Access traffic limitation method and access traffic limitation device, device, storage medium and computer program product

Abstract

Access traffic limitation procedure, comprising: when it is detected that the number of access requests transmitted to an access interface from a multitude of terminal devices exceeds a first preset value, intercepting (201) for each terminal device, outside the access interface, a destination access request transmitted by the terminal device; determining (202) the frequency with which the destination access request is received within a preset period, the preset period comprising a sliding time window; transmitting (203) the destination access request to the access interface when the frequency is greater than a second preset value; when it is detected that the number of access requests transmitted to an access interface from a multitude of terminal devices exceeds a first preset value, intercepting for each terminal device.Outside the access interface, a destination access request transmitted by the terminal includes: when access requests transmitted to an access interface from a multitude of terminals are detected, the creation of an isolating sliding window for each terminal, wherein an access request within the sliding window passes through a traffic limiting component, and the traffic limiting component determines, according to the access traffic limiting procedure and access limiting rule therein, whether the destination access request should be allowed to invoke the access interface, wherein the traffic limiting component contains the specified access traffic limiting procedure and the specified access traffic limiting rule; the sliding window is based on dividing a segment of the time window into a multitude of cells at an equal time interval.the method involves maintaining a counter in each cell and moving back one cell for each time cell; characterized in that determining the frequency with which the target access request is received within the preset time period comprises: determining whether the target access request is a non-first access request to the access interface; determining the frequency with which the target access request is received within the preset time period if the target access request is a non-first access request to the access interface; the method further comprises: transmitting the target access request to the access interface if the target access request is a first access request to the access interface.

Description

[0001] This application claims priority over Chinese patent application No. 202111056431,6, filed with the Chinese Patent Office on September 9, 2021, entitled “Access Traffic Limiting Method and Apparatus, Device, Storage Medium, and Computer Program Product”, which is incorporated herein by reference in its entirety. TECHNICAL AREA

[0002] The present application relates to communication technology and in particular to an access traffic limitation method and an access traffic limitation device, a device, a storage medium and a computer program product. STATE OF THE ART

[0003] Internet applications frequently experience burst traffic spikes. However, since every system has an upper limit to its processing capacity, queuing typically occurs when the volume of requests exceeds the system's capacity, leading to a rapid increase in response time. Without a limit on the amount of resources a service can consume, the system is likely to crash due to resource overload. To ensure stable system operation when faced with burst requests, a common industry approach includes caching, traffic limiting, or throttling.Among them, traffic limiting is a way to perform denial-of-service, queueing or waiting, demotion, and other processing when request traffic exceeds the system's bottleneck.

[0004] Existing network request traffic limiting components involve forward traffic limiting, meaning that traffic limiting begins when the traffic exceeds a certain threshold. This rate limiting is implemented for concurrent requests within a time window to protect a communication system. However, because the method described above rate-limits all requests during this time window, the success rate of a user accessing an interface is relatively low. SUMMARY

[0005] The present application provides an access traffic limitation method and an access traffic limitation device, a device, a storage medium and a computer program product according to which the success rate of accessing an interface by a user can be improved while ensuring stable operation of a system.

[0006] From a first point of view, the present application provides an access restriction procedure that includes the following: If it is detected that the number of access requests transmitted from a large number of terminal devices to an access interface exceeds an initial preset value, interception will be performed for each individual terminal device, outside the access interface, of a target access request transmitted by the terminal device; Determining the frequency with which the target access request is received within a preset time period; and Transmit the target access request to the access interface if the frequency is greater than a second preset value.

[0007] One possible implementation includes determining the frequency with which the target access request is received within the preset time period: Determine whether the target access request is a non-first access request to the access interface; and Determining the frequency with which the target access request is received within the preset time period when the target access request is a request for a non-first access to the access interface.

[0008] In one possible implementation, the procedure also includes: Prevent the access interface from receiving the target access request if the frequency is not greater than the second preset value.

[0009] In one possible implementation, the procedure further includes, after the target access request has been transmitted to the access interface: Updating the frequency with which the target access request is received.

[0010] In one possible implementation, intercepting the target access request transmitted by the terminal outside of the access interface includes: Capturing interface configuration information of the access interface; Determine whether the interface configuration information includes traffic limit configuration information; and Intercepting the target access request outside the access interface if the interface configuration information includes the traffic limiting configuration information.

