155 results about "Reverse proxy" patented technology

The invention relates to the technical field of operation and maintenance management and control, and discloses an intelligent building remote operation and maintenance management and control system based on a large model and a cloud edge collaborative architecture, and the system comprises a configuration subsystem which is used for carrying out the reverse proxy and persistent connection configuration of edge gateway equipment in an intelligent building, and obtaining a TLS encryption bidirectional communication channel; the construction subsystem is used for constructing a cloud-edge-end three-layer cooperative computing architecture; the conversion subsystem is used for performing unified semantic abstraction and conversion on the heterogeneous protocol data to obtain semantic data in a standard JSON (JavaScript Object Notation) format; the rule processing subsystem is used for performing rule processing through a near-end decision engine of the edge gateway to obtain a local intelligent response result; the multi-dimensional analysis subsystem is used for carrying out multi-dimensional analysis through a cloud large model engine to obtain an equipment health score, a fault prediction result and an energy optimization strategy, seamless fusion and interoperation of heterogeneous system data are achieved through the system, and then global optimization and linkage control of the intelligent building are achieved.

The invention discloses a method and a system for realizing remote ADB debugging of Android equipment based on Frpc, and belongs to the technical field of remote debugging of mobile equipment. Aiming at the problems of complex configuration, low security, poor network penetration capability and the like of a traditional scheme, a system architecture including dynamic configuration management, bidirectional security authentication and intelligent tunnel maintenance is constructed by embedding an Frpc client in an equipment end. An encryption tunnel is established between an equipment end and a server end through TLS1.3, ADB flow reverse proxy transmission is achieved, configuration safety is guaranteed by adopting a dynamic token and HMAC-SHA256 encryption, and hot loading update and certificate two-way verification are supported; and an exponential backoff reconnection strategy is designed, and the network outage recovery capability is improved. According to the scheme, the configuration complexity is reduced by 83% in a public network environment, the connection speed is increased by 5 times, the data leakage risk is reduced by 97%, seamless debugging across NAT networks is supported, and a safe and efficient solution is provided for remote maintenance of Internet of Things equipment and intelligent terminals.

System, methods, apparatuses, and computer program products are disclosed for injecting custom information for a server while establishing end-to-end secure communications with a client via a tunneling service. A reverse proxy receives, from a client over a first transport-layer connection, a request that includes an identifier associated with an on-premises resource. The reverse proxy determines, based on the identifier, that an error prevents forwarding of the client request to the on-premises resource. In response, the reverse proxy transmits, to an error handling service (EHS) over a second transport-layer connection, a new application-layer request comprising error handling information to enable the EHS to establish, via the reverse proxy, a secure communications channel with the client using the existing first transport-layer connection and the second transport-layer connection. The reverse proxy proxies, from the EHS and to the client, an encrypted response containing an error message.

The invention discloses a method for realizing user authentication and nailing notification of a graph database document site, which belongs to the technical field of computer security, and comprises the following steps of: integrating an Oauth2 authentication module into a reverse proxy server, and docking with an identity authentication service; the external request for accessing the graph database document site is redirected to the identity authentication service for user authentication; after the user authentication is passed, the Oauth2 authentication module executes authentication operation; the identity authentication service captures a user registration event in real time, and when the registration event is monitored, user information corresponding to the registration event is extracted; filling a preset notification template according to the user information to obtain a notification message, and pushing the notification message to a management terminal through a configurable message notification interface; and the reverse proxy server dynamically controls the access authority of the user to the content of the graph database document site based on the authentication result. According to the application, user authentication can be carried out on the graph database document site, and meanwhile, an administrator can be notified of a user registration event through the nailing robot Webhook.

Aspects of the subject disclosure may include, for example, deploying a reverse proxy server in front of a first type of web servers and a second type of web servers, where the first type of web servers is compliant with a current version of payment card industry data security standard (PCI DSS) and supports a first version of a transport layer security (TLS) protocol, and where the second type of web servers supports one or more TLS protocols that are older than the first version of TLS protocol, detecting, using the reverse proxy server, a TLS protocol version used in an incoming request, and determining, using the reverse proxy server, routing of the incoming request to one of the first type of web servers and the second type of web servers at least based on the detected TLS protocol version. Other embodiments are disclosed.

