220 results about "Reverse proxy" patented technology

The invention relates to the technical field of operation and maintenance management and control, and discloses an intelligent building remote operation and maintenance management and control system based on a large model and a cloud edge collaborative architecture, and the system comprises a configuration subsystem which is used for carrying out the reverse proxy and persistent connection configuration of edge gateway equipment in an intelligent building, and obtaining a TLS encryption bidirectional communication channel; the construction subsystem is used for constructing a cloud-edge-end three-layer cooperative computing architecture; the conversion subsystem is used for performing unified semantic abstraction and conversion on the heterogeneous protocol data to obtain semantic data in a standard JSON (JavaScript Object Notation) format; the rule processing subsystem is used for performing rule processing through a near-end decision engine of the edge gateway to obtain a local intelligent response result; the multi-dimensional analysis subsystem is used for carrying out multi-dimensional analysis through a cloud large model engine to obtain an equipment health score, a fault prediction result and an energy optimization strategy, seamless fusion and interoperation of heterogeneous system data are achieved through the system, and then global optimization and linkage control of the intelligent building are achieved.

The invention discloses a method and a system for realizing remote ADB debugging of Android equipment based on Frpc, and belongs to the technical field of remote debugging of mobile equipment. Aiming at the problems of complex configuration, low security, poor network penetration capability and the like of a traditional scheme, a system architecture including dynamic configuration management, bidirectional security authentication and intelligent tunnel maintenance is constructed by embedding an Frpc client in an equipment end. An encryption tunnel is established between an equipment end and a server end through TLS1.3, ADB flow reverse proxy transmission is achieved, configuration safety is guaranteed by adopting a dynamic token and HMAC-SHA256 encryption, and hot loading update and certificate two-way verification are supported; and an exponential backoff reconnection strategy is designed, and the network outage recovery capability is improved. According to the scheme, the configuration complexity is reduced by 83% in a public network environment, the connection speed is increased by 5 times, the data leakage risk is reduced by 97%, seamless debugging across NAT networks is supported, and a safe and efficient solution is provided for remote maintenance of Internet of Things equipment and intelligent terminals.

Methods are provided for a proxy infrastructure that serves as a bridge between an enterprise network and a computing machine of a user ensuring a chain of trust. The methods involve obtaining, from a client device, a request to navigate to one or more target devices of a remote enterprise network and locally authenticating the client device based on at least one of an identity of the client device and user credentials. The methods further involve generating a connection request for the client device to navigate to the one or more target devices based on the client device being locally authenticated and providing the connection request to a proxy service executing in the remote enterprise network. The proxy service authenticates an access to the one or more target devices based on device credentials while hiding the device credentials from the client device.

System, methods, apparatuses, and computer program products are disclosed for injecting custom information for a server while establishing end-to-end secure communications with a client via a tunneling service. A reverse proxy receives, from a client over a first transport-layer connection, a request that includes an identifier associated with an on-premises resource. The reverse proxy determines, based on the identifier, that an error prevents forwarding of the client request to the on-premises resource. In response, the reverse proxy transmits, to an error handling service (EHS) over a second transport-layer connection, a new application-layer request comprising error handling information to enable the EHS to establish, via the reverse proxy, a secure communications channel with the client using the existing first transport-layer connection and the second transport-layer connection. The reverse proxy proxies, from the EHS and to the client, an encrypted response containing an error message.

Disclosed is a cloud-based security system implemented in a reverse proxy that provides bidirectional traffic inspection to protect against privacy and security concerns related to the GenAI services. The security system intercepts requests directed to the GenAI service protected by the reverse proxy implementation of the network security system. The security system includes a GenAI request classifier trained to classify prompts submitted to the GenAI application as one of benign, prompt injection attack, or uploaded files. The security system further includes a GenAI response classifier trained to classify responses from the GenAI application as one of normal, leaked system prompt, leaked user uploaded files, or leaked training data. Based on the classification, and optionally other security analysis, the security system may enforce security policies on both the requests and responses that block the traffic, trigger alerts to administrators, and the like to enforce security and privacy protection on bidirectional traffic.