[0011] Secondly, the present application provides an access traffic limitation device that includes the following: an interception module configured to, when it is detected that the number of access requests transmitted from a large number of endpoints to an access interface exceeds an initial preset value, for each individual endpoint outside the access interface, to intercept a target access request transmitted by the terminal; a determination module configured to determine the frequency with which the target access request is received within a preset time period; and A transmission module configured to transmit the target access request to the access interface when the frequency is greater than a second preset value.

[0012] In one possible implementation, the determination module is specifically configured to: Determine whether the target access request is a non-first access request to the access interface; and Determining the frequency with which the target access request is received within the preset time period when the target access request is a request for a non-first access to the access interface.

[0013] In one possible implementation, the transmission module is further configured to: Transmitting the target access request to the access interface if the target access request is a request for initial access to the access interface.

[0014] In one possible implementation, the device further includes: a processing module; where the processing module is configured to prevent the access interface from receiving the target access request if the frequency is not greater than the second preset value.

[0015] In one possible implementation, the device further includes: an update module; where the update module is configured to update the frequency with which the target access request is received.

[0016] In one possible implementation, the interception module is specifically configured to: Capturing interface configuration information of the access interface; Determine whether the interface configuration information includes traffic limit configuration information; and Intercepting the target access request outside the access interface if the interface configuration information includes the traffic limiting configuration information.

[0017] In a third aspect, an embodiment of the present application further provides a server. The server may include: a memory and a processor; where the memory is configured to store a computer program; and the processor is configured to read the computer program stored in memory and to execute the access traffic limitation procedure according to a possible implementation of the first viewpoint based on the computer program in memory.

[0018] In a fourth aspect, an embodiment of the present application further provides a computer-readable storage medium in which a computer-executable instruction is stored, wherein the computer-executable instruction, when executed by a processor, implements the access traffic limitation procedure according to a possible implementation of the first, implemented aspect.

[0019] In a fifth aspect, an embodiment of the present application further provides a computer program product which includes: a computer program which, when executed by a processor, implements the access traffic limitation procedure according to a possible implementation of the first aspect.

[0020] The access traffic limitation method and the access traffic limitation device, the device, the storage medium, and the computer program product provided in the embodiments of the present application enable: when it is detected that the number of access requests transmitted from a multitude of terminal devices to an access interface exceeds a first preset value, intercepting, for each individual terminal device, outside the access interface, a target access request transmitted by the terminal device; then determining the frequency with which the target access request is received within a preset period; and transmitting the target access request to the access interface when the frequency is greater than a second preset value.In a scenario with a large number of concurrent access requests, a traffic limiting component is deployed outside the access interface for each endpoint, and the destination access request transmitted by the endpoint is intercepted by the traffic limiting mechanism. If the destination access request exceeds the second preset value within the preset time, it indicates that a user has an urgent need to access the access interface; at this point, the traffic limiting component will release the access request to invoke the access interface.This prevents the system from denying all access requests by activating traffic limiting due to frequent transmission of an access request from an individual, thereby improving the success rate of access by the user under the premise of stable system operation. BRIEF DESCRIPTION OF THE DRAWINGS

[0021] The accompanying drawings herein are incorporated into the patent specification and form part of the patent specification, illustrating embodiments consistent with the present application and used to explain the principles of the present application together with the patent specification. The accompanying drawings are described as follows. Fig. Figure 1 is an architecture diagram of a system for an access traffic limitation procedure according to an embodiment of the present application. Fig. Figure 2 is a flowchart of an access traffic limitation procedure according to an embodiment of the present application; Fig. Figure 3 is a schematic diagram of a process in which a server intercepts a target access request outside of an access interface. Fig. Figure 4 is a schematic diagram of a process for receiving an access request through a sliding window according to an embodiment of the present application. Fig. Figure 5 is a flowchart of a procedure regarding whether traffic limitation should be performed on an access interface according to an embodiment of the present application. Fig. Figure 6 is a schematic structure diagram of an access traffic limitation device according to an embodiment of the present application. Fig. Figure 7 is a schematic structure diagram of a server according to an embodiment of the present application.

[0022] The preceding drawings show specific embodiments of the present application, and a more detailed description is given below. These drawings and textual description are not intended to limit the scope of protection of the idea of ​​the present application in any way, but rather to illustrate concepts of the present application to those skilled in the art with reference to the specific embodiments. DESCRIPTION OF THE EXECUTION FORMS

[0023] Exemplary embodiments are described in detail herein, examples of which are illustrated in the accompanying drawings. Where the following description refers to the accompanying drawings, the same number in different drawings, unless otherwise indicated, represents the same or similar elements. Implementations described in the following exemplary embodiments do not represent all implementations consistent with the present application. Instead, they are merely examples of devices and methods that comply with some aspects of the present application, as described in detail in the accompanying claims.

