A resource download acceleration method and system based on intranet CDN caching

Abstract

The present invention belongs to the field of communication technologies, and specifically discloses a resource download acceleration method and system based on an intranet CDN cache. The method includes that when the download domain name belongs to the hosts list, the DNS domain name resolution server sends the download domain name and the IP address to the intranet CDN server. The intranet CDN server completes an SSL connection or verification with the external network source station, then determines whether there is a resource cache in the intranet CDN server, forwards the cache to the proxy buffer server, and the intranet user directly downloads the resource from the proxy buffer server. The system includes a request discrimination module, an intranet CDN server, and a proxy buffer server. The present invention utilizes the CDN system to apply to resource downloads on different intranets and multi-source websites, and the resource downloads between intranets are not affected, enabling users in the enterprise intranet to enjoy faster download speeds and more stable network services.

Description

Technical Field

[0001] The present invention relates to the field of communication technologies, and particularly to a method and system for accelerating resource download based on an intranet CDN cache. Background Art

[0002] In the modern digital society, the resource content on the Internet is endless. For example, electronic games have become an important part of people's daily lives. However, for the majority of users, when resource content (such as new games) is released and updated, there are often peak download volumes, resulting in network congestion where the network becomes unusable or extremely slow for downloading, leading to long resource download times and affecting the user experience; or increasing the egress bandwidth to improve the network speed, but increasing the bandwidth greatly increases the cost.

[0003] A content delivery network (CDN for short) refers to a computer network system interconnected through the Internet. By using servers closest to each user, it can send music, pictures, videos, applications, and other files to users faster and more reliably, providing high-performance, scalable, and low-cost network content delivery to users. Applying the CDN system model to the resource download of multi-source websites can effectively improve the resource download speed.

[0004] It should be noted that the information disclosed in the above background art section is only used to enhance the understanding of the background of the present invention, and thus may include information that does not constitute the prior art known to those of ordinary skill in the art. Summary of the Invention

[0005] The object of the present invention is to solve the technical problems existing in the background art. To this end, a method and system for accelerating resource download based on an intranet CDN cache are provided.

[0006] To achieve the above object, the technical solution adopted by the present invention is as follows:

[0007] A method for accelerating resource download based on an intranet CDN cache includes the following steps:

[0008] Step S1: An intranet user requests to download a resource from the network;

[0009] Step S2: The system determines whether the download domain name of the resource requested by the intranet user to be downloaded from the network belongs to the hosts list;

[0010] If it belongs to the hosts list, the DNS domain name resolution server resolves the download domain name of the internal network user's request for network download resources and obtains the IP address corresponding to the download domain name, and sends the download domain name and its corresponding IP address to the internal network CDN server;

[0011] Step S3: The internal network CDN server determines whether to establish an SSL connection with the external network source for the first time based on the corresponding IP address;

[0012] If it is the first time to establish an SSL connection, an SSL connection is established between the internal network CDN server and the external network source;

[0013] If it is not the first time to establish an SSL connection, the internal network CDN server verifies the validity of the CA certificate of the external network source and checks whether the CN in the CA certificate matches the download domain name, so as to perform SSL connection verification;

[0014] Step S4: After the internal network CDN server and the external network source complete the first SSL connection or non-first SSL connection verification, check the resource cache of the internal network CDN server;

[0015] Step S5: Determine whether there is a cache of the user's request for network download resources in the internal network CDN server;

[0016] If there is, the internal network CDN server forwards the cache of the user's request for network download resources to the proxy buffer server corresponding to the internal network user;

[0017] If not, the internal network CDN server pulls and stores the resources requested by the user for network download from the external network source. While the internal network CDN server is pulling and downloading, it forwards the cache of the user's request for network download resources to the proxy buffer server corresponding to the internal network user;

[0018] Step S5: The internal network user directly downloads resources from the proxy buffer server.

[0019] The following is a further limited technical solution of the method in the present invention. The hosts list in step S2 is managed separately by each internal network management end and stored in the hosts file. The hosts file is set as a system file without an extension. The hosts list includes the website domain name and its corresponding IP address.

