WO2022063121A1 - 一种基于私有网络的网络互通方法、设备以及计算机集群 - Google Patents
一种基于私有网络的网络互通方法、设备以及计算机集群 Download PDFInfo
- Publication number
- WO2022063121A1 WO2022063121A1 PCT/CN2021/119602 CN2021119602W WO2022063121A1 WO 2022063121 A1 WO2022063121 A1 WO 2022063121A1 CN 2021119602 W CN2021119602 W CN 2021119602W WO 2022063121 A1 WO2022063121 A1 WO 2022063121A1
- Authority
- WO
- WIPO (PCT)
- Prior art keywords
- private network
- network device
- service
- ipv6 address
- private
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Ceased
Links
Images
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
- H04L41/50—Network service management, e.g. ensuring proper service fulfilment according to agreements
- H04L41/5041—Network service management, e.g. ensuring proper service fulfilment according to agreements characterised by the time relationship between creation and deployment of a service
- H04L41/5051—Service on demand, e.g. definition and deployment of services in real time
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L61/00—Network arrangements, protocols or services for addressing or naming
- H04L61/45—Network directories; Name-to-address mapping
- H04L61/4541—Directories for service discovery
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L2101/00—Indexing scheme associated with group H04L61/00
- H04L2101/60—Types of network addresses
- H04L2101/618—Details of network addresses
- H04L2101/659—Internet protocol version 6 [IPv6] addresses
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
- H04L41/08—Configuration management of networks or network elements
- H04L41/0894—Policy-based network configuration management
Definitions
- the present application relates to the field of communication technologies, and in particular, to a private network-based network interworking method, device, and computer cluster.
- the private network can only achieve one-way communication with the Internet, that is, the network devices in the private network can only access the Internet in one direction, while the devices on the Internet cannot access the private network.
- This one-way communication method has become an urgent problem to be solved in the scheme of the Internet borrowing bandwidth resources in the private network.
- the present application provides a network interworking method, device and computer cluster based on a private network, so as to realize the interconnection and interworking between the private network and other networks.
- an embodiment of the present application provides a method for network interworking based on a private network, the method can be executed by a device deployed in a public network (referred to as a public network device), and the method includes: the public network device can first start from Obtain the network service deployment license from the private network device. After obtaining the network service deployment license, you can instruct the private network device to deploy the network service, and record the IPv6 address of the private network device deploying the network service, such as the identification of the network service and the private network device. The correspondence between the IPv6 addresses. Afterwards, when receiving a service query request from the client for requesting the IPv6 address of the private network device that deploys the network service, the public network device can provide the client with the IPv6 address of the private network device that provides the network service.
- the client when the client needs a private network device to provide network services, it can first obtain the IPv6 address of the private network device from the public network device, and then realize the connection between the private network and other networks (such as the public network or other private networks).
- the interconnection and interoperability of the Internet provides the possibility for the Internet to borrow the resources of the private network.
- the network service deployment license obtained by the public network device from the private network device may be requested by the public network device from the private network device.
- the public network device may send a service deployment request to the private network device , the service deployment request is used to request the deployment of the network service; after that, the public network device can receive the service deployment response from the private network device, and the service deployment response is used to agree to deploy the network service.
- the public network device can request the network service deployment license from the private network device, so that the network service can be deployed subsequently.
- the service deployment request may also indicate a first preferential policy, and the first preferential policy is fee preferential information provided to the private network device for the private network device, and the first preferential policy is not limited here.
- the number may be one or multiple, so that the private network device can select from multiple first preferential policies.
- the public network device may provide some preferential policies, so that the private network device can provide the network service deployment license.
- the network service deployment license obtained by the public network device from the private network device may also be actively provided by the private network device.
- the public network device can receive the resource occupation license of the private network device, and the resource Occupation permission is used to indicate that resources of private network devices are allowed to be used to deploy network services.
- the private network device can actively request the deployment of network services, which improves the initiative of the private network device, and is suitable for other scenarios.
- the resource occupation license further includes a second preferential policy, where the second preferential policy is fee preferential information proposed by the private network device for the private network device.
- the number of the second preferential policies is not limited here, and may be one or multiple, so that the public network device can select from multiple second preferential policies.
- the private network device when the private network device can actively request the deployment of network services, it can also propose its own demand for fee concessions.
- the public network device may also instruct the private network device to update the network service.
- the public network device can update the network service in time to ensure the validity of the network service deployed in the private network device.
- the public network device may also receive the updated IPv6 address of the private network device from the private network device, and update the locally stored IPv6 address of the private network device.
- the public network device can obtain the updated IPv6 address, so as to ensure that the latest and most accurate IPv6 address of the private network device can always be stored locally, and to ensure the validity of the IPv6 address provided to the client.
- the embodiments of the present application provide a method for network interworking based on a private network.
- the method can be executed by a private network device in a private network.
- the private network device can provide network services to devices in the public network. Deployment license; after that, under the instruction of devices in the public network, deploy network services, and can also send the IPv6 addresses of private network devices to devices in the public network; after deploying network services, private network devices can provide clients with Network service, that is, a private network device can receive a service request from a client, and the service request is used to request a network service; after that, a service response is fed back according to the service request.
- network services can be deployed in the private network device, and by providing the IPv6 address of the private network device to the public network device, the client can access the private network device to obtain network services, and realize the private network device and other network devices. of interconnection.
- the license when the private network device deploys the license to the network service provided by the device in the public network, the license may be provided at the request of the public network device.
- a private network device can receive a service deployment request from a device in the public network, and the service deployment request is used to request the deployment of network services; then, it sends a service deployment response to the device in the public network, and the service deployment response is used to agree to deploy network services. .
- the private network device provides the network service deployment license at the request of the public network device, so that the network service can be deployed subsequently.
- the service deployment request is further used to indicate a first preferential policy, where the first preferential policy is fee preferential information provided to the private network device for the private network device.
- the number of the first preferential policies is not limited here, it may be one or multiple.
- the private network device selects from the multiple first preferential policies, and responds in the service deployment Carry the selected first preferential strategy in the .
- the private network device can obtain a corresponding preferential policy when agreeing to deploy the network service, so that the scheme of deploying the network service in the private network device is more feasible.
- the network service deployment permission provided by the private network device to the device on the public network may also be proactively proposed by the private network device.
- the private network device may send a resource occupation permission to the device on the public network.
- the resource occupation permission is used to indicate that resources of private network devices are allowed to be used to deploy network services.
