310 results about "Service grid" patented technology

The invention discloses a transformer area intelligent fusion terminal data processing system based on edge calculation, relates to the field of edge intelligence, and solves the problems of poor real-time performance and poor data exception processing accuracy of an existing intelligent fusion terminal data processing system. According to the method, communication between micro-services is efficiently managed through the container arrangement engine and the service grid, the message transmission delay is reduced, and resource allocation is further optimized through a resource scheduling algorithm based on reinforcement learning, so that system resources are used most reasonably; according to the method, anomaly detection is rapidly and accurately carried out through a space-time heterogeneous fusion network model, hierarchical processing of data and on-cloud training of the model are realized through a cloud-edge collaborative architecture, edge nodes participate in model training through a federated learning mechanism, the model performance is optimized, the transmission time of the data in the network is shortened, and the problem positioning speed is increased; the real-time performance and the reliability of an existing system are greatly improved.

A method and a device for scaling microservices in a service mesh using reinforcement learning with a feedback signal. The reinforcement learning model uses information representing an input workload of a microservice chain and current and historical resource allocations of the service mesh, a reward, and the feedback signal to obtain an optimized resource allocation for the workload as an output of the RL model.

The embodiment of the invention provides a multi-agent arrangement method and device based on a service grid and a storage medium, and relates to the technical field of artificial intelligence. The method comprises the following steps: generating corresponding domain-specific language description information based on workflow information of a plurality of agents; and based on the domain-specific language description information, generating routing information corresponding to the workflow information of the plurality of agents, the routing information being used for defining a calling relationship of the plurality of agents in the service grid. According to the scheme, the labor cost is reduced, and the arrangement efficiency is improved.

The present application discloses a data transmission method based on a high-speed network, a system, and a computing device cluster. The method is applied to a service grid system based on a high-speed network, the system comprises a gateway connected via the high-speed network, a shared memory pool, and computing nodes where service containers and network proxies are deployed, and the service container is connected to the network proxy. The method comprises: after acquiring first data, a gateway determines, according to container information and a routing rule, an address for sending the first data or a first transmission mode of the first data and a first service container for receiving data, wherein the transmission mode may be any one of a plurality of types of rapid channels supported by the gateway and comprising the use of RDMA technology; and a first network proxy connected to the first service container directly acquires the first data. In the process, data exchange is directly implemented between the gateway and the network proxy by means of an intelligent routing rule, the RDMA technology, etc., so that the network transmission speed can be increased, and computing resources are saved.

The invention provides a resource decoupling-oriented service grid test oracle method and device, and the method comprises the steps: determining first communication paths from an input port to an output port in a target service grid system, generating first test service requests corresponding to the first communication paths, and enabling the first test service requests to be connected with the output port of the target service grid system; inputting the target service grid system from the input ports corresponding to the first test service requests to obtain first test service results output by the target service grid system, and sending the first test service results to the target service grid system under the condition that the first test service results are matched with service reference results corresponding to the first communication paths. According to the method, the target service grid system is determined to pass the test, a more comprehensive test process can be executed on the target service grid system, the problem that the test process is not comprehensive due to the difference of the service grid system is avoided, and the accuracy of the test result of the service grid system is improved to a certain extent.

Systems and methods for data plane management are disclosed herein. An example method includes deploying a native module that is embedded in a service routing layer of the service mesh, assigning a security policy to the native module from a bootstrapping layer of the service mesh, the security policy enabling the native module to detect patterns in the service mesh data that are indicative of sensitive information, evaluating service mesh data by the native module with the security policy, and transmitting telemetry to a cloud-based command module when the native module has detected patterns in the service mesh data.

A system can receive, at an integration and deployment component, a changeset for an updated microservice and an identifier of a user account that is configured to access the updated microservice, wherein a current version of the microservice is deployed to a service mesh that comprises a group of microservices. The system can instantiate the updated microservice to the service mesh. The system can update routing rules for the service mesh to indicate that any traffic in the service mesh that is associated with the user account and that is directed to the current version of the microservice is to be routed to the updated microservice. The system can, in response to receiving traffic determined to be associated with the user account and directed to the current version of the microservice, route the traffic to the updated microservice instead of routing the traffic to the current version of the microservice.