[0020] The following is a further limited technical solution of the method in the present invention. In the process of the internal network management end managing the hosts list, it includes:

[0021] The internal network management end uses a notepad tool to open the hosts file;

[0022] When the system starts accelerating the download of external network source station resources, the internal network management end adds the website domain name of the corresponding external network source station and its corresponding IP address to the hosts list;

[0023] When the system shuts down the accelerated download of external network source station resources, the internal network management end deletes the website domain name of the corresponding external network source station and its corresponding IP address from the hosts list.

[0024] The following is a further limited technical solution of the method in the present invention. In step S2, after the DNS domain name resolution server resolves the download domain name and its corresponding IP address, the download domain name and its corresponding IP address are sent to the corresponding internal network to determine whether the IP address belongs to the hosts list; if it belongs to the hosts list, the system returns a result that the hosts list is correct to the internal network management end; if it does not belong to the hosts list, the system returns a result that the hosts list is incorrect to the internal network management end.

[0025] The following is a further limited technical solution of the method in the present invention. In step S2, when the download domain name for the internal network user to request network download resources does not belong to the hosts list, the DNS domain name resolution server routes it to the external network source station, and the external network source station responds to the resource download request of the internal network user;

[0026] In step S3, if the internal network CDN server and the external network source station cannot complete the first SSL connection or the non-first SSL connection verification, the DNS domain name resolution server routes it to the external network source station, and the external network source station responds to the resource download request of the internal network user.

[0027] The following is a further limited technical solution of the method in the present invention. The resources directly responded by the external network source station to the internal network user are forwarded and cached to the internal network CDN server through the corresponding proxy buffer server, and the website domain name and IP address of the corresponding external network source station are sent to the internal network management end for the internal network management end to confirm to add the website domain name and IP address of the corresponding external network source station to the hosts list.

[0028] The following is a further limited technical solution of the method in the present invention. When making the first SSL connection between the internal network CDN server and the external network source station, it includes:

[0029] The internal network CDN server sends a connection request to the external network source station, where the connection request includes the supported SSL protocol version, encryption algorithm list, random number, and a CA certificate containing the public key;

[0030] The external network source station returns a request response to the internal network CDN server, where the request response includes the selected protocol version, encryption algorithm, and a CA certificate containing the public key;

[0031] The internal network CDN server verifies the validity of the CA certificate of the external network origin server;

[0032] The internal network CDN server generates a pre-master key, encrypts it with the public key of the CA certificate of the external network origin server, and sends it to the external network origin server;

[0033] The external network origin server decrypts it using the public key of the CA certificate to obtain the pre-master key, so that both the internal network CDN server and the external network origin server have the pre-master key and the random number;

[0034] The internal network CDN server and the external network origin server generate a session key using the pre-master key and the random number, and then perform encrypted communication using the selected encryption algorithm and the session key, thereby realizing an SSL connection.

[0035] A resource download acceleration system based on internal network CDN caching, used to implement the above-mentioned resource download acceleration method based on internal network CDN caching, including:

[0036] A request discrimination module, deployed in each internal network, is used to receive the resource download request of the internal network user, judge whether the download domain name of the internal network user requesting to download resources from the network belongs to the hosts list, and send the download domain name belonging to the hosts list to the DNS domain name resolution server for domain name resolution;

[0037] The internal network CDN server is used to receive the download domain name and its corresponding IP address sent by the DNS domain name resolution server, and perform an SSL connection, SSL connection verification and resource download between the internal network CDN server and the external network origin server based on the corresponding IP address, and communicate with each proxy buffer server, and cache and forward the resources to the proxy buffer server;

[0038] The proxy buffer server is deployed in each internal network, and is used to receive and store the resources of the external network origin server, and forward the resources to the internal network user based on the request of the internal network user.

[0039] The following is the technical solution further defined in the system of the present invention, and further includes:

[0040] The internal network user requests a resource download module, which is deployed on the internal network user side and is used for the internal network user to request to download resources from the network;

[0041] The hosts list editing module is deployed on the internal network management side, and is used to open the hosts list using a notepad tool and add or delete the website domain name and its corresponding IP address of the corresponding external network origin server in the hosts list.

