Ethernet integrated system, readable medium and electronic equipment

Abstract

The invention provides an Ethernet integrated system, which communicates with a user side and a system side, and comprises a comprehensive gateway module for receiving a request from the user side, performing protocol adaptation on the request to obtain a request comprising a protocol type, and determining a request path; the security management and authentication module is used for authenticating the legality of the request comprising the protocol type, and after the authentication is passed, the comprehensive gateway module is also used for carrying out node load balancing on the request; the service management module is used for generating a removal notice for the abnormal monitoring instance and adjusting a flow strategy in the process of matching the target service instance according to the request path; and the exception handling and logging module is used for recording exception information during running of the instance and sending the exception information to the system side and the user side. The comprehensive gateway module adopts a load balancing mechanism to realize free distribution, and the utilization rate of network resources is improved; and a service management module is adopted to remove abnormal instances, and meanwhile, a flow strategy is adjusted, so that the error-tolerant rate is improved.

Description

Technical Field

[0001] The present invention relates to the technical field of Ethernet, and particularly to an Ethernet integration system, a readable medium, and an electronic device. Background Art

[0002] With the rapid development of network technology, Ethernet has become the core technology for communication in modern information systems and industrial systems. Especially in the fields of distributed systems, industrial automation, and the Internet of Things, traditional Ethernet integration technologies gradually show limitations in complex network environments and are difficult to meet the application requirements of high concurrency, low latency, and high reliability. Taking SOME / IP as an example, the SOME / IP protocol is a service communication middleware protocol widely used in vehicle networks, but it has certain limitations in terms of high fault tolerance and multi-protocol adaptation. Once a communication link or service registry fails, the recovery process becomes relatively slow; it is difficult to support seamless integration of multiple vendor devices and protocols; it may face performance bottlenecks in high-concurrency scenarios and lacks a dynamic load balancing mechanism to effectively allocate resources, resulting in low network resource utilization efficiency. Summary of the Invention

[0003] In order to overcome the above technical defects, the present invention provides a detection method for an Android terminal device and an electronic device, which can improve the stability of the system.

[0004] To solve the above problems, the present invention is implemented according to the following technical solutions:

[0005] An Ethernet integration system for communicating with a user side and a system side, comprising:

[0006] A comprehensive gateway module for receiving requests from the user side, performing protocol adaptation on the requests to obtain requests including protocol types, and determining request paths;

[0007] A security management and authentication module for authenticating the legality of requests including protocol types, and after successful authentication, the comprehensive gateway module is further used for performing load balancing of nodes on the requests;

[0008] A service management module for generating removal notifications for instances with monitored anomalies and adjusting traffic policies during the process of matching target service instances according to request paths;

[0009] An exception handling and logging module for recording exception information during instance operation and sending it to the system side and the user side.

[0010] As a further improvement of the present invention, the comprehensive gateway module performing protocol adaptation on the requests to obtain requests including protocol types includes:

[0011] Based on the content type of the requests, parsing the requests to obtain requests including protocol types;

[0012] Confirm the request for the protocol type.

[0013] As a further improvement of the present invention, the integrated gateway module parses the request based on the content type of the request to obtain a request including the protocol type, including:

[0014] If the content type of the request is application / json, application / xml or text / html, the request is parsed into a RESTful request;

[0015] If the content type of the request is application / grpc, the request is parsed into a gRPC request.

[0016] As a further improvement of the present invention, the integrated gateway module confirms the request for the protocol type, including:

[0017] Use a common port to confirm whether the request is a RESTful request or a gRPC request.

[0018] As a further improvement of the present invention, the integrated gateway module is provided with a load balancer;

[0019] The integrated gateway module performs load balancing of nodes on the request, including:

[0020] The load balancer uses the Consul polling algorithm to allocate the request.

[0021] As a further improvement of the present invention, the load balancer uses the Consul polling algorithm to allocate the request, including:

[0022] Use the health score formula to calculate the score of the service node;

[0023] Select the optimal node according to the score ranking to process the request.

[0024] As a further improvement of the present invention, the security management and authentication module verifies the legality of the request including the protocol type, including:

[0025] The security management and authentication module performs OAuth2 / JWT token authentication, two-factor verification and TLS encrypted communication on the request including the protocol type.

