103 results about "Gateway address" patented technology

The embodiment of the invention provides a dynamic access control method and device based on a security gateway and trust evaluation and a related product. The dynamic access control method based on the security gateway and trust evaluation comprises the following steps: closing an external access permission of an application and analyzing a domain name of the application to a security gateway address based on the security gateway, so that all access requests are accessed through the security gateway; whether an access control strategy is triggered or not is judged according to the risk assessment result and a pre-configured access control triggering rule, and if the access control strategy is triggered, the access control strategy is issued to the security gateway; and the security gateway receives the access control strategy in real time, intercepts an access request of a client to a target application, performs matching judgment on the content of an access request message according to a dynamic strategy, and executes a corresponding control action on the access request according to a strategy rule if a preset triggering condition is met so as to realize dynamic access control. And the access is safer and more flexible, and the self-adaption and the expandability are higher.

The invention relates to an intranet access method and device, computer equipment, a computer readable storage medium and a computer program product. The method comprises the following steps: a cloud side gateway receives an intranet access request; inquiring whether terminal equipment corresponding to a client logging in the cloud desktop network address supports internal network penetration or not; if so, taking the gateway address corresponding to the client as the next hop address of the cloud desktop network address, and sending the intranet access request to the intranet network address through the next hop address; if not, selecting a target client from an intranet gateway group belonging to the same intranet as the client, taking a gateway address corresponding to the target client as a next-hop address of the cloud desktop network address, and sending the intranet access request to the intranet network address through the next-hop address; and the terminal equipment corresponding to each client in the intranet gateway group supports an address forwarding function and a source address conversion function. And the intranet penetration requirement can be realized without a special line and virtual private network equipment.

The invention provides a multi-cluster architecture, a multi-cluster communication method and device, equipment and a medium, and the method comprises the steps: analyzing a cross-cluster call request when a first cluster gateway of a first cluster receives the cross-cluster call request, and determining a target service name corresponding to the cross-cluster call request; according to the target service name, querying a target cluster gateway address corresponding to a target service targeted by the cross-cluster call request; under the condition that the target cluster gateway address corresponding to the target service is not queried, acquiring the target cluster gateway address corresponding to the target service from the registration center, and sending an access request to a second cluster according to the target cluster gateway address; and a second cluster gateway of the second cluster determines a target address of a target node corresponding to the target service based on the access request, and forwards the access request to the target node. According to the invention, during cross-cluster request, the service address of the opposite-end business does not need to be known, and only the service name needs to be known; and a fault-tolerant mechanism is provided.

The invention belongs to the technical field of service gateways, and particularly relates to a multi-gateway fusion architecture system for data sharing, an interface user requests for an available gateway address to a resource management system, the resource management system returns the available gateway address to the interface user, and the interface user performs data sharing according to the obtained gateway address. The resource management system initiates service calling to a corresponding service gateway, the service gateway processes a request and generates a log, the log is transmitted to the log processing system through a message queue cluster, the log processing system performs cleaning, filtering and information merging operation on the received log, and the resource management system is responsible for managing and monitoring the state of the service gateway; the architecture system is provided with a multi-gateway unified authentication specification and a service interface agent specification; the service gateways of a plurality of different manufacturers can be accessed at the same time, and when the gateway of one manufacturer has the problem which cannot be solved, service calling is smoothly switched to the service gateway of the standby manufacturer, so that the capability of the sharing platform for providing services to the outside in a high-concurrency scene is ensured.

The invention provides an eBPF-based multi-vpc container network implementation method and system, and the method comprises the steps: carrying out the basic deployment of a container cluster: carrying out the unified management and control of the network flow of each node in the cluster through the deployment of a perimeter-agent pod, a perimeter-cni plug-in and a perimeter-controller pod, and carrying out the unified management and control of the network flow of each node in the cluster through the deployment of a perimeter-agent pod, a perimeter-cni plug-in and a perimeter-controller pod; and forwarding traffic in the same node, the same VPC and the same Subnet: analyzing quintuple information through an eBPF program and searching a bpf map, so as to ensure that Pods in the same subnet of the same VPC in the same node can efficiently communicate with one another in a low-delay manner. The eBPF-based multi-vpc container network implementation method has the beneficial effects that the container cloud network model and functions are perfected from multiple dimensions aiming at the situation that a current container cloud network model is single and cannot realize a multi-vpc network, on one hand, container network configuration and container cluster initialization decoupling are realized, and on the other hand, the container network configuration and the container cluster initialization decoupling are realized; when a tenant deploys an application, the tenant can flexibly configure a required VPC network as required, such as configuring an address field host number, an address field network number, a gateway address and the like.

