70 results about "Virtual IP address" patented technology

The invention belongs to the technical field of computers, and relates to a network access method and device, computer equipment and a storage medium, and the method comprises the steps: receiving an access domain name input by a user in a target network environment; calling a target load balancer corresponding to the target network environment; analyzing the access domain name into a virtual I P address of the target load balancer based on a preset DNS server, and returning the virtual I P address to the user; receiving an access request sent by a user to the virtual IP address; based on the target load balancer, screening out a target server from a plurality of servers corresponding to the target network environment, and distributing the access request to the target server; based on the target server, performing identity verification on the user by using a preset identity verification strategy; and if the user passes the identity verification, performing corresponding response processing on the access request based on a preset access control strategy. According to the network access processing method provided by the invention, the security and availability of network access can be effectively improved.

Anycast addressing is utilized to support the connection of multiple application connectors fronting an application(s) to a network element and anycast routing of network traffic destined for the application(s). When an application is indicated for onboarding in a tenant's network fabric, a network controller allocates virtual and anycast addresses to the application. Allocation of anycast addresses is per domain name and port / protocol combination. Upon determining that the application is available, the application connector(s) advertises reachability of the application via the anycast address. The network controller orchestrates configuration of a domain name system entry that resolves the application name to its virtual Internet Protocol (IP) address and destination network address translation rules that translate the virtual IP address to the anycast address and the anycast address to the application's private IP address. Application network traffic can thus be forwarded to the application via any application connector that advertised the anycast address.

The embodiment of the invention provides a switching control method, device and equipment for a cloud platform management node. The method comprises the following steps: acquiring state data of a cloud platform management main node; when the state data is a fault, selecting a new cloud platform management main node from at least two groups of cloud platform management backup nodes; the virtual IP address of the original cloud platform management main node is bound with the new cloud platform management main node, and routing redirection is completed; controlling the task of the original cloud platform management main node to be switched to the new cloud platform management main node for processing; and controlling the cloud platform management main node and the cloud platform management backup node to keep data synchronization. According to the embodiment of the invention, the new master node is selected from the at least two groups of backup nodes, the selected new master node is ensured to be in a normal state and have enough resources, and new problems after switching are avoided.

The invention discloses a method for realizing point-to-point communication between nodes in a mobile cellular network. The method specifically comprises the following steps of: creating a virtual network card on each terminal device, distributing a virtual IP (Internet Protocol) address, and establishing a service gateway for grid topology management and data forwarding. Each node is connected with the service gateway through a network to form a grid topological structure, the nodes send data packets to the service gateway through the virtual network card, the service gateway searches the corresponding node connection according to the target virtual IP address of the data packets and forwards the data packets, and the target node receives the data packets and transmits the data packets to the local network protocol stack for processing through the virtual network card. The invention further provides an identity authentication mechanism based on the secret key and the certificate, and communication safety is guaranteed. The virtual private network constructed by the scheme of the invention breaks through the limitation that nodes in a cellular network only have dynamic virtual IPs and do not have public network IPs, improves the communication efficiency, reduces the energy consumption, and enhances the network topology adaptability.

In an overlay access network, a first access tunnel between a first fabric edge node and a wireless access point (AP) can be configured as active, based on the first fabric edge node being active. A second access tunnel between a second fabric edge node and the wireless AP can be configured as standby based on the second fabric edge node being standby, with the same virtual IP address attached to the first and second access tunnels. Based on an active failure, a switch to standby for the first fabric edge node and to active for the second fabric edge node is signaled to an Extended Node (EN). The EN steers traffic on the first access tunnel with the virtual IP address to the second fabric edge node, based on the switch and using a portion of the second access tunnel between the EN and the second fabric edge node.