The present invention relates to the fields of computer science and information technology, and specifically to a fault isolation and rapid recovery system based on a microservice architecture, which integrates automated fault detection and identification technology, intelligent grayscale release mechanism, fault isolation technology, rapid recovery strategy and elastic microservice design to provide efficient and reliable fault management and system recovery solutions. By analyzing the operating indicators and log data of microservices, using machine learning algorithms to detect abnormal behaviors, automatic fault detection is achieved; using containerization technology and Kubernetes clusters for intelligent grayscale release, and real-time monitoring of the application status of new versions; achieving fault isolation through service grids, and using Kubernetes automatic expansion strategies to increase the number of healthy Pods and quickly isolate faults; when a fault occurs, through the rollback operation in the CI / CD process, the above technical measures are used in combination to effectively improve the stability, flexibility and maintainability of the system, and are suitable for complex and changeable production environments.

The invention relates to the technical field of urban planning, in particular to a charging facility planning method and device based on machine learning and a medium, and the method comprises the following steps: carrying out the grid division of a planning region, which comprises a plurality of charging service grids; carrying out vehicle ownership prediction and charging facility demand prediction to obtain a charging demand quantity; adopting a clustering algorithm to obtain a plurality of charging block areas with balanced charging demand quantity; and constructing an objective function by maximizing the station revenue of each charging block area, constructing constraint conditions by full coverage of charging demands, calling an aurora optimization algorithm to obtain an optimal planning scheme of the charging facilities, and completing the planning of the charging facilities by adopting the optimal planning scheme of the charging facilities. According to the method, the problems of incomplete analysis and unreasonable partition optimization in the prior art can be solved, and various influence factors of charging facility layout are comprehensively considered, so that efficient layout and resource allocation of a charging network are realized, and the overall quality of charging services and the user satisfaction are remarkably improved.

The invention discloses an intelligent gray scale and multi-version adaptive deployment system and method based on Kubernetes, and the method comprises the steps: through an Operator which operates in Kubernetes and integrates a plurality of intelligent modules, the Operator can collect and fuse a business performance index and a technical performance index, and generates a comprehensive "version health score"; according to the real-time state of the health score, the rhythm and the step length of flow release are adaptively adjusted; meanwhile, through integration with a service grid, staged and context-based accurate flow routing is realized; when serious problems occur, safe rollback can be automatically executed, and cooling locking can be applied. According to the method, the service target and the release process are deeply bound, so that the intelligence of release decision, the self-adaptive adjustment of the release process and the fine control of the risk are realized, and the security, efficiency and success rate of software release are remarkably improved.

The invention discloses a risk control system monitoring method based on a service grid, and the method comprises the steps: deploying grid service platform istio and k8s container management in a cloud server environment, installing a nacos service registration and configuration center, and opening an openapi authority; a nacos service registration and configuration center is updated through grid service platform istio or business triggering, and meanwhile, an istio real-time reading nacos mechanism method is established, so that the grid service platform Istio updates the business configuration in real time; establishing a user tag and a risk control behavior tag according to the actual demand of the risk control service, and exposing the tag configuration on nacos for management; and according to the label configuration of the nacos, the grid service platform Istio carries out risk control early warning and traffic interception operation. According to the invention, real-time risk control early warning and interception of services, real-time change of risk control rules and refined processing of custom user groups can be realized.

Methods, apparatus, systems, and articles of manufacture are disclosed for traffic control for application-independent service mesh. In one example, processor circuitry to perform operations to instantiate ingress traffic management circuitry to receive ingress traffic events, at least one of the ingress traffic events to request access to a target microservice running on the second endpoint. The processor circuitry further performs operations to instantiate virtual service authorization circuitry to perform a look up of an authorization policy to the target microservice in the microservice catalog. Finally, the processor circuitry performs operations to instantiate endpoint selection circuitry to select the second endpoint to service the ingress traffic event in response to the authorization policy allowing access to the target microservice.