[0042] The following are the further defined technical solutions of the system in the present invention. The intranet CDN server includes an SSL connection and verification module, a resource caching module, a resource cache check module, a cache forwarding module, and a module for requesting the download of resources from the external network origin server;

[0043] The SSL connection and verification module is used to perform an SSL connection and SSL connection verification between the intranet CDN server and the external network origin server based on the corresponding IP address;

[0044] The resource caching module is used to store the resources downloaded by the intranet users' requests for the network;

[0045] The resource cache check module is used to determine whether there is a cache of the resources downloaded by the users' requests for the network in the intranet CDN server;

[0046] The cache forwarding module is used to forward the cache of the resources downloaded by the intranet users' requests for the network to the proxy buffer server corresponding to the intranet users;

[0047] The module for requesting the download of resources from the external network origin server is used to request the download of resources from the external network origin server.

[0048] Compared with the prior art, the present invention has the following technical effects:

[0049] The present invention applies the CDN system to the resource download between different intranets and multiple source websites, and the intranets are not affected by resource downloads from each other, enabling the users in the enterprise intranet to enjoy faster download speeds and more stable network services. For enterprises, it not only improves the work efficiency of enterprise employees but also helps enterprises save a large amount of bandwidth costs.

[0050] The present invention will be further described below in conjunction with the accompanying drawings and embodiments. Description of the Drawings

[0051] In order to more clearly illustrate the technical solutions in the embodiments of the present invention or the prior art, the following will briefly introduce the accompanying drawings required for use in the embodiments or the prior art. Obviously, the accompanying drawings in the following description are only some embodiments of the present invention, and those of ordinary skill in the art can obtain other drawings based on these drawings without creative efforts.

[0052] Figure 1 is the flowchart of the method of the present invention;

[0053] Figure 2 is a screenshot of the interface for finding the hosts file in the present invention;

[0054] Figure 3 is a screenshot of the interface for opening the hosts file using the Notepad tool in the present invention;

[0055] Figure 4 It is a screenshot of the Notepad interface after the hosts file of the present invention is opened, and it has two website domain names of Steam and their corresponding IP addresses;

[0056] Figure 5 It is in the present invention Figure 4 A screenshot of the Notepad interface for adding one website domain name of Steam and its corresponding IP address to the hosts list;

[0057] Figure 6 It is in the present invention Figure 4 A screenshot of the Notepad interface for deleting one website domain name of Steam and its corresponding IP address from the hosts list;

[0058] Figure 7 It is a flowchart of the specific working process of the present invention. Detailed implementation manners

[0059] To make the above objects, features and advantages of the present invention more obvious and understandable, the following describes the detailed implementation manners of the present invention in conjunction with the accompanying drawings. Many specific details are set forth in the following description in order to fully understand the present invention. However, the present invention can be implemented in many other ways different from those described herein, and those skilled in the art can make similar improvements without departing from the connotation of the present invention. Therefore, the present invention is not limited by the specific embodiments disclosed below.

[0060] This embodiment provides a method for accelerating resource download based on an intranet CDN cache and a system for accelerating resource download based on an intranet CDN cache.

[0061] As Figure 1 shown, a method for accelerating resource download based on an intranet CDN cache specifically includes the following steps:

[0062] Step S1: An intranet user requests to download a network resource, and the corresponding download request includes a download domain name.

[0063] Step S2: The request discrimination module of the system determines whether the download domain name of the network resource requested by the intranet user belongs to the hosts list.

[0064] If it belongs to the hosts list, the DNS domain name resolution server resolves the download domain name of the network resource requested by the intranet user and obtains the IP address corresponding to the download domain name, and sends the download domain name and its corresponding IP address to the intranet CDN server.

[0065] If it does not belong to the hosts list, the DNS domain name resolution server routes it to the external network origin station, and the external network origin station responds to the resource download request of the intranet user.

[0066] It should be noted that the hosts list is managed separately by each intranet management terminal and stored in the hosts file. The hosts file is set as a system file without an extension. The hosts list includes website domain names and their corresponding IP addresses.

