Transmission link processing method, device, equipment and readable storage medium

Abstract

The application discloses a transmission link processing method and device, equipment and a readable storage medium. The configuration information state of each service in a service management end can be detected. The service management end is used for recording the configuration information of each service pre-deployed in a target distributed system. When it is detected that the configuration information state of a target service exists in a migration change state, target configuration information of the target service is pulled from the service management end. The target configuration information comprises first sub-configuration information of the target service currently and second sub-configuration information before service migration. An address conversion rule table is generated according to the first sub-configuration information and the second sub-configuration information. The address conversion rule table contains access address mapping information of the second sub-configuration information converted to the first sub-configuration information. The transmission link of the target service is configured and processed based on the address conversion rule table. In this way, the mapping between the old access address and the new access address is established, the service migration efficiency is improved, and the stable operation of the service is ensured.

Description

Technical Field

[0001] This application relates to the field of computer technology, and specifically to a transmission link processing method, apparatus, device, and readable storage medium. Background Technology

[0002] With the development of online business services, the demand for these services from the target audience is increasing. This means that the current service nodes of the business services need to process a large amount of business data. If the computing resources of the service nodes are insufficient, they will not be able to meet the processing efficiency of large-scale data of the business services and may easily lead to business service crashes. Therefore, the business services are generally migrated to target servers with sufficient computing resources to support the processing of large-scale data of the business services.

[0003] The relevant technology migrates business services to a target server and manually modifies the Internet Protocol address and related network configuration information of the business services to complete the network configuration of the migrated business services, thereby enabling the computing resources of the target server to support the data processing of the business services.

[0004] However, in related technologies, manually modifying the Internet Protocol address and related network configuration information of business services is not only inefficient, but also prone to errors in network configuration information, affecting service migration efficiency. In addition, since changes to network configuration information are involved, business service operation may be interrupted, causing the target group to be unable to access and use the business service, affecting the operational stability of the business service and reducing the user experience. Summary of the Invention

[0005] This application provides a transmission link processing method, apparatus, device, and readable storage medium that does not require modification of the network configuration information of the migrated service, thereby improving the migration efficiency and operational stability of business services and enhancing the user experience.

[0006] To solve the above-mentioned technical problems, this application provides the following technical solution:

[0007] This application provides a transmission link processing method, including:

[0008] The configuration information status of each service in the detection service management terminal is used to record the configuration information of each service pre-deployed in the target distributed system.

[0009] When it is detected that the configuration information status of a target service is in the migration change state, the target configuration information of the target service is pulled from the service management terminal. The target configuration information includes the current first sub-configuration information of the target service and the second sub-configuration information before the service migration.

[0010] Based on the first sub-configuration information and the second sub-configuration information, an address translation rule table is generated, which contains access address mapping information from the second sub-configuration information to the first sub-configuration information.

[0011] The transmission link of the target service is configured based on the address translation rule table.

[0012] Accordingly, embodiments of this application provide a transmission link processing apparatus, including:

[0013] The detection unit is used to detect the configuration information status of each service in the service management terminal, which is used to record the configuration information of each service pre-deployed in the target distributed system.

[0014] The pull unit is used to pull the target configuration information of the target service from the service management terminal when it is detected that the configuration information status of the target service is in the migration change state. The target configuration information includes the current first sub-configuration information of the target service and the second sub-configuration information before the service migration.

[0015] The generation unit is configured to generate an address translation rule table based on the first sub-configuration information and the second sub-configuration information, wherein the address translation rule table contains access address mapping information from the second sub-configuration information to the first sub-configuration information;

[0016] The processing unit is used to configure the transmission link of the target service based on the address translation rule table.

[0017] In some embodiments, the processing unit is further configured to:

[0018] Read the network address translation table under the address table tool associated with the target service. The network address translation table records the preprocessing transmission link and output transmission link associated with the target service.

[0019] The address table tool associated with the target service is used to perform configuration processing on the preprocessing transmission link and the output transmission link associated with the target service according to the address translation rule table.

[0020] In some embodiments, the processing unit is further configured to:

[0021] Obtain the link configuration instructions corresponding to the address table tool associated with the target service;

[0022] In response to the link configuration command, the address translation rule table is added to the preprocessing transmission link associated with the target service, and the address translation rule table is added to the output transmission link associated with the target service.

[0023] In some embodiments, the processing unit is further configured to:

[0024] Determine the types of data packet protocols supported by the preprocessed transmission link;

[0025] The address translation rule table is bound to the packet protocol types supported by the preprocessed transmission link in order to configure the preprocessed transmission link associated with the target service.

[0026] In some embodiments, the transmission link includes a preprocessing transmission link, and the processing unit is further configured to:

[0027] Obtain a preset mapping access permission list, which contains multiple authorized object identifiers that have usage rights to the access address mapping information, and the remaining number of authorization times for each authorized object identifier for the access address mapping information;

[0028] The mapping access permission list and the address translation rule table are merged to generate the target address translation permission table;

[0029] Based on the target address translation permission table, the preprocessing transmission link associated with the target service is configured.

[0030] In some embodiments, the transmission link processing apparatus further includes a data packet transmission unit, used for:

[0031] Receive a first data packet to be transmitted to the target service, and determine a first object identifier associated with the first data packet;

[0032] Transmit the first data packet and the first object identifier to the preprocessing transmission link;

[0033] Through the preprocessed transmission link, the remaining number of target authorizations for the first object identifier against the access address mapping information is queried based on the target address translation permission table;

[0034] When the remaining number of authorization attempts for the target exceeds a preset available threshold, the first data packet is sent to the target service according to the access address mapping information.

[0035] In some embodiments, the data packet transmission unit is further configured to:

[0036] Through the preprocessed transmission link, the destination Internet Protocol address and destination service port information of the first data packet are updated according to the access address mapping information to obtain the updated target first data packet;

[0037] According to the destination Internet Protocol address and destination service port information in the target first data packet, the target first data packet is transmitted to the target service.

[0038] In some embodiments, the data packet transmission unit is further configured to:

[0039] Receive a second data packet to be transmitted to the target service, and determine the second object identifier associated with the second data packet;

[0040] The matching result is obtained by matching the second object identifier with the object identifier in the preset object permission list. The preset object permission list contains object identifiers that do not have access permissions to the target service after migration.

[0041] When it is determined from the matching result that the second object identifier is not included in the preset object permission list, the second data packet is sent to the target service according to the access address mapping information.

[0042] In some embodiments, the transmission link processing apparatus further includes a data packet sending unit, used for:

[0043] Obtain the third data packet to be sent by the target service, and transmit the third data packet to the output transmission link;

[0044] Through the output transmission link, the source Internet Protocol address and source service port information of the third data packet are updated according to the access address mapping information in the address translation rule table to obtain the updated target third data packet;

[0045] The target third data packet is transmitted to the delivery transmission link associated with the target service, so as to send the target third data packet through the delivery transmission link based on the updated source Internet Protocol address and source service port information in the target third data packet.

[0046] In some embodiments, the generating unit is further configured to:

[0047] Extract the first Internet Protocol address, the first service port information, and the first data packet protocol information from the first sub-configuration information;

[0048] Extract the second Internet Protocol address, the second service port information, and the second data packet protocol information from the second sub-configuration information;

[0049] Establish address mapping sub-information between the first Internet Protocol address and the second Internet Protocol address, establish port mapping sub-information between the first service port information and the second service port information, and establish protocol mapping sub-information between the first data packet protocol information and the second data packet protocol information;

[0050] Based on the address mapping sub-information, the port mapping sub-information, and the protocol mapping sub-information, access address mapping information is generated;

[0051] An initial address translation rule table is created, and the access address mapping information is transmitted to the initial address translation rule table to obtain the address translation rule table.

[0052] In some embodiments, the transmission link processing apparatus further includes a service expansion unit, used for:

[0053] Obtain the data processing volume for the target service;

[0054] When the amount of data processed exceeds a preset data volume threshold, the service container cluster associated with the target service is determined, and the resource utilization rate of each target service container in the service container cluster is obtained.

[0055] When the resource utilization rate of each target service container is greater than the preset resource utilization threshold, a corresponding service container image is created based on the target service container;

[0056] The address table tool in the service container image is used to configure the transmission link of the target service image deployed in the service container image based on the address translation rule table.

[0057] Furthermore, this application also provides a computer device, including a memory, a processor, and a computer program stored in the memory and executable on the processor. When the processor executes the computer program, it implements the above-described transmission link processing method.

[0058] Furthermore, embodiments of this application also provide a computer-readable storage medium storing a computer program adapted for loading by a processor to execute the aforementioned transmission link processing method.

[0059] Furthermore, this application also provides a computer program product, which includes a computer program that can be stored in a storage medium. The processor of a computer device reads the computer program from the storage medium and executes the computer program to implement the aforementioned transmission link processing method.

[0060] In this embodiment, the configuration information status of each service in the service management terminal is detected. The service management terminal is used to record the configuration information of each service pre-deployed in the target distributed system. When it is detected that the configuration information status of the target service is in a migration change state, the target configuration information of the target service is pulled from the service management terminal. The target configuration information includes the current first sub-configuration information of the target service and the second sub-configuration information before the migration. An address translation rule table is generated based on the first and second sub-configuration information. The address translation rule table contains the access address mapping information from the second sub-configuration information to the first sub-configuration information. The transmission link of the target service is configured based on the address translation rule table.

[0061] In this way, the configuration information status of each service recorded in the service management terminal can be monitored in real time. When the configuration information status of the target service in the target distributed system is detected to be in a migration change state, the current first sub-configuration information and the second sub-configuration information of the target service before migration are retrieved from the service management terminal. Then, an address translation rule table is constructed based on the correspondence between the first and second sub-configuration information. The access address mapping information in the address translation rule table records the association between the access addresses of the target service before and after migration, thus establishing a mapping bridge between the access addresses of the target service before and after migration. Finally, the data transmission link of the target service is configured based on the address translation rule table. In this way, after the target service is migrated, by establishing a mapping relationship between the old access address and the new access address, the target group can find the new access address through the old access address when accessing the target service at any time. Thus, compared with related technologies, there is no need to manually modify the network configuration information of the target service after migration, which improves the service migration efficiency, avoids configuration errors and interruption of the target service, ensures the stable operation of the target service, and allows the target group to access the target service without any noticeable difference, thus improving the user experience.

[0062] Other features and advantages of this application will be set forth in the following description and will be apparent in part from the description or may be learned by practicing the application. The objectives and other advantages of this application may be realized and obtained by means of the structures particularly pointed out in the description, claims and drawings. Attached Figure Description

[0063] To more clearly illustrate the technical solutions in the embodiments of this application, the accompanying drawings used in the description of the embodiments will be briefly introduced below. Obviously, the accompanying drawings described below are only some embodiments of this application. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort.

[0064] Figure 1 This is a schematic diagram of a transmission link processing system provided in an embodiment of this application.

[0065] Figure 2 This is a flowchart illustrating the steps of the transmission link processing method provided in the embodiments of this application;

[0066] Figure 3 This is a schematic flowchart of another step of the transmission link processing method provided in the embodiments of this application;

[0067] Figure 4 This is an example diagram of the transmission link system architecture provided in the embodiments of this application;

[0068] Figure 5 This is an example diagram of the transmission link processing flow provided in the embodiments of this application;

[0069] Figure 6 An example diagram of the transmission link architecture provided in an embodiment of this application;

[0070] Figure 7 Example diagram of the configuration platform page provided in the embodiments of this application;

[0071] Figure 8 Example diagram of a data packet diversion scenario for a transmission link provided in the embodiments of this application;

[0072] Figure 9 Example diagram of the configuration processing page for the transmission link of the target service provided in the embodiments of this application;

[0073] Figure 10 This is a schematic diagram of the structure of the transmission link processing device provided in the embodiments of this application;

[0074] Figure 11 This is a schematic diagram of the terminal structure provided in the embodiments of this application;

[0075] Figure 12 This is a schematic diagram of the server structure provided in an embodiment of this application. Detailed Implementation

[0076] To enable those skilled in the art to better understand the solutions of this application, the technical solutions of the embodiments of this application will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of this application, and not all embodiments. Based on the embodiments of this application, all other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of this application.

[0077] It is understood that in the specific implementation of this application, data related to configuration information status, configuration information, first sub-configuration information, second sub-configuration information, address translation rule table, access address mapping information, transmission link, etc. are involved. When the above embodiments of this application are applied to specific products or technologies, permission or consent from the target is required, and the collection, use and processing of related data must comply with relevant laws, regulations and standards.

[0078] Furthermore, when this application embodiment needs to obtain data related to configuration information status, configuration information, first sub-configuration information, second sub-configuration information, address translation rule table, access address mapping information, transmission link, etc., it will obtain separate permission or separate consent for the configuration information status, configuration information, first sub-configuration information, second sub-configuration information, address translation rule table, access address mapping information, transmission link, etc. through pop-up windows or redirection to a confirmation page. After clearly obtaining separate permission or separate consent for the configuration information status, configuration information, first sub-configuration information, second sub-configuration information, address translation rule table, access address mapping information, transmission link, etc., it will then obtain the necessary configuration information status, configuration information, first sub-configuration information, second sub-configuration information, address translation rule table, access address mapping information, transmission link, etc., for enabling the application embodiment to operate normally.