The invention discloses an electric power forward gatekeeper reverse penetration method and device, a server, a medium and a product. The method comprises the following steps: splitting target unit data of a production control region into a plurality of byte segments when allowed, and generating a corresponding redundant code for each byte segment; creating a first user-defined header field for each byte segment, and correspondingly creating a second user-defined header field for each redundant code; encoding the byte segments and the redundant codes by using a preset encoding mode, putting the encoded byte segment data into a corresponding first user-defined header field, and putting the encoded redundant code data into a corresponding second user-defined header field, and constructing an HTTP request corresponding to each byte segment, and reversely transmitting the HTTP request to the management information large area proxy service through the forward gatekeeper. Therefore, the sequence and the integrity of the data packets can be ensured, the security risk introduced through a third-party proxy is reduced, meanwhile, a reverse proxy server does not need to be configured and managed, the intermediate links of data transmission are reduced, and the delay is reduced.

The invention relates to a domain name security test method and device, computer equipment, a computer readable storage medium and a computer program product. The method comprises the steps of obtaining a domain name information set of a to-be-checked object; analyzing each piece of domain name information in the domain name information set to obtain a candidate address set, and determining unanalyzed domain names; performing port detection on each address identifier in the candidate address set to obtain a port detection result; according to a port detection result, screening a target address port pair, and determining whether the target address port pair has a reverse proxy attribute; according to the access priority, an access request containing an unresolved domain name is sent to each target address port pair in sequence, and the target address port pair with the reverse proxy attribute has a higher access priority; if effective response information from the target address port pair is received, hidden domain name risk information is obtained according to the unresolved domain name and the target address port pair; the hidden domain name risk information is used for domain name security repair. By adopting the method, the comprehensiveness of network security protection can be improved.

The invention relates to the technical field of containers and micro-service architecture, and discloses a K8s-based Juser Notebook container arrangement method, which comprises the following steps of: S1, packaging Notebook into a Docker mirror image file; s2, mounting a Notebook configuration file on the K8s cluster through a ConfigMap (Configuration Map); s3, deploying and defining the number of copies of the Notebook application through Deployment; S4, configuring a service network and an ingress network; S3, deploying and defining the number of copies of the Notebook application through Deployment; s5, a cloud storage mode is adopted, and calculation and storage are separated; and S6, K8s API automatic management is carried out. The deployment process is simplified, the maintenance and management difficulty is reduced, and the resource utilization rate is improved; a cloud storage mode is adopted, separation of calculation and storage is achieved, and environment configuration is simplified; the Ingress provides network functions such as flow management and reverse proxy, so that the Notebook service is easier to access and integrate; the K8s cluster can ensure the high availability of the Notebook service; and when a fault occurs, quick recovery is realized, service interruption time is reduced, monitoring and management are easy, and management and operation and maintenance efficiency is improved.

The invention provides an SaaS tenant customized service method, and relates to the technical field of software as a service system architecture.The method comprises the steps that an independent database or table space is generated through a tenant identifier, configuration parameters are converted into JSON metadata in combination with a graphical tool and stored, and lightweight customization is achieved; according to the deep customization request, an independent server or container instance is distributed for a tenant, personalized codes are deployed, and the personalized codes and standard codes are separated for running through a dynamic loading mechanism; generating a unique second-level domain name based on the tenant identifier, and routing the request to a corresponding service node through DNS analysis and reverse proxy; and the standard tenants are supported to migrate to the customized tenants, configuration and service data are synchronized to a target instance, domain name resolution and proxy configuration are updated, and seamless switching of service paths is realized.

Network systems integration and method inspect network traffic to enable secure access to internal and Internet websites from managed mobile devices. The integrated networks system implements a secure split tunneling to allow users of mobile devices managed by an organization Mobile Device Management system to securely browse only safe websites on the Internet or on an intranet resource of the organization. The system includes an internal firewall, a reception firewall, internal and external web application firewalls, a reverse proxy, an Internet proxy, and an enterprise mobility management system having a VPN-Tunnel system to implement the secure split tunneling method.

The invention relates to a video quality detection method and system, an electronic device and a storage medium, and is used for a reverse proxy server, the reverse proxy server is deployed at a cloud, and the method comprises the following steps: obtaining camera identification information reported by a proxy client; when a real-time streaming transmission protocol request containing a virtual real-time streaming transmission protocol port initiated by the PC client is received, forwarding the request to a corresponding proxy client according to camera identification information corresponding to the virtual real-time streaming transmission protocol port; the virtual real-time stream transmission protocol port establishes a mapping relationship with the camera identification information in advance; receiving video data uploaded by the proxy client; the video data is locally acquired by the proxy client from the camera according to the forwarding request; and encapsulating the video data into a standard real-time stream transmission protocol response, and returning the real-time stream transmission protocol response to the PC client for video quality detection. A communication link can be established for video transmission, the process is simplified, and the video quality detection efficiency is improved.

