SDWAN cross-border networking system, method, device and equipment and storage medium

Abstract

The invention relates to the technical field of electronics, and discloses an SDWAN cross-border networking system, method, device and equipment and a storage medium, and the system comprises a first terminal device, a first network access device and a first high-performance gateway which are arranged in a first area, and a second terminal device, a second network access device and a second high-performance gateway which are arranged in a second area. A cross-regional special link is provided for a service provider between the first high-performance gateway and the second high-performance gateway, and when the first terminal equipment needs to access the second terminal equipment, the service provider can access the first high-performance gateway. The corresponding first access request information is forwarded to the second terminal equipment through the first network access equipment, the first high-performance gateway, the second high-performance gateway and the second network access equipment; and the second terminal equipment sends feedback information returned based on the access request to the first terminal equipment through the second network access equipment, the second high-performance gateway, the first high-performance gateway and the first network access equipment in sequence, so that cross-regional access of the terminal equipment is realized.

Description

Technical Field

[0001] The present invention relates to the field of electronic technology, and in particular to a SDWAN cross-border networking system, method, device, equipment and storage medium. Background Art

[0002] When an enterprise has multiple branches in China, the branches can build a secure enterprise network by opening the Software Defined Wide Area Network (SDWAN) product service. The network contains multiple access point devices. Based on the communication connection between different access point devices, the access point devices can forward the access data of different terminals, thereby realizing data access between different terminals. However, when the branches of an enterprise have both domestic sites and overseas sites, since different countries have certain requirements for data security and compliance, building a secure and compliant enterprise network cannot be simply achieved through domestic SDWAN product services, and the terminal devices of the enterprise at home and abroad cannot access each other. Summary of the invention

[0003] In view of this, the present invention provides a SDWAN cross-border networking system, method, device, equipment and storage medium to solve the problem in the related technology that due to different requirements for data security compliance in different countries, the enterprise network cannot be built simply through domestic SDWAN product services, and the enterprise's terminal devices in the country cannot access overseas terminal devices.

[0004] In a first aspect, the present invention provides an SDWAN cross-border networking system, which includes: a first terminal device, a first network access device, and a first high-performance gateway arranged in a first area, and a second terminal device, a second network access device, and a second high-performance gateway arranged in a second area; the first network access device is used to receive a first access request information issued by the first terminal device, and send the first access request information to the first high-performance gateway, the first access request information being information for accessing the second terminal device; the first high-performance gateway is communicatively connected with the second high-performance gateway, and the first network access device is used to send the first access request information to the second high-performance gateway; the second high-performance gateway is used to send the first access request information to the second terminal device through the second network access device, and is also used to receive feedback information sent by the second terminal device based on the first access request information, and send the feedback information to the first high-performance gateway, so that the first high-performance gateway forwards the feedback information to the first terminal device through the first network access device.

[0005] The SDWAN cross-border networking system provided by the present invention includes a first terminal device, a first network access device, and a first high-performance gateway arranged in a first area, and a second terminal device, a second network access device, and a second high-performance gateway arranged in a second area. The first high-performance gateway and the second high-performance gateway provide a cross-regional dedicated link for the service provider. When the first terminal device needs to access the second terminal device, the corresponding first access request information is forwarded to the second terminal device through the first network access device, the first high-performance gateway, the second high-performance gateway, and the second network access device. The feedback information returned by the second terminal device based on the access request is sent to the first terminal device in turn through the second network access device, the second high-performance gateway, the first high-performance gateway, and the first network access device, thereby realizing cross-regional access of terminal devices in the two areas. After the cross-regional dedicated link between the first area and the second area is opened, the terminal devices in the first area and the terminal devices in the second area can form a cross-regional enterprise network, and the host connected to the client terminal device can be accessed across regions.

[0006] In an optional embodiment, the system also includes a first controller and a second controller; the first controller is respectively connected to the first terminal device, the first network access device, and the first high-performance gateway, and the first controller is used to send the network configuration between the first terminal device and the first network access device and the network configuration between the first network access device and the first high-performance gateway, and is also used to send a virtual extended LAN tunnel to the first high-performance gateway; the second controller is respectively connected to the second terminal device, the second network access device, and the second high-performance gateway, and the second controller is used to send the network configuration between the second terminal device and the second network access device, and the network configuration between the second network access device and the second high-performance gateway, and is also used to send a virtual extended LAN tunnel to the second high-performance gateway.

