Virtual private network message processing method and device, computer equipment, readable storage medium and program product

Abstract

The invention relates to a virtual private network message processing method and device, computer equipment, a computer readable storage medium and a computer program product. The method comprises the following steps: acquiring a to-be-processed virtual private network configuration change message, wherein the to-be-processed virtual private network configuration change message comprises a to-be-processed virtual private network identifier; obtaining first virtual private network configuration information according to the to-be-processed virtual private network identifier, and determining an agent machine according to the first virtual private network configuration information; generating a virtual private network change instruction according to the virtual private network change message and the first virtual private network configuration information; and sending the virtual private network change instruction to the agent machine to indicate the agent machine to execute the change of the virtual private network configuration information according to the virtual private network change instruction. By adopting the method, the accurate and efficient transmission of the virtual private network configuration message can be improved.

Description

TECHNICAL FIELD

[0001] The present application relates to the technical field of computer, in particular to a virtual private network message processing method and device, computer equipment, computer readable storage medium and computer program product. BACKGROUND

[0002] For elastic, scalable, metered services. Public cloud computing VPC products provide virtual private networks for users, users can create their own private cloud networks, and add cloud hosts to the private network. Cloud hosts under the same virtual network can access each other under the specified 2, 3 layer forwarding policy and control policy. How does the cloud network controller accurately and efficiently deliver VPC configuration messages to vSwitch (virtual switch), vRouter (virtual router)? It is one of the problems that the current cloud network control plane needs to solve.

[0003] In related technologies, during the configuration delivery process, due to network jitter and other abnormalities, the configuration cannot be accurately delivered to the vSwitch (virtual switch) and vRouter (virtual router), and manual access is required. SUMMARY

[0004] Therefore, it is necessary to provide a virtual private network message processing method and device, computer equipment, computer readable storage medium and computer program product capable of accurate data delivery in view of the above technical problems.

[0005] In a first aspect, the present application provides a virtual private network message processing method, comprising:

[0006] Obtaining a to-be-processed virtual private network configuration change message, the to-be-processed virtual private network configuration change message comprising a to-be-processed virtual private network identifier;

[0007] According to the to-be-processed virtual private network identifier, obtaining first virtual private network configuration information, and determining a proxy machine according to the first virtual private network configuration information;

[0008] According to the virtual private network change message and the first virtual private network configuration information, generating a virtual private network change instruction;

[0009] Sending the virtual private network change instruction to the proxy machine to instruct the proxy machine to execute the change of the virtual private network configuration information according to the virtual private network change instruction.

[0010] In one of the embodiments, the virtual private network change instruction is generated according to the virtual private network change message and the first virtual private network configuration information, including: when the first version information corresponding to the first virtual private network configuration information is less than the second version information corresponding to the virtual private network change information to be processed, the virtual private network change instruction is generated according to the first virtual private network configuration information and the virtual private network change message to be processed.

[0011] In one of the embodiments, after the virtual private network change instruction is sent to the agent machine, the virtual private network message processing method further includes: receiving the virtual private network configuration change request sent by the agent machine, the virtual private network configuration change request carrying the identification information of the virtual private network to be changed; obtaining the second virtual private network configuration information from the cache according to the identification information, and sending the second virtual private network configuration information to the agent machine, so that the agent machine sends the second virtual private network configuration information.

[0012] In one of the optional embodiments, before the second virtual private network configuration information is obtained from the cache according to the identification information, the virtual private network message processing method includes: performing a serialization operation on the first virtual private network configuration information to obtain the serialized first virtual private network configuration information, and storing the serialized first virtual private network configuration information to the cache area.

[0013] In one of the exemplary embodiments, the virtual private network change message to be processed includes a sub-virtual network resource component configuration message and an association relationship of a sub-virtual network resource component; the virtual private network message processing method further includes: determining an associated virtual network resource component associated with the sub-virtual network resource component according to the association relationship; in the case that the sub-virtual network resource component configuration message does not include the configuration message corresponding to the associated virtual network resource component, the configuration message corresponding to the sub-virtual network resource component is set to a suspended state, and the suspended state is changed to a configurable state when the configuration message corresponding to the associated virtual network resource component is received.

[0014] In one of the embodiments, the virtual private network identification to be processed includes a virtual network configuration resource identification to be processed, a virtual network configuration resource type identification, and virtual network resource configuration version information.

