90 results about "Gateway address" patented technology

The invention provides a multi-cluster architecture, a multi-cluster communication method and device, equipment and a medium, and the method comprises the steps: analyzing a cross-cluster call request when a first cluster gateway of a first cluster receives the cross-cluster call request, and determining a target service name corresponding to the cross-cluster call request; according to the target service name, querying a target cluster gateway address corresponding to a target service targeted by the cross-cluster call request; under the condition that the target cluster gateway address corresponding to the target service is not queried, acquiring the target cluster gateway address corresponding to the target service from the registration center, and sending an access request to a second cluster according to the target cluster gateway address; and a second cluster gateway of the second cluster determines a target address of a target node corresponding to the target service based on the access request, and forwards the access request to the target node. According to the invention, during cross-cluster request, the service address of the opposite-end business does not need to be known, and only the service name needs to be known; and a fault-tolerant mechanism is provided.

The invention belongs to the technical field of service gateways, and particularly relates to a multi-gateway fusion architecture system for data sharing, an interface user requests for an available gateway address to a resource management system, the resource management system returns the available gateway address to the interface user, and the interface user performs data sharing according to the obtained gateway address. The resource management system initiates service calling to a corresponding service gateway, the service gateway processes a request and generates a log, the log is transmitted to the log processing system through a message queue cluster, the log processing system performs cleaning, filtering and information merging operation on the received log, and the resource management system is responsible for managing and monitoring the state of the service gateway; the architecture system is provided with a multi-gateway unified authentication specification and a service interface agent specification; the service gateways of a plurality of different manufacturers can be accessed at the same time, and when the gateway of one manufacturer has the problem which cannot be solved, service calling is smoothly switched to the service gateway of the standby manufacturer, so that the capability of the sharing platform for providing services to the outside in a high-concurrency scene is ensured.

The invention discloses a 2.4 G-based RSSI (Received Signal Strength Indicator) positioning data relay transmission device and method, and belongs to the technical field of wireless communication. The device comprises a positioning label, a positioning gateway, a relay gateway and a public network gateway. The positioning tag broadcasts a 2.4 G signal containing the ID of the positioning tag; the positioning gateway scans the 2.4 G signal, and generates and broadcasts a data packet in which a positioning gateway address, a data packet number, a relay level and aggregated data are packaged; a relay gateway is switched to a low-power-consumption mode after initialization through a monitoring-learning-synchronization mechanism, wakes up and receives data in a broadcast time window of an upstream gateway of the relay gateway, updates a relay level and forwards the data to a downstream gateway, and therefore multi-hop relay transmission of the data is achieved. And the public network gateway finally uploads the data to a cloud platform or an upper computer. According to the invention, through data aggregation and time synchronization dormancy, the system power consumption is greatly reduced, and long-distance and long-endurance positioning data transmission of battery power supply in a complex environment is realized.

The embodiment of the invention discloses a data transmission method of an electronic device, the electronic device and a storage medium, the data transmission method can be applied to a first system module, and by interrupting respective independent network configuration processes of two system modules during power-on, a virtual bridging network card in the first system module is used to transmit data to the first system module. Taking over a point-to-point group master network card enumerated by the first system module and a first connection network card connected with the second system module, and configuring a gateway address which is the same as the address of the second system module for the local area network of the assembly, after the wireless connection link is established between the wireless terminal equipment and the first system module, a user can directly select any one system module as a sending target, and the bridging network card processes or forwards the data according to the target address after receiving the data, so that the connection operation of data transmission in a multi-person communication process is simplified; the continuity of information transmission in the multi-person communication process is improved, and the convenience of using the wireless terminal equipment by the user in the interactive tablet environment is also improved.

The present application relates to a method and apparatus for heterogeneous address matching. The method includes: obtaining a first address set of a target geographical area, and constructing a first address graph data structure according to the first address set; obtaining a second address set of the target geographical area, and constructing a second address graph data structure according to the second address set; screening out a plurality of address matching pairs from the first address set and the second address set, labeling each address matching pair to obtain corresponding sample address matching pairs; iteratively training an address matching model using the first address graph data structure, the second address graph data structure, and the plurality of sample address matching pairs to obtain a trained address matching model; processing the first address graph data structure and the second address graph data structure through the trained address matching model, and identifying all address matching pairs in the first address set and the second address set according to the processing results. The present application can more accurately and quickly identify different-source addresses.

