81 results about "Virtual IP address" patented technology

The invention provides a DPU-based K8S cluster multi-network card service discovery method and device and a storage medium, and the method comprises the steps: obtaining a service call request and the multi-network card information of a pod, the multi-network card comprises a first network card used for connecting a K8S cluster internal network and a second network card used for connecting an external network, the multi-network card information comprises network card IP address information; virtual IP address information corresponding to the second network card is determined, and a forwarding rule is generated based on a preset service strategy, the network card IP address information corresponding to the second network card and the virtual IP address information; and determining a target network card of the target pod based on the forwarding rule and a request address contained in the service calling request, and carrying out request forwarding based on the determined target network card. According to the method, the network performance and efficiency of service discovery in a multi-network-card scene are improved.

Anycast addressing is utilized to support the connection of multiple application connectors fronting an application(s) to a network element and anycast routing of network traffic destined for the application(s). When an application is indicated for onboarding in a network fabric of a tenant, a network controller allocates virtual and anycast addresses to the application. Allocation of anycast addresses is per domain name and port / protocol combination. Upon determining that the application is available, the application connector(s) advertises reachability of the application via the anycast address. The network controller orchestrates configuration of a DNS entry that resolves the application name to its virtual IP address and destination NAT rules that translate the virtual IP address to the anycast address and the anycast address to the application's private IP address. Application network traffic can thus be forwarded to the application via any application connector that advertised the anycast address.

The embodiment of the invention provides a network application access method and related equipment, a security protection system receives a first message from a terminal, the first message comprises an application layer message header, the application layer message header in the first message carries a first virtual IP address corresponding to a user identifier, and the user identifier is an identifier of a user logging in the terminal; the first virtual IP address is an IP address in a second network; the security protection system obtains a second message based on the first message, the second message comprises an IP basic header, and a source IP address field in the IP basic header in the second message carries a first virtual IP address; and the security protection system sends the second message to the server. According to the embodiment of the invention, the difficulty of tracing to the user based on the message source IP can be reduced.

The invention belongs to the technical field of computers, and relates to a network access method and device, computer equipment and a storage medium, and the method comprises the steps: receiving an access domain name input by a user in a target network environment; calling a target load balancer corresponding to the target network environment; analyzing the access domain name into a virtual I P address of the target load balancer based on a preset DNS server, and returning the virtual I P address to the user; receiving an access request sent by a user to the virtual IP address; based on the target load balancer, screening out a target server from a plurality of servers corresponding to the target network environment, and distributing the access request to the target server; based on the target server, performing identity verification on the user by using a preset identity verification strategy; and if the user passes the identity verification, performing corresponding response processing on the access request based on a preset access control strategy. According to the network access processing method provided by the invention, the security and availability of network access can be effectively improved.

Anycast addressing is utilized to support the connection of multiple application connectors fronting an application(s) to a network element and anycast routing of network traffic destined for the application(s). When an application is indicated for onboarding in a tenant's network fabric, a network controller allocates virtual and anycast addresses to the application. Allocation of anycast addresses is per domain name and port / protocol combination. Upon determining that the application is available, the application connector(s) advertises reachability of the application via the anycast address. The network controller orchestrates configuration of a domain name system entry that resolves the application name to its virtual Internet Protocol (IP) address and destination network address translation rules that translate the virtual IP address to the anycast address and the anycast address to the application's private IP address. Application network traffic can thus be forwarded to the application via any application connector that advertised the anycast address.

Embodiments of the present application provide a network application access method and a related device. A security protection system receives a first packet from a terminal, wherein the first packet comprises an application layer packet header, the application layer packet header in the first packet carries a first virtual IP address corresponding to a user identifier, the user identifier is an identifier of a user logging into the terminal, and the first virtual IP address is an IP address in a second network; the security protection system obtains a second packet on the basis of the first packet, wherein the second packet comprises an IP basic header, and a source IP address field in the IP basic header of the second packet carries the first virtual IP address; and the security protection system sends the second packet to a server. The embodiments of the present application facilitate reduction of the difficulty of tracing to a user on the basis of a source IP of a packet.

