Cloud application domain name resolution method and device, computer equipment and storage medium

Abstract

The invention discloses a cloud application domain name resolution method and device, computer equipment and a storage medium. The method belongs to the technical field of cloud services, and can specifically comprise the following steps: in response to a first domain name resolution request initiated by a target user, determining a virtual identity identifier of the target user; wherein the first domain name resolution request carries a cloud application domain name of the target cloud application; generating a second domain name resolution request according to the virtual identity identifier and the cloud application domain name; sending a second domain name resolution request to the DNS server, and receiving a domain name resolution result fed back by the DNS server based on the second domain name resolution request; and sending the domain name resolution result to the target user. According to the method, the computing burden of the DNS server is shared based on the cloud gateway, the cloud gateway determines the virtual identity of the target user when receiving the first domain name resolution request initiated by the target user, the actual identity of the user does not need to be considered, and the domain name resolution efficiency is improved.

Description

Technical Field

[0001] The present application relates to the field of cloud service technology, and in particular to a cloud application domain name resolution method, apparatus, computer equipment and storage medium. Background Art

[0002] As cloud-network integration continues to deepen, users are migrating more and more applications from local to cloud, and the management and operation of cloud applications have become the key to user experience. Different from the needs of large enterprises, small businesses and individual users need more diversified, personalized, and flexibly deployed cloud applications, which puts higher requirements on the address planning and domain name resolution of cloud applications: when the number of users and types of cloud applications are small, a larger address space can be reserved for each user, and a specific address segment can be specified for each cloud application instance.

[0003] However, with the rapid increase in the number of users and types of cloud applications, if the traditional method is still used, that is, each cloud application reserves a corresponding address space for each user, it will not only greatly increase the difficulty of address resolution of the DNS server and squeeze the server resources of the DNS server, but also seriously increase the computing burden of the DNS server, affecting the efficiency of cloud application domain name resolution. Summary of the invention

[0004] Based on this, it is necessary to provide a cloud application domain name resolution method, device, computer equipment and storage medium that effectively improve the efficiency of cloud application domain name resolution in response to the above technical problems.

[0005] In a first aspect, the present application provides a cloud application domain name resolution method, which is applied to a cloud gateway, and the method includes:

[0006] In response to a first domain name resolution request initiated by a target user, determining a virtual identity identifier of the target user; wherein the first domain name resolution request carries a cloud application domain name of a target cloud application;

[0007] Generate a second domain name resolution request according to the virtual identity and the cloud application domain name;

[0008] Sending a second domain name resolution request to the DNS server, and receiving a domain name resolution result fed back by the DNS server based on the second domain name resolution request;

[0009] Send the domain name resolution result to the target user.

[0010] In one embodiment, in response to a first domain name resolution request initiated by a target user, determining a virtual identity of the target user includes:

[0011] In response to a first domain name resolution request initiated by a target user, determining an actual identity identifier of the target user;

[0012] Determine the virtual identity of the target user based on the actual identity.

[0013] In one of the embodiments, the domain name resolution result includes an instance IP address of the target cloud application.

[0014] In one embodiment, before determining the virtual identity of the target user in response to the first domain name resolution request initiated by the target user, the method further includes:

[0015] Receiving cloud application subscription information sent by a cloud application subscription platform; wherein the cloud application subscription information includes a cloud application domain name of a target cloud application, and a virtual identity identifier and an actual identity identifier of a target user;

[0016] The cloud application domain name, virtual identity and actual identity are stored in association.

[0017] In one of the embodiments, the cloud application subscription information is sent to the cloud gateway by the cloud application subscription platform after receiving the cloud application subscription request initiated by the target user;

[0018] After associating and storing the cloud application domain name, the virtual identity identifier, and the actual identity identifier, the method further includes:

[0019] A configuration success response message is sent to the cloud application subscription platform, so that the cloud application subscription platform sends a cloud application subscription success response message to the target user based on the configuration success response message.

[0020] In one of the embodiments, the cloud application subscription request carries the actual identity of the target user and the cloud application domain name of the target cloud application; the cloud application subscription request is used to instruct the cloud application subscription platform to obtain the virtual identity of the target user based on the actual identity of the target user.

[0021] In one of the embodiments, the cloud application subscription request is specifically used to instruct the cloud application subscription platform to query the virtual identity of the target user locally based on the actual identity of the target user, and if the query fails, generate the virtual identity of the target user based on the actual identity and IP address generation algorithm.

[0022] In one of the embodiments, the cloud application subscription request is also used to instruct the cloud application subscription platform to obtain the instance IP address of the cloud application instance corresponding to the target cloud application from the cloud application management platform, and to feedback the virtual identity of the target user, as well as the cloud application domain name and instance IP address of the target cloud application to the DNS server.

[0023] In one of the embodiments, when there are multiple target users, at least two target users among different target users have the same virtual identity.

[0024] In a second aspect, the present application provides a cloud application domain name resolution device, which is configured in a cloud gateway, and the device includes:

[0025] A determination module, configured to determine the virtual identity of the target user in response to a first domain name resolution request initiated by the target user; wherein the first domain name resolution request carries a cloud application domain name of the target cloud application;

[0026] A generating module, used to generate a second domain name resolution request according to the virtual identity identifier and the cloud application domain name;

[0027] A first sending module is used to send a second domain name resolution request to the DNS server, and receive a domain name resolution result fed back by the DNS server based on the second domain name resolution request;

[0028] The second sending module is used to send the domain name resolution result to the target user.

[0029] In a third aspect, the present application further provides a computer device, the computer device comprising a memory and a processor, the memory storing a computer program, and the processor implementing the following steps when executing the computer program:

[0030] In response to a first domain name resolution request initiated by a target user, determining a virtual identity identifier of the target user; wherein the first domain name resolution request carries a cloud application domain name of a target cloud application;

[0031] Generate a second domain name resolution request according to the virtual identity and the cloud application domain name;

[0032] Sending a second domain name resolution request to the DNS server, and receiving a domain name resolution result fed back by the DNS server based on the second domain name resolution request;

[0033] Send the domain name resolution result to the target user.