[0067] During the process of the intranet management terminal managing the hosts list, it includes the following:

[0068] 1. The intranet management terminal uses the Notepad tool to open the hosts file: Specifically, as Figure 2 shown, enter the path (C:\Windows\System32\drivers\etc) to find the hosts file; as Figure 3 shown, then use the Notepad tool to open the hosts file.

[0069] 2. When the system starts to accelerate the download of resources from an external network source site (such as Steam), the intranet management terminal adds the website domain names in Steam and their corresponding IP addresses to the hosts list. As Figure 4 shown, before adding, the hosts list has the website domain names in Steam and their corresponding IP addresses ("10.0.173.194 st.dl.eccdnx.com", "10.0.173.194 dl.steam.clngaa.com"). After adding, as Figure 5 shown, the hosts list has the website domain names in Steam and their corresponding IP addresses ("10.0.173.194 st.dl.eccdnx.com", "10.0.173.194 dl.steam.clngaa.com", "10.0.173.194 xz.pphimalayanrt.com").

[0070] It should be noted that Steam is an electronic game digital distribution platform launched by Valve Corporation.

[0071] 3. When the system shuts down the accelerated download of resources from an external network source site (such as Steam), the intranet management terminal deletes the website domain names in Steam and their corresponding IP addresses from the hosts list. As Figure 4 shown, before deletion, the hosts list has the website domain names in Steam and their corresponding IP addresses ("10.0.173.194 st.dl.eccdnx.com", "10.0.173.194 dl.steam.clngaa.com"). After deletion, as Figure 6As shown, the hosts list has the website domain names in Steam and their corresponding IP addresses ("10.0.173.194 st.dl.eccdnx.com").

[0072] After the DNS domain name resolution server resolves the download domain name and its corresponding IP address, it sends the download domain name and its corresponding IP address to the corresponding intranet to determine whether the IP address belongs to the hosts list; if it belongs to the hosts list, the system returns a result indicating that the hosts list is correct to the intranet management terminal; if it does not belong to the hosts list, the system returns a result indicating that the hosts list is incorrect to the intranet management terminal. If a result indicating that the hosts list is incorrect appears, the intranet management terminal determines whether the system has the following two situations: Situation 1: The system is under external attack, inducing the intranet CDN server to jump to other risky external network source stations, and the intranet management terminal intervenes in a timely manner to avoid risks; Situation 2: An error occurs in the website domain name or IP address filled in the hosts list edited and managed by the intranet management terminal, and the intranet management terminal discovers and corrects the editing error in a timely manner.

[0073] Step S3: The intranet CDN server determines whether to establish an SSL connection with the external network source station for the first time based on the corresponding IP address.

[0074] If it is the first time to establish an SSL connection, it specifically includes the following content:

[0075] 1. The intranet CDN server sends a connection request to the external network source station, where the connection request includes the supported SSL protocol version, encryption algorithm list, random number, and a CA certificate containing the public key. It should be noted that the intranet CDN server sends the CA certificate containing the public key to the external network source station for the following reason: The external network source station may need to verify the CA certificate of the intranet CDN server for two-way verification, which is determined by the developer of the external network source station and does not affect the specific implementation of the technical solution of the present invention.

[0076] 2. The external network source station returns a request response to the intranet CDN server, where the request response includes the selected protocol version, encryption algorithm, and a CA certificate containing the public key.

[0077] 3. The intranet CDN server verifies the validity of the CA certificate of the external network source station, specifically including whether it is issued by a trusted CA and whether it has expired. It should be noted that when verifying the validity of the CA certificate, manual verification and automatic verification can be used. Among them, manual verification includes: The intranet CDN server sends it to the intranet management terminal and the intranet management terminal conducts manual verification; automatic verification includes: The intranet CDN server directly conducts automatic verification.

[0078] 4. The intranet CDN server generates a pre-master key, encrypts it with the public key of the CA certificate of the external network source station, and sends it to the external network source station.

[0079] 5. The public key of the CA certificate is used by the external network origin server for decryption to obtain the pre-master key, so that both the internal network CDN server and the external network origin server have the pre-master key and the random number.