The embodiment of the invention provides a switching control method, device and equipment for a cloud platform management node. The method comprises the following steps: acquiring state data of a cloud platform management main node; when the state data is a fault, selecting a new cloud platform management main node from at least two groups of cloud platform management backup nodes; the virtual IP address of the original cloud platform management main node is bound with the new cloud platform management main node, and routing redirection is completed; controlling the task of the original cloud platform management main node to be switched to the new cloud platform management main node for processing; and controlling the cloud platform management main node and the cloud platform management backup node to keep data synchronization. According to the embodiment of the invention, the new master node is selected from the at least two groups of backup nodes, the selected new master node is ensured to be in a normal state and have enough resources, and new problems after switching are avoided.

The invention provides a strategy issuing method, controllers, RR equipment and a network system, and the method comprises the steps: a strategy generation assembly of a main controller generates a strategy issuing instruction according to a current strategy, stores the strategy issuing instruction in a strategy issuing table, and broadcasts the strategy issuing instruction to a BGP assembly of each controller in a controller cluster, the BGP component of each controller determines whether to issue the strategy issuing instruction according to the BGP neighbor information of each BGP component and the RR device indicated by the strategy issuing instruction, the BGP neighbor information is used for indicating the RR device connected with the controller, and if yes, the strategy issuing instruction is issued. And if yes, the BGP component which determines to issue the strategy issuing instruction sends the strategy issuing instruction to the connected RR equipment through the virtual IP address of the main controller. According to the invention, the number of BGP neighbors at the RR equipment side and the controller side is reduced, and meanwhile, the data volume borne by the BGP component in each controller is also reduced.

The invention discloses a method for realizing point-to-point communication between nodes in a mobile cellular network. The method specifically comprises the following steps of: creating a virtual network card on each terminal device, distributing a virtual IP (Internet Protocol) address, and establishing a service gateway for grid topology management and data forwarding. Each node is connected with the service gateway through a network to form a grid topological structure, the nodes send data packets to the service gateway through the virtual network card, the service gateway searches the corresponding node connection according to the target virtual IP address of the data packets and forwards the data packets, and the target node receives the data packets and transmits the data packets to the local network protocol stack for processing through the virtual network card. The invention further provides an identity authentication mechanism based on the secret key and the certificate, and communication safety is guaranteed. The virtual private network constructed by the scheme of the invention breaks through the limitation that nodes in a cellular network only have dynamic virtual IPs and do not have public network IPs, improves the communication efficiency, reduces the energy consumption, and enhances the network topology adaptability.

In an overlay access network, a first access tunnel between a first fabric edge node and a wireless access point (AP) can be configured as active, based on the first fabric edge node being active. A second access tunnel between a second fabric edge node and the wireless AP can be configured as standby based on the second fabric edge node being standby, with the same virtual IP address attached to the first and second access tunnels. Based on an active failure, a switch to standby for the first fabric edge node and to active for the second fabric edge node is signaled to an Extended Node (EN). The EN steers traffic on the first access tunnel with the virtual IP address to the second fabric edge node, based on the switch and using a portion of the second access tunnel between the EN and the second fabric edge node.

The invention provides a public network access method and device, electronic equipment and a medium, and relates to the field of artificial intelligence and cloud computing, in particular to the technical field of network communication.The method comprises the steps that a first access initiating data packet transmitted by an access initiating end through a virtual route is received; an on-cloud virtual private network access source IP address in the first access initiation data packet is converted, a converted under-cloud intranet access source IP address is obtained, and the under-cloud intranet access source IP address is a high-availability virtual IP address; a second access initiation data packet after the first access initiation data packet is updated is obtained based on the under-cloud intranet access source IP address, the second access initiation data packet is transmitted to a public network gateway, and the public network gateway is used for converting the under-cloud intranet access source IP address in the second access initiation data packet into a public network access source IP address and transmitting the public network access source IP address to the cloud intranet access source IP address. And performing service access on the public network access target IP address carried in the second access initiation data packet based on the public network access source IP address.