[0079] It should be noted that while some processes described in the specification, claims, and accompanying drawings contain multiple steps that appear in a specific order, it should be clearly understood that these steps may not be performed in the order they appear herein, or may be performed in parallel. The step numbers are merely used to distinguish different steps and do not represent any particular order of execution. Furthermore, descriptions such as "first," "second," or "objective" in this document are used to distinguish similar objects and are not necessarily used to describe a specific order or sequence.

[0080] The technical solutions of the embodiments of this application will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of this application, and not all embodiments. Based on the embodiments of this application, all other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of this application.

[0081] This application provides a transmission link processing method, apparatus, device, and readable storage medium. Specifically, the transmission link processing method of each embodiment of this application can be executed by a computer device, which can be a server or a terminal, etc. The server can be an independent physical server, a server cluster or distributed system composed of multiple physical servers, or a cloud server providing basic cloud computing services such as cloud services, cloud databases, cloud computing, cloud functions, cloud storage, network services, cloud communication, middleware services, domain name services, security services, CDN, and big data and artificial intelligence platforms. The terminal can be a mobile phone, tablet computer, laptop computer, desktop computer, smart speaker, smart home appliance, vehicle terminal, smart voice interaction device, aircraft, etc., but is not limited to these.

[0082] Before providing a further detailed description of the embodiments of this application, the nouns and terms used in the embodiments of this application are explained, and the nouns and terms used in the embodiments of this application shall be interpreted as follows:

[0083] Iptables, an address table tool, is a utility in the Linux kernel used to set, maintain, and inspect IP packet filtering rules. It allows system administrators to define rules to control network traffic flow, and is commonly used for firewall configuration and traffic redirection.

[0084] Kubernetes (K8s) Cluster: A K8s (Kubernetes) cluster is a container orchestration platform consisting of multiple nodes used to automate the deployment, scaling, and management of containerized applications. A K8s cluster typically includes a master node (control plane) and multiple worker nodes (where containers are executed). By coordinating and managing these nodes, K8s provides high availability and scalability.

[0085] Deployment: A Deployment is a resource object in Kubernetes used to declare and manage the desired state of an application. It defines the number of application replicas, update policies, and rollback policies, ensuring that a specified number of containers (Pods) are always running in the cluster.

[0086] Service migration: Service migration refers to the process of moving an application or service from one environment (such as a Kubernetes cluster) to another. This process typically involves the transfer of data and configuration, traffic redirection, and ensuring that the service can function properly in the new environment to minimize the impact on users.

[0087] Sidecar: A sidecar is a design pattern typically used in microservice architectures. It refers to an auxiliary service or component that runs alongside the main application (main service). Sidecars are tightly integrated with the main service by sharing the same network namespace and storage volumes, providing additional functionality such as traffic management, inspection, security, logging, and service discovery.

[0088] This application provides a transmission link processing method, and you can refer to the following specific embodiments for details.

[0089] For example, see Figure 1 This is a schematic diagram of a transmission link processing system provided in an embodiment of this application. The system includes a service management terminal and a computer device, wherein the computer device can be a terminal 110 or a server 120.

[0090] The terminal 110 can be equipped with a target application, which can run corresponding application services. This target application can be referred to as a client or application (i.e., Application, APP). The client can execute the steps of the transmission link processing method. Specifically, it can detect the configuration information status of each service in the service management terminal. The service management terminal is used to record the configuration information of each service pre-deployed in the target distributed system. When it is detected that the configuration information status of the target service is in a migration change state, the target configuration information of the target service is retrieved from the service management terminal. The target configuration information includes the current first sub-configuration information of the target service and the second sub-configuration information before the migration. Based on the first and second sub-configuration information, an address translation rule table is generated. The address translation rule table contains the access address mapping information from the second sub-configuration information to the first sub-configuration information. The transmission link of the target service is configured based on the address translation rule table.

[0091] Server 120 can be a single service node, a distributed system composed of multiple service nodes, or a service node within a distributed system. The server 120 executes the following steps of the transmission link processing method: Specifically, it can detect the configuration information status of each service in the service management terminal, which records the configuration information of each pre-deployed service in the target distributed system; when it detects that the configuration information status of a target service is in a migration-in change state, it retrieves the target configuration information of the target service from the service management terminal. The target configuration information includes the target service's current first sub-configuration information and the service's second sub-configuration information before migration; based on the first and second sub-configuration information, it generates an address translation rule table, which contains access address mapping information from the second sub-configuration information to the first sub-configuration information; and it performs configuration processing on the transmission link of the target service based on the address translation rule table.

[0092] Based on the above, this application can detect the configuration information status of each service recorded in the service management terminal in real time. When it detects that the configuration information status of the target service in the target distributed system is in a migration change state, it pulls the current first sub-configuration information and the second sub-configuration information of the target service before migration from the service management terminal. Then, based on the correspondence between the first and second sub-configuration information, an address translation rule table is constructed. The access address mapping information in the address translation rule table records the association between the access addresses of the target service before and after migration, thereby establishing a mapping bridge between the access addresses of the target service before and after migration. Finally, the data transmission link of the target service is configured based on the address translation rule table. In this way, after the target service is migrated, by establishing a mapping relationship between the old access address and the new access address, the target group can find the new access address through the old access address when accessing the target service at any time. Thus, compared with related technologies, there is no need to manually modify the network configuration information of the target service after migration, which improves the service migration efficiency, avoids configuration errors and interruption of the target service, ensures the stable operation of the target service, and allows the target group to access the target service without any noticeable difference, thus improving the user experience.

[0093] It should be noted that the above are just examples and can be applied to other transmission link processing scenarios, which will not be elaborated here.

[0094] For ease of understanding, each step of the transmission link processing method will be described in detail below. It should be noted that the order of the following embodiments is not intended to limit the preferred order of the embodiments.

[0095] See Figure 2 , Figure 2 This is a flowchart illustrating the steps of the transmission link processing method provided in the embodiments of this application. In the embodiments of this application, the transmission link processing method is executed by a computer device, such as... Figure 1 Taking server 120 as an example, the specific process is as follows:

[0096] 101. Detect the configuration information status of each service in the service management terminal.

[0097] The development of information technology has propelled the growth of online business services, with an increasing number of businesses being processed online. Examples include online shopping, e-ticketing, online meetings, e-reading, gaming, game stat tracking, and in-game friend communication. These online services support and handle requests from a wide range of users, offering not only convenience but also a superior user experience. However, as the number of users and the functionality of these services grow, the number of requests they need to handle also increases dramatically. The servers deployed for these services may no longer be sufficient to meet operational demands. To address this, service migration can be used to move these services to servers with sufficient computing resources, ensuring that the migrated servers can support the operational needs of the services.

[0098] After migrating business services to a new server, the network configuration information, such as Internet Protocol (IP) addresses and service ports, needs to be changed to match the new server due to the server replacement. At this time, the network configuration information is usually modified manually. However, this involves a large amount of work, making the configuration process inefficient and prone to errors. In addition, changes to the network configuration information may cause business service interruptions, preventing users from accessing and using the business services. Without knowing the new network configuration information, users cannot access the business services after the migration to the new server, thus degrading their experience.

[0099] To address the above issues, this application's embodiments primarily establish an access address mapping relationship between the target service's address configuration information before and after migration, representing the establishment of a mapping bridge between the target service's access addresses before and after migration. This mapping is stored as an address translation rule table, which is then used to configure the target service's transmission links. In this way, after the target service's address is migrated, by establishing a mapping relationship between the old and new access addresses, users can find the new access address using the old one whenever they access the target service. This eliminates the need to directly modify the target service's network configuration information after migration, improving service migration efficiency, preventing target service interruptions, ensuring stable operation of the target service, and allowing users to access the target service seamlessly, thus improving the user experience.

[0100] In this embodiment, the service management terminal can be a component of a server or a server machine in a distributed system. It can be parallel to the computer device used to execute the transmission link processing method. It stores the configuration information of each service deployed on the computer device in real time. Therefore, the service management terminal records the configuration information of each service pre-deployed in the target distributed system. When the computer device executes the transmission link processing method, it can detect the configuration information status of each service from the configuration information recorded by the service management terminal. Based on the configuration information status, it can determine whether the configuration information of the services deployed on the distributed system has changed. If a change has occurred, subsequent configuration processing is required for the transmission link of the target service with the changed configuration information status, so that traffic (requests, data packets) accessing the target service can be directed to the target service, avoiding access failure.

[0101] It should be noted that the service management terminal is used to record the configuration information of each service pre-deployed in the target distributed system. Specifically, this service management terminal can be a dedicated management terminal for the target distributed system, such as a service management backend that provides the deployment environment, for example, a cloud service provider's backend or cloud service management terminal, etc., without limitation here. This service management terminal is used to manage the configuration information of services in the target distributed system. For each service deployed in the target distributed system, during the deployment phase, in addition to deploying the service's code and data to the target distributed system, it is also necessary to write the configuration information of the deployed service into the service management terminal, that is, to write the configuration information of the service into the service management terminal so that the service management terminal records the configuration information of each service.

[0102] For example, when a target service is migrated to a target distributed system, the service management console needs to add the old configuration information of the target service before the migration (corresponding to the "second sub-configuration information" below), and the new configuration information of the target service after migration to the target distributed system (corresponding to the "first sub-configuration information" below). This first and second sub-configuration information together represent the address change of the target service before and after the migration, thus meeting the need for tracing the target service's origin if necessary. It should be noted that when a target service is migrated to a target distributed system, the service management console will add target configuration information for the target service. At this time, the configuration information status of the target service on the service management console will change to indicate that the target configuration information for the target service has been changed.

[0103] The configuration information status can represent the state of the corresponding service's configuration information detected in the service management terminal, and may include, but is not limited to, configuration retention status, configuration change status, and migration-in change status. The configuration retention status indicates that the configuration information of the corresponding service has not changed. The configuration change status can be the state when the configuration information of a non-migrated service in the target distributed system is modified, such as modifying the service port information. This means that when the configuration information is modified without migration across the target distributed system, server 120 will detect the configuration change status of the service in the service management terminal. The migration-in change status can represent the newly added configuration information when the target service migrates from outside the target distributed system to within the target distributed system. Since the target service does not exist in the target distributed system before the migration is sent, and the service management terminal does not record or store the relevant target configuration information of the target service beforehand, the service management terminal records the target configuration information of the target service only after the migration. Server 120 can detect the migration-in change status based on the newly recorded target configuration information in the service management terminal.

[0104] In this embodiment, the target distributed system is a deployment system for deploying various services. This target distributed system can be a "computer device" as described in this application, such as server 120. Alternatively, the target distributed system can also be a distributed system composed of server 120 and other computer devices (such as terminals or other physical servers), without limitation. The various services in the target distributed system can be video services, music services, voice services, online shopping platform services, game services, game assistant services, etc., without limitation.

[0105] In this embodiment, to ensure the normal operation and ease of management of services deployed in the target distributed system, the corresponding configuration information of each service deployed in the target distributed system needs to be stored on the service management terminal associated with the target distributed system. Additionally, the computing resource usage status of the containers to which each service belongs can also be stored; this is not limited here. To determine whether the configuration information of the services deployed in the target distributed system has changed, the server can periodically read the configuration information of each service from the service management terminal. For each service's configuration information, it is compared with the previously read historical configuration information to determine whether the current configuration information has changed relative to the historical configuration information, thereby determining the configuration information status of each service. For example, if no change has occurred, the configuration information status is "configuration maintained"; if the configuration information change is due to modifications without migration, the configuration information status is "configuration changed"; if the change is due to service migration, such as reading the configuration information of a service that was not read at the previous moment (i.e., the configuration information for that service was empty or zero at the previous moment), then the configuration information status of that service is determined to be "migration changed". This enables the monitoring of the configuration information status of each service from the service management end, so that subsequent communication configuration processing can be performed on the target service with the changed status, that is, transmission link configuration processing, so that traffic (requests, data packets) can be directed to the target service with reliability.

[0106] Furthermore, the status of each service's configuration information can be detected using a status detection mechanism. For example, a status detection mechanism can be established to periodically or in real-time check the status of each service's configuration information from the service management end. This could be achieved by periodically sending requests to the database storing configuration information or the configuration center (i.e., the service management end) using a polling method to retrieve the status fields of each service's configuration information. Alternatively, if a change in configuration information's status triggers a specific event, these events can be detected to obtain real-time status changes. For instance, a message queue can be established on the service management end, which periodically generates messages about the configuration information status of each service and publishes these messages to the queue. The server will then check the message queue and receive the messages to determine the configuration information status of each service. The migration-in change status can be represented by a predefined value, string, or identifier. If a message contains a predefined value, string, or identifier, it is determined that the target service's configuration information status is in a migration-in change state.

[0107] The above methods can detect in real time whether the configuration information of each service in the target distributed system has changed, so that communication configuration processing can be performed on the target service that has been migrated into the changed state, that is, transmission link configuration processing can be performed, so that traffic (requests, data packets) can be directed to the target service, which is reliable.