The invention discloses a 2.4 G-based RSSI (Received Signal Strength Indicator) positioning data relay transmission device and method, and belongs to the technical field of wireless communication. The device comprises a positioning label, a positioning gateway, a relay gateway and a public network gateway. The positioning tag broadcasts a 2.4 G signal containing the ID of the positioning tag; the positioning gateway scans the 2.4 G signal, and generates and broadcasts a data packet in which a positioning gateway address, a data packet number, a relay level and aggregated data are packaged; a relay gateway is switched to a low-power-consumption mode after initialization through a monitoring-learning-synchronization mechanism, wakes up and receives data in a broadcast time window of an upstream gateway of the relay gateway, updates a relay level and forwards the data to a downstream gateway, and therefore multi-hop relay transmission of the data is achieved. And the public network gateway finally uploads the data to a cloud platform or an upper computer. According to the invention, through data aggregation and time synchronization dormancy, the system power consumption is greatly reduced, and long-distance and long-endurance positioning data transmission of battery power supply in a complex environment is realized.

The embodiment of the invention discloses a data transmission method of an electronic device, the electronic device and a storage medium, the data transmission method can be applied to a first system module, and by interrupting respective independent network configuration processes of two system modules during power-on, a virtual bridging network card in the first system module is used to transmit data to the first system module. Taking over a point-to-point group master network card enumerated by the first system module and a first connection network card connected with the second system module, and configuring a gateway address which is the same as the address of the second system module for the local area network of the assembly, after the wireless connection link is established between the wireless terminal equipment and the first system module, a user can directly select any one system module as a sending target, and the bridging network card processes or forwards the data according to the target address after receiving the data, so that the connection operation of data transmission in a multi-person communication process is simplified; the continuity of information transmission in the multi-person communication process is improved, and the convenience of using the wireless terminal equipment by the user in the interactive tablet environment is also improved.

The present application relates to a method and apparatus for heterogeneous address matching. The method includes: obtaining a first address set of a target geographical area, and constructing a first address graph data structure according to the first address set; obtaining a second address set of the target geographical area, and constructing a second address graph data structure according to the second address set; screening out a plurality of address matching pairs from the first address set and the second address set, labeling each address matching pair to obtain corresponding sample address matching pairs; iteratively training an address matching model using the first address graph data structure, the second address graph data structure, and the plurality of sample address matching pairs to obtain a trained address matching model; processing the first address graph data structure and the second address graph data structure through the trained address matching model, and identifying all address matching pairs in the first address set and the second address set according to the processing results. The present application can more accurately and quickly identify different-source addresses.

The invention provides a cloud desktop access method, a target zero-trust gateway and a cloud desktop access system, and the method comprises the steps: responding to a received access instruction for accessing a plurality of cloud desktop applications, and transmitting the identity information of client equipment to a cloud desktop controller; after a plurality of zero-trust gateway addresses from the cloud desktop controller are received, respectively establishing a plurality of first communication connections between the client device and a plurality of zero-trust gateways; an access request containing corresponding cloud desktop port information is sent to a corresponding zero-trust gateway through any first communication connection, so that the zero-trust gateway establishes second communication connection with an application gateway corresponding to the cloud desktop port information; and accessing the plurality of cloud desktop applications through the plurality of first communication connections and the plurality of second communication connections corresponding to the plurality of first communication connections. According to the embodiment of the invention, the situation that a plurality of cloud desktop applications cannot be accessed due to the failure of a certain component is effectively avoided.