The invention provides a cloud desktop access method, a target zero-trust gateway and a cloud desktop access system, and the method comprises the steps: responding to a received access instruction for accessing a plurality of cloud desktop applications, and transmitting the identity information of client equipment to a cloud desktop controller; after a plurality of zero-trust gateway addresses from the cloud desktop controller are received, respectively establishing a plurality of first communication connections between the client device and a plurality of zero-trust gateways; an access request containing corresponding cloud desktop port information is sent to a corresponding zero-trust gateway through any first communication connection, so that the zero-trust gateway establishes second communication connection with an application gateway corresponding to the cloud desktop port information; and accessing the plurality of cloud desktop applications through the plurality of first communication connections and the plurality of second communication connections corresponding to the plurality of first communication connections. According to the embodiment of the invention, the situation that a plurality of cloud desktop applications cannot be accessed due to the failure of a certain component is effectively avoided.

This application provides a packet forwarding method and device. The method involves: determining whether to perform Layer 3 forwarding based on the destination MAC address of the Ethernet packet (which is the gateway MAC address); searching the link layer address mapping table based on the destination IP address of the inner IP packet of the Ethernet packet; obtaining a new destination MAC address from the matching link layer address mapping table entry when a matching entry for the destination IP address is found; searching the MAC address table based on the new destination MAC address; obtaining the outgoing port and outgoing VLAN from the matching entry when a matching entry for the new destination MAC address is found; modifying the destination MAC address, source MAC address, and incoming VLAN of the Ethernet packet to the new MAC address, gateway MAC address, and outgoing VLAN, respectively; and sending the modified Ethernet packet through the outgoing port.

The application discloses a networking method and system based on dynamic IPv6 addresses, wherein the system comprises terminal equipment and a VPN gateway, and the terminal equipment accesses a network through the VPN gateway. The dynamic change of the IPv6 address of the VPN gateway (if the public IPv4 address is sufficient, the method is also applicable) can effectively alleviate the network asset exposure surface and reduce the possibility of being attacked by taking advantage of the unlimited nature of the IPv6 address.

The invention discloses a method for accessing a home intranet, an edge access gateway, a system, a medium and a product. The method comprises the following steps: acquiring information of a home terminal obtained by finishing Ethernet point-to-point protocol dialing; an access message sent by the cloud core network equipment is received, and when it is judged that the access message meets a preset condition according to an inner-layer message source IP address in the access message, an inner-layer destination MAC address and a destination IP address in the access message are analyzed to serve as a WAN MAC address and a terminal IP address of a corresponding broadband user; and querying a pre-stored uplink flow forwarding table according to the WAN MAC address and the terminal IP address to obtain a corresponding gateway MAC address and a corresponding terminal MAC address, respectively replacing the source and target MAC addresses of the access message with the gateway MAC address and the terminal MAC address, and then sending the access message to the home terminal. According to the embodiment of the invention, low-cost and high-speed private network accompanying communication can be realized.

The embodiment of the invention discloses a non-intrusive signature encryption video playing method based on a secure decoding library. A specific embodiment of the method comprises the steps of configuring a decoding library supporting a security function in response to a situation that a target video monitoring platform does not support a preset protocol; initializing a decoding library, and transmitting the security gateway address and the target front-end equipment identifier to the decoding library; sending a video playing request to the target video monitoring platform through a transmission protocol of the target video monitoring platform, and receiving a signature encrypted video code stream from the target video monitoring platform; transmitting the signature encrypted video code stream to a decoding library; and based on the decoding library, carrying out adaptive security processing on the signature encrypted video code stream to obtain decoded video data, receiving the decoded video data from the decoding library, and playing the decoded video data. According to the embodiment, for a video monitoring platform of a non-GB35114 standard, the technical effects of reducing video playing delay and gateway load and meeting data security requirements are achieved.