[0024] To help the person skilled in the art to better understand the technical solution of the present application, the relevant content involved in the technical solution of the present application is presented below.

[0025] Traffic limiting refers to restricting the data traffic rate. It is a network traffic management technology used in computer networks to delay some or all data packets to comply with a network traffic rule requested by users.

[0026] Traffic limiting components refer to components that contain a specific traffic limiting procedure or traffic limiting rule to limit the frequency of interface access in order to reduce the pressure on the server.

[0027] The access traffic limitation method according to the embodiment of the present application can be applied to a scenario in which it is necessary to implement traffic limitation for a highly concurrency service system when encountering a large number of frequent requests. In the high concurrency scenario, concurrent requests within a time window can be rate-limited by means of traffic limitation to achieve the purpose of protecting the system.

[0028] Existing traffic limiting methods mainly include the leaky bucket method, the token bucket method, the counter method, and the sliding window method. Among these, the leaky bucket method assumes that the server's capacity to handle requests is a bucket. When a request arrives, it is first placed in the bucket, and then the server processes the request by retrieving it from the bucket for processing at a fixed rate. When the bucket is full, i.e., the server's processing capacity is reached, a denial-of-service (DoS) is issued for any newly arriving request. When faced with burst traffic, the leaky bucket algorithm is susceptible to a problem of a large number of failed requests.The token bucket method involves adding tokens to the bucket at a constant rate, and no further tokens are added once the bucket is full. Upon receiving a request, the service attempts to retrieve a token from the bucket and proceeds with subsequent service logic if the token is available. It directly returns an error code or displays an error page indicating that the access rate is exceeding the limit and stops executing the subsequent service logic if the token is not available.The counter algorithm works by counting requests within a fixed time window, determining whether traffic limiting is necessary after comparing the count to a threshold, and resetting the counter to zero once a time-related critical point is reached. In this case, a "time-related critical point" failure occurs, causing the system to crash due to the instantaneous doubling of traffic. The sliding window method achieves traffic limiting by dividing a large time window into numerous smaller windows, shifting the large window backward by one smaller window at a time, and ensuring that traffic within each larger window does not exceed a maximum value.

[0029] Regardless of any traffic limiting procedure described above, traffic limiting begins after the number of access requests exceeds the server's processing capacity, and during the traffic limiting process, the server will refuse to receive any access requests transmitted by any user, resulting in a low success rate of service interface access by users and thus a poor user experience.

[0030] In an example where a user needs to check logistics status information in an order list of a purchasing application (application, app) via a purchasing system, when the user accesses their order list via an endpoint device, a third-party logistics interface will be called to update the logistics status if the logistics tracking number has been added to an order, while the background has not received an update to the order's logistics status.In this process, if the user makes frequent access requests, the third-party interface limits the transmitted access request, and access requests issued by all users are subsequently denied by the service for a period of time. This prevents the logistics status of all users from being queried and updated, resulting in a low success rate of service interface accesses by users and a poor user experience. In light of this, embodiments of the present application propose an access traffic limitation method and an access traffic limitation device, a device, a storage medium, and a computer program product.

[0031] An embodiment of the present application provides an access traffic limitation method. In this method, when a large number of users employ terminal devices to simultaneously issue access requests to an access interface, traffic limitation is implemented for each individual terminal device's access request. The frequency with which a target access request is received within a sliding window over a preset period is counted, and access to the interface is permitted if the frequency exceeds the preset value; otherwise, access traffic limitation is implemented.

[0032] This approach effectively mitigates the shortcomings of leaky and tokenized buckets, enabling it to withstand the impact of a large number of access requests within a short period. Traffic limiting is implemented based on the frequency of access requests within a predefined timeframe, ensuring stable and efficient network traffic management and improving the success rate of interface access by users.

[0033] Fig. Figure 1 is an architecture diagram of a system for an access traffic restriction method according to an embodiment of the present application. As in Fig. As shown in Figure 1, the system includes an endpoint 11, an endpoint 12, an endpoint 13, and a server 15. A network 14 provides a communication link medium between the endpoint 11, the endpoint 12, or the endpoint 13 and the server 15. Users can use the endpoint 11, the endpoint 12, and the endpoint 13 to interact with the server 15 via the network 14 to receive or transmit messages, etc.

[0034] For example, a user can use terminal 11, terminal 12, or terminal 13 to log into an application operating interface to transmit different instructions or information to each terminal, and each terminal transmits an access request to server 15 based on the instructions or information transmitted by the user.