This application provides a packet forwarding method and device. The method involves: determining whether to perform Layer 3 forwarding based on the destination MAC address of the Ethernet packet (which is the gateway MAC address); searching the link layer address mapping table based on the destination IP address of the inner IP packet of the Ethernet packet; obtaining a new destination MAC address from the matching link layer address mapping table entry when a matching entry for the destination IP address is found; searching the MAC address table based on the new destination MAC address; obtaining the outgoing port and outgoing VLAN from the matching entry when a matching entry for the new destination MAC address is found; modifying the destination MAC address, source MAC address, and incoming VLAN of the Ethernet packet to the new MAC address, gateway MAC address, and outgoing VLAN, respectively; and sending the modified Ethernet packet through the outgoing port.

The invention provides an access authentication method, device and system, electronic equipment and a storage medium, and relates to the technical field of communication. Two address pools with the same IP address range and gateway address are configured on the SDN controller, and the two address pools are associated with different VRF information. The SDN controller receives a DHCP relay request message sent by the DHCP relay device, and when an address pool associated with VRF information in the DHCP relay request message is an address pool corresponding to a default VLAN, an IP address is allocated to the terminal from the address pool and the terminal is authenticated; and configuring the access port VLAN of the successfully authenticated terminal as an authorized VLAN, and synchronizing the IP address to an allocation list of an address pool corresponding to the authorized VLAN. Therefore, after the terminal is successfully authenticated, the IP address obtained before authentication is directly used for communication, and communication can be performed without waiting for the terminal to renew the lease or manually triggering the terminal to obtain the IP address again in the authorized VLAN.

The application discloses a networking method and system based on dynamic IPv6 addresses, wherein the system comprises terminal equipment and a VPN gateway, and the terminal equipment accesses a network through the VPN gateway. The dynamic change of the IPv6 address of the VPN gateway (if the public IPv4 address is sufficient, the method is also applicable) can effectively alleviate the network asset exposure surface and reduce the possibility of being attacked by taking advantage of the unlimited nature of the IPv6 address.

The invention discloses a method for accessing a home intranet, an edge access gateway, a system, a medium and a product. The method comprises the following steps: acquiring information of a home terminal obtained by finishing Ethernet point-to-point protocol dialing; an access message sent by the cloud core network equipment is received, and when it is judged that the access message meets a preset condition according to an inner-layer message source IP address in the access message, an inner-layer destination MAC address and a destination IP address in the access message are analyzed to serve as a WAN MAC address and a terminal IP address of a corresponding broadband user; and querying a pre-stored uplink flow forwarding table according to the WAN MAC address and the terminal IP address to obtain a corresponding gateway MAC address and a corresponding terminal MAC address, respectively replacing the source and target MAC addresses of the access message with the gateway MAC address and the terminal MAC address, and then sending the access message to the home terminal. According to the embodiment of the invention, low-cost and high-speed private network accompanying communication can be realized.

The embodiment of the invention discloses a non-intrusive signature encryption video playing method based on a secure decoding library. A specific embodiment of the method comprises the steps of configuring a decoding library supporting a security function in response to a situation that a target video monitoring platform does not support a preset protocol; initializing a decoding library, and transmitting the security gateway address and the target front-end equipment identifier to the decoding library; sending a video playing request to the target video monitoring platform through a transmission protocol of the target video monitoring platform, and receiving a signature encrypted video code stream from the target video monitoring platform; transmitting the signature encrypted video code stream to a decoding library; and based on the decoding library, carrying out adaptive security processing on the signature encrypted video code stream to obtain decoded video data, receiving the decoded video data from the decoding library, and playing the decoded video data. According to the embodiment, for a video monitoring platform of a non-GB35114 standard, the technical effects of reducing video playing delay and gateway load and meeting data security requirements are achieved.

According to embodiments of the present disclosure, an address assignment apparatus, a power distribution cabinet, an address assignment method, and a storage medium are provided. The address assignment apparatus comprises: a gateway configured to generate an address signal that enables address assignment; an address assignment line coupled to the gateway to receive the address signal, the address assignment line is provided with a plurality of switches; a plurality of connection units disposed in series along the address assignment line and each adapted to be connected to a bus device, each of the plurality of switches is located within one of the plurality of connection units, each of the plurality of connection units is further adapted to: couple the address assignment line to the bus device, control an on-off state of a switch located within the connection unit according to a switch control signal from the connected bus device to control a delivery of the address signal to a downstream connection unit. According to the embodiments of the present disclosure, a rapid assignment of addresses of bus devices can be realized, thereby shortening the debugging and maintenance time of a system.