[0015] In a second aspect, the application further provides a virtual private network message processing device, including:

[0016] The change message obtaining module is configured to obtain a virtual private network configuration change message to be processed, the virtual private network configuration change message to be processed including a virtual private network identification to be processed;

[0017] The agent machine determining module is configured to acquire first virtual private network configuration information according to the to-be-processed virtual private network identifier, and determine an agent machine according to the first virtual private network configuration information;

[0018] The change instruction generating module is configured to generate a virtual private network change instruction according to the virtual private network change message and the first virtual private network configuration information.

[0019] The change instruction sending module is configured to send the virtual private network change instruction to the agent machine, so as to instruct the agent machine to perform a change of the virtual private network configuration information according to the virtual private network change instruction.

[0020] In a third aspect, the present application further provides a computer device, comprising a memory and a processor, the memory stores a computer program, and the processor implements the steps of the above-mentioned method embodiments when executing the computer program.

[0021] In a fourth aspect, the present application further provides a computer readable storage medium, which stores a computer program, and the computer program implements the steps of the above-mentioned method embodiments when executed by a processor.

[0022] In a fifth aspect, the present application further provides a computer program product, comprising a computer program, and the computer program implements the steps of the above-mentioned method embodiments when executed by a processor.

[0023] The above-mentioned virtual private network message processing method, device, computer device, computer readable storage medium and computer program product acquire first virtual private network configuration information according to a to-be-processed virtual private network identifier, and determine an agent machine based on the first virtual private network configuration information, generate a virtual private network change instruction by a controller, and send the virtual private network change instruction to the agent machine, so that the agent machine performs a change of the virtual private network configuration information according to the virtual private network change instruction. According to the unique virtual private network identifier, the identification of the configuration information is realized, the problem of configuration disorder caused by repeated sending of the configuration information is reduced, the accuracy of configuration sending is improved, and the related operation of the virtual private network configuration is performed by the agent machine under the instruction of the controller, so that the accuracy of the virtual private network is improved. BRIEF DESCRIPTION OF DRAWINGS

[0024] In order to more clearly illustrate the technical solutions in the embodiments of the present application or the related art, the drawings needed to be used in the description of the embodiments of the present application or the related art will be briefly introduced. Obviously, the drawings in the following description are only some embodiments of the present application, and for those skilled in the art, other related drawings can also be obtained without creative labor.

[0025] Figure 1This is a flowchart illustrating a virtual private network message processing method in one embodiment;

[0026] Figure 2 This is a flowchart illustrating a virtual private network message processing method in another embodiment;

[0027] Figure 3 This is a flowchart illustrating a virtual private network message processing method in another embodiment;

[0028] Figure 4 This is a structural block diagram of a virtual private network message processing device in one embodiment;

[0029] Figure 5 This is an internal structural diagram of a computer device in one embodiment. Detailed Implementation

[0030] To make the objectives, technical solutions, and advantages of this application clearer, the following detailed description is provided in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are merely illustrative and not intended to limit the scope of this application.

[0031] In one exemplary embodiment, such as Figure 1 As shown, a virtual private network (VPN) message processing method is provided. This embodiment illustrates the method applied to a server; however, it is understood that the method can also be applied to a server, and further to a system including both a terminal and a server, and implemented through interaction between the terminal and the server. In this embodiment, the method includes the following steps:

[0032] Step 102: Obtain the virtual private network configuration change message to be processed.

[0033] Virtual Private Network (VPN) is used to represent a network generated using virtual isolation technology and used for user privacy.

[0034] Alternatively, the virtual private network can be a VPC (Virtual Private Cloud).

[0035] In one embodiment, the virtual private network configuration change message includes virtual private network configuration changes and configuration changes of sub-products included in the virtual private network.

[0036] For example, taking VPC as an example, virtual private network configuration changes can include changes to the configuration of the VPC itself, as well as changes to the configuration of the sub-products contained in the VPC. Optionally, the sub-products contained in the VPC can include, but are not limited to, Subnet, Port, and RouteTable.

[0037] In an optional embodiment, the generation of the virtual private network configuration change message can be generated according to the user's needs.

[0038] Exemplarily, a user initiates the creation of a cloud host from a cloud platform, specifies the VPC as VPC-1, the cloud network service receives the cloud host creation Port request, generates Port-1 metadata in the database, updates the version number of the VPC-1 corresponding record in the database to V+1 through the virtual private network identifier of VPC-1, sends the VPC-1 configuration change message to the controller, and the controller continues to perform the related operations of the configuration change, such as sending the changed virtual private network configuration to the agent machine, etc.

[0039] Optionally, the metadata can include but is not limited to Mac (physical address), Ip (Internet Protocol address), and Subnet (subnet), etc.