A method and system of masking, redacting, filtering, and encrypting data retrieved from or stored into a database using policies in an information management system. The system comprises application, data protection, and database components. A data protection component is placed between an application component and a database component to provide protection to data in a database by applying data access policies to requests sent from the application component to the database component.

A method and system for securely routing traffic in a computing environment via a firewall, the method including configuring a reverse proxy server via a first configuration file and configuring a DNS server via a second configuration file, and routing traffic via the reverse proxy server by looking up addresses in the DNS server. The first configuration file includes a plurality of target IP addresses, each of the plurality of target IP addresses referencing a DNS record in the DNS server and the second configuration file includes a plurality of DNS records, where each of the DNS records is initially set to point to a default IP address. When it is determined that there is a change to an IP address of a resource in the computing environment, the DNS record associated with the resource in the DNS server is automatically updated via an API call to the DNS server by replacing the default IP address with the updated IP address for the resource. The reverse proxy servers refers to the updated DNS record to route traffic to the resource.

The application provides a kind of vehicle terminal remote debugging system and method, belong to the field of automobile control. Among them, network connection platform sends start instruction to vehicle terminal module;Vehicle terminal module verifies whether start instruction is legal, if yes, then start reverse proxy client and reverse proxy registration to reverse proxy service end in intranet penetration module, to obtain IP information and reverse proxy registration result;Vehicle terminal module returns response information to network connection platform via message communication hub;Network connection platform verifies the authenticity of response information based on preset password book, to determine whether vehicle terminal module is ready, if yes, then establish remote debugging channel with vehicle terminal module via intranet penetration module and message communication hub, to send debugging instruction to vehicle terminal module. The application can improve the efficiency of debugging, improve the level of security protection and break through the isolation barrier of intranet and public network of vehicle terminal equipment, to realize the effect of remote debugging of vehicle terminal equipment.

The embodiment of the invention discloses a cloud native seven-layer traffic intelligent gateway system and method based on a multi-tenant architecture. The cloud native seven-layer flow intelligent gateway system based on the multi-tenant architecture comprises a core service processing component and a support system, and the core service processing component comprises a connection management unit, a request analysis unit, a routing lookup unit, a conditional expression engine unit, a load balancing unit and a reverse proxy unit. The support system comprises a configuration management unit, a monitoring probe unit and a plug-in framework unit. Through the implementation of the method and the device, the problems that the comprehensive requirements of multi-tenant isolation, multi-protocol compatibility, edge intelligent processing, configuration lossless dynamic updating and low-cost expansion cannot be met at the same time in related technologies, and the service diversity and reliability requirements under the scene of fusion of the artificial intelligence Internet of Things and the cloud native are difficult to adapt are solved.

The application relates to the technical field of information system security, and particularly discloses an intelligent password service platform, which comprises a service gateway, a synchronization module, a general server, a reverse proxy server and a plurality of password devices; the synchronization module is used for synchronizing key resources of password devices of the same type after the password devices access a network; the general server is provided with a virtual module and a load balancing module; the load balancing module is used for connecting the password devices after the key resources are synchronized; the virtual module is used for virtually changing physical resources of secret devices into resource clouds of different types through a virtualization technology; the service gateway is used for obtaining a calling application of a third-party application service interface; the service gateway is also used for analyzing the calling application and determining service requests facing different resource clouds according to the analyzed results. The technical scheme of the application has high expansibility, can be flexibly networked, is convenient for reusing and does not waste existing resources.

The present invention discloses a deception defense device and method for seamlessly migrating website backdoors. The deception defense device deploys a website backdoor detection module on a user's real business server. The website backdoor detection module detects website backdoor files by monitoring changes in the business server's website directory files; a file ferry module transfers the website backdoor files to a honeypot environment and runs them, obtaining the website backdoor address running in the honeypot; a file rewriting module rewrites the website backdoor file without modifying the file path and file name, only rewriting the file content to the reverse proxy file content. In the reverse proxy file content, the reverse proxy destination address points to the website backdoor address running in the honeypot; malicious instructions and interactive operations issued by attackers to the website backdoor can be monitored in the virtual honeypot module. The present invention greatly enhances the integration of deception defense technology with real business and improves the ability of the honeypot network to actively trap attackers' actions.

The embodiment of the invention provides a server access method, a routing rule configuration method, a service code generation method, equipment, a storage medium and a program product. In the embodiment of the invention, terminal equipment scans a service code to obtain link information, and the link information comprises server identification information bound with the service code and a configuration indicator; the terminal equipment sends a routing configuration request, and the routing configuration request is forwarded to the configuration node through the reverse proxy node under the indication of the configuration indicator; and the configuration node configures a corresponding routing rule for the reverse proxy node according to the identification code of the terminal device and the identification information of the server bound with the service code, so that the reverse proxy node routes a service access request from the terminal device to the server bound with the service code based on the configured routing rule. Therefore, the routing rule is configured for the access of the code-scanned link information, the tedious operation of frequent manual configuration of testers is reduced, the operation is simple, the configuration efficiency is improved, and the test efficiency is further improved.