The invention provides a public network access method and device, electronic equipment and a medium, and relates to the field of artificial intelligence and cloud computing, in particular to the technical field of network communication.The method comprises the steps that a first access initiating data packet transmitted by an access initiating end through a virtual route is received; an on-cloud virtual private network access source IP address in the first access initiation data packet is converted, a converted under-cloud intranet access source IP address is obtained, and the under-cloud intranet access source IP address is a high-availability virtual IP address; a second access initiation data packet after the first access initiation data packet is updated is obtained based on the under-cloud intranet access source IP address, the second access initiation data packet is transmitted to a public network gateway, and the public network gateway is used for converting the under-cloud intranet access source IP address in the second access initiation data packet into a public network access source IP address and transmitting the public network access source IP address to the cloud intranet access source IP address. And performing service access on the public network access target IP address carried in the second access initiation data packet based on the public network access source IP address.

The invention discloses a public network domain name shunting method and a communication system. Comprising the steps that an uplink classifier user plane function network element receives a DNS analysis request message initiated by user equipment, the message comprises a public network domain name to be analyzed, and a target IP address of the message is a first IP address; whether the public network domain name meets a DNS redirection rule is judged, if yes, the request message is sent to an intranet DNS server corresponding to the public network domain name, and a DNS analysis response message fed back by the intranet DNS server is received; and converting the analysis result from the second IP address to a virtual IP address according to a target IP address conversion rule, and sending a DNS analysis response message of which the analysis result is the virtual IP address to the user equipment. According to the method and the device, the technical problem that the common public network service cannot be normally accessed due to the fact that the same IP address is returned to two DNS analysis requests of the public network service shunted by the internal network and the common public network service by a content distribution network service provider is solved.

The embodiment of the application provides a cluster architecture control method and device, a storage medium and an electronic device, the cluster architecture control method comprises the following steps: selecting a first management node as a management node of a target node cluster from a group of candidate management nodes in the target node cluster, wherein the management node of the target node cluster is used for controlling a group of working nodes in the target node cluster, and the group of candidate management nodes and the group of working nodes are used for running containerized applications; assigning a virtual Internet Protocol (IP) address to the first management node, wherein the virtual IP address is an IP address used by an external program to access the management node of the target node cluster; in the case that the first management node fails, selecting a second management node as the management node of the target node cluster from other candidate management nodes except the first management node in the group of candidate management nodes, and assigning a virtual IP address to the second management node.

Anycast addressing is utilized to support the connection of multiple application connectors fronting an application(s) to a network element and anycast routing of network traffic destined for the application(s). When an application is indicated for onboarding in a tenant's network fabric, a network controller allocates virtual and anycast addresses to the application. Allocation of anycast addresses is per domain name and port / protocol combination. Upon determining that the application is available, the application connector(s) advertises reachability of the application via the anycast address. The network controller orchestrates configuration of a domain name system entry that resolves the application name to its virtual Internet Protocol (IP) address and destination network address translation rules that translate the virtual IP address to the anycast address and the anycast address to the application's private IP address. Application network traffic can thus be forwarded to the application via any application connector that advertised the anycast address.

Methods, systems, and apparatus for implementing a redundant DCN system over a process automation network. In one aspect, a redundant DCN system includes a primary DCN, a backup DCN, and a keep alive process configured to determine whether the primary DCN becomes unavailable, wherein in response to the primary DCN being determined as unavailable, the backup DCN is reassigned as a new primary DCN, and assumes functions previously executed by the former primary DCN. Each DCN in the redundant DCN system may have a unique virtual IP address or transfer a common virtual IP address. Virtual IP addresses may impact communications between DCNs and other devices.

The invention relates to distributed control node redundancy. Methods, systems, and apparatus for implementing a redundant DCN system over a process automation network. In one aspect, a redundant DCN system includes a primary DCN, a backup DCN, and a keep-alive procedure configured to determine whether the primary DCN becomes unavailable, where in response to the primary DCN being determined to be unavailable, the backup DCN is reassigned as a new primary DCN, and assumes a function previously performed by a previous primary DCN. Each DCN in the redundant DCN system may have a unique virtual IP address or a transfer common virtual IP address. The virtual IP address may affect communications between the DCN and other devices.