[0080] 6. The internal network CDN server and the external network origin server use the pre-master key and the random number to generate the session key, and then use the selected encryption algorithm and the session key for encrypted communication, so as to achieve an SSL connection.

[0081] If it is not the first time to establish an SSL connection, it specifically includes the following content:

[0082] The internal network CDN server verifies the validity of the CA certificate of the external network origin server and checks whether the CN in the CA certificate matches the downloaded domain name, so as to perform SSL connection verification. It should be noted that in the CA certificate, "CN" is the abbreviation of "Common Name", which refers to the host name or domain name of the certificate holder.

[0083] The purpose of performing SSL connection verification is that although the internal network CDN server has established an SSL connection with the external network origin server before and downloaded resources, so that the internal network CDN server has resource caching. If the verification cannot be passed at this time, it means that the external network origin server has an abnormality, and its corresponding resources also have risks. Then the internal network CDN server will not send the cache to the user. Therefore, it is necessary to perform SSL connection verification first and then check the resource cache of the internal network CDN server.

[0084] If the internal network CDN server and the external network origin server cannot complete the first SSL connection or the non-first SSL connection verification, the DNS domain name resolution server will route to the external network origin server, and the external network origin server will respond to the resource download request of the internal network user.

[0085] It should be noted that in steps S2 and S3, the resources of the external network origin server directly responded to the internal network user pass through the corresponding proxy buffer server for forwarding and caching to the internal network CDN server, and the website domain name and IP address of the corresponding external network origin server are sent to the internal network management end for the internal network management end to confirm to add the website domain name and IP address of the corresponding external network origin server to the hosts list. Although at this time, the internal network CDN server has the resource cache of the corresponding external network origin server, the system is based on the hosts list. If the internal network management end does not add the website domain name of the external network origin server and its corresponding IP address to the hosts list, then, the next time the internal network user requests to download the same resources of the external network origin server, it is still directly responded by the external network origin server, and the accelerated download cannot be enjoyed.

[0086] Step S4: After the internal network CDN server and the external network origin server complete the first SSL connection or the non-first SSL connection verification, check the resource cache of the internal network CDN server.

[0087] Step S5: Determine whether there is a cache of the network download resource requested by the user on the intranet CDN server.

[0088] If not, the intranet CDN server pulls, downloads, and stores the resource requested by the user for network download from the external network source station (i.e., the first download, and the download speed will be slower). While the intranet CDN server is pulling and downloading, it forwards the cache of the resource requested by the user for network download to the proxy buffer server corresponding to the intranet user. The intranet user directly downloads the resource from the proxy buffer server and enjoys accelerated download. The initial stage of the first download of the resource will be slower.

[0089] If so, the intranet CDN server forwards the cache of the resource requested by the user for network download to the proxy buffer server corresponding to the intranet user. The intranet user directly downloads the resource from the proxy buffer server and enjoys accelerated download. After having a cache, it can reach more than 100 MB / s. Therefore, for a resource with an installation space of 128 GB, it only takes about 18 minutes. Therefore, the improvement of network speed is beneficial to improving the work efficiency of enterprise employees.

[0090] A resource download acceleration system based on intranet CDN cache, used to implement the above-mentioned resource download acceleration method based on intranet CDN cache, including a request discrimination module, an intranet CDN server, a proxy buffer server, an intranet user request resource download module, and a hosts list editing module.

[0091] Specifically:

[0092] The request discrimination module is deployed in each intranet, used to receive the resource download request of the intranet user, determine whether the download domain name of the resource requested by the intranet user for network download belongs to the hosts list, and send the download domain name belonging to the hosts list to the DNS domain name resolution server for domain name resolution.

[0093] The intranet CDN server is used to receive the download domain name and its corresponding IP address sent by the DNS domain name resolution server, perform an SSL connection, SSL connection verification, and resource download between the intranet CDN server and the external network source station based on the corresponding IP address, and establish a communication connection with each proxy buffer server, and forward the resource cache to the proxy buffer server.

[0094] The proxy buffer server is deployed in each intranet, used to receive and store the resources of the external network source station, and forward the resources to the intranet user based on the request of the intranet user.

