Cloud desktop access method and device and electronic equipment

Abstract

The invention relates to a cloud desktop access method and device and electronic equipment, and is applied to a virtual internet, the virtual internet comprises a user office area and a cloud desktop pool, the user office area comprises user equipment and a user gateway, and the cloud desktop pool comprises a cloud side virtual gateway, an access gateway and a cloud desktop pool virtual machine. The cloud desktop pool virtual machine is used for providing a cloud desktop. The method comprises the following steps: creating a virtual access channel between a user office area and a cloud desktop pool; and under the condition of receiving an access request of the cloud desktop sent by the user equipment of the user office area, transmitting the access request to the cloud side virtual gateway through the virtual access channel, so that the access request is transmitted to the access gateway through the cloud side virtual gateway, and the access gateway transmits the access request to the target cloud desktop pool virtual machine. According to the embodiment of the invention, the problem of network access delay when the user accesses the cloud desktop through the public internet is avoided, and the use experience of the user on the cloud desktop is improved.

Description

Technical Field

[0001] This application belongs to the Internet field, specifically relating to a cloud desktop access method, device, and electronic device. Background Technology

[0002] Cloud desktops, also known as desktop virtualization or cloud computers, are a new alternative to traditional computers. With cloud desktops, users no longer need to purchase a computer host. All components of the host, such as the CPU (Central Processing Unit), memory, and hard drive, are virtualized in the backend server. A single server can virtualize multiple virtual hosts (cloud desktops). After installing the client on the user's device, the user can access the cloud desktop on the backend server through a unique communication protocol to achieve interactive operation and a consistent experience with a computer.

[0003] Currently, the traditional way to access cloud desktops is through a direct point-to-point connection. Specifically, users can operate their devices to connect to a cloud desktop simulated by a backend server via the public internet. However, because the public internet needs to process requests from other devices in addition to those from user devices, there is network latency in accessing the cloud desktop, resulting in a poor user experience. Summary of the Invention

[0004] The purpose of this application is to provide a cloud desktop access method, apparatus, and electronic device to overcome or at least partially solve the above-mentioned problems.

[0005] To solve the above-mentioned technical problems, this application is implemented as follows: A cloud desktop access method is applied to a virtual interconnection network, the virtual interconnection network including a user office area and a cloud desktop pool, the user office area including user devices and a user gateway, the cloud desktop pool including a cloud-side virtual gateway, an access gateway, and cloud desktop pool virtual machines, the cloud desktop pool virtual machines being used to provide cloud desktops, the method comprising: Create a virtual access channel between the user's work area and the cloud desktop pool; Upon receiving an access request for the cloud desktop from a user device in the user's office area, the access request is transmitted to the cloud-side virtual gateway through the virtual access channel, so that the access request is transmitted to the access gateway through the cloud-side virtual gateway, and the access gateway transmits the access request to the target cloud desktop pool virtual machine.

[0006] In the above embodiments, users can access the cloud desktop through a virtual access channel, avoiding the network latency problem that occurs when accessing the cloud desktop through the public Internet, thus improving the user experience of the cloud desktop.

[0007] In one embodiment of this application, the cloud desktop pool includes at least one virtual private cloud, the virtual private cloud includes at least one cloud desktop pool virtual machine, and the access gateway of the cloud desktop pool allows access to the virtual private cloud of the cloud desktop pool; the cloud desktop pool includes at least a first virtual private cloud and a second virtual private cloud, and the step of creating a virtual access channel between the user's office area and the cloud desktop pool includes: A virtual access channel is created between the user gateway in the user's office area and the cloud-side virtual gateway in the first virtual private cloud of the cloud desktop pool. Upon receiving an access request for the cloud desktop from a user device in the user's office area, the step of transmitting the access request to the cloud-side virtual gateway via the virtual access channel, and then transmitting the access request to the access gateway via the cloud-side virtual gateway, so that the access gateway transmits the access request to the target cloud desktop pool virtual machine, includes: Upon receiving an access request for the cloud desktop from a user device in the user's office area, the access request is transmitted to the cloud-side virtual gateway of the first virtual private cloud through the virtual access channel. The cloud-side virtual gateway of the first virtual private cloud then transmits the access request to the access gateway, which in turn transmits the access request to the target cloud desktop pool virtual machine of the first or second virtual private cloud.

[0008] In the above embodiments, when there are multiple cloud desktop pools in a virtual interconnection network, a user can send an access request to the cloud-side virtual gateway of the nearest cloud desktop pool. This cloud-side virtual gateway can then send the access request to an access gateway in the same cloud desktop pool as the user, or it can send the access request to an access gateway in a different cloud desktop pool. Thus, the access gateway of the cloud desktop pool can forward the access request to the target desktop pool virtual machine of the corresponding virtual private cloud, enabling the user to use the cloud desktops provided by the target desktop pool virtual machines of cloud desktop pools in different regions, thereby realizing the sharing of cloud desktop pools in different regions.