[0034] In a fourth aspect, the present application further provides a computer-readable storage medium, on which a computer program is stored, and when the computer program is executed by a processor, the following steps are implemented:

[0035] In response to a first domain name resolution request initiated by a target user, determining a virtual identity identifier of the target user; wherein the first domain name resolution request carries a cloud application domain name of a target cloud application;

[0036] Generate a second domain name resolution request according to the virtual identity and the cloud application domain name;

[0037] Sending a second domain name resolution request to the DNS server, and receiving a domain name resolution result fed back by the DNS server based on the second domain name resolution request;

[0038] Send the domain name resolution result to the target user.

[0039] In a fifth aspect, the present application further provides a computer program product, the computer program product comprising a computer program, and when the computer program is executed by a processor, the following steps are implemented:

[0040] In response to a first domain name resolution request initiated by a target user, determining a virtual identity identifier of the target user; wherein the first domain name resolution request carries a cloud application domain name of a target cloud application;

[0041] Generate a second domain name resolution request according to the virtual identity and the cloud application domain name;

[0042] Sending a second domain name resolution request to the DNS server, and receiving a domain name resolution result fed back by the DNS server based on the second domain name resolution request;

[0043] Send the domain name resolution result to the target user.

[0044] The above-mentioned cloud application domain name resolution method, device, computer equipment and storage medium determine the virtual identity of the target user in response to the first domain name resolution request initiated by the target user; wherein the first domain name resolution request carries the cloud application domain name of the target cloud application; generates a second domain name resolution request based on the virtual identity and the cloud application domain name; sends the second domain name resolution request to the domain name system DNS server, and receives the domain name resolution result fed back by the DNS server based on the second domain name resolution request; sends the domain name resolution result to the target user. This application shares the computing burden of the DNS server based on the cloud gateway. The cloud gateway determines the virtual identity of the target user after receiving the first domain name resolution request initiated by the target user. Generate a second domain name resolution request based on the virtual identity and the cloud application domain name. A second domain name resolution request is sent to the domain name system DNS server, and a domain name resolution result based on the second domain name resolution request is received from the DNS server. The DNS server only needs to perform domain name resolution according to the virtual identity and the cloud application domain name to obtain the domain name resolution result. There is no need to consider the user's actual identity for address planning. This not only reduces the difficulty of address resolution of the DNS server, but also increases the flexibility of domain name resolution and improves the efficiency of domain name resolution. In the domain name resolution process of the present application, a conversion process of domain name resolution request is added, that is, the second domain name resolution request is generated through the first domain name resolution request, which further improves the security during domain name resolution. BRIEF DESCRIPTION OF THE DRAWINGS

[0045] Figure 1 An application environment diagram of a cloud application domain name resolution method provided in this embodiment;

[0046] Figure 2A flowchart of the first cloud application domain name resolution method provided in this embodiment;

[0047] Figure 3 A schematic diagram of a process for determining a virtual identity of a target user provided in this embodiment;

[0048] Figure 4 A schematic diagram of the process of storing a virtual identity in a cloud gateway provided in this embodiment;

[0049] Figure 5 A schematic diagram of the cloud application subscription process provided in this embodiment;

[0050] Figure 6 An example diagram of the first domain name resolution method provided in this embodiment;

[0051] Figure 7 An example diagram of the second domain name resolution method provided in this embodiment;

[0052] Figure 8 A signaling interaction diagram of a method for resolving domain names in a cloud application provided in this embodiment;

[0053] Fig. 9 A structural block diagram of a cloud application domain name resolution device provided in this embodiment;

[0054] Fig.10 This is a diagram of the internal structure of the computer device provided in this embodiment. DETAILED DESCRIPTION

[0055] In order to make the purpose, technical solution and advantages of the present application more clearly understood, the present application is further described in detail below in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are only used to explain the present application and are not used to limit the present application.

[0056] The cloud application domain name resolution method provided in the embodiment of the present application can be applied to Figure 1 In the application environment shown. The cloud gateway determines the virtual identity of the target user in response to the first domain name resolution request initiated by the target user through the user terminal. The cloud gateway generates a second domain name resolution request based on the virtual identity and the cloud application domain name; sends the second domain name resolution request to the DNS server, and receives the domain name resolution result fed back by the DNS server based on the second domain name resolution request. The cloud gateway sends the domain name resolution result to the terminal device of the target user. The first domain name resolution request carries the cloud application domain name of the target cloud application.

[0057] The cloud gateway refers to a gateway with cloud routing function, and may also be a physical gateway with routing function.

[0058] DNS servers refer to cloud DNS servers, which are servers that provide Domain Name System (DNS) services based on cloud computing technology. DNS is a key service on the Internet that converts easy-to-remember domain names (such as www.example.com) into instance IP addresses (such as 192.0.2.1) that computers can understand.

[0059] In one embodiment, Figure 2 A flowchart of a cloud application domain name resolution method provided in accordance with an embodiment of the present application is shown in FIG. Figure 1 Taking the cloud gateway in the example as an example, the method includes the following steps:

[0060] S201, in response to a first domain name resolution request initiated by a target user, determining a virtual identity identifier of the target user.

[0061] Among them, the first domain name resolution request refers to the domain name resolution request initiated by the target user through the user terminal. In this application, the first domain name resolution request is an ordinary DNS domain name resolution request; the first domain name resolution request carries the cloud application domain name of the target cloud application. The virtual identity identifier refers to the identifier of the false identity of the target user. The target user refers to the user who requests domain name resolution. The cloud application domain name refers to the Internet domain name assigned to the application or service on the cloud service; this domain name is used to identify and access specific applications or services located on the cloud platform; when accessing the corresponding cloud application, the cloud application domain name needs to be resolved to obtain the corresponding instance IP address before accessing the target cloud application. The target cloud application refers to the specific application that the target user requests to access, such as cloud office, cloud storage, or cloud hosting applications.

[0062] As an optional implementation of the embodiment of the present application, in response to the first domain name resolution request initiated by the target user, the virtual identity of the target user is queried locally, wherein the virtual identity of the target user is stored locally.

[0063] As another optional implementation of the embodiment of the present application, in response to the first domain name resolution request initiated by the target user, an identity query request is initiated to the external platform, so that the external platform feeds back the virtual identity of the target user based on the identity query request. The external platform stores the virtual identity of the target user. The external platform can be a cloud application subscription platform. The cloud application subscription platform refers to a user-oriented service platform for users to subscribe to cloud applications, which can be based on a server as a carrier.