[0095] The intranet user request resource download module is deployed on the intranet user side, used for the intranet user to request network download resources.

[0096] The hosts list editing module is deployed on the intranet management side and is used to open the hosts list using a notepad tool and add or delete the website domain names of the corresponding external network source stations and their corresponding IP addresses in the hosts list.

[0097] The intranet CDN server includes an SSL connection and verification module, a resource caching module, a resource cache check module, a cache forwarding module, and a module for requesting resource downloads from the external network source station.

[0098] Specifically:

[0099] The SSL connection and verification module is used to perform an SSL connection and SSL connection verification between the intranet CDN server and the external network source station based on the corresponding IP address.

[0100] The resource caching module is used to store the resources requested by the intranet users for network downloads.

[0101] The resource cache check module is used to determine whether there is a cache of the resources requested by the intranet users for network downloads in the intranet CDN server.

[0102] The cache forwarding module is used to forward the cache of the resources requested by the intranet users for network downloads to the proxy buffer server corresponding to the intranet users.

[0103] The module for requesting resource downloads from the external network source station is used to request the download of resources from the external network source station.

[0104] The working process of the method in this embodiment will be further described below, as Figure 7 shown:

[0105] 1. In Intranet A, user a1 sends a download request a1 to request the network download of resource a1, user a2 sends a download request a2 to request the network download of resource a2, and so on. Other users in Intranet A can all send download requests to request the network download of resources.

[0106] In Intranet B, user b1 sends a download request b1 to request the network download of resource b1, user b2 sends a download request b2 to request the network download of resource b1, and so on. Other users in Intranet B can all send download requests to request the network download of resources.

[0107] And so on. Users in different intranets can all send download requests to request the network download of resources according to the settings of their respective intranets and are not affected or restricted by other intranets.

[0108] It should be noted that the download requests a1, a2...b1, b2... all include download domain names.

[0109] 2. The request discrimination module A in the internal network A receives the download requests sent by the users in the internal network A, and obtains the download domain names of the network download resources requested by the internal network A users. The request discrimination module A determines whether the download domain names belong to the hosts list. Among them, the download domain name corresponding to the download request a1 belongs to the hosts list, and the download domain name corresponding to the download request a2 does not belong to the hosts list.

[0110] The request discrimination module B in the internal network B receives the download requests sent by the users in the internal network B, and obtains the download domain names of the network download resources requested by the internal network B users. The request discrimination module B determines whether the download domain names belong to the hosts list. Among them, the download domain name corresponding to the download request b1 belongs to the hosts list, and the download domain name corresponding to the download request b2 does not belong to the hosts list.

[0111] And so on, the request discrimination modules in each internal network respectively determine whether the download domain names of the network download resources requested by the internal network users belong to the hosts list.

[0112] 3. The DNS domain name resolution server resolves the download domain name of the network download resource a1 requested by the internal network user a1 and obtains the IP address corresponding to the download domain name, and sends the download domain name corresponding to the download request a1 and its corresponding IP address to the internal network CDN server.

[0113] Similarly, the DNS domain name resolution server resolves the download domain name of the network download resource b1 requested by the internal network user b1 and obtains the IP address corresponding to the download domain name, and sends the download domain name corresponding to the download request b1 and its corresponding IP address to the internal network CDN server.

[0114] 3.1. The internal network CDN server determines that it is not the first time to establish an SSL connection with the external network source station based on the IP address corresponding to the download request a1, and after performing the SSL connection verification, it is found that the internal network CDN server has the cache of the resource a1. The internal network CDN server forwards the cache of the resource a1 to the proxy buffer server A, and the internal network user a1 directly downloads the resource a1 from the proxy buffer server A and enjoys the accelerated download.

[0115] 3.2. The internal network CDN server determines that it is the first time to establish an SSL connection with the external network source station based on the IP address corresponding to the download request b1, establishes the SSL connection. After that, it is found that the internal network CDN server does not have the cache of the resource b1. The internal network CDN server pulls and stores the resource b1 from the external network source station, and at the same time, forwards the cache of the resource b1 to the proxy buffer server B. The internal network user b1 directly downloads the resource b1 from the proxy buffer server B and enjoys the accelerated download.