[0040] Among them, the virtual private network identifier is used to uniquely identify the virtual private network.

[0041] Among them, the agent machine is used to execute the configuration of the virtual private network.

[0042] In an embodiment, the to-be-processed virtual private network configuration change message includes a to-be-processed virtual private network identifier, which is used to determine the target virtual private network for implementing the virtual private network configuration change.

[0043] In one of the embodiments, the to-be-processed virtual private network identifier includes a to-be-processed virtual network configuration resource identifier, a virtual network configuration resource type identifier, and virtual network resource configuration version information.

[0044] Among them, the virtual network configuration resource identifier (ResourceId) is used to distinguish the resources for implementing the virtual network configuration. Exemplarily, the Eip (elastic public IP address) product.

[0045] Among them, the virtual network configuration resource type identifier (ResourceType) is used to represent the type of virtual network configuration resource. Exemplarily, the Eip product corresponds to the Eip resource type,

[0046] Among them, the virtual network resource configuration version information (Version) is used to represent the resource configuration version number. It can be understood that the virtual network resource configuration version information can be used to determine whether the corresponding VPC has changed, and can also be used to determine whether the virtual private network configuration change message is outdated.

[0047] In an embodiment, the virtual private network configuration change message can include virtual private network configuration data.

[0048] Optionally, the virtual private network configuration data can include a virtual private network identifier, metadata of the virtual private network, and sub-components belonging to the same virtual private network. Optionally, the sub-components include, but are not limited to, a subnet, a port, a security group, and an Acl (network access control list), etc. It can be understood that the configuration data of the virtual private network and the sub-components included in the virtual private network form an overall configuration message, the agent can directly obtain the overall configuration message, obtain the configuration data of the virtual private network and the sub-components included in the virtual private network from the overall configuration message, and perform processing of the configuration data, such as pushing down the configuration data to a vSwitch (virtual switch) and a vRouter (virtual router), and no longer need to obtain the association relationship between the virtual private network and the sub-components included in the virtual private network, the association relationship between the sub-components, and determine whether to push down the configuration data according to the association relationship. The above embodiment reduces the complexity of the agent in processing the virtual private network configuration data.

[0049] In step 104, the first virtual private network configuration information is obtained according to the to-be-processed virtual private network identifier, and the agent is determined according to the first virtual private network configuration information.

[0050] The first virtual private network configuration information is used to represent the configuration information that has been executed by the virtual private network.

[0051] Optionally, the first virtual private network configuration information can be used to determine the corresponding agent.

[0052] For example, according to the first virtual private network configuration information, the Controller sends the first virtual private network configuration information to the IP address (for example, 10.0.0.11:8088) of the agent (Agent), and the agent corresponding to the IP address is the agent corresponding to the first virtual private network configuration information. The Controller can send the to-be-processed virtual private configuration change message to the Agent, and the Agent processes the virtual private configuration change message.

[0053] In step 106, the virtual private network change instruction is generated according to the virtual private network change message and the first virtual private network configuration information.

[0054] In step 108, the virtual private network change instruction is sent to the agent to instruct the agent to execute the change of the virtual private network configuration information according to the virtual private network change instruction.

[0055] The virtual private network change instruction is used to instruct the agent to execute the change of the virtual private network configuration information.

[0056] In one embodiment, the agent machine, after receiving the virtual private network change instruction, performs the change of the virtual private network configuration information, and exemplary sends the virtual private network configuration information to the vSwitch and the vRouter.

[0057] In one embodiment, after obtaining the virtual private network change message, it can be determined whether to generate the virtual private network change instruction according to the version information corresponding to the virtual private network configuration information included in the virtual private network change message, and exemplary, the virtual private network change instruction is generated according to the virtual private network change message and the first virtual private network configuration information, which can include: when the first version information corresponding to the first virtual private network configuration information is less than the second version information corresponding to the to-be-processed virtual private network change information, the virtual private network change instruction is generated according to the first virtual private network configuration information and the to-be-processed virtual private network change message.

[0058] Optionally, the first version information corresponding to the first virtual private network configuration information and the second version information corresponding to the to-be-processed virtual private network change message can be obtained, and the first version information and the second version information are compared. If the first version information is less than the second version information, it can be considered that the to-be-processed virtual private network change message is the latest change message, and it is not outdated. Then, the virtual private network change instruction can be generated based on the to-be-processed virtual private network change message, and the virtual private network change instruction can be sent to the agent machine to instruct the agent machine to perform the change of the virtual private network configuration information according to the virtual private network change instruction.

