Cross-cloud access method and device, equipment and medium

Abstract

The embodiment of the invention provides a cross-cloud access method and device, equipment and a medium, and relates to the field of big data. The method comprises the following steps: deploying a first forward service in a preset area, providing a first preset area port of the preset area to a first user area and a second user area, creating a first terminal node with a unique first node IP in the first user area, and creating a second terminal node with a unique second node IP in the second user area, the first user area accesses the first forward service based on the first node IP and a first user area port corresponding to the first preset area port, and the second user area accesses the first forward service based on the second node IP and the first user area port. Through the method, different user areas are prevented from using the same IP to access the service provided by the preset area, it is ensured that the virtual private cloud of the user area and the service node of the preset area are in a one-to-one relationship, it is ensured that the user area can conveniently and reliably access the preset area, and the user experience is improved.

Description

Technical Field

[0001] The present application relates to the field of big data, and in particular to a cross-cloud access method, device, equipment and medium. Background Art

[0002] The networks of different VPCs (Virtual Private Clouds) on the cloud product platform cannot communicate with each other. Although many related cloud products currently provide solutions that support cross-VPC access, in many cases, virtual machines with the same IP may appear in different subnets, and the existing cross-VPC access solution cannot support simultaneous cross-network access of multiple identical IPs. Due to the limitation of the same IP, cloud products in most scenarios cannot directly use the cross-VPC access solution to directly implement cross-VPC access.

[0003] Therefore, a method that can avoid the occurrence of the same IP on the same cloud platform and provide convenient and reliable cross-cloud access is urgently needed. Summary of the invention

[0004] Based on the above technical problems, the embodiments of the present application provide a cross-cloud access method, apparatus, device and medium, aiming to provide users with cross-cloud access services conveniently and reliably.

[0005] A first aspect of an embodiment of the present application provides a cross-cloud access method, the method comprising:

[0006] Deploy a first forward service in a pre-set area and provide a first pre-set area port of the pre-set area to a first user area and a second user area;

[0007] A first terminal node is created in the first user area, and a second terminal node is created in the second user area, wherein the first terminal node has a first node IP that is unique among the node IPs corresponding to the user areas accessing the preset area, and the second terminal node has a second node IP that is unique among the node IPs corresponding to the user areas accessing the preset area;

[0008] The first user zone accesses the first forward service based on the first node IP and the first user zone port corresponding to the first preset zone port, and the second user zone accesses the first forward service based on the second node IP and the first user zone port.

[0009] Optionally, the method further comprises:

[0010] deploying a second forward service in the pre-set area and providing a second pre-set area port of the pre-set area to the first user area and the second user area;

[0011] The first user zone accesses the second forward service based on the first node IP and the second user zone port corresponding to the second preset zone port, and the second user zone accesses the second forward service based on the second node IP and the second user zone port.

[0012] Optionally, the method further comprises:

[0013] When the first user zone needs to access the first forward service and / or the second forward service, retain the first terminal node and the first node IP;

[0014] When the first user zone does not need to access the first forward service and the second forward service, canceling the first terminal node and releasing the first node IP;

[0015] After being released, the first node IP is allocated to terminal nodes created by other user zones that access the preset zone.

[0016] Optionally, the first user zone accesses the first forward service based on the first node IP and the first user zone port corresponding to the first preset zone port, and the second user zone accesses the first forward service based on the second node IP and the first user zone port, and the method includes:

[0017] Each client in the first user zone accesses the first forward service based on the first node IP and the first user zone port corresponding to the first preset zone port;

[0018] Each client in the second user zone accesses the first forward service based on the second node IP and the first user zone port corresponding to the first preset zone port.

[0019] Optionally, the method further comprises:

[0020] Creating a transit node in the preset area, wherein the transit node has a transit IP address;

[0021] The transit node initiates a first reverse service request to the first terminal node based on the transit IP address and the third preset area port;

[0022] The first user zone forwards the first reverse service request to a first host having the third user zone port in the first user zone based on the third user zone port corresponding to the third preset zone port, and provides the first reverse service to the first host through the preset zone;

[0023] The transit node initiates a second reverse service request to the first terminal node based on the transit IP address and the fourth preset zone port;

[0024] The first user zone forwards the second reverse service request to a second host having the fourth user zone port in the first user zone based on a fourth user zone port corresponding to the fourth preset zone port, and provides the second reverse service to the second host through the preset zone.

[0025] Optionally, the method further comprises:

[0026] The transit node initiates a third reverse service request to the second terminal node based on the transit IP address and the fifth preset zone port;

[0027] The second user zone forwards the third reverse service request to a third host having the third user zone port in the second user zone based on the third user zone port corresponding to the fifth preset zone port, and provides the third reverse service to the third host through the preset zone;

[0028] The transit node initiates a fourth reverse service request to the second terminal node based on the transit IP address and the sixth preset zone port;

[0029] The second user zone forwards the fourth reverse service request to a fourth host having the fourth user zone port in the second user zone based on the fourth user zone port corresponding to the sixth preset zone port, and provides the fourth reverse service to the fourth host through the preset zone.

[0030] Optionally, the method further comprises:

[0031] The preset area receives a configuration command;

[0032] The preset area executes the configuration command to configure each preset area port of the preset area for forward service or reverse service.

[0033] A second aspect of an embodiment of the present application provides a cross-cloud access device, the device comprising:

[0034] A first forward service deployment module, configured to deploy a first forward service in a preset area and provide a first preset area port of the preset area to the first user area and the second user area;

[0035] A terminal node creation module, used to create a first terminal node in the first user area, and create a second terminal node in the second user area, wherein the first terminal node has a first node IP that is unique among the node IPs corresponding to the user areas accessing the preset area, and the second terminal node has a second node IP that is unique among the node IPs corresponding to the user areas accessing the preset area;

[0036] The first forward service access module is used for the first user zone to access the first forward service based on the first node IP and the first user zone port corresponding to the first preset zone port, and the second user zone to access the first forward service based on the second node IP and the first user zone port.

