is written into the communication service message.
[0068] In the embodiments of this application, please refer to Figure 3 and Figure 4 , Figure 3 This is a private network communication signaling diagram provided by this application. Figure 4 This is the private network communication flow chart provided by this application. Figure 4In the flowchart shown, application A (first application) in private network Net-A (first private network) sends a request to application B (second application) in private network Net-B (second private network), which is specifically a request message. Application A and application B belong to different private networks and cannot communicate directly, so they need to communicate through Figure 2 The various components in the private network communication system shown forward request messages.
[0069] Specifically, application A needs to first send the first request message to the traffic interception sidecar S. Figure 3 As shown, the first request message and subsequent request messages are composed of a connection layer (IP layer) and a transport layer (TCP (Transmission Control Protocol, Transmission Control Protocol), UDP (User Datagram Protocol, User Datagram Protocol) layer). Specifically, the connection layer in the first request message writes the first private network socket and the second private network socket. Among them, the first private network socket includes: a.inner_ip (the ip of private network Net-A) and a.inner_port (the port of private network Net-A); the second private network socket includes: b.inner_ip (the ip of private network Net-B) and b.inner_port (the port of private network Net-B).
[0070] Step S12: The traffic interception sidecar adds a proxy protocol header to the transport layer of the first request message, writes the second private network socket into the proxy protocol header, and generates a second request message.
[0071] In the embodiment of the present application, the traffic interception sidecar intercepts the first request message and modifies the content in the first request message, and the modified content includes but is not limited to:
[0072] The traffic interception sidecar adds a proxy protocol header to the first request message, and writes the second private network socket into the proxy protocol header. Specifically, the traffic interception sidecar writes the second private network socket into the type-length-value vector TLV of the proxy protocol header to generate the second request message. Furthermore, the traffic interception sidecar can also write the connection unique ID and the connection QoS information into the proxy protocol header.
[0073] The traffic interception sidecar modifies the first private network socket in the connection layer of the first request message or the generated second request message to the traffic interception sidecar network socket, and modifies the second private network socket in the connection layer of the first request message or the second request message to the forward proxy gateway network socket.
[0074] Specifically, the traffic interception sidecar modifies a.inner_ip (the ip of private network Net-A) and a.inner_port (the port of private network Net-A) in the first request message to s.inner_ip (the ip of traffic interception sidecar S) and s.inner_port (the port of traffic interception sidecar S). The traffic interception sidecar modifies b.inner_ip (the ip of private network Net-B) and b.inner_port (the port of private network Net-B) in the first request message to c.public_ip (the public ip of forward proxy gateway C) and c.public_port (the public port of forward proxy gateway C).
[0075] This application can easily expand services by using the proxy protocol and its TLV extension: such as writing the unique ID (unique_id) of the connection for location tracking, writing QoS for flow control, etc.
[0076] The traffic interception sidecar can also encrypt the traffic of the first request message or the service message in the transport layer of the generated second request message to obtain the following: Figure 3 The encrypted service message shown, the authentication information used for encryption also needs to be added to the transport layer. Among them, the encryption and authentication of the present application can use a variety of algorithms such as: using the encryption and two-way authentication function of the TLS (Transport Layer Security, Transport Layer Security Protocol) protocol.
[0077] Step S13: The traffic interception sidecar forwards the second request message to the public network gateway in the first private network.
[0078] In the embodiments of the present application, Figure 4 As shown, the traffic interception sidecar S forwards the second request message to the public network NAT gateway G in the first private network Net-A.
[0079] Step S14: the public network gateway updates the second request message into a third request message according to the public network gateway network socket, and sends the third request message to the forward proxy gateway in the second private network.
[0080] In the embodiments of the present application, Figure 3 As shown, the public NAT gateway G modifies the s.inner_port (the IP of the traffic interception sidecar S) and s.inner_port (the port of the traffic interception sidecar S) in the connection layer of the second request message to its own g.public_port (the public IP of the public NAT gateway G) and g.public_port (the public port of the public NAT gateway G), and generates a third request message.
[0081] Step S15: the forward proxy gateway obtains the second private network socket from the proxy protocol header in the third request message and writes it into the connection layer to generate a fourth request message.