[0064] S202: Generate a second domain name resolution request according to the virtual identity identifier and the cloud application domain name.

[0065] The second domain name resolution request is a domain name resolution request generated by the cloud gateway based on the first domain name resolution request. The second domain name resolution request of the present application is an ECS (EDNS Client Subnet, EDNS client subnet extension) request.

[0066] Optionally, in this embodiment, the virtual identity and the cloud application domain name are added to the request message template to obtain the second domain name resolution request. The request message template may be an ECS request message template.

[0067] S203: Send a second domain name resolution request to the DNS server, and receive a domain name resolution result fed back by the DNS server based on the second domain name resolution request.

[0068] Among them, the domain name resolution result refers to the result obtained by the DNS server based on the second domain name resolution request, combined with the virtual identity identifier and the cloud application domain name; the domain name resolution result in this application includes the instance IP address of the cloud application instance corresponding to the target cloud application.

[0069] As an optional implementation of the embodiment of the present application, a second domain name resolution request is sent to a DNS server. After the DNS server receives the second domain name resolution request, it locally queries the instance IP address associated with the virtual identity and the cloud application domain name, generates a domain name resolution result based on the instance IP address, and sends the domain name resolution result to the cloud gateway. The cloud gateway receives the domain name resolution result fed back by the DNS server based on the second domain name resolution request. Among them, the association relationship between each candidate virtual identity, each candidate cloud application domain name, and the instance IP address corresponding to each candidate cloud application is stored locally, so the associated instance IP address can be determined based on the virtual identity and the cloud application domain name in the second domain name resolution request.

[0070] As another optional implementation of the embodiment of the present application, a second domain name resolution request is sent to a DNS server. After receiving the second domain name resolution request, the DNS server queries the external device for the instance IP address associated with the virtual identity identifier and the cloud application domain name, generates a domain name resolution result based on the instance IP address fed back by the external device, and sends the domain name resolution result to the cloud gateway. The cloud gateway receives the domain name resolution result fed back by the DNS server based on the second domain name resolution request. Among them, the external device stores the association relationship between each candidate virtual identity identifier, each candidate cloud application domain name, and the instance IP address corresponding to each candidate cloud application. Therefore, the external device can determine the associated instance IP address based on the virtual identity identifier and the cloud application domain name in the second domain name resolution request. The external device can be a cloud application ordering platform.

[0071] S204: Send the domain name resolution result to the target user.

[0072] Optionally, in this embodiment, the domain name resolution result is sent directly or indirectly to the user terminal of the target user.

[0073] The above-mentioned cloud application domain name resolution method determines the virtual identity of the target user in response to the first domain name resolution request initiated by the target user; wherein the first domain name resolution request carries the cloud application domain name of the target cloud application; generates a second domain name resolution request based on the virtual identity and the cloud application domain name; sends the second domain name resolution request to the domain name system DNS server, and receives the domain name resolution result fed back by the DNS server based on the second domain name resolution request; and sends the domain name resolution result to the target user. This application shares the computing burden of the DNS server based on the cloud gateway. The cloud gateway determines the virtual identity of the target user after receiving the first domain name resolution request initiated by the target user. Generate a second domain name resolution request based on the virtual identity and the cloud application domain name. A second domain name resolution request is sent to the domain name system DNS server, and a domain name resolution result based on the second domain name resolution request is received from the DNS server. The DNS server only needs to perform domain name resolution according to the virtual identity and the cloud application domain name to obtain the domain name resolution result. There is no need to consider the user's actual identity for address planning. This not only reduces the difficulty of address resolution of the DNS server, but also increases the flexibility of domain name resolution and improves the efficiency of domain name resolution. In the domain name resolution process of the present application, a conversion process of domain name resolution request is added, that is, the second domain name resolution request is generated through the first domain name resolution request, which further improves the security during domain name resolution.

[0074] In one embodiment, in order to determine the false identity of the target user, such as Figure 3 As shown, an optional implementation of S201 includes:

[0075] S301, in response to a first domain name resolution request initiated by a target user, determining an actual identity identifier of the target user.

[0076] The actual identity identifier refers to a unique identifier used to characterize the actual identity of the target user. The actual identity identifier can be a user account, device number, IP address, or the target user's identification number (for example, mobile phone number, ID card number), etc.

[0077] As an optional implementation of the embodiment of the present application, in response to the first domain name resolution request initiated by the target user, network transmission information of the first domain name resolution request is obtained. Based on the network transmission information, the actual identity of the target user is determined. The network transmission information includes but is not limited to port number, source address, VLAN / VXLAN and other information.

[0078] Another optional implementation of the embodiment of the present application is to respond to the first domain name resolution request initiated by the target user, resolve the first domain name resolution request to obtain the actual identity of the target user. The first domain name resolution request carries the actual identity of the target user.

[0079] S302: Determine the virtual identity of the target user according to the actual identity.

[0080] As an optional implementation of the embodiment of the present application, according to the actual identity, a virtual identity associated with the actual identity is queried through a local or external device as the virtual identity of the target user. The external device may be, but is not limited to, a cloud application subscription platform.

[0081] As another optional implementation of the embodiment of the present application, according to the actual identity and cloud application domain name, a virtual identity associated with the actual identity and cloud application domain name is queried through a local or external device as the virtual identity of the target user. The external device may be, but is not limited to, a cloud application subscription platform.

[0082] It should be noted that another purpose of the DNS server using a virtual identity to perform domain name resolution in this application is that only the virtual identity and the corresponding instance IP address need to be recorded in the DNS server. Since multiple actual identities may map to the same virtual identity, for example, the actual identities of all employees of the same enterprise can correspond to one virtual identity. Traditionally, the DNS server needs to store the mapping relationship (i.e., the association relationship) between the actual identity of each employee, the cloud application domain name, and the instance IP address. Now, only the mapping relationship between the virtual identity, the cloud application domain name, and the instance IP address needs to be recorded. This effectively reduces the computing resources of the DNS server and improves the efficiency of domain name resolution. In addition, the cloud gateway completes the mapping from the actual identity of the target user to the virtual identity, which also improves the security of domain name resolution.