[0037] Optionally, the cross-cloud access device further includes:

[0038] A second forward service deployment module, configured to deploy a second forward service in the pre-set area and provide a second pre-set area port of the pre-set area to the first user area and the second user area;

[0039] The second forward service access module is used for the first user zone to access the second forward service based on the first node IP and the second user zone port corresponding to the second preset zone port, and the second user zone to access the second forward service based on the second node IP and the second user zone port.

[0040] Optionally, the cross-cloud access device further includes:

[0041] A first terminal node reservation module, configured to reserve the first terminal node and the first node IP when the first user zone needs to access the first forward service and / or the second forward service;

[0042] A first terminal node cancellation module, configured to cancel the first terminal node and release the first node IP when the first user zone does not need to access the first forward service and the second forward service;

[0043] The first terminal node allocation module is used to allocate the first node IP to the terminal node created by other user areas accessing the preset area after being released.

[0044] Optionally, the cross-cloud access device further includes:

[0045] A first user zone access module, configured for each client in the first user zone to access the first forward service based on the first node IP and the first user zone port corresponding to the first preset zone port;

[0046] The second user zone access module is used for each client in the second user zone to access the first forward service based on the second node IP and the first user zone port corresponding to the first preset zone port.

[0047] Optionally, the cross-cloud access device further includes:

[0048] A transfer node creation module, used to create a transfer node in the preset area, wherein the transfer node has a transfer IP address;

[0049] A first reverse service request sending module, configured for the transit node to initiate a first reverse service request to the first terminal node based on the transit IP address and the third preset zone port;

[0050] A first reverse service providing module, configured for the first user zone to forward the first reverse service request to a first host having the third user zone port in the first user zone based on a third user zone port corresponding to the third preset zone port, and to provide the first reverse service to the first host through the preset zone;

[0051] A second reverse service request sending module, configured for the transit node to initiate a second reverse service request to the first terminal node based on the transit IP address and the fourth preset zone port;

[0052] The second reverse service providing module is used for the first user zone to forward the second reverse service request to the second host with the fourth user zone port in the first user zone based on the fourth user zone port corresponding to the fourth preset zone port, and provide the second reverse service to the second host through the preset zone.

[0053] Optionally, the cross-cloud access device further includes:

[0054] A third reverse service request sending module, configured for the transit node to initiate a third reverse service request to the second terminal node based on the transit IP address and the fifth preset zone port;

[0055] A third reverse service providing module, configured for the second user zone to forward the third reverse service request to a third host having the third user zone port in the second user zone based on the third user zone port corresponding to the fifth preset zone port, and provide the third reverse service to the third host through the preset zone;

[0056] a fourth reverse service request sending module, configured for the transit node to initiate a fourth reverse service request to the second terminal node based on the transit IP address and the sixth preset zone port;

[0057] A fourth reverse service providing module is used for the second user zone to forward the fourth reverse service request to a fourth host having the fourth user zone port in the second user zone based on the fourth user zone port corresponding to the sixth preset zone port, and provide the fourth reverse service to the fourth host through the preset zone.

[0058] Optionally, the cross-cloud access device further includes:

[0059] A configuration command receiving module, used for receiving configuration commands in the preset area;

[0060] The pre-set area port configuration module is used for the pre-set area to execute the configuration command to configure each pre-set area port for forward service or reverse service in the pre-set area.

[0061] A third aspect of an embodiment of the present application provides an electronic device, comprising: a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein when the computer program is executed by the processor, the cross-cloud access method of the first aspect of the embodiment of the present application is implemented.

[0062] A fourth aspect of an embodiment of the present application provides a computer-readable storage medium, on which a computer program is stored. When the computer program is executed by a processor, the cross-cloud access method of the first aspect of the embodiment of the present application is implemented.

[0063] A fifth aspect of an embodiment of the present application provides a computer program product, including a computer program, which, when executed by a processor, implements the cross-cloud access method of the first aspect of an embodiment of the present application.

[0064] Through the cross-cloud access method of the embodiment of the present application, a first forward service available to users is deployed in the preset area, and the first preset area port corresponding to the first forward service is provided to the user area, and a terminal node for establishing access to the preset area is created in the user area. The terminal node of each user area has a unique node IP. In this way, the first user area can access the first forward service based on its exclusive first node IP and the first user area port corresponding to the first user area port. Similarly, the second user area can also access the first forward service based on its exclusive second node IP.

[0065] In the present application, the problem in the related art that different users on the same cloud platform use the same IP address to access a public preset area, resulting in the inability to identify the source of the specific accessing user, is avoided. A method is proposed in which each user area establishes an exclusive terminal node, and each terminal node has a unique node IP in this cloud platform, so that different user areas are distinguished and multiple user areas are prevented from using the same IP, thereby enabling users to reasonably and effectively access the services provided by the preset area, ensuring that the virtual private cloud of the user area and the service node of the preset area are in a one-to-one relationship, ensuring that the user area can access the preset area conveniently and reliably, improving the user experience, and avoiding usage problems caused by IP conflicts. BRIEF DESCRIPTION OF THE DRAWINGS

[0066] In order to more clearly illustrate the technical solutions of the embodiments of the present application, the drawings required for use in the description of the embodiments of the present application will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present application. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying any creative labor.

[0067] Figure 1 is a flow chart of a cross-cloud access method proposed in one embodiment of the present application;

[0068] Figure 2 This is a schematic diagram of a forward service proposed in an embodiment of the present application;

[0069] Figure 3 This is a reverse service schematic diagram proposed in an embodiment of the present application;

[0070] Figure 4 This is a schematic diagram of a service usage proposed in an embodiment of the present application;

[0071] Figure 5 is a structural block diagram of a cross-cloud access device provided by an embodiment of the present application;

[0072] Figure 6 It is a schematic diagram of an electronic device shown in an embodiment of the present application. DETAILED DESCRIPTION

[0073] The following will be combined with the drawings in the embodiments of the present application to clearly and completely describe the technical solutions in the embodiments of the present application. Obviously, the described embodiments are part of the embodiments of the present application, not all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of this application.