[0009] In one embodiment of this application, the virtual interconnection network includes at least a first cloud desktop pool and a second cloud desktop pool, and the cloud desktop pools communicate with each other through the cloud-side virtual gateway; the step of receiving an access request for the cloud desktop sent by a user device in the user's office area, transmitting the access request to the cloud-side virtual gateway of the first virtual private cloud through the virtual access channel, so that the access request is transmitted to the access gateway through the cloud-side virtual gateway of the first virtual private cloud, so that the access gateway transmits the access request to the target cloud desktop pool virtual machine of the first virtual private cloud or the second virtual private cloud, includes: Upon receiving an access request for the cloud desktop from a user device in the user's office area, the access request is transmitted through the virtual access channel to the cloud-side virtual gateway of the first virtual private cloud of the first cloud desktop pool. The cloud-side virtual gateway of the first virtual private cloud of the first cloud desktop pool then transmits the access request to the access gateway of the first cloud desktop pool, which in turn transmits the access request to the first virtual private cloud of the first cloud desktop pool or the target cloud desktop pool virtual machine of the second virtual private cloud. Alternatively, the access request is transmitted through the cloud-side virtual gateway of the first virtual private cloud of the first cloud desktop pool to the first virtual private cloud of the second cloud desktop pool. The cloud-side virtual gateway of the first virtual private cloud of the second cloud desktop pool then transmits the access request to the access gateway of the second cloud desktop pool, which in turn transmits the access request to the first virtual private cloud of the second cloud desktop pool or the target cloud desktop pool virtual machine of the second virtual private cloud.

[0010] In the above embodiments, when there are multiple cloud desktop pools in a virtual interconnection network, a user can send an access request to the cloud-side virtual gateway of the nearest cloud desktop pool. This cloud-side virtual gateway can then send the access request to an access gateway in the same cloud desktop pool as the user, or it can send the access request to an access gateway in a different cloud desktop pool. Thus, the access gateway of the cloud desktop pool can forward the access request to the target desktop pool virtual machine of the corresponding virtual private cloud, enabling the user to use the cloud desktops provided by the target desktop pool virtual machines of cloud desktop pools in different regions, thereby realizing the sharing of cloud desktop pools in different regions.

[0011] In one embodiment of this application, the step of transmitting the access request to the cloud-side virtual gateway through the virtual access channel upon receiving an access request for the cloud desktop from a user device in the user's office area includes: Upon receiving an access request for the cloud desktop from a user device in the user's office area, the access request is encrypted according to a preset encryption protocol to obtain an encrypted access request. The encrypted access request is transmitted to the cloud-side virtual gateway through the virtual access channel, and the cloud-side virtual gateway is used to decrypt the encrypted access request according to a preset encryption protocol.

[0012] In the above embodiments, when the user's office area and the cloud desktop pool transmit access requests through the virtual access channel, they can use an encryption protocol to encrypt the data before transmission, thereby ensuring data security.

[0013] In one embodiment of this application, upon receiving an access request for the cloud desktop from a user device in the user's office area, transmitting the access request to the cloud-side virtual gateway via the virtual access channel, and then transmitting the access request to the access gateway via the cloud-side virtual gateway, so that the access gateway transmits the access request to the target cloud desktop pool virtual machine, includes: Upon receiving an access request for the cloud desktop from a user device in the user's office area, the access request is transmitted to the cloud-side virtual gateway through the virtual access channel, so that the access request is transmitted to the access gateway through the cloud-side virtual gateway, and the access gateway transmits the access request to the target cloud desktop pool virtual machine according to a preset load balancing strategy.

[0014] In the above embodiments, the access gateway can forward the received access requests to the cloud desktop virtual machine with the least load and lowest latency according to the preset load balancing strategy, so that the cloud desktop virtual machine can quickly respond to the user's access request and ensure the user's experience of using the cloud desktop.

[0015] A cloud desktop access device is applied to a virtual interconnection network, the virtual interconnection network including a user office area and a cloud desktop pool, the user office area including user devices and a user gateway, the cloud desktop pool including a cloud-side virtual gateway, an access gateway, and cloud desktop pool virtual machines, the cloud desktop pool virtual machines being used to provide cloud desktops, the device comprising: The virtual access channel creation module is used to create a virtual access channel between the user's office area and the cloud desktop pool. The cloud desktop access module is used to transmit the access request to the cloud-side virtual gateway through the virtual access channel when it receives the cloud desktop access request sent by the user device in the user's office area, so that the cloud-side virtual gateway can transmit the access request to the access gateway, and the access gateway can transmit the access request to the target cloud desktop pool virtual machine.

[0016] An electronic device includes: a processor; and a memory for storing processor-executable instructions. The processor is configured to execute the instructions to implement the cloud desktop access method described above.

[0017] A computer-readable storage medium, when the instructions in the storage medium are executed by the processor of a mobile terminal, enables the mobile terminal to perform the cloud desktop access method described above.

[0018] In this embodiment, the virtual interconnection network may include a user office area and a cloud desktop pool. The user office area includes user devices and a user gateway. The cloud desktop pool includes a cloud-side virtual gateway, an access gateway, and cloud desktop pool virtual machines. The cloud desktop pool virtual machines are used to provide cloud desktops. A virtual access channel is created between the user office area and the cloud desktop pool. When receiving a cloud desktop access request sent by a user device in the user office area, the access request is transmitted to the cloud-side virtual gateway through the virtual access channel. The cloud-side virtual gateway then transmits the access request to the access gateway, which in turn transmits the access request to the target cloud desktop pool virtual machine. In this embodiment, users can access cloud desktops through the virtual access channel, avoiding the network latency problem associated with accessing cloud desktops via the public internet, thus improving the user experience. Attached Figure Description

[0019] Figure 1 This is a flowchart illustrating the steps of a cloud desktop access method provided in this application embodiment; Figure 2 This is a schematic diagram illustrating a cloud desktop access method provided in an embodiment of this application. Figure 3 This is a schematic diagram illustrating a multi-regional cloud desktop access method provided in an embodiment of this application; Figure 4 This is a schematic diagram of the structure of a cloud desktop access device provided in the embodiments of this application; Figure 5 This is a schematic diagram of the structure of an electronic device provided in an embodiment of this application. Detailed Implementation

[0020] The embodiments of this application will be described below with reference to the accompanying drawings and preferred embodiments. Those skilled in the art can easily understand other advantages and effects of this application from the content disclosed in this specification. This application can also be implemented or applied through other different specific embodiments, and various details in this specification can also be modified or changed based on different viewpoints and applications without departing from the spirit of this application. It should be understood that the preferred embodiments are only for illustrating this application and are not intended to limit the scope of protection of this application.