The invention discloses an MQTT server failover method, architecture, equipment and medium, a master node and a slave node communicate through a virtual routing redundancy (VRRP) protocol, and the master node periodically sends a VRRP heartbeat message to the slave node; when a host-level fault occurs and the slave node does not receive a VRRP heartbeat message of the master node within a preset timeout interval, the slave node takes over a virtual IP address and is upgraded to a master role; when a service-level fault occurs, the detection program running on the main node detects that the specified service is abnormal, and the main node actively reduces the priority of the main node and cancels the virtual IP address bound with the main node; and when detecting that the priority of the master node is lower than that of the slave node, the slave node immediately initiates election and becomes a new master node, and binds the virtual IP address to complete fault switching. By detecting the host-level fault and the service-level fault respectively, compared with single-point deployment, when the server fails, services can be continuously provided to the outside, and the continuity of services is ensured.

The present disclosure provides dynamic routing for data flows to a customer network hosted in the cloud. A plurality of compute instances may share a common virtual IP address. Each of the plurality of compute instances may advertise information to a respective network virtualization device (NVD). The information may include the IP address, cost, and / or active / standby status of the compute instance. The NVD may then provide the information to the control plane of a virtual cloud network (VCN), which may aggregate the information from the plurality of compute instances and generate a forwarding table, which may be sent to the NVDs. These techniques may allow a customer to automatically remove a compute instance whose service host has failed. These techniques may also allow a customer to add compute instances and to route data flows according to an active-standby operation, an equal cost active-active operation, or an unequal cost active-active operation.

The application provides a database access method and device. The method comprises the following steps: determining a virtual IP address pre-solidified by a micro-service application; sending a connection request to the virtual IP address, so that a database connection agent on a database server side returns database metadata according to the connection request; receiving the database metadata; determining a target driver type according to a database category, loading a database driver corresponding to the target driver type, and creating a database connection pool by using the database driver according to database connection information. In the method, the micro-service application can receive the database metadata returned by the database connection agent, which comprises a database category and database connection information, by sending a connection request to the virtual IP, and dynamically constructs a database connection pool according to the database metadata. The process does not require the application to perceive information of a real database, shields differences of heterogeneous databases, realizes zero modification of configuration, and significantly reduces the workload of application deployment and operation and maintenance.

The application relates to a Kubernetes-based dynamic topology perception and intelligent traffic control system, method and device, the system comprising: a dynamic virtual IP load balancing module for dynamically scheduling the binding relationship between a virtual IP address and a backend service according to the real-time comprehensive weight of each service instance; a domain name resolution adaptive module for updating the mapping relationship between a domain name and a virtual IP address according to the scheduling result of the dynamic virtual IP load balancing module; a distributed state perception module for cooperatively perceiving and maintaining the master-slave topology state of a service cluster through a distributed consensus mechanism; and an intelligent traffic mapping module for dynamically adjusting a service endpoint selector according to the master-slave topology state maintained by the distributed state perception module. The four modules are linked together to realize an end-to-end closed loop from intelligent scheduling of an external traffic entrance to accurate mapping of internal cluster traffic, thereby guaranteeing the high availability of stateful services and realizing a second-level response of fault switching.

Embodiments of the present disclosure relate to control plane configuration. Examples relate to a system including a cluster of worker nodes communicatively connected to the control plane. The control plane includes a first control switch and a second control switch. The control switches are configured with virtual IP addresses. The IP addresses are associated with the control switches operating in active mode. The control switches communicate with the cluster of worker nodes via the virtual IP addresses. A single instance of a key-value database is deployed on one of the first and second control switches operating in active mode, and the first and second control switches are functionally coupled via a distributed block system for data synchronization.

Embodiments of the present disclosure provide a virtual machine migration method and device, equipment and storage medium, and relate to the technical field of virtual machines. The method comprises: if a migration operation of a virtual machine on a current host is detected, determining a current migration mode; processing a first virtual machine network interface according to the current migration mode to obtain a second virtual machine network interface; processing a first virtual IP address according to the current migration mode to obtain a second virtual IP address; obtaining configuration information from a preset database, and creating the second virtual machine network interface and the second virtual IP address on a target host according to the configuration information, so as to complete migration of the virtual machine from the current host to the target host. By using the technical solution, the integrity and accuracy of the migration of the network interface of the virtual machine and the virtual IP address bound thereto can be improved.