An apparatus and system of providing a service registry function (SRF) and service discovery in a 6G system are described. Registration procedures are provided for a service instance on a user equipment (UE) or in the 6G system to register to the SRF with or without a service mesh. The SRF provides a list of service instances based on criteria in service discovery inquiries from the UE or network function (NF) and notifies a subscribed party about a status change of a particular service instance. The service discovery enables the UE to discover a computing service instance in the 6G system by control plane service discovery to find a service orchestration and chaining function (SOCF) and user plane service discovery to find the computing service instance.

The invention discloses a dynamic current limiting method, device and equipment, a medium and a product. The dynamic flow limiting method comprises the steps of performing flow prediction and system load prediction based on historical service operation data to obtain a predicted flow value, a predicted load score and a dependency weight of a service in a system; the historical service operation data comprises historical flow data, system resource data and business index data; generating a flow limiting rule according to the predicted flow value, the predicted load score and the dependency weight, and synchronizing the flow limiting rule to a service grid layer; and based on the current service operation data collected by the service grid layer in the service operation process and the current limiting rule, carrying out current limiting on the currently operated service. According to the technical scheme of the embodiment of the invention, the dynamic adjustment of the current limiting rule can be realized.

The invention relates to an application calling method, computer equipment and a storage medium, and relates to the technical field of computers. The application calling method is applied to a service grid. The application calling method comprises the following steps: receiving a calling request for a first application; the first application is an application provided based on a target micro-service architecture; the target micro-service architecture and the service grid are mutually heterogeneous; acquiring application information of the first application from a registration center of the target micro-service architecture through a control plane component of the service grid according to a calling request for the first application; the control plane component and the registration center are respectively configured with target services; and calling the first application according to the application information of the first application. By adopting the method, mutual calling between the heterogeneous service grid application and the target micro-service architecture application can be realized.

The invention provides a firewall configuration method for protecting cloud security. The method comprises the following steps: acquiring a firewall policy related to a target computing node in a target computing cluster; wherein the target computing node runs at least one target container group, and the firewall policy comprises a mapping relationship between a network traffic filtering policy and the container group applying the network traffic filtering policy; determining a network flow filtering strategy corresponding to each target container group according to the firewall strategy; and for each target container group in the target computing node, executing the following steps: configuring a network traffic filtering strategy corresponding to the target container group in a table used for modifying the network traffic content in the target container group. In the method, aiming at each container group, no matter whether the container group is in a service grid mode or not, the firewall function can be realized, the network flow management can be completed, and meanwhile, aiming at the container group in the service grid mode, the subsequent communication agent is not influenced.

A system can execute a containerized application that comprises a microservice in a decentralized service mesh architecture, and a sidecar. The system can intercept, by the containerized application, a call from the microservice that is directed to a remote endpoint, and direct the call to the sidecar. The system can communicate, by the sidecar to an identity manager, service account credentials associated with the microservice, resulting in receiving an identity token associated with the microservice. The system can determine, by the sidecar, connectivity information of the remote endpoint based on a virtual address of the remote endpoint identified in the call. The system can communicate, by the sidecar to a token exchanger, the identity token and the connectivity information, resulting in receiving an access token and a network route to the remote endpoint. The system can relay, by the sidecar, network traffic between the microservice and the remote endpoint.

The invention relates to the technical field of internet risk collaborative management, and discloses an internet data risk early warning and collaborative management system and method.The internet data risk early warning and collaborative management method comprises the steps that a service grid enhanced federal learning unified framework is constructed, and a tetrad structure is formed; a seamless integrated architecture of federal learning and a service grid is realized; developing a federal contribution evaluation mechanism based on a service level agreement; a self-adaptive service discovery and dynamic combination technology is realized, and an optimal service combination scheme is generated; constructing a federated aggregation algorithm of data quality perception, and introducing a quality weight factor optimization model for training; designing a multi-level cache strategy; according to the invention, through the fusion of federal learning and the micro-service architecture, the purpose of keeping efficient collaboration while protecting data privacy is realized, the original data of each participant is always kept locally, only necessary model parameters are shared, and the privacy leakage risk is reduced.