- the private network device can actively request the deployment of network services, which improves the initiative of the private network device, and is suitable for other scenarios.
- the resource occupation license further includes a second preferential policy, where the second preferential policy is fee preferential information proposed by the private network device for the private network device.
- the number of the second preferential policies is not limited here, and may be one or multiple, so that the public network device can select from multiple second preferential policies.
- the private network device when the private network device can actively request the deployment of network services, it can also take the initiative to ask for a preferential fee to obtain corresponding compensation.
- the private network device may also update the network service under the instruction of the device in the public network.
- the timely update of the network service can ensure the validity of the network service deployed in the private network device.
- the private network device may send the updated IPv6 address to the device in the public network when its own IPv6 address is updated.
- the private network device can provide the updated IPv6 address in time, so as to ensure that the public network device can obtain the latest and most accurate IPv6 address of the private network device.
- an embodiment of the present application provides a method for network interworking based on a private network.
- the method can be executed by a device deployed in a public network (referred to as a public network device).
- the method includes: the public network device can first start from the private network. Obtain the IPv6 address exposure license from the network device. After obtaining the IPv6 address exposure license, you can obtain the IPv6 address of the private network device and the identity of the private network device from the private network device where the network service is deployed. After that, when receiving an address query request from the client for requesting the IPv6 address of the private network device on which the network service is deployed, the private network device can provide the client with a private network service according to the identity of the private network device. The IPv6 address of the network device, wherein the address query request includes the identifier of the private network device.
- the client when the client needs to access the private network device, it can first obtain the IPv6 address of the private network device from the public network device, and then can communicate with the private network device based on the IPv6 address of the private network device. Interconnection between private networks and other networks (such as public networks or other private networks).
- the IPv6 address exposure permission obtained by the public network device from the private network device may be requested by the public network device from the private network device.
- the public network device may send an address acquisition request to the private network device.
- the address acquisition request is used to request the IPv6 address of the private network device; after that, the public network device can receive the address acquisition response from the private network device, the address acquisition response is used to agree to expose the IPv6 address, and the address acquisition response includes the IPv6 address and the private network device. 's identification.
- the public network device can request the IPv6 address from the private network device, so that the IPv6 address can be subsequently provided to the client that needs to access the private network device.
- the address acquisition request may also indicate a first preferential policy, and the first preferential policy is fee preferential information provided to the private network device for the private network device, and the first preferential policy is not limited here.
- the number may be one or multiple, so that the private network device can select from multiple first preferential policies.
- the public network device in order to deploy the network service in the private network device and expose the IPv6 address of the private network device, the public network device can provide some preferential policies, so that the private network device can provide IPv6 address exposure permission.
- the IPv6 address exposure permission obtained by the public network device from the private network device may also be actively provided by the private network device, and the public network device may receive the private network device's IPv6 address and the private network device from the private network device.
- the identity of the private network device that is, the private network device provides the IPv6 address exposure permission by actively sending the IPv6 address of the private network device and the identity of the private network device.
- the public network device actively provides the IPv6 address exposure license, which improves the initiative of the private network device and is suitable for other scenarios.
- the public device when the public device is actively providing the IPv6 address exposure permission, it may also send a second preferential policy, where the second preferential policy is fee preferential information proposed by the private network device for the private network device.
- the number of the second preferential policies is not limited here, and may be one or multiple, so that the public network device can select from multiple second preferential policies.
- the private network device can actively request the deployment of network services and expose the IPv6 address, and can also put forward a demand for fee concessions.
- the public network device may also receive the updated IPv6 address or identifier of the private network device from the private network device, and update the locally stored IPv6 address or identifier of the private network device.
- the public network device can obtain the updated IPv6 address or identifier, so as to ensure that the latest and most accurate IPv6 address or identifier of the private network device can always be stored locally, so that the real and effective IPv6 address or identifier can be provided to the client. IPv6 address.
- an embodiment of the present application provides a method for network interworking based on a private network.
- the method can be executed by a private network device in a private network.
- the private network device can provide an IPv6 address to a device in the public network. Exposure permission; after that, send the IPv6 address of the private network device and the identity of the private network device to the device on the public network.
- the private network device may perform data interaction with the client, for example, may receive a data message from the client, and the destination address of the data message is the IPv6 address of the private network device.
- the private network device provides the public network device with the IPv6 address of the private network device, so that the client can access the private network device for data interaction, and realize the interconnection between the private network device and other devices in the network.
- the network service deployment license provided by the private network device to the device on the public network may be provided at the request of the public network device.
- the private network device may receive information from the device on the public network.
- the address acquisition request is used to request the IPv6 address of the private network device, and the address acquisition request is also used to indicate the situation to be faced after the IPv6 address is exposed; after the user confirms the situation that the private network device needs to face after the IPv6 address is exposed,
- the address acquisition response is sent from the device in the public network, and the address acquisition response is used to agree to expose the IPv6 address.
- the address acquisition response includes the IPv6 address and the identity of the private network device.
- the private network device provides the Pv6 address at the request of the public network device, so that the subsequent public network device can provide the Pv6 address to the client.
- the network service deployment license provided by the private network device to the device in the public network may also be actively provided by the private network device.
- the device sends the IPv6 address and the ID of the private network device.
- the private network device can actively request to expose the Pv6 address, which improves the initiative of the private network device and is suitable for other scenarios.
- the private network device may send the updated IPv6 address or identifier to the device in the public network when its own IPv6 address or identifier is updated.
- the private network device can provide the updated IPv6 address or identifier in time, so as to ensure that the public network device obtains the latest and most accurate IPv6 address or identifier of the private network device in time.
- the embodiment of the present application further provides a public network device, and the beneficial effects can be referred to the description of the first aspect and will not be repeated here.
- the apparatus has the function of implementing the behavior in the method example of the first aspect above.
- the functions can be implemented by hardware, or can be implemented by hardware executing corresponding software.
- the hardware or software includes one or more modules corresponding to the above functions.
- the structure of the apparatus includes a node management module, a service management module, and an address resolution module, and these modules can perform the corresponding functions in the method example of the first aspect. For details, refer to the detailed description in the method example, It is not repeated here.
- the embodiment of the present application further provides a private network device, and the beneficial effects can be referred to the description of the second aspect and will not be repeated here.
- the apparatus has the function of implementing the behavior in the method example of the second aspect above.
- the functions can be implemented by hardware, or can be implemented by hardware executing corresponding software.