[0059] Optionally, if the first version information is greater than the second version information, it can be considered that the to-be-processed virtual private network change message can be an outdated configuration message, and the to-be-processed virtual private network configuration information can not be processed, that is, the virtual private network change instruction is not generated. Optionally, prompt information can also be generated according to the first version information being greater than the second version information, to prompt the user to check whether the to-be-processed virtual private network configuration change message is reasonable, and exemplary, whether the virtual private network configuration is reasonable.

[0060] Optionally, the virtual private network change can be configuration information, interface deletion, etc.

[0061] In one embodiment, when the controller determines that the virtual private network change instruction needs to be generated, the configured virtual private network configuration data, the configuration data of the sub-components included in the virtual private network, etc. can be obtained from the to-be-processed virtual private network configuration change message.

[0062] Optionally, the controller can perform a serialization operation on the first virtual private network configuration information to obtain serialized first virtual private network configuration information, and store the serialized first virtual private network configuration information in the cache area. In the above embodiment, the first virtual private network configuration information is serialized and cached in advance, so that when the agent requests data, the data does not need to be repeatedly obtained from the data source, but can be directly obtained from the cache, thereby reducing the CPU (Central Processing Unit) overhead.

[0063] In one of the embodiments, the method of performing a serialization operation on the virtual private network configuration information can be a Protobuf (Protocol Buffer) serialization method.

[0064] In one of the embodiments, after receiving the virtual private network change instruction, the agent generates a virtual private network configuration change request based on the received virtual private network change instruction, and sends the virtual private network configuration change request to the controller to obtain the virtual private network configuration data from the controller.

[0065] Illustratively, the agent receives the virtual private network configuration change request sent by the agent, and the virtual private network configuration change request carries the identification information of the virtual private network to be changed; the second virtual private network configuration information is obtained from the cache according to the identification information, and the second virtual private network configuration information is sent to the agent to enable the agent to send the second virtual private network configuration information to the virtual router and / or the virtual switch.

[0066] In one of the embodiments, the second virtual private network configuration information is obtained from the cache of the controller.

[0067] In one of the embodiments, the virtual private network change request can be a GRPC request.

[0068] In one of the embodiments, the data stored in the cache can be a Hash table. Optionally, when the controller receives the GRPC request, the Hash table is read according to the identification information of the virtual private network carried by the GRPC request, the serialized configuration data can be obtained from the Hash table, and the configuration data is sent to the agent as the response data of the GRPC request.

[0069] In one optional embodiment, the virtual private network change message to be processed includes a sub-virtual network resource component configuration message and the association relationship of the sub-virtual network resource component; the method further includes: determining the associated virtual network resource component associated with the sub-virtual network resource component according to the association relationship; if the sub-virtual network resource component configuration message does not include the configuration message corresponding to the associated virtual network resource component, then setting the configuration message corresponding to the sub-virtual network resource component to a suspended state until the configuration message corresponding to the associated virtual network resource component is received, and then changing the suspended state to a configurable state.

[0070] The "suspended" state indicates that the current configuration information will not be processed at this time. For example, the serialization operation on the configuration information will not be performed temporarily, or the current configuration information can be serialized and cached, but no virtual private network change command will be generated for the configuration information.

[0071] The configurable state indicates that the current configuration information is processable. For example, the configuration information can be serialized, the serialized configuration information can be cached, and virtual private network change instructions can be generated based on the configuration information.

[0072] In one embodiment, after receiving a virtual private network change message to be processed, the controller obtains from the virtual private network change message the configuration message of the sub-virtual network resource component that performs the private network change message and the association relationship of the sub-virtual network resource component.

[0073] Among them, the sub-virtual network resource component configuration message is used to represent the sub-components of the virtual private network.

[0074] The association relationship of sub-virtual network resource components is used to characterize the association between sub-virtual network resource components, including but not limited to the association relationship of the configuration data of sub-virtual network resource components.

[0075] Optionally, after the controller obtains the configuration message of the sub-virtual network resource component, it obtains the component identifier of the sub-virtual network resource component based on the configuration message, and uses the component identifier to query the association relationship of the sub-virtual network resource component to determine other sub-virtual network resource components associated with the sub-virtual network resource component. Furthermore, it determines whether the other sub-virtual network resource components have corresponding configuration information in the virtual private network configuration change message. If so, it is considered that the sub-virtual network resource component and other sub-virtual network resource components are configurable. If not, it is considered that the sub-virtual network resource component cannot perform configuration and other related operations at present, and the sub-virtual network resource component can be set to a suspended state.