A method for operating a user equipment operating in a visited cellular network for which no roaming agreement exists between a home cellular network of the user equipment and the visited cellular network. The user equipment transmits an access request to the visited cellular network requesting access to the visited cellular network. The access request includes an identifier indicating to originate from a user equipment for which no roaming agreement exists with the home cellular network of the user equipment. The user equipment transmits a session establishment request to the visited network to establish a data packet session in the visited cellular network. The UE determines an address of a gateway providing access to the home cellular network, and establishes a connection to the gateway based on the determined address via the visited cellular network.

The invention provides an edge computing scene-oriented IP address allocation method, device and equipment, and relates to the field of cloud computing, in particular to the technical fields of edge computing, data centers, servers and the like. The method comprises the following steps: a DHCP (Dynamic Host Configuration Protocol) relay device receives a DHCP discovery message sent by an edge server, fills a loopback address and a gateway address of the DHCP relay device into the DHCP discovery message to obtain a processed message, and sends the processed message to an IPAM (Internet Protocol Access Module) server; the IPAM server allocates a target IP address to the edge server according to the gateway address in the processed message, and sends a DHCP providing message containing the target IP address to the DHCP relay device according to the loopback address in the processed message; and the DHCP relay device sends the DHCP providing message to the edge server. According to the invention, accurate positioning of the network topology and intelligent allocation of the dynamic IP addresses can be realized, and the probabilistic failure problem of IP address allocation is avoided.

The invention discloses a method and a device for flexibly allocating gateway addresses based on a fragmentation technology, and the method comprises the steps: confirming a gateway mask according to the number of required user addresses; partitioning the planning address field by using a gateway mask to obtain a total partition set; reading an occupied address field, and partitioning by using a gateway mask to obtain an occupied partition set; if a certain partition in the occupied partition set falls into the partition set of the planned address field, discarding the partition in the partition set of the planned address field; remaining partitions in the partition set of the planning address field are recorded as an idle partition set, and the partitions with small addresses are preferentially used and stored in the occupation table. According to the method and the device, the IP address resource allocation is more flexible and accurate, the address allocation algorithm is optimized, the address waste is reduced, the utilization rate of the address resource is improved, the service fulfillment efficiency is further improved, the working pressure of network operation and maintenance personnel is reduced, and the operation and maintenance cost is reduced.

This invention provides a mirroring traffic control method and apparatus. The method is applied to gateway devices in a gateway cluster, where the gateway cluster includes multiple gateway devices, each storing a mirroring configuration. The method includes: if the mirroring configuration contains the gateway address of a gateway device, then sending service traffic to a mirroring service node. The mirroring configuration is used to control some gateway devices in the gateway cluster to perform mirroring services. This allows service traffic to be mirrored to a test environment through mirroring configuration without changing the existing network architecture, thus achieving control over the traffic mirroring service.

This invention relates to the field of Internet of Things (IoT) communication technology, and more particularly to a dynamic allocation method, system, device, and medium for IoT gateways. The method includes: constructing a global state information database; when a sensor node needs to connect to an edge computer, the edge computer, based on the global state information database, filters all communication gateways according to a preset candidate set filtering strategy to obtain a set of candidate communication gateways; performing a weighted comprehensive calculation on each communication gateway in the candidate set to obtain an adaptation score for each communication gateway; obtaining a target communication gateway based on the adaptation score of each communication gateway combined with a preset switching mechanism; and the edge computer issuing an instruction containing the address code of the target communication gateway to the sensor node, thereby establishing a connection between the sensor node and the target communication gateway and transmitting data. This invention improves the system's concurrency limit, ensures the quality of data transmission, realizes the transformation from "local optimum" to "global optimum," and exhibits good adaptability.

The application provides a multi-gateway scheduling processing method, device, system, server and storage medium, and relates to the technical field of communication. The method comprises the following steps: acquiring an access request of a client to a capability gateway cluster; if the access mode is a software development kit access, acquiring gateway subscription information of the client, determining a capability gateway address to be connected and permission information according to the application identifier, the capability identifier and the gateway subscription information, sending the capability gateway address to be connected and the permission information to the client, so that the client sends an authentication request to the capability gateway cluster corresponding to the capability gateway address to be connected, and completes the authentication according to the received authentication request response result. The method of the application avoids that all requests pass through a gateway access proxy server to distribute capability gateway addresses and permission information, thereby reducing the connection pressure of the gateway access proxy server and reducing the possibility of collapse of the gateway access proxy server in a high-concurrency scenario.