[0035] If the number of access requests transmitted by terminal 11, terminal 12, or terminal 13, which are simultaneously received by server 15 within a preset time period, exceeds a first preset value, server 15 intercepts one access request transmitted by each terminal before it is forwarded to an access interface. After interception, server 15 determines the frequency with which the access request transmitted by each terminal is received within the preset time period. For example, if the frequency with which terminal 11 transmits the access request exceeds a second preset value, this indicates that the user corresponding to terminal 11 has a very urgent need to access the access interface; at this point, a target access request is transmitted to the access interface.Furthermore, the server intercepts the access request transmitted by the terminal device, the number of which does not exceed the second preset value, thereby achieving the purpose of traffic limitation.

[0036] It is understood that the number of users, terminal devices 11, 12, 13, network devices 14, and servers 15 in the above system architecture are only exemplary, and a larger or smaller number than this is also within the scope of protection of this application. Furthermore, the system described above, terminal device 11, terminal device 12, or terminal device 13 could, for example, be a personal computer, a server, a tablet, a mobile phone, a PDA, a notebook, or any other computing device with network functionality. Server 15 could be implemented with a server or a group of servers with greater processing power and higher security.The network used between them can include various types of wired and wireless networks, such as, but not limited to: the Internet, a local network, WIFI, WLAN, a mobile communications network (GPRS, CDMA, a 2G / 3G / 4G / 5G mobile network), a satellite communications network, and so on.

[0037] Specific embodiments are used below to provide a detailed description of the technical solution of the present application and how the technical solution of the present application solves the technical problem described above. The following specific embodiments can be combined with one another, and for the same or similar concepts or processes, repeated descriptions are omitted in certain embodiments. The embodiments of the present application are described below in conjunction with the accompanying drawings.

[0038] Fig. Figure 2 is a flowchart of an access traffic limitation method according to an embodiment of the present application. The embodiment of the present application provides an access traffic limitation method that can be performed by any device that performs the access traffic limitation method, and the device can be implemented by software and / or hardware. In the present embodiment, the device can be integrated into the server 15, as shown in Figure 2. Fig. 1 shown. As in Fig. As shown in 2, the access restriction procedure provided in the embodiment of the present application includes the following steps.

[0039] Step 201: If it is detected that the number of access requests transmitted to an access interface from a large number of terminal devices exceeds an initial preset value, intercept, for each individual terminal device, outside the access interface, a target access request transmitted by the terminal device.

[0040] In the present embodiment, if a plurality of terminal devices simultaneously transmit access requests to the access interface within a preset period, i.e., if the number of access requests transmitted by the plurality of terminal devices to the access interface exceeds the first preset value, a traffic limiting operation is generally required at that time to prevent system crashes. The first preset value can be set according to the number of access requests that the server can handle, and the embodiment of the present application does not impose any limitation on a specific value of the first preset value.

[0041] For each individual endpoint, the server intercepts a destination access request transmitted by the endpoint before the destination access request is forwarded to the access interface. This interception typically uses an added traffic limiting procedure or rule to block a direct call to the access interface for a newly generated access request.

[0042] In particular, when the user accesses the access interface via the access request transmitted by the terminal device, the server receives a target access request transmitted by the terminal device and intercepts the target access request outside the access interface. Fig. Figure 3 is a schematic diagram illustrating how a server intercepts a target access request outside of an access interface. As shown in Fig. As shown in Figure 3, when the server simultaneously receives access requests from numerous users using endpoints, it creates an isolating sliding window for each endpoint with a different identifier. Within this sliding window, the access request passes through a traffic control component. This component determines, based on the access control procedure and rule, whether the target access request should be allowed to invoke the access interface. The traffic control component contains the defined access control procedure and rule.

[0043] The sliding window refers to dividing a segment of the time window into a multitude of cells within an equal time interval, maintaining a respective counter in each cell, and moving back one cell at a time.

[0044] The isolating sliding window means that each individual endpoint with a different identifier has its own independent sliding window. This prevents the sliding window of that endpoint from being used for the identifier, as the sliding windows of an endpoint with a different identifier are consumed collectively. Each sliding window stores the access request transmitted by the endpoint and received by the server. The number of access requests acceptable within the sliding window is fixed; for example, a time window of 60 seconds.

[0045] The access request received from the server is processed in the Fig. The three sliding windows shown are stored. To gain a deeper understanding of the process of receiving an access request in a sliding window, the process of receiving an access request in a Fig. 3 sliding windows shown in conjunction with the one in Fig. 4 described the embodiment shown.