[0076] In the aforementioned Virtual Private Network (VPN) message processing method, the first VPN configuration information is obtained using the VPN identifier to be processed, and the proxy machine is determined based on the first VPN configuration information. The controller generates a VPN change instruction and sends the VPN change instruction to the proxy machine. The proxy machine executes the VPN configuration information change according to the VPN change instruction. The configuration information is identified by a unique VPN identifier, which reduces the configuration errors caused by repeated transmission of configuration information and improves the accuracy of configuration transmission. Furthermore, under the instruction of the controller, the proxy machine performs relevant VPN configuration operations, further improving the accuracy of VPN configuration.

[0077] In one exemplary embodiment, such as Figure 2 As shown, a virtual private network (VPN) message processing method is provided. This embodiment illustrates the method applied to a server; however, it is understood that the method can also be applied to a server, and further to a system including both a terminal and a server, and implemented through interaction between the terminal and the server. In this embodiment, the method includes the following steps:

[0078] Step 202: Obtain the virtual private network configuration change message to be processed.

[0079] Optionally, the pending virtual private network configuration change message includes the pending virtual private network identifier.

[0080] Step 204: Obtain the first virtual private network configuration information based on the virtual private network identifier to be processed, and determine the proxy machine based on the first virtual private network configuration information.

[0081] Step 206: Perform a serialization operation on the first virtual private network configuration information to obtain the serialized first virtual private network configuration information, and store the serialized first virtual private network configuration information in the cache.

[0082] Step 208: Obtain the first version information corresponding to the first virtual private network configuration information, and the second version information corresponding to the virtual private network change information to be processed.

[0083] Step 210: Determine whether the first version information is less than the second version information. If yes, proceed to step 212; otherwise, proceed to step 220.

[0084] Step 212: Generate a virtual private network change instruction based on the first virtual private network configuration information and the virtual private network change message to be processed.

[0085] Step 214: Send the Virtual Private Network (VPN) change command to the agent machine to instruct the agent machine to perform VPN configuration information changes according to the VPN change command.

[0086] Step 216: Receive the virtual private network configuration change request sent by the agent machine.

[0087] The virtual private network configuration change request carries the identification information of the virtual private network to be changed.

[0088] Step 218: Obtain the second virtual private network configuration information from the cache according to the identification information, and send the second virtual private network configuration information to the agent machine, so that the agent machine sends the second virtual private network configuration information to the virtual router and virtual switch.

[0089] Step 220, continue to step 202.

[0090] The system obtains first virtual private network (VPN) configuration information using the VPN identifier to be processed, and determines the agent machine based on this information. The controller generates a VPN change instruction and sends it to the agent machine. The agent machine then executes the VPN configuration information changes according to the instruction. The unique VPN identifier identifies the configuration information, reducing configuration errors caused by repeated transmissions and improving accuracy. Furthermore, the agent machine performs VPN configuration-related operations under the controller's guidance, further enhancing VPN accuracy. Optionally, the VPN configuration change message to be processed includes sub-VPN resource component configuration messages and the association relationships between these components. Moreover, in the above embodiment, the agent machine does not need to directly interface with the data source when performing configuration data operations. Instead, it obtains cached serialized data from the controller, ensuring data accuracy, reducing excessive computational load from data source retrieval, and guaranteeing system security.

[0091] In one exemplary embodiment, such as Figure 3 As shown, a virtual private network (VPN) message processing method is provided. This embodiment illustrates the method applied to a server; however, it is understood that the method can also be applied to a server, and further to a system including both a terminal and a server, and implemented through interaction between the terminal and the server. In this embodiment, the method includes the following steps:

[0092] Step 302: Obtain the virtual private network configuration change message to be processed.

[0093] Optionally, the pending virtual private network configuration change message includes the pending virtual private network identifier.

[0094] Optionally, the virtual private network configuration change message to be processed includes sub-virtual network resource component configuration messages and the association relationships of sub-virtual network resource components.

[0095] Step 304: Determine the associated virtual network resource components that are associated with the sub-virtual network resource components based on the association relationship.

[0096] Step 306: Determine whether the sub-virtual network resource component configuration message includes the configuration message corresponding to the associated virtual network resource component. If not, proceed to step 308; if yes, proceed to step 314.

[0097] Step 308: Set the configuration message corresponding to the sub-virtual network resource component to a suspended state.

[0098] Step 310: Determine whether a configuration message corresponding to the associated virtual network resource component has been received. If yes, proceed to step 312; otherwise, proceed to step 330.