A method for operating a user equipment operating in a visited cellular network for which no roaming agreement exists between a home cellular network of the user equipment and the visited cellular network. The user equipment transmits an access request to the visited cellular network requesting access to the visited cellular network. The access request includes an identifier indicating to originate from a user equipment for which no roaming agreement exists with the home cellular network of the user equipment. The user equipment transmits a session establishment request to the visited network to establish a data packet session in the visited cellular network. The UE determines an address of a gateway providing access to the home cellular network, and establishes a connection to the gateway based on the determined address via the visited cellular network.

The invention provides an edge computing scene-oriented IP address allocation method, device and equipment, and relates to the field of cloud computing, in particular to the technical fields of edge computing, data centers, servers and the like. The method comprises the following steps: a DHCP (Dynamic Host Configuration Protocol) relay device receives a DHCP discovery message sent by an edge server, fills a loopback address and a gateway address of the DHCP relay device into the DHCP discovery message to obtain a processed message, and sends the processed message to an IPAM (Internet Protocol Access Module) server; the IPAM server allocates a target IP address to the edge server according to the gateway address in the processed message, and sends a DHCP providing message containing the target IP address to the DHCP relay device according to the loopback address in the processed message; and the DHCP relay device sends the DHCP providing message to the edge server. According to the invention, accurate positioning of the network topology and intelligent allocation of the dynamic IP addresses can be realized, and the probabilistic failure problem of IP address allocation is avoided.

The embodiment of the invention provides a network management configuration method and device, electronic equipment and a storage medium. The network management configuration method comprises the following steps: acquiring demand parameter information of a to-be-processed private line of a virtual private network; obtaining address pool configuration information of the to-be-processed private line according to the demand parameter information, and generating gateway network protocol IP address configuration information of the to-be-processed private line according to the address pool configuration information; when the to-be-processed special line is a non-center-point special line, based on the address pool configuration information and the gateway IP address configuration information, a packet filtering access control list in the sub-interface incoming direction of the to-be-processed special line is generated, and the packet filtering access control list is used for indicating to prohibit access between non-center-point special lines; and performing network management configuration on a to-be-processed private line according to the address pool configuration information, the gateway IP address configuration information and the packet filtering access control list. According to the embodiment of the invention, communication isolation among all non-center-point special lines can be realized.

The invention discloses a method and a device for flexibly allocating gateway addresses based on a fragmentation technology, and the method comprises the steps: confirming a gateway mask according to the number of required user addresses; partitioning the planning address field by using a gateway mask to obtain a total partition set; reading an occupied address field, and partitioning by using a gateway mask to obtain an occupied partition set; if a certain partition in the occupied partition set falls into the partition set of the planned address field, discarding the partition in the partition set of the planned address field; remaining partitions in the partition set of the planning address field are recorded as an idle partition set, and the partitions with small addresses are preferentially used and stored in the occupation table. According to the method and the device, the IP address resource allocation is more flexible and accurate, the address allocation algorithm is optimized, the address waste is reduced, the utilization rate of the address resource is improved, the service fulfillment efficiency is further improved, the working pressure of network operation and maintenance personnel is reduced, and the operation and maintenance cost is reduced.

This invention provides a mirroring traffic control method and apparatus. The method is applied to gateway devices in a gateway cluster, where the gateway cluster includes multiple gateway devices, each storing a mirroring configuration. The method includes: if the mirroring configuration contains the gateway address of a gateway device, then sending service traffic to a mirroring service node. The mirroring configuration is used to control some gateway devices in the gateway cluster to perform mirroring services. This allows service traffic to be mirrored to a test environment through mirroring configuration without changing the existing network architecture, thus achieving control over the traffic mirroring service.