The invention discloses a method for realizing user authentication and nailing notification of a graph database document site, which belongs to the technical field of computer security, and comprises the following steps of: integrating an Oauth2 authentication module into a reverse proxy server, and docking with an identity authentication service; the external request for accessing the graph database document site is redirected to the identity authentication service for user authentication; after the user authentication is passed, the Oauth2 authentication module executes authentication operation; the identity authentication service captures a user registration event in real time, and when the registration event is monitored, user information corresponding to the registration event is extracted; filling a preset notification template according to the user information to obtain a notification message, and pushing the notification message to a management terminal through a configurable message notification interface; and the reverse proxy server dynamically controls the access authority of the user to the content of the graph database document site based on the authentication result. According to the application, user authentication can be carried out on the graph database document site, and meanwhile, an administrator can be notified of a user registration event through the nailing robot Webhook.

The embodiment of the invention provides a web application access proxy method and device in a heterogeneous network environment, and the method comprises the steps: carrying out the identity authentication of a client based on an access request when the access request sent by the client is monitored, and carrying out the access control and content filtering of the access request after the identity authentication is passed; the reverse proxy service is used for dynamically converting the IP address in the access request and then forwarding the IP address to the target server; and receiving a request result returned by the reverse proxy service, and forwarding the request result to the client.

The invention discloses a multi-level cache-based data acquisition method and device, equipment and a storage medium, and relates to the technical field of big data, the method comprises the following steps: after a data acquisition request is received, determining a data type and a data identifier of to-be-acquired data by analyzing the data acquisition request; when the data type is static data, acquiring target data corresponding to the data acquisition request in a first cache module; when the data type is dynamic data, target data corresponding to the data obtaining request is obtained in a multi-level cache system, and the multi-level cache system is composed of a second cache module, a local cache and a backup cache. According to the technical scheme, the acquisition speed of the static data and the dynamic data is increased, and the static data and part of the dynamic data are acquired only in the reverse proxy servers corresponding to the first cache module and the second cache module, so that the access pressure of a back-end server is reduced, and the access efficiency and the access stability are improved.

The invention relates to a method for realizing cross-local area network edge device connection by using SSH reverse proxy, which comprises the following steps of: S1, deploying an interface service in a public network server, and modifying an ssh configuration file in the public network server; s2, deploying a daemon process in the edge device in the local area network to enable the SSH reverse proxy connection of the edge device to be successful; and S3, the edge device in the local area network receives the reverse proxy command through the public network server and then executes the reverse proxy command, so that the public service network accesses the edge device through the SSH. A server is requested through the edge device to obtain a reverse proxy command, a to-be-executed command is obtained through a heartbeat interface, and the edge device executes the command, so that the local area network device randomly uses a certain port of the cloud service, and reverse proxy is realized when remote control is needed.

Aspects of the subject disclosure may include, for example, deploying a reverse proxy server in front of a first type of web servers and a second type of web servers, where the first type of web servers is compliant with a current version of payment card industry data security standard (PCI DSS) and supports a first version of a transport layer security (TLS) protocol, and where the second type of web servers supports one or more TLS protocols that are older than the first version of TLS protocol, detecting, using the reverse proxy server, a TLS protocol version used in an incoming request, and determining, using the reverse proxy server, routing of the incoming request to one of the first type of web servers and the second type of web servers at least based on the detected TLS protocol version. Other embodiments are disclosed.

The invention discloses an electric power forward gatekeeper reverse penetration method and device, a server, a medium and a product. The method comprises the following steps: splitting target unit data of a production control region into a plurality of byte segments when allowed, and generating a corresponding redundant code for each byte segment; creating a first user-defined header field for each byte segment, and correspondingly creating a second user-defined header field for each redundant code; encoding the byte segments and the redundant codes by using a preset encoding mode, putting the encoded byte segment data into a corresponding first user-defined header field, and putting the encoded redundant code data into a corresponding second user-defined header field, and constructing an HTTP request corresponding to each byte segment, and reversely transmitting the HTTP request to the management information large area proxy service through the forward gatekeeper. Therefore, the sequence and the integrity of the data packets can be ensured, the security risk introduced through a third-party proxy is reduced, meanwhile, a reverse proxy server does not need to be configured and managed, the intermediate links of data transmission are reduced, and the delay is reduced.

The invention relates to a domain name security test method and device, computer equipment, a computer readable storage medium and a computer program product. The method comprises the steps of obtaining a domain name information set of a to-be-checked object; analyzing each piece of domain name information in the domain name information set to obtain a candidate address set, and determining unanalyzed domain names; performing port detection on each address identifier in the candidate address set to obtain a port detection result; according to a port detection result, screening a target address port pair, and determining whether the target address port pair has a reverse proxy attribute; according to the access priority, an access request containing an unresolved domain name is sent to each target address port pair in sequence, and the target address port pair with the reverse proxy attribute has a higher access priority; if effective response information from the target address port pair is received, hidden domain name risk information is obtained according to the unresolved domain name and the target address port pair; the hidden domain name risk information is used for domain name security repair. By adopting the method, the comprehensiveness of network security protection can be improved.

