14 results about "Service grid" patented technology

The present application relates to the technical field of distributed system testing and operation and maintenance monitoring, and particularly relates to a server test environment automatic monitoring method and system, comprising: collecting a micro-service cluster directed call topology structure, constructing a distributed cell layer with node and edge vector spaces; parsing data serialization rules to extract constraint restriction mapping matrices, assembling a Hodge-Dirac operator; obtaining real-time business state vector groups to splice into zero-order co-chains, using the operator to solve an algebraic Laplace matrix to calculate a quadratic form energy functional; when determining that the quadratic form energy functional is greater than zero, generating an early warning signal, constructing and solving a discrete layer diffusion dynamics equation based on the algebraic Laplace matrix, obtaining a state compensation update matrix; finally, analyzing the state compensation update matrix into reverse rollback and cache erasure instructions, and submitting the instructions to a service mesh data plane proxy component for execution. The present application realizes code-free cross-node semantic conflict quantification and distributed consistency state self-healing closed loop.

A system can intercept, by a kernel-space application of a node of nodes, a call from a microservice that is directed to a remote endpoint that is external to a decentralized service mesh architecture, wherein the kernel-space application operates in a kernel space of the node, and wherein the microservice executes in a user space of the node. The system can perform, by the kernel-space application, an authorization check on the call based on the microservice and a virtual address of the remote endpoint identified in the call, to produce an authorization result determine, by the kernel-space application, connectivity information of the remote endpoint based on the virtual address of the remote endpoint identified in the call. The system can relay, by the kernel-space application, network traffic between the microservice and the remote endpoint, based on the authorization result indicating that the call is authorized and using the connectivity information.

A system and method for optimized generation of cloud deployment configurations for an application is provided. The invention provides for receiving parameters associated with application deployment configuration generation and deployment of application on a target cloud platform. The parameters are processed for generating an application source code template. Cloud deployment configuration is generated based on generated application source code template. Package deployment associated with application deployment is automated by integrating with Application Programing Interfaces (API) for abstracting packaging applications to be deployed on target cloud platform. Pipeline inputs associated with target cloud platform are processed for determining cloud deployment configuration constraints associated with application source code. Service mesh configuration files are generated for deployment of application to target cloud platform by processing cloud deployment configuration constraints associated with application source code. A cloud deployment template is generated for deploying application associated with application source code to target cloud platform.

A data management and query method, device, service grid system and computing device. The data management method comprises: adding a sidecar module for each data source, the sidecar module comprising at least a registration submodule, the registration submodule comprising identification information of the data source (S102); analyzing the registration module to obtain the identification information of the data source (S104); and registering the identification information of the data source in a service registry center (S106).

The present application provides a network system, a service mesh configuration method, a storage medium, and an electronic device. The network system includes: a central management and control device and at least one edge cloud node, where the central management and control device is deployed with a central control plane component, and each edge cloud node is deployed with a service mesh proxy component and at least one edge control plane component; the central control plane component is configured to generate proxy configuration information for a target edge cloud node according to configuration requirement description information, and issue the proxy configuration information to a resource scheduling cluster accessed by the target edge cloud node; and the edge control plane component is configured to manage at least one service mesh proxy component in an edge cloud node where the edge control plane component is located, and issue, by monitoring a resource scheduling cluster accessed by the edge cloud node where the edge control plane component is located, at least a part of monitored proxy configuration information to a service mesh proxy component managed by the edge control plane component.

The application provides an API construction method of industrial big data microservice, and belongs to the technical field of industrial big data.The application adopts Maxwell daemon control mechanism to calculate the information value score of API request by establishing a distributed API gateway cluster, and realizes hierarchical queue scheduling by combining a token bucket algorithm, deploys a service grid sidecar agent and a kernel bypass module based on eBPF to generate an optimal calling path by predicting the service node response delay by using a time sequence dependency graph analysis model, and adopts a hybrid logical clock protocol to perform differential consistency processing on control type API requests and monitoring type API requests, and builds an LSM tree storage engine to cooperate with a time partition strategy and a Z-Order curve multidimensional index to persist data, so that the problem that key control business is blocked by ordinary monitoring requests due to the inability to effectively distinguish different value API requests is solved.

A disclosed edge computing platform includes an edge orchestrator (EO) and one or more distributed endpoints. The EO includes an edge proxy, an edge control plane resource, and a service mesh. The service mesh includes a plurality of services, each of which is paired with a corresponding Envoy proxy. The edge proxy communicatively couples the service mesh to a mesh communication tunnel. The edge control plane resource is configured to enable secure routing based on edge estate data maintained in an external store and ownership authorization data in accordance with a suitable authentication technology (e.g. FDO). Each distributed endpoint includes a downstream connectivity module (DCM) including a DCM proxy coupling the distributed endpoint to the mesh communication tunnel. The distributed endpoints may include edge compute endpoints and external compute fabrics. Disclosed teachings enable secure service-to-service communication across the entire edge estate irrespective of types and location of services.