[0021] It should be noted that the embodiments of this application may involve the use of user data. In practical applications, user-specific personal data may be used in the scheme described herein within the scope permitted by applicable laws and regulations, provided that it complies with the applicable laws and regulations of the country (e.g., with the user's explicit consent, with the user being properly notified, etc.).

[0022] To enable those skilled in the art to better understand the embodiments of this application, some terms or keywords involved in the embodiments of this application are explained below.

[0023] VCPE (Virtual Customer Premises Equipment): This refers to a device that uses virtualization technology to run on a cloud server and provide network services, replacing proprietary hardware and connecting branch offices to the network.

[0024] Access Gateway: The unified entry point for cloud desktop pool access traffic.

[0025] VPC (Virtual Private Cloud): A logically independent network space. Creating isolated VPCs in the cloud achieves network isolation and allows for custom network configuration.

[0026] VCPE encrypted channel (virtual access channel): An encrypted channel created by connecting VCPE and various branch gateways.

[0027] CPE (Customer Premises Equipment): Terminal equipment installed in user locations (such as homes or businesses) to connect to the network of operators or service providers, such as routers and gateways.

[0028] Reference Figure 1 This document illustrates a flowchart of a cloud desktop access method provided in an embodiment of this application. The method is applied to a virtual interconnection network, which includes a user office area and a cloud desktop pool. The user office area includes user devices and a user gateway. The cloud desktop pool includes a cloud-side virtual gateway, an access gateway, and cloud desktop pool virtual machines. The cloud desktop pool virtual machines are used to provide cloud desktops. The method specifically includes the following steps: Step 101: Create a virtual access channel between the user's office area and the cloud desktop pool.

[0029] Step 102: Upon receiving an access request for the cloud desktop from a user device in the user's office area, the access request is transmitted to the cloud-side virtual gateway through the virtual access channel, so that the access request is transmitted to the access gateway through the cloud-side virtual gateway, and the access gateway transmits the access request to the target cloud desktop pool virtual machine.

[0030] Reference Figure 2 This diagram illustrates a cloud desktop access method provided in this embodiment. In a virtual interconnect network, there can be a user office area and a cloud desktop pool (also called a cloud resource pool or cloud desktop resource pool). The user office area includes user devices and a user gateway (CEP). The cloud desktop pool can include a cloud-side virtual gateway (cloud-side virtual CPE), an access gateway, and cloud desktop pool virtual machines (VMs). A cloud desktop pool can contain one or more cloud desktop pool VMs, which provide cloud desktops to users. In some embodiments, the user gateway can be a CPE gateway. A CPE gateway is a high-performance wireless access device, typically deployed on the client side, used to connect local data and communication networks to achieve the Internet of Things. CPE gateways typically support multiple communication technologies, such as 5G, 4G, and Wi-Fi (Wireless Fidelity), offering wide coverage and flexibility.

[0031] like Figure 2 As shown, the user gateway (CEP) is a gateway device that can connect to the public network in the user's office area. In practice, a router or firewall can also be used instead. The cloud-side virtual CPE provides a virtual machine for the cloud-side VPC to deploy the virtual CPE service (VCPE). It establishes an encrypted VPE channel with the user gateway CPE, connecting the user's office area and VPC1 of the cloud desktop pool. The VCPE and the access gateway of the cloud desktop pool are also connected. The access gateway receives and processes user traffic and can access all cloud desktop pool virtual machines in all VPCs of the cloud desktop pool. The VCPE encrypted channel is the data communication channel between the user's office area and the cloud desktop pool. The cloud desktop virtual machine is a virtual machine that deploys cloud desktops, providing the desktop environment required by the user.

[0032] In this embodiment, after a virtual access channel is created between the user's office area and the cloud desktop pool, users in the user's office area can use the cloud desktops in the cloud desktop pool through their user devices. Specifically, users in the user's office area can send a cloud desktop access request to the user gateway through their user devices. The user gateway forwards the access request to the cloud-side virtual gateway through the virtual access channel. Then, the cloud-side virtual gateway can transmit the access request to the access gateway. The access gateway can transmit the access request to the target cloud desktop pool virtual machine based on user information (such as user identity, user permissions) and other information in the access request. In this way, users can use the cloud desktops provided by the target desktop pool virtual machine through their user devices.

[0033] In the above embodiments, users can access the cloud desktop through a virtual access channel, avoiding the network latency problem that occurs when accessing the cloud desktop through the public Internet, thus improving the user experience of the cloud desktop.

[0034] In one embodiment of this application, the cloud desktop pool may include at least a first virtual private cloud and a second virtual private cloud, and the step of creating a virtual access channel between the user's office area and the cloud desktop pool includes: A virtual access channel is created between the user gateway in the user's office area and the cloud-side virtual gateway in the first virtual private cloud of the cloud desktop pool. Upon receiving an access request for the cloud desktop from a user device in the user's office area, the step of transmitting the access request to the cloud-side virtual gateway via the virtual access channel, and then transmitting the access request to the access gateway via the cloud-side virtual gateway, so that the access gateway transmits the access request to the target cloud desktop pool virtual machine, includes: Upon receiving an access request for the cloud desktop from a user device in the user's office area, the access request is transmitted to the cloud-side virtual gateway of the first virtual private cloud through the virtual access channel. The cloud-side virtual gateway of the first virtual private cloud then transmits the access request to the access gateway, which in turn transmits the access request to the target cloud desktop pool virtual machine of the first or second virtual private cloud.