[0108] 102. When it is detected that the configuration information of the target service is in the migration change state, the target configuration information of the target service is retrieved from the service management terminal.

[0109] In this embodiment of the application, after obtaining the configuration information status of each service, it is possible to detect whether there is a migration change status in each configuration information status. If it is detected that the configuration information status of the target service is a migration change status, it means that the configuration information of the target service has changed due to the migration from a foreign server to the local server. At this time, the target configuration information of the target service can be obtained from the service management terminal so that the old configuration information and the current configuration information of the target service can be established based on the target configuration information, and the transmission link for processing the target service can be configured based on the mapping relationship information, which has reliability.

[0110] The target configuration information can be a set of configuration information of the target service before and after it is migrated to the local server. That is, the target configuration information includes the first sub-configuration information of the target service at present and the second sub-configuration information of the service before it is migrated.

[0111] The first sub-configuration information can represent the current configuration information of the target service after it has been migrated to the target distributed system. This may include, but is not limited to, the target service's current Internet Protocol Address (IP), service port information, and protocol. The second sub-configuration information can represent the historical configuration information of the target service before it was migrated to the target distributed system. This indicates the deployment configuration information of the target service's predecessor or previous version. For example, assuming the target service was deployed on a server in region A before the migration and is now migrated to a server in region B, the second sub-configuration information represents the configuration information of the target service when it was deployed on the server in region A, and the first sub-configuration information represents the current configuration information of the target service when it is deployed on the server in region B. Similarly, the second sub-configuration information includes, but is not limited to, the target service's old IP address, old service port information, and old protocol before the migration.

[0112] The Internet Protocol (IP) address is a standardized address format provided by the IP protocol. It assigns a logical address to every network and every host on the Internet, thus masking differences in physical addresses. For example, the IP address in the first sub-configuration information represents the logical address of the server on which the target service is deployed.

[0113] The service port information can be the port address of the cluster where the container (pod) corresponding to the target service resides, or the port information of the server machine where the container of the target service resides. Specifically, it can be the port identifier of the server machine or virtual machine where the target service resides, such as using a port number to represent the service port information. It is understood that multiple services can be deployed in the target distributed system. Different service port information is assigned to services of different business types to manage the transmission of different business requests, ensuring that different business requests are accurately sent to the corresponding services, thereby avoiding confusion during transmission. For example, the target distributed system may deploy game query services, game character transfer services, game item exchange services, etc. Different service ports are set for different services. For example, the port information for the game query service is 01, the port information for the game character transfer service is 02, the port information for the game item exchange service is 03, and so on. The above is only an example and is not intended as a specific limitation.

[0114] The protocol can be any type of transport protocol, such as Hypertext Transfer Protocol (HTTP), File Transfer Protocol (FTP), Transmission Control Protocol (TCP), User Datagram Protocol (UDP), etc. There are no restrictions here.

[0115] Specifically, since the service management terminal records the configuration information of each service in the target distributed system, the server can detect the configuration information status of each service from the service management terminal to determine whether there is a target service whose configuration information status is in the migration change state. If the server detects that there is a target service whose configuration information status is in the migration change state, it will pull the target configuration information of the target service from the service management terminal. When retrieving target configuration information for a target service, the server can establish a connection with the service management system. This connection can be established using protocols such as HTTP or TCP. Assuming the service management system provides a RESTful API (Representation Layer State Transfer Application Programming Interface), a request can be sent using the HTTP protocol to establish the connection between the server and the service management system. Then, during the retrieval of target configuration information, authorization verification can be performed. This verification method ensures the security of the configuration information for each service. Only authorized servers or individual objects (terminals) can retrieve the target configuration information. The authorization verification request can be generated based on the local server's server identifier and the target service identifier. After the service management system verifies the authorization using the server identifier and target service identifier carried in the authorization request, the target configuration information is obtained from the service management system, thus ensuring the security of the target configuration information. In this way, by detecting the status of the configuration information for each service, the server can ensure that it can retrieve the latest configuration information in a timely manner, so as to generate subsequent access mapping information and ensure the normal operation of the service.

[0116] By using the above method, when the configuration information of a target service is detected to be in a migration change state, the target configuration information of the target service can be obtained from the service management terminal. This allows for the subsequent establishment of a mapping relationship between the original and current configuration information of the target service regarding access, and the configuration of the transmission link for processing the target service based on this mapping relationship, thus ensuring reliability.

[0117] 103. Generate an address translation rule table based on the first sub-configuration information and the second sub-configuration information.

[0118] In this embodiment, after retrieving the target configuration information of the target service, access address mapping information can be generated based on the first sub-configuration information and the second sub-configuration information contained in the target configuration information, and added and stored as an address translation rule table. In this way, the transmission link of the target service can be configured and processed according to the address translation rule table, so that the new access address can be found through the old access address. This allows subsequent traffic to access the target service to access the target service correctly according to the configured transmission link, realizing seamless access to the target service and improving the security of service access.

[0119] The address translation rule table can be a table used to store and record access rules for traffic (data packets, requests). It can be a Network Address Translation (NAT) table under the iptables technology, or it can be a sub-table under the iptables table. This address translation rule table can contain access address mapping information from the second sub-configuration information to the first sub-configuration information, representing the access rules for the target service.

[0120] The access address mapping information can be understood as the address mapping relationship between the second sub-configuration information and the first sub-configuration information. For example, assuming the target service is migrated from a server in region A to a server in region B, the access address information A of the target service when it is on the server in region A, and the access address information B of the target service when it is on the server in region B, are obtained. Then, a mapping relationship is established between access address information A and access address information B to obtain the access address mapping information. This allows subsequent traffic to access the target service based on access address information A, using the access address mapping information to find the address and obtain access address information B, thereby accessing the target service.

[0121] In some implementations, the configuration information may include three types: Internet Protocol address, service port information, and data packet protocol information. For the first sub-configuration information and the second sub-configuration information, mapping relationships between these three types of information are established respectively to obtain access address mapping information, which is then stored as an address translation rule table. For example, step 103 may include: extracting the first Internet Protocol address, the first service port information, and the first data packet protocol information from the first sub-configuration information; extracting the second Internet Protocol address, the second service port information, and the second data packet protocol information from the second sub-configuration information; establishing address mapping sub-information between the first Internet Protocol address and the second Internet Protocol address, establishing port mapping sub-information between the first service port information and the second service port information, and establishing protocol mapping sub-information between the first data packet protocol information and the second data packet protocol information; generating access address mapping information based on the address mapping sub-information, port mapping sub-information, and protocol mapping sub-information; creating an initial address translation rule table, and transmitting the access address mapping information to the initial address translation rule table to obtain the address translation rule table.

[0122] The first Internet Protocol address refers to the IP address contained in the first sub-configuration information, while the second Internet Protocol address refers to the IP address contained in the second sub-configuration. The description of the Internet Protocol address can be referred to above, and is not limited here.

[0123] The first service port information refers to the port address of the server or virtual machine where the target service is currently located. This port address can be the port identifier of the server or virtual machine where the target service is currently located, and can be represented by a port number. The second service port information refers to the port address of the server where the target service was located before it was migrated to the target distributed system, and this port address can be represented by a port number.

[0124] The first data packet protocol information can be Transmission Control Protocol (TCP) or User Datagram Protocol (UDP), or other types of protocols. The second data packet protocol information is described in the same way as the first data packet protocol. It should be noted that the first and second data packet protocol information can be referred to in the previous "Protocol" description, which will not be repeated here.

[0125] The address mapping sub-information refers to the mapping relationship between the first Internet Protocol (IP) address and the second IP address. It can represent the mapping relationship from the second IP address to the first IP address. For example, assuming the first IP address is "192.2.4.1" and the second IP address is "162.1.2.1", the address mapping sub-information can be represented as "162.1.2.1->192.2.4.1". The above is only an example and is not intended to be a specific limitation.

[0126] Here, the port mapping sub-information refers to the mapping relationship between the first service port information and the second service port information. It can be represented as a mapping relationship from the second service port information to the first service port information. For example, assuming the first service port information is "3030" and the second service port information is "2020", the port mapping sub-information can be represented as "2020->3030". The above is only an example and is not intended as a specific limitation.

[0127] The protocol mapping information refers to the mapping relationship between the first data packet protocol information and the second data packet protocol information. It can represent the mapping relationship from the second data packet protocol information to the first data packet protocol information. For example, assuming the first data packet protocol information is TCP and the second data packet protocol information is UDP, the protocol mapping information can be represented as "UDP->TCP". The above is only an example and is not intended as a specific limitation.

[0128] The initial address translation rule table can be a rule table created according to the table format of address table tool technology, and it can be a blank rule table; while the address translation rule table is obtained by adding access address mapping information to the initial address translation rule table. Specifically, the address translation rule table can be a sub-table of the network address translation table under the address table tool technology, and can be used to limit the communication configuration of one or more transmission links under the network address translation table.

[0129] Specifically, after obtaining the target configuration information, the first sub-configuration information and the second sub-configuration information can be obtained directly from the target configuration information. In order to establish the access address mapping information between the first sub-configuration information and the second sub-configuration information, firstly, it can be determined which information is contained in the first sub-configuration information and the second sub-configuration information respectively. For example, the first sub-configuration information contains the first Internet Protocol address, the first service port information, and the first data packet protocol information, while the second configuration information contains the second Internet Protocol address, the second service port information, and the second data packet protocol information. Then, the address mapping sub-information between the first Internet Protocol address and the second Internet Protocol address, the port mapping sub-information between the first service port information and the second service port information, and the protocol mapping sub-information between the first data packet protocol information and the second data packet protocol information are established.

[0130] Next, based on the generated address mapping sub-information, port mapping sub-information, and protocol mapping sub-information, access address mapping information is established. Specifically, this can be achieved by merging the generated address mapping sub-information, port mapping sub-information, and protocol mapping sub-information. For example, assuming the address mapping sub-information is represented as "162.1.2.1->192.2.4.1", the port mapping sub-information as "2020->3030", and the protocol mapping sub-information as "UDP->TCP", merging these three mapping sub-information results in the access address mapping information represented as "162.1.2.1:2020 / UDP->192.2.4.1:3030 / TCP". Finally, a blank rule table is created to store the address translation rules. Subsequently, the generated access address mapping information is added to the initial address translation rule table, resulting in the address translation rule table. This allows for subsequent configuration of the transport links associated with the target service based on the address translation rule table. This ensures that the transport links associated with the target service are bound to the corresponding address translation rule table, and that traffic transmission is configured according to the address translation rule table, thereby enabling successful and reliable access to the migrated target service.

[0131] Using the above method, access address mapping information can be generated based on the first and second sub-configuration information contained in the target configuration information, and added and stored as an address translation rule table. This table is then used to configure the transmission link of the target service, allowing the new access address to be found through the old access address. This ensures that subsequent traffic accessing the target service can correctly access the target service according to the configured transmission link, achieving seamless access to the target service and improving the security of service access.

[0132] 104. Configure the transmission link of the target service based on the address translation rule table.

[0133] In this embodiment, after obtaining the address translation rule table, the transmission link associated with the target service can be configured according to the address translation rule table so that the transmission link of the target service has the corresponding address translation rule. Since the address translation rule table contains access address mapping information, when traffic (data packets or requests) that needs to be sent to the target service is received, the data packets are set according to the address translation rule to be transmitted to the target service, realizing seamless access to the target service. In this way, there is no need to change the communication configuration of the transmission link of the target service, effectively avoiding the problem of service interruption of the target service, improving service migration efficiency and service operation stability.

[0134] The transmission link can be the routing direction and network path for accessing the target service, as well as the routing direction and network path for the target service when accessing external resources (such as individual terminals or other services), representing the routing path of data packets. It is understandable that when the transmission link for processing the target service is configured according to the address translation rule table, on the one hand, subsequent data packets accessing the target service will have their routing direction re-planned according to the access address mapping information, ultimately being sent to the target service. On the other hand, for data packets sent by the migrated target service, since the configuration process does not involve changing the communication configuration of the migrated target service, the source IP address and source service port information in the data packets sent by the target service may be set according to the IP address and service port information before the migration. Therefore, in order to trace the source of data packets sent by the target service later, it is also necessary to change the source IP address and source service port information of the data packets to be sent by the target service according to the access address mapping information.

[0135] In this embodiment, the transmission link associated with the target service may include a preprocessing transmission link for processing data packets transmitted to the local server, and an output transmission link for processing data packets sent by the target service. Therefore, when configuring the transmission link associated with the target service, both the preprocessing and output transmission links can be configured to ensure that data packets transmitted to the target service on the local server, as well as data packets sent by the target service, are processed according to address translation rules. This allows the target service to operate normally without directly modifying its communication configuration after migration, thus improving its operational stability.

[0136] In some implementations, the preprocessing transport link and output transport link associated with the target service are determined by querying the network address translation table associated with the target service, and the preprocessing transport link and output transport link are configured according to the address translation rule table. For example, step 104 may include:

[0137] (104.1) Read the network address translation table under the address table tool associated with the target service. The network address translation table records the preprocessing transmission link and output transmission link associated with the target service.