- the hardware or software includes one or more modules corresponding to the above functions.
- the structure of the apparatus includes a node proxy module and a service proxy module, and these modules can perform the corresponding functions in the method example of the second aspect. For details, please refer to the detailed description in the method example, which is not described here. Repeat.
- the embodiment of the present application further provides a public network device, and the beneficial effects can be referred to the description of the third aspect and will not be repeated here.
- the apparatus has the function of implementing the behavior in the method example of the third aspect above.
- the functions can be implemented by hardware, or can be implemented by hardware executing corresponding software.
- the hardware or software includes one or more modules corresponding to the above functions.
- the structure of the apparatus includes a node management module and an address resolution module, and these modules can perform the corresponding functions in the method example of the third aspect. For details, please refer to the detailed description in the method example, which is not described here. Repeat.
- the embodiment of the present application further provides a private network device, and the beneficial effects can be referred to the description of the fourth aspect and will not be repeated here.
- the apparatus has the function of implementing the behavior in the method example of the fourth aspect above.
- the functions can be implemented by hardware, or can be implemented by hardware executing corresponding software.
- the hardware or software includes one or more modules corresponding to the above functions.
- the structure of the apparatus includes node proxy modules, and these modules can perform the corresponding functions in the method example of the fourth aspect. For details, refer to the detailed description in the method example, which will not be repeated here.
- an embodiment of the present application further provides a computing device, where the computing device includes a processor and a memory, and may also include a communication interface.
- the processor executes the program instructions in the memory to execute the method provided by the first aspect or any possible implementation manner of the first aspect.
- the memory is coupled to the processor and stores necessary program instructions and data.
- the communication interface is used to communicate with other devices, such as receiving IPv6 addresses of private network devices, service query requests, and sending service query responses.
- an embodiment of the present application further provides a computing device, where the computing device includes a processor and a memory, and may also include a communication interface.
- the computing device includes a processor and a memory, and may also include a communication interface.
- Optional also includes a display.
- the processor executes the program instructions in the memory to execute the method provided by the second aspect or any possible implementation manner of the second aspect.
- the memory is coupled to the processor with necessary program instructions and data.
- the communication interface is used to communicate with other devices, such as sending IPv6 addresses, receiving service requests, and feeding back service responses.
- the display screen is used for displaying information to the user under the triggering of the processor.
- an embodiment of the present application further provides a computing device, where the computing device includes a processor and a memory, and may also include a communication interface.
- the processor executes the program instructions in the memory to execute the third aspect or the method provided by any possible implementation manner of the third aspect.
- the memory is coupled to the processor and stores necessary program instructions and data.
- the communication interface is used to communicate with other devices, such as receiving IPv6 addresses or identifiers of private network devices, address query requests, and sending address query responses.
- an embodiment of the present application further provides a computing device, where the computing device includes a processor and a memory, and may also include a communication interface.
- the computing device includes a processor and a memory, and may also include a communication interface.
- Optional also includes a display.
- the processor executes the program instructions in the memory to execute the method provided by the fourth aspect or any possible implementation manner of the fourth aspect.
- the memory is coupled to the processor with necessary program instructions and data.
- the communication interface is used to communicate with other devices, such as sending IPv6 addresses or identifiers, receiving data messages, and the like.
- the display screen is used for displaying information to the user under the triggering of the processor.
- the present application provides a computing device cluster, where the computing device cluster includes at least one computing device.
- Each computing device includes memory and a processor.
- a processor of at least one computing device is configured to access code in the memory to perform the method provided by any of the preceding aspects or any one of the possible implementations of any of the aspects.
- the present application provides a non-transitory readable storage medium.
- the non-transitory readable storage medium When the non-transitory readable storage medium is executed by a computing device, the computing device executes the foregoing first aspect or the first aspect. Methods provided in any possible implementation.
- a program is stored in the storage medium.
- the storage medium includes, but is not limited to, volatile memory, such as random access memory, non-volatile memory, such as flash memory, hard disk drive (HDD), solid state drive (solid state drive, SSD).
- the present application provides a computer program product, the computer program product comprising computer instructions, when executed by a computing device, the computing device executes the foregoing first aspect or any possible implementation manner of the first aspect method provided in.
- the computer program product can be a software installation package, which can be downloaded and executed on a computing device if the method provided in any of the foregoing aspects or any possible implementation manner of any aspect needs to be used program product.
- the present application also provides a computer chip, the chip is connected to a memory, the chip is used to read and execute a software program stored in the memory, and execute any of the foregoing aspects or any possible implementation manner of any aspect provided in the Methods.
- FIG. 1 is a schematic diagram of the architecture of a system provided by the application.
- FIG. 2 is a schematic diagram of a private network-based network interworking method provided by the present application.
- 3A to 3C are schematic diagrams of a display interface presented to a user provided by the present application.
- FIGS. 4A to 4C are schematic diagrams of a display interface presented to a user according to the present application.
- FIG. 5 is a schematic diagram of a private network-based network interworking method provided by the present application.
- FIG. 6 is a schematic structural diagram of a computer cluster provided by the application.
- FIG. 7 is a schematic structural diagram of a computer cluster provided by the present application.
- a private network refers to a network that realizes interconnection between devices within a specific range.
- a private network is not a public network, but is used by individuals or organizational components within a specific range.
- the resources in the private network (such as storage resources, bandwidth resources, etc.) etc.) and devices in private networks are owned by individuals or organizations.
- a network device in the private network (referred to as a private network device for short) is configured with a network address, and the network device may be regularly allocated by an operator to the private network device. Based on this network address, private network devices can access devices on the public network.
- the public network can also be called a wide area network. Devices in the wide area network and devices in the Internet can access each other, and this access is unrestricted.
- the system architecture may include Network devices deployed in the private network 100 (the network devices may be referred to as private network devices) and devices deployed in the public network 200 (devices in the public network 200 may also be referred to as public network devices), the embodiments of the present application do not
- the number of private networks 100 and the number of home network devices in the private network 100 are not limited.
- FIG. 1 only three private networks 100 are exemplarily drawn. In order to distinguish different private networks 100 , the three private networks 100 are named as private network 100A, private network 100B, and private network 100C, respectively.
- the private network 100 may include one or more private network devices.
- the embodiments of the present application do not limit the type of private network devices.
- Private network devices include but are not limited to: modems, routers, notebooks, computers, and the like.
