24 results about "Virtual IP address" patented technology

The invention discloses an MQTT server failover method, architecture, equipment and medium, a master node and a slave node communicate through a virtual routing redundancy (VRRP) protocol, and the master node periodically sends a VRRP heartbeat message to the slave node; when a host-level fault occurs and the slave node does not receive a VRRP heartbeat message of the master node within a preset timeout interval, the slave node takes over a virtual IP address and is upgraded to a master role; when a service-level fault occurs, the detection program running on the main node detects that the specified service is abnormal, and the main node actively reduces the priority of the main node and cancels the virtual IP address bound with the main node; and when detecting that the priority of the master node is lower than that of the slave node, the slave node immediately initiates election and becomes a new master node, and binds the virtual IP address to complete fault switching. By detecting the host-level fault and the service-level fault respectively, compared with single-point deployment, when the server fails, services can be continuously provided to the outside, and the continuity of services is ensured.

The present disclosure provides dynamic routing for data flows to a customer network hosted in the cloud. A plurality of compute instances may share a common virtual IP address. Each of the plurality of compute instances may advertise information to a respective network virtualization device (NVD). The information may include the IP address, cost, and / or active / standby status of the compute instance. The NVD may then provide the information to the control plane of a virtual cloud network (VCN), which may aggregate the information from the plurality of compute instances and generate a forwarding table, which may be sent to the NVDs. These techniques may allow a customer to automatically remove a compute instance whose service host has failed. These techniques may also allow a customer to add compute instances and to route data flows according to an active-standby operation, an equal cost active-active operation, or an unequal cost active-active operation.

The application provides a database access method and device. The method comprises the following steps: determining a virtual IP address pre-solidified by a micro-service application; sending a connection request to the virtual IP address, so that a database connection agent on a database server side returns database metadata according to the connection request; receiving the database metadata; determining a target driver type according to a database category, loading a database driver corresponding to the target driver type, and creating a database connection pool by using the database driver according to database connection information. In the method, the micro-service application can receive the database metadata returned by the database connection agent, which comprises a database category and database connection information, by sending a connection request to the virtual IP, and dynamically constructs a database connection pool according to the database metadata. The process does not require the application to perceive information of a real database, shields differences of heterogeneous databases, realizes zero modification of configuration, and significantly reduces the workload of application deployment and operation and maintenance.

Embodiments of the present disclosure provide a virtual machine migration method and device, equipment and storage medium, and relate to the technical field of virtual machines. The method comprises: if a migration operation of a virtual machine on a current host is detected, determining a current migration mode; processing a first virtual machine network interface according to the current migration mode to obtain a second virtual machine network interface; processing a first virtual IP address according to the current migration mode to obtain a second virtual IP address; obtaining configuration information from a preset database, and creating the second virtual machine network interface and the second virtual IP address on a target host according to the configuration information, so as to complete migration of the virtual machine from the current host to the target host. By using the technical solution, the integrity and accuracy of the migration of the network interface of the virtual machine and the virtual IP address bound thereto can be improved.

The invention provides a domain name change verification method and device, equipment, a medium and a program product, and relates to the field of financial science and technology and information security. According to the method, after an IP address of a target domain name is changed, the IP address of the target domain name in M resolution servers is updated based on the updated IP address; performing dial test processing on the target domain name based on the updated M resolution servers by adopting the plurality of virtual IP addresses to obtain a first dial test result fed back by the M resolution servers; and determining that the change of the IP address of the target domain name is completed under the condition that the server addresses fed back by the M resolution servers are consistent with the updated IP address. According to the method, a plurality of virtual IP addresses are created through load balancing equipment, so that the equipment can simulate user IPs of a plurality of regions, full verification is realized, and the verification efficiency is improved; meanwhile, M servers are verified one by one based on an isolation recovery mechanism, it is ensured that each server updates configuration synchronously, and abnormity caused by configuration delay or errors is eliminated.

The application provides a high availability implementation method and system of a tenant cloud server, and a cloud data center controller. The method comprises the following steps: setting a management network address pool; wherein the management network address pool comprises no less than M management network addresses, and the management network addresses are public network IP addresses; allocating the M management network addresses in the management network address pool to M tenant cloud servers one by one; grouping the M tenant cloud servers into a cluster, and setting cluster configuration information of the cluster, wherein the cluster configuration information comprises a virtual IP address; sending the cluster configuration information to each tenant cloud server in the cluster through the management network address allocated to each tenant cloud server; downloading, by each tenant cloud server, a cluster configuration tool from an external network through the allocated management network address; and joining, by each tenant cloud server, the cluster by using the cluster configuration tool and the cluster configuration information. The application can realize high availability of the tenant cloud server.