The invention relates to a vehicle-mounted Ethernet IP address conflict solving method and system based on NAT. The system comprises a network stack module NetworkStack, a network daemon process module netd and a network configuration script module. A network stack module NetworkStack monitors a data packet transmitted by a DHCP protocol in a communication process, acquires IP address information provided by a server to the vehicle machine, and judges whether the IP address information conflicts with the IP address information in the vehicle; communicating with a kernel through a network daemon module netd; the network configuration script module uses a packet filtering firewall tool iptables to convert an IP address and a gateway address, uses an address resolution protocol arp related tool to convert an arp request address, and maps the IP address of a network layer into an MAC address of a data link layer. IP addresses are internally converted in combination with an upper-layer NetworkStack module, a middle-layer netd gateway and a plug-in script of the Android, the IP addresses in the system are changed into new configuration information, and when a message is forwarded to the outside, the configuration information is changed back to an original state, so that conflict with a network address in the system is avoided.

The application discloses a data transmission method and system, and relates to the technical field of computer networks. In the data transmission method, a server sets a default gateway address of a client when the client performs data transmission. When the client performs data transmission, the user does not need to manually configure the default gateway address, and only needs to configure an internet protocol address and a subnet mask, so that the efficiency of manually configuring network information is improved. The server determines a target default gateway address according to the default gateway address of a router and the data flow received by the default gateway address. Since the data flow received by the default gateway address is dynamically changed, the determined target default gateway address is dynamically changeable, the load is prevented from being concentrated on a static gateway address, the network information configuration is more reasonable, the problem of data transmission blockage is reduced, and the transmission efficiency of the network is improved.

The invention discloses a privacy computing network authorization and state management and control method and system based on a node contract, relates to the field of privacy computing, and aims to solve the problems that a decentralized privacy computing collaborative network depends on centralized nodes, state synchronization is inconsistent and authorization management and control are extensive. Through point-to-point interaction of intercommunication gateways of an initiator node and a partner node, node cooperation application and data set authorization configuration are completed, and real-time synchronization and authorization full-life-cycle management of a data set and node information are realized; an initiator node and a partner node locally maintain a cooperative gateway address list based on an interworking gateway, automatic synchronization is achieved through cooperation application, a centralized registration center is not needed, network decentralization, state consistency and authorization refinement are ensured, and the method is suitable for a cross-mechanism privacy computing cooperation scene.

Methods and systems provide secure, real-time software updates over a public network to an isolated security system. A method includes the steps of setting up a network address translation (NAT) data structure for allowing outbound connections only through a first firewall between the isolated security system and the public network, and configuring the isolated security system to identify an internet web gateway address to get a software update from a security system update manager over a predetermined protocol and port. A further step involves configuring a proxy setting in the isolated security system to identify an internet web gateway address of a proxy server in a NAT subnet.

The embodiment of the invention provides an access method, a network access method, a related device, equipment, a medium and a product. The access method is applied to a gateway, and comprises the following steps: writing a preset authentication passing identifier into a gateway MAC address based on a preset rewriting rule under the condition that terminal identity authentication passes, and obtaining a rewritten gateway MAC address; the rewritten gateway MAC address is sent to the terminal, so that the terminal sends an access request to a target network by taking the rewritten gateway MAC address as a target MAC address; and in response to an access request of the terminal to the target network, analyzing the target MAC address carried by the access request according to a preset rewriting rule, and accessing the terminal to the target network under the condition that the preset authentication passing identifier is obtained through analysis. According to the admission method, admission control is carried out based on the target MAC address, only whether the target MAC address contains the preset authentication passing identifier or not needs to be identified, searching and matching of the source MAC address do not need to be carried out, memory is saved, the admission control efficiency is improved, and management and maintenance are simplified.