[0007] In the system provided by this optional implementation, the controllers of the two areas manage the terminal devices, network access devices and high-performance gateways in the corresponding areas, and issue configurations, and can also activate the terminal devices, start and deploy services, etc.

[0008] In an optional implementation, the first network access device is further configured to obtain and receive second access request information sent by the first terminal device, and forward the second access request information to a corresponding terminal device in the first area.

[0009] In an optional implementation, the first terminal device is used to store the Internet whitelist of the second area sent by the controller into a preset memory when receiving the Internet whitelist, where the Internet whitelist includes multiple target access addresses.

[0010] In an optional implementation, the first terminal device is also used to obtain initial access request information. If there is a target access address in the Internet whitelist that is the same as the access address of the initial access request information, the access request information is sent to the first network access device as the first access request information.

[0011] In a second aspect, the present invention provides an SDWAN cross-border networking method, which is applied to a first network access device of the SDWAN cross-border networking system of the above-mentioned first aspect or any corresponding embodiment, the method comprising: receiving a first access request information issued by a first terminal device; sending the first access request information to a first high-performance gateway, so that the first high-performance gateway forwards the first access request information to a second terminal device through a second high-performance gateway and a second network access device; when feedback information sent by the second terminal device based on the first access request information is received, the feedback information is sent to the first terminal device.

[0012] The SDWAN cross-border networking method provided by the present invention comprises the following steps: a first network access device receives first access request information sent by a first terminal device; the first access request is sent to a first high-performance gateway, so that the first high-performance gateway forwards the target access request to the second terminal device through a second high-performance gateway and a second network access device; when feedback information sent by the second terminal device based on the first access request information is received, the feedback information is sent to the first terminal device, thereby realizing cross-regional access of terminal devices in two regions, and solving the problem in the related technology that the terminal devices of an enterprise within the country cannot realize access to terminal devices outside the country.

[0013] In a third aspect, the present invention provides an SDWAN cross-border networking device for executing the SDWAN cross-border networking method of the second aspect, the device comprising: a receiving module for receiving a first access request information issued by a first terminal device; a first sending module for sending the first access request information to a first high-performance gateway, so that the first high-performance gateway forwards the first access request information to the second terminal device through a second high-performance gateway and a second network access device; a second sending module for sending the feedback information to the first terminal device when feedback information sent by the second terminal device based on the first access request information is received.

[0014] In a fourth aspect, the present invention provides a computer device, comprising: a memory and a processor, the memory and the processor are communicatively connected to each other, computer instructions are stored in the memory, and the processor executes the SDWAN cross-border networking method of the second aspect by executing the computer instructions.

[0015] In a fifth aspect, the present invention provides a computer-readable storage medium having computer instructions stored thereon, the computer instructions being used to enable a computer to execute the above-mentioned second aspect or the SDWAN cross-border networking method.

[0016] In a sixth aspect, the present invention provides a computer program product, comprising computer instructions, which are used to enable a computer to execute the SDWAN cross-border networking method of the second aspect. BRIEF DESCRIPTION OF THE DRAWINGS

[0017] In order to more clearly illustrate the specific implementation methods of the present invention or the technical solutions in the prior art, the drawings required for use in the specific implementation methods or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are some implementation methods of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.

[0018] Figure 1 is a structural block diagram of the SDWAN cross-border networking system according to an embodiment of the present invention;

[0019] Figure 2 is a schematic diagram of a specific example of the SDWAN cross-border networking system according to an embodiment of the present invention;

[0020] Figure 3 It is a flowchart of the SDWAN cross-border networking method according to an embodiment of the present invention;

[0021] Figure 4 is a structural block diagram of an SDWAN cross-border networking device according to an embodiment of the present invention;

[0022] Figure 5 It is a schematic diagram of the hardware structure of a computer device according to an embodiment of the present invention. DETAILED DESCRIPTION

[0023] In order to make the purpose, technical solution and advantages of the embodiments of the present invention clearer, the technical solution in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments are part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative work are within the scope of protection of the present invention.

[0024] In related technologies, enterprise branches can build a secure enterprise network by opening Software Defined Wide Area Network (SDWAN) product services. The network contains multiple access point devices. Based on the communication connection between different access point devices, the access point devices can forward the access data of different terminals, thereby realizing data access between different terminals. However, when an enterprise's branches have both domestic and overseas sites, since different countries have certain requirements for data security and compliance, building a secure and compliant enterprise network cannot be simply achieved through domestic SDWAN product services, and the enterprise's terminal devices at home and abroad cannot access each other.