This application discloses an adaptive fault injection method, system, electronic device, and storage medium based on service mesh. The method includes: receiving an injection method that defines a service health security boundary threshold; monitoring service health indicators in real time and reporting them to a real-time analysis engine via a Sidecar agent deployed within the target service; the real-time analysis engine making adaptive decisions based on the security boundary threshold and the indicators to generate a fault injection instruction or a safe exit instruction; and the Sidecar agent executing the received instruction to perform fault injection on network traffic or stop fault injection. This application constructs an adaptive closed-loop feedback mechanism based on real-time service health indicators, which can improve the automation level, security, and efficiency of system resilience verification while ensuring that chaos experiments are conducted within a safe boundary.

This invention provides a management and control device and method for a service mesh cloud platform based on the Loongson architecture, comprising: a domestically produced hardware support layer processor using the Loongson architecture; a unified management and control layer for receiving user configuration instructions and converting them into standard control signals, while simultaneously collecting resource status data, policy execution status data, and operational status data, and summarizing them into network-wide operational status data; a cloud adaptation layer for converting standard control signals into interface signals; simultaneously collecting resource status data returned by external multi-vendor cloud platforms; a service mesh control plane for parsing service mesh governance policies and generating traffic governance instructions; simultaneously collecting data forwarding status and service operational status and summarizing them into policy execution status data; and a data plane for receiving and executing traffic governance instructions issued by the service mesh control plane, optimizing network forwarding processes based on the Loongson architecture. This invention can improve the efficiency of microservice governance and management, architectural adaptability, and communication security in the context of domestically developed IT applications.

The application relates to the technical field of microservices, and discloses a service framework switching method, device, equipment and storage medium, the method comprises the following steps: determining a mixed deployment distributed microservice framework and a control plane and a data plane of a service mesh framework, wherein the control plane comprises a control module for managing the distributed microservice framework and the service mesh framework, and the data plane comprises data in the distributed microservice framework and the service mesh framework; acquiring monitoring data in the distributed microservice framework and the service mesh framework according to the data plane; switching between the distributed microservice framework and the service mesh framework according to the monitoring data; in the above manner, the monitoring data of the distributed microservice framework and the service mesh framework is acquired, then the current service framework and the target service framework are switched through the monitoring data, so that the business instance does not need to be stopped during the switching process of the service framework, and the smooth running of the stateful service can be ensured.

This invention relates to the field of cloud-native gateways and service meshes, and discloses a route-aware multi-tenant certificate management method and system, comprising: upon receiving a tenant domain name creation request, creating a custom resource for the tenant domain name and initializing it; when the tenant domain name controller listens for the creation event of the custom resource for the tenant domain name, reading the Layer 7 routing resource template from the routing template cache, reading the subdomain prefix, and concatenating the subdomain prefix with the tenant's base domain name to generate a derived subdomain; aggregating all derived subdomains into a multi-domain certificate and submitting it to the certificate issuance controller; when the gateway proxy initiates an incremental discovery request to the key discovery and distribution service during the TLS handshake phase, sequentially querying the local cache, certificate index, and routing template cache, and executing the handshake admission control steps. This invention solves the problems of write conflicts and consistency issues, low resource utilization, and long fault recovery time in scenarios with tens of thousands of domain names.

The application discloses a logistics platform collaborative scheduling method and system based on a service-oriented architecture, relates to the technical field of logistics scheduling, and comprises the following steps: after a logistics platform receives a collaborative scheduling request, triggering a global situation awareness service to analyze the request and generating initial logistics element situation data; inputting the data into a resource field strength simulation model to calculate dynamic resource scarcity; generating a service grid dynamic arrangement instruction according to the comparison result of the scarcity and a preset threshold; activating a process disturbance channel and injecting a process disturbance factor; starting a steady-state resilience evaluation to calculate service structure compensation parameters; recombining microservices according to the parameters to form a compensated service grid; and importing the initial logistics element situation data into the grid to complete task decomposition and resource matching and generate a final scheduling scheme. The method can realize accurate matching of logistics resources and flexible adaptation of the scheduling process, and improve the stability and efficiency of collaborative scheduling.

Embodiments of the present application provide a management and control method, system, computer program product and storage medium. In the control plane of the service mesh system, in response to monitoring the available area transfer demand, based on the access information corresponding to the service endpoint in the target available area to be transferred, the proxy configuration information is generated for the target mesh agent affected by the target available area in the target cluster; in the data plane, on the target mesh agent, the received proxy configuration information is used to update the routing data, and the updated routing data will no longer contain the access information corresponding to the service endpoint located in the target available area, so that the traffic call of the target available area in the target cluster can be dynamically removed in time. Accordingly, in the case of available area failure, the service mesh system is responsible for removing the traffic in the target cluster that needs to flow to the damaged available area, which can effectively improve the traffic regulation efficiency in the target cluster.