[0138] (104.2) Using the address table tool associated with the target service, perform configuration processing on the preprocessing transmission link and output transmission link associated with the target service according to the address translation rule table.

[0139] The address table tool mentioned earlier is "iptables," as detailed in the previous description. It's important to note that this address table tool can be an application component, providing routing control capabilities such as deciding packet filtering and flow. Furthermore, the target service can be deployed as a container within a Kubernetes cluster, meaning the target service is migrated and deployed to a target container within the Kubernetes cluster of the target distributed system. The address table tool can then run alongside the target service within that target container, managing the transmission links associated with the target service to control the routing direction of data packets.

[0140] The Network Address Translation Table (NAT) is a rule table provided by the address table tool. The address table tool has a variety of rule tables, and the NAT is one of them. It is used to manage the rules of the preprocessing transmission links, output transmission links, delivery transmission links, and input transmission links associated with the target service.

[0141] The preprocessing transmission link is used to switch the routes of data packets destined for this server (or the target container to which the target service belongs). It is a transmission link that controls the routing direction of data packets flowing into this server. The preprocessing transmission link can be understood as the transmission path that data packets take before entering the target service.

[0142] The output transmission link is used to control the sending end of data packets sent by this server (or the target container to which the target service belongs) to ensure that the source address information carried by the data packets conforms to the address information of this server (or the target container to which the target service belongs).

[0143] Specifically, after obtaining the address translation rule table, the target container to which the target service belongs can be determined first. The network address translation table (NAT) of the address table tool within the target container is then read. Based on this NAT, the preprocessing transport link and the output transport link associated with the target service can be determined. It should be noted that the preprocessing transport link controls the routing of data packets destined for this server, while the output transport link controls data packets sent by this server; therefore, it affects the transmission of data packets for the target service. Based on this, the capabilities provided by the address table tool can be used to configure the preprocessing and output transport links according to the address translation rule table. This eliminates the need to directly modify the communication configuration of the migrated target service, ensuring its stable operation. Consequently, data packets subsequently transmitted to the target service, as well as data packets sent by the target service, are configured according to the access address mapping information in the address translation rule table, thereby switching the routing direction of the data packets. This allows the object to interact normally with the migrated target service, improving the object's user experience.

[0144] In some implementations, address translation rule tables can be added to the preprocessing transport link and the output transport link associated with the target service by executing link configuration instructions provided by the address table tool, thereby limiting packet transmission on the preprocessing transport link and the output transport link. For example, step (104.2) may include:

[0145] (104.2.1) Obtain the link configuration command corresponding to the address table tool associated with the target service;

[0146] (104.2.2) In response to the link configuration command, add the address translation rule table to the preprocessed transport link associated with the target service, and add the address translation rule table to the output transport link associated with the target service.

[0147] The link configuration command can be one of the logical commands provided by the address table tool, used to configure the transmission rules of the transmission link. It should be noted that the link configuration command and other commands of the address table tool are predefined; these commands instruct the address table tool what operations to perform. For example, in iptables, link configuration commands include, but are not limited to, adding and deleting rules.

[0148] Specifically, the link configuration instructions corresponding to the address table tool can be obtained. This can be done by querying the configuration file, database, or other storage location associated with the address table tool; the specific method is not limited here. After obtaining the link configuration instructions, the server responds. On one hand, since the preprocessing transmission link is the transmission path that data packets traverse before entering the target service, and the address translation rule table contains a series of rules on how to translate data packet addresses, including access address mapping information, by adding the address translation rule table to the preprocessing transmission link, the destination address, destination port, and other information in the data packet are updated according to the rules of the access address mapping information before the data packet enters the target service. This ensures that the data packet can be correctly transmitted to the target service. In this way, subsequent data packets entering the target service have the correct address format to comply with network policies and security requirements.

[0149] On the other hand, the output transmission link is the transmission path that the target service needs to traverse when sending data packets. Therefore, to perform address translation on data packets sent from the target service, an address translation rule table is added to the output transmission link for configuration processing. It should be noted that address translation of data packets can include converting internal addresses to externally accessible addresses, or making other adjustments to the packet addresses according to actual needs. For example, in an enterprise network, after an internal server processes a request, it needs to send a response data packet. The source address of the response data packet needs to be translated to the public IP address of the enterprise (such as the overall service cluster) so that the client that previously sent the request can correctly receive the response data packet. Thus, by applying an address translation rule table to the output transmission link, it is ensured that subsequent data packets can be successfully transmitted to their next destination after leaving the target service, making the sent data packets traceable and compliant with network configuration and security policies.

[0150] In some implementations, the link configuration information of the preprocessing transmission link and the output transmission link associated with the target service can be obtained first. This allows for a decision on whether to configure the preprocessing transmission link and the output transmission link according to the address translation rule table, avoiding duplication. For example, before step (104.2.2), the process may further include: obtaining the link configuration information corresponding to the preprocessing transmission link and the output transmission link; then step (104.2.2) includes: when it is determined from the link configuration information that the preprocessing transmission link and the output transmission link are not associated with an address translation rule table, adding the address translation rule table to the preprocessing transmission link associated with the target service, and adding the address translation rule table to the output transmission link associated with the target service.

[0151] Specifically, to ensure correct data packet interaction for the migrated target service, the preprocessing transmission link and the output transmission link need to be configured according to the link configuration information. However, before configuring the transmission links, it is advisable to first check whether address translation rule tables exist in the preprocessing and output transmission links. If not, then the two transmission links are configured according to the address translation rule tables. This avoids redundant configuration of the transmission links associated with the target service and reduces unnecessary configuration processes.

[0152] In some implementations, the address translation rule table can be bound to the packet protocol types supported by the preprocessed transport link to complete the configuration processing of the preprocessed transport link. For example, step (104.2.2) "adding the address translation rule table to the preprocessed transport link associated with the target service" may include: determining the packet protocol types supported by the preprocessed transport link; binding the address translation rule table to the packet protocol types supported by the preprocessed transport link to configure the preprocessed transport link associated with the target service.

[0153] The data packet protocol type includes, but is not limited to, Transmission Control Protocol (TCP) and User Datagram Protocol (UDP).

[0154] Specifically, the types of data packets supported by the preprocessing transmission link can be determined by reading its configuration file and querying relevant network devices. This means determining which protocol types the preprocessing transmission link can handle correctly. Then, since the address translation rule table contains a series of rules on how to translate data packet addresses, it is applied to the preprocessing transmission link by binding the address translation rule table to the supported data packet protocol types. For example, if the preprocessing transmission link supports TCP and UDP protocols, the address translation rule table needs to specify how to perform address translation for TCP and UDP packets respectively. Therefore, the address translation rule table is bound to TCP and UDP protocols so that TCP and UDP packets are subsequently routed according to the access address mapping information contained in the address translation rule table. After binding, the configuration of the preprocessing transmission link is complete. This ensures that the address translation rules are accurately applied to data packets of different protocol types, allowing each data packet of different protocol types to be configured before entering the target service. This enables effective management and control of data packet transmission, ensuring correct data packet transmission.

[0155] It should be noted that the implementation process of "adding the address translation rule table to the output transmission link associated with the target service" can be found in the description of "adding the address translation rule table to the preprocessing transmission link associated with the target service", and will not be elaborated here.

[0156] In some implementations, the available authorized object identifier and remaining authorization count can be set for the access address mapping information in the address translation rule table, and the preprocessing transmission link can be configured in combination with the authorization information and the address translation rule table. For example, if the transmission link includes a preprocessing transmission link, step 104 may include:

[0157] (104.a) Obtain a preset mapping access permission list, which contains multiple authorized object identifiers that have the right to use the access address mapping information, and the remaining number of authorizations for each authorized object identifier for the access address mapping information;

[0158] (104.b) Merge the mapping access permission list and the address translation rule table to generate the target address translation permission table;

[0159] (104.c) Configure the preprocessing transport links associated with the target service according to the target address translation permission table.

[0160] The mapping access permission list can be a list containing usage permission information for restricted access address mapping information. This usage permission information includes a set of authorized object identifiers that have usage permissions for the access address mapping information in the address translation rule table, and the remaining number of authorization attempts for each authorized object identifier. Specifically, after the target service is migrated, the authorized objects that can use the access address mapping information to achieve seamless access to the target service can be restricted. Only authorized objects can achieve seamless access to the target service after the migration, and a limit is set for the number of times these authorized object identifiers can access the target service in this way, i.e., the remaining number of authorization attempts. For example, taking the target service as a game assistant service, after the game assistant service is migrated, access permissions for access address mapping information can be set for players with good gaming habits, and the number of times access permissions for access address mapping information can be set and recorded in the mapping access permission list. Therefore, the mapping access permission list records the authorized object identifiers that can use access address mapping information, as well as the remaining number of authorizations for each authorized object identifier. It should be noted that for players with good gaming habits, a larger number of remaining authorizations can be set, and the size of the remaining authorizations can also be flexibly set according to the game member level of the player. In addition, the remaining authorizations can also be periodic, which can be the remaining authorizations within the target period. The remaining authorizations will be initialized in the next period. For example, the number of remaining authorizations limited to 10 times, 20 times, etc., is not limited here.

[0161] The target address translation permission table can include access address mapping information, authorized object identifiers for the access address mapping information, and the remaining number of authorization attempts associated with each authorized object identifier. For example, assuming the access address mapping information is "162.1.2.1:2020 / UDP->192.2.4.1:3030 / TCP", after generating the target address translation permission table, the information in the target address translation permission table can be represented as: "162.1.2.1:2020 / UDP->192.2.4.1:3030 / TCP": Authorized object A, 30 remaining authorization attempts; Authorized object B, 20 remaining authorization attempts, etc. These are just examples. It should be noted that the contents of the target address translation permission table can be recorded in key-value pair format. For example, using access address mapping information as the key and authorized object identifier as the value, or using "access address mapping information + authorized object identifier" as the key and remaining authorization attempts as the value. These are just examples.

[0162] Specifically, after the target service is migrated, due to the change in service address, the target group needs to use the access address mapping information in the address translation rule table to achieve seamless access to the target service. Otherwise, they need to manually modify the access address to access the target service. Based on this, usage permissions can be pre-set for the access address mapping information in the address translation rule table, that is, setting authorized object identifiers for using the access address mapping information in the address translation rule table. The authorized object identifier can be the target object's nickname, communication number, email address, unique identifier, custom characters, etc. In addition, in order to limit the authorized object from using the access address mapping information too frequently or excessively, the number of times the access permission can be set for the authorized object identifier, that is, the remaining number of times the authorization can be granted. Specifically, the remaining number of times the authorization can be flexibly set according to the target object's credit, operating habits, membership level, etc., thus obtaining a pre-set mapping access permission list. Based on this, before configuring the preprocessing transmission link associated with the target service, a preset mapping access permission list can be obtained and merged with the address translation rule table. This integrates the permission information into the address translation rules, generating a target address translation permission table. This table adds authorized object identifiers and remaining authorization counts to the address translation rules, thus limiting and constraining the use of access address mapping information. Finally, based on the target address translation permission table, the preprocessing transmission link associated with the target service is configured. This configuration process may involve adding the target address translation permission table to the preprocessing transmission link, binding the target address translation permission table with the data packet protocol types supported by the preprocessing transmission link. This ensures that subsequent data packets transmitted to the target service are processed according to the rules in the target address translation permission table. In this way, by configuring the preprocessing transmission link through mapping access permission information and the address translation rule table, the usage rights of access address mapping information are limited, improving network security and the rationality of resource use.

[0163] In some implementations, after configuring the preprocessed transport link by mapping access permission information and address translation rule tables, for data packets that need to be transmitted to the target service, if the mapping access permission requirements are met, the first data packet is sent to the target service according to the access address mapping information. For example, after step (104.c), the following may also be included:

[0164] (A.1) Receive a first data packet to be transmitted to a target service, and determine a first object identifier associated with the first data packet;

[0165] (A.2) Transmit the first data packet and the first object identifier to the preprocessing transmission link;

[0166] (A.3) By preprocessing the transmission link, query the target address translation permission table to determine the remaining number of times the first object identifier is authorized for the access address mapping information;

[0167] (A.4) When the remaining number of authorization attempts for the target exceeds the preset available threshold, the first data packet is sent to the target service according to the access address mapping information.

[0168] The first data packet can be a "request" type data packet, which may carry request content, first object identifier, etc., without limitation here.

[0169] The preset available threshold can be a limit value used to measure the number of times access permissions for access address mapping information can be used. This preset available threshold is used to determine whether a relevant object has the right to use the access address mapping information. The preset available threshold can be set to a natural number such as 0 or 1, and there is no limitation here.