The invention discloses a public network domain name shunting method and a communication system. Comprising the steps that an uplink classifier user plane function network element receives a DNS analysis request message initiated by user equipment, the message comprises a public network domain name to be analyzed, and a target IP address of the message is a first IP address; whether the public network domain name meets a DNS redirection rule is judged, if yes, the request message is sent to an intranet DNS server corresponding to the public network domain name, and a DNS analysis response message fed back by the intranet DNS server is received; and converting the analysis result from the second IP address to a virtual IP address according to a target IP address conversion rule, and sending a DNS analysis response message of which the analysis result is the virtual IP address to the user equipment. According to the method and the device, the technical problem that the common public network service cannot be normally accessed due to the fact that the same IP address is returned to two DNS analysis requests of the public network service shunted by the internal network and the common public network service by a content distribution network service provider is solved.

The embodiment of the application provides a cluster architecture control method and device, a storage medium and an electronic device, the cluster architecture control method comprises the following steps: selecting a first management node as a management node of a target node cluster from a group of candidate management nodes in the target node cluster, wherein the management node of the target node cluster is used for controlling a group of working nodes in the target node cluster, and the group of candidate management nodes and the group of working nodes are used for running containerized applications; assigning a virtual Internet Protocol (IP) address to the first management node, wherein the virtual IP address is an IP address used by an external program to access the management node of the target node cluster; in the case that the first management node fails, selecting a second management node as the management node of the target node cluster from other candidate management nodes except the first management node in the group of candidate management nodes, and assigning a virtual IP address to the second management node.

Anycast addressing is utilized to support the connection of multiple application connectors fronting an application(s) to a network element and anycast routing of network traffic destined for the application(s). When an application is indicated for onboarding in a tenant's network fabric, a network controller allocates virtual and anycast addresses to the application. Allocation of anycast addresses is per domain name and port / protocol combination. Upon determining that the application is available, the application connector(s) advertises reachability of the application via the anycast address. The network controller orchestrates configuration of a domain name system entry that resolves the application name to its virtual Internet Protocol (IP) address and destination network address translation rules that translate the virtual IP address to the anycast address and the anycast address to the application's private IP address. Application network traffic can thus be forwarded to the application via any application connector that advertised the anycast address.

Methods, systems, and apparatus for implementing a redundant DCN system over a process automation network. In one aspect, a redundant DCN system includes a primary DCN, a backup DCN, and a keep alive process configured to determine whether the primary DCN becomes unavailable, wherein in response to the primary DCN being determined as unavailable, the backup DCN is reassigned as a new primary DCN, and assumes functions previously executed by the former primary DCN. Each DCN in the redundant DCN system may have a unique virtual IP address or transfer a common virtual IP address. Virtual IP addresses may impact communications between DCNs and other devices.

The invention relates to distributed control node redundancy. Methods, systems, and apparatus for implementing a redundant DCN system over a process automation network. In one aspect, a redundant DCN system includes a primary DCN, a backup DCN, and a keep-alive procedure configured to determine whether the primary DCN becomes unavailable, where in response to the primary DCN being determined to be unavailable, the backup DCN is reassigned as a new primary DCN, and assumes a function previously performed by a previous primary DCN. Each DCN in the redundant DCN system may have a unique virtual IP address or a transfer common virtual IP address. The virtual IP address may affect communications between the DCN and other devices.

The invention discloses an MQTT server failover method, architecture, equipment and medium, a master node and a slave node communicate through a virtual routing redundancy (VRRP) protocol, and the master node periodically sends a VRRP heartbeat message to the slave node; when a host-level fault occurs and the slave node does not receive a VRRP heartbeat message of the master node within a preset timeout interval, the slave node takes over a virtual IP address and is upgraded to a master role; when a service-level fault occurs, the detection program running on the main node detects that the specified service is abnormal, and the main node actively reduces the priority of the main node and cancels the virtual IP address bound with the main node; and when detecting that the priority of the master node is lower than that of the slave node, the slave node immediately initiates election and becomes a new master node, and binds the virtual IP address to complete fault switching. By detecting the host-level fault and the service-level fault respectively, compared with single-point deployment, when the server fails, services can be continuously provided to the outside, and the continuity of services is ensured.