[0082] In an embodiment of the present application, the forward proxy gateway C parses b.inner_ip (the ip of private network Net-B) and b.inner_port (the port of private network Net-B) from the TLV of the proxy protocol header in the third request message, and modifies the g.public_port (the public ip of public network NAT gateway G) and g.public_port (the public port of public network NAT gateway G) in the connection layer of the third request message to its own c.inner_port (the intranet ip of forward proxy gateway C) and c.inner_port (the intranet port of forward proxy gateway C), and modifies the c.public_ip (the public ip of forward proxy gateway C) and c.public_port (the public port of forward proxy gateway C) in the connection layer of the third request message to b.inner_ip (the ip of private network Net-B) and b.inner_port (the port of private network Net-B), thereby generating a fourth request message.
[0083] Furthermore, since network traffic congestion management information is also written into the proxy protocol header, it can be used for traffic control.
[0084] Please refer to Figure 5 , Figure 5 It is a flowchart of another embodiment of the private network communication method provided by the present application.
[0085] like Figure 5 As shown, the specific steps are as follows:
[0086] Step S21: the forward proxy gateway parses the network traffic congestion management information from the proxy protocol header in the transport layer of the fourth request message.
[0087] In the embodiment of the present application, the forward proxy gateway C parses the QoS information from the proxy protocol header in the transport layer of the fourth request message.
[0088] Step S22: The forward proxy gateway performs network traffic control according to the network traffic congestion management information.
[0089] In an embodiment of the present application, the forward proxy gateway C performs network traffic control according to QoS information.
[0090] Furthermore, the forward proxy gateway C parses the authentication information from the transport layer of the fourth request message, and uses the authentication information to decrypt the encrypted service message to obtain the original service message.
[0091] This application achieves secure communication between private networks by using traffic interception sidecar encryption and adding authentication information, and forward proxy gateway decryption and authentication.
[0092] Step S16: the forward proxy gateway sends the fourth request message to the second application in the second private network, and the second application parses the transport layer in the fourth request message to obtain the service message.
[0093] In the embodiment of the present application, the forward proxy gateway C removes the proxy protocol header and authentication information of the fourth request message, and then transmits the remaining request message content to application B. Finally, application B parses the decrypted service message from the remaining request message content, thereby completing the communication from application A to application B.
[0094] In the present application, the first application in the first private network sends a first request message to the traffic interception sidecar, wherein the first request message is written into the communication service message; the traffic interception sidecar adds a proxy protocol header at the transport layer of the first request message, writes the second private network network socket into the proxy protocol header, and generates a second request message; the traffic interception sidecar forwards the second request message to the public network gateway in the first private network; the public network gateway updates the second request message to the third request message according to the public network gateway network socket, and sends the third request message to the forward proxy gateway in the second private network; the forward proxy gateway obtains the second private network network socket from the proxy protocol header in the third request message and writes it into the connection layer, generating a fourth request message; the forward proxy gateway sends the fourth request message to the second application in the second private network, and the second application parses the service message from the transport layer in the fourth request message. Through the above-mentioned private network communication method, transparent proxy of private network communication and non-invasive communication between private networks are realized.
[0095] Those skilled in the art will appreciate that, in the above method of specific implementation, the order in which the steps are written does not imply a strict execution order and does not constitute any limitation on the implementation process. The specific execution order of the steps should be determined by their functions and possible internal logic.
[0096] In order to implement the above private network communication method, this application also proposes a private network communication system. For details, please refer to Figure 6 , Figure 6 It is a schematic diagram of the framework of an embodiment of a private network communication system provided by the present application.
[0097] The private network communication system 400 of this embodiment includes: a first application 41 in a first private network, a traffic interception sidecar 42, a public network gateway 43, and a forward proxy gateway 44.
[0098] Among them, the first application 41 in the first private network is used to send a first request message to the traffic interception sidecar, wherein the first request message is written into the communication service message.
[0099] The traffic interception sidecar 42 is used to add a proxy protocol header at the transport layer of the first request message, write the second private network socket into the proxy protocol header, and generate a second request message.
[0100] The traffic interception sidecar 42 is used to forward the second request message to the public network gateway in the first private network.
[0101] The public network gateway 43 is used to update the second request message to a third request message according to the public network gateway network socket, and send the third request message to the forward proxy gateway in the second private network.
[0102] The forward proxy gateway 44 is used to obtain the second private network socket from the proxy protocol header in the third request message and write it into the connection layer to generate a fourth request message.
[0103] The forward proxy gateway 44 is used to send the fourth request message to the second application in the second private network, and the second application parses the transport layer in the fourth request message to obtain the service message.
[0104] This application also provides a computer storage medium, please continue to refer to Figure 7 , Figure 7 It is a structural diagram of an embodiment of a computer storage medium provided in the present application. The computer storage medium 600 stores a computer program 61. When the computer program 61 is executed by a processor, it is used to implement the private network communication method of the above embodiment.