[0116] 4. The DNS domain name resolution server resolves the download domain name of the internal network user a2's request to download resource a2 and obtains the IP address corresponding to the download domain name, and sends the download domain name corresponding to the download request a2 and its corresponding IP address to the external network source station. The external network source station responds to the resource download request a2 of the internal network user a2, and the internal network user a2 downloads resource a2 from the external network source station, and cannot enjoy accelerated download.

[0117] Similarly, the DNS domain name resolution server resolves the download domain name of the internal network user b2's request to download resource b2 and obtains the IP address corresponding to the download domain name, and sends the download domain name corresponding to the download request b2 and its corresponding IP address to the external network source station. The external network source station responds to the resource download request b2 of the internal network user b2, and the internal network user b2 downloads resource b2 from the external network source station, and cannot enjoy accelerated download.

[0118] The above are only the preferred embodiments of the present invention, and do not impose any form of limitation on the present invention. Any person skilled in the art can make many possible changes and modifications to the technical solution of the present invention, or modify it into an equivalent embodiment with equivalent changes, without departing from the scope of the technical solution of the present invention. Therefore, all equivalent changes made according to the shape, structure and principle of the present invention without departing from the content of the technical solution of the present invention shall be covered by the protection scope of the present invention.

Claims

1. A resource download acceleration method based on intranet CDN caching, characterized in that, It includes the following steps: Step S1: An intranet user requests to download a resource from the network; Step S2: The system determines whether the download domain name of the intranet user's request to download a resource from the network belongs to the hosts list; If it belongs to the hosts list, the DNS domain name resolution server resolves the download domain name of the intranet user's request to download a resource from the network and obtains the IP address corresponding to the download domain name, and sends the download domain name and its corresponding IP address to the intranet CDN server; Step S3: The intranet CDN server determines whether to establish an SSL connection with the external network source for the first time based on the corresponding IP address; If it is the first time to establish an SSL connection, an SSL connection is established between the intranet CDN server and the external network source; If it is not the first time to establish an SSL connection, the intranet CDN server verifies the validity of the CA certificate of the external network source and checks whether the CN in the CA certificate matches the download domain name, so as to perform SSL connection verification; Step S4: After the intranet CDN server and the external network source complete the first SSL connection or non-first SSL connection verification, check the resource cache of the intranet CDN server; Step S5: Determine whether there is a cache of the resource requested by the intranet user to download on the intranet CDN server; If there is, the intranet CDN server forwards the cache of the resource requested by the intranet user to download to the proxy buffer server corresponding to the intranet user; If not, the intranet CDN server pulls and stores the resource requested by the intranet user to download from the external network source. While the intranet CDN server is pulling and downloading, it forwards the cache of the resource requested by the intranet user to download to the proxy buffer server corresponding to the intranet user; Step S5: The intranet user directly downloads the resource from the proxy buffer server.

2. The resource download acceleration method based on the intranet CDN cache according to claim 1, wherein The hosts list in Step S2 is managed separately by each intranet management terminal and stored in the hosts file. The hosts file is set as a system file without an extension. The hosts list includes the website domain name and its corresponding IP address.

3. The resource download acceleration method based on intranet CDN caching according to claim 2, wherein During the process of the intranet management terminal managing the hosts list, it includes: The intranet management terminal uses a notepad tool to open the hosts file; When the system starts to accelerate the download of resources from the external network source, the intranet management terminal adds the website domain name of the corresponding external network source and its corresponding IP address to the hosts list; When the system shuts down the accelerated download of resources from the external network source, the intranet management terminal deletes the website domain name of the corresponding external network source and its corresponding IP address from the hosts list.

4. The resource download acceleration method based on the intranet CDN cache according to claim 3, wherein, In Step S2, after the DNS domain name resolution server resolves the download domain name and its corresponding IP address, it sends the download domain name and its corresponding IP address to the corresponding intranet to determine whether the IP address belongs to the hosts list; If it belongs to the hosts list, the system returns a result indicating that the hosts list is correct to the intranet management terminal; if it does not belong to the hosts list, the system returns a result indicating that the hosts list is incorrect to the intranet management terminal.