[0083] In one embodiment, in order to enable the cloud gateway to store a virtual identity, such as Figure 4 , Figure 5 As shown, before responding to a first domain name resolution request initiated by a target user and determining a virtual identity of the target user, an optional implementation of a cloud application domain name resolution method includes:

[0084] S401, receiving cloud application subscription information sent by a cloud application subscription platform.

[0085] The cloud application subscription information includes the cloud application domain name of the target cloud application, and the virtual identity and actual identity of the target user.

[0086] Optionally, in this embodiment, the cloud application subscription information is sent after the cloud application subscription platform receives the cloud application subscription request from the target user.

[0087] Optionally, in this embodiment, the cloud application subscription request carries the actual identity of the target user and the cloud application domain name of the target cloud application. The cloud application subscription request is used to instruct the cloud application subscription platform to obtain the virtual identity of the target user based on the actual identity of the target user.

[0088] Optionally, in this embodiment, the cloud application subscription request is specifically used to instruct the cloud application subscription platform to query the virtual identity of the target user locally based on the actual identity of the target user, and if the query fails, generate a virtual identity of the target user based on the actual identity and IP address generation algorithm.

[0089] Optionally, in this embodiment, the cloud application subscription platform queries the virtual identity of the target user from the local based on the actual identity of the target user. The optional implementation method is to query the virtual identity of the target user from the local based on the actual identity and the service priority corresponding to the actual identity. Among them, the service priority is carried in the cloud application subscription request. It should be noted that multiple actual identity may map the same virtual account, such as an enterprise user. In other words, multiple sub-accounts (i.e., actual identity) of the same account can share a virtual identity; and / or, multiple sub-accounts (i.e., actual identity) of the same account with the same priority can share a virtual identity. When the cloud application subscription platform receives the cloud application subscription request sent by the target user, it can query the virtual identity from the local based on the actual identity of the target user, or it can query the virtual identity of the target user from this time based on the actual identity of the target user and the service priority corresponding to the actual identity. If the virtual identity cannot be queried, it means that the query fails. In this case, the virtual identity of the target user is generated based on the actual identity and the IP address generation algorithm. In this embodiment, an optional implementation method of generating a virtual identity of a target user based on an actual identity and an IP address generation algorithm is as follows: if the virtual identity to be generated is an IPv4 address, a first string is generated based on the actual identity (e.g., the target user's account) in combination with a CRC algorithm. The first string is converted to an IP address to obtain a virtual identity of the target user. Exemplarily, assuming that the target user's account name is yonghua, a hexadecimal string "b3f4b77a" is obtained by using but not limited to a CRC algorithm, and then the string is converted to an IP address to obtain 179.244.183.122. If the virtual identity to be generated is an IPv6 address, a second string is generated based on the actual identity (e.g., the target user's account) using but not limited to an MD5 algorithm. The second string is converted to an IP address to obtain a virtual identity of the target user. Exemplarily, assuming that the target user's account name is yonghub, a second string "21D6BC8BFD6E47FCFA92618AE107B8B3" is obtained by using an MD5 algorithm, and then the string is converted to an IP address.

[0090] S402: associate and store the cloud application domain name, the virtual identity, and the actual identity.

[0091] Optionally, in this embodiment, the cloud application subscription request is also used to instruct the cloud application subscription platform to obtain the instance IP address of the cloud application instance corresponding to the target cloud application from the cloud application management platform, and to feedback the associated storage message to the DNS server, the associated storage message at least including the virtual identity of the target user, and the cloud application domain name and instance IP address of the target cloud application, so that the DNS server associates and stores the virtual identity of the target user, and the cloud application domain name and instance IP address of the target cloud application. In this embodiment, the cloud application subscription platform obtains the instance IP address of the cloud application instance corresponding to the target cloud application from the cloud application management platform. The cloud application management platform controls the cloud management platform to pull up the cloud application instance corresponding to the target cloud application, that is, controls the operation of the cloud application instance, and after pulling up, the operation management platform feedbacks the instance IP address of the cloud application instance corresponding to the target cloud application to the cloud application management platform, and the cloud application management platform feedbacks the instance IP address of the cloud application instance corresponding to the target cloud application to the cloud application subscription platform. After that, the cloud application subscription platform sends cloud application subscription information to the cloud gateway.

[0092] In some embodiments, the target user may also send a cloud application change request (e.g., a cancellation or change request) to the cloud application subscription platform. The cloud application subscription platform controls the cloud application management platform to change the cloud application based on the cloud application change request, and feeds back the change result to the cloud application subscription platform. The cloud application management platform feeds back the cloud application change information to the cloud gateway and the DNS server. Specifically, if the cloud application management change request is a cloud application cancellation request, the cloud application cancellation request includes the cloud application domain name of the target cloud application and the actual identity of the target user. The cloud application subscription platform sends an instance shutdown request to the cloud application management platform. The cloud application management platform controls the cloud management platform to shut down the cloud application instance corresponding to the target cloud application. After the shutdown, the operation management platform feeds back a shutdown response message of the cloud application instance corresponding to the target cloud application to the cloud application management platform, and the cloud application management platform feeds back a shutdown response message of the cloud application instance corresponding to the target cloud application to the cloud application subscription platform. After that, the cloud application subscription platform sends cloud application cancellation information to the cloud gateway. The cloud application cancellation information includes the cloud application domain name, the virtual identity, and the actual identity. Based on the cloud application cancellation message, the cloud gateway cancels the association between the cloud application domain name, the virtual identity and the actual identity, and feeds back the update result to the cloud application subscription platform. After receiving the update result, the cloud application subscription platform feeds back the cloud application cancellation response message to the target user. It should be noted that in this process, the cloud application subscription platform also needs to feed back the cloud application change message to the DNS server. The cloud application change message includes the virtual identity of the target user, the cloud application domain name and the instance IP address of the target cloud application, so that the DNS server can cancel the association between the virtual identity of the target user, and the cloud application domain name and the instance IP address of the target cloud application.

[0093] Optionally, in this embodiment, after the cloud application domain name, the virtual identity identifier and the actual identity identifier are associated and stored, an optional implementation of the domain name resolution method further includes:

[0094] A configuration success response message is sent to the cloud application subscription platform, so that the cloud application subscription platform sends a cloud application subscription success response message to the target user based on the configuration success response message.