The invention discloses a BFD protocol implementation method and system in an MLAG environment, and the method comprises the steps: binding a BFD session with an MLAG protocol through a host computer and a standby computer, and configuring a unique number for the BFD session; the BFD session adopts a virtual IP address to establish a session with a downlink device; when the Peerlink port is in an up state, the host machine maintains the BFD session, and the standby machine is in a passive state; when the BFD session state is changed, the host synchronizes the BFD session state to the standby machine according to the state change information through a BFD state synchronization message of the MLAG protocol; when the standby machine receives the BFD state synchronization message, the standby machine updates the corresponding BFD session state according to the BFD session number; and when the standby machine receives the BFD message, forwarding the BFD message to the host through a BFD message synchronization message of the MLAG protocol. And the link between the MLAG equipment and the downlink equipment can be monitored by using one BFD session, so that the operation burden of the equipment is reduced.

The invention discloses a data packet forwarding method and device, equipment and a storage medium, and relates to the technical field of network security, and the method comprises the steps: receiving a resource access data packet sent by a gateway client through a gateway server, and forwarding the data packet to virtual Ethernet pair equipment through an XDP socket mode; calling the redirection component by the equipment through the virtual Ethernet to analyze a source IP address and a destination IP address in the data packet, and querying the source IP address from a virtual IP address pool table associated with the redirection component; if the source IP address is located in the address pool table, querying a kernel FIB table based on the target IP address to obtain a target physical network card corresponding to the target IP address; and redirecting the data packet to the target physical network card, and sending the resource access data packet to a resource server through the target physical network card. According to the method and the device, the forwarding efficiency of the data packet can be greatly improved, and frequent system calling overhead is avoided, so that the occupation of system resources is reduced.

The present disclosure relates to a network configuration method and server in a container cloud platform environment, and particularly relates to the field of computer communication; the method comprises the following steps: determining the type of the micro-service instance which needs to be configured according to the network configuration request of the micro-service instance; when the type is a tunnel mode supporting LVS, performing first network configuration through a first network component according to first configuration information in the network configuration request, and performing second network configuration through a configuration component corresponding to a second network component according to second configuration information in the network configuration request, wherein the first network configuration is used to establish a first connection, the second configuration information comprises a virtual IP address of LVS, and the second network configuration is used to establish a second connection. According to the present disclosure, the second network configuration can support sending response data packets to a terminal device through a tunnel mode, without modifying the first network component of the container cloud platform, which is beneficial to maintenance and modification and facilitates access.

The invention discloses a virtual IP address switching method and device, electronic equipment and a medium. The method comprises the following steps: in the process of establishing communication connection with a client through a virtual IP address and providing service, acquiring connection state information of the communication connection; synchronizing the connection state information to middleware in real time; wherein the connection state information is used for a second node to acquire from the middleware, so that after the virtual IP address is switched to the second node, the second node provides services for the client based on the connection state information. According to the method, when the virtual IP address switches the node equipment, the standby second node does not need to establish TCP connection with the client again, and the session with the client can be directly recovered based on the connection state information obtained by the middleware, so that the reconnection time is shortened, seamless connection taking-over is realized, the continuity of the network is kept in a high-concurrency scene, and the user experience is improved. And the high availability, the stability and the response speed of the system are greatly improved.

The embodiment of the invention discloses a data traffic forwarding method, system and device, a target node, a storage medium and a program product. The method is applied to a target node in a node cluster, a load balancing container is deployed on the target node, an IP address allocated to the load balancing container is published as a virtual IP address, and the method can comprise the following steps: in response to data traffic for the virtual IP address, obtaining a candidate IP address corresponding to the virtual IP address, each candidate IP address corresponds to a corresponding application container; and determining a target IP address from the candidate IP addresses based on a load balancing strategy, and forwarding the data traffic to a target application container corresponding to the target IP address in the application containers. According to the technical scheme provided by the embodiment of the invention, jitter of data traffic under all VIP addresses can be avoided.