This invention relates to the field of Internet of Things (IoT) communication technology, and more particularly to a dynamic allocation method, system, device, and medium for IoT gateways. The method includes: constructing a global state information database; when a sensor node needs to connect to an edge computer, the edge computer, based on the global state information database, filters all communication gateways according to a preset candidate set filtering strategy to obtain a set of candidate communication gateways; performing a weighted comprehensive calculation on each communication gateway in the candidate set to obtain an adaptation score for each communication gateway; obtaining a target communication gateway based on the adaptation score of each communication gateway combined with a preset switching mechanism; and the edge computer issuing an instruction containing the address code of the target communication gateway to the sensor node, thereby establishing a connection between the sensor node and the target communication gateway and transmitting data. This invention improves the system's concurrency limit, ensures the quality of data transmission, realizes the transformation from "local optimum" to "global optimum," and exhibits good adaptability.

The application provides a multi-gateway scheduling processing method, device, system, server and storage medium, and relates to the technical field of communication. The method comprises the following steps: acquiring an access request of a client to a capability gateway cluster; if the access mode is a software development kit access, acquiring gateway subscription information of the client, determining a capability gateway address to be connected and permission information according to the application identifier, the capability identifier and the gateway subscription information, sending the capability gateway address to be connected and the permission information to the client, so that the client sends an authentication request to the capability gateway cluster corresponding to the capability gateway address to be connected, and completes the authentication according to the received authentication request response result. The method of the application avoids that all requests pass through a gateway access proxy server to distribute capability gateway addresses and permission information, thereby reducing the connection pressure of the gateway access proxy server and reducing the possibility of collapse of the gateway access proxy server in a high-concurrency scenario.

The invention relates to a vehicle-mounted Ethernet IP address conflict solving method and system based on NAT. The system comprises a network stack module NetworkStack, a network daemon process module netd and a network configuration script module. A network stack module NetworkStack monitors a data packet transmitted by a DHCP protocol in a communication process, acquires IP address information provided by a server to the vehicle machine, and judges whether the IP address information conflicts with the IP address information in the vehicle; communicating with a kernel through a network daemon module netd; the network configuration script module uses a packet filtering firewall tool iptables to convert an IP address and a gateway address, uses an address resolution protocol arp related tool to convert an arp request address, and maps the IP address of a network layer into an MAC address of a data link layer. IP addresses are internally converted in combination with an upper-layer NetworkStack module, a middle-layer netd gateway and a plug-in script of the Android, the IP addresses in the system are changed into new configuration information, and when a message is forwarded to the outside, the configuration information is changed back to an original state, so that conflict with a network address in the system is avoided.

The application discloses a data transmission method and system, and relates to the technical field of computer networks. In the data transmission method, a server sets a default gateway address of a client when the client performs data transmission. When the client performs data transmission, the user does not need to manually configure the default gateway address, and only needs to configure an internet protocol address and a subnet mask, so that the efficiency of manually configuring network information is improved. The server determines a target default gateway address according to the default gateway address of a router and the data flow received by the default gateway address. Since the data flow received by the default gateway address is dynamically changed, the determined target default gateway address is dynamically changeable, the load is prevented from being concentrated on a static gateway address, the network information configuration is more reasonable, the problem of data transmission blockage is reduced, and the transmission efficiency of the network is improved.

The invention discloses a privacy computing network authorization and state management and control method and system based on a node contract, relates to the field of privacy computing, and aims to solve the problems that a decentralized privacy computing collaborative network depends on centralized nodes, state synchronization is inconsistent and authorization management and control are extensive. Through point-to-point interaction of intercommunication gateways of an initiator node and a partner node, node cooperation application and data set authorization configuration are completed, and real-time synchronization and authorization full-life-cycle management of a data set and node information are realized; an initiator node and a partner node locally maintain a cooperative gateway address list based on an interworking gateway, automatic synchronization is achieved through cooperation application, a centralized registration center is not needed, network decentralization, state consistency and authorization refinement are ensured, and the method is suitable for a cross-mechanism privacy computing cooperation scene.

Methods and systems provide secure, real-time software updates over a public network to an isolated security system. A method includes the steps of setting up a network address translation (NAT) data structure for allowing outbound connections only through a first firewall between the isolated security system and the public network, and configuring the isolated security system to identify an internet web gateway address to get a software update from a security system update manager over a predetermined protocol and port. A further step involves configuring a proxy setting in the isolated security system to identify an internet web gateway address of a proxy server in a NAT subnet.