[0026] As a further improvement of the present invention, if the instance does not send a heartbeat to the service management module within the set time, the instance is determined to be abnormal;

[0027] The service management module adjusts the traffic policy including: using the token bucket algorithm to limit the interface access frequency.

[0028] The present invention also provides a computer-readable storage medium, in which at least one instruction is stored, and the at least one instruction is loaded and executed by a processor to implement the above-mentioned Ethernet integration system.

[0029] The present invention also provides an electronic device, which includes a processor and a memory. At least one instruction is stored in the memory, and the at least one instruction is loaded and executed by the processor to implement the above-mentioned Ethernet integration system.

[0030] Compared with the prior art, the integrated gateway module adopts a load balancing mechanism to achieve free allocation and improve the utilization rate of network resources; the service management module is used to remove abnormal instances and adjust the traffic policy at the same time to improve the fault tolerance rate, thereby improving the stability of the system. BRIEF DESCRIPTION OF THE DRAWINGS

[0031] Figure 1 It is a schematic structural diagram of the Ethernet integration system of the invention;

[0032] Figure 2 It is a working flowchart of the Ethernet integration system of the invention. DETAILED DESCRIPTION OF THE EMBODIMENTS

[0033] The following describes the preferred embodiments of the present invention with reference to the accompanying drawings. It should be understood that the preferred embodiments described herein are only used to illustrate and explain the present invention, and are not used to limit the present invention.

[0034] See Figure 1 and Figure 2 , the present invention provides an Ethernet integration system for communicating with a user side and a system side, including: an integrated gateway module, a security management and authentication module, a service management module, and an exception handling and logging module; wherein, the integrated gateway module is used to receive requests from the user side, perform protocol adaptation on the requests to obtain requests including protocol types, and determine the request paths to complete protocol adaptation; the security management and authentication module is used to authenticate the legality of requests including protocol types. After the authentication is passed, the integrated gateway module is also used to perform load balancing of nodes on the requests; during the process of matching target service instances according to the requests, the service management module is used to generate removal notifications for instances with monitored exceptions and adjust the traffic policy; the exception handling and logging module is used to record exception information during the operation of the instances and send it to the system side and the user side.

[0035] The integrated gateway module is the unified entry of the Ethernet integration system, responsible for managing all external interfaces, ensuring the efficient flow of requests within the Ethernet integration system and maintaining communication stability. Users initiate requests through the client (Web / RESTful or mobile / gRPC). The request routing distributes requests through the dynamic routing table. To distinguish whether the request source is a web RESTful request or a mobile gRPC request, the integrated gateway module first parses the request based on the content type (Content-Type) of the request to obtain a request including the protocol type; then it confirms the request of the protocol type.

[0036] If the content type of the request is application / json, application / xml, or text / html, the request is parsed as a RESTful request; if the content type of the request is application / grpc, the request is parsed as a gRPC request. Determine the RESTful request path or the gRPC request path. The RESTful request is basically in the format of " / interface / resource", and the gRPC request path usually follows the format of " / package name.service name / method name". Use common ports (such as 80, 443, 8080) to further confirm whether the request is a RESTful request or a gRPC request.

[0037] The integrated gateway module is equipped with a load balancer; the load balancer uses the Consul polling algorithm to allocate requests.

[0038] In one implementation, a health score formula is used to calculate the health score of the service node; the health score formula dynamically monitors and calculates the weights of the real-time metrics of the service node: CPU usage rate, memory occupancy, response time, network bandwidth occupancy, failure rate, and historical load growth rate, etc. The health score formula is:

[0039] Health score = α · CPU usage rate + β · Memory occupancy + γ · Response time - δ · Failure rate - ∈ · Historical load growth rate

[0040] Among them, α, β, γ, δ, ε: represent the weight coefficients of each index, used to adjust the contribution degree of each index to the total score, and adjust the strategy when a certain index causes the node load growth rate to exceed the threshold. α is the CPU usage rate weight, used to adjust the influence intensity of CPU utilization on the node health; β: the memory occupancy weight, used to control the contribution degree of memory usage rate in the scoring; γ: the response time weight, used to control the penalty intensity of service response delay on the node performance; δ: the failure rate penalty coefficient, used to amplify the impact of node abnormal state on the overall score; ε: the load growth rate suppression coefficient, used to suppress the risk of sudden increase in node load and prevent the avalanche effect.