[0074] In the drawings, the size of the constituent elements, the thickness of the layer or the area may be exaggerated for the sake of clarity. Therefore, any implementation of the present disclosure is not necessarily limited to the size shown in the drawings, and the shapes and sizes of the components in the drawings do not reflect the true proportions. In addition, the drawings schematically show ideal examples, and any implementation of the present disclosure is not limited to the shapes or values ​​shown in the drawings.

[0075] Please refer to Figure 1 , Figure 1 1 is a flow chart of a cross-cloud access method proposed in one embodiment of the present application. Figure 1 As shown, it may include steps S101 to S103:

[0076] Step S101: deploying a first forward service in a preset area and providing a first preset area port of the preset area to a first user area and a second user area;

[0077] Step S102: creating a first terminal node in the first user area, and creating a second terminal node in the second user area, wherein the first terminal node has a first node IP that is unique among the node IPs corresponding to the user areas accessing the preset area, and the second terminal node has a second node IP that is unique among the node IPs corresponding to the user areas accessing the preset area;

[0078] Step S103: The first user zone accesses the first forward service based on the first node IP and the first user zone port corresponding to the first preset zone port, and the second user zone accesses the first forward service based on the second node IP and the first user zone port.

[0079] In the related technology, since the same cloud platform often contains different VPCs belonging to multiple different users, that is, the virtual private cloud mentioned in the background technology, and different VPCs are used by different users, the users cannot communicate with each other. Therefore, when implementing some functions, different users' VPCs choose to use the same IP address, that is, different virtual machines with the same IP address appear in the same cloud platform. This situation makes these users unable to access the cross-VPC access services provided by the cloud platform normally due to the same IP, resulting in access failure, which greatly affects the user experience.

[0080] Therefore, based on the problems existing in the related art, a cross-cloud access method is proposed in this application. Through the method proposed in this application, in the same cloud platform, when each user zone uses the cross-cloud access service, the node IP used is exclusive to each user zone, avoiding the same IP due to the inability to communicate between each user zone. Specifically, in the embodiment of the present application, first, there is not only a user zone for users to use in the cloud platform, but also a preset zone where the platform provides various services. Users use the various forward services provided by the preset zone by accessing the preset zone. In order to establish access between the user zone and the preset zone, various different forward services will be deployed in the preset zone. After the first forward service is deployed in the preset zone, the first preset zone port of the first forward service needs to be provided to the user zone that may need to use the first forward service, that is, the first user zone and the second user zone mentioned above. Then, in order to access the preset zone across VPCs, each user zone also needs to establish an exclusive service site in the user zone to communicate with the preset zone, that is, create a first terminal node in the first user zone and a second terminal node in the second user zone. In order to prevent the same IP mentioned in the related art from appearing between different user zones, the terminal nodes when establishing cross-VPC access need to be different between each user zone, so the first terminal node of the first user zone has a unique first node IP, and the second terminal node of the second user zone has a unique second node IP, in this way, the terminal nodes of different user zones are distinguished. Finally, each user zone achieves the purpose of accessing and using the forward service in the preset zone based on its own node IP and the port of the required forward service.

[0081] In a specific embodiment, Figure 2 As shown, Figure 2This is a forward service diagram proposed in an embodiment of the present application, in which the user area is created in 192.16.0.0 / 16, the pre-set area is created in 172.16.0.0 / 12, and the service provided by the pre-set area with the pre-set area port 80 is taken as an example. ControlProtocol, Transmission Control Protocol) protocol is created, the address of the server in the preset area providing forward service is 172.16.0.23, first deploy the service in the preset area, and configure the port and provide it to each user area. When the user area needs to use the forward service provided by the preset area, first establish a dedicated terminal node for cross-VPC access in the user area, establish a first terminal node in the first user area, and the first node IP corresponding to the first terminal node is 192.16.1.17. This first node IP is determined to be exclusive to the first user area in this cloud platform. When other user areas select IP addresses, they can no longer select the same IP address as the first node IP. Similarly, a second terminal node exclusive to the second user area is established in the second user area, and the second node IP corresponding to the second terminal node is 192.16.0.14. After the terminal node is established, the access channel between the user area and the preset area can be opened. Specifically, when the first user area needs to use the first forward service provided by the preset area, according to the first preset area port of the first forward service provided by the preset area and the mapping rules between ports, the corresponding first user area port can be determined, that is, 8081 corresponding to 80 as shown in the figure. Therefore, by combining the unique first node IP with the first user area port, the first user area uses the unique address of the first forward service, that is, 192.16.1.17:8081 as shown in the figure. The first user area accesses the preset area through this address, and the preset area can determine that the access is from the first user area, and the purpose of the access is to use the first forward service. Similarly, for the second user area, when using the first forward service, the unique address established is 192.16.0.14:8081. In this way, different user areas are distinguished to avoid the situation where different user areas use the same IP address. Since each user zone and the terminal node therein are established in one-to-one correspondence, and each terminal node has a unique node IP, the uniqueness of the IP in each access link can be guaranteed, avoiding the problems existing in the related technology.

[0082] Step S101: deploying a first forward service in a preset area and providing a first preset area port of the preset area to a first user area and a second user area.

[0083] In the embodiment of the present application, before the pre-set area provides forward services to the user area, each forward service needs to be deployed in the pre-set area first. Since the possible usage environments of various cloud products are different, it is necessary to allocate the deployed forward services with their own pre-set area ports, and there are corresponding mapping rules in the cloud platform, that is, the pre-set area ports correspond to their own user area ports. Therefore, after the first forward service is deployed in the pre-set area, the first pre-set area port needs to be provided to each user area that may need to use the first forward service, and the corresponding mapping rules also need to be informed to each user area.