[0095] In this embodiment, cloud application subscription information sent by a cloud application subscription platform is received; wherein the cloud application subscription information includes the cloud application domain name of the target cloud application, and the virtual identity and the actual identity of the target user. The cloud application domain name, the virtual identity and the actual identity are associated and stored, so that the cloud gateway can store the associated information between the cloud application domain name, the virtual identity and the actual identity.

[0096] In one embodiment, when there are multiple target users, at least two target users have the same virtual identity. In other words, the actual identities corresponding to the multiple target users may share the same virtual identity.

[0097] like Figure 6 As shown, a business scenario in which this application is applied to cloud broadband government and enterprise customers is given. In this example, user M is a government and enterprise customer with three branches, and user N has two branches. They deploy their office systems on the cloud, and both can use the same cloud application domain name. Different branch accounts of the same enterprise (ie, actual identity identifiers) can be mapped to the same virtual IP address (ie, virtual identity identifier). The DNS server distinguishes different enterprises through virtual IP addresses and gives different resolution results, that is, different instance IP addresses.

[0098] like Figure 7 As shown in the figure, another implementation method for the same business scenario is given. Different branch accounts (i.e., actual identities) of the same enterprise can also be configured with different virtual IP addresses (i.e., virtual identities). Configuring the DNS server to have the same resolution result can also enable different branch accounts to access the same instance IP address.

[0099] In one embodiment, if Figure 8 As shown, an optional implementation of a cloud application domain name resolution method includes:

[0100] S801, the target user sends a cloud application subscription request to the cloud application subscription platform, wherein the cloud application subscription request carries the actual identity of the target user and the cloud application domain name of the target cloud application.

[0101] S802, the cloud application ordering platform obtains a virtual identity identifier of the target user based on the actual identity identifier of the target user.

[0102] S803, the cloud application ordering platform obtains the instance IP address of the cloud application instance corresponding to the target cloud application from the cloud application management platform.

[0103] S804, the cloud application subscription platform sends cloud application subscription information to the cloud gateway, wherein the cloud application subscription information includes the cloud application domain name of the target cloud application, and the virtual identity and actual identity of the target user.

[0104] S805, the cloud application ordering platform feeds back an associated storage message to the DNS server, wherein the associated storage message at least includes the virtual identity of the target user, and the cloud application domain name and instance IP address of the target cloud application.

[0105] S806, the cloud gateway sends a configuration success response message to the cloud application ordering platform.

[0106] S807, the cloud application subscription platform sends a cloud application subscription success response message to the target user based on the configuration success response message.

[0107] S808: The target user sends a first domain name resolution request to the cloud gateway.

[0108] S809: The cloud gateway determines the actual identity of the target user according to the first domain name resolution request.

[0109] S810, the cloud gateway determines the virtual identity of the target user according to the actual identity.

[0110] S811, the cloud gateway generates a second domain name resolution request according to the virtual identity identifier and the cloud application domain name.

[0111] S812: The cloud gateway sends a second domain name resolution request to the DNS server.

[0112] S813: The DNS server feeds back the instance IP address of the target cloud application to the cloud gateway based on the second domain name resolution request.

[0113] S814, the cloud gateway sends the instance IP address of the target cloud application to the target user.

[0114] In this embodiment, in response to a first domain name resolution request initiated by a target user, a virtual identity of the target user is determined; wherein the first domain name resolution request carries the cloud application domain name of the target cloud application; a second domain name resolution request is generated based on the virtual identity and the cloud application domain name; the second domain name resolution request is sent to a domain name system DNS server, and a domain name resolution result fed back by the DNS server based on the second domain name resolution request is received; and the domain name resolution result is sent to the target user. This application shares the computing burden of the DNS server based on the cloud gateway, and the cloud gateway determines the virtual identity of the target user after receiving the first domain name resolution request initiated by the target user. A second domain name resolution request is generated based on the virtual identity and the cloud application domain name. A second domain name resolution request is sent to the domain name system DNS server, and a domain name resolution result based on the second domain name resolution request is received from the DNS server. The DNS server only needs to perform domain name resolution according to the virtual identity and the cloud application domain name to obtain the domain name resolution result. There is no need to consider the user's actual identity for address planning. This not only reduces the difficulty of address resolution of the DNS server, but also increases the flexibility of domain name resolution and improves the efficiency of domain name resolution. In the domain name resolution process of the present application, a conversion process of domain name resolution request is added, that is, the second domain name resolution request is generated through the first domain name resolution request, which further improves the security during domain name resolution.

[0115] It should be understood that, although the steps in the flowcharts involved in the above embodiments are displayed in sequence according to the indication of the arrows, these steps are not necessarily executed in sequence according to the order indicated by the arrows. Unless there is a clear explanation in this article, the execution of these steps is not strictly limited in order, and these steps can be executed in other orders. Moreover, at least a part of the steps in the flowcharts involved in the above embodiments may include multiple steps or multiple stages, and these steps or stages are not necessarily executed at the same time, but can be executed at different times, and the execution order of these steps or stages is not necessarily carried out in sequence, but can be executed in turn or alternately with other steps or at least a part of the steps or stages in other steps.

[0116] Based on the same inventive concept, the embodiment of the present application also provides a cloud application domain name resolution device for implementing the cloud application domain name resolution method involved above. The implementation scheme for solving the problem provided by the device is similar to the implementation scheme recorded in the above method, so the specific limitations in one or more cloud application domain name resolution device embodiments provided below can refer to the limitations of the cloud application domain name resolution method above, and will not be repeated here.

[0117] In one embodiment, by Fig. 9 FIG. 1 shows a structural block diagram of a cloud application domain name resolution device in an embodiment. Fig. 9 As shown, a cloud application domain name resolution device 1 is provided, the device comprising: a determination module 10, a generation module 20, a first sending module 30 and a second sending module 40, wherein:

[0118] The determination module 10 is used to determine the virtual identity of the target user in response to the first domain name resolution request initiated by the target user; wherein the first domain name resolution request carries the cloud application domain name of the target cloud application;

[0119] A generating module 20, configured to generate a second domain name resolution request according to the virtual identity identifier and the cloud application domain name;

[0120] The first sending module 30 is used to send a second domain name resolution request to the DNS server, and receive a domain name resolution result fed back by the DNS server based on the second domain name resolution request;

[0121] The second sending module 40 is used to send the domain name resolution result to the target user.