[0170] Specifically, after configuring the preprocessing transmission link according to the mapping access permission information and the address translation rule table, when the server receives the first data packet, it can determine the destination of the first data packet based on the destination IP address and destination service port information in the first data packet. If the destination IP address and destination service port information of the first data packet belong to the address and port information before the target service migration, then the transmission destination of the first data packet is determined to be the target service. At this time, the first object identifier that sent the first data packet can be determined. Then, the first data packet and the first object identifier are transmitted together to the preprocessing transmission link. Since the preprocessing transmission link has already translated the target address beforehand, the server can determine the destination destination of the first data packet. The permission table is used for configuration processing. Therefore, when the first data packet and the first object identifier are detected, the target address translation permission table can be queried to see if there is an authorized object identifier that matches the first object identifier. That is, it is determined whether the first object identifier has been pre-authorized to use the access address mapping information. If the first object identifier is found to be authorized, the remaining number of target authorizations corresponding to the first object identifier is obtained. Finally, the remaining number of target authorizations is compared with a preset available threshold. If the remaining number of target authorizations is greater than the preset available threshold, it means that the first object identifier has the right to use the access address mapping information. At this time, the first data packet can be sent to the target service according to the access address mapping information. In this way, the access rights to access address mapping information can be limited. Only authorized groups of objects can achieve seamless access to the target service based on the access address mapping information, improving network security and the rationality of resource use.

[0171] In some implementations, when transmitting a data packet to the target service according to the access address mapping information, it is necessary to update the destination Internet Protocol address and destination service port information of the data packet according to the access address mapping information, and switch the routing direction of the data packet to transmit it to the target service. For example, "sending the first data packet to the target service according to the access address mapping information" in step (A.4) may include: updating the destination Internet Protocol address and destination service port information of the first data packet according to the access address mapping information through a preprocessing transmission link to obtain an updated target first data packet; and transmitting the target first data packet to the target service according to the destination Internet Protocol address and destination service port information in the target first data packet.

[0172] The destination Internet Protocol address refers to the destination IP address of the network layer in the first data packet, which is used to indicate the destination host to which the first data packet is to be delivered. The network layer may also include the source IP address, which in this case represents the address of the originator of the first data packet, specifically the IP address of the terminal or server to which the first object identifier belongs.

[0173] The destination service port information refers to the destination port information of the transport layer in the first data packet, which is used to indicate the service to which the first data packet is to be transmitted. The transport layer may also include source port information, which in this case indicates the port from which the first data packet was sent, such as the port information of the client, application or software that the first object identifier is logged into or bound to.

[0174] Specifically, the preprocessing transmission link is the network path that the first data packet traverses before it is formally transmitted to the target service. The access address mapping information contains the correspondence between the old IP address and old service port information and the target IP address and target service port information. Therefore, when the first data packet enters the preprocessing transmission link, the server updates the destination Internet Protocol address (i.e., destination IP address) in the network layer and the destination service port information in the transport layer of the first data packet according to the access address mapping information.

[0175] For example, the destination Internet Protocol address of the first data packet is the IP address of the target service before the migration, and the destination service port information is the port information of the target service before the migration. Since the target service involves a change in service address after migration, in order to meet the first object's need for seamless access to the migrated target service, the destination IP address and destination service port information of the first data packet need to be updated. Specifically, according to the mapping relationship between the old and new configuration information represented by the access address mapping information, the current target IP address of the target service is used as the destination Internet Protocol address in the network layer of the first data packet, and the current target service port information of the target service is used as the destination service port information in the transport layer of the first data packet. Thus, the updated target first data packet is obtained. Subsequently, the server determines the transmission path based on the modified destination IP address and destination service port information in the target first data packet to deliver the target first data packet to the target service process running on the destination service port. In this way, it is ensured that the first data packet can accurately reach the target service, complete the data transmission task, and achieve seamless access to the target service.

[0176] Furthermore, the transmission link of the target service is configured through an address translation rule table, and the destination Internet Protocol address and destination service port information of the data packets are changed according to the access address mapping information to switch the routing direction of the data packets. In this way, without directly changing the communication configuration of the target service, seamless access to the migrated target service can be achieved simply by switching the routing direction of the data packets, which improves the operational stability and migration efficiency of the target service and has reliability.

[0177] In some implementations, a blacklist that denies the use of access address mapping information can be pre-set to restrict certain groups of objects from using access address mapping information, thereby achieving seamless access and preventing malicious objects from occupying fast access resources. For example, after step 104, the method may further include: receiving a second data packet to be transmitted to the target service and determining the second object identifier associated with the second data packet; matching the second object identifier with object identifiers in a preset object permission list to obtain a matching result, wherein the preset object permission list contains object identifiers that do not have access rights to the migrated target service; and when the matching result determines that the preset object permission list does not contain the second object identifier, sending the second data packet to the target service according to the access address mapping information.

[0178] The second data packet refers to the data packet that needs to be transmitted to the target service. The description of the second data packet can be referred to the description of the "first data packet" above, and will not be repeated here.

[0179] The preset object permission list can be a list of objects that do not have access to the target service. It contains object information of the target service after access is denied and the object information can be object identifiers, such as the object's nickname, communication number, email address, etc., which are not limited here.

[0180] Specifically, after migrating the target service and configuring the transmission link of the target service according to the address translation rule table, if the second data packet is determined to be a data packet that needs to be transmitted to the target service based on the destination IP address and destination service port information carried by the second data packet, the second object identifier associated with the second data packet, i.e., the second object identifier that initiated the second data packet, can be determined first. This second object identifier is then matched with object identifiers in the preset object permission list to obtain the matching result. It should be noted that since this preset object permission list contains object identifiers that are denied access to the migrated target service, if the matching result determines that there is an object identifier in the preset object permission list that matches the second object identifier, it means that the second object identifier is in the target service's blacklist after migration. In this case, sending the second data packet to the current migrated target service is refused. If the matching result determines that there is no object identifier in the preset object permission list that matches the second object identifier, it means that the second object identifier is not a restricted object in the target service's blacklist after migration. Therefore, the destination Internet Protocol address in the network layer and the destination service port information in the transport layer of the second data packet can be changed according to the access address mapping information, so that the second data packet can be sent to the target service according to the changed destination Internet Protocol address and destination service port information. This prevents malicious objects from accessing the migrated target service, ensuring the ecological health and security of the target service, and improving network security and the rationality of resource use.

[0181] In some implementations, for data packets sent by the target service, it is necessary to modify the source Internet Protocol address and source service port information of the data packets to make the sent data packets traceable and improve the transmission reliability of the data packets. For example, after step 104, the method may further include: obtaining the third data packet to be sent by the target service and transmitting the third data packet to the output transmission link; updating the source Internet Protocol address and source service port information of the third data packet according to the access address mapping information in the address translation rule table through the output transmission link to obtain the updated target third data packet; transmitting the target third data packet to the delivery transmission link associated with the target service, so as to send the target third data packet through the delivery transmission link based on the updated source Internet Protocol address and source service port information in the target third data packet.

[0182] Here, the source Internet Protocol address refers to the source IP address at the network layer in the corresponding data packet, while the source service port information refers to the source port information at the transport layer in the corresponding data packet. It should be noted that since the configuration process does not involve changing the communication configuration of the migrated target service, the source IP address and source service port information in the third data packet sent by the target service may be set according to the old IP address and old service port information before the migration.

[0183] The transmission link can be a network path responsible for delivering the data packets to the final receiver.

[0184] It should be noted that since the configuration process does not involve changing the communication configuration of the target service after migration, the source IP address and source service port information of the third data packets to be sent by the target service may be set according to the IP address and service port information before migration. Therefore, in order to trace the data packets sent by the target service later, it is necessary to change the source IP address and source service port information of the data packets to be sent by the target service according to the access address mapping information. Specifically, the output transmission link is a specific network path dedicated to processing data packets sent by the target service. It is configured in the early stage through the address translation rule table. When the third data packet is transmitted to the output transmission link, the output transmission link will update the source Internet Protocol address (source IP address) and source service port information of the third data packet according to the access address mapping information to obtain the updated target third data packet. Furthermore, the delivery transmission link is the network path responsible for delivering the data packets to be sent to the final receiver. When it receives the target third data packet to be sent, it will send the target third data packet out according to the updated source IP address and source service port information in the target third data packet. This ensures that the transmitted data packets carry the correct source address and source port information during transmission, facilitating subsequent tracing and guaranteeing the accuracy of information in network communication.

[0185] It should be noted that in any of the above embodiments, when changing the source IP address, source service port information, destination IP address, and destination service port information of the data packet, the transport layer protocol information can also be modified. Specifically, the protocol information is modified according to the access address mapping information, which will not be elaborated here.

[0186] In this embodiment of the application, for the target service after migration, the number of containers for scaling up the target service can also be determined based on the amount of data processing of the target service, so as to improve the processing performance of the target service.

[0187] In some implementations, the number of containers for scaling up the target service can be determined based on the current data processing volume of the target service and the resource utilization rate of the corresponding target service container, and the transmission links of the scaled-up target service can be configured according to the address translation rule table. For example, after step 104, the process may further include: obtaining the data processing volume for the target service; when the data processing volume is greater than a preset data volume threshold, determining the service container cluster associated with the target service and obtaining the resource utilization rate of each target service container in the service container cluster; when the resource utilization rate of each target service container is greater than a preset resource utilization threshold, creating a corresponding service container image based on the target service container; and configuring the transmission links of the target service image deployed in the service container image based on the address translation rule table using the address table tool in the service container image.

[0188] The data processing volume can be metrics such as the number of requests processed per unit of time or the number of bytes of data processed. For example, for a web server, the data processing volume can be the number of HTTP requests processed per minute; for a database service, it can be the number of queries processed per second. These are just examples.

[0189] The preset data volume threshold is a value pre-set based on the performance indicators and business requirements of the target service, used to determine the amount of data that the target service needs to process.

[0190] The service container cluster is a collection of containers that run the target service. It includes one or more target service containers that run the target service. These multiple target service containers work together to run and maintain the target service.

[0191] The preset resource usage threshold can be a judgment value used to measure the load status of the corresponding target service container. If the resource usage rate of a target service container is greater than the preset resource usage threshold, it indicates that the target service container is in a high load state, that is, the utilization rate of computing resources (such as CPU, content or network resources) is relatively high.

[0192] Specifically, the server can detect and collect the current data processing volume of the target service, and compare the obtained data processing volume with a preset data volume threshold. When the data processing volume exceeds the preset data volume threshold, it indicates that the target service may be facing significant processing pressure. At this point, to accurately understand the pressure on the target service, the resource usage of related containers of the target service can be further analyzed. For example, the service container cluster associated with the target service can be identified. The service container cluster is a set of containers running the target service. Then, the resource utilization rate of each target service container in the cluster can be obtained. The resource utilization rate can include CPU utilization, memory utilization, or network resource (such as bandwidth) utilization. Furthermore, the resource utilization rate of each target service container is compared with a preset resource utilization threshold. If the resource utilization rate of all target service containers exceeds this preset resource utilization threshold, it indicates that the current target service containers are already under high load. Relying solely on the existing target service containers cannot effectively handle the ever-increasing data volume. Therefore, it is necessary to expand the number of containers for the target service. When scaling up, a corresponding service container image can be created based on the target service container. This service container image is a lightweight, executable software package containing all the files, dependencies, and configuration information required to run the target service. Additionally, the service container image includes an address table tool used to configure the transport links of the target service image deployed within the image. This address table tool performs the corresponding configuration processing on the transport links of the target service image within the service container image according to the address translation rule table. This configuration process can be referred to the previous description and will not be repeated here. In this way, the target service can be dynamically scaled up based on its data processing volume and container resource usage, ensuring that the newly scaled-up service containers can correctly access the network, thereby improving the processing performance of the target service and meeting business needs.

[0193] Using the above methods, the transmission links associated with the target service can be configured according to the address translation rule table, so that the transmission links of the target service have corresponding address translation rules. Since the address translation rule table contains access address mapping information, when traffic (data packets or requests) that needs to be sent to the target service is received, the data packets are set according to the address translation rules, realizing seamless access to the target service. In this way, there is no need to change the communication configuration of the transmission links of the target service, effectively avoiding service interruption problems and improving service migration efficiency and service operation stability.

[0194] As can be seen from the overall description of the embodiments of this application, the configuration information status of each service recorded in the service management terminal can be detected in real time. When the configuration information status of the target service in the target distributed system is detected to be in a migration change state, the current first sub-configuration information and the second sub-configuration information of the target service before migration are retrieved from the service management terminal. Then, an address translation rule table is constructed based on the correspondence between the first and second sub-configuration information. The access address mapping information in the address translation rule table records the association between the access addresses of the target service before and after migration, so as to establish a mapping bridge between the access addresses of the target service before and after migration. Finally, the data transmission link of the target service is configured based on the address translation rule table. In this way, after the target service is migrated, by establishing a mapping relationship between the old access address and the new access address, the target group can find the new access address through the old access address when accessing the target service at any time. Thus, compared with related technologies, there is no need to manually modify the network configuration information of the target service after migration, which improves the service migration efficiency, avoids configuration errors and interruption of the target service, ensures the stable operation of the target service, and allows the target group to access the target service without any noticeable difference, thus improving the user experience.

[0195] Based on the methods described in the above embodiments, the following examples will provide further detailed explanations.

[0196] Figure 3 This is a schematic flowchart of another step in the transmission link processing method provided in the embodiments of this application. For ease of understanding, the embodiments of this application are combined with... Figure 3 Describe it.

[0197] In this embodiment of the application, the transmission link processing method is executed by a computer device, such as... Figure 1 Taking server 120 as an example, the specific process of this transmission link processing method is as follows:

[0198] 201. Detect the configuration information status of each service in the service management terminal.