The present disclosure provides dynamic routing for data flows to a customer network hosted in the cloud. A plurality of compute instances may share a common virtual IP address. Each of the plurality of compute instances may advertise information to a respective network virtualization device (NVD). The information may include the IP address, cost, and / or active / standby status of the compute instance. The NVD may then provide the information to the control plane of a virtual cloud network (VCN), which may aggregate the information from the plurality of compute instances and generate a forwarding table, which may be sent to the NVDs. These techniques may allow a customer to automatically remove a compute instance whose service host has failed. These techniques may also allow a customer to add compute instances and to route data flows according to an active-standby operation, an equal cost active-active operation, or an unequal cost active-active operation.

The application provides a database access method and device. The method comprises the following steps: determining a virtual IP address pre-solidified by a micro-service application; sending a connection request to the virtual IP address, so that a database connection agent on a database server side returns database metadata according to the connection request; receiving the database metadata; determining a target driver type according to a database category, loading a database driver corresponding to the target driver type, and creating a database connection pool by using the database driver according to database connection information. In the method, the micro-service application can receive the database metadata returned by the database connection agent, which comprises a database category and database connection information, by sending a connection request to the virtual IP, and dynamically constructs a database connection pool according to the database metadata. The process does not require the application to perceive information of a real database, shields differences of heterogeneous databases, realizes zero modification of configuration, and significantly reduces the workload of application deployment and operation and maintenance.

The application relates to a Kubernetes-based dynamic topology perception and intelligent traffic control system, method and device, the system comprising: a dynamic virtual IP load balancing module for dynamically scheduling the binding relationship between a virtual IP address and a backend service according to the real-time comprehensive weight of each service instance; a domain name resolution adaptive module for updating the mapping relationship between a domain name and a virtual IP address according to the scheduling result of the dynamic virtual IP load balancing module; a distributed state perception module for cooperatively perceiving and maintaining the master-slave topology state of a service cluster through a distributed consensus mechanism; and an intelligent traffic mapping module for dynamically adjusting a service endpoint selector according to the master-slave topology state maintained by the distributed state perception module. The four modules are linked together to realize an end-to-end closed loop from intelligent scheduling of an external traffic entrance to accurate mapping of internal cluster traffic, thereby guaranteeing the high availability of stateful services and realizing a second-level response of fault switching.

The present disclosure provides a communication method, device, equipment and medium for a virtual machine, and relates to technical fields such as ARM cloud, virtual machine, virtual network, physical network, communication transmission and cloud computing. The specific implementation scheme is: obtain the original sending data packet to be sent by the target virtual machine to the target public network server; modify the source address information of the original sending data packet from the virtual machine address information of the target virtual machine to the network card address information of the physical network card, and obtain a modified sending data packet; send the modified sending data packet to the target public network server through the physical network card, and receive the original receiving data packet fed back by the target public network server through the physical network card; modify the destination address information of the original receiving data packet from the network card address information to the virtual machine address information, obtain a modified receiving data packet, and send the modified receiving data packet to the target virtual machine. The present disclosure uses the network card address information of the physical network card itself to realize the virtual machine access to the public network server, so there is no need to set an independent and public virtual IP address for the virtual machine, saving the overhead cost required for the virtual machine to access the public network server.

The invention provides a domain name resolution method and device, electronic equipment and a storage medium, and the method comprises the steps: deploying a NodelocalDNS application at each node of a Kubernetes cluster, and distributing a virtual IP address; in response to the fact that Pod is dispatched to a node and requests for an IP address, a virtual Ethernet pair is created through a CNI network plug-in, an eBPF program is dynamically generated at the same time, and the program is mounted to virtual network equipment on the host side; the eBPF program monitors the network traffic sent from the Pod, and judges and processes the network traffic according to the destination address of the traffic; and after the Nodelocal DNS receives the DNS request of the Pod, performing cache check, and forwarding the request to an upstream CoreDNS for domain name resolution in response to a cache miss. According to the invention, the domain name resolution efficiency is improved, tenant isolation is realized, and the difficulty of managing the VPC network is reduced.

Embodiments of the present disclosure relate to control plane configuration. Examples relate to a system including a cluster of worker nodes communicatively connected to the control plane. The control plane includes a first control switch and a second control switch. The control switches are configured with virtual IP addresses. The IP addresses are associated with the control switches operating in active mode. The control switches communicate with the cluster of worker nodes via the virtual IP addresses. A single instance of a key-value database is deployed on one of the first and second control switches operating in active mode, and the first and second control switches are functionally coupled via a distributed block system for data synchronization.