The invention relates to the technical field of containers and micro-service architecture, and discloses a K8s-based Juser Notebook container arrangement method, which comprises the following steps of: S1, packaging Notebook into a Docker mirror image file; s2, mounting a Notebook configuration file on the K8s cluster through a ConfigMap (Configuration Map); s3, deploying and defining the number of copies of the Notebook application through Deployment; S4, configuring a service network and an ingress network; S3, deploying and defining the number of copies of the Notebook application through Deployment; s5, a cloud storage mode is adopted, and calculation and storage are separated; and S6, K8s API automatic management is carried out. The deployment process is simplified, the maintenance and management difficulty is reduced, and the resource utilization rate is improved; a cloud storage mode is adopted, separation of calculation and storage is achieved, and environment configuration is simplified; the Ingress provides network functions such as flow management and reverse proxy, so that the Notebook service is easier to access and integrate; the K8s cluster can ensure the high availability of the Notebook service; and when a fault occurs, quick recovery is realized, service interruption time is reduced, monitoring and management are easy, and management and operation and maintenance efficiency is improved.

The present invention relates to the field of intelligent vehicle technology, and provides a vehicle terminal access method, device and system, the method comprising: receiving an access request corresponding to a target client, allocating a corresponding dynamic port for the current access request; sending the dynamic port to the target client, and instructing the target client to establish a first data channel between the target client and a reverse proxy server; sending the dynamic port to a target vehicle terminal through a target control channel, and instructing the target vehicle terminal to establish a second data channel between the reverse proxy server and the target vehicle terminal; based on the first data channel, receiving an external network request sent by the target client; based on the second data channel, sending the external network request to a target service associated with the external network request in the target vehicle terminal. The present invention can improve the security of communication and ensure the stability of system operation.

The invention provides an SaaS tenant customized service method, and relates to the technical field of software as a service system architecture.The method comprises the steps that an independent database or table space is generated through a tenant identifier, configuration parameters are converted into JSON metadata in combination with a graphical tool and stored, and lightweight customization is achieved; according to the deep customization request, an independent server or container instance is distributed for a tenant, personalized codes are deployed, and the personalized codes and standard codes are separated for running through a dynamic loading mechanism; generating a unique second-level domain name based on the tenant identifier, and routing the request to a corresponding service node through DNS analysis and reverse proxy; and the standard tenants are supported to migrate to the customized tenants, configuration and service data are synchronized to a target instance, domain name resolution and proxy configuration are updated, and seamless switching of service paths is realized.

Network systems integration and method inspect network traffic to enable secure access to internal and Internet websites from managed mobile devices. The integrated networks system implements a secure split tunneling to allow users of mobile devices managed by an organization Mobile Device Management system to securely browse only safe websites on the Internet or on an intranet resource of the organization. The system includes an internal firewall, a reception firewall, internal and external web application firewalls, a reverse proxy, an Internet proxy, and an enterprise mobility management system having a VPN-Tunnel system to implement the secure split tunneling method.

The invention relates to a video quality detection method and system, an electronic device and a storage medium, and is used for a reverse proxy server, the reverse proxy server is deployed at a cloud, and the method comprises the following steps: obtaining camera identification information reported by a proxy client; when a real-time streaming transmission protocol request containing a virtual real-time streaming transmission protocol port initiated by the PC client is received, forwarding the request to a corresponding proxy client according to camera identification information corresponding to the virtual real-time streaming transmission protocol port; the virtual real-time stream transmission protocol port establishes a mapping relationship with the camera identification information in advance; receiving video data uploaded by the proxy client; the video data is locally acquired by the proxy client from the camera according to the forwarding request; and encapsulating the video data into a standard real-time stream transmission protocol response, and returning the real-time stream transmission protocol response to the PC client for video quality detection. A communication link can be established for video transmission, the process is simplified, and the video quality detection efficiency is improved.

Systems and methods are provided for facilitating a discreet connection between a user and a service. A system includes a service for a user to connect to without any detectable direct contact with the service. A first reverse proxy connection is configured to receive a connection from the user to set up the discreet connection, where an invitation indicating a mechanism for accessing the first reverse proxy connection is provided to the user. Access credentials are transmitted to the user over the first reverse proxy connection, the access credentials including an address for accessing a second reverse proxy connection, the first reverse proxy connection being deleted following delivery of the access credentials. The second reverse proxy connection facilitates the discreet connection between the user and the service without any detectable direct contact with the service.