[0035] Each cloud desktop pool can include at least one virtual private cloud (VPC). For example, a cloud desktop pool can include at least a first virtual private cloud (e.g., Figure 2 VPC1) and second virtual private cloud (such as Figure 2In addition to VPC2, each virtual private cloud includes at least one cloud desktop pool virtual machine (VM), and virtual private clouds within the same cloud desktop pool communicate with each other through an access gateway. Of course, the first and second virtual private clouds mentioned here are only for illustrative purposes. In practical applications, a cloud desktop pool can have three or more virtual private clouds, and this embodiment of the application does not impose any limitations on this.

[0036] In this embodiment, a virtual access channel is created between the user gateway in the user's office area and the cloud-side virtual gateway in the first virtual private cloud of the cloud desktop pool. For example, refer to... Figure 2 The user gateway can connect to a virtual machine (cloud-side virtual gateway) through the cloud desktop pool. Figure 2 Once VPC1 is connected, upon receiving a cloud desktop access request from a user's device in the user's office area, the access request can be transmitted through a virtual access channel to the cloud-side virtual gateway (cloud-side virtual CPE) of the first virtual private cloud (VPC1). The cloud-side virtual gateway (cloud-side virtual CPE) of the first virtual private cloud (VPC1) then transmits the access request to the access gateway. The access gateway can then transmit the access request to the target cloud desktop pool virtual machine in the first virtual private cloud (VPC1) or the second virtual private cloud (VPC2). The user can then use the cloud desktop provided by the target desktop pool virtual machine through their user device.

[0037] In the above embodiments, when there are multiple virtual private clouds in the cloud desktop pool, when the cloud-side virtual gateway receives a user's access request, it can send the access request to the access gateway for scheduling and routing of virtual machines in the desktop pool across virtual private clouds. Thus, the access gateway can forward the access request to the target desktop pool virtual machine of the corresponding virtual private cloud, allowing the user to use the cloud desktop provided by the target desktop pool virtual machine. The user does not need to care about the specific location of the cloud desktop, which improves the efficiency of using cloud desktops in the cloud desktop pool.

[0038] In one embodiment of this application, upon receiving an access request for the cloud desktop from a user device in the user's office area, the step of transmitting the access request to the cloud-side virtual gateway of the first virtual private cloud via the virtual access channel, so that the cloud-side virtual gateway of the first virtual private cloud transmits the access request to the access gateway, and the access gateway transmits the access request to the target cloud desktop pool virtual machine of the first virtual private cloud or the second virtual private cloud, includes: Upon receiving an access request for the cloud desktop from a user device in the user's office area, the access request is transmitted through the virtual access channel to the cloud-side virtual gateway of the first virtual private cloud of the first cloud desktop pool. The cloud-side virtual gateway of the first virtual private cloud of the first cloud desktop pool then transmits the access request to the access gateway of the first cloud desktop pool, which in turn transmits the access request to the first virtual private cloud of the first cloud desktop pool or the target cloud desktop pool virtual machine of the second virtual private cloud. Alternatively, the access request is transmitted through the cloud-side virtual gateway of the first virtual private cloud of the first cloud desktop pool to the first virtual private cloud of the second cloud desktop pool. The cloud-side virtual gateway of the first virtual private cloud of the second cloud desktop pool then transmits the access request to the access gateway of the second cloud desktop pool, which in turn transmits the access request to the first virtual private cloud of the second cloud desktop pool or the target cloud desktop pool virtual machine of the second virtual private cloud.

[0039] In one embodiment of this application, the virtual interconnection network may include multiple user workspaces and multiple cloud desktop pools, as described above. Figure 3 This diagram illustrates a multi-region cloud desktop access method provided in this application embodiment. The virtual interconnection network can include three user office areas: user office area 1, user office area 2, and user office area 3. It can also include three cloud desktop pools: cloud desktop pool 1, cloud desktop pool 2, and cloud desktop pool 3. User office areas connect to the nearest cloud desktop pool; for example, user office area 1 can connect to the nearest cloud desktop pool 1. Cloud desktop pools can communicate with each other through their cloud-side virtual private servers (VPEs). Inter-cloud interconnection technology can be used to achieve fast data transmission between different cloud resource pools via high-speed links. It should be noted that this application embodiment has flexible configuration and expansion capabilities, supporting interconnection and interoperability of multiple cloud desktop pools. Furthermore, cloud desktop pools can be configured and expanded to provide users with more cloud desktops. Each different cloud desktop pool deploys a cloud-side virtual private server (VPE) on a virtual machine. Through this cloud-side VPE, network interconnection between the VPCs of different cloud desktop pools can be achieved. For example… Figure 3 The three cloud desktop pools can communicate with each other through the channels between the cloud-side virtual CPEs, represented by the dashed lines.

[0040] In some embodiments, refer to Figure 3The virtual interconnection network includes at least a first cloud desktop pool (cloud desktop pool 1) and a second cloud desktop pool (cloud desktop pool 2 and cloud desktop pool 3). Assuming the user gateway of user office area 1 receives an access request for a cloud desktop from a user device, it can transmit the access request through a VCPE encrypted channel to the cloud-side virtual CPE of VPC 1 in cloud desktop pool 1. The cloud-side virtual CPE of VPC 1 in cloud desktop pool 1 then transmits the access request to the access gateway of cloud desktop pool 1. The access gateway of cloud desktop pool 1 can then transmit the access request to the cloud desktop pool 1... The target cloud desktop pool virtual machine of VPC1 or VPC2, or through the cloud-side virtual CPE of VPC1 in cloud desktop pool 1, the access request is transmitted to the cloud-side virtual CPE of cloud desktop pool 2 or cloud desktop pool 3. The cloud-side virtual CPE of cloud desktop pool 2 or cloud desktop pool 3 can transmit the access request to the access gateway of cloud desktop pool 2 or cloud desktop pool 3. The access gateway of cloud desktop pool 2 or cloud desktop pool 3 can transmit the access request to the target cloud desktop pool virtual machine of VPC1 or VPC2 in cloud desktop pool 2 or cloud desktop pool 3.