[0084] like Figure 2 As shown in , taking two different forward services as an example, after the two forward services are deployed in the pre-set area, their pre-set area ports are 80 and 3306 respectively. The pre-set area ports are informed to the user, and according to the mapping rules, the user area port corresponding to the pre-set area port 80 is 8081, and the user area port corresponding to the pre-set area port 3306 is 3006.

[0085] Step S102: Create a first terminal node in the first user area, and create a second terminal node in the second user area, the first terminal node has a first node IP that is unique among the node IPs corresponding to each user area accessing the preset area, and the second terminal node has a second node IP that is unique among the node IPs corresponding to each user area accessing the preset area.

[0086] In the embodiment of the present application, after various services available to the user zone are deployed in the pre-set zone, after the user zone is created, if it wants to access the pre-set zone to use various forward services, it is also necessary to open a "bridge" for communication with the pre-set zone, that is, to establish a dedicated terminal node in the user zone to interact with the pre-set zone, establish a first terminal node in the first user zone, and establish a second terminal node in the second user zone. As described above, in order to distinguish the access of different user zones to the pre-set zone, the first terminal node and the second terminal node need different IP addresses, and this IP address is unique in the cloud platform, so that the IP address selected for the node IP that has been created as the user zone will not be used by other user zones in the cloud platform, so as to avoid the problem of different users using the same IP when communicating across VPCs, resulting in the possibility of access failure for the duplicate party.

[0087] like Figure 2 As shown in, taking the first user zone and the second user zone as an example, a first terminal node is established in the first user zone, and the first node IP of the first terminal node is 192.16.1.17. Similarly, the second node IP of the second terminal node in the second user zone is 192.16.0.14.

[0088] Step S103: The first user zone accesses the first forward service based on the first node IP and the first user zone port corresponding to the first preset zone port, and the second user zone accesses the first forward service based on the second node IP and the first user zone port.

[0089] In an embodiment of the present application, after a first terminal node with a unique first node IP and a second terminal node with a unique second node IP are established in the user zone, the user zone needs to access the forward service provided by the preset zone and needs to obtain the first user zone port used by the user zone according to the mapping rule based on the first preset zone port of the first forward service provided by the preset zone, and establish an access channel for the first user zone to access the first forward service of the preset zone based on the first node IP and the first user zone port. Similarly, the second user zone establishes an access channel for the second user zone to access the first forward service of the preset zone based on the second node IP and the first user zone port.

[0090] In combination with the above embodiments, in one implementation, the present application also provides a cross-cloud access method, which specifically includes the following contents:

[0091] First, a second forward service is deployed in the pre-set area and a second pre-set area port of the pre-set area is provided to the first user area and the second user area.

[0092] In the embodiment of the present application, there are multiple selectable forward services in the pre-set area. By deploying the forward service in the pre-set area, establishing a pre-set area port for the forward service, and providing the pre-set area port to each user area, the user area can determine the address for accessing the forward service according to the pre-set area port of the forward service and the mapping rule. Specifically, in the present application, a second forward service is deployed in the pre-set area, and a second pre-set area port of the second forward service is provided to the first user area and the second user area.

[0093] like Figure 2 As shown, the preset area not only includes the first forward service with the preset area port 80 mentioned above, but also the second forward service with the preset area port 3306 is deployed. After the second forward service is deployed in the preset area, the preset area port 3306 is provided to the first user area and the second user area so that the first user area and the second user area can access the preset area and use the second forward service.

[0094] Then, the first user zone accesses the second forward service based on the first node IP and the second user zone port corresponding to the second preset zone port, and the second user zone accesses the second forward service based on the second node IP and the second user zone port.

[0095] In the embodiment of the present application, in step S102, the first terminal node and the second terminal node uniquely associated with the respective user areas have been created in the first user area and the second user area, respectively, and the first terminal node has a unique first node IP, and the second terminal node has a unique second node IP. Therefore, after the first user area establishes contact with the preset area through the first terminal node, if it wants to use the second forward service, it is necessary to determine the second user area port corresponding to the second preset area port of the second forward service through the mapping rule, and then create an access address based on the first node IP and the second user area port to achieve the first user area's access to the preset area and use the second forward service. In the same way, after the second user area determines the second user area port, the second user area can create an access address for the second user area to access the preset area through the second node IP and the second user area port, achieve the second user area's access to the preset area, and use the second forward service.

[0096] like Figure 2 As shown, if the first user zone and the second user zone want to access the second forward service in the preset zone, they first need to determine the second user zone port 3006 of the second forward service provided by the preset zone according to the second preset zone port 3306 and the mapping rule. The first user zone determines the access address of the second forward service used by the first user zone according to the first node IP of the first terminal node: 192.16.1.17, that is, 192.16.1.17:3006; in the same way, the second user zone determines the access address of the second forward service used by the second user zone according to the second node IP of the second terminal node: 192.16.0.14, that is, 192.16.0.14:3006. In this way, the preset zone can determine which user zone the cross-VPC access comes from based on the combination of the node IP and the port, and can determine which forward service the user zone wants to use, so that the one-to-one correspondence between each user zone and each service is achieved, and the problem of being unable to determine the user or service item with the same IP will not occur.

[0097] In combination with the above embodiments, in one implementation, the present application also provides a cross-cloud access method, which specifically includes the following contents:

[0098] First, when the first user zone needs to access the first forward service and / or the second forward service, the first terminal node and the first node IP are reserved.

[0099] In the embodiment of the present application, since each user zone creates a terminal node for cross-service access, and each terminal node has a unique node IP in the cloud platform, it is achieved that each user zone will not have IP duplication when performing cross-VPC access. Therefore, in order to ensure that each user zone can always maintain a unique node IP when using various services in the cloud platform, when the user zone is created in the cloud platform, as long as the user zone has the need to use any service provided by the preset zone, the terminal node and the unique node IP that are uniquely corresponding to it will be reserved for the user zone, so as to ensure that as long as each user zone exists in the cloud platform, when it wants to use cross-VPC services, there will be no IP conflict with other user zones.