The invention discloses a server gray release method, device and equipment and a medium, and belongs to the technical field of computers. The method comprises the steps that inbound request flow of a client side is intercepted through a side vehicle agent of a data plane of a service grid, feature identification in a request is extracted, a plurality of version instances of a target application and corresponding routing strategy rules are configured in a control plane of the service grid, and the routing strategy rules comprise gray strategies; and based on a matching result of the feature identifier and the routing policy rule, distributing the inbound request traffic of the client to a plurality of version instances corresponding to the target application according to a gray policy in the routing policy rule. According to the method, the routing capability is increased in the Inbound direction of the service grid, so that the inbound request flow of the client is subjected to request redirection after being matched with the routing, the gray release capability is sunk to the infrastructure level, and the standardization and generalization of the gray release function are realized.

A computing cluster system, a security authentication method, a node device and a storage medium are provided. A service grid system for implementing an identity-based identification authorization mechanism between at least two services is added in the computing cluster system. In the system, an identity registration component reports, to a management and control component, acquired diversified identity data corresponding to a first service; according to the diversified identity data, the management and control component generates a security policy and a digital certificate, which correspond to the first service, and issues same to a corresponding authorization proxy component. The authorization proxy component performs identity verification for the corresponding service according to the security policy and the digital certificate, and performs communication for the at least two services by proxy after the identity verification is passed.

The invention discloses a service grid stability guarantee method and device, and belongs to the technical field of computers. The method comprises the following steps: creating a service grid version management rule based on a self-defined resource definition mechanism of Kubernetes, and declaring a binding relationship between a target Deployment and a side vehicle agent version; intercepting a Pod creation request through an access controller of Kubernetes, and triggering an injection process of a service grid control plane; the service grid control plane judges whether the Pod is associated with the target Deployment or not by analyzing the label of the Deployment to which the Pod belongs; and if the Pod is associated with the target Deployment, injecting the side vehicle agent of the corresponding version into the Pod. According to the invention, the version of the service grid can still be finely controlled under the condition that the service and the service grid are deployed and decoupled, so that the service container and the verified service grid version are always deployed together; and the self-healing of the service grid and the capability that the user can autonomously and emergently exit the service grid are realized under the condition of not influencing the service.

The invention provides a game resource scheduling management method and system based on cloud computing, and relates to the technical field of game resources, the method comprises the following steps: decomposing a server of a cloud game application, and establishing a multi-attribute micro-service; constructing a heterogeneous resource pool containing computing nodes of different architecture types; performing request type demand analysis according to the received game session request, and determining a demand micro-service combination; based on the hardware preference features and the performance portraits, configuring computing nodes of the micro-services, and deploying corresponding micro-service instances on the computing nodes; and based on the demand micro-service combination, establishing communication connection between corresponding attribute micro-service instances through a service grid, and generating a collaborative scheduling execution instruction. By means of the method and device, the technical problem that in the prior art, due to the fact that resource scheduling is coarse in granularity and hardware resources are not fully utilized, computing resources are wasted, hardware loads are unbalanced, and the performance of the game server is affected is solved, and the resource utilization rate is increased through fine-granularity task-level scheduling.

The invention relates to the technical field of intelligent parking management, and discloses an intelligent parking management method and system based on license plate recognition, and the method comprises the steps: dividing a micro-service assembly; a service grid control layer is constructed, communication between services is intercepted through a side vehicle agent, and a service quality map is constructed; a dynamic routing decision model is constructed, and a reinforcement learning algorithm is adopted for training according to the service quality map; periodically executing a network topology optimization algorithm; faults are actively injected through a flow mirroring method and a chaos engineering method, potential problems are predicted, and an automatic recovery process is triggered based on an anomaly detection result; according to the invention, by constructing a micro-service architecture, an adaptive network topology and an active disaster recovery mechanism are realized, and the problems of performance bottleneck, insufficient reliability and poor expansibility of a traditional license plate recognition system in large-scale application are effectively solved.

The invention discloses a performance test method, device and equipment of a service system and a storage medium. A performance test method of a business system, the business system comprising a plurality of services, each service being configured with a service grid agent, comprises: acquiring mirror access data generated in an access process of a client to each service in the system based on the service grid agent, the mirror access data comprising encrypted data and non-encrypted data; preset data processing is carried out on the mirror image access data to obtain intermediate data, and the preset data processing comprises desensitization processing on the encrypted data; determining target test data meeting a test scene in the intermediate data based on the test scene of the service system; and performing performance testing on the business system based on the target test data to obtain a test result. The performance test cost of the service system is reduced, and the authenticity of the performance test of the service system is ensured.