[0105] When the embodiments of the present application are implemented in the form of software functional units and sold or used as independent products, they can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present application is essentially or the part that contributes to the prior art or all or part of the technical solution can be embodied in the form of a software product, and the computer software product is stored in a storage medium, including several instructions to enable a computer device (which can be a personal computer, a server, or a network device, etc.) or a processor to perform all or part of the steps of the method described in each embodiment of the present application. The aforementioned storage medium includes: various media that can store program codes, such as a USB flash drive, a mobile hard disk, a read-only memory (ROM), a random access memory (RAM), a disk or an optical disk.
[0106] The above description is only an implementation method of the present application, and does not limit the patent scope of the present application. Any equivalent structure or equivalent process transformation made using the contents of the present application specification and drawings, or directly or indirectly used in other related technical fields, are also included in the patent protection scope of the present application.
Claims
1. A private network communication method, characterized in that: The private network communication method comprises: The first application in the first private network sends a first request message to the traffic interception sidecar, wherein the first request message is written into the communication service message; The traffic interception sidecar adds a proxy protocol header at the transport layer of the first request message, writes a second private network socket into the proxy protocol header, and generates a second request message; The traffic interception sidecar forwards the second request message to the public network gateway in the first private network; The public network gateway updates the second request message to a third request message according to the public network gateway network socket, and sends the third request message to the forward proxy gateway in the second private network; The forward proxy gateway obtains the second private network socket from the proxy protocol header in the third request message and writes it into the connection layer to generate a fourth request message; The forward proxy gateway sends the fourth request message to the second application in the second private network, and the second application parses the service message from the transport layer in the fourth request message.
2. The private network communication method according to claim 1, characterized in that: Writing the second private network socket into the proxy protocol header to generate a second request message includes: The traffic interception sidecar writes the second private network socket into the type-length-value vector of the proxy protocol header to generate the second request message.
3. The private network communication method according to claim 2, characterized in that: The proxy protocol header also writes network traffic congestion management information; The private network communication method further includes: The forward proxy gateway parses the network traffic congestion management information from the proxy protocol header in the transport layer of the fourth request message; The forward proxy gateway performs network traffic control according to the network traffic congestion management information.
4. The private network communication method according to claim 1, characterized in that: The private network communication method further includes: The traffic interception sidecar encrypts the service message in the transport layer of the second request message, and writes the corresponding authentication information into the second request message; The private network communication method further includes: The forward proxy gateway parses the authentication information from the third request message or the fourth request message, and decrypts the service message according to the authentication information.
5. The private network communication method according to claim 1, characterized in that: The first private network socket and the second private network socket are written into the first request message.
6. The private network communication method according to claim 5, characterized in that: The private network communication method further includes: The traffic interception sidecar modifies the first private network socket in the connection layer of the first request message or the second request message into a traffic interception sidecar network socket, and modifies the second private network socket in the connection layer of the first request message or the second request message into a forward proxy gateway network socket.
7. The private network communication method according to claim 6, characterized in that: The public network gateway updates the second request message to a third request message according to the public network gateway network socket, including: The public network gateway modifies the traffic interception sidecar network socket in the second request message connection layer to the public network gateway network socket to generate the third request message.
8. The private network communication method according to claim 7, characterized in that: The forward proxy gateway obtains the second private network socket from the proxy protocol header in the third request message and writes it into the connection layer to generate a fourth request message, including: The forward proxy gateway obtains the second private network socket from the proxy protocol header in the third request message; The forward proxy gateway modifies the public network gateway network socket in the connection layer of the third request message to the second private network socket to generate the fourth request message.
9. A private network communication system, characterized in that: The private network communication system comprises: A first application in a first private network is used to send a first request message to a traffic interception sidecar, wherein the first request message is written into a communication service message; The traffic interception sidecar is used to add a proxy protocol header at the transport layer of the first request message, write a second private network socket into the proxy protocol header, and generate a second request message; The traffic interception sidecar is used to forward the second request message to the public network gateway in the first private network; The public network gateway is used to update the second request message to a third request message according to the public network gateway network socket, and send the third request message to the forward proxy gateway in the second private network; The forward proxy gateway is used to obtain the second private network socket from the proxy protocol header in the third request message and write it into the connection layer to generate a fourth request message; The forward proxy gateway is used to send the fourth request message to the second application in the second private network, and the second application parses the service message from the transport layer in the fourth request message.
10. A computer storage medium, characterized in that: The computer storage medium is used to store program data, and when the program data is executed by a computer, it is used to implement the private network communication method according to any one of claims 1 to 8.