The embodiment of the invention provides a page theme resource processing method, an electronic device, a medium and a product, the method is applied to a reverse proxy server, the reverse proxy server is in communication connection with a server and a plurality of clients, and the method comprises the following steps: receiving a page theme updating request of any client; wherein the page theme updating request comprises a theme identifier and a user identifier of the client; obtaining personalized theme resources from the server according to the theme identifier and the user identifier; and generating a cache key value pair according to the theme identifier and the user identifier, and caching the personalized theme resource according to the cache key value pair. Through the embodiment of the invention, the personalized theme resource of the user is cached through the reverse proxy server, the load of the server is reduced, the response time of the page is prolonged, different users and the personalized theme resource are distinguished according to the cache key value pair, and the confusion of cache data is avoided.

A method and system of masking, redacting, filtering, and encrypting data retrieved from or stored into a database using policies in an information management system. The system comprises application, data protection, and database components. A data protection component is placed between an application component and a database component to provide protection to data in a database by applying data access policies to requests sent from the application component to the database component.

A method and system for securely routing traffic in a computing environment via a firewall, the method including configuring a reverse proxy server via a first configuration file and configuring a DNS server via a second configuration file, and routing traffic via the reverse proxy server by looking up addresses in the DNS server. The first configuration file includes a plurality of target IP addresses, each of the plurality of target IP addresses referencing a DNS record in the DNS server and the second configuration file includes a plurality of DNS records, where each of the DNS records is initially set to point to a default IP address. When it is determined that there is a change to an IP address of a resource in the computing environment, the DNS record associated with the resource in the DNS server is automatically updated via an API call to the DNS server by replacing the default IP address with the updated IP address for the resource. The reverse proxy servers refers to the updated DNS record to route traffic to the resource.

The embodiment of the invention provides a TCP reverse proxy device, method and equipment, a medium and a program product. The TCP reverse proxy device comprises an application protocol processing engine and a data plane development suite in a Linux system. A TCP reverse proxy engine and a user mode protocol stack are integrated in the data plane development suite, and the user mode protocol stack is in communication connection with the TCP reverse proxy engine; and the TCP reverse proxy engine is in communication connection with the application protocol processing engine. According to the device and the method, two services of application protocol processing and TCP reverse proxy can be separated, and the effect of bypassing a Linux kernel and a protocol stack is achieved, so that the TCP reverse proxy performance is improved.

The application provides a kind of vehicle terminal remote debugging system and method, belong to the field of automobile control. Among them, network connection platform sends start instruction to vehicle terminal module;Vehicle terminal module verifies whether start instruction is legal, if yes, then start reverse proxy client and reverse proxy registration to reverse proxy service end in intranet penetration module, to obtain IP information and reverse proxy registration result;Vehicle terminal module returns response information to network connection platform via message communication hub;Network connection platform verifies the authenticity of response information based on preset password book, to determine whether vehicle terminal module is ready, if yes, then establish remote debugging channel with vehicle terminal module via intranet penetration module and message communication hub, to send debugging instruction to vehicle terminal module. The application can improve the efficiency of debugging, improve the level of security protection and break through the isolation barrier of intranet and public network of vehicle terminal equipment, to realize the effect of remote debugging of vehicle terminal equipment.

One embodiment of the invention provides a method for reverse proxy inspection (RPI) of encrypted traffic in an edge-based network. The method comprises sharing a first certificate from an RPI instance to an edge-based network gateway. The first certificate is issued to the RPI instance. The method further comprises receiving, at the RPI instance, an encrypted message with an initial layer of encryption and a subsequent layer of encryption. The initial layer is encrypted using a second certificate issued to an edge-based network device. The subsequent layer is encrypted using the first certificate. The method further comprises, at the RPI instance, authenticating the first certificate, and decrypting the subsequent layer using the first certificate, resulting in the encrypted message with the initial layer intact. The method further comprises, at the RPI instance, inspecting the encrypted message, and forwarding the encrypted message to a centralized hub.