[0046] In some specific embodiments of the present application, a time window segment is provided; generally, the time window segment is divided into equal time intervals, and the sliding window has the same length as the time window segment. During this time window segment, the number of access requests to the access interface must not exceed a threshold for the server to process requests. For example, in a process, 40 of receiving an access request within a sliding window in Fig. 4. The dotted box 401 represents a sliding window, a solid box 402 represents a small time unit, the small time unit 403, filled with dashed lines, indicates that an access request is received in that time unit, and an arrow 404 represents the direction in which the sliding window moves. A segment of a time window has a duration of N, and the segment of the time window is subdivided at equal intervals into several small time units, where each small time unit has a length of n, and the sliding window advances by one small time unit for each small time unit n. Simultaneously, the number of requests processed in a sliding window is fixed, and access requests exceeding the number processed in a sliding window are subject to an access traffic limit.For example, if the size of a time window segment is set to 60 seconds and the time window is divided into four smaller time units, each of which is 15 seconds, the number of access requests to the access interface within any given 60-second sliding window cannot exceed 1000. If 1000 requests arrive simultaneously in an initial 60-second time window, and if 1000 access requests arrive within a smaller 15-second time unit, the server's processing threshold has been exceeded at that point. Service, queuing, or waiting for a new contiguous access request is then rejected. After 15 seconds, the sliding window advances by one smaller cell, allowing the server to receive another 1000 requests.

[0047] Furthermore, 1000 requests can also be divided and entered into the sliding window in batches. For example, if 400 access requests arrive within a small 15-second time unit in the first 60-second time window, and 600 access requests arrive within a small 45-second time unit, then after 15 seconds, another 400 access requests can be received if the sliding window advances by a small time unit. And so on; the process of receiving a new request within a sliding window can be implemented.

[0048] For example, intercepting the destination access request transmitted by the terminal outside the access interface can involve: capturing interface configuration information of the access interface when it is detected that the terminal is transmitting the destination access request to the access interface; determining whether the interface configuration information includes traffic limiting configuration information; and intercepting the destination access request outside the access interface if the interface configuration information includes traffic limiting configuration information.

[0049] Before intercepting the target access request transmitted by the terminal outside the access interface, it is necessary to first gather configuration information of the access interface and determine whether the configuration information contains traffic limiting configuration information, which then determines whether to implement access traffic limiting.

[0050] In particular, Fig. Figure 5 can be used to illustrate whether it is necessary to implement traffic limiting at the access interface. The specific process is as follows.

[0051] Step 501: Capture interface configuration information of the access interface.

[0052] Step 502: Determine whether the access interface configuration information includes traffic limit configuration information.

[0053] Step 503: Intercept the target access request outside the access interface if the access interface configuration information includes the traffic limiting configuration information.

[0054] Step 504: Do not perform any interception processing on the target access request if the access interface configuration information does not include the traffic limiting configuration information.

[0055] In particular, the configuration information in the access interface refers to configurations contained within the access interface. For example, the access interface configuration information includes traffic limiting configuration information. Before intercepting the destination access request outside the access interface, it is necessary to first determine whether the access interface contains traffic limiting configuration information. If it does, the destination access request transmitted by the endpoint device is intercepted for each individual endpoint user outside the access interface.

[0056] In the present embodiment, before applying the interception of the access request, it is checked whether the traffic limiting configuration information is included in the configuration information of the access interface, and early confirmation is possible as to whether the access interface contains a traffic limiting procedure, thereby ensuring the stability of the system.

[0057] Step 202: Determining the frequency with which the target access request is received within a preset time period.

[0058] The preset period generally includes a sliding time window.

[0059] For example, when a user accesses the interface via their endpoint, the server, after receiving the destination access request transmitted by the endpoint, will determine the frequency with which the destination access request is received within the preset time period described above. The frequency with which the server receives the destination access request within the preset time period can also be interpreted as the frequency with which the endpoint transmits the destination access request to the server within the preset time period. The server can obtain the destination access request frequency locally or from a traffic limiting server.

[0060] Furthermore, to improve the success rate of access by each individual user, the server can, after intercepting the target access request, also determine whether the target access request is a non-first access request to the interface, and then determine the frequency with which the target access request is received within the preset time period if the target access request is a non-first access request to the access interface; and forward the target access request to the access interface if the target access request is a first access request to the access interface.