[0041] After calculating the health score according to the health score formula, the optimal node is selected to process the request based on the health score ranking. Once the node load growth rate exceeds the threshold (>80%), the algorithm dynamically adjusts the weights and preferentially allocates the request to the next node with a lower health score.

[0042] When a node fails continuously, Consul automatically removes it from the service list until it recovers, and removes abnormal service instances through the health check of the service management module. Protocol adaptation will convert these data objects into an adapted format according to the requirements of the target service. When receiving a gRPC request, Protocol Buffers is used to deserialize the data into a structured object in memory, and then converted into JSON, XML or other custom-specified formats according to the requirements of the target service; when receiving a RESTful request, the JSON or XML etc. of the target service response is mapped into a gRPC message structure, serialized into Protocol Buffers format and then returned to the system side.

[0043] The security management and authentication module is responsible for user authentication, data transmission encryption and access control. The security management and authentication module performs OAuth2 / JWT token authentication, two-factor authentication and TLS encrypted communication on requests including protocol types. When a user logs in, two-factor authentication (password + dynamic verification code or biometric identification) is performed through an authorization server. After successful verification, an encrypted short-term access token (including permissions, validity period, IP address and anti-counterfeiting signature) is issued. Data transmission is forced to use TLS (Transport Layer Security Protocol) encryption. The real-time risk control system monitors abnormal behaviors (such as logging in from different locations, high-frequency operations) and triggers automatic fusing (20 error requests per minute trigger the system to temporarily ban the error user). At the same time, a key daily rotation protection mechanism is implemented to form a full-link protection from identity verification, communication encryption to behavior monitoring. The user interface end has a built-in certificate management function and supports automatic certificate update. The permission policy dynamically adjusts user permissions based on RBAC (Role-Based Access Control) to ensure that operations match role permissions. In addition, the security management and authentication module integrates a firewall and an intrusion detection system (IDS), and triggers an alarm through abnormal behavior detection. For example, for repeated failed login attempts, the exception handling and logging module will record the event, and the service management module will restrict access to the relevant IP (address).

[0044] The service management module is responsible for the dynamic registration and discovery of the interface layer and underlying services, and provides health check and traffic control functions. When service instances dynamically registered and discovered through the service management module go online or offline, the service management module automatically refreshes the service list. The health check function can feedback the running status of the service. Each service instance periodically sends an HTTP request to the system to verify the heartbeat information. If an instance fails to send a heartbeat to the service management module within the set time, it is marked as abnormal, and a removal notice is generated to notify relevant modules to remove it from the list of available instances, such as the service management module and the load balancer. The service management module adjusts the traffic policy, uses the token bucket algorithm to limit the interface access frequency, protects the system from sudden traffic impacts, and returns corresponding error prompts to the user side when it is exceeded, so that the user knows that the request is restricted, reminding the user to retry or readjust the request frequency.

[0045] The exception handling and logging module is responsible for capturing exceptions, recording logs and providing real-time alerting capabilities to ensure the operation of the Ethernet integration system is monitorable and traceable. Specifically, the exception handling and logging module captures all exceptions during the operation of service instances, and gives the user side prompt information about the error through the returned standardized error code. For example, when the service times out, it prompts "ERR_TIMEOUT" (standardized error code). Log recording supports multiple levels of logs such as DEBUG (debugging), INFO (information), ERROR (error), and is centrally managed in combination with the distributed logging system ELK stack. The alerting function interfaces with the system side, detects key events and automatically triggers notifications, sending warning or repair notifications to R & D personnel and management, providing a basis for problem troubleshooting.

[0046] In the specific implementation process, the user initiates a request through the user interface (Web / RESTful or mobile / gRPC). The comprehensive gateway module identifies the request type through the port, Content-Type, and path characteristics and completes protocol adaptation. The gRPC request is deserialized into a structured object through Protocol Buffers (protocol buffer), and the RESTful request is parsed into a JSON / XML in-memory object. The security management and authentication module performs OAuth2 / JWT token authentication, two-factor authentication, and TLS encrypted communication to ensure the legitimacy of the request. After authentication, the load balancer dynamically calculates the health score of the service node based on Consul (combining indicators such as CPU, memory, and response time). If the node load growth rate exceeds 80%, it is automatically assigned to the sub-optimal node. The dynamic routing table matches the target service instance according to the request path. The service management module realizes service registration discovery and heartbeat detection through Consul. Abnormal instances are isolated, and the interface access frequency is controlled by the token bucket algorithm. The service execution result is returned by the gateway after being converted into an adapted format. The exception handling and logging module captures errors in real time and records multi-level logs (centrally managed through the ELK stack). Critical exceptions trigger system-side alarms to notify the operation and maintenance personnel. The system continuously monitors the node status, dynamically updates the load weights. The firewall and IDS (intrusion detection system) detect abnormal traffic and block malicious IPs, forming a closed-loop operation mechanism from protocol adaptation, security authentication to dynamic fault tolerance and resource optimization.