- a private network device in the private network 100 can realize the connection with the public network and the functions of providing network services to the outside.
- the function of connecting to the public network and the function of providing network services to the outside world may be deployed in multiple private network devices of the private network 100 and completed by the cooperation of multiple private network devices.
- the private network device in the private network 100A is identified as the private network device 110
- the private network device in the private network 100B is identified as the private network device 120
- the private network device in the private network 100C is identified as the private network device 130 .
- the private network device 110 includes a node proxy module 111 and a service proxy module 112 .
- the node proxy module 111 is used to connect the private network device 110 to the public network 200, for example, it can actively provide the Internet protocol version 6 of the private network device 110 to the public network device 210 in the public network 200. 6. IPv6) address, the IPv6 address of the private network device 110 may also be provided at the request of the public network device 210 . It is also possible to receive access requests from network devices in other networks (such as private network devices in other private networks 100 or other public network devices), and feedback access responses and the like.
- the service proxy module 112 may, at the request of the public network device 210, deploy the network service in the private network device 110 under the condition that the user agrees to the request of the public network device 210.
- the service proxy module 112 can also manage the network services deployed on the private network device 110, including but not limited to: the operation and update of network services, etc., and is also used to provide network services to service objects of network services.
- the service object ie, the object receiving the network service
- the public network may include one or more public network devices 210.
- the embodiments of this application do not limit the device form of the public network device 210.
- the public network device 210 may be a server, a virtual machine in a server, or A software appliance deployed on a server or virtual machine.
- a public network device 210 in the public network is used as an example for description.
- the public network device 210 can be connected to a private network device in the private network 100 and manage the private network device 110 connected thereto.
- the public network device 210 may deploy the network service on the private network device after obtaining the network service deployment license of the private network device; and query the client for the IPv6 address of the private network device where the network service is located, and ask the client Provide the IPv6 address of the private network device.
- After obtaining the IPv6 address exposure permission of the private network device obtain the IPv6 address of the private network device, and feed back the IPv6 address of the private network device when the client needs to query the IPv6 address of the private network device.
- the functions of the above-mentioned public network device 210 may also be deployed in multiple public network devices 210 in the public network, and implemented by a plurality of public network devices 210 in cooperation.
- the public network device 210 includes a node management module 211 , an address resolution module 212 , and a service management module 213 .
- the node management module 211 is used to manage the private network device 110 connected to the public network device 210, including but not limited to: obtaining the IPv6 address exposure license of the private network device, the identity and IPv6 address of the private network device 110, storing the The correspondence between the identifier of the private network device 110 and the IPv6 address, and the correspondence between the identifier of the private network device 110 and the IPv6 address is updated.
- the address resolution module 212 is configured to receive an address query request from other devices (such as other public network devices and private network devices in the private network 100 ), where the address query request is used to request the IPv6 address of the private network device, and the address query request contains Including the identity of the private network device.
- the address resolution module 212 may determine the IPv6 address of the private network device according to the identification of the private network device and the corresponding relationship between the IPv6 addresses, and feed back an address query response to other devices, where the address query response includes the IPv6 address of the private network device.
- the service management module 213 is used to receive the program of the network service, after obtaining the network service deployment license from the private network device, deploy the program of the network service on one or more private network devices connected to the public network device 210, Record the IPv6 address of the private device where the network service is deployed.
- the server management module 123 can also manage the programs of network services deployed on the one or more private network devices. For example, updating a program of a network service on the one or more private network devices.
- the address resolution module 212 is further configured to receive service query requests from other devices (eg, other public network devices, private network devices in the private network 100 ), where the service query request is used to request the IPv6 address of the private network device providing network services.
- the address resolution module 122 may determine the IPv6 address of the private network device where the network service is deployed, and feed back a service query response to other devices, where the service query response includes the IPv6 address of the private network device.
- the method includes two parts, one is a method for data interaction between the private network device 110 and other devices outside the private network 100 , see steps 201 to 206 , and the other is the private network 100 deploying network services and providing network For the service method, see steps 206 to 213:
- Step 201 the node proxy module 111 sends a registration request to the node management module 211 , the registration request includes the identification of the private network device 110 and the IPv6 address of the private network device 110 , and the registration request is used to request to register in the public network device 210 .
- the node proxy module 111 only sends the identity of the private network device 110 and the IPv6 address of the private network device 110 by sending a registration request.
- the node proxy module 111 can also send the network device 110 by other message carriers.
- the identifier of the private network device 110 and the IPv6 address of the private network device 110, any method capable of sending the identifier of the private network device 110 and the IPv6 address of the private network device 110 is applicable to the embodiments of the present application.
- the identifier of the private network device 110 is information that can uniquely identify the private network device 110.
- the embodiment of this application does not limit the type of the identifier of the private network device 110.
- the identifier of the private network device 110 may be the private network 100 or the public network device 110.
- the label pre-configured for the private network device 110 may also be the device number of the private network device 110, or may be the public network 200 (such as a device in the public network) or the operator according to preset constraint rules. and generating method, the identifier assigned to the private network device 110 . Any information that can uniquely identify the private network device 110 can be used as the identifier of the private network device 110 .
- This embodiment of the present application does not limit the timing for the node proxy module 111 to perform step 201.
- the node proxy module 111 can directly execute step 201; for example, the node proxy module 111 can also determine the need to communicate with After the public network device 210 or other private network devices in the private network 100 communicate, step 201 is performed; for another example, the node proxy module 111 may also be under the instruction of the public network 200 (such as an instruction issued by the public network device 210 ).
- the node proxy module 111 may also be triggered by the user, such as the user triggers the process of starting the registration to the public network device 210 , goes to step 201 .
- the node proxy module 110 may first provide the IPv6 address exposure permission, that is, The node proxy module 110 needs to allow exposure of its own IPv6 address first, and the IPv6 address exposure permission can be provided by the node proxy module 111 voluntarily, or provided at the request of the public network device 210 .
- the node agent module 111 actively provides the IPv6 address exposure permission.
- the node agent module 111 determines that it needs to communicate with other private networks or public networks other than the private network 110A under the instruction of the user.
- the private network device 110 may provide the user with the option of communicating with other private networks or public networks other than the private network 110A.
- the private network device 110 may ask the user whether he needs to communicate with the user through the display interface shown in FIG. 3A . To communicate with other private networks or public networks other than the private network 110A, after the user clicks "Yes", it is determined that communication with other private networks or public networks other than the private network 110A is required.