[0025] In view of this, an embodiment of the present application provides a SDWAN cross-border networking system to realize SDWAN cross-border networking. The system provided by the present invention includes a first terminal device, a first network access device, and a first high-performance gateway arranged in a first area, and a second terminal device, a second network access device, and a second high-performance gateway arranged in a second area. The first high-performance gateway and the second high-performance gateway provide a cross-regional dedicated link for the service provider. When the first terminal device needs to access the second terminal device, the corresponding first access request information is forwarded to the second terminal device through the first network access device, the first high-performance gateway, the second high-performance gateway, and the second network access device. The feedback information returned by the second terminal device based on the access request is sent to the first terminal device in turn through the second network access device, the second high-performance gateway, the first high-performance gateway, and the first network access device, thereby realizing cross-regional access of terminal devices in the two areas. After the cross-regional dedicated link between the first area and the second area is opened, the terminal devices in the first area and the terminal devices in the second area can form a cross-regional enterprise network, and the host connected to the client terminal device can be accessed across regions.

[0026] In this embodiment, a SDWAN cross-border networking system is provided. Figure 1 : is a structural block diagram of the SDWAN cross-border networking system according to an embodiment of the present invention, the system comprising:

[0027] A first terminal device 101, a first network access device 102, and a first high-performance gateway 103 are arranged in the first area, and a second terminal device 104, a second network access device 105, and a second high-performance gateway 106 are arranged in the second area.

[0028] Exemplarily, the first area may include but is not limited to a domestic area, and the second area may be any area outside the country. The first terminal device 101 and the second terminal device 104 may be EDGE devices set in the corresponding area. The EDGE device may be a SDWAN EDGE device, which mainly refers to the export customer terminal equipment (Customer Premise Equipment, CPE) of the corporate headquarters, branch, data center or cloud site. It is the initiation and termination point of the SDWAN tunnel and can also be regarded as the boundary point of the SDWAN network. The first network access device 102 and the second network access device 105 may be point-of-presence (POP) devices set in the corresponding area, and the first high-performance gateway 103 and the second high-performance gateway 106 may be XGW devices set in the corresponding area. The XGW device provides high-performance network forwarding capabilities. In the embodiment of the present application, the first area includes multiple EDGE devices and multiple POP devices, each POP device is connected to the EDGE device in the sub-area it is responsible for, and multiple XGW devices may also be set to establish cross-border dedicated links with different overseas areas. The embodiment of the present application does not limit the number of EDGE devices, POP devices and XGW devices, as long as cross-regional communication can be achieved.

[0029] The first network access device 102 is used to receive the first access request information sent by the first terminal device 101 , and send the first access request information to the first high-performance gateway 103 , where the first access request information is information for accessing the second terminal device 104 .

[0030] Exemplarily, after receiving the first access request information sent by the host connected thereto, the first terminal device 101 forwards the first access request information to the first network access device 102, and the first network access device 102 forwards the first access request information to the first high-performance gateway.

[0031] The first high-performance gateway 103 is communicatively connected to the second high-performance gateway 106 , and the first network access device 102 is used to send the first access request information to the second high-performance gateway 106 .

[0032] Exemplarily, the first high-performance gateway 103 sends the received first access request information to the second high-performance gateway 106 .

[0033] The second high-performance gateway 106 is used to send the first access request information to the second terminal device 104 through the second network access device 105, and is also used to receive feedback information sent by the second terminal device 104 based on the first access request information, and send the feedback information to the first high-performance gateway 103, so that the first high-performance gateway 103 forwards the feedback information to the first terminal device 101 through the first network access device.

[0034] Exemplarily, the second high-performance gateway 106 sends the first access request information to the second terminal device 104 through the second network access device 105, and the feedback information sent by the second terminal device 104 based on the first access request information is returned to the first terminal device in sequence through the second network access device 105, the second high-performance gateway 106, the first high-performance gateway 103 and the first network access device 102. Similarly, when the second terminal device needs to send access to the first terminal device, it can also be done through the established cross-region dedicated line link, which will not be repeated here.