[0047] The Ethernet integration system of the present invention covers six key modules including protocol adaptation, dynamic load balancing, security authentication, exception handling, service management, and log monitoring. This system can automatically adapt to the communication scenarios of both RESTful and gRPC protocols. Through a triple feature recognition mechanism (Content-Type / path format / port), it realizes the intelligent routing of heterogeneous protocol requests, covering the collaborative requirements of distributed devices in complex industrial network environments. Based on the dynamic load balancing algorithm of Consul, combined with a five-dimensional health assessment model (CPU / memory / response time / failure rate / historical load growth rate), it realizes the real-time weight optimization of service nodes. By constructing a three-level fault tolerance system of prevention-detection-recovery through the token bucket rate limiting and circuit breaker mechanism, it significantly improves the communication stability and resource utilization rate. The system supports functions such as two-way protocol conversion between Protocol Buffers and JSON / XML, multi-mode authentication of OAuth2 / JWT, and ELK log analysis and warning, reducing the operation and maintenance cost by 60%.

[0048] Specifically, the present invention adopts an intelligent protocol adaptation mechanism: through triple feature recognition of Content-Type, path format, and port number, it realizes intelligent routing of RESTful and gRPC heterogeneous protocol requests, is compatible with various data formats such as JSON / XML / ProtocolBuffers, and supports two-way protocol conversion (such as ), and adapts to more than 90% of the communication scenarios in the industrial field.

[0049] In addition, the present invention also adopts a dynamic load balancing algorithm. Based on the five-dimensional health assessment model of Consul (CPU, memory, response time, failure rate, historical load growth rate), combined with a real-time weight dynamic adjustment strategy (automatically switch to the second-best node when the load growth rate exceeds 80%), it improves the resource utilization rate by more than 30% and ensures communication stability in high-concurrency scenarios.

[0050] The security management and authentication module builds a three-level fault-tolerant closed-loop system: constructs a fault-tolerant closed-loop of "prevention (token bucket rate limiting) → detection (ELK log threshold alarm) → recovery (service re-registration + load rebalancing)", automatically isolates abnormal nodes through Consul heartbeat detection, shortens the fault recovery time to the millisecond level, and the system availability reaches 98%.

[0051] The security management and authentication module also sets up a multi-modal security authentication architecture: integrates OAuth2 / JWT token authentication and two-factor authentication (2FA), enforces TLS encrypted communication and supports automatic certificate update, combines RBAC dynamic permission control and firewall / IDS abnormal traffic interception, and reduces the security risk by more than 60%.

[0052] The exception handling and logging module realizes multi-level log centralized management through the ELK stack, and key exceptions trigger real-time alarms in the TelpoOA system.

[0053] The present invention can also achieve elastic expansion and dynamic service management. Based on the service registration and discovery mechanism of Consul, it supports dynamic online / offline of service instances, realizes interface-level traffic control through the token bucket algorithm, can be horizontally expanded to a scale of thousands of nodes, and improves the deployment efficiency by 50%.

[0054] At the same time, based on the structured protocol conversion engine, adopting the memory object mediation layer technology, it realizes two-way lossless mapping of ProtocolBuffers and JSON / XML structured data, adapts to the custom format extension interface, and reduces the protocol conversion time to the millisecond level.

[0055] Based on the same inventive concept, a computer-readable storage medium is further provided. The readable storage medium stores at least one instruction, at least one program, a code set or an instruction set, and the at least one instruction, at least one program, code set or instruction set is loaded and executed by a processor to implement the above-mentioned Ethernet integration system.

[0056] Optionally, the computer-readable storage medium may include: read-only memory (ROM, Read Only Memory), random access memory (RAM, Random Access Memory), solid state drives (SSD, Solid State Drives), or optical discs, etc. Among them, the random access memory may include resistive random access memory (ReRAM, Resistance Random Access Memory) and dynamic random access memory (DRAM, Dynamic Random Access Memory).