- the node proxy device 111 can also remind the user whether it is determined that the IPv6 address of the private network device 110 needs to be exposed, and the situation faced by exposing the IPv6 address of the private network device 110, such as the possibility of being attacked, through the display interface as shown in FIG. 3B . Performance will increase, resources may be occupied or consumed, etc. After the user clicks "Confirm", it is determined that communication with other private networks or public networks other than the private network 110A is required, and the IPv6 address of the private network device 110 can be exposed.
- the premise of the communication is that the opposite end of the communication needs to know the IPv6 address of the private network device 110 .
- the node proxy module 110 may send a registration request or the identity of the private network device 110 and the IPv6 address of the private network device 110 to the public network device 210 after determining that it needs to communicate with other private networks or public networks other than the private network 110A .
- the IPv6 address exposure permission can be explicit information, such as indication information 1, which indicates that the IPv6 address of the private network device 110 is agreed to be exposed.
- the node proxy module 111 can send the public network device 210 to the public network device 210 under the instruction of the user.
- the indication information 1 sends the identification of the private network device 110 and the IPv6 address of the private network device 110 when the indication information 1 is sent or after the indication information 1 is sent, and the indication information 1 may also be carried in the registration request.
- the IPv6 address exposure permission may be implicit information, for example, as long as the public network device 210 receives a registration request, or receives the identity of the private network device 110 and the IPv6 address of the private network device 110, it indicates that the private network device 210 agrees to expose
- the IPv6 address exposure permission that is, the identity of the private network device 110 and the IPv6 address of the private network device 110 can implicitly indicate the IPv6 address exposure permission.
- the node agent module 111 When the node agent module 111 actively provides the IPv6 address exposure license, it can also provide a preferential policy, the preferential policy is the fee preferential information for the private network device, such as fee discount or fee reduction, etc. For the selected preferential policy, after detecting the user's selection, the node agent module 111 may send the preferential policy selected by the user to the public network device 210 .
- the node proxy module 111 provides the IPv6 address exposure permission at the request of the public network device 210 .
- the public network device 210 may send an address acquisition request to the node proxy module 111 for requesting the IPv6 address of the private network device, and the address acquisition request may also indicate the situation to be faced after the IPv6 address is exposed.
- the node proxy module 111 can present a display interface as shown in FIG. 3C to the user, and inform the user through the display interface that the public network device requests the IPv6 address of the private network device and that the IPv6 address needs to be exposed after the IPv6 address is exposed.
- the node agent module 111 determines that the user agrees to provide the IPv6 address of the private network device, and sends a registration request to the public network device 210 or carries the identity of the private network device 110 and the private network device 110. The address of the IPv6 address gets the response.
- the address acquisition request can also indicate that the preferential policy for exposing the IPv6 address is agreed.
- the node agent module 111 page can display the preferential policy to the user through the display interface. If there are multiple preferential policies, the user can also select the preferential policy. The preferential policy selected by the user Can be carried in the address acquisition response.
- IPv6 address exposure permission please refer to the foregoing content, which will not be repeated here.
- the address acquisition request may be a request sent by the public network device 210 to the node proxy module 111 alone, or may be a public network
- the address acquisition information pushed by the device 210 to the node agent module 111 periodically or irregularly, the address acquisition information can be displayed on the private network device, and the user can view the information and confirm the information to provide the IPv6 address exposure permission.
- Step 202 After receiving the registration request, the node management module 211 can save the identity of the private network device 110 and the IPv6 address of the private network device 110, and establish and save the identity of the private network device 110 and the IPv6 address of the private network device 110. Correspondence between.
- the node management module 211 can receive a registration request sent by any private network device connected to the public network device 210, save the identity of each private network device and the IPv6 address of the private network device, and establish and save the identity of each private network device and Correspondence between IPv6 addresses of private network devices.
- the node proxy module 111 can also send the update request to the node management module 211 when the identity of the private network device 110 or the IPv6 address of the private network device 110 is updated.
- the update request may carry the updated identity of the private network device 110 or the IPv6 address of the private network device 110 .
- the node management module 211 can use the updated identity of the private network device 110 or the IPv6 address of the private network device 110 carried in the update request to update the stored identity of the private network device 110 or the private network device 110 and update the correspondence between the identity of the private network device 110 and the IPv6 address of the private network device 110.
- the private network device 110 is registered in the public network device 210, and the public network device 210 stores the correspondence between the identity of the private network device 110 and the IPv6 address of the private network device 110,
- the method for accessing the private network device 110 will be described by taking an example that the device accessing the private network device 110 is the first client, referring to steps 203 to 206 .
- the first client may be a public network device 210 , or may be a private network device in other private networks 100 .
- Step 203 The first client sends an address query request to the address resolution module 212, where the address query request is used to request to query the IPv6 address of the private network device 110, and the address query request includes the identifier of the private home address.
- the first client When the first client needs to access the private network device 110, for example, when the first client needs to request data from the private network device 110, or the first client needs to send data to the private network device 110, the first client needs to obtain the private network device 110 first.
- the IPv6 address of the network device 110 Since the IPv6 address of the private network device 110 may change, the first client can first query the IPv6 address of the private network device 110, that is, initiate an address query request to the address resolution module 212, so as to be able to access the private network correctly later device 110 .
- This embodiment of the present application does not limit the manner in which the first client obtains the identity of the private network device 110.
- the identity of the private network device is obtained by the first client through the query service, or the first client can pre- The identity of the private network device 110 is stored.
- Step 204 After receiving the address query request, the address resolution module 212 determines the IPv6 address of the private network device 110 based on the correspondence between the identity of the private network device and the IPv6 address of the private network device saved by the node management module 211 .
- the address resolution module 212 can directly determine the IPv6 address of the private network device 110 based on the correspondence between the identity of the private network device and the IPv6 address of the private network device saved by the node management module 211;
- the parsing module 212 may also verify the first client first, such as verifying the identity of the first client and verifying whether the first client has the authority to query the private network device 110 .
- the IPv6 address of the private network device 110 is determined based on the correspondence between the identifier of the private network device and the IPv6 address of the private network device saved by the node management module 211 .
- the method by which the address resolution module 212 verifies the first client is not limited here, and one of them is listed below:
- the address query request may carry the identity information of the first client, and the identity information of the first client may be part or all of the following information: the identity of the first client, the network to which the first client belongs (such as the private network 100 to which it belongs or the network to which the first client belongs). public network) information.