[0035] The SDWAN cross-border networking system provided in this embodiment includes a first terminal device, a first network access device, and a first high-performance gateway set in the first area, and a second terminal device, a second network access device, and a second high-performance gateway set in the second area. The first high-performance gateway and the second high-performance gateway provide a cross-regional dedicated link for the service provider. When the first terminal device needs to access the second terminal device, the corresponding first access request information is forwarded to the second terminal device through the first network access device, the first high-performance gateway, the second high-performance gateway, and the second network access device. The feedback information returned by the second terminal device based on the access request is sent to the first terminal device in turn through the second network access device, the second high-performance gateway, the first high-performance gateway, and the first network access device, thereby realizing cross-regional access of terminal devices in the two areas. After the cross-regional dedicated link between the first area and the second area is opened, the terminal devices in the first area and the terminal devices in the second area can form a cross-regional enterprise network, and the host connected to the client terminal device can be accessed across regions.

[0036] In an optional embodiment, the system further includes a first controller and a second controller;

[0037] The first controller is connected to the first terminal device 101, the first network access device 102, and the first high-performance gateway 103 respectively. The first controller is used to issue the network configuration between the first terminal device 101 and the first network access device 102 and the network configuration between the first network access device 102 and the first high-performance gateway 103, and is also used to issue a virtual extended LAN tunnel to the first high-performance gateway;

[0038] The second controller is respectively connected to the second terminal device 104, the second network access device 105, and the second high-performance gateway 106. The second controller is used to send the network configuration between the second terminal device 104 and the second network access device 105, the network configuration between the second network access device 105 and the second high-performance gateway 106, and is also used to send a virtual extended LAN tunnel to the second high-performance gateway 106.

[0039] Exemplarily, in the embodiment of the present application, the controller is responsible for service activation, and the steps of service activation are:

[0040] 1. The customer purchases EDGE equipment for each domestic site.

[0041] 2. The controller chooses to activate the EDGE device to the nearest POP device, configures the Border Gateway Protocol (BGP) on both the EDGE device and the POP device, and publishes the subnet of the site through BGP. A virtual extended LAN identifier (VXLAN Network Identifier, VNI) is allocated to the customer to isolate different customer routes between POP devices.

[0042] 3. The SDWAN controller sends a fully interconnected VxLAN network configuration between the POPs connected to the customer's EDGE.

[0043] 4. When a customer purchases an overseas EDGE device, it will be activated on an overseas POP by a domestic controller. The customer's account, device information, etc. will be stored in the domestic controller database. The overseas controller has no perception of the domestic EDGE or customer data.

[0044] 5. Customers select cross-border links for components.

[0045] 6. The SDWAN controller selects the appropriate domestic and overseas export device XGW, sends it a VxLAN tunnel, and connects the domestic and overseas SDWAN networks.

[0046] 7. At this point, domestic and overseas sites have opened up each other's routes through the BGP protocol, and the company's domestic and overseas intranets can communicate with each other.

[0047] 8. The devices in the overseas network publish the preset network segment (which can be 0.0.0.0 / 0) and the subnet of the overseas DNS address, and publish it to each POP device through the BGP protocol.

[0048] 9. Configure the route isolation function on the domestic EDGE device and filter out the 0.0.0.0 / 0 route published by the overseas EDGE device so that it is synchronized only to the domestic POP.

[0049] 10. Configure the cross-border whitelist function on the EDGE device. Requests that hit the specified whitelist are forwarded to the POP device. On the POP device, the route matching 0.0.0.0 / 0 is forwarded to the overseas EDGE device.

[0050] The above process is the process for domestic users to open domestic and overseas sites. Overseas users operate on overseas controllers, and user data is stored in overseas databases. The opening process is the same as that of domestic users. Overseas can be divided into multiple regions, each of which deploys a controller system, and each controller processes and stores user data in this region. Steps 8 to 10 are to open domestic sites to access the overseas Internet, and you need to configure the overseas Internet whitelist. Domestic sites access the domestic Internet by default, and routes that hit the whitelist will be forwarded to the overseas Internet.

[0051] Resources such as VNI allocated by domestic and overseas controllers need to be planned and segmented in advance to avoid duplication.

[0052] Specifically, the system may also include a SDWAN POP protocol proxy server and a SDWAN EDGE protocol proxy server. The schematic diagram of the system composition may be as follows: Figure 2 As shown. The SDWAN POP protocol proxy server manages the POP device and records the area where the POP is located. The POP is managed by the POP protocol proxy in this area and synchronized to the database of other areas. When the controller sends the configuration, if it finds that the POP is in another area, it will send the request to the protocol proxy service that manages it, so that it can complete the configuration delivery.