The embodiment of the application provides a gateway address allocation method, a core network, a user terminal, a medium and a product. The method comprises the following steps: when a protocol data unit session is established by the user terminal, the core network acquires the information of a network segment of a hanging device associated with the user terminal and an Internet protocol address of the user terminal, encapsulates the information of the network segment of the hanging device into a protocol configuration option field, and constructs a protocol data unit session establishment response message according to the protocol configuration option field and the Internet protocol address of the user terminal, wherein the protocol data unit session establishment response message comprises the protocol configuration option field and the Internet protocol address of the user terminal. Then, the protocol data unit session establishment response message is sent to the user terminal, and the user terminal is used for allocating the Internet protocol address of the gateway used by the hanging device according to the protocol data unit session establishment response message. The application does not need a user to manually configure the network segment information to the user terminal, and the intelligent degree and the accuracy of address allocation are improved.

The application discloses a data resource positioning method and system based on identification analysis, relates to the technical field of data communication and resource management, and comprises the following steps: receiving a data resource positioning request, separating a global unique identification in the data resource positioning request into a prefix part and a suffix part; performing main domain analysis according to the prefix part; performing resource analysis according to the suffix part; the resource analysis sends the suffix part to a digital object warehouse gateway address; a gateway corresponding to the digital object warehouse gateway address searches and returns a target data resource from a corresponding digital object warehouse according to the suffix part, and verifies access authority at the same time. Through the hierarchical processing mechanism of the main domain analysis and the resource analysis, the application solves the technical problem of accurate positioning of massive heterogeneous data resources, adopts the technical means of prefix hierarchical query and suffix accurate matching, realizes unified management and efficient access of data resources, improves data sharing and exchange efficiency, and guarantees the safety of data access.

One aspect of the invention relates to a high-performance computer comprising a plurality of clusters (21, 22) by an IP network (2), each cluster (21, 22) comprising:At least one Ethernet gateway (215, 225) configured to transmit data between the cluster (21, 22) and the IP network (2) storing at least one first routing table comprising at least, for each other cluster of the plurality of clusters (21, 22), an association of a gateway address (215, 225) with a destination IP address comprised in the cluster (21, 22) comprising the gateway (215, 225).A plurality of computing and / or storage nodes (N, 211, 212, 221, 222), each node (N, 211, 212, 221, 222):being configured to run at least one instance of a high-performance computing and / or storage application,comprising at least one network card (NIC1) implementing an Ethernet-based high-performance interconnection protocol and being configured to implement an address resolution protocol, the network card (NIC1) storing at least one second routing table comprising at least, for each other cluster of the plurality of clusters (21, 22), an association of an address of a gateway (215) of the first cluster (21) with the identifier of the other cluster (22) accessible from the gateway (215) of the first cluster (21).storing at least one third routing table comprising at least, for each other cluster of the plurality of clusters (21, 22), an association of an identifier of an application instance with an identifier of the cluster comprising the node (N, 211, 212, 221, 222) running the application instance, with a unique network identifier of the application instance, and with an IP address of the network card (NIC1) of the node (N, 211, 212, 221, 222) running the application instance.At least one intra-cluster interconnection switch (214, 224) configured to connect each node (N, 211, 212, 221, 222) and the gateway (215, 225).

The invention relates to a deployment method of a gateway system and related equipment. The method comprises the following steps: in response to starting of a server based on a PXE mode, acquiring an authorization token, a gateway address and a filling control center IP address from an approval center according to server equipment information; wherein the authorization token is generated when the approval center approves the downloading authority of the server according to the server equipment information and the approval is passed; when the approval is passed, the approval center is also used for generating an equipment key and synchronizing the equipment key to the filling control center; establishing a cross-network segment route according to the gateway address, and obtaining an equipment key and a system mirror image file from a filling control center through the cross-network segment route according to the authorization token; and decrypting the verification information ciphertext according to the device key, verifying the boot mirror image according to a verification strategy and a verification value obtained by decryption, and installing the boot mirror image under the condition that the verification is passed. According to the embodiment of the method, automatic deployment of the gateway system is realized, and the security of the gateway system is improved.