[0061] Specifically, when the user transmits the target access request via the endpoint to access the access interface for the first time, the server creates an independent sliding window corresponding to the user and requests that the request pass through a traffic limiting component before accessing the access interface. The traffic limiting component can then directly release the target access request according to an internally added traffic limiting procedure or rule, thus granting a one-time access to the access interface described above. During the subsequent set segment of the time period, if the user continues to transmit an access request via the endpoint, the user's access request at that point is a request for non-first access to the access interface.First, if there is insufficient request processing capacity in the sliding window, the request is rejected directly; and if there is sufficient request processing capacity in the sliding window, a counter is started to count the number of access requests to the access interface within the preset time after the request was received.

[0062] Furthermore, after counting the number of access requests to access the access interface within the preset time in the sliding window, the traffic limiting component can determine, based on the counted number, whether the target access request to access the interface should be allowed.

[0063] In the present embodiment, determining whether a received target access request is a first access request to access the access interface ensures that each individual user can successfully access the access interface simultaneously, even when multiple users make concurrent requests. This protects the system from being blocked due to frequent transmission of an access request from a single user, allowing the system to deny all access requests by limiting traffic. This further improves the user's access success rate and enhances the user experience.

[0064] Step 203: Transmitting the target access request to the access interface if the frequency is greater than a second preset value.

[0065] The second preset value refers to a maximum number of interface accesses within the preset period defined by the traffic limitation procedure or rule included in the traffic limitation component, and its value can be adjusted according to the actual situation or experience. The embodiments of the present application do not impose any restriction on a specific value for the second preset value.

[0066] For example, a server receives and processes access requests transmitted by end devices, and the server's ability to handle concurrent access requests is measured by the throughput rate, so each server has a threshold for its ability to handle concurrent access requests. To ensure stable system operation and guarantee that each user can successfully access the interface even with a large number of concurrent access requests, a second preset value can be set in the sliding window according to the traffic limiting procedure or rule configured in the traffic limiting component.

[0067] Furthermore, if the user makes a non-first request to access the interface, the frequency with which the target access request is received within the preset time period is counted. If the frequency with which the target access request is received within the preset time period exceeds the second preset value, the traffic limiting component executes a release rule, allowing a one-time access to the access interface for the target access request.This means that the server transmits the target access request to the access interface and, in the meantime, resets or updates the frequency with which the target access request is received in the sliding window. In this way, it can be ensured that the system is protected from traffic throttling, as the user does not repeatedly call the access interface after successfully accessing it, thus further improving the success rate of access by each individual user and saving system resources.

[0068] The access interface is prohibited from receiving the target access request if the frequency with which the target access request is received within a segment of a sliding time window is not greater than the second preset value. This means that the access to the access interface for the target access request is intercepted, a rollback procedure is performed, and the frequency with which the target access request is received is incremented by one. Note that if the number of requests from the target access request to the access interface does not exceed the second preset value after the set sliding time window has expired, the access request is deleted within that sliding window.

[0069] The demotion procedure involves specifying access requests at different levels and performing different processing when faced with different levels of abnormality. Depending on the service mode, a service may be denied, a service may be delayed, and sometimes a service may be randomized.

[0070] Furthermore, floating windows that have been used remain in system resources indefinitely, and to protect these resources, it is necessary to eliminate unwanted floating windows. For example, if it is determined that a floating window has not been used for a long time, a custom event is passed to a custom spring event monitor, and the monitor is responsible for removing the floating window instance.

[0071] The access traffic limitation method and the access traffic limitation device, the device, the storage medium, and the computer program product provided in the embodiments of the present application enable: when it is detected that the number of access requests transmitted from a multitude of terminal devices to an access interface exceeds a first preset value, intercepting, for each individual terminal device, outside the access interface, a target access request transmitted by the terminal device; then determining the frequency with which the target access request is received within a preset period; and transmitting the target access request to the access interface when the frequency is greater than a second preset value.In a scenario with a large number of concurrent access requests, a traffic limiting component is deployed outside the access interface for each endpoint, and the destination access request transmitted by the endpoint is intercepted by the traffic limiting mechanism. If the destination access request exceeds the second preset value within the preset time, it indicates that a user has an urgent need to access the access interface; at this point, the traffic limiting component will release the access request to invoke the access interface.This prevents the system from denying all access requests by activating traffic limiting due to frequent transmission of an access request from an individual, thereby improving the success rate of access by the user under the premise of stable system operation.

[0072] Fig. Figure 6 is a schematic structure diagram of an access traffic limitation device 60 according to an embodiment of the present application. For example, with reference to Fig. 6. Include the access traffic limitation device 60: an interception module 601 configured to intercept, when it is detected that the number of access requests being transmitted from a multitude of terminals to an access interface exceeds an initial preset value, for each individual terminal outside the access interface, a target access request being transmitted by the terminal; a determination module 602 configured to determine the frequency with which the target access request is received within a preset time period; and A transmission module 603 is configured to transmit the target access request to the access interface when the frequency is greater than a second preset value.