[0053] As the server, the SDWAN EDGE protocol proxy server is responsible for handling the EDGE connection in this area. By default, the EDGE device will try to connect to the protocol stack proxy addresses of all regions. After receiving the connection request, the EDGE protocol stack proxy obtains the device ID, queries the delivery record to find the location of the box. If it cannot be found locally, it will refuse the connection. After the query, it will reply to the EDGE protocol proxy address that the EDGE device needs to connect to. The EDGE device will connect to its EDGE protocol proxy service again. When the controller sends the configuration to the box, it will query the protocol proxy service address where the box is located, and it will be responsible for sending the configuration of the box. The box can be understood as an EDGE device.

[0054] In an optional implementation, the first network access device is further configured to obtain and receive second access request information sent by the first terminal device, and forward the second access request information to a corresponding terminal device in the first area.

[0055] Exemplarily, in the embodiment of the present application, the second network access device receives the second access request information and directly sends the second access request to the corresponding terminal device in the territory. When it is impossible to send it directly, it is forwarded to the corresponding terminal device in the territory through other network access devices. The second access request information is an access request to access the domestic device.

[0056] In an optional implementation, the first terminal device is used to store the Internet whitelist of the second area sent by the controller into a preset memory when receiving the Internet whitelist, where the Internet whitelist includes multiple target access addresses.

[0057] In an optional implementation, the first terminal device is further configured to obtain initial access request information, and if there is a target access address in the Internet whitelist that is the same as the access address of the initial access request information, the access request information is sent to the first network access device as the first access request information. Exemplarily, the initial access request is an access request sent by a host connected to the first terminal device and received by the first terminal device.

[0058] In the system provided in the embodiment of the present application, both domestic and foreign controllers can manage POPs around the world and issue configurations to them. The EDGE protocol agent selects the EDGE protocol agent address through the shipping address and the registration information in the controller. The box information and tenant information of cross-border users are only stored in the database of this area, not in other areas. Cross-border users forward traffic through cross-border channels established by dedicated XGW devices to facilitate data supervision. Multiple SDWAN controllers are deployed globally, managing one set of POP global resources, and a small number of global resources such as VNI are segmented to ensure that the configuration of POP global resources does not conflict.

[0059] According to an embodiment of the present invention, an embodiment of an SDWAN cross-border networking method is provided. It should be noted that the steps shown in the flowchart of the accompanying drawings can be executed in a computer system such as a set of computer executable instructions, and although the logical order is shown in the flowchart, in some cases, the steps shown or described can be executed in an order different from that shown here.

[0060] In this embodiment, a SDWAN cross-border networking method is provided, which can be used for the first network access device of the SDWAN cross-border networking system in the above-mentioned embodiment. Figure 3 is a flow chart of the SDWAN cross-border networking method according to an embodiment of the present invention. Figure 3 As shown, the process includes the following steps:

[0061] Step S301: Receive a first access request message sent by a first terminal device. For details, please refer to the description of the relevant contents in the above embodiment, which will not be repeated here.

[0062] Step S302: send the first access request information to the first high-performance gateway, so that the first high-performance gateway forwards the first access request information to the second terminal device through the second high-performance gateway and the second network access device. For details, please refer to the description of the relevant contents in the above embodiment, which will not be repeated here.

[0063] Step S303: When receiving feedback information sent by the second terminal device based on the first access request information, the feedback information is sent to the first terminal device. For details, please refer to the description of the relevant contents in the above embodiment, which will not be repeated here.

[0064] In the SDWAN cross-border networking method provided by this embodiment, a first network access device receives a first access request message sent by a first terminal device; sends the first access request to a first high-performance gateway, so that the first high-performance gateway forwards the target access request to the second terminal device through a second high-performance gateway and a second network access device; when feedback information sent by the second terminal device based on the first access request message is received, the feedback information is sent to the first terminal device, thereby realizing cross-regional access of terminal devices in two regions, and solving the problem in related technologies that terminal devices within the country of an enterprise cannot realize access to terminal devices outside the country.

[0065] In this embodiment, a SDWAN cross-border networking device is also provided, which is used to implement the above embodiments and preferred implementation modes, and the descriptions that have been made will not be repeated. As used below, the term "module" can implement a combination of software and / or hardware for a predetermined function. Although the devices described in the following embodiments are preferably implemented in software, the implementation of hardware, or a combination of software and hardware, is also possible and conceived.