[0199] In this embodiment, the service management terminal can be a component of a server or a server machine in a distributed system. It can be parallel to the computer device used to execute the transmission link processing method and is used to record the configuration information of each service pre-deployed in the target distributed system. When the computer device executes the transmission link processing method, it can detect the configuration information status of each service from the configuration information recorded by the service management terminal. Based on the configuration information status, it can determine whether the configuration information of the service deployed in the distributed system or locally has changed. If a change has occurred, subsequent configuration processing is required for the transmission link of the target service with the changed configuration information status, so that traffic (requests, data packets) accessing the target service can be directed to the target service, avoiding access failure.

[0200] It should be noted that this service management terminal can be a dedicated management terminal for the target distributed system. It can be a service management backend that provides the service deployment environment, such as the backend of a cloud service provider or a cloud service management terminal. There is no limitation here. This service management terminal is used to manage the configuration information of services in the target distributed system. For each service deployed in the target distributed system, in addition to deploying the service's code, data, etc. to the target distributed system during the deployment phase, it is also necessary to write the configuration information of the deployed service into the service management terminal. That is, write the configuration information of the service into the service management terminal so that the service management terminal records the configuration information of each service.

[0201] To determine whether the configuration information of services deployed in the target distributed system has changed, the server can periodically read the configuration information of each service from the service management terminal. For each service's configuration information, it compares it with the previously read historical configuration information to determine whether the current configuration information has changed relative to the historical configuration information, thus determining the configuration information status of each service. For example, if there has been no change, the configuration information status is "configuration maintained"; if the configuration information change is due to modifications without migration, the configuration information status is "configuration changed"; if the change is due to service migration, such as reading the configuration information of a service that was not read at the previous time (i.e., the configuration information for that service was empty or zero at the previous time), then the configuration information status of that service is determined to be "migration changed". In this way, the configuration information status of each service can be detected from the service management terminal, so that subsequent communication configuration processing, i.e., transmission link configuration processing, can be performed on the target service in the migration changed state, ensuring that traffic (requests, data packets) is directed to the target service with reliability.

[0202] 202. When it is detected that the configuration information of the target service is in the migration change state, the target configuration information of the target service is retrieved from the service management terminal.

[0203] In this embodiment of the application, after obtaining the configuration information status of each service, it is possible to detect whether there is a migration change status in each configuration information status. If it is detected that the configuration information status of the target service is a migration change status, it means that the configuration information of the target service has changed due to the migration from a foreign server to the local server. At this time, the target configuration information of the target service can be obtained from the service management terminal so that the mapping relationship information between the original configuration information and the current configuration information of the target service can be established based on the target configuration information. The transmission link for processing the target service can then be configured based on the mapping relationship information, which has reliability.

[0204] Specifically, since the service management terminal records the configuration information of each service in the target distributed system, the server can detect the configuration information status of each service from the service management terminal to determine whether there is a target service whose configuration information status is in the migration change state. If the server detects that there is a target service whose configuration information status is in the migration change state, it will pull the target configuration information of the target service from the service management terminal.

[0205] 203. Generate an address translation rule table based on the first sub-configuration information and the second sub-configuration information.

[0206] In this embodiment, after retrieving the target configuration information of the target service, access address mapping information can be generated based on the first sub-configuration information and the second sub-configuration information contained in the target configuration information, and added and stored as an address translation rule table. In this way, the transmission link of the target service can be configured and processed according to the address translation rule table, so that the new access address can be found through the old access address. This allows subsequent traffic to access the target service to access the target service correctly according to the configured transmission link, realizing seamless access to the target service and improving the security of service access.

[0207] Specifically, the types of configuration information can include three types: Internet Protocol address, service port information, and data packet protocol information. For the first sub-configuration information and the second sub-configuration information, a mapping relationship between the above three types of information is established to obtain access address mapping information and store it as an address translation rule table.

[0208] For example, the first sub-configuration information includes the first Internet Protocol address, the first service port information, and the first data packet protocol information, while the second configuration information includes the second Internet Protocol address, the second service port information, and the second data packet protocol information. Address mapping sub-information is established between the first and second Internet Protocol addresses, as well as port mapping sub-information between the first and second service port information, and protocol mapping sub-information between the first and second data packet protocol information. These three mapping sub-information are then merged. For example, assuming the address mapping sub-information is represented as "162.1.2.1->192.2.4.1", the port mapping sub-information as "2020->3030", and the protocol mapping sub-information as "UDP->TCP", the merged access address mapping information can be specifically represented as "162.1.2.1:2020 / UDP->192.2.4.1:3030 / TCP". Finally, a blank rule table is created to store address translation rules. Subsequently, the generated access address mapping information is added to the initial address translation rule table to obtain the address translation rule table.

[0209] 204. Read the network address translation table under the address table tool associated with the target service.

[0210] In this embodiment, after obtaining the address translation rule table, the transmission links associated with the target service can be configured according to the address translation rule table so that the transmission links of the target service have corresponding address translation rules. This configuration process can be achieved using the capabilities of the address table tool (iptables).

[0211] Specifically, this address table tool can be an application component that provides routing control capabilities, such as deciding packet filtering and flow direction. It's important to note that the target service can be deployed as a container within a Kubernetes cluster, meaning the target service is migrated and deployed to a target container within the Kubernetes cluster of the target distributed system. The address table tool can run alongside the target service within this target container, managing the transport links associated with the target service to control the routing direction of data packets. Therefore, by using the address table tool associated with the target service, the network address translation table managed by this tool is determined. This table contains the transport links associated with the target service managed by the address table tool, such as preprocessing and output transport links. Additionally, it also includes input and delivery transport links associated with the target service, which are not limited here.

[0212] 205. Obtain the link configuration command corresponding to the address table tool associated with the target service.

[0213] In this embodiment, besides determining the transmission links requiring configuration based on the network address translation table associated with the address table tool, it is also necessary to obtain the link configuration capabilities of the address table tool, i.e., link configuration instructions. These instructions can be one of the logical instructions provided by the address table tool, used to configure the transmission rules of the transmission links. It should be noted that the link configuration instructions and other instructions of the address table tool are predefined. These instructions guide the address table tool on what operations to perform. For example, in iptables, link configuration instructions include, but are not limited to, adding rules and deleting rules.

[0214] 206. In response to the link configuration command, add the address translation rule table to the preprocessed transport link associated with the target service, and add the address translation rule table to the output transport link associated with the target service.

[0215] In this embodiment of the application, the transmission link that needs to be configured is determined according to the network address translation table associated with the address table tool, and after obtaining the link configuration instruction corresponding to the address table tool, the link configuration instruction is executed to configure the preprocessing transmission link associated with the target service and the output transmission link associated with the target service.

[0216] Specifically, since the preprocessing transport link is the transmission path that data packets traverse before entering the target service, and the address translation rule table contains a series of rules on how to translate data packet addresses, including access address mapping information, by adding the address translation rule table to the preprocessing transport link, the destination address, destination port, and other information in the data packet are updated according to the rules of the access address mapping information before the data packet enters the target service, so that the data packet can be correctly transmitted to the target service. Meanwhile, the output transport link is the transmission path that the target service traverses when sending data packets. Therefore, in order to perform address translation on data packets sent from the target service, the address translation rule table is added to the output transport link to configure the output transport link.

[0217] For example, taking the configuration of a preprocessing transmission link as an example, the address translation rule table is bound to the packet protocol types supported by the preprocessing transmission link. For instance, if the preprocessing transmission link supports TCP and UDP protocols, the address translation rule table needs to specify how to perform address translation for TCP and UDP packets respectively. Therefore, the address translation rule table is bound to the TCP and UDP protocols so that TCP and UDP packets are subsequently routed according to the access address mapping information contained in the address translation rule table. This completes the configuration of the preprocessing transmission link, enabling the address translation rules to be accurately applied to packets of different protocol types. This allows packets of different protocol types to be configured one by one before entering the target service, achieving effective management and control of packet transmission and ensuring correct packet transmission.

[0218] To facilitate understanding of the embodiments of this application, specific application scenario examples will be used to describe the embodiments of this application. Specifically, the application scenario example will be described by performing the above steps 201-206.

[0219] It should be noted that this transmission link processing method is applicable to the configuration processing of communication transmission links after service migration. It retrieves configuration information data of the target service in the changed state from the service management center to obtain the target service's current new configuration information and its old configuration information before migration. This establishes an access address mapping relationship between the old and new configuration information, generating an address translation rule table. Finally, the transmission addresses associated with the target service are configured according to the address translation rule table. This allows subsequent traffic data (i.e., data packets) to be controlled via the traffic data transmission link according to the access address mapping relationship. The following section describes this transmission link processing method using a scenario example.

[0220] I. A brief introduction to the scenario examples for this transmission link is as follows:

[0221] The development of information technology has propelled the growth of online business services, with an increasing number of businesses being processed online. Examples include online shopping, e-ticketing, online meetings, e-reading, gaming, game stat tracking, and in-game friend communication. These online services support and handle requests from a wide range of users, offering not only convenience but also a superior user experience. However, as the number of users and the functionality of these services grow, the number of requests they need to handle also increases dramatically. The servers deployed for these services may no longer be sufficient to meet operational demands. To address this, service migration can be used to move these services to servers with sufficient computing resources, ensuring that the migrated servers can support the operational needs of the services.

[0222] After migrating business services to a new server, the change involves replacing the server and updating network configuration information such as Internet Protocol (IP) addresses and service ports to match the new server. This is typically done manually, which is inefficient and prone to errors due to the large workload involved. Furthermore, changes to network configuration information can cause service interruptions, preventing users from accessing and using the services. Without knowing the new network configuration information, users cannot access the migrated services, thus degrading their experience.

[0223] To address the above issues, this transmission link processing scenario example provides a general network configuration method for migrating container cluster services of a container orchestration system (Kubernetes). For example, taking a game assistant as the target service, the game assistant is deployed in a Kubernetes cluster to provide better game record queries and game community interaction functions for the target audience. This general network configuration method can meet the configuration requirements of the communication transmission link after migrating the game assistant to the Kubernetes cluster. Through the technology of address table (iptables) tools, when dynamically adding new containers (Pods) to the declarative controller, there is no need to modify the original game assistant service code or manually reconfigure the internal service routing. Specifically, the original game assistant service can be mirrored and deployed on a new server (or a server in a new region). The service management console associated with the new server writes the first configuration information of the game assistant service deployed on the new server and the original second configuration information, i.e., the target configuration information. Subsequently, the communication transmission link configuration after the migration begins is determined. The target configuration information is read from the service management console, and the mapping relationship between the old and new configuration information is established using the address table (iptables) tool within the container (Pod) where the game assistant service resides. This changes the traffic transmission link, redirecting traffic to the newly deployed container in the target cluster. This newly deployed container contains the migrated game assistant service, ensuring that subsequent requests from the target group can be seamlessly forwarded to the game assistant service after the server change, ensuring reliability.

[0224] II. The specific implementation process of this transmission link processing scenario example is as follows:

[0225] Figure 4 This is an example diagram of the transmission link system architecture provided in the embodiments of this application, combined with... Figure 4 As shown, in this transmission link processing scenario example, its system architecture may include a service management terminal (centralized configuration, rainbow) and the target cluster managed and deployed by the service management terminal. It should be noted that the target cluster contains deployed containers (Pods), and the containers (Pods) include target services (such as game assistant services), configuration detection components (netadmin), address table tools (iptables), and rule tables (such as address translation rule tables, NAT tables).

[0226] It should be noted that before configuring the transmission link, the game assistant service needs to be mirrored and deployed to a target server (this target server can be a server in any region, and its geographical address may differ from the original server and it may not belong to the same local area network). After deployment, the old configuration information of the original service (such as IP, port, protocol, etc.) and the new configuration information of the newly deployed game assistant service are written together to the service management terminal (centralized configuration, rainbow). This service management terminal (centralized configuration, rainbow) is the management server in the region where the target server is located. It can be in the same local area network as the target server and is used to record the configuration information of services deployed in the distributed system (i.e., any server) within the same local area network.

[0227] Figure 5 This is an example diagram of the transmission link processing flow provided in an embodiment of this application. (In conjunction with...) Figure 5 The configuration process for this transmission link is described below:

[0228] S1: Start, configure the detection component (netadmin) to start, implement the data in the centralized detection configuration (service management end), that is, the detection configuration information status.

[0229] S2: The configuration detection component (netadmin) determines whether the centralized configuration data has changed based on the configuration information status. If yes, proceed to process S3; otherwise, proceed to process S4.

[0230] S3: A change in the centralized configuration data has been detected. The changed target configuration information is retrieved from the centralized configuration (service management end).

[0231] S4: The data in the centralized configuration has not changed. Continue the detection and return to process S1.

[0232] S5: Configure the transmission link for the target service (game assistant service) using the instructions provided by the iptables tool.

[0233] S6: Set the mapping from old configuration information to new configuration information, complete, and return to process S1 to enter the loop, ensuring that the configuration detection component (netadmin) can always respond to changes in configuration information in a timely manner.