The embodiment of the invention discloses a cloud native seven-layer traffic intelligent gateway system and method based on a multi-tenant architecture. The cloud native seven-layer flow intelligent gateway system based on the multi-tenant architecture comprises a core service processing component and a support system, and the core service processing component comprises a connection management unit, a request analysis unit, a routing lookup unit, a conditional expression engine unit, a load balancing unit and a reverse proxy unit. The support system comprises a configuration management unit, a monitoring probe unit and a plug-in framework unit. Through the implementation of the method and the device, the problems that the comprehensive requirements of multi-tenant isolation, multi-protocol compatibility, edge intelligent processing, configuration lossless dynamic updating and low-cost expansion cannot be met at the same time in related technologies, and the service diversity and reliability requirements under the scene of fusion of the artificial intelligence Internet of Things and the cloud native are difficult to adapt are solved.

The application relates to the technical field of information system security, and particularly discloses an intelligent password service platform, which comprises a service gateway, a synchronization module, a general server, a reverse proxy server and a plurality of password devices; the synchronization module is used for synchronizing key resources of password devices of the same type after the password devices access a network; the general server is provided with a virtual module and a load balancing module; the load balancing module is used for connecting the password devices after the key resources are synchronized; the virtual module is used for virtually changing physical resources of secret devices into resource clouds of different types through a virtualization technology; the service gateway is used for obtaining a calling application of a third-party application service interface; the service gateway is also used for analyzing the calling application and determining service requests facing different resource clouds according to the analyzed results. The technical scheme of the application has high expansibility, can be flexibly networked, is convenient for reusing and does not waste existing resources.

The invention relates to the technical field of cloud scene networking communication, and provides an intercommunication method, system and device for a tenant service network and a management network in a cloud scene, and the method comprises the steps: creating a communication gateway in a container form, and creating a management network card and a service network card in a container of the communication gateway; creating a reverse proxy service, and configuring a corresponding reverse proxy monitoring configuration file for the communication requirements of the management network and the service network; and when a communication request is generated between the management network and the service network, monitoring and agenting the request flow through the reverse proxy. According to the intercommunication method, system and equipment for the service network and the management network of the tenant in the cloud scene, bidirectional intercommunication between the service and the management network can be realized by creating the communication gateway in a container form, external equipment is not needed, dependence on external configuration is avoided, various communication requirements are met, a user can flexibly define and manage configuration according to requirements, and the user experience is improved. And intercommunication can be realized after configuration, so that the safety is ensured.

Methods and systems for using a software gateway to improve enterprise user privacy for network communication data are described. A server executing the software gateway may receive a request for network communication data via several described pathways, including a software client on the client device, a proxy auto-configuration module, and a reverse proxy server. The software gateway may receive the network communication data, which is then forwarded to a proxy server, where the proxy server executes software modules included within the network communication data to generate expanded network data. The software gateway server may then filter the expanded network data by applying a set of content identification rules. Each content identification rule may specify data that is not passed to the client device. Only the portion of the executed network data allowed by the set of content identification rules may then be transmitted back to the software client.

The present invention discloses a deception defense device and method for seamlessly migrating website backdoors. The deception defense device deploys a website backdoor detection module on a user's real business server. The website backdoor detection module detects website backdoor files by monitoring changes in the business server's website directory files; a file ferry module transfers the website backdoor files to a honeypot environment and runs them, obtaining the website backdoor address running in the honeypot; a file rewriting module rewrites the website backdoor file without modifying the file path and file name, only rewriting the file content to the reverse proxy file content. In the reverse proxy file content, the reverse proxy destination address points to the website backdoor address running in the honeypot; malicious instructions and interactive operations issued by attackers to the website backdoor can be monitored in the virtual honeypot module. The present invention greatly enhances the integration of deception defense technology with real business and improves the ability of the honeypot network to actively trap attackers' actions.

The embodiment of the invention provides a server access method, a routing rule configuration method, a service code generation method, equipment, a storage medium and a program product. In the embodiment of the invention, terminal equipment scans a service code to obtain link information, and the link information comprises server identification information bound with the service code and a configuration indicator; the terminal equipment sends a routing configuration request, and the routing configuration request is forwarded to the configuration node through the reverse proxy node under the indication of the configuration indicator; and the configuration node configures a corresponding routing rule for the reverse proxy node according to the identification code of the terminal device and the identification information of the server bound with the service code, so that the reverse proxy node routes a service access request from the terminal device to the server bound with the service code based on the configured routing rule. Therefore, the routing rule is configured for the access of the code-scanned link information, the tedious operation of frequent manual configuration of testers is reduced, the operation is simple, the configuration efficiency is improved, and the test efficiency is further improved.