[0100] Then, when the first user zone does not need to access the first forward service and the second forward service, the first terminal node is cancelled and the first node IP is released.

[0101] In the embodiment of the present application, as described above, in the case where each user zone may need to use the preset zone service, the terminal node and the node IP will be reserved for it. Only when the user of the user zone determines that he no longer needs to use all the services provided by the preset zone, the user zone will be deregistered from the cloud platform, and it will be determined that the user will no longer have the possibility of IP conflict with other user zones. Therefore, the terminal node corresponding to the user zone that no longer needs to use the preset zone service can be cancelled, and the node IP corresponding to the cancelled terminal node can also be released for use by other user zones in the platform.

[0102] Finally, after being released, the first node IP is allocated to terminal nodes created by other user zones accessing the preset zone.

[0103] In the embodiment of the present application, after the node IP corresponding to the cancelled terminal node is released, it is no longer bound to the original user zone, so it can be used to allocate to other user zones that need to access the preset zone. In this way, the uniqueness of the node IP of each user zone can be guaranteed, and after the user zone is cancelled, the corresponding node IP will not be idle due to cancellation, and provided to other new user zones. In this way, combined with the above-mentioned establishment of a terminal node in the user zone for creating cross-VPC access with the preset zone, and determining the node IP uniquely corresponding to the user zone, and then, after the user zone is cancelled, cancel the terminal node and release the node IP, so as to realize the user's cross-VPC access, the one-to-one user zone and node IP guarantee the uniqueness of the IP in each access link, and release the node IP when the access is no longer needed, avoiding the next link failure due to IP duplication, and ensuring the security and availability of the service.

[0104] In combination with the above embodiments, in one implementation, the present application further provides a cross-cloud access method, wherein the first user zone accesses the first forward service based on the first node IP and the first user zone port corresponding to the first preset zone port, and the second user zone accesses the first forward service based on the second node IP and the first user zone port, specifically including the following contents:

[0105] Each client in the first user zone accesses the first forward service based on the first node IP and the first user zone port corresponding to the first preset zone port;

[0106] Each client in the second user zone accesses the first forward service based on the second node IP and the first user zone port corresponding to the first preset zone port.

[0107] In the embodiment of the present application, the user area and the preset area are both present on the cloud platform. The user actually accesses the corresponding user area through the operating device, and establishes a connection with the preset area according to the terminal node of the user area, and uses the services provided by the preset area. Each user area may contain multiple clients, and each client can be used by the user to access the user area, use the services provided in the user area, and use the various forward services provided in the preset area across VPCs. Each client in the first user area can access the first forward service based on the first user area port corresponding to the first node IP and the first preset area port. In this way, it is also ensured that each client in each user area will not have an IP address conflict with clients in other user areas.

[0108] In combination with the above embodiments, in one implementation, the present application also provides a cross-cloud access method, which specifically includes the following contents:

[0109] First, a transit node is created in the preset area, and the transit node has a transit IP address.

[0110] In the embodiment of the present application, the user area can not only access the pre-set area to use the various forward services provided by the pre-set area, but the pre-set area can also access the user area through the cross-cloud access method proposed in the present application, and provide various reverse services to the user area. Through the reverse service, the pre-set area can provide the user area with various services such as cluster laying and component installation. In the present application, in order to enable the pre-set area to provide reverse services to the user area, it is necessary to first create a transit node in the pre-set area to establish a connection with the user area. Similar to the terminal node of the user area, the transit node has a unique transit IP address.

[0111] like Figure 3 As shown, Figure 3This is a reverse service schematic diagram proposed in an embodiment of the present application. In order to provide reverse service to the user area, a unique transit node is created in the preset area. The transit node has a unique transit IP address, i.e. 172.16.0.49. By initiating access to the user area through this address, the user area can determine that it is the preset area that is applying to provide reverse service.

[0112] Then, the transit node initiates a first reverse service request to the first terminal node based on the transit IP address and the third preset area port.

[0113] In the embodiment of the present application, when the pre-set area provides reverse service to the user area, it makes an access request to the user area. Since the user area is a space for private use by the user, when accessing the user area, the pre-set area can provide reverse service to the user area only after obtaining the permission of the user area. Similarly, since there are multiple reverse services deployed in the pre-set area, they need to be distinguished according to the ports of each reverse service. Therefore, the transit node in the pre-set area determines the address of the reverse service based on its transit IP address and the pre-set area port of the reverse service to be provided, and initiates a reverse service request to the user area.

[0114] like Figure 3 As shown, the preset zone wishes to provide a reverse service with a user zone port of 22 to the first user zone. It is necessary to determine the access address of the first reverse service provided to the first user zone based on the transit IP address 172.16.0.49 and the corresponding third preset zone port 16000, that is, 172.16.0.49:16000, so as to initiate a request for providing the first reverse service to the first user zone.

[0115] Next, the first user zone forwards the first reverse service request to the first host having the third user zone port in the first user zone based on the third user zone port corresponding to the third preset zone port, and provides the first reverse service to the first host through the preset zone.

[0116] In the embodiment of the present application, the reverse service provided by the preset area to the user area needs to be implemented on the host used by the users in the user area. After the terminal node in the user area receives the reverse service request issued by the preset area and passes it, the terminal node will forward the reverse service to the corresponding host of the request, and the preset area will provide the host with the reverse service agreed by the user area.

[0117] Similarly, for other reverse services, the transit node initiates a second reverse service request to the first terminal node based on the transit IP address and the fourth preset zone port;

[0118] The first user zone forwards the second reverse service request to a second host having the fourth user zone port in the first user zone based on a fourth user zone port corresponding to the fourth preset zone port, and provides the second reverse service to the second host through the preset zone.