The invention provides a domain name change verification method and device, equipment, a medium and a program product, and relates to the field of financial science and technology and information security. According to the method, after an IP address of a target domain name is changed, the IP address of the target domain name in M resolution servers is updated based on the updated IP address; performing dial test processing on the target domain name based on the updated M resolution servers by adopting the plurality of virtual IP addresses to obtain a first dial test result fed back by the M resolution servers; and determining that the change of the IP address of the target domain name is completed under the condition that the server addresses fed back by the M resolution servers are consistent with the updated IP address. According to the method, a plurality of virtual IP addresses are created through load balancing equipment, so that the equipment can simulate user IPs of a plurality of regions, full verification is realized, and the verification efficiency is improved; meanwhile, M servers are verified one by one based on an isolation recovery mechanism, it is ensured that each server updates configuration synchronously, and abnormity caused by configuration delay or errors is eliminated.

An application server host may receive, via a port forwarding tunnel, a connection request that includes an indication of a client internet protocol (IP) address for a client host. The application server host may identify based at least in part on the client IP address and using a mapping maintained for a plurality of client hosts, a virtual IP address that is associated with the client IP address and a client network identifier associated with the port forwarding tunnel from which the connection request is received. The application server host may open a connection between an application server hosted by the application server host and the client host using the identified virtual IP address.

The invention provides a database access method and device. The method comprises the following steps: determining a pre-cured virtual IP address of a micro-service application; a connection request is sent to the virtual IP address, so that a database connection agent on one side of the database server returns database metadata according to the connection request; receiving database metadata; and determining a target drive type according to the database category, loading a database drive corresponding to the target drive type, and creating a database connection pool according to the database connection information by using the database drive. In the method, a micro-service application can receive database metadata which is returned by a database connection agent and comprises a database category and database connection information by sending a connection request to a virtual IP (Internet Protocol), and dynamically construct a database connection pool according to the database metadata, so that the application does not need to perceive information of a real database in the process; differences of heterogeneous databases are shielded, zero modification of configuration is realized, and the workload of application deployment operation and maintenance is remarkably reduced.

A cloud service is provided and accessible via a virtual IP address in a virtual cloud network (VCN), where the VCN is part of an overlay network. A source network virtualization device (NVD) receives a first packet destined to the virtual IP address. The source NVD determined based upon a dynamic routing gateway table, the VCN mapped to the virtual IP address. Further, the source NVD identifies based upon the virtual IP address, a substrate IP address of a destination NVD that implements a virtual network interface card (VNIC) associated with the virtual IP address and communicates the first packet from the source NVD to the destination NVD using the substrate IP address.

The application provides a high availability implementation method and system of a tenant cloud server, and a cloud data center controller. The method comprises the following steps: setting a management network address pool; wherein the management network address pool comprises no less than M management network addresses, and the management network addresses are public network IP addresses; allocating the M management network addresses in the management network address pool to M tenant cloud servers one by one; grouping the M tenant cloud servers into a cluster, and setting cluster configuration information of the cluster, wherein the cluster configuration information comprises a virtual IP address; sending the cluster configuration information to each tenant cloud server in the cluster through the management network address allocated to each tenant cloud server; downloading, by each tenant cloud server, a cluster configuration tool from an external network through the allocated management network address; and joining, by each tenant cloud server, the cluster by using the cluster configuration tool and the cluster configuration information. The application can realize high availability of the tenant cloud server.

The disclosed embodiments disclose a VPN device communication method, apparatus, device and storage medium. The method includes: receiving an encrypted request message sent by a first client, the first request message carrying the first physical IP address and the first virtual IP address of the first client; decrypting the request message when the first client is verified; determining the second virtual IP address and the corresponding second client based on the decrypted first virtual IP address; when the second client and the first client belong to the same group and the second client is online, encrypting the request message and sending it to the second client; receiving the encrypted response message returned by the second client in response to the request message, and sending the response message to the first client. This method improves the communication security and reliability between mobile office personnel in mobile office scenarios, and greatly improves office efficiency.