The invention discloses an available area flow switching method, device and equipment, a storage medium and a program product, and the method comprises the steps: obtaining the operation state data of each available area deployed by a current service during the service operation period of an available area service system; wherein each service applies for a virtual IP address in each available area deployed by the service, and the virtual IP address and the unified access domain name of the service have an association relationship; determining the health condition of each available area according to the running state data; and when the health condition of any target available area meets a preset traffic switching condition, switching the traffic accessing the target available area to the health available area with the association relationship. By adopting the embodiment of the invention, the multi-dimensional state of the cluster can be monitored in real time, faults and health hidden dangers can be accurately identified, cross-available-area flow switching can be quickly completed, the fault recovery time can be shortened, and continuous and stable operation of services can be ensured.

Embodiments of the present application disclose a parallel test system, method, electronic device and storage medium. The system comprises a test host and N devices under test, N being an integer greater than 1; the test host is configured to set at least N host IP addresses belonging to different network segments; each of the N devices under test is configured to set at least N virtual IP addresses belonging to different network segments; the test host is configured to communicate with the N devices under test through the N host IP addresses respectively to perform a test task; wherein when the test host communicates with the devices under test, a virtual IP address adopted by an i-th device under test belongs to a network segment same as an i-th host IP address. The parallel test scheme provided by the embodiments of the present application can simply and efficiently perform parallel test on the devices under test, without complex test configuration, and greatly improves the test efficiency of network devices.

This invention discloses a method, system, and device for migrating low-Earth orbit satellite network services based on Mobile Virtual Service Groups (MVSGs), belonging to the field of satellite communication technology. The method includes: an orchestration management entity acquiring user trajectories and satellite ephemeris data; constructing a user-centric Mobile Virtual Service Group (MVSG); calculating a satellite service schedule with the minimum number of handovers using a greedy algorithm; generating flow table entries and control commands, and sending them to an SDN controller; the SDN controller receiving the schedule, issuing commands to the target physical satellite to start VNF ​​containers and allocate fixed virtual IP addresses, maintaining a dynamic mapping between virtual IPs and physical addresses, and issuing data plane forwarding rules and handover rules; the access satellite encapsulating user data packets with IPv6 tunnels and routing them to the target satellite; during handover, the source satellite migrates its VNF state to the target satellite. This invention significantly reduces the number of service handovers, ensures service continuity, and reduces signaling overhead through MVSG, pre-calculated scheduling, virtual IP decoupling, and state migration.

The application provides a DPU-based K8S cluster multi-network card service discovery method and device and a storage medium. The service discovery method comprises the following steps: obtaining a service call request and multi-network card information of a pod, the multi-network card comprising a first network card for connecting an internal network of the K8S cluster and a second network card for connecting an external network, and the multi-network card information comprising network card IP address information; determining virtual IP address information corresponding to the second network card, generating a forwarding rule based on a preset service strategy, network card IP address information corresponding to the second network card and the virtual IP address information; determining a target network card of a target pod based on the forwarding rule and a request address contained in the service call request, and forwarding the request based on the determined target network card. The method improves the network performance and efficiency of service discovery in the multi-network card scenario.

A network access method, device and electronic equipment, the method comprising: a cloud server receiving a user virtual machine sending an external network access request, determining an unused local virtual IP address, converting the local virtual IP address into a unique target virtual IP address, sending the target virtual IP address to the user virtual machine, so that the user virtual machine can access the external network based on the target virtual IP address. Through the above method, the user can access the external network based on the target virtual IP address when accessing the external network from the private network, which realizes that the user only maintains the target virtual IP address, solves the problem of the user maintaining multiple virtual IP addresses, and improves the user access network convenience.

The invention discloses a data encryption transmission method and device and a storage medium. Relates to the field of data transmission, and comprises the following steps: determining a virtual IP address of a first terminal, a data message to be transmitted by the first terminal and a destination IP address carried by the data message, the virtual IP address of the first terminal being an IP address pre-allocated in the same virtual network; under the condition that the destination IP address is the virtual IP address in the same virtual network, determining a second terminal for receiving the data message according to the destination IP address; and under the condition that the ciphertext channel exists between the first terminal and the second terminal, the first terminal sends the data message to the second terminal through the ciphertext channel. Through application of the data encryption transmission method and device, the problem that the stability of data encryption transmission is poor due to the risk of a single point of failure when encryption transmission is carried out by relying on central side gateway equipment in the prior art is solved.