The present invention provides a communication method and device between a 5G access network and an edge cloud gateway. Through the analysis and processing of the request message sent by the MEC orchestrator by the 5G core network, the UPF corresponding to the request message can be determined, and the UPF is instructed to obtain the traffic statistics of the specified edge cloud gateway IP address. After receiving the traffic statistics, the edge cloud gateway in the MEC system is load balanced to determine the target user terminal address and the target edge cloud gateway IP address. Due to the introduction of load balancing, after the UPF determines the target edge cloud gateway IP address as the access address corresponding to the target user terminal address, the target user terminal can quickly respond to the demand for accessing the edge cloud service, thereby ensuring that the demands of each user terminal involved in the MEC system for accessing the edge cloud service can all be quickly responded to, thereby improving the service quality and service experience when the user accesses the edge cloud service.

The application discloses a kind of based on node contract's privacy computing network authorization and state management method and system, it is related to privacy computing field, it aims at solving the problem of relying on centralization node, state synchronization inconsistency and extensive authorization management in the decentralized privacy computing collaborative network. Through the point-to-point interaction of the intercommunication gateway of initiator node and partner node, node cooperation application, data set authorization configuration are completed, and the real-time synchronization of data set and node information and the authorization full life cycle management are realized;Initiator node and partner node maintain the cooperation gateway address list based on intercommunication gateway locally, automatically synchronized through cooperation application, without centralized registration center, ensure network decentralization, state consistency and authorization refinement, suitable for cross-institution privacy computing collaborative scene.

The present invention discloses a stateless lightweight cross-range network control method and system. The present invention realizes the configuration of cross-range network connection by adding a range gateway element in the topology, wherein a range gateway element is configured for each cross-range network connection in each sub-range scenario; when the cross-range scenario is started, each sub-range network is constructed and the unique ID of each element of the local topology is reported to the joint management center; the joint management center sends a triple data record containing the local and opposite cross-range port unique IDs and the opposite border gateway IP address to the border gateway of the sub-range; the border gateway generates a corresponding record locally based on the received triple data, and starts to listen at the designated port, encapsulating the intercepted message content and the opposite cross-range port unique ID together and sending it; the opposite range border gateway decapsulates and forwards it. The present invention can reduce the difficulty of implementing cross-range traffic intercommunication and improve the convenience of maintaining cross-range scenarios.

The present invention proposes an access authentication method, device, system, electronic device and storage medium, which relate to the field of communication technology. Two address pools with the same IP address range and gateway address are configured on the SDN controller, and the two address pools are associated with different VRF information. The SDN controller receives a DHCP relay request message sent by a DHCP relay device. When the address pool associated with the VRF information in the DHCP relay request message is the address pool corresponding to the default VLAN, an IP address is allocated to the terminal from the address pool and the terminal is authenticated; the access port VLAN of the terminal after successful authentication is configured as an authorized VLAN, and the IP address is synchronized to the allocation list of the address pool corresponding to the authorized VLAN. In this way, after the terminal is successfully authenticated, it can directly use the IP address obtained before authentication to communicate, without waiting for the terminal to renew its lease or manually triggering the terminal to re-acquire the IP address in the authorized VLAN before communication.

The invention discloses an ARP (Address Resolution Protocol) table item synchronization method and an MLAP-Lite test system. The method applied to auxiliary test equipment of the MLAP-Lite test system comprises the following steps: receiving an ARP message notified by the test equipment in a VLAN (Virtual Local Area Network); the gateway address of the ARP message is an IP (Internet Protocol) address of the same VLAN (Virtual Local Area Network) interface configured by the two MLAP-Lite gateways; packaging an LLDP message according to the ARP message; and the LLDP message is sent to the two MLAP-Lite gateways through a link aggregation port in the VLAN. According to the method, the ARP table item is not stored on the auxiliary testing equipment, so that the overall configuration complexity is reduced, and the performance requirement on the auxiliary testing equipment is reduced; and the two MLAGE-Lite gateways can synchronously receive the latest ARP table item information in real time, so that the problem of traffic abnormality caused by inconsistency of table items on two sides after the ARP changes in a waiting period in the prior art is solved.