[0099] Step 312: Change the suspended state to a configurable state.

[0100] Step 314: Obtain the first virtual private network configuration information based on the virtual private network identifier to be processed, and determine the proxy machine based on the first virtual private network configuration information.

[0101] Step 316: Perform a serialization operation on the first virtual private network configuration information to obtain the serialized first virtual private network configuration information, and store the serialized first virtual private network configuration information in the cache.

[0102] Optionally, performing a serialization operation on the first virtual private network configuration information includes serializing the sub-virtual network resource components.

[0103] Step 318: Obtain the first version information corresponding to the first virtual private network configuration information, and the second version information corresponding to the virtual private network change information to be processed.

[0104] Optionally, obtaining the first version information corresponding to the first virtual private network configuration information includes obtaining the version information of the sub-virtual network resource components.

[0105] Optionally, obtaining the second version information corresponding to the virtual private network change information to be processed includes obtaining the version information of the sub-virtual network resource components.

[0106] Step 320: Determine if the first version information is less than the second version information. If yes, proceed to step 322; otherwise, proceed to step 330.

[0107] Step 322: Generate a virtual private network change instruction based on the first virtual private network configuration information and the virtual private network change message to be processed.

[0108] Step 324: Send the Virtual Private Network (VPN) change instruction to the agent machine to instruct the agent machine to perform changes to the VPN configuration information according to the VPN change instruction.

[0109] Step 326: Receive the virtual private network configuration change request sent by the agent machine.

[0110] The virtual private network configuration change request carries the identification information of the virtual private network to be changed.

[0111] Step 328: Obtain the second virtual private network configuration information from the cache according to the identification information, and send the second virtual private network configuration information to the agent machine, so that the agent machine sends the second virtual private network configuration information to the virtual router and virtual switch.

[0112] Step 330, continue to step 302.

[0113] The system obtains first virtual private network (VPN) configuration information using the VPN identifier to be processed, and determines the proxy machine based on this information. The controller generates a VPN change instruction and sends it to the proxy machine. The proxy machine then executes the VPN configuration information changes according to the instruction. The unique VPN identifier helps identify the configuration information, reducing configuration errors caused by repeated transmissions and improving accuracy. Furthermore, the proxy machine performs VPN configuration-related operations under the controller's guidance, further enhancing accuracy. In this embodiment, the proxy machine does not directly interface with the data source when performing configuration data operations; instead, it retrieves cached serialized data from the controller. This ensures data accuracy, reduces excessive computational load from data retrieval from the data source, and guarantees system security.

[0114] It should be understood that although the steps in the flowcharts of the above embodiments are shown sequentially according to the arrows, these steps are not necessarily executed in the order indicated by the arrows. Unless explicitly stated herein, there is no strict order restriction on the execution of these steps, and they can be executed in other orders. Moreover, at least some steps in the flowcharts of the above embodiments may include multiple steps or multiple stages. These steps or stages are not necessarily completed at the same time, but can be executed at different times. The execution order of these steps or stages is not necessarily sequential, but can be performed alternately or in turn with other steps or at least some of the steps or stages of other steps.

[0115] Based on the same inventive concept, this application also provides a virtual private network (VPN) message processing apparatus for implementing the VPN message processing method described above. The solution provided by this apparatus is similar to the implementation described in the above method; therefore, the specific limitations in one or more VPN message processing apparatus embodiments provided below can be found in the limitations of the VPN message processing method described above, and will not be repeated here.

[0116] In one exemplary embodiment, such as Figure 4 As shown, a virtual private network message processing device 400 is provided, including: a change message acquisition module 402, a proxy machine determination module 404, a change instruction generation module 406, and a change instruction sending module 408, wherein:

[0117] The change message acquisition module 402 is used to acquire virtual private network configuration change messages to be processed. The virtual private network configuration change messages to be processed include the virtual private network identifier to be processed.

[0118] The proxy machine determination module 404 is used to obtain the first virtual private network configuration information based on the identifier of the virtual private network to be processed, and determine the proxy machine based on the first virtual private network configuration information.

[0119] The change instruction generation module 406 is used to generate a virtual private network change instruction based on the virtual private network change message and the first virtual private network configuration information.

[0120] The change instruction sending module 408 is used to send virtual private network change instructions to the agent machine, so as to instruct the agent machine to perform changes to the virtual private network configuration information according to the virtual private network change instructions.

[0121] In one embodiment, the change instruction generation module is used to generate a virtual private network change instruction based on the first virtual private network configuration information and the virtual private network change message to be processed when the first version information corresponding to the first virtual private network configuration information is less than the second version information corresponding to the virtual private network change information to be processed.