[0041] In the above embodiments, when there are multiple cloud desktop pools in a virtual interconnection network, a user can send an access request to the cloud-side virtual gateway of the nearest cloud desktop pool. This cloud-side virtual gateway can then send the access request to an access gateway in the same cloud desktop pool as the user, or it can send the access request to an access gateway in a different cloud desktop pool. Thus, the access gateway of the cloud desktop pool can forward the access request to the target desktop pool virtual machine of the corresponding virtual private cloud, enabling the user to use the cloud desktops provided by the target desktop pool virtual machines of cloud desktop pools in different regions, thereby realizing the sharing of cloud desktop pools in different regions.

[0042] In one embodiment of this application, the step of transmitting the access request to the cloud-side virtual gateway through the virtual access channel upon receiving an access request for the cloud desktop from a user device in the user's office area includes: Upon receiving an access request for the cloud desktop from a user device in the user's office area, the access request is encrypted according to a preset encryption protocol to obtain an encrypted access request. The encrypted access request is transmitted to the cloud-side virtual gateway through the virtual access channel, and the cloud-side virtual gateway is used to decrypt the encrypted access request according to a preset encryption protocol.

[0043] The virtual access channel (VCPE encrypted channel) is a channel for data communication between the user's office area and the cloud desktop pool. It can use preset encryption protocols such as IPsec (Internet Protocol Security) to encrypt the transmitted data and ensure data security.

[0044] In this embodiment, when the user gateway receives a cloud desktop access request sent by a user device in the user's office area, it can encrypt the access request using a preset encryption protocol such as IPsec. Then, it can transmit the encrypted access request to the cloud-side virtual gateway of the cloud desktop pool through the VCPE encrypted channel. The cloud-side virtual gateway can decrypt the encrypted access request using a preset encryption protocol such as IPsec. Then, it can transmit the access request to the access gateway to forward it to the corresponding target cloud desktop pool virtual machine.

[0045] In the above embodiments, when the user's office area and the cloud desktop pool transmit access requests through the virtual access channel, they can use an encryption protocol to encrypt the data before transmission, thereby ensuring data security.

[0046] In one embodiment of this application, upon receiving an access request for the cloud desktop from a user device in the user's office area, transmitting the access request to the cloud-side virtual gateway via the virtual access channel, and then transmitting the access request to the access gateway via the cloud-side virtual gateway, so that the access gateway transmits the access request to the target cloud desktop pool virtual machine, includes: Upon receiving an access request for the cloud desktop from a user device in the user's office area, the access request is transmitted to the cloud-side virtual gateway through the virtual access channel, so that the access request is transmitted to the access gateway through the cloud-side virtual gateway, and the access gateway transmits the access request to the target cloud desktop pool virtual machine according to a preset load balancing strategy.

[0047] In this embodiment, the access gateway can access all virtual machines in the cloud desktop pool. When the cloud-side virtual gateway receives a cloud desktop access request sent by a user device in the user's office area forwarded by the user gateway, it can send the request to the access gateway. The access gateway can then dynamically allocate the access request to the optimal target cloud desktop virtual machine according to a preset load balancing strategy. In some embodiments, the access gateway can determine the cloud desktop virtual machine with the lowest load and lowest latency in the cloud desktop pool as the target cloud desktop virtual machine based on a preset load balancing strategy.

[0048] In the above embodiments, the access gateway can forward the received access requests to the cloud desktop virtual machine with the least load and lowest latency according to the preset load balancing strategy, so that the cloud desktop virtual machine can quickly respond to the user's access request and ensure the user's experience of using the cloud desktop.

[0049] In summary, the access network channel for cloud desktops primarily transmits user device access requests (command operations) to the cloud desktop, placing high demands on real-time network performance and latency. For users with cross-regional office space needs, enabling and using cross-regional cloud desktop services significantly impacts user experience. To address this, this application embodiment constructs a virtual interconnection network through the cloud-side virtual CPE of the cloud desktop pool and the user's local gateway in the user's office area. This connects cloud desktops distributed across different regions to the user's office area into a unified encrypted local area network. Users only need to connect to the cloud desktop pool closest to their office area to access the cloud desktop through the encrypted VCPE channel between the cloud-side virtual CPE and the user gateway, achieving low-latency, high-quality cloud desktop services. Specifically, this application embodiment deploys multiple cloud desktop pool virtual machines to provide cloud desktops within the cloud desktop pool and deploys an access gateway within the cloud desktop pool. This ensures that traffic (user access requests) coming in through the cloud-side virtual CPE supports access to all cloud desktops in the cloud desktop pool, enabling users to utilize cloud desktops.

[0050] The application of this embodiment has at least the following advantages: 1. For users in multi-regional user office areas, a user office area can create a VCPE encrypted channel with the nearest cloud desktop pool, which can then be used for encrypted login access and data exchange with all data centers and cloud desktops under that user. 2. The access gateway of the cloud desktop pool can forward the traffic of the user logging into all cloud desktops under that user's name through the VCPE encrypted channel (abandoning requests), without needing to open multiple VCPE encrypted channels according to different VPCs. 3. It can maximize the advantages of building cloud desktop pools in multi-user office areas, creating different VCPE encrypted channels between different user office areas and cloud desktop pools. For applications with high latency requirements, the nearest cloud desktop pool can be used. Data between user office areas and cloud desktop pools can be exchanged through the VCPE encrypted channel, meeting users' needs for low-latency, high-quality cloud desktop services.