When the IP address conversion device judges that the source IP address of an IP packet received by a network where the IP address conversion device is located is the IP address of a data acquisition server, the target IP address of the IP packet is changed into the real IP address of a network host, the source IP address of the IP packet is changed into the IP address of the IP address conversion device, and the IP packet is sent to the host; and when the source IP address of the IP packet is judged not to be the IP address of the data acquisition server and the source IP address of the IP packet is judged to be the host IP address of the network, the target IP address of the IP packet is changed into the IP address of the data acquisition server, the source IP address of the IP packet is changed into a virtual IP address, and the IP packet is sent to the data acquisition server.

The invention relates to a method of a network device of connecting a group of industrial tools to a plurality of controllers, and a network device performing the method. In an aspect, a method of a network device of connecting a group of industrial tools to a plurality of controllers. The method comprises assigning a single virtual IP address to be shared among the industrial tools in the group, assigning the single virtual IP address to be shared among the plurality of controllers and routing data between the industrial tools and the controllers via the assigned single virtual IP address.

The invention discloses a BFD protocol implementation method and system in an MLAG environment, and the method comprises the steps: binding a BFD session with an MLAG protocol through a host computer and a standby computer, and configuring a unique number for the BFD session; the BFD session adopts a virtual IP address to establish a session with a downlink device; when the Peerlink port is in an up state, the host machine maintains the BFD session, and the standby machine is in a passive state; when the BFD session state is changed, the host synchronizes the BFD session state to the standby machine according to the state change information through a BFD state synchronization message of the MLAG protocol; when the standby machine receives the BFD state synchronization message, the standby machine updates the corresponding BFD session state according to the BFD session number; and when the standby machine receives the BFD message, forwarding the BFD message to the host through a BFD message synchronization message of the MLAG protocol. And the link between the MLAG equipment and the downlink equipment can be monitored by using one BFD session, so that the operation burden of the equipment is reduced.

This application provides an application access method and apparatus, relating to the field of communication technology. The method is applied to a gateway device in a zero-trust network. It receives a first service message sent by a terminal device through a zero-trust client for accessing a web application; obtains a virtual IP address corresponding to the user token in the first service message, wherein the virtual IP address is allocated and issued to the gateway device by the controller in the zero-trust network after the terminal device successfully goes online; replaces the source IP address in the first service message with the virtual IP address to obtain a second service message; and forwards the second service message to the resource server of the web application.

The invention discloses an NFS (Network File System) service high-availability method, system, equipment and medium based on state detection, belongs to the technical field of information, and aims to solve the technical problem of low reliability of NFS service caused by abnormal working state of an NFS server in an NFS high-availability system. CephFS is integrated to serve as a rear-end storage system, and a main node and a standby node share the same data; at the same time, deploying NFS-Ganesha services at all server nodes of the cluster, and exporting the CephFS as an NFS through an FSAL; a keepalived service is deployed on all server nodes of the cluster for health monitoring and failover, and all the nodes share the same virtual IP address; a local loopback address mounting strategy is adopted, a shared directory exported by the server node is mounted at the server node, and the IP address of the NFS service is specified to be a local loopback address, so that the request processing capability of the server is detected.

The present application relates to the field of communication technology, and provide a kind of virtualization fusion network element internal interface message acquisition method and device, the method comprises: mirroring the internal interface message of the fusion network element, to obtain mirror message;The destination IP address of the mirror message is converted into first virtual IP address, the first virtual IP address is different from the IP address of any network element in the fusion network element;The mirror message after conversion is sent to the SDN gateway, and the first virtual IP address is used to indicate that special shunt equipment restores the first virtual IP address in the mirror message to destination IP address according to preset address mapping relationship, then the mirror message is sent to signaling monitoring system, and the address mapping relationship includes the corresponding relationship of first virtual IP address and destination IP address.The present application realizes the collection of the internal interface message of fusion network element.