The invention discloses a novel cross-physical cluster visualization method, and relates to the field of high-performance computing, and the method comprises the steps: S1, enabling a local cluster management node to be in communication connection with a remote cluster management node through an independent network line; s2, initiating a visual job application at a local end; s3, the remote cluster management node allocates nodes after receiving the application, and a visualization function module executes visualization operation; s4, the protocol forwarding module converts a graphic access protocol used by the operation into a protocol suitable for browser access; and S5, integrating the job information by the local cluster, generating a link, opening the link, and accessing the visual job by using a browser. According to the novel cross-physical cluster visualization method provided by the invention, visual operation graphic display is realized through a graphic processing tool of a remote cluster computing node, a remote cluster management node converts a graphic access protocol into a browser applicable protocol, and a user can conveniently access through a browser through reverse proxy.

The invention provides a scaling method, device and equipment for a cloud server of a browser and a medium, and the method comprises the steps: setting a first number of cloud servers, and configuring the IP and the port of the cloud server to a configuration file of an NGINX server for the NGINX server to carry out reverse proxy; a triggering condition of capacity expansion or capacity shrinkage is configured in the elastic scaling service, and when the triggering condition of capacity expansion or capacity shrinkage is met, the elastic scaling service sends a capacity expansion event or a capacity shrinkage event to a message queue service; when the message queue service receives a capacity expansion event, the message queue service triggers the function calculation service, and the function calculation service realizes capacity expansion; when the message queue service receives the capacity reduction event, the message queue service triggers the function calculation service and the function calculation service, capacity reduction is achieved, and the cost of an enterprise is greatly reduced.

The invention discloses a Spring boot-based honeypot countering method, device and equipment and a storage medium, and relates to the technical field of network security, and the method comprises the steps: when a preset reverse proxy server receives an access request issued by an attacker, matching the access request with an attack routing rule, if the matching succeeds, issuing the access request to a honeypot, and if the matching succeeds, sending the access request to the honeypot; the honeypot sends a simulation information page determined based on the access request to an equipment interface of the attacker; when an attacker accesses the simulation information page, determining a honeypot guidance strategy based on an attack behavior of the attacker, and introducing the attacker into a honeypot network comprising a plurality of simulation service nodes by using the honeypot guidance strategy; and after an attacker accesses the simulation service node, recording an attacker portrait including a real network address of the attacker and access behavior data, and performing behavior countering based on the attacker portrait by using a countering strategy in the simulation service node. Therefore, the honeypot preparation efficiency can be improved.

A request processing method, executed by a load balancing node in a request processing system, wherein the request processing system comprises a reverse proxy node, a virtual proxy node, and the load balancing node, and request forwarding is performed between the reverse proxy node and the virtual proxy node by means of a plurality of socket nodes. The method comprises: upon receipt of a plurality of traffic requests by the reverse proxy node, determining, from among the plurality of socket nodes, socket nodes available for processing (302); for each socket node available for processing, determining, from the virtual proxy node, a processing instance having a binding relationship with the socket node available for processing, so as to obtain a plurality of processing instances (304); determining, from among the plurality of processing instances, selected processing instances matching socket nodes available for processing (306); and on the basis of multiple pieces of instance running information respectively corresponding to the selected processing instances, respectively distributing the plurality of traffic requests to the selected processing instances, so that the selected processing instances process the distributed traffic requests (308).

The present application provides a cross-network multi-cluster system, an access method thereof, and a cloud computing device. The method for accessing the cross-network multi-cluster system is used for a multi-cluster system including a central cluster and a working cluster. The central cluster includes a proxy server, and the working cluster includes proxy clients. The method includes: the proxy client sends a control plane connectivity tunnel request to the central cluster, so as to establish a long connection control plane tunnel between the proxy client and the proxy server; the proxy client establishes a long connection reverse proxy tunnel with the proxy server through the long connection control plane tunnel; the proxy client receives and processes an API request that traverses the long connection reverse proxy tunnel and is forwarded by the proxy server. According to the technical solution of the embodiment, transparent and secure cross-network API calls can be realized.

A computer system is provided that allows participants to submit agent data structures for processing. Each agent data structure includes a valuation function for a first resource and a property of a second resource. The computer system performs a dual sided evaluation process to determine when contra-sided agents match with one another. A match is determined by comparing results of valuation functions of the agent data structures.