The invention relates to the technical field of computing power distribution, and discloses a data hotspot identification and computing power dynamic reservation scheduling method. According to the method, suspicion hotspot data are monitored and identified in real time, a shadow execution copy with a minimum resource quota is constructed for the suspicion hotspot data, part of real-time flow is mirrored to the shadow copy for pressure testing without influencing a main service, and after a pressure verification score is calculated to confirm a hotspot, shadow copy resources are improved to a high-performance level and directed diversion is carried out; meanwhile, the method comprises the steps of self-adaptive threshold adjustment and hot spot cooling and capacity reduction, interaction is carried out on the basis of a centralized controller, a container arrangement platform and a service grid, hot spots can be accurately recognized, the computing power can be dynamically adapted, the resource utilization rate is increased, and the service stability and the resource efficiency are balanced.

A computer-implemented method performs dynamic filtering within a service mesh. While transferring data from one microservice to another microservice, each microservice evaluates a level of trust with each upstream and downstream microservice based on the level of trust score. Each microservice evaluates which data should be filtered while transferring data to downstream microservice and which data should be filtered while receiving data from upstream microservice.

A system (100) for distributed AI-driven content routing within a cloud-native service network, comprising: a. a traffic data collection module configured to continuously collect and aggregate real-time traffic data from services within the service network, including data related to traffic volume, latency, error rates and service health; b. an AI-based traffic analysis and prediction module that uses machine learning algorithms to process the collected traffic data and predict network conditions, detect anomalies, and predict potential congestion or failure points; c. a dynamic content routing module integrated into the service network, configured to dynamically adjust content routing decisions based on the predictions and insights provided by the AI-based traffic analysis module to optimize resource utilization and minimize latency; d. a fault tolerance and self-healing module that continuously monitors the state of the network and, in the event of a failure or disruption, triggers automatic recovery actions, such as rerouting traffic, providing additional resources or activating backup protocols; e. a distributed AI model integration and management module configured to distribute AI processing across multiple nodes in the service mesh, enabling decentralized decision-making and efficient model updating and synchronization; f. a monitoring and feedback module designed to track system performance, collect real-time feedback on routing decisions and troubleshooting actions, and ensure continuous optimization through an iterative feedback loop; g. the system continuously adapts to changing network conditions, thus ensuring optimal content delivery and fault resistance across the entire service network.

A machine-readable storage medium includes instructions stored thereupon, which when executed by processing circuitry of a computing node operable to implement a service mesh control plane (SMCP) in a MEC network, cause the processing circuitry to decode an attestation request received from a sidecar proxy of a deployable instance. The sidecar proxy is instantiated on a MEC host. Evidence information is collected from the deployable instance responsive to the attestation request, the evidence information comprising at least one security configuration of the deployable instance. An attestation of the evidence information is performed using a verified configuration of the deployable instance to generate an integrity report. An attestation token is generated based on the integrity report and is encoded for transmission to the MEC host. The attestation token authorizes the sidecar proxy to obtain configuration to facilitate a data exchange between the deployable instance and at least another deployable instance.

The invention discloses a load access control method based on a service grid, and belongs to the technical field of access control, micro-services are provided through the service grid, work such as development, deployment, management and maintenance of the micro-services is simplified, the service grid provides functions such as flow management, service discovery, network strategies, authentication and authorization, monitoring and the like, and the service grid can be widely applied to the field of access control. And communication between micro-services is ensured to be more reliable, efficient and secure. Then, through load control, fine management and control of the micro-service traffic are realized, and the request can be intelligently routed to the most suitable micro-service instance according to the characteristics of the request and the state of the micro-service, so that the performance and availability of the system are improved.

In one embodiment, service mesh monitoring with infrastructure awareness is provided herein. An example method herein may comprise: parsing, by a service mesh manager process, a package manager chart to learn a plurality of cloud resources associated with a given application; monitoring performance metrics for each individual resource for the plurality of cloud resources; aggregating the performance metrics for each individual resource into an overall performance level of the given application; and generating a holistic health report of the overall performance level of the given application that is further indicative of the performance metrics for each individual resource.