[0051] It should be noted that, for the sake of simplicity, the method embodiments are all described as a series of actions. However, those skilled in the art should understand that the embodiments of this application are not limited to the described order of actions, because according to the embodiments of this application, some steps can be performed in other orders or simultaneously. Secondly, those skilled in the art should also understand that the embodiments described in the specification are all preferred embodiments, and the actions involved are not necessarily necessary for the embodiments of this application.

[0052] Reference Figure 4This diagram illustrates a structural block diagram of a cloud desktop access device provided in an embodiment of this application, applied to a virtual interconnection network. The virtual interconnection network includes a user office area and a cloud desktop pool. The user office area includes user devices and a user gateway. The cloud desktop pool includes a cloud-side virtual gateway, an access gateway, and cloud desktop pool virtual machines. The cloud desktop pool virtual machines are used to provide cloud desktops. The device specifically includes the following modules: The virtual access channel creation module 401 is used to create a virtual access channel between the user's office area and the cloud desktop pool. The cloud desktop access module 402 is used to transmit the access request to the cloud-side virtual gateway through the virtual access channel when it receives the cloud desktop access request sent by the user device in the user's office area, so that the access request is transmitted to the access gateway through the cloud-side virtual gateway, and the access gateway transmits the access request to the target cloud desktop pool virtual machine.

[0053] In one embodiment of this application, the cloud desktop pool includes at least one virtual private cloud, the virtual private cloud includes at least one cloud desktop pool virtual machine, and the access gateway of the cloud desktop pool allows access to the virtual private cloud of the cloud desktop pool.

[0054] In one embodiment of this application, the cloud desktop pool includes at least a first virtual private cloud and a second virtual private cloud, and the virtual access channel creation module 401 uses: A virtual access channel is created between the user gateway in the user's office area and the cloud-side virtual gateway in the first virtual private cloud of the cloud desktop pool. The cloud desktop access module 402 is used for: Upon receiving an access request for the cloud desktop from a user device in the user's office area, the access request is transmitted to the cloud-side virtual gateway of the first virtual private cloud through the virtual access channel. The cloud-side virtual gateway of the first virtual private cloud then transmits the access request to the access gateway, which in turn transmits the access request to the target cloud desktop pool virtual machine of the first or second virtual private cloud.

[0055] In one embodiment of this application, the virtual interconnection network includes at least a first cloud desktop pool and a second cloud desktop pool, and the cloud desktop pools communicate with each other through the cloud-side virtual gateway.

[0056] In one embodiment of this application, the cloud desktop access module 402 is configured to include: Upon receiving an access request for the cloud desktop from a user device in the user's office area, the access request is transmitted through the virtual access channel to the cloud-side virtual gateway of the first virtual private cloud of the first cloud desktop pool. The cloud-side virtual gateway of the first virtual private cloud of the first cloud desktop pool then transmits the access request to the access gateway of the first cloud desktop pool, which in turn transmits the access request to the first virtual private cloud of the first cloud desktop pool or the target cloud desktop pool virtual machine of the second virtual private cloud. Alternatively, the access request is transmitted through the cloud-side virtual gateway of the first virtual private cloud of the first cloud desktop pool to the first virtual private cloud of the second cloud desktop pool. The cloud-side virtual gateway of the first virtual private cloud of the second cloud desktop pool then transmits the access request to the access gateway of the second cloud desktop pool, which in turn transmits the access request to the first virtual private cloud of the second cloud desktop pool or the target cloud desktop pool virtual machine of the second virtual private cloud.

[0057] In one embodiment of this application, the cloud desktop access module 402 is used for: Upon receiving an access request for the cloud desktop from a user device in the user's office area, the access request is encrypted according to a preset encryption protocol to obtain an encrypted access request. The encrypted access request is transmitted to the cloud-side virtual gateway through the virtual access channel, and the cloud-side virtual gateway is used to decrypt the encrypted access request according to a preset encryption protocol.

[0058] In one embodiment of this application, the cloud desktop access module 402 is used for: Upon receiving an access request for the cloud desktop from a user device in the user's office area, the access request is transmitted to the cloud-side virtual gateway through the virtual access channel, so that the access request is transmitted to the access gateway through the cloud-side virtual gateway, and the access gateway transmits the access request to the target cloud desktop pool virtual machine according to a preset load balancing strategy.

[0059] In this embodiment, the virtual interconnection network may include a user office area and a cloud desktop pool. The user office area includes user devices and a user gateway. The cloud desktop pool includes a cloud-side virtual gateway, an access gateway, and cloud desktop pool virtual machines. The cloud desktop pool virtual machines are used to provide cloud desktops. A virtual access channel is created between the user office area and the cloud desktop pool. When receiving a cloud desktop access request sent by a user device in the user office area, the access request is transmitted to the cloud-side virtual gateway through the virtual access channel. The cloud-side virtual gateway then transmits the access request to the access gateway, which in turn transmits the access request to the target cloud desktop pool virtual machine. In this embodiment, users can access cloud desktops through the virtual access channel, avoiding the network latency problem associated with accessing cloud desktops via the public internet, thus improving the user experience.