[0073] In one possible implementation, the determination module 602 is specifically configured to: Determine whether the target access request is a non-first access request to the access interface; and Determining the frequency with which the target access request is received within the preset time period when the target access request is a request for a non-first access to the access interface.

[0074] In one possible implementation, the transmission module 603 is specifically configured to: Transmitting the target access request to the access interface if the target access request is a request for initial access to the access interface.

[0075] In one possible implementation, the device further includes: a processing module 604; where the processing module 604 is configured to prevent the access interface from receiving the target access request if the frequency is not greater than the second preset value.

[0076] In one possible implementation, the device further includes: an update module 605; where the update module 605 is configured to update the frequency with which the target access request is received.

[0077] In one possible implementation, the intercept module 601 is specifically configured to: Capturing interface configuration information of the access interface; Determine whether the interface configuration information includes traffic limit configuration information; and Intercepting the target access request outside the access interface if the interface configuration information includes the traffic limiting configuration information.

[0078] The access traffic limitation device 60 provided in the embodiment of the present application can implement the technical solution of the access traffic limitation method in any of the foregoing embodiments and is implemented using similar principles and produces a similar advantageous effect as the implementation principle and the advantageous effect of the access traffic limitation method. Reference may be made to the implementation principle and the advantageous effect of the access traffic limitation method, and details are not further explained here.

[0079] Fig. Figure 7 is a schematic structure diagram of a server 70 according to an embodiment of the present application. For example, the server can be described with reference to Fig. 7 include a processor 701 and a memory 702.

[0080] Memory slot 702 is configured to store a computer program.

[0081] The processor 701 is configured to read the computer program stored in the memory 702 and to execute the technical solution of the access traffic limitation procedure according to one of the preceding embodiments based on the computer program in the memory 702.

[0082] Optionally, the 702 memory can be a standalone device or integrated with the 701 processor. If the 702 memory is a standalone device, the server can also include a bus for connecting the 702 memory and the 701 processor.

[0083] Optionally, the present embodiment further includes the following: a communication interface which can be connected to the processor 701 via a bus. The processor 701 can control the communication interface to implement the acquisition and transmission functions of the server described above.

[0084] The server shown in the embodiment of the present application can implement the technical solution of the access traffic limitation method in any of the foregoing embodiments and is implemented using similar principles and produces a similar advantageous effect as the implementation principle and the advantageous effect of the access traffic limitation method. Reference can be made to the implementation principle and the advantageous effect of the access traffic limitation method, and details are not further explained here.

[0085] One embodiment of the present application further provides a computer-readable storage medium in which a computer-executable instruction is stored, wherein the computer-executable instruction, when executed by a processor, is configured to implement the technical solution of the access traffic limitation procedure according to one of the preceding embodiments.

[0086] One embodiment of the present application further provides a computer program product comprising: a computer program which, when executed by a processor, implements the technical solution of the access traffic limitation method according to one of the preceding embodiments. It is implemented using similar principles and produces a similar beneficial effect as the implementation principle and beneficial effect of the access traffic limitation method. Reference may be made to the implementation principle and beneficial effect of the access traffic limitation method, and details are not further elaborated here.

[0087] In several embodiments provided in the present application, it is understood that the disclosed device and method may be implemented in other ways. For example, the described device embodiments are merely exemplary. For instance, the division of units refers only to the division of logical functions, and other divisions may exist in actual implementations. For example, a plurality of units or components may be combined or integrated into a different system, or some features may be ignored or omitted. Furthermore, the mutual couplings, direct couplings, or communication links shown or discussed herein may be implemented through various interfaces.The indirect couplings or communication links between the devices or units can be implemented in electronic, mechanical, or other forms.

[0088] The units described as separate parts may be physically separate or not, and parts indicated as units may or may not be physical units; that is, they may be located in one position or distributed across a multitude of network units. Some or all of the units may be selected according to the actual requirements to address the objections raised by the embodiments. Furthermore, in the embodiments of the present application, functional units may be integrated into a processing unit, or each unit may exist physically on its own, or two or more units may be integrated into one unit. The integrated unit may be implemented in a form of hardware or in a form of a hardware plus software functional unit.

[0089] The integrated module, implemented in the form of a software function module, can be stored on a computer-readable storage medium. The described software function module is stored on a storage medium and includes several instructions that enable a computer device (which may be a personal computer, a server, a network device, or the like) or a processor to perform some of the steps of the method described in the embodiments of the present application.