The invention provides a WebRTC-based multi-cloud environment cross-network intercommunication method and system, and the method comprises the steps: receiving network configuration information sent by a management end, and updating a local cache through the network configuration information; the network configuration information at least comprises a virtual IP address and a global identifier of each other client in the virtual subnet; when a connection request with a target virtual IP address is received, determining a corresponding target global identifier from a local cache; taking the management end as a signaling server, and constructing a data channel based on the WebRTC protocol stack and the target global identifier; generating a channel identifier of the data channel, storing the channel identifier in a local cache, and establishing a mapping relationship between the channel identifier and the target virtual IP address; and when the data packet containing the target virtual IP address is obtained, the corresponding channel identifier is inquired, and the data packet is sent to other corresponding clients by using the data channel corresponding to the channel identifier, so that the aim of cross-network intercommunication which is simple in configuration and does not depend on specific hardware is fulfilled.

A method for accessing a virtual IP address across clusters is provided. The method is applied to a gateway node of a first cluster, where the first cluster is connected to a second cluster through a router, and the method includes: matching a received packet with a flow table, where the packet carries a virtual IP address and a MAC address corresponding to the virtual IP address; and in response to the packet being successfully matched with a first flow entry in the flow table, determining that the virtual IP address drifts into a virtual machine in the first cluster, and adding static routing corresponding to the virtual IP address to a router of the second cluster according to the virtual IP address and the MAC address corresponding to the virtual IP address to enable the second cluster to access the virtual IP address in the first cluster.

The invention discloses a method and a system for realizing two-layer link encryption based on routing drainage in a cloud environment. The invention provides a non-intrusive drainage encryption scheme for solving the problems that two-layer link encryption equipment in an existing cloud environment cannot utilize a virtual switch standard route for drainage due to lack of a three-layer network identifier, and an existing solution needs to intrusively modify a cloud platform bottom layer code. According to the method, a miniature protocol stack is constructed in a link encryption device, a virtual IP address and a virtual MAC address for drainage are configured, only an ARP protocol and an ICMP protocol are responded, and a three-layer virtual switch recognizes the link encryption device as a next-hop gateway. And the three-layer virtual switch guides an original data packet to the link encryption device according to a routing rule, and the device performs link layer encryption on the data packet and then transmits the data packet through a specified interface in an unvarnished transmission manner. According to the method, a cloud platform network architecture does not need to be modified, the method is compatible with a mainstream virtual switch, and low-cost and non-perception link layer encryption integration in a cloud environment is realized.

The application provides a data processing system for obtaining user abnormal login information, which packs login request information and a key user login request information set, and sends the same to servers corresponding to actual IP addresses corresponding to virtual IP addresses requested to access in the login request, so as to avoid the problem that the failure of one of the servers corresponding to the actual IP addresses corresponding to the virtual IP addresses requested to access results in the failure to store data and the failure to call data, thus, when it is necessary to store or call user request information, the key user login request information set can be used to store or call all related data corresponding to the login request information, and when one of the servers corresponding to the actual IP addresses corresponding to the virtual IP addresses requested to access in the login request fails or is regularly maintained, the rest of the servers also store or call all request information data, thus meeting the user demand.

The application provides a WebRTC-based multi-cloud environment cross-network intercommunication method and system, receives network configuration information sent by a management end, and updates a local cache by using the network configuration information; the network configuration information at least includes virtual IP addresses and global identifiers of each other client in a virtual subnet; when a connection request with a target virtual IP address is received, a corresponding target global identifier is determined from the local cache; the management end is used as a signaling server, and a data channel is constructed based on a WebRTC protocol stack and the target global identifier; a channel identifier of the data channel is generated, the channel identifier is stored in the local cache, and a mapping relationship between the channel identifier and the target virtual IP address is stored; when a data packet containing the target virtual IP address is obtained, a corresponding channel identifier is queried, and the data packet is sent to a corresponding other client by using a corresponding data channel of the channel identifier, so that the purpose of simple configuration and cross-network intercommunication independent of specific hardware is achieved.

The application relates to a master selection method and device after cloud platform failure and a storage medium. The method comprises the following steps: starting a keepalive software service based on a set container application parameter; if a virtual IP address is connected to fail, the keepalive software service automatically switches the virtual IP address to a second node; in response to the connection of the virtual IP address being failed, it is detected whether the virtual IP address is switched; if the virtual IP address is not switched and still fails, it is indicated that the keepalive software service is abnormally operated, and a re-master operation is performed to switch the virtual IP address to the second node. The application deploys an automatic recovery master selection device for a cloud platform. When the re-master function of the keepalive software service is abnormal, the device actively performs the re-master operation, switches and loads the virtual IP address to another normal node, ensures the high availability of the cloud platform, and improves the access and service stability of the cloud platform.