[0060] As the device embodiment is basically similar to the method embodiment, the description is relatively simple, and relevant parts can be found in the description of the method embodiment. This application also provides an electronic device, such as... Figure 5 As shown, it includes a processor 1001, a device interface 1002, a memory 1003, and a bus 1004; Memory 1003 is used to store computer programs; The processor 1001 executes the above steps when executing the program stored in the memory 1003.

[0061] The bus mentioned in the above terminal can be a Peripheral Component Interconnect (PCI) bus or an Extended Industry Standard Architecture (EISA) bus, etc. This bus can be divided into address bus, data bus, control bus, etc. For ease of illustration, only one thick line is used to represent it in the diagram, but this does not mean that there is only one bus or one type of bus.

[0062] The memory may include random access memory (RAM) or non-volatile memory, such as at least one disk storage device. Optionally, the memory may also be at least one storage device located remotely from the aforementioned processor.

[0063] The processors mentioned above can be general-purpose processors, including central processing units (CPUs), network processors (NPs), etc.; they can also be digital signal processors (DSPs), application-specific integrated circuits (ASICs), field-programmable gate arrays (FPGAs), or other programmable logic devices, discrete gate or transistor logic devices, or discrete hardware components.

[0064] This application also provides a storage medium that, when the instructions in the storage medium are executed by the processor of an electronic device, enables the electronic device to execute the cloud desktop access method of the foregoing embodiments.

[0065] As the device embodiment is basically similar to the method embodiment, the description is relatively simple, and relevant parts can be found in the description of the method embodiment.

[0066] The algorithms and displays provided herein are not inherently related to any particular computer, virtual device, or other equipment. The structure required to construct such a device is obvious from the above description. Furthermore, this application is not directed to any particular programming language. It should be understood that the content of this application described herein can be implemented using various programming languages, and the above description of specific languages ​​is for the purpose of disclosing the best mode of implementation of this application.

[0067] Numerous specific details are set forth in the specification provided herein. However, it will be understood that embodiments of this application may be practiced without these specific details. In some instances, well-known methods, structures, and techniques have not been shown in detail so as not to obscure the understanding of this specification.

[0068] Similarly, it should be understood that, in order to simplify this application and aid in understanding one or more of the various inventive aspects, in the above description of exemplary embodiments of this application, various features of this application are sometimes grouped together into a single embodiment, figure, or description thereof. However, this method of disclosure should not be construed as reflecting an intention that the claimed application requires more features than are expressly recited in each claim. Rather, as reflected in the following claims, inventive aspects lie in fewer than all features of a single foregoing disclosed embodiment. Therefore, the claims following the detailed description are hereby expressly incorporated into that detailed description, wherein each claim itself is a separate embodiment of this application.

[0069] Those skilled in the art will understand that modules in the device of the embodiments can be adaptively changed and placed in one or more devices different from that embodiment. Modules, units, or components in the embodiments can be combined into a single module, unit, or component, and further, they can be divided into multiple sub-modules, sub-units, or sub-components. Except where at least some of such features and / or processes or units are mutually exclusive, any combination can be used to combine all features disclosed in this specification (including the accompanying claims, abstract, and drawings) and all processes or units of any method or device so disclosed. Unless expressly stated otherwise, each feature disclosed in this specification (including the accompanying claims, abstract, and drawings) may be replaced by an alternative feature that serves the same, equivalent, or similar purpose.

[0070] The various component embodiments of this application can be implemented in hardware, or as software modules running on one or more processors, or a combination thereof. Those skilled in the art will understand that microprocessors or digital signal processors (DSPs) can be used in practice to implement some or all of the functions of some or all of the components in the sequencing device according to this application. This application can also be implemented as a device or apparatus program for performing part or all of the methods described herein. Such an implementation of this application can be stored on a computer-readable medium, or can take the form of one or more signals. Such signals can be downloaded from an Internet website, provided on a carrier signal, or provided in any other form.

[0071] It should be noted that the above embodiments are illustrative of this application and not restrictive, and that those skilled in the art can devise alternative embodiments without departing from the scope of the appended claims. In the claims, any reference signs placed between parentheses should not be construed as limiting the claims. The word "comprising" does not exclude the presence of elements or steps not listed in the claims. The word "a" or "an" preceding an element does not exclude the presence of a plurality of such elements. This application can be implemented by means of hardware comprising several different elements and by means of a suitably programmed computer. In the unit claims enumerating several means, several of these means may be embodied by the same item of hardware. The use of the words first, second, and third, etc., does not indicate any order. These words can be interpreted as names.

[0072] Those skilled in the art will clearly understand that, for the sake of convenience and brevity, the specific working processes of the devices, apparatuses, and units described above can be referred to the corresponding processes in the foregoing method embodiments, and will not be repeated here.

[0073] The above description is merely a preferred embodiment of this application and is not intended to limit this application. Any modifications, equivalent substitutions, and improvements made within the spirit and principles of this application should be included within the protection scope of this application.

[0074] The above description is merely a specific embodiment of this application, but the scope of protection of this application is not limited thereto. Any variations or substitutions that can be easily conceived by those skilled in the art within the technical scope disclosed in this application should be included within the scope of protection of this application. Therefore, the scope of protection of this application should be determined by the scope of the claims.

[0075] It should be noted that the various data-related processes in the embodiments of this application are carried out in compliance with the relevant data protection laws and policies of the country where the location is located, and with the authorization granted by the owner of the corresponding device.