[0119] In the embodiment of the present application, more than one reverse service is deployed in the pre-set area, but different reverse services are connected to the user area through the transit node when they are provided to the user area. When the pre-set area provides the second reverse service request to the first user area, it is necessary to first obtain the first pre-set area port corresponding to the reverse service, and then initiate the second reverse service request to the first user area according to the fourth pre-set area port and the transit IP address. Correspondingly, after receiving the reverse service request initiated by the pre-set area, the terminal node in the first user area can forward the second reverse service request to the target of the reverse service, that is, the second host, with the consent of the user area, and the pre-set area can provide the second reverse service to the second host in the first user area.

[0120] like Figure 3 As shown, the preset zone hopes to provide the second reverse service with the user zone port of 30000 to the first user zone. First, according to the mapping rule, it is determined that the fourth preset zone port of the second reverse service provided to the first user zone is 30001, and then according to the transit IP address 172.16.0.49 of the transit node, the access address of the second reverse service provided to the first user zone is determined, that is, 172.16.0.49:30001, so as to initiate a second reverse service request to the first user zone.

[0121] In combination with the above embodiments, in one implementation, the present application also provides a cross-cloud access method, which specifically includes the following contents:

[0122] First, the transit node initiates a third reverse service request to the second terminal node based on the transit IP address and the fifth preset zone port;

[0123] The second user zone forwards the third reverse service request to a third host having the third user zone port in the second user zone based on the third user zone port corresponding to the fifth preset zone port, and provides the third reverse service to the third host through the preset zone.

[0124] In the embodiment of the present application, as described above, when the preset zone provides a reverse service to the user zone, it first needs to determine the preset zone port of the reverse service, and only after obtaining the consent of the user zone can it provide the reverse service. When the preset zone wishes to provide a third reverse service to the second user zone, it first needs to determine the access address based on the transit IP address and the fifth preset zone port corresponding to the third reverse service, and then initiate a third reverse service request to the second terminal node of the second user zone. After the second user zone agrees that the preset zone performs the third reverse service, it is also necessary to forward the request to the target host, that is, the third host in the second user zone. Finally, the preset zone provides the third reverse service to the third host in the second user zone.

[0125] like Figure 3 As shown, the third user area port corresponding to the third reverse service is also 22, but because it is provided to the second user area, its corresponding fifth preset area port is 16001. Combined with the transit IP address 172.16.0.49 of the transit node, it is determined that the access address of the third reverse service provided by the preset area to the second user area is 172.16.0.49:16001.

[0126] Similarly, for other reverse services, the transit node initiates a fourth reverse service request to the second terminal node based on the transit IP address and the sixth preset zone port;

[0127] The second user zone forwards the fourth reverse service request to a fourth host having the fourth user zone port in the second user zone based on the fourth user zone port corresponding to the sixth preset zone port, and provides the fourth reverse service to the fourth host through the preset zone.

[0128] In an embodiment of the present application, when the preset zone provides the fourth reverse service to the second user zone, it must first determine the transit IP address and the sixth preset zone port, and then initiate a fourth reverse service request to the second terminal node of the second user zone. After the second user zone agrees, the second terminal node forwards the fourth reverse service to the fourth host in the second user zone having the fourth user zone port, thereby enabling the preset zone to provide the fourth reverse service to the fourth host in the second user zone.

[0129] like Figure 3 As shown, the fourth user area port corresponding to the fourth reverse service is also 22, but because it is provided to the second user area, its corresponding sixth preset area port is 30002. Combined with the transit IP address 172.16.0.49 of the transit node, it is determined that the access address of the fourth reverse service provided by the preset area to the second user area is 172.16.0.49:30002.

[0130] In combination with the above embodiments, in one implementation, the present application also provides a cross-cloud access method, which specifically includes the following contents:

[0131] First, the preset area receives a configuration command;

[0132] Then, the preset area executes the configuration command to configure each preset area port of the preset area for the forward service or the reverse service.

[0133] In the embodiment of the present application, a variety of forward services and a variety of reverse services are deployed in the pre-set area. In order to meet the user's usage needs, the pre-set area needs to first deploy forward services or reverse services from different sources in the pre-set area under the command of configuring the forward service or reverse service, and configure the service port to determine the correspondence between the pre-set area port and the user area port, so that no matter whether the user area uses the forward service of the pre-set area by accessing the pre-set area, or the user area agrees to the access of the pre-set area and accepts the reverse service provided by the pre-set area, there can be a clear port correspondence to determine whether the service is what the user wants to operate or wants the pre-set area to provide.

[0134] like Figure 4 As shown, Figure 4 This is a service usage diagram proposed in an embodiment of the present application. A first forward service is deployed in the pre-setting, and a first terminal node and a second terminal node are established in the first user area and the second user area respectively. Both of them can use the first forward service by accessing the pre-setting area; and a first reverse service and a third reverse service are also deployed in the pre-setting area. However, since the reverse service is provided by the pre-setting area to a certain user area through the cross-service access method proposed in the present application, the pre-setting area provides services separately to a certain user area. Therefore, the reverse service with the user area port 22 needs to be deployed in the pre-setting area as the first reverse service and the third reverse service with the pre-setting area ports configured as 16000 and 16001 respectively.

[0135] Based on the same design concept, an embodiment of the present application provides a cross-cloud access device. Figure 5 , Figure 5 1 is a structural block diagram of a cross-cloud access device provided by an embodiment of the present application. Figure 5 As shown, the device comprises:

[0136] A first forward service deployment module, configured to deploy a first forward service in a preset area and provide a first preset area port of the preset area to the first user area and the second user area;

[0137] A terminal node creation module, used to create a first terminal node in the first user area, and create a second terminal node in the second user area, wherein the first terminal node has a first node IP that is unique among the node IPs corresponding to the user areas accessing the preset area, and the second terminal node has a second node IP that is unique among the node IPs corresponding to the user areas accessing the preset area;

[0138] The first forward service access module is used for the first user zone to access the first forward service based on the first node IP and the first user zone port corresponding to the first preset zone port, and the second user zone to access the first forward service based on the second node IP and the first user zone port.