[0234] To facilitate understanding of the above transmission link configuration process, the transmission links managed by the configuration detection component (netadmin) are described below:

[0235] Figure 6 This is an example diagram of the transmission link architecture provided in the embodiments of this application, combined with... Figure 6As shown, the transmission chain of the target service can include the following in terms of architecture: prerouting chain, forward chain, input chain, output chain, and postrouting chain.

[0236] When external traffic (i.e., requests, data packets) needs to enter this server (or the target cluster on this server), it must first be transmitted to the preprocessing transmission link. The preprocessing transmission link determines the destination of the external traffic. If the traffic is destined for the target service (game assistant service), it is transmitted from the preprocessing transmission link to the input transmission link. If the traffic is to be forwarded by this server, it is transmitted from the preprocessing transmission link to the forward transmission link, and then the forward transmission link transmits the traffic to the delivery transmission link. In addition, the transmission links in this architecture also involve the output transmission link for sending local data packets. Specifically, when locally generated data packets (internal traffic) need to be sent out, the data packet is transmitted to the output transmission link, and then the output transmission link transmits the data packet to the delivery transmission link. Finally, the delivery transmission link sends the data packets to other external destination addresses or the next-hop destination address.

[0237] It should be noted that the configuration process for this transmission link mainly involves configuring the preprocessing transmission link and the output transmission link in the above architecture. This is done based on the address translation rule table to configure these two transmission links for Internet Protocol (IP) address translation during data packet transmission. The configuration platform can manage the rules for one or more service transmission links. For example, the platform provides creation, editing, deletion, and synchronization capabilities to manage various rules, such as editing or deleting the address translation rule table and synchronizing it to various servers. Figure 7 This is an example diagram of the configuration platform page provided in this application embodiment. After migrating the game assistant service, administrators can use this configuration platform page to write the old configuration information of the game assistant service before the migration and the current new configuration information. They can also use this configuration platform page to edit and delete existing address translation rule tables, combined with... Figure 7As shown in the diagram, the contents of Address Translation Rule Table 2 (NAT2) are illustrated. Administrators can edit, delete, or change the generated mapping links in "NAT2" to other mapping relationships. Furthermore, access permissions for "NAT2" can be configured using advanced features provided by the configuration platform, specifying which groups of users can directly access the game assistant service through this access address mapping information. This is merely an example and not a limitation. In this way, access address mapping information can be generated from the old configuration information to the new configuration information and stored in the address translation rule table.

[0238] The specific configuration process of this transmission link is executed through the instructions of the address table tool (iptables). The configuration process represented by the instructions of the address table tool (iptables) is as follows: First, create an address translation rule table; second, check whether an address translation rule table already exists in the output transmission link; third, if an address translation rule table does not exist in the output transmission link, add an address translation rule table to the output transmission link. Specifically, establish an association between the Data Transmission Protocol (TCP) and the address translation rule table so that TCP packets are transmitted according to the transmission path indicated by the address translation rule table, and establish an association between the User Datagram Protocol (UDP) and the address translation rule table so that UDP packets are transmitted according to the transmission path indicated by the address translation rule table. In this way, the communication configuration processing for the output transmission link is completed.

[0239] Similarly, it checks whether an address translation rule table already exists in the preprocessing transmission link. If the address translation rule table does not exist in the preprocessing transmission link, it is added to the preprocessing transmission link. Specifically, an association is established between the Data Transmission Protocol (TCP) and the address translation rule table in the preprocessing transmission link, so that TCP packets are transmitted according to the transmission path indicated by the address translation rule table. An association is also established between the User Datagram Protocol (UDP) and the address translation rule table, so that UDP packets are transmitted according to the transmission path indicated by the address translation rule table. This completes the communication configuration processing for the preprocessing transmission link.

[0240] Figure 8 This is an example diagram of a data packet diversion scenario for a transmission link provided in an embodiment of this application, combined with... Figure 8As shown, after communication configuration processing on the preprocessing transmission link and the output transmission link, both TCP and UDP packets passing through the preprocessing transmission link are processed according to the address translation rule table. Similarly, TCP and UDP packets sent from the output transmission link are also processed according to the address translation rule table to be sent to the final destination address or the next hop's destination address. Therefore, by performing address translation on the preprocessing transmission link and / or the output transmission link, both local requests to external sources and external traffic to the local source or requests via forwarding can be seamlessly converted to access the destination address.

[0241] Figure 9 Example diagram of the configuration processing page for the transmission link of the target service provided in the embodiments of this application; combined with Figure 9 As shown, the runtime status parameters of a container pod corresponding to a game assistant service after migration are displayed. These include CPU usage, memory usage, and network bandwidth usage. The runtime status of the container pod corresponding to the game assistant service is displayed in real time to facilitate subsequent work, such as whether to dynamically add new pods to support the game assistant service, whether to migrate the service, etc. These are not listed here.

[0242] By executing the above transmission link processing scenario examples, the following effects can be achieved: 1) By dynamically adding new Pods and using iptables technology for traffic redirection, seamless forwarding of traffic requests is ensured during the migration process, avoiding service interruptions and degrading user experience, thus achieving seamless service migration; 2) No need to modify the original service code or reconfigure internal service routing, simplifying the migration process and reducing the complexity and risk of technical implementation; 3) Support for flexible service migration between different K8 clusters, adapting to changes in business needs and improving the scalability and adaptability of the system; 4) Through centralized network settings and automated configuration management, the maintainability of services is improved, facilitating subsequent service status detection and management; 5) Dynamically deploying Pods in the new cluster helps to utilize computing resources more effectively, improving overall system performance and response speed.

[0243] As described above, this application embodiment can detect the configuration information status of each service recorded in the service management terminal in real time. When it detects that the configuration information status of the target service in the target distributed system is in a migration change state, it pulls the current first sub-configuration information and the second sub-configuration information of the target service before migration from the service management terminal. Then, based on the correspondence between the first and second sub-configuration information, an address translation rule table is constructed. The access address mapping information in the address translation rule table records the association between the access addresses of the target service before and after migration, thereby establishing a mapping bridge between the access addresses of the target service before and after migration. Finally, the data transmission link of the target service is configured based on the address translation rule table. In this way, after the target service is migrated, by establishing a mapping relationship between the old access address and the new access address, the target group can find the new access address through the old access address when accessing the target service at any time. Thus, compared with related technologies, there is no need to manually modify the network configuration information of the target service after migration, which improves the service migration efficiency, avoids configuration errors and interruption of the target service, ensures the stable operation of the target service, and allows the target group to access the target service without any noticeable difference, thus improving the user experience.

[0244] For details on the implementation of each of the above steps, please refer to the previous examples, which will not be repeated here.

[0245] To facilitate better implementation of the transmission link processing method provided in this application, this application also provides an apparatus based on the above-described transmission link processing method. The meanings of the terms used are the same as in the above-described transmission link processing method, and specific implementation details can be found in the descriptions within the method embodiments.

[0246] Please see Figure 10 , Figure 10 This is a schematic diagram of the structure of a transmission link processing device provided in an embodiment of this application. The transmission link processing device is integrated into the computer device of this application. The transmission link processing device may include a detection unit 401, a pull unit 402, a generation unit 403, and a processing unit 404.

[0247] Detection unit 401 is used to detect the configuration information status of each service in the service management terminal, which is used to record the configuration information of each service pre-deployed in the target distributed system.

[0248] The pull unit 402 is used to pull the target configuration information of the target service from the service management terminal when it is detected that the configuration information status of the target service is in the migration change status. The target configuration information includes the current first sub-configuration information of the target service and the second sub-configuration information before the migration.

[0249] The generation unit 403 is used to generate an address translation rule table based on the first sub-configuration information and the second sub-configuration information. The address translation rule table contains access address mapping information from the second sub-configuration information to the first sub-configuration information.

[0250] Processing unit 404 is used to configure the transmission link of the target service based on the address translation rule table.

[0251] In some embodiments, the processing unit 404 is further configured to:

[0252] The network address translation table under the address table tool associated with the target service is read. The network address translation table records the preprocessing transmission link and output transmission link associated with the target service.

[0253] The tool uses the address table associated with the target service to configure the preprocessing transport link and output transport link associated with the target service according to the address translation rule table.

[0254] In some embodiments, the processing unit 404 is further configured to:

[0255] Obtain the link configuration command corresponding to the address table tool associated with the target service;

[0256] In response to the link configuration command, the address translation rule table is added to the preprocessed transport link associated with the target service, and the address translation rule table is added to the output transport link associated with the target service.

[0257] In some embodiments, the processing unit 404 is further configured to:

[0258] Determine the types of data packet protocols supported by the preprocessing transmission link;

[0259] Bind the address translation rule table to the packet protocol types supported by the preprocessed transport link to configure the preprocessed transport link associated with the target service.

[0260] In some embodiments, the transmission link includes a preprocessing transmission link, and the processing unit 404 is further configured to:

[0261] Retrieve a preset list of mapping access permissions. The list contains multiple authorized object identifiers that have permission to use the access address mapping information, as well as the remaining number of authorizations for each authorized object identifier for the access address mapping information.

[0262] Merge the mapping access permission list and the address translation rule table to generate the target address translation permission table;

[0263] Based on the target address translation permission table, the preprocessing transport links associated with the target service are configured.

[0264] In some embodiments, the transmission link processing apparatus further includes a data packet transmission unit for:

[0265] Receive the first data packet to be transmitted to the target service, and determine the first object identifier associated with the first data packet;

[0266] Transmit the first data packet and the first object identifier to the preprocessing transmission link;

[0267] By preprocessing the transmission link, the remaining number of authorizations for the first object identifier based on the target address mapping information is queried from the target address translation permission table.

[0268] When the remaining number of authorization attempts for the target exceeds the preset available threshold, the first data packet is sent to the target service according to the access address mapping information.

[0269] In some implementations, the data packet transmission unit is further configured to:

[0270] By preprocessing the transmission link, the destination Internet Protocol address and destination service port information of the first data packet are updated according to the access address mapping information to obtain the updated target first data packet;

[0271] According to the destination Internet Protocol address and destination service port information in the first target data packet, the first target data packet is transmitted to the target service.

[0272] In some implementations, the data packet transmission unit is further configured to:

[0273] Receive the second data packet to be transmitted to the target service, and determine the second object identifier associated with the second data packet;

[0274] The matching result is obtained by matching the second object identifier with the object identifier in the preset object permission list. The preset object permission list contains object identifiers that do not have access to the target service after migration.

[0275] When the matching result determines that the second object identifier is not included in the preset object permission list, the second data packet is sent to the target service according to the access address mapping information.

[0276] In some embodiments, the transmission link processing apparatus further includes a data packet sending unit, for:

[0277] Obtain the third data packet to be sent by the target service and transmit the third data packet to the output transmission link;

[0278] By updating the source Internet Protocol address and source service port information of the third data packet according to the access address mapping information in the address translation rule table through the output transmission link, the updated target third data packet is obtained.

[0279] The target third data packet is transmitted to the delivery transport link associated with the target service, so that the target third data packet can be sent through the delivery transport link based on the updated source Internet Protocol address and source service port information in the target third data packet.

[0280] In some embodiments, the generating unit 403 is further configured to:

[0281] Extract the first Internet Protocol address, the first service port information, and the first data packet protocol information from the first sub-configuration information;

[0282] Extract the second Internet Protocol address, the second service port information, and the second data packet protocol information from the second sub-configuration information;

[0283] Establish address mapping sub-information between the first Internet Protocol address and the second Internet Protocol address, establish port mapping sub-information between the first service port information and the second service port information, and establish protocol mapping sub-information between the first data packet protocol information and the second data packet protocol information;

[0284] Based on address mapping sub-information, port mapping sub-information, and protocol mapping sub-information, access address mapping information is generated;

[0285] An initial address translation rule table is created, and the access address mapping information is transferred to the initial address translation rule table to obtain the address translation rule table.

[0286] In some embodiments, the transmission link processing apparatus further includes a service expansion unit for:

[0287] Obtain the data processing volume for the target service;

[0288] When the amount of data processed exceeds the preset data volume threshold, determine the service container cluster associated with the target service and obtain the resource utilization rate of each target service container in the service container cluster.

[0289] When the resource utilization of each target service container exceeds the preset resource utilization threshold, a corresponding service container image is created based on the target service container.

[0290] The address table tool in the service container image is used to configure the transmission link of the target service image deployed in the service container image based on the address translation rule table.

[0291] As described above, this application embodiment can detect the configuration information status of each service recorded in the service management terminal in real time. When it detects that the configuration information status of the target service in the target distributed system is in a migration change state, it pulls the current first sub-configuration information and the second sub-configuration information of the target service before migration from the service management terminal. Then, based on the correspondence between the first and second sub-configuration information, an address translation rule table is constructed. The access address mapping information in the address translation rule table records the association between the access addresses of the target service before and after migration, thereby establishing a mapping bridge between the access addresses of the target service before and after migration. Finally, the data transmission link of the target service is configured based on the address translation rule table. In this way, after the target service is migrated, by establishing a mapping relationship between the old access address and the new access address, the target group can find the new access address through the old access address when accessing the target service at any time. Thus, compared with related technologies, there is no need to manually modify the network configuration information of the target service after migration, which improves the service migration efficiency, avoids configuration errors and interruption of the target service, ensures the stable operation of the target service, and allows the target group to access the target service without any noticeable difference, thus improving the user experience.