The application discloses a multi-format electronic archive intelligent preview method and device and equipment. The method comprises the following steps: obtaining a file URL and a permission control parameter; optimizing Nginx load balancing and distributing Nginx reverse proxy based on the file URL and the permission control parameter; performing format conversion on the electronic archive based on the Nginx reverse proxy; and previewing and inserting a watermark based on the format conversion result. The application pre-generates a same-name file of each file in a file system, which reserves the original content of the file. When a user needs to preview and view the file in the file system, the corresponding same-name file is obtained, so that it is not necessary to consider whether the client can directly identify the file format of the file to be previewed, and the format conversion time consumption caused by the fact that the file format cannot be directly identified after receiving a preview instruction is avoided.

The invention discloses an Internet of Things communication method, device and system and a medium, and relates to the technical field of Internet of Things, and the method comprises the steps: verifying a license key carried by an encryption authentication development kit; the encryption authentication development kit is integrated on an energy internet of things platform, or independently runs and is communicated and coupled with the platform; after the verification succeeds, determining a target port applied by the encryption authentication development kit according to a pre-configured port mapping relationship; when the Internet of Things equipment is connected with the target port, handshake authentication with the encryption authentication development kit is carried out; after the handshake authentication succeeds, a data request of the Internet of Things equipment is received, and the data request is sent to the encryption authentication development kit, so that the encryption authentication development kit obtains reply data of the platform and forwards the reply data to the server; and receiving the reply data, and sending the reply data to the Internet of Things equipment. According to the encryption authentication mechanism based on the reverse proxy mode, the generalization ability of the platform is improved, the access cost is reduced, and the security is ensured.

The invention aims to provide a data packet forwarding method and device based on reverse proxy, and the method comprises the steps: firstly, screening out a configured data packet which needs to be subjected to reverse proxy through a reverse proxy station table for a received data packet, and then querying a corresponding connection state in a connection tracking table; and according to a query result, sending the data packet to the corresponding child nodes for processing respectively. And the sub-node delivers the data packet to a kernel to execute deep detection of the data packet according to a security detection strategy, returns the data packet after the detection is passed, executes corresponding IP and port mapping according to preset reverse proxy configuration information, and forwards the data packet to a corresponding site for response.

The invention is suitable for the technical field of digital watermarking, and provides an embeddable real-time watermark superposition system and method, and the system comprises a front-end display layer, a reverse proxy layer, a WSGI encapsulation layer, a task scheduling module, a business processing service module, a data persistence layer, a message queue and an asynchronous processor. The business processing service module comprises an image batch watermarking subsystem and a video stream watermarking subsystem; the image batch watermarking subsystem is used for realizing batch watermarking processing of static images based on Pillow + SVG (Scalable Vector Graphics); the video stream watermark subsystem processes RTSP streams in real time based on FFmpeg and dynamically embeds watermarks, not only supports batch watermark processing of static images and videos, but also breaks the limitation of a traditional processing mode, realizes watermark superposition of real-time video streams, has complete operation capabilities of task management, query, cleaning and the like at the same time, and is high in practicability and high in practicability. And the method has high expandability and cross-platform deployment capability, and adapts to multi-scene actual requirements.

This application provides an IP address pass-through method, apparatus, electronic device, and storage medium, comprising: modifying the configuration parameters of a load balancing hardware device, a reverse proxy server, and a server based on a configuration parameter change instruction adapted for IP address pass-through, to obtain the load balancing hardware device, reverse proxy server, and server after the configuration parameters have been modified; receiving an access request from a client, the client's IP address, and the IP address of the load balancing hardware device after the configuration parameters have been modified, sent by the load balancing hardware device after the configuration parameters have been modified, and pass-through the access request, the client's IP address, the IP address of the load balancing hardware device after the configuration parameters have been modified, and the IP address of the reverse proxy server after the configuration parameters have been modified, to the server, thereby enabling the server to more conveniently view the real IP address of the accessing client and improving the efficiency of real IP address pass-through.

Dynamic session headers for a computing session via a remote dictionary are provided. A system establishes a session responsive to receiving a first request from a browser, the session authenticated using a cookie configured to access a first electronic record. The system stores data corresponding to the session in a remote dictionary server. The system identifies a second request to modify the session to access a second electronic record and accesses, using the cookie, the data corresponding to the session from the remote dictionary server. The system receives, using a reverse proxy technique, data to update the session. The system modifies the session by storing the second identifier in the remote dictionary server and provides the browser with access to the second electronic record via the session.