- the address resolution module 212 verifies the first client according to the identity information of the first client. For example, the address resolution module 212 can determine whether the identifier of the first client belongs to the identifier set, and the identifier set is allowed to access the private network device 110 If the identification of the first client belongs to the identification set, the verification passes, otherwise the verification fails; for another example, the address resolution module 212 can determine whether the network to which the first client belongs is a device that allows access to the private network 110, if the network to which the first client belongs is a network that allows access to the private network device 110, the verification passes, otherwise the verification fails.
- the address resolution module 212 may reject the address query request, such as feeding back a rejection query response.
- the address resolution module 212 may perform step 205 after querying the IPv6 address of the private network device 110 .
- Step 205 The address resolution module 212 sends an address query response to the first client, where the address query response includes the IPv6 address of the private network device 110.
- Step 206 the first client accesses the private network device 110 based on the IPv6 address of the private network device 110 .
- the first client When the first client needs to request data from the private network device 110, the first client can send a data request to the private network device 110, the data request is used to request data from the private network device 110, and the destination address of the data request is the The IPv6 address of the private network device 110.
- the first client When the first client needs to send data to the private network device 110, the first client can send a data transmission message to the private network device 110, and the data transmission message is used to transmit data to the private network device 110.
- the purpose of the data transmission message is The address is the IPv6 address of the private network device 110 .
- steps 201 to 206 devices other than the private network 100A can interact with the private network device 110 in the private network 100A.
- the private network 100 also A network service may be deployed to provide network services to the public network device 210 or other private network 100 (eg, private network devices in other private networks 100 ).
- the second client is used to publish network services to the public network device 210, and the third client requests network services as an example for illustration.
- the second client and the third client may be public network devices.
- 210 may also be a private network device in other private network 100 .
- the first client, the second client, and the third client may be the same client, or may be different clients.
- Step 207 The second client sends a service deployment request to the service management module 213, where the service deployment request is used to request to deploy a network service, and the service deployment request includes a program of the network service.
- the number of network service programs included in the service deployment request is not limited here, and may be one network service program or multiple network service programs.
- Step 208 After receiving the first service deployment request, the service management module 213 determines a private network device capable of deploying the network service.
- This embodiment of the present application does not limit the number of the private network device, which may be one or multiple.
- the determined private network device is the private network device 110 as an example for description.
- the service management module 213 determines the private network device 110 capable of deploying the network service, it can determine according to the idle resources of each private network device connected to the public network device 210, such as the idle bandwidth of the private network device, idle virtual machines, etc.
- the private network device on which the network service needs to be deployed For example, the service management module 213 may preferentially select the private network device 110 with the most idle resources as the private network device capable of deploying the network service.
- the service management module 213 determines the private network device 110 that can deploy the network service, it can also be based on the performance of each private network device 110 connected to the public network device 210. For example, the service management module 213 can be based on the bandwidth ( Uplink bandwidth and downlink bandwidth), CPU, memory, disk and other indicators and bandwidth (uplink bandwidth and downlink bandwidth), CPU, memory, and the current state of the disk determine the performance of private network devices. Bandwidth (upstream bandwidth and downstream bandwidth), CPU, memory, disk and other indicators and bandwidth (upstream bandwidth and downstream bandwidth), the current status of the CPU, memory, and disk can be reported by the private network device 110 to the service management module of. For example, the service management module 213 may preferentially select the private network device 110 with the best performance as the private network device capable of deploying the network service.
- the service management module 213 may also determine multiple private network devices, that is, the same network service is deployed in the multiple private network devices.
- the above-mentioned method may be used to determine the private network device for deploying each network service, and the private network device determined by the service management module 213 may be one , and may also be multiple, that is, the home private device may deploy some or all of the multiple network services.
- the service management module 213 can also disassemble the network service, and disassemble the network service into multiple network sub-services, that is, the service management module 213 can disassemble the program of the network service into multiple network sub-services.
- the program of the network subservice can also disassemble the network service, and disassemble the network service into multiple network sub-services.
- the network service is a speech recognition service, and the speech recognition service can be divided into three network sub-services: speech noise reduction, background sound removal, and speech to text.
- the network service is an image-based target recognition service, and the image-based target recognition service can be divided into three network sub-services: extracting feature images, selecting candidate targets based on feature images, and identifying targets from candidate targets.
- the service management module 213 determines the private network device that can deploy the network service, it can determine the private network device that can deploy each network sub-service, and the private network device determined by the service management module 213 can be one or multiple. That is, the home private device may deploy some or all of the plurality of network sub-services.
- the service management module 213 may establish and save the correspondence between the identifier of the network service and the identifier of the private network device 110 . If the network service is deployed in multiple private network devices (for example, the network service is disassembled into multiple network sub-services, and the multiple network sub-services are deployed in multiple private network devices), the service management module 213 can save the network service The correspondence between the identifiers of the services and the identifiers of the plurality of private network devices 110 .
- the embodiment of the present application does not limit the specific type of the identification of the network service.
- the identification of the network service may be an identification of an application program interface connecting to the network service, or the name of the network service. Anything that can identify the network service
- the information of the network service is applicable to the embodiments of the present application.
- the service management module 213 further disassembles the network service, after the service management module 213 determines the private network device that can deploy each network sub-service, it can also establish and save the identity of the network sub-service and the private network device. Correspondence between identities.
- the identifier of the network sub-service may be configured by the service management module 213 by itself, for example, may be configured based on the identifier of the network service.
- the identifier of the network service is AAA
- the network service is disassembled into three network sub-services
- the service management module 213 can configure the identifiers of the network sub-services to be AAA-1, AAA-2 and AAA-3 respectively.
- the service management module 213 can also generate the corresponding relationship between the identification of the network service and the IPv6 address of the private network device. If there is a further dismantling operation for the network service, the service management module 213 can also Generate the corresponding relationship between the identifier of the network sub-service and the IPv6 address of the private network device.
- the public network device 210 can store the following correspondences: the correspondence between the identifier of the private network device and the IPv6 address of the private network device, the identifier of the network service and the IPv6 address of the private network device.
- the public network device 210 can also save the corresponding relationship between the identifier of the network sub-service and the IPv6 address of the private network device, or only save the identifier of the private network device. and the correspondence between the IPv6 addresses of the private network devices and the correspondence between the identifiers of the network sub-services and the IPv6 addresses of the private network devices.