Embodiments of the present disclosure provide a virtual machine migration method and device, equipment and storage medium, and relate to the technical field of virtual machines. The method comprises: if a migration operation of a virtual machine on a current host is detected, determining a current migration mode; processing a first virtual machine network interface according to the current migration mode to obtain a second virtual machine network interface; processing a first virtual IP address according to the current migration mode to obtain a second virtual IP address; obtaining configuration information from a preset database, and creating the second virtual machine network interface and the second virtual IP address on a target host according to the configuration information, so as to complete migration of the virtual machine from the current host to the target host. By using the technical solution, the integrity and accuracy of the migration of the network interface of the virtual machine and the virtual IP address bound thereto can be improved.

The invention provides a domain name change verification method and device, equipment, a medium and a program product, and relates to the field of financial science and technology and information security. According to the method, after an IP address of a target domain name is changed, the IP address of the target domain name in M resolution servers is updated based on the updated IP address; performing dial test processing on the target domain name based on the updated M resolution servers by adopting the plurality of virtual IP addresses to obtain a first dial test result fed back by the M resolution servers; and determining that the change of the IP address of the target domain name is completed under the condition that the server addresses fed back by the M resolution servers are consistent with the updated IP address. According to the method, a plurality of virtual IP addresses are created through load balancing equipment, so that the equipment can simulate user IPs of a plurality of regions, full verification is realized, and the verification efficiency is improved; meanwhile, M servers are verified one by one based on an isolation recovery mechanism, it is ensured that each server updates configuration synchronously, and abnormity caused by configuration delay or errors is eliminated.

An application server host may receive, via a port forwarding tunnel, a connection request that includes an indication of a client internet protocol (IP) address for a client host. The application server host may identify based at least in part on the client IP address and using a mapping maintained for a plurality of client hosts, a virtual IP address that is associated with the client IP address and a client network identifier associated with the port forwarding tunnel from which the connection request is received. The application server host may open a connection between an application server hosted by the application server host and the client host using the identified virtual IP address.

The invention provides a database access method and device. The method comprises the following steps: determining a pre-cured virtual IP address of a micro-service application; a connection request is sent to the virtual IP address, so that a database connection agent on one side of the database server returns database metadata according to the connection request; receiving database metadata; and determining a target drive type according to the database category, loading a database drive corresponding to the target drive type, and creating a database connection pool according to the database connection information by using the database drive. In the method, a micro-service application can receive database metadata which is returned by a database connection agent and comprises a database category and database connection information by sending a connection request to a virtual IP (Internet Protocol), and dynamically construct a database connection pool according to the database metadata, so that the application does not need to perceive information of a real database in the process; differences of heterogeneous databases are shielded, zero modification of configuration is realized, and the workload of application deployment operation and maintenance is remarkably reduced.

A cloud service is provided and accessible via a virtual IP address in a virtual cloud network (VCN), where the VCN is part of an overlay network. A source network virtualization device (NVD) receives a first packet destined to the virtual IP address. The source NVD determined based upon a dynamic routing gateway table, the VCN mapped to the virtual IP address. Further, the source NVD identifies based upon the virtual IP address, a substrate IP address of a destination NVD that implements a virtual network interface card (VNIC) associated with the virtual IP address and communicates the first packet from the source NVD to the destination NVD using the substrate IP address.

The application provides a high availability implementation method and system of a tenant cloud server, and a cloud data center controller. The method comprises the following steps: setting a management network address pool; wherein the management network address pool comprises no less than M management network addresses, and the management network addresses are public network IP addresses; allocating the M management network addresses in the management network address pool to M tenant cloud servers one by one; grouping the M tenant cloud servers into a cluster, and setting cluster configuration information of the cluster, wherein the cluster configuration information comprises a virtual IP address; sending the cluster configuration information to each tenant cloud server in the cluster through the management network address allocated to each tenant cloud server; downloading, by each tenant cloud server, a cluster configuration tool from an external network through the allocated management network address; and joining, by each tenant cloud server, the cluster by using the cluster configuration tool and the cluster configuration information. The application can realize high availability of the tenant cloud server.