Claims

1. A cloud desktop access method, characterized in that, Applied to a virtual interconnection network, the virtual interconnection network includes a user office area and a cloud desktop pool. The user office area includes user devices and a user gateway. The cloud desktop pool includes a cloud-side virtual gateway, an access gateway, and cloud desktop pool virtual machines. The cloud desktop pool virtual machines are used to provide cloud desktops. The method includes: Create a virtual access channel between the user's work area and the cloud desktop pool; Upon receiving an access request for the cloud desktop from a user device in the user's office area, the access request is transmitted to the cloud-side virtual gateway through the virtual access channel, so that the access request is transmitted to the access gateway through the cloud-side virtual gateway, and the access gateway transmits the access request to the target cloud desktop pool virtual machine.

2. The method according to claim 1, characterized in that, The cloud desktop pool includes at least one virtual private cloud, the virtual private cloud includes at least one cloud desktop pool virtual machine, and the access gateway of the cloud desktop pool allows access to the virtual private cloud of the cloud desktop pool.

3. The method according to claim 2, characterized in that, The cloud desktop pool includes at least a first virtual private cloud and a second virtual private cloud. The creation of a virtual access channel between the user's office area and the cloud desktop pool includes: A virtual access channel is created between the user gateway in the user's office area and the cloud-side virtual gateway in the first virtual private cloud of the cloud desktop pool. Upon receiving an access request for the cloud desktop from a user device in the user's office area, the step of transmitting the access request to the cloud-side virtual gateway via the virtual access channel, and then transmitting the access request to the access gateway via the cloud-side virtual gateway, so that the access gateway transmits the access request to the target cloud desktop pool virtual machine, includes: Upon receiving an access request for the cloud desktop from a user device in the user's office area, the access request is transmitted to the cloud-side virtual gateway of the first virtual private cloud through the virtual access channel. The cloud-side virtual gateway of the first virtual private cloud then transmits the access request to the access gateway, which in turn transmits the access request to the target cloud desktop pool virtual machine of the first or second virtual private cloud.

4. The method according to claim 3, characterized in that, The virtual interconnection network includes at least a first cloud desktop pool and a second cloud desktop pool, and the cloud desktop pools communicate with each other through the cloud-side virtual gateway.

5. The method according to claim 4, characterized in that, Upon receiving an access request for the cloud desktop from a user device in the user's office area, the step of transmitting the access request to the cloud-side virtual gateway of the first virtual private cloud via the virtual access channel, so that the cloud-side virtual gateway of the first virtual private cloud transmits the access request to the access gateway, and the access gateway transmits the access request to the target cloud desktop pool virtual machine of the first virtual private cloud or the second virtual private cloud, includes: Upon receiving an access request for the cloud desktop from a user device in the user's office area, the access request is transmitted through the virtual access channel to the cloud-side virtual gateway of the first virtual private cloud of the first cloud desktop pool. The cloud-side virtual gateway of the first virtual private cloud of the first cloud desktop pool then transmits the access request to the access gateway of the first cloud desktop pool, which in turn transmits the access request to the first virtual private cloud of the first cloud desktop pool or the target cloud desktop pool virtual machine of the second virtual private cloud. Alternatively, the access request is transmitted through the cloud-side virtual gateway of the first virtual private cloud of the first cloud desktop pool to the first virtual private cloud of the second cloud desktop pool. The cloud-side virtual gateway of the first virtual private cloud of the second cloud desktop pool then transmits the access request to the access gateway of the second cloud desktop pool, which in turn transmits the access request to the first virtual private cloud of the second cloud desktop pool or the target cloud desktop pool virtual machine of the second virtual private cloud.

6. The method according to claim 1, characterized in that, Upon receiving an access request for the cloud desktop from a user device in the user's office area, the step of transmitting the access request to the cloud-side virtual gateway via the virtual access channel includes: Upon receiving an access request for the cloud desktop from a user device in the user's office area, the access request is encrypted according to a preset encryption protocol to obtain an encrypted access request. The encrypted access request is transmitted to the cloud-side virtual gateway through the virtual access channel, and the cloud-side virtual gateway is used to decrypt the encrypted access request according to a preset encryption protocol.

7. The method according to claim 1, characterized in that, Upon receiving an access request for the cloud desktop from a user device in the user's office area, the step of transmitting the access request to the cloud-side virtual gateway via the virtual access channel, and then transmitting the access request to the access gateway via the cloud-side virtual gateway, so that the access gateway transmits the access request to the target cloud desktop pool virtual machine, includes: Upon receiving an access request for the cloud desktop from a user device in the user's office area, the access request is transmitted to the cloud-side virtual gateway through the virtual access channel, so that the access request is transmitted to the access gateway through the cloud-side virtual gateway, and the access gateway transmits the access request to the target cloud desktop pool virtual machine according to a preset load balancing strategy.

8. A cloud desktop access device, characterized in that, An application is made in a virtual interconnection network, wherein the virtual interconnection network includes a user office area and a cloud desktop pool, the user office area includes user equipment and a user gateway, and the cloud desktop pool includes a cloud-side virtual gateway, an access gateway, and cloud desktop pool virtual machines, the cloud desktop pool virtual machines being used to provide cloud desktops, and the device includes: The virtual access channel creation module is used to create a virtual access channel between the user's office area and the cloud desktop pool. The cloud desktop access module is used to transmit the access request to the cloud-side virtual gateway through the virtual access channel when it receives the cloud desktop access request sent by the user device in the user's office area, so that the cloud-side virtual gateway can transmit the access request to the access gateway, and the access gateway can transmit the access request to the target cloud desktop pool virtual machine.

9. An electronic device, characterized in that, include: processor; Memory used to store processor-executable instructions; The processor is configured to execute the instructions to implement the cloud desktop access method as described in any one of claims 1 to 7.

10. A computer-readable storage medium, characterized in that, When the instructions in the storage medium are executed by the processor of the mobile terminal, the mobile terminal is able to perform the cloud desktop access method as described in any one of claims 1 to 7.

Images