- Step 209 The service management module 213 sends a service deployment instruction to the private network device 110, where the service deployment instruction includes the program of the network service.
- the service management module 213 may also obtain the network service deployment license of the private network device 110 in advance, and several ways of obtaining the network service deployment license are listed below:
- the private network device 110 can sign an agreement in advance, the agreement agrees to deploy network services in the private network device 110, and the information of the agreement signed by the private network device 110 can be pre-saved in the public network device 210, service management Through the protocol, the module 210 can determine that the private network device 110 agrees to deploy the network service, that is, obtains the network service deployment license of the private network device 110 .
- Manner 2 The private network device 110 (the service proxy module 212 ) actively provides the network service deployment license.
- the service proxy module 212 determines, under the user's instruction, that the user is allowed to occupy the resources of the private network device 110 to deploy the network service.
- the private network device 110 may provide the user with options for deploying network services.
- the private network device 110 may ask the user whether to deploy the network service through the display interface shown in FIG. 4A, and allow the request after agreeing to deploy the network service.
- the preferential policy may be fee preferential information for private equipment, such as rental cost reduction, rental discount, service fee discount, and the like.
- the node proxy device 111 can also remind the user whether to decide to deploy the network service and the situation after deploying the network service, such as resources may be occupied or consumed, through the display interface as shown in FIG. 4B .
- the resource occupation permission is sent to the public network device, and the preferential policy selected by the user can also be sent.
- the resource occupation permission indicates that the resources of the private network device are allowed to be occupied to deploy network services.
- the resource occupation permission is understandable Another manifestation of deploying a license for a web service.
- the resource occupation permission and the network service deployment permission can be explicit information, such as indication information 2, the indication information 2 indicates that the deployment of the network service is approved.
- the service proxy module 212 can send the indication to the public network device 210 under the user's instruction.
- the IPv6 address exposure permission can be implicit information.
- step 209 when step 209 is executed, after the service management module 213 sends the service deployment instruction to the private network device 110, the service proxy module 212 sends a service deployment success response, indicating that the network service is successfully deployed. It indicates that the private network device 110 agrees to deploy the network service or is allowed to occupy the resources of the private network device 110 .
- the service management module 213 may request the network service deployment permission from the private network device 110 (the service proxy module 212 ).
- the service management module 21 may send a second service deployment request to the service proxy module 212 for requesting to deploy the network service, and the second service deployment request may also indicate the situation faced after deploying the network service, such as resources may be occupied or consumed Wait.
- the second service deployment request may also carry one or more preferential policies, and the preferential policies may be fee preferential information for private devices, such as rental cost reduction, rental discount, service fee discount, and the like.
- the service proxy module 212 can display the display interface as shown in FIG. 4C to the user, and inform the user through the display interface that the public network device requests to deploy the network service on the private network device, and can also Notify the situation faced after deploying the network service and one or more preferential policies may also be carried in the service deployment request.
- the service agent module 212 determines that the user agrees to deploy the network service on the private network device, and sends the public network device 210 to the public network device 210.
- a service deployment response is sent, the service deployment response is used to agree to deploy the network service, and the service deployment response can be understood as a manifestation of the network service deployment permission. If the user selects a preferential policy, the service deployment response can also carry the preferential policy selected by the user.
- the embodiments of this application do not limit the manner in which the public network device 210 sends the second service deployment request.
- the second service deployment request may be a request sent by the public network device 210 to the node proxy module 111 alone, or it may be It is the service deployment information that the public network device 210 regularly or irregularly pushes to the node agent module 111.
- the information can prompt the user whether to agree to deploy network services.
- the information can also include the multiple preferential policies.
- the service deployment information can be displayed in the private network. On the network device, the user can view the information and confirm the information to provide the network service deployment license.
- Step 210 After receiving the service deployment instruction, the service agent module 212 in the private network device 110 obtains the program of the network service from the service deployment instruction, and runs the network service, that is, the program for installing the network service.
- step 209 and step 210 the program carried by the service deployment instruction is used as the program of network service.
- the service management module 213 further disassembles the network service, and determines that the group If one or more network sub-services need to be deployed in the private network device 110, the program of the one or more network sub-services is carried in the service deployment instruction.
- the private network device may save the IPv6 addresses of the private network devices other than itself among the plurality of private network devices.
- the IPv6 address of the private network device saved by the private network device may be the network subnet of the private network device that is running.
- the IPv6 address of the private network device where the network sub-service where the data produced by the service is processed in the next step is located.
- the service management module 213 can also update the network service deployed in the private network device 110 .
- Scenario 1 Modify the program of the network service.
- the service management module 213 may send a first service update instruction to the private network device 110 deploying the network service, where the first service update instruction carries the modified program of the network service.
- the service proxy module 212 in the private network device 110 After receiving the first service update instruction, the service proxy module 212 in the private network device 110 acquires the modified program of the network service from the first service update instruction, and installs the modified program of the network service.
- the service management module 213 determines that the program of the network service needs to be modified.
- the second client can send a service update request, and the service update request carries the identifier of the network service and the modified program of the network service.
- the service management module 213 After receiving the service update request, determine that the program of the network service needs to be modified.
- the user can perform operations on the public network device 210 to trigger the program modification process of the network service.
- the public network device 210 can provide a specific user with permission to view and modify the program of the network service. 210 may modify the program of the network service after viewing the program of the network service, and the service management module 213 may determine that the program of the network service needs to be modified after detecting the modification operation of the program of the network service by the user.
- Scenario 2 Delete the network service deployed in the private network device 110 .
- the service management module 213 may send a second service update instruction to the private network device 110 deploying the network service, where the second service update instruction instructs to uninstall the network service.
- the service proxy module 212 in the private network device 110 deletes the locally installed program of the network service.
- the service management module 213 determines that the network service does not need to be deployed on the private network device 110.
- the second client can send a service suspension request, the service suspension request carries the identifier of the network service, and the service suspension request indicates to stop the network service.
- the service management module 213 determines that the network service does not need to be deployed on the private network device 110 .
- the service management module 213 learns that some components in the private network device 110 currently deploying the network service are faulty or have security risks, it can determine that the network service does not need to be deployed on the private network device 110;
- the operation on the device 210 triggers the program deletion process of the network service.
- the public network device 210 can provide the permission to view and delete the program of the network service for a specific user, and the specific user can view the program of the network service through the public network device 210. After that, the program of the network service can be deleted, and after detecting that the user deletes the program of the network service, the service management module 213 can determine that the network service does not need to be deployed.