[0122] In one embodiment, the flower-sprinkling girl Fig. 9 The determining module 10 is further specifically used for:

[0123] In response to a first domain name resolution request initiated by a target user, determining an actual identity identifier of the target user;

[0124] Determine the virtual identity of the target user based on the actual identity.

[0125] In one of the embodiments, the domain name resolution result includes an instance IP address of the target cloud application.

[0126] In one embodiment, before responding to the first domain name resolution request initiated by the target user and determining the virtual identity of the target user, the cloud application domain name resolution device 1 further includes:

[0127] A receiving module, used to receive cloud application subscription information sent by a cloud application subscription platform; wherein the cloud application subscription information includes a cloud application domain name of a target cloud application, and a virtual identity identifier and an actual identity identifier of a target user;

[0128] The storage module is used to associate and store the cloud application domain name, the virtual identity and the actual identity.

[0129] In one of the embodiments, the cloud application subscription information is sent to the cloud gateway by the cloud application subscription platform after receiving the cloud application subscription request initiated by the target user;

[0130] After the cloud application domain name, the virtual identity identifier and the actual identity identifier are associated and stored, the cloud application domain name resolution device 1 further includes:

[0131] The third sending module is used to send a configuration success response message to the cloud application subscription platform, so that the cloud application subscription platform sends a cloud application subscription success response message to the target user based on the configuration success response message.

[0132] In one of the embodiments, the cloud application subscription request carries the actual identity of the target user and the cloud application domain name of the target cloud application; the cloud application subscription request is used to instruct the cloud application subscription platform to obtain the virtual identity of the target user based on the actual identity of the target user.

[0133] In one of the embodiments, the cloud application subscription request is specifically used to instruct the cloud application subscription platform to query the virtual identity of the target user locally based on the actual identity of the target user, and if the query fails, generate the virtual identity of the target user based on the actual identity and IP address generation algorithm.

[0134] In one of the embodiments, the cloud application subscription request is also used to instruct the cloud application subscription platform to obtain the instance IP address of the cloud application instance corresponding to the target cloud application from the cloud application management platform, and to feedback the virtual identity of the target user, as well as the cloud application domain name and instance IP address of the target cloud application to the DNS server.

[0135] In one of the embodiments, when there are multiple target users, at least two target users among different target users have the same virtual identity.

[0136] Each module in the above-mentioned cloud application domain name resolution device can be implemented in whole or in part by software, hardware and their combination. Each of the above-mentioned modules can be embedded in or independent of the processor in the computer device in the form of hardware, or can be stored in the memory in the computer device in the form of software, so that the processor can call and execute the operations corresponding to each of the above modules.

[0137] In one embodiment, a computer device is provided. The computer device may be a platform side, and its internal structure diagram may be as shown in FIG. Fig.10 As shown. The computer device includes a processor, a memory and a network interface connected through a system bus. Among them, the processor of the computer device is used to provide computing and control capabilities. The memory of the computer device includes a non-volatile storage medium and an internal memory. The non-volatile storage medium stores an operating system, a computer program and a database. The internal memory provides an environment for the operation of the operating system and the computer program in the non-volatile storage medium. The database of the computer device is used to store relevant information of cloud application services. The network interface of the computer device is used to communicate with an external user side through a network connection. When the computer program is executed by the processor, a cloud application domain name resolution method is implemented.

[0138] Those skilled in the art will understand that Fig.10 The structure shown in the figure is merely a block diagram of a portion of the structure related to the solution of the present application, and does not constitute a limitation on the computer device to which the solution of the present application is applied. Specifically, the computer device may include more or fewer components than those shown in the figure, or combine certain components, or have a different arrangement of components.

[0139] In one embodiment, a computer device is provided, including a memory and a processor, wherein a computer program is stored in the memory, and when the processor executes the computer program, the following steps are implemented:

[0140] In response to a first domain name resolution request initiated by a target user, determining a virtual identity identifier of the target user; wherein the first domain name resolution request carries a cloud application domain name of a target cloud application;

[0141] Generate a second domain name resolution request according to the virtual identity and the cloud application domain name;

[0142] Sending a second domain name resolution request to the DNS server, and receiving a domain name resolution result fed back by the DNS server based on the second domain name resolution request;

[0143] Send the domain name resolution result to the target user.

[0144] In one embodiment, when the processor executes the computer program, the following steps are further implemented: in response to the first domain name resolution request initiated by the target user, determining the virtual identity of the target user includes:

[0145] In response to a first domain name resolution request initiated by a target user, determining an actual identity identifier of the target user;

[0146] Determine the virtual identity of the target user based on the actual identity.

[0147] In one embodiment, when the processor executes the computer program, the following steps are also implemented: the domain name resolution result includes the instance IP address of the target cloud application.

[0148] In one embodiment, when the processor executes the computer program, the following steps are further implemented: before determining the virtual identity of the target user in response to the first domain name resolution request initiated by the target user, the method further includes:

[0149] Receiving cloud application subscription information sent by a cloud application subscription platform; wherein the cloud application subscription information includes a cloud application domain name of a target cloud application, and a virtual identity identifier and an actual identity identifier of a target user;

[0150] The cloud application domain name, virtual identity and actual identity are stored in association.

[0151] In one embodiment, when the processor executes the computer program, the following steps are further implemented: the cloud application subscription information is sent to the cloud gateway by the cloud application subscription platform after receiving the cloud application subscription request initiated by the target user;

[0152] After associating and storing the cloud application domain name, the virtual identity identifier, and the actual identity identifier, the method further includes:

[0153] A configuration success response message is sent to the cloud application subscription platform, so that the cloud application subscription platform sends a cloud application subscription success response message to the target user based on the configuration success response message.

[0154] In one embodiment, when the processor executes the computer program, the following steps are also implemented: the cloud application subscription request carries the actual identity of the target user and the cloud application domain name of the target cloud application; the cloud application subscription request is used to instruct the cloud application subscription platform to obtain the virtual identity of the target user based on the actual identity of the target user.

[0155] In one embodiment, when the processor executes the computer program, the following steps are also implemented: the cloud application subscription request is specifically used to instruct the cloud application subscription platform to query the virtual identity of the target user locally based on the actual identity of the target user, and if the query fails, generate an algorithm based on the actual identity and IP address to generate a virtual identity of the target user.