[0122] In one embodiment, the virtual private network (VPN) message processing apparatus includes a sending module, configured to: after sending a VPN change instruction to the proxy machine, receive a VPN configuration change request sent by the proxy machine, wherein the VPN configuration change request carries identification information of the VPN to be changed; retrieve second VPN configuration information from a cache based on the identification information, and send the second VPN configuration information to the proxy machine, so that the proxy machine sends the second VPN configuration information to the virtual router and the virtual switch.

[0123] In an optional embodiment, the virtual private network message processing device includes a caching module, which performs a serialization operation on the first virtual private network configuration information before obtaining the second virtual private network configuration information from the cache according to the identification information, to obtain the serialized first virtual private network configuration information, and stores the serialized first virtual private network configuration information in the cache area.

[0124] In one embodiment, the virtual private network change message to be processed includes a sub-virtual network resource component configuration message and the association relationship of the sub-virtual network resource component; the virtual private network message processing device includes a task status determination module, configured to determine the associated virtual network resource component associated with the sub-virtual network resource component based on the association relationship; if the sub-virtual network resource component configuration message does not include the configuration message corresponding to the associated virtual network resource component, then the configuration message corresponding to the sub-virtual network resource component is set to a suspended state until the configuration message corresponding to the associated virtual network resource component is received, at which point the suspended state is changed to a configurable state.

[0125] Each module in the aforementioned virtual private network message processing device can be implemented entirely or partially through software, hardware, or a combination thereof. These modules can be embedded in or independent of the processor in a computer device, or stored in the memory of a computer device as software, so that the processor can call and execute the operations corresponding to each module.

[0126] In one exemplary embodiment, a computer device is provided, which may be a server, and its internal structure diagram may be as follows: Figure 5As shown, this computer device includes a processor, memory, input / output (I / O) interfaces, and a communication interface. The processor, memory, and I / O interfaces are connected via a system bus, and the communication interface is also connected to the system bus via the I / O interfaces. The processor provides computational and control capabilities. The memory includes non-volatile storage media and internal memory. The non-volatile storage media stores the operating system, computer programs, and a database. The internal memory provides the environment for the operating system and computer programs stored in the non-volatile storage media. The database stores data. The I / O interfaces are used for exchanging information between the processor and external devices. The communication interface is used for communicating with external terminals via a network connection. When executed by the processor, the computer program implements a virtual private network message processing method.

[0127] Those skilled in the art will understand that Figure 5 The structure shown is merely a block diagram of a portion of the structure related to the present application and does not constitute a limitation on the computer device to which the present application is applied. Specific computer devices may include more or fewer components than those shown in the figure, or combine certain components, or have different component arrangements.

[0128] In one exemplary embodiment, a computer device is provided, including a memory and a processor, wherein the memory stores a computer program, and the processor executes the computer program to implement the steps of the above-described method embodiments.

[0129] In one embodiment, a computer-readable storage medium is provided having a computer program stored thereon, which, when executed by a processor, implements the steps of the above-described method embodiments.

[0130] In one embodiment, a computer program product is provided, including a computer program that, when executed by a processor, implements the steps of the above-described method embodiments.

[0131] It should be noted that the user information (including but not limited to user device information, user personal information, etc.) and data (including but not limited to data used for analysis, data stored, data displayed, etc.) involved in this application are all information and data authorized by the user or fully authorized by all parties, and the collection, use and processing of the relevant data must comply with relevant regulations.

[0132] Those skilled in the art will understand that all or part of the processes in the methods of the above embodiments can be implemented by a computer program instructing related hardware. The computer program can be stored in a non-volatile computer-readable storage medium. When executed, the computer program can include the processes of the embodiments of the above methods. Any references to memory, databases, or other media used in the embodiments provided in this application can include at least one of non-volatile memory and volatile memory. Non-volatile memory can include read-only memory (ROM), magnetic tape, floppy disk, flash memory, optical memory, high-density embedded non-volatile memory, resistive random access memory (ReRAM), magnetic random access memory (MRAM), ferroelectric random access memory (FRAM), phase change memory (PCM), graphene memory, etc. Volatile memory can include random access memory (RAM) or external cache memory, etc. By way of illustration and not limitation, RAM can take many forms, such as Static Random Access Memory (SRAM) or Dynamic Random Access Memory (DRAM). The databases involved in the embodiments provided in this application may include at least one type of relational database and non-relational database. Non-relational databases may include, but are not limited to, blockchain-based distributed databases. The processors involved in the embodiments provided in this application may be general-purpose processors, central processing units, graphics processing units, digital signal processors, programmable logic devices, quantum computing-based data processing logic devices, artificial intelligence (AI) processors, etc., and are not limited to these.