[0139] Optionally, the cross-cloud access device further includes:

[0140] A second forward service deployment module, configured to deploy a second forward service in the pre-set area and provide a second pre-set area port of the pre-set area to the first user area and the second user area;

[0141] The second forward service access module is used for the first user zone to access the second forward service based on the first node IP and the second user zone port corresponding to the second preset zone port, and the second user zone to access the second forward service based on the second node IP and the second user zone port.

[0142] Optionally, the cross-cloud access device further includes:

[0143] A first terminal node reservation module, configured to reserve the first terminal node and the first node IP when the first user zone needs to access the first forward service and / or the second forward service;

[0144] A first terminal node cancellation module, configured to cancel the first terminal node and release the first node IP when the first user zone does not need to access the first forward service and the second forward service;

[0145] The first terminal node allocation module is used to allocate the first node IP to the terminal node created by other user areas accessing the preset area after being released.

[0146] Optionally, the cross-cloud access device further includes:

[0147] A first user zone access module, configured for each client in the first user zone to access the first forward service based on the first node IP and the first user zone port corresponding to the first preset zone port;

[0148] The second user zone access module is used for each client in the second user zone to access the first forward service based on the second node IP and the first user zone port corresponding to the first preset zone port.

[0149] Optionally, the cross-cloud access device further includes:

[0150] A transfer node creation module, used to create a transfer node in the preset area, wherein the transfer node has a transfer IP address;

[0151] A first reverse service request sending module, configured for the transit node to initiate a first reverse service request to the first terminal node based on the transit IP address and the third preset zone port;

[0152] A first reverse service providing module, configured for the first user zone to forward the first reverse service request to a first host having the third user zone port in the first user zone based on a third user zone port corresponding to the third preset zone port, and to provide the first reverse service to the first host through the preset zone;

[0153] A second reverse service request sending module, configured for the transit node to initiate a second reverse service request to the first terminal node based on the transit IP address and the fourth preset zone port;

[0154] The second reverse service providing module is used for the first user zone to forward the second reverse service request to the second host with the fourth user zone port in the first user zone based on the fourth user zone port corresponding to the fourth preset zone port, and provide the second reverse service to the second host through the preset zone.

[0155] Optionally, the cross-cloud access device further includes:

[0156] A third reverse service request sending module, configured for the transit node to initiate a third reverse service request to the second terminal node based on the transit IP address and the fifth preset zone port;

[0157] A third reverse service providing module, configured for the second user zone to forward the third reverse service request to a third host having the third user zone port in the second user zone based on the third user zone port corresponding to the fifth preset zone port, and provide the third reverse service to the third host through the preset zone;

[0158] a fourth reverse service request sending module, configured for the transit node to initiate a fourth reverse service request to the second terminal node based on the transit IP address and the sixth preset zone port;

[0159] A fourth reverse service providing module is used for the second user zone to forward the fourth reverse service request to a fourth host having the fourth user zone port in the second user zone based on the fourth user zone port corresponding to the sixth preset zone port, and provide the fourth reverse service to the fourth host through the preset zone.

[0160] Optionally, the cross-cloud access device further includes:

[0161] A configuration command receiving module, used for receiving configuration commands in the preset area;

[0162] The pre-set area port configuration module is used for the pre-set area to execute the configuration command to configure each pre-set area port for forward service or reverse service in the pre-set area.

[0163] Based on the same design concept, another embodiment of the present application provides a computer-readable storage medium, on which a computer program is stored. When the computer program is executed by a processor, the steps in the cross-cloud access method described in any of the above embodiments of the present application are implemented.

[0164] Based on the same design concept, another embodiment of the present application provides a computer program product, including a computer program / instruction, which, when executed by a processor, implements the steps in the cross-cloud access method described in any of the above embodiments of the present application.

[0165] Based on the same design concept, another embodiment of the present application provides an electronic device, such as Figure 6 shown. Figure 6 1 is a schematic diagram of an electronic device shown in an embodiment of the present application. The electronic device includes a memory, a processor, and a computer program stored in the memory and executable on the processor, and the processor implements the steps of the cross-cloud access method described in any of the above embodiments of the present application when executing.

[0166] As for the device embodiment, since it is basically similar to the method embodiment, the description is relatively simple, and the relevant parts can be referred to the partial description of the method embodiment.

[0167] The various embodiments in this specification are described in a progressive manner, and each embodiment focuses on the differences from other embodiments. The same or similar parts between the various embodiments can be referenced to each other.

[0168] Those skilled in the art will appreciate that the embodiments of the present application may be provided as methods, devices, or computer program products. Therefore, the embodiments of the present application may adopt the form of complete hardware embodiments, complete software embodiments, or embodiments in combination with software and hardware. Moreover, the embodiments of the present application may adopt the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) that contain computer-usable program code.

[0169] The embodiments of the present application are described with reference to the flowcharts and / or block diagrams of the methods, terminal devices (systems), and computer program products according to the embodiments of the present application. It should be understood that each process and / or box in the flowchart and / or block diagram, as well as the combination of the processes and / or boxes in the flowchart and / or block diagram, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing terminal device to generate a machine, so that the instructions executed by the processor of the computer or other programmable data processing terminal device generate instructions for implementing the processes in the flowchart and / or block diagram. Figure 1 A process or multiple processes and / or boxes Figure 1 A device that provides the functions specified in a block or multiple blocks.

[0170] These computer program instructions may also be stored in a computer-readable memory capable of directing a computer or other programmable data processing terminal device to operate in a specific manner, so that the instructions stored in the computer-readable memory produce a manufactured product including an instruction device, which implements the process Figure 1 A process or multiple processes and / or boxes Figure 1 A function specified in one or more boxes.