5. The resource download acceleration method based on the intranet CDN cache according to claim 1, characterized in that, In step S2, when the download domain name of the network download resource requested by the intranet user does not belong to the hosts list, it is routed to the external network origin server by the DNS domain name resolution server, and the external network origin server responds to the resource download request of the intranet user; In step S3, if the first SSL connection or non-first SSL connection verification cannot be completed between the intranet CDN server and the external network origin server, it is routed to the external network origin server by the DNS domain name resolution server, and the external network origin server responds to the resource download request of the intranet user.

6. The resource download acceleration method based on intranet CDN cache according to claim 5, characterized in that, The resources directly responded by the external network origin server to the intranet user are forwarded and cached to the intranet CDN server through the corresponding proxy buffer server, and the website domain name and IP address of the corresponding external network origin server are sent to the intranet management end for the intranet management end to confirm to add the website domain name and IP address of the corresponding external network origin server to the hosts list.

7. The resource download acceleration method based on the intranet CDN cache according to claim 1, wherein When making the first SSL connection between the intranet CDN server and the external network origin server, it includes: The intranet CDN server sends a connection request to the external network origin server, where the connection request includes the supported SSL protocol version, encryption algorithm list, random number, and the CA certificate containing the public key; The external network origin server returns a request response to the intranet CDN server, where the request response includes the selected protocol version, encryption algorithm, and the CA certificate containing the public key; The intranet CDN server verifies the validity of the CA certificate of the external network origin server; The intranet CDN server generates a pre-master key, encrypts it with the public key of the CA certificate of the external network origin server, and sends it to the external network origin server; The external network origin server decrypts it with the public key of the CA certificate to obtain the pre-master key, so that both the intranet CDN server and the external network origin server have the pre-master key and the random number; The intranet CDN server and the external network origin server generate a session key using the pre-master key and the random number, and then perform encrypted communication using the selected encryption algorithm and the session key, thereby realizing the SSL connection.

8. A resource download acceleration system based on an intranet CDN cache, which is used to implement the resource download acceleration method based on an intranet CDN cache described in any one of claims 1-7, and is characterized in that, It includes: The request discrimination module is deployed in each intranet and is used to receive the resource download request of the intranet user, determine whether the download domain name of the network download resource requested by the intranet user belongs to the hosts list, and send the download domain name belonging to the hosts list to the DNS domain name resolution server for domain name resolution; The intranet CDN server is used to receive the download domain name and its corresponding IP address sent by the DNS domain name resolution server, perform the SSL connection, SSL connection verification, and resource download between the intranet CDN server and the external network origin server based on the corresponding IP address, communicate with each proxy buffer server, and cache and forward the resources to the proxy buffer server; The proxy buffer server is deployed in each intranet and is used to receive and store the resources of the external network origin server and forward the resources to the intranet user based on the request of the intranet user.

9. The resource download acceleration system based on the intranet CDN cache according to claim 8, wherein, It also includes: The intranet user requests a resource download module, which is deployed on the intranet user side and is used for the intranet user to request network download resources; The hosts list editing module is deployed on the intranet management end and is used to open the hosts list using a notepad tool and add or delete the website domain name of the corresponding external network origin server and its corresponding IP address in the hosts list.

10. The resource download acceleration system based on the intranet CDN cache according to claim 8, characterized in that The internal network CDN server includes an SSL connection and verification module, a resource caching module, a resource cache check module, a cache forwarding module, and a module for requesting the download of resources from the external network origin server; The SSL connection and verification module is used to perform an SSL connection and SSL connection verification between the internal network CDN server and the external network origin server based on the corresponding IP address; The resource caching module is used to store the resources requested by the internal network users for network download; The resource cache check module is used to determine whether there is a cache of the resources requested by the internal network users for network download in the internal network CDN server; The cache forwarding module is used to forward the cache of the resources requested by the internal network users for network download to the proxy buffer server corresponding to the internal network users; The module for requesting the download of resources from the external network origin server is used to request the download of resources from the external network origin server.

Images