[0133] The technical features of the above embodiments can be combined in any way. For the sake of brevity, not all possible combinations of the technical features in the above embodiments are described. However, as long as there is no contradiction in the combination of these technical features, they should be considered to be within the scope of this application.

[0134] The above embodiments are merely illustrative of several implementation methods of this application, and their descriptions are relatively specific and detailed. However, they should not be construed as limiting the scope of this application. It should be noted that those skilled in the art can make various modifications and improvements without departing from the concept of this application, and these all fall within the protection scope of this application. Therefore, the protection scope of this application should be determined by the appended claims.

Claims

1. A method of processing messages for a virtual private network, the method comprising: The method comprises: acquiring a to-be-processed virtual private network configuration change message, wherein the to-be-processed virtual private network configuration change message comprises a to-be-processed virtual private network identifier; acquiring first virtual private network configuration information according to the to-be-processed virtual private network identifier, and determining a proxy machine according to the first virtual private network configuration information; generating a virtual private network change instruction according to the virtual private network change message and the first virtual private network configuration information; sending the virtual private network change instruction to the proxy machine to instruct the proxy machine to perform a change of the virtual private network configuration information according to the virtual private network change instruction.

2. The method of claim 1, wherein, The generating of the virtual private network change instruction according to the virtual private network change message and the first virtual private network configuration information comprises: when first version information corresponding to the first virtual private network configuration information is less than second version information corresponding to the to-be-processed virtual private network change information, generating the virtual private network change instruction according to the first virtual private network configuration information and the to-be-processed virtual private network change message.

3. The method of claim 2, wherein, After the sending of the virtual private network change instruction to the proxy machine, the method further comprises: receiving a virtual private network configuration change request sent by the proxy machine, wherein the virtual private network configuration change request carries identifier information of a to-be-changed virtual private network; acquiring second virtual private network configuration information from a cache according to the identifier information, and sending the second virtual private network configuration information to the proxy machine to enable the proxy machine to send the second virtual private network configuration information to a virtual router and a virtual switch.

4. The method of claim 3, wherein, Before the acquiring of the second virtual private network configuration information from the cache according to the identifier information, the method comprises: performing a serialization operation on the first virtual private network configuration information to obtain serialized first virtual private network configuration information, and storing the serialized first virtual private network configuration information in a cache area.

5. The method of claim 4, wherein, The to-be-processed virtual private network configuration change message comprises a sub-virtual network resource component configuration message and an association relationship of a sub-virtual network resource component; the method further comprises: determining an associated virtual network resource component associated with the sub-virtual network resource component according to the association relationship; in a case where the sub-virtual network resource component configuration message does not comprise a configuration message corresponding to the associated virtual network resource component, setting the configuration message corresponding to the sub-virtual network resource component to a suspended state, and changing the suspended state to a configurable state when the configuration message corresponding to the associated virtual network resource component is received.

6. The method according to any one of claims 1 to 5, characterized in that, The to-be-processed virtual private network identifier comprises a to-be-processed virtual network configuration resource identifier, a virtual network configuration resource type identifier, and virtual network resource configuration version information.

7. A virtual private network message processing apparatus characterized by comprising: The apparatus comprises: a change message acquisition module configured to acquire a to-be-processed virtual private network configuration change message, wherein the to-be-processed virtual private network configuration change message comprises a to-be-processed virtual private network identifier; The agent machine determining module is configured to acquire first virtual private network configuration information according to the to-be-processed virtual private network identifier, and determine an agent machine according to the first virtual private network configuration information; The change instruction generating module is configured to generate a virtual private network change instruction according to the virtual private network change message and the first virtual private network configuration information; The change instruction sending module is configured to send the virtual private network change instruction to the agent machine, so as to instruct the agent machine to perform the change of the virtual private network configuration information according to the virtual private network change instruction.

8. A computer device comprising a memory and a processor, the memory storing a computer program, characterized in that, The processor executes the computer program to implement the steps of the method in any one of claims 1 to 6.

9. A computer readable storage medium having stored thereon a computer program, characterized in that, The computer program is executed by the processor to implement the steps of the method in any one of claims 1 to 6.

10. A computer program product comprising a computer program, characterized in that, The computer program is executed by the processor to implement the steps of the method in any one of claims 1 to 6.

Images