[0066] This embodiment provides a SDWAN cross-border networking device, such as Figure 4 As shown, including:

[0067] Receiving module 401, used to receive first access request information sent by a first terminal device;

[0068] A first sending module 402 is used to send the first access request information to the first high-performance gateway, so that the first high-performance gateway forwards the first access request information to the second terminal device through the second high-performance gateway and the second network access device;

[0069] The second sending module 403 is configured to send the feedback information to the first terminal device upon receiving the feedback information sent by the second terminal device based on the first access request information.

[0070] The further functional description of each of the above modules and units is the same as that of the above corresponding embodiments and will not be repeated here.

[0071] The SDWAN cross-border networking device in this embodiment is presented in the form of a functional unit, where the unit refers to an ASIC (Application Specific Integrated Circuit) circuit, a processor and memory that executes one or more software or fixed programs, and / or other devices that can provide the above functions.

[0072] The embodiment of the present invention also provides a computer device having the above Figure 4 The SDWAN cross-border networking device shown.

[0073] See also Figure 5 , Figure 5 is a schematic diagram of the structure of a computer device provided by an optional embodiment of the present invention, such as Figure 5 As shown, the computer device includes: one or more processors 10, a memory 20, and interfaces for connecting various components, including high-speed interfaces and low-speed interfaces. Various components are connected to each other using different buses for communication, and can be installed on a common mainboard or installed in other ways as needed. The processor can process the instructions executed in the computer device, including instructions stored in or on the memory to display the graphical information of the GUI on an external input / output device (such as, a display device coupled to the interface). In some optional embodiments, if necessary, multiple processors and / or multiple buses can be used together with multiple memories and multiple memories. Similarly, multiple computer devices can be connected, and each device provides some necessary operations (for example, as a server array, a group of blade servers, or a multi-processor system). Figure 5 A processor 10 is taken as an example.

[0074] The processor 10 may be a central processing unit, a network processor or a combination thereof. The processor 10 may further include a hardware chip. The hardware chip may be a dedicated integrated circuit, a programmable logic device or a combination thereof. The programmable logic device may be a complex programmable logic device, a field programmable gate array, a general purpose array logic or any combination thereof.

[0075] The memory 20 stores instructions executable by at least one processor 10, so that the at least one processor 10 executes the method shown in the above embodiment.

[0076] The memory 20 may include a program storage area and a data storage area, wherein the program storage area may store an operating system, an application required for at least one function; the data storage area may store data created according to the use of the computer device, etc. In addition, the memory 20 may include a high-speed random access memory, and may also include a non-transient memory, such as at least one disk storage device, a flash memory device, or other non-transient solid-state storage device. In some optional embodiments, the memory 20 may optionally include a memory remotely arranged relative to the processor 10, and these remote memories may be connected to the computer device via a network. Examples of the above-mentioned network include, but are not limited to, the Internet, an intranet, a local area network, a mobile communication network, and combinations thereof.

[0077] The memory 20 may include a volatile memory, such as a random access memory; the memory may also include a non-volatile memory, such as a flash memory, a hard disk or a solid state drive; the memory 20 may also include a combination of the above types of memory.

[0078] The computer device further comprises a communication interface 30 for the computer device to communicate with other devices or a communication network.

[0079] The embodiment of the present invention also provides a computer-readable storage medium. The method according to the embodiment of the present invention can be implemented in hardware, firmware, or can be implemented as a computer code that can be recorded in a storage medium, or can be implemented as a computer code that is originally stored in a remote storage medium or a non-temporary machine-readable storage medium and will be stored in a local storage medium through a network download, so that the method described herein can be stored in such software processing on a storage medium using a general-purpose computer, a dedicated processor, or programmable or dedicated hardware. Among them, the storage medium can be a magnetic disk, an optical disk, a read-only storage memory, a random access memory, a flash memory, a hard disk or a solid-state hard disk, etc.; further, the storage medium can also include a combination of the above types of memories. It can be understood that a computer, a processor, a microprocessor controller, or programmable hardware includes a storage component that can store or receive software or computer code. When the software or computer code is accessed and executed by a computer, a processor, or hardware, the method shown in the above embodiment is implemented.