[0171] These computer program instructions can also be loaded onto a computer or other programmable data processing terminal device so that a series of operating steps are executed on the computer or other programmable terminal device to produce a computer-implemented process, thereby providing instructions for executing on the computer or other programmable terminal device to implement the process. Figure 1 A process or multiple processes and / or boxes Figure 1 A step that specifies a function in one or more boxes.

[0172] Although the preferred embodiments of the present application have been described, those skilled in the art may make additional changes and modifications to these embodiments once they have learned the basic creative concept. Therefore, the appended claims are intended to be interpreted as including the preferred embodiments and all changes and modifications that fall within the scope of the embodiments of the present application.

[0173] Finally, it should be noted that, in this article, relational terms such as first and second, etc. are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Moreover, the terms "include", "comprise" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article or terminal device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or terminal device. In the absence of further restrictions, the elements defined by the sentence "comprise a ..." do not exclude the existence of other identical elements in the process, method, article or terminal device including the elements.

[0174] The above is a detailed introduction to a cross-cloud access method, device, equipment and medium provided by the present application. Specific examples are used in this article to illustrate the principles and implementation methods of the present application. The description of the above embodiments is only used to help understand the method of the present application and its core idea; at the same time, for general technical personnel in this field, according to the idea of ​​the present application, there will be changes in the specific implementation method and application scope. In summary, the content of this specification should not be understood as a limitation on the present application.

Claims

1. A cross-cloud access method, characterized in that: include: Deploy a first forward service in a pre-set area and provide a first pre-set area port of the pre-set area to a first user area and a second user area; A first terminal node is created in the first user area, and a second terminal node is created in the second user area, wherein the first terminal node has a first node IP that is unique among the node IPs corresponding to the user areas accessing the preset area, and the second terminal node has a second node IP that is unique among the node IPs corresponding to the user areas accessing the preset area; The first user zone accesses the first forward service based on the first node IP and the first user zone port corresponding to the first preset zone port, and the second user zone accesses the first forward service based on the second node IP and the first user zone port.

2. The cross-cloud access method according to claim 1, characterized in that: Also includes: deploying a second forward service in the pre-set area and providing a second pre-set area port of the pre-set area to the first user area and the second user area; The first user zone accesses the second forward service based on the first node IP and the second user zone port corresponding to the second preset zone port, and the second user zone accesses the second forward service based on the second node IP and the second user zone port.

3. The cross-cloud access method according to claim 2, characterized in that: Also includes: When the first user zone needs to access the first forward service and / or the second forward service, retain the first terminal node and the first node IP; When the first user zone does not need to access the first forward service and the second forward service, canceling the first terminal node and releasing the first node IP; After being released, the first node IP is allocated to terminal nodes created by other user zones that access the preset zone.

4. The cross-cloud access method according to claim 1, characterized in that: The first user zone accesses the first forward service based on the first node IP and the first user zone port corresponding to the first preset zone port, and the second user zone accesses the first forward service based on the second node IP and the first user zone port, including: Each client in the first user zone accesses the first forward service based on the first node IP and the first user zone port corresponding to the first preset zone port; Each client in the second user zone accesses the first forward service based on the second node IP and the first user zone port corresponding to the first preset zone port.

5. The cross-cloud access method according to claim 1, characterized in that: Also includes: Creating a transit node in the preset area, wherein the transit node has a transit IP address; The transit node initiates a first reverse service request to the first terminal node based on the transit IP address and the third preset area port; The first user zone forwards the first reverse service request to a first host having the third user zone port in the first user zone based on the third user zone port corresponding to the third preset zone port, and provides the first reverse service to the first host through the preset zone; The transit node initiates a second reverse service request to the first terminal node based on the transit IP address and the fourth preset zone port; The first user zone forwards the second reverse service request to a second host having the fourth user zone port in the first user zone based on a fourth user zone port corresponding to the fourth preset zone port, and provides the second reverse service to the second host through the preset zone.

6. The cross-cloud access method according to claim 5, characterized in that: Also includes: The transit node initiates a third reverse service request to the second terminal node based on the transit IP address and the fifth preset zone port; The second user zone forwards the third reverse service request to a third host having the third user zone port in the second user zone based on the third user zone port corresponding to the fifth preset zone port, and provides the third reverse service to the third host through the preset zone; The transit node initiates a fourth reverse service request to the second terminal node based on the transit IP address and the sixth preset zone port; The second user zone forwards the fourth reverse service request to a fourth host having the fourth user zone port in the second user zone based on the fourth user zone port corresponding to the sixth preset zone port, and provides the fourth reverse service to the fourth host through the preset zone.

7. The cross-cloud access method according to any one of claims 1 to 6, characterized in that: Also includes: The preset area receives a configuration command; The preset area executes the configuration command to configure each preset area port of the preset area for forward service or reverse service.

8. A cross-cloud access device, characterized in that: The device comprises: A first forward service deployment module, configured to deploy a first forward service in a preset area and provide a first preset area port of the preset area to the first user area and the second user area; A terminal node creation module, used to create a first terminal node in the first user area, and create a second terminal node in the second user area, wherein the first terminal node has a first node IP that is unique among the node IPs corresponding to the user areas accessing the preset area, and the second terminal node has a second node IP that is unique among the node IPs corresponding to the user areas accessing the preset area; The first forward service access module is used for the first user zone to access the first forward service based on the first node IP and the first user zone port corresponding to the first preset zone port, and the second user zone to access the first forward service based on the second node IP and the first user zone port.

9. An electronic device comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein: When the computer program is executed by the processor, the cross-cloud access method as described in any one of claims 1 to 7 is implemented.

10. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the computer program is executed by a processor, the cross-cloud access method as described in any one of claims 1 to 7 is implemented.

Images