[0090] It is understood that the described processor can be a central processing unit (CPU), or the other general-purpose processor, a digital signal processor (DSP), an application-specific integrated circuit (ASIC), etc. The general-purpose processor can be a microprocessor, or the processor can also be any conventional processor. The steps of the method disclosed in combination with the present invention can be directly reflected in the final execution by the hardware processor or the combination of hardware and software modules in the processor.

[0091] The storage can include high-speed RAM or non-volatile NVM storage, such as at least disk storage, a USB flash drive, a portable hard drive, read-only storage, a magnetic disk, an optical disk, or the like.

[0092] The bus can be an Industry Standard Architecture (ISA) bus, a Peripheral Component Interconnect (PCI) bus, or an Extended Industry Standard Architecture (EISA) bus, etc. The bus can be classified as an address bus, a data bus, a control bus, etc. For the sake of clarity, the bus in the accompanying drawings of this application is not limited to just one bus or one type of bus.

[0093] The described computer-readable storage medium can be implemented by any type of volatile or non-volatile storage device, or a combination thereof, such as static random-access memory (SRAM), electrically erasable programmable read-only memory (EEPROM), erasable programmable read-only memory (EPROM), programmable read-only memory (PROM), read-only memory (ROM), magnetic memory, flash memory, magnetic disk, or optical disk. The storage medium can be any available medium accessible by a general-purpose or dedicated computer.

[0094] Finally, it should be noted that the foregoing embodiments are intended only to describe the technical solutions of the present application, rather than to limit the present application. Although the present application has been described in detail with reference to the foregoing embodiments, those skilled in the art should understand that they may still make modifications to the technical solutions described in the foregoing embodiments or make corresponding substitutions for some or all of the technical features therein; however, these changes or substitutions do not result in the nature of corresponding technical solutions differing from the scope of protection of the technical solutions in the embodiments of the present application. QUOTES INCLUDED IN THE DESCRIPTION

[0000] This list of documents cited by the applicant was automatically generated and is included solely for the reader's convenience. The list is not part of the German patent or utility model application. The DPMA accepts no liability for any errors or omissions. Cited patent literature

[0000] CN 2021110564316

[0001]

Claims

[1] Access traffic limitation method, comprising: if it is detected that the number of access requests transmitted from a large number of terminal devices to an access interface exceeds a first preset value, intercepting for each individual terminal, outside the access interface, a target access request transmitted by the terminal; Determining the frequency with which the target access request is received within a preset period of time; Transmit the target access request to the access interface if the frequency is greater than a second preset value. [2] The method of claim 1, wherein determining the frequency with which the target access request is received within the preset period of time comprises: Determining whether the target access request is a non-first access request to the access interface; Determining the frequency with which the target access request is received within the preset period when the target access request is the non-first access request to the access interface. [3] The method of claim 2, further comprising: Transmitting the target access request to the access interface if the target access request is a request for initial access to the access interface. [4] The method of claim 1, further comprising: Prevent the access interface from receiving the target access request if the frequency is not greater than the second preset value. [5] The method according to any one of claims 1 to 3, after transmitting the target access request to the access interface, further comprising: Update the frequency with which the target access request is received. [6] A method according to any one of claims 1 to 4, wherein intercepting, outside the access interface, the target access request transmitted by the terminal comprises: Collecting interface configuration information of the access interface; Determining whether the interface configuration information includes traffic limit configuration information; Intercept the target access request outside the access interface if the interface configuration information includes the traffic limit configuration information. [7] Access traffic restriction device comprising: an interceptor module configured, when it is detected that the number of access requests transmitted from a plurality of terminal devices to an access interface exceeds a first preset value, to intercept, for each individual terminal device, outside the access interface, a target access request transmitted by the terminal device; a determination module configured to determine the frequency with which the target access request is received within a preset period of time; a transmission module configured to transmit the target access request to the access interface when the frequency is greater than a second preset value. [8] A server comprising: a memory and a processor; wherein the memory is configured to store a computer program; the processor is configured to read the computer program stored in the memory and to execute the access traffic limitation method according to any one of claims 1 to 6 based on the computer program in the memory. [9] A computer-readable storage medium having stored therein a computer-executable instruction, the computer-executable instruction, when executed by a processor, being configured to implement the access traffic limiting method of any one of claims 1 to 6. [10] A computer program product comprising: a computer program which, when executed by a processor, implements the method of any one of claims 1 to 6.