The embodiment of the invention provides an access method, a network access method, a related device, equipment, a medium and a product. The access method is applied to a gateway, and comprises the following steps: writing a preset authentication passing identifier into a gateway MAC address based on a preset rewriting rule under the condition that terminal identity authentication passes, and obtaining a rewritten gateway MAC address; the rewritten gateway MAC address is sent to the terminal, so that the terminal sends an access request to a target network by taking the rewritten gateway MAC address as a target MAC address; and in response to an access request of the terminal to the target network, analyzing the target MAC address carried by the access request according to a preset rewriting rule, and accessing the terminal to the target network under the condition that the preset authentication passing identifier is obtained through analysis. According to the admission method, admission control is carried out based on the target MAC address, only whether the target MAC address contains the preset authentication passing identifier or not needs to be identified, searching and matching of the source MAC address do not need to be carried out, memory is saved, the admission control efficiency is improved, and management and maintenance are simplified.

The embodiment of the application provides a gateway address allocation method, a core network, a user terminal, a medium and a product. The method comprises the following steps: when a protocol data unit session is established by the user terminal, the core network acquires the information of a network segment of a hanging device associated with the user terminal and an Internet protocol address of the user terminal, encapsulates the information of the network segment of the hanging device into a protocol configuration option field, and constructs a protocol data unit session establishment response message according to the protocol configuration option field and the Internet protocol address of the user terminal, wherein the protocol data unit session establishment response message comprises the protocol configuration option field and the Internet protocol address of the user terminal. Then, the protocol data unit session establishment response message is sent to the user terminal, and the user terminal is used for allocating the Internet protocol address of the gateway used by the hanging device according to the protocol data unit session establishment response message. The application does not need a user to manually configure the network segment information to the user terminal, and the intelligent degree and the accuracy of address allocation are improved.

The application discloses a data resource positioning method and system based on identification analysis, relates to the technical field of data communication and resource management, and comprises the following steps: receiving a data resource positioning request, separating a global unique identification in the data resource positioning request into a prefix part and a suffix part; performing main domain analysis according to the prefix part; performing resource analysis according to the suffix part; the resource analysis sends the suffix part to a digital object warehouse gateway address; a gateway corresponding to the digital object warehouse gateway address searches and returns a target data resource from a corresponding digital object warehouse according to the suffix part, and verifies access authority at the same time. Through the hierarchical processing mechanism of the main domain analysis and the resource analysis, the application solves the technical problem of accurate positioning of massive heterogeneous data resources, adopts the technical means of prefix hierarchical query and suffix accurate matching, realizes unified management and efficient access of data resources, improves data sharing and exchange efficiency, and guarantees the safety of data access.

One aspect of the invention relates to a high-performance computer comprising a plurality of clusters (21, 22) by an IP network (2), each cluster (21, 22) comprising:At least one Ethernet gateway (215, 225) configured to transmit data between the cluster (21, 22) and the IP network (2) storing at least one first routing table comprising at least, for each other cluster of the plurality of clusters (21, 22), an association of a gateway address (215, 225) with a destination IP address comprised in the cluster (21, 22) comprising the gateway (215, 225).A plurality of computing and / or storage nodes (N, 211, 212, 221, 222), each node (N, 211, 212, 221, 222):being configured to run at least one instance of a high-performance computing and / or storage application,comprising at least one network card (NIC1) implementing an Ethernet-based high-performance interconnection protocol and being configured to implement an address resolution protocol, the network card (NIC1) storing at least one second routing table comprising at least, for each other cluster of the plurality of clusters (21, 22), an association of an address of a gateway (215) of the first cluster (21) with the identifier of the other cluster (22) accessible from the gateway (215) of the first cluster (21).storing at least one third routing table comprising at least, for each other cluster of the plurality of clusters (21, 22), an association of an identifier of an application instance with an identifier of the cluster comprising the node (N, 211, 212, 221, 222) running the application instance, with a unique network identifier of the application instance, and with an IP address of the network card (NIC1) of the node (N, 211, 212, 221, 222) running the application instance.At least one intra-cluster interconnection switch (214, 224) configured to connect each node (N, 211, 212, 221, 222) and the gateway (215, 225).