[0156] In one embodiment, when the processor executes the computer program, the following steps are also implemented: the cloud application subscription request is also used to instruct the cloud application subscription platform to obtain the instance IP address of the cloud application instance corresponding to the target cloud application from the cloud application management platform, and to feedback the virtual identity of the target user, as well as the cloud application domain name and instance IP address of the target cloud application to the DNS server.

[0157] In one embodiment, when the processor executes the computer program, the following steps are further implemented: when there are multiple target users, at least two target users among different target users have the same virtual identity identifier.

[0158] In one embodiment, a computer readable storage medium is provided, on which a computer program is stored, and when the computer program is executed by a processor, the following steps are implemented:

[0159] In response to a first domain name resolution request initiated by a target user, determining a virtual identity identifier of the target user; wherein the first domain name resolution request carries a cloud application domain name of a target cloud application;

[0160] Generate a second domain name resolution request according to the virtual identity and the cloud application domain name;

[0161] Sending a second domain name resolution request to the DNS server, and receiving a domain name resolution result fed back by the DNS server based on the second domain name resolution request;

[0162] Send the domain name resolution result to the target user.

[0163] In one embodiment, when the computer program is executed by the processor, the following steps are further implemented: in response to a first domain name resolution request initiated by the target user, determining the virtual identity of the target user includes:

[0164] In response to a first domain name resolution request initiated by a target user, determining an actual identity identifier of the target user;

[0165] Determine the virtual identity of the target user based on the actual identity.

[0166] In one embodiment, when the computer program is executed by the processor, the following steps are also implemented: the domain name resolution result includes the instance IP address of the target cloud application.

[0167] In one embodiment, when the computer program is executed by the processor, the following steps are further implemented: before determining the virtual identity of the target user in response to the first domain name resolution request initiated by the target user, the method further includes:

[0168] Receiving cloud application subscription information sent by a cloud application subscription platform; wherein the cloud application subscription information includes a cloud application domain name of a target cloud application, and a virtual identity identifier and an actual identity identifier of a target user;

[0169] The cloud application domain name, virtual identity and actual identity are stored in association.

[0170] In one embodiment, the computer program further implements the following steps when executed by the processor: the cloud application subscription information is sent by the cloud application subscription platform to the cloud gateway after receiving the cloud application subscription request initiated by the target user;

[0171] After associating and storing the cloud application domain name, the virtual identity identifier, and the actual identity identifier, the method further includes:

[0172] A configuration success response message is sent to the cloud application subscription platform, so that the cloud application subscription platform sends a cloud application subscription success response message to the target user based on the configuration success response message.

[0173] In one embodiment, when the computer program is executed by the processor, the following steps are also implemented: the cloud application subscription request carries the actual identity of the target user and the cloud application domain name of the target cloud application; the cloud application subscription request is used to instruct the cloud application subscription platform to obtain the virtual identity of the target user based on the actual identity of the target user.

[0174] In one embodiment, when the computer program is executed by the processor, the following steps are also implemented: the cloud application subscription request is specifically used to instruct the cloud application subscription platform to query the virtual identity of the target user locally based on the actual identity of the target user, and if the query fails, generate an algorithm based on the actual identity and IP address to generate a virtual identity of the target user.

[0175] In one embodiment, when the computer program is executed by the processor, the following steps are also implemented: the cloud application subscription request is also used to instruct the cloud application subscription platform to obtain the instance IP address of the cloud application instance corresponding to the target cloud application from the cloud application management platform, and to feedback the virtual identity of the target user, as well as the cloud application domain name and instance IP address of the target cloud application to the DNS server.

[0176] In one embodiment, when the computer program is executed by the processor, the following steps are further implemented: when there are multiple target users, at least two target users among different target users have the same virtual identity identifier.

[0177] In one embodiment, a computer program product is provided, comprising a computer program, which, when executed by a processor, implements the following steps:

[0178] In response to a first domain name resolution request initiated by a target user, determining a virtual identity identifier of the target user; wherein the first domain name resolution request carries a cloud application domain name of a target cloud application;

[0179] Generate a second domain name resolution request according to the virtual identity and the cloud application domain name;

[0180] Sending a second domain name resolution request to the DNS server, and receiving a domain name resolution result fed back by the DNS server based on the second domain name resolution request;

[0181] Send the domain name resolution result to the target user.

[0182] In one embodiment, when the computer program is executed by the processor, the following steps are further implemented: in response to a first domain name resolution request initiated by the target user, determining the virtual identity of the target user includes:

[0183] In response to a first domain name resolution request initiated by a target user, determining an actual identity identifier of the target user;

[0184] Determine the virtual identity of the target user based on the actual identity.

[0185] In one embodiment, when the computer program is executed by the processor, the following steps are also implemented: the domain name resolution result includes the instance IP address of the target cloud application.

[0186] In one embodiment, when the computer program is executed by the processor, the following steps are further implemented: before determining the virtual identity of the target user in response to the first domain name resolution request initiated by the target user, the method further includes:

[0187] Receiving cloud application subscription information sent by a cloud application subscription platform; wherein the cloud application subscription information includes a cloud application domain name of a target cloud application, and a virtual identity identifier and an actual identity identifier of a target user;

[0188] The cloud application domain name, virtual identity and actual identity are stored in association.

[0189] In one embodiment, the computer program further implements the following steps when executed by the processor: the cloud application subscription information is sent by the cloud application subscription platform to the cloud gateway after receiving the cloud application subscription request initiated by the target user;

[0190] After associating and storing the cloud application domain name, the virtual identity, and the actual identity, the method further includes:

[0191] A configuration success response message is sent to the cloud application subscription platform, so that the cloud application subscription platform sends a cloud application subscription success response message to the target user based on the configuration success response message.

[0192] In one embodiment, when the computer program is executed by the processor, the following steps are also implemented: the cloud application subscription request carries the actual identity of the target user and the cloud application domain name of the target cloud application; the cloud application subscription request is used to instruct the cloud application subscription platform to obtain the virtual identity of the target user based on the actual identity of the target user.

[0193] In one embodiment, when the computer program is executed by the processor, the following steps are also implemented: the cloud application subscription request is specifically used to instruct the cloud application subscription platform to query the virtual identity of the target user locally based on the actual identity of the target user, and if the query fails, generate an algorithm based on the actual identity and IP address to generate a virtual identity of the target user.