[0080] A part of the present invention may be applied as a computer program product, such as a computer program instruction, which, when executed by a computer, can call or provide the method and / or technical solution according to the present invention through the operation of the computer. Those skilled in the art should understand that the existence of the computer program instruction in a computer-readable medium includes, but is not limited to, a source file, an executable file, an installation package file, etc., and accordingly, the way in which the computer program instruction is executed by the computer includes, but is not limited to: the computer directly executes the instruction, or the computer compiles the instruction and then executes the corresponding compiled program, or the computer reads and executes the instruction, or the computer reads and installs the instruction and then executes the corresponding installed program. Here, the computer-readable medium may be any available computer-readable storage medium or communication medium accessible to the computer.

[0081] Although the embodiments of the present invention have been described in conjunction with the accompanying drawings, those skilled in the art may make various modifications and variations without departing from the spirit and scope of the present invention, and such modifications and variations are all within the scope defined by the appended claims.

Claims

1. A SDWAN cross-border networking system, characterized in that: The system comprises: a first terminal device, a first network access device, and a first high-performance gateway arranged in a first area, and a second terminal device, a second network access device, and a second high-performance gateway arranged in a second area; The first network access device is used to receive first access request information sent by the first terminal device, and send the first access request information to a first high-performance gateway, where the first access request information is information for accessing the second terminal device; The first high-performance gateway is communicatively connected to the second high-performance gateway, and the first network access device is used to send the first access request information to the second high-performance gateway; The second high-performance gateway is used to send the first access request information to the second terminal device through the second network access device, and is also used to receive feedback information sent by the second terminal device based on the first access request information, and send the feedback information to the first high-performance gateway, so that the first high-performance gateway forwards the feedback information to the first terminal device through the first network access device.

2. The system according to claim 1, characterized in that The system also includes a first controller and a second controller; The first controller is connected to the first terminal device, the first network access device, and the first high-performance gateway respectively, and the first controller is used to issue the network configuration between the first terminal device and the first network access device and the network configuration between the first network access device and the first high-performance gateway, and is also used to issue a virtual extended LAN tunnel to the first high-performance gateway; The second controller is respectively connected to the second terminal device, the second network access device, and the second high-performance gateway. The second controller is used to send the network configuration between the second terminal device and the second network access device, the network configuration between the second network access device and the second high-performance gateway, and is also used to send a virtual extended LAN tunnel to the second high-performance gateway.

3. The system according to claim 1 or 2, characterized in that: The first network access device is further configured to receive second access request information sent by the first terminal device, and forward the second access request information to a corresponding terminal device in the first area.

4. The system according to claim 2, characterized in that The first terminal device is used for storing the Internet whitelist of the second area sent by the controller into a preset memory when receiving the Internet whitelist, wherein the Internet whitelist includes multiple target access addresses.

5. The system according to claim 4, characterized in that The first terminal device is also used to obtain initial access request information, and if there is a target access address in the Internet whitelist that is the same as the access address of the initial access request information, the access request information is sent to the first network access device as the first access request information.

6. A SDWAN cross-border networking method, characterized in that: The first network access device applied to the SDWAN cross-border networking system according to any one of claims 1 to 5, the method comprising: Receiving first access request information sent by a first terminal device; Sending the first access request information to a first high-performance gateway, so that the first high-performance gateway forwards the first access request information to a second terminal device through a second high-performance gateway and a second network access device; When feedback information sent by the second terminal device based on the first access request information is received, the feedback information is sent to the first terminal device.

7. A SDWAN cross-border networking device, characterized in that: Used to execute the SDWAN cross-border networking method according to claim 6, the device comprises: A receiving module, used to receive first access request information sent by a first terminal device; A first sending module, configured to send the first access request information to a first high-performance gateway, so that the first high-performance gateway forwards the first access request information to a second terminal device through a second high-performance gateway and a second network access device; The second sending module is configured to send the feedback information to the first terminal device upon receiving the feedback information sent by the second terminal device based on the first access request information.

8. A computer device, characterized in that: include: A memory and a processor, wherein the memory and the processor are communicatively connected to each other, the memory stores computer instructions, and the processor executes the SDWAN cross-border networking method described in claim 6 by executing the computer instructions.

9. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores computer instructions, and the computer instructions are used to enable a computer to execute the SDWAN cross-border networking method described in claim 7.

10. A computer program product, characterized in that It includes computer instructions, and the computer instructions are used to enable a computer to execute the SDWAN cross-border networking method described in claim 6.

Images