[0292] The specific implementation of each of the above units can be found in the previous embodiments, and will not be repeated here.

[0293] See Figure 11 , Figure 11 This is a schematic diagram of the structure of a terminal provided in an embodiment of this application. It includes a structural block of the portion of the terminal 110 that implements the embodiment of this application. The terminal can be... Figure 1 The terminal 110 shown specifically includes: a radio frequency (RF) circuit 510, a memory 515, an input unit 530, a display unit 540, a sensor 550, an audio circuit 560, a wireless fidelity (WiFi) module 570, a processor 580, and a power supply 590, among other components. Those skilled in the art will understand that the structure of the terminal 110 shown does not constitute a limitation on a mobile phone or computer, and may include more or fewer components than shown, or combine certain components, or have different component arrangements.

[0294] The RF circuit 510 can be used to receive and transmit signals during information transmission or calls. In particular, it receives downlink information from the base station and processes it with the processor 580; in addition, it transmits uplink data to the base station.

[0295] The memory 515 can be used to store software programs and modules. The processor 580 executes various terminal functions and transmission link processing by running the software programs and modules stored in the memory 515.

[0296] The input unit 530 can be used to receive input numeric or character information, and to generate key signal inputs related to the terminal's settings and function control. Specifically, the input unit 530 may include a touch panel 531 and other input devices 532.

[0297] The display unit 540 can be used to display input or provided information, as well as various menus of the terminal. The display unit 540 may include a display panel 541.

[0298] Audio circuit 560, speaker 561, and microphone 562 provide an audio interface.

[0299] In this embodiment, the processor 580 included in the terminal 110 can execute the transmission link processing method of the previous embodiment.

[0300] See Figure 12 , Figure 12 This is a schematic diagram of the server structure provided in an embodiment of this application, which includes a structural block of the server 120 implementing this embodiment. The server can be... Figure 1 The server 120 shown can vary significantly due to different configurations or performance. It may include one or more Central Processing Units (CPUs) 622 (e.g., one or more processors) and memory 632, and one or more storage media 630 (e.g., one or more mass storage devices) for storing application programs 642 or data 644. The memory 632 and storage media 630 may be temporary or persistent storage. The program stored in the storage media 630 may include one or more modules (not shown in the figure), each module including a series of instruction operations on the server 120. Furthermore, the CPU 622 may be configured to communicate with the storage media 630 and execute the series of instruction operations in the storage media 630 on the server 120.

[0301] Server 120 may also include one or more power supplies 626, one or more wired or wireless network interfaces 650, one or more input / output interfaces 658, and / or one or more operating systems 641, such as Windows Server™, Mac OS X™, Unix™, Linux™, FreeBSD™, etc.

[0302] The central processing unit 622 in server 120 can be used to execute the transmission link processing method of the embodiments of this application.

[0303] This application also provides a computer-readable storage medium for storing a computer program for executing the transmission link processing methods of the foregoing embodiments.

[0304] This application also provides a computer program product, which includes a computer program. A processor of a computer device reads and executes the computer program, causing the computer device to perform the aforementioned transmission link processing method.

[0305] Furthermore, the terms “comprising” and “including”, and any variations thereof, are intended to cover non-exclusive inclusion, such that a process, method, system, product, or apparatus that includes a series of steps or units is not necessarily limited to those steps or units that are explicitly listed, but may include other steps or units that are not explicitly listed or that are inherent to such process, method, product, or apparatus.

[0306] It should be understood that in this application, "at least one (item)" means one or more, and "more than" means two or more. "And / or" is used to describe the relationship between related objects, indicating that three relationships can exist. For example, "A and / or B" can represent three cases: only A exists, only B exists, and both A and B exist simultaneously, where A and B can be singular or plural. The character " / " generally indicates that the preceding and following related objects are in an "or" relationship. "At least one (item) of the following" or similar expressions refer to any combination of these items, including any combination of single or plural items. For example, at least one (item) of a, b, or c can represent: a, b, c, "a and b", "a and c", "b and c", or "a and b and c", where a, b, and c can be single or multiple.

[0307] It should be understood that in the description of the embodiments of this application, "multiple" means two or more, "greater than", "less than", "exceeding" etc. are understood to exclude the number itself, and "above", "below", "within" etc. are understood to include the number itself.

[0308] In the several embodiments provided in this application, it should be understood that the disclosed systems, apparatuses, and methods can be implemented in other ways. For example, the apparatus embodiments described above are merely illustrative; for instance, the division of units is only a logical functional division, and in actual implementation, there may be other division methods. For example, multiple units or components may be combined or integrated into another system, or some features may be ignored or not executed. Furthermore, the coupling or direct coupling or communication connection shown or discussed may be through some interfaces, or indirect coupling or communication connection between apparatuses or units, and may be electrical, mechanical, or other forms.

[0309] The units described as separate components may or may not be physically separate. The components shown as units may or may not be physical units; that is, they may be located in one place or distributed across multiple network units. Some or all of the units can be selected to achieve the purpose of this embodiment according to actual needs.

[0310] Furthermore, the functional units in the various embodiments of this application can be integrated into one processing unit, or each unit can exist physically separately, or two or more units can be integrated into one unit. The integrated unit can be implemented in hardware or as a software functional unit.

[0311] If the integrated unit is implemented as a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of this application, in essence, or the part that contributes to the prior art, or all or part of the technical solution, can be embodied in the form of a software product. This computer software product is stored in a storage medium and includes several instructions to cause a computer device (which may be a personal computer, server, or network device, etc.) to execute all or part of the steps of the methods of the various embodiments of this application. The aforementioned storage medium includes various media capable of storing program code, such as USB flash drives, portable hard drives, read-only memory (ROM), random access memory (RAM), magnetic disks, or optical disks.

[0312] It should also be understood that the various implementation methods provided in this application can be combined arbitrarily to achieve different technical effects.

[0313] In this application embodiment, the terms "module" or "unit" refer to a computer program or part of a computer program that has a predetermined function and works with other related parts to achieve a predetermined goal, and can be implemented wholly or partially using software, hardware (such as processing circuitry or memory), or a combination thereof. Similarly, a processor (or multiple processors or memory) can be used to implement one or more modules or units. Furthermore, each module or unit can be part of an overall module or unit that includes the functionality of that module or unit.

[0314] The above is a detailed description of the embodiments of this application. However, this application is not limited to the above embodiments. Those skilled in the art can make various equivalent modifications or substitutions without departing from the spirit of this application. All such equivalent modifications or substitutions are included within the scope defined by the claims of this application.

Claims

1. A transmission link processing method, characterized in that, include: The configuration information status of each service in the detection service management terminal is used to record the configuration information of each service pre-deployed in the target distributed system. When it is detected that the configuration information status of a target service is in the migration change state, the target configuration information of the target service is pulled from the service management terminal. The target configuration information includes the current first sub-configuration information of the target service and the second sub-configuration information before the service migration. Based on the first sub-configuration information and the second sub-configuration information, an address translation rule table is generated, which contains access address mapping information from the second sub-configuration information to the first sub-configuration information. The transmission link of the target service is configured based on the address translation rule table.

2. The method according to claim 1, characterized in that, The configuration process for the transmission link of the target service based on the address translation rule table includes: Read the network address translation table under the address table tool associated with the target service. The network address translation table records the preprocessing transmission link and the output transmission link associated with the target service. The address table tool associated with the target service is used to perform configuration processing on the preprocessing transmission link and the output transmission link associated with the target service according to the address translation rule table.

3. The method according to claim 2, characterized in that, The tool associated with the address table of the target service performs configuration processing on the preprocessing transmission link and the output transmission link associated with the target service according to the address translation rule table, including: Obtain the link configuration instructions corresponding to the address table tool associated with the target service; In response to the link configuration command, the address translation rule table is added to the preprocessing transmission link associated with the target service, and the address translation rule table is added to the output transmission link associated with the target service.

4. The method according to claim 3, characterized in that, Adding the address translation rule table to the preprocessed transport link associated with the target service includes: Determine the types of data packet protocols supported by the preprocessed transmission link; The address translation rule table is bound to the packet protocol types supported by the preprocessed transmission link in order to configure the preprocessed transmission link associated with the target service.

5. The method according to claim 1, characterized in that, The transmission link includes a preprocessed transmission link, and the configuration processing of the transmission link for the target service based on the address translation rule table includes: Obtain a preset mapping access permission list, which contains multiple authorized object identifiers that have usage rights to the access address mapping information, and the remaining number of authorization times for each authorized object identifier for the access address mapping information; The mapping access permission list and the address translation rule table are merged to generate the target address translation permission table; Based on the target address translation permission table, the preprocessing transmission link associated with the target service is configured.

6. The method according to claim 5, characterized in that, After configuring the preprocessing transmission link associated with the target service according to the target address translation permission table, the method further includes: Receive a first data packet to be transmitted to the target service, and determine a first object identifier associated with the first data packet; Transmit the first data packet and the first object identifier to the preprocessing transmission link; Through the preprocessed transmission link, the remaining number of target authorizations for the first object identifier against the access address mapping information is queried based on the target address translation permission table; When the remaining number of authorization attempts for the target exceeds a preset available threshold, the first data packet is sent to the target service according to the access address mapping information.

7. The method according to claim 6, characterized in that, Sending the first data packet to the target service according to the access address mapping information includes: Through the preprocessed transmission link, the destination Internet Protocol address and destination service port information of the first data packet are updated according to the access address mapping information to obtain the updated target first data packet; According to the destination Internet Protocol address and destination service port information in the target first data packet, the target first data packet is transmitted to the target service.

8. The method according to claim 1, characterized in that, After configuring the transmission link of the target service based on the address translation rule table, the method further includes: Receive a second data packet to be transmitted to the target service, and determine the second object identifier associated with the second data packet; The matching result is obtained by matching the second object identifier with the object identifier in the preset object permission list. The preset object permission list contains object identifiers that do not have access permissions to the target service after migration. When it is determined from the matching result that the second object identifier is not included in the preset object permission list, the second data packet is sent to the target service according to the access address mapping information.

9. The method according to any one of claims 2 to 4, characterized in that, After configuring the transmission link of the target service based on the address translation rule table, the method further includes: Obtain the third data packet to be sent by the target service, and transmit the third data packet to the output transmission link; Through the output transmission link, the source Internet Protocol address and source service port information of the third data packet are updated according to the access address mapping information in the address translation rule table to obtain the updated target third data packet; The target third data packet is transmitted to the delivery transmission link associated with the target service, so as to send the target third data packet through the delivery transmission link based on the updated source Internet Protocol address and source service port information in the target third data packet.

10. The method according to claim 1, characterized in that, The step of generating an address translation rule table based on the first sub-configuration information and the second sub-configuration information includes: Extract the first Internet Protocol address, the first service port information, and the first data packet protocol information from the first sub-configuration information; Extract the second Internet Protocol address, the second service port information, and the second data packet protocol information from the second sub-configuration information; Establish address mapping sub-information between the first Internet Protocol address and the second Internet Protocol address, establish port mapping sub-information between the first service port information and the second service port information, and establish protocol mapping sub-information between the first data packet protocol information and the second data packet protocol information; Based on the address mapping sub-information, the port mapping sub-information, and the protocol mapping sub-information, access address mapping information is generated; An initial address translation rule table is created, and the access address mapping information is transmitted to the initial address translation rule table to obtain the address translation rule table.

11. The method according to claim 1, characterized in that, The method further includes: Obtain the data processing volume for the target service; When the amount of data processed exceeds a preset data volume threshold, the service container cluster associated with the target service is determined, and the resource utilization rate of each target service container in the service container cluster is obtained. When the resource utilization rate of each target service container is greater than the preset resource utilization threshold, a corresponding service container image is created based on the target service container; The address table tool in the service container image is used to configure the transmission link of the target service image deployed in the service container image based on the address translation rule table.

12. A transmission link processing apparatus, characterized in that, include: The detection unit is used to detect the configuration information status of each service in the service management terminal, which is used to record the configuration information of each service pre-deployed in the target distributed system. The pull unit is used to pull the target configuration information of the target service from the service management terminal when it is detected that the configuration information status of the target service is in the migration change state. The target configuration information includes the current first sub-configuration information of the target service and the second sub-configuration information before the service migration. The generation unit is configured to generate an address translation rule table based on the first sub-configuration information and the second sub-configuration information, wherein the address translation rule table contains access address mapping information from the second sub-configuration information to the first sub-configuration information; The processing unit is used to configure the transmission link of the target service based on the address translation rule table.

13. A computer device comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, characterized in that, When the processor executes a computer program, it implements the transmission link processing method according to any one of claims 1 to 11.

14. A computer-readable storage medium, characterized in that, The computer-readable storage medium stores a computer program adapted for loading by a processor to execute the transmission link processing method according to any one of claims 1 to 11.

15. A computer program product, comprising a computer program, characterized in that, When the computer program is executed by a processor, it implements the transmission link processing method according to any one of claims 1 to 11.

Images