[0057] Based on the same inventive concept, the present invention further provides an electronic device. The computer device includes a processor and a memory, and the memory stores at least one instruction, and the at least one instruction is loaded and executed by the processor to implement the above-mentioned Ethernet integration system.

[0058] The so-called processor may be a central processing unit (CPU), or may also be other general-purpose processors, digital signal processors (DSP, Digital Signal Processor), application specific integrated circuits (ASIC, Application Specific Integrated Circuit), off-the-shelf programmable gate arrays (FPGA, Field-Programmable Gate Array), or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, etc.

[0059] The memory can be used to store the computer programs or modules. By running or executing the computer programs or modules stored in the memory and calling the data stored in the memory, the processor can implement various functions of the auxiliary terminal device based on the mirror neuron therapy. The memory mainly includes a program storage area and a data storage area. Among them, the program storage area can store the operating system, application programs required for at least one function (such as the sound playback function, the image playback function, etc.); the data storage area can store the data created according to the use of the mobile phone (such as audio data, phone book, etc.). In addition, the memory can include high-speed random access memory and can also include non-volatile memory, such as a hard disk, memory, plug-in hard disk, smart media card (SMC), secure digital (SD) card, flash card, at least one magnetic disk storage device, flash device, or other volatile solid-state storage devices.

[0060] The above are only the preferred embodiments of the present application and are not intended to limit the present application. Any modifications, equivalent replacements, improvements, etc. made within the spirit and principle of the present application shall be included in the protection scope of the present application.

Claims

1. An Ethernet integration system that communicates with the user side and the system side, characterized in that, including: A comprehensive gateway module, which is used to receive requests from the user side, perform protocol adaptation on the requests to obtain requests including protocol types, and determine the request paths; A security management and authentication module, which is used to authenticate the legality of requests including protocol types. After the authentication passes, the comprehensive gateway module is also used to perform load balancing of nodes on the requests; A service management module, which is used to generate removal notifications for instances with monitoring exceptions and adjust traffic policies during the process of matching target service instances according to the request paths; An exception handling and logging module, which is used to record exception information during the operation of the instances and send it to the system side and the user side.

2. The Ethernet integration system according to claim 1, wherein The comprehensive gateway module performs protocol adaptation on the requests to obtain requests including protocol types, including: Based on the content type of the requests, parsing the requests to obtain requests including protocol types; Confirming the requests of the protocol types.

3. The Ethernet integration system according to claim 2, wherein The comprehensive gateway module parses the requests based on the content type of the requests to obtain requests including protocol types, including: If the content type of the requests is application / json, application / xml or text / html, parsing the requests into RESTful requests; If the content type of the requests is application / grpc, parsing the requests into gRPC requests.

4. The Ethernet integrated system according to claim 3, wherein The comprehensive gateway module confirms the requests of the protocol types, including: Using a common port to confirm whether the requests are RESTful requests or gRPC requests.

5. The Ethernet integration system according to claim 1, characterized in that, The comprehensive gateway module is provided with a load balancer; The comprehensive gateway module performs load balancing of nodes on the requests, including: The load balancer distributes the requests using the Consul polling algorithm.

6. The Ethernet integration system according to claim 5, wherein The load balancer distributes the requests using the Consul polling algorithm, including: Calculating the health scores of service nodes using a health score formula; Selecting the optimal node to process the requests according to the sorting of the health scores.

7. The Ethernet integration system according to claim 1, characterized in that The security management and authentication module verifies the legality of requests including protocol types, including: The security management and authentication module performs OAuth2 / JWT token authentication, two-factor verification and TLS encrypted communication on requests including protocol types.

8. The Ethernet integration system according to claim 1, wherein If an instance does not send a heartbeat to the service management module within the set time, the instance is determined to be abnormal; The service management module adjusts the traffic policy including: using the token bucket algorithm to limit the interface access frequency.

9. A computer-readable storage medium, characterized in that, At least one instruction is stored in the readable storage medium, and the at least one instruction is loaded and executed by a processor to implement the Ethernet integration system as described in any one of claims 1 to 8.

10. An electronic device, characterized in that, The electronic device includes a processor and a memory, and at least one instruction is stored in the memory. The at least one instruction is loaded and executed by the processor to implement the Ethernet integration system as described in any one of claims 1 to 8.

Images