[0194] In one embodiment, when the computer program is executed by the processor, the following steps are also implemented: the cloud application subscription request is also used to instruct the cloud application subscription platform to obtain the instance IP address of the cloud application instance corresponding to the target cloud application from the cloud application management platform, and to feedback the virtual identity of the target user, as well as the cloud application domain name and instance IP address of the target cloud application to the DNS server.

[0195] In one embodiment, when the computer program is executed by the processor, the following steps are further implemented: when there are multiple target users, at least two target users among different target users have the same virtual identity identifier.

[0196] Those skilled in the art can understand that all or part of the processes in the above-mentioned embodiments can be completed by instructing the relevant hardware through a computer program, and the computer program can be stored in a non-volatile computer-readable storage medium. When the computer program is executed, it can include the processes of the embodiments of the above-mentioned methods. Among them, any reference to the memory, database or other medium used in the embodiments provided in this application can include at least one of non-volatile and volatile memory. Non-volatile memory can include read-only memory (ROM), magnetic tape, floppy disk, flash memory, optical memory, high-density embedded non-volatile memory, resistive random access memory (ReRAM), magnetoresistive random access memory (MRAM), ferroelectric random access memory (FRAM), phase change memory (PCM), graphene memory, etc. Volatile memory can include random access memory (RAM) or external cache memory, etc. As an illustration and not limitation, RAM can be in various forms, such as static random access memory (SRAM) or dynamic random access memory (DRAM). The database involved in each embodiment provided in this application may include at least one of a relational database and a non-relational database. Non-relational databases may include distributed databases based on blockchains, etc., but are not limited to this. The processor involved in each embodiment provided in this application may be a general-purpose processor, a central processing unit, a graphics processor, a digital signal processor, a programmable logic device, a data processing logic device based on quantum computing, etc., but are not limited to this.

[0197] The technical features of the above embodiments may be arbitrarily combined. To make the description concise, not all possible combinations of the technical features in the above embodiments are described. However, as long as there is no contradiction in the combination of these technical features, they should be considered to be within the scope of this specification.

[0198] The above embodiments only express several implementation methods of the present application, and the descriptions thereof are relatively specific and detailed, but they cannot be understood as limiting the scope of the present application. It should be pointed out that, for a person of ordinary skill in the art, several variations and improvements can be made without departing from the concept of the present application, and these all belong to the protection scope of the present application. Therefore, the protection scope of the present application shall be subject to the attached claims.

Claims

1. A cloud application domain name resolution method, characterized in that: Applied to a cloud gateway, the method includes: In response to a first domain name resolution request initiated by a target user, determining a virtual identity identifier of the target user; wherein the first domain name resolution request carries a cloud application domain name of a target cloud application; Generate a second domain name resolution request according to the virtual identity and the cloud application domain name; Sending the second domain name resolution request to a domain name system DNS server, and receiving a domain name resolution result fed back by the DNS server based on the second domain name resolution request; Send the domain name resolution result to the target user.

2. The method according to claim 1, characterized in that The step of determining the virtual identity of the target user in response to the first domain name resolution request initiated by the target user includes: In response to a first domain name resolution request initiated by a target user, determining an actual identity identifier of the target user; The virtual identity identifier of the target user is determined according to the actual identity identifier.

3. The method according to claim 1 or 2, characterized in that: The domain name resolution result includes the instance Internet Protocol IP address of the target cloud application.

4. The method according to claim 1 or 2, characterized in that: Before determining the virtual identity of the target user in response to the first domain name resolution request initiated by the target user, the method further includes: Receiving cloud application subscription information sent by a cloud application subscription platform; wherein the cloud application subscription information includes the cloud application domain name of the target cloud application, and the virtual identity and actual identity of the target user; The cloud application domain name, the virtual identity identifier and the actual identity identifier are stored in association.

5. The method according to claim 4, characterized in that The cloud application subscription information is sent to the cloud gateway by the cloud application subscription platform after receiving the cloud application subscription request initiated by the target user; After the cloud application domain name, the virtual identity and the actual identity are stored in association, the method further includes: A configuration success response message is sent to the cloud application subscription platform, so that the cloud application subscription platform sends a cloud application subscription success response message to the target user based on the configuration success response message.

6. The method according to claim 5, characterized in that The cloud application subscription request carries the actual identity of the target user and the cloud application domain name of the target cloud application; the cloud application subscription request is used to instruct the cloud application subscription platform to obtain the virtual identity of the target user based on the actual identity of the target user.

7. The method according to claim 6, characterized in that The cloud application subscription request is specifically used to instruct the cloud application subscription platform to query the virtual identity of the target user locally based on the actual identity of the target user, and if the query fails, generate the virtual identity of the target user based on the actual identity and IP address generation algorithm.

8. The method according to claim 6, characterized in that The cloud application subscription request is also used to instruct the cloud application subscription platform to obtain the instance IP address of the cloud application instance corresponding to the target cloud application from the cloud application management platform, and to feedback the virtual identity of the target user, as well as the cloud application domain name and instance IP address of the target cloud application to the DNS server.

9. The method according to claim 1, characterized in that: When there are multiple target users, at least two target users among different target users have the same virtual identity identifier.

10. A cloud application domain name resolution device, characterized in that: Configured in a cloud gateway, the device includes: A determination module, configured to determine the virtual identity of the target user in response to a first domain name resolution request initiated by the target user; wherein the first domain name resolution request carries a cloud application domain name of the target cloud application; A generating module, configured to generate a second domain name resolution request according to the virtual identity identifier and the cloud application domain name; A first sending module, configured to send the second domain name resolution request to the DNS server, and receive a domain name resolution result fed back by the DNS server based on the second domain name resolution request; The second sending module is used to send the domain name resolution result to the target user.

11. A computer device comprising a memory and a processor, wherein the memory stores a computer program, wherein: When the processor executes the computer program, the steps of the method according to any one of claims 1 to 9 are implemented.

12. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the computer program is executed by a processor, the steps of the method according to any one of claims 1 to 9 are implemented.

13. A computer program product, comprising a computer program, characterized in that When the computer program is executed by a processor, the steps of the method according to any one of claims 1 to 9 are implemented.

Images