- the service management module 213 may also delete the corresponding relationship between the identifier of the network service and the identifier (or IPv6 address) of the private network device 110 .
- Scenario 3 Migrate the network service deployed in the private network device 110 .
- the service management module 213 determines the target private network device that needs to deploy the network service.
- the private network device 110 currently deployed with the network service is the source private network device.
- the service management module 213 may send a second service update instruction to the source private network device, and send a third service update instruction to the target private network device, where the third service update instruction carries the program of the network service.
- the operation of the source private network device receiving the second service update instruction is similar to the operation of the private network device 110 receiving the second service update instruction in the scenario 3. For details, refer to the foregoing description, which will not be repeated here.
- the operation performed by the target private network device after receiving the third service update instruction is similar to that performed by the private network device 110 after receiving the service deployment instruction in step 210. For details, please refer to the foregoing description, which will not be repeated here.
- the service management module 213 determines that there are many situations in which the network service deployed in the private network device 110 is migrated. It can be determined that the network service needs to be migrated; for another example, the user can perform operations on the public network device 210 to trigger the migration process of the network service. After viewing the program of the network service through the public network device 210, a specific user can modify the deployment location of the network service. After detecting the user's modification operation on the deployment location of the network service, the service management module 213 can determine that the network service needs to be migrated. Internet service.
- the service management module 213 may also update the correspondence between the identifier of the network service and the identifier (or IPv6 address) of the private network device 110 .
- the identity or IPv6 address of the private network device 110 is updated to the identity or IPv6 address of the target private network device.
- Step 211 The third client sends a service query request to the address resolution module 212, the service query request is used for requesting to query the IPv6 address of the private network device 110 providing the network service, and the address query request includes the identifier of the network service.
- the third client When the third client obtains the network service, the third client needs to first obtain the IPv6 address of the private network device 110 in which the network service is deployed. Since the IPv6 address of the private network device 110 may change, the third client can first query the IPv6 address of the private network device 110, that is, initiate a service query request to the address resolution module 212, so as to be able to access the private network correctly later The device 110 obtains the network service provided by the private network device 110 .
- Step 212 After receiving the service query request, the address resolution module 212 can send a service query response to the third client according to the service query request, where the service query response includes the IPv6 address of the private network device 110.
- the address resolution module 212 can determine the IPv6 address of the private network device 110 in which the network service is deployed based on the locally stored correspondence and the identifier of the network service, and carry the IPv6 address in the service query response. , sent to the third client.
- the address resolution module 212 may select a private network device and send a service query response to the third client, where the service query response may carry the selected IPv6 address of the private network device.
- the service query response carrying the IPv6 addresses of multiple private network devices may also be sent to the third client, so that the third client can choose which one or several private network devices provide the network service.
- the address resolution module 212 sends a service query response to the third client.
- the IPv6 address of the private network device where the first running network sub-service is located, and the service query response may also instruct the multiple private network devices to cooperate to provide the network service.
- the service query response may also carry the IPv6 addresses of the multiple private network devices, and the service query response may also instruct the multiple private network devices to cooperate to provide the network service.
- Step 213 The third client requests the private network device 110 to provide a network service based on the IPv6 address of the private network device 110.
- the third client may initiate a service request to the private network device 110 with the destination address being the IPv6 address of the private network device 110 and the source address being the IPv6 address of the third client, the service request including Voice data to be recognized.
- the private network device 110 may perform speech recognition on the speech data to be recognized, and feed back the text information after speech recognition to the third client.
- the third client obtains the IPv6 address of the private network device 110 of the first running network sub-service, and the third client can initiate a service request to the private network device 110,
- the service request may indicate a request for a speech recognition service.
- the private network device 110 receives the service request, it runs the network sub-service based on the voice data to be recognized, and then passes the data generated by the network sub-service and the IPv6 address of the third client to the next step.
- the private network device where the processed network sub-service is located will be passed to the private network device where the last running network sub-service is located in the network service.
- the private network device where the last running network sub-service is located can be Based on the IPv6 address of the third client, the text information after speech recognition is fed back to the third client.
- the third client can sequentially initiate a service request to each private network device to The network sub-services deployed in the multiple private network devices are respectively requested.
- the private network device 110 first provides the IPv6 address and the identity of the private network device 110, and then deploys network services under the instruction of the public network device 210.
- the private network device 110 also The network service can be deployed directly under the instruction of the public network device 210, so that the private network device can only provide the IPv6 address of the private network device 110, and the public network device 210 can save the corresponding relationship between the identifier of the network service and the IPv6 address of the private network device 110 That's it.
- a method for network interworking based on a private network includes:
- Step 501 The second client sends a service deployment request to the service management module 213, where the service deployment request is used to request to deploy a network service, and the service deployment request includes a program of the network service. It is the same as step 207. For details, please refer to the relevant description of step 207, which will not be repeated here.
- Step 502 After receiving the first service deployment request, the service management module 213 determines a private network device capable of deploying the network service.
- Step 503 the service management module 213 obtains a network service deployment license from the service proxy module 112 in the private network device 110 .
- step 209 For the manner in which the service management module 213 obtains the network service deployment license, reference may be made to the relevant description in step 209, which will not be repeated here.
- Step 504 the node management module 211 obtains the IPv6 address of the private network device 110 from the node proxy module 111 .
- the IPv6 address of the private network device 110 may be the node proxy module 111 when the service proxy module 112 sends the network service deployment license to the service management module 213, or when the service proxy module 112 sends the network service deployment to the service management module 213. After permission, it is actively provided to the node management module 211, or it can be provided by the node agent module 111 at the request of the node management module 211. For example, the node management module 211 sends an address acquisition request to the node agent module 111 for requesting private After that, the node proxy module 111 sends a node acquisition response to the node management module 212, which carries the IPv6 address of the private network device 110.
- the service management module 213 may also record the correspondence between the identifier of the network service and the IPv6 address of the private network device.
- Step 505 The service management module 213 instructs the service proxy module 112 in the private network device 110 to deploy the network service.
- the service management module 213 may send a service deployment instruction to the service proxy module 112, where the service deployment instruction includes the program of the network service.
- the service deployment instruction includes the program of the network service.
- Step 506 After receiving the service deployment instruction, the service agent module 212 in the private network device 110 obtains the program of the network service from the service deployment instruction, and runs the network service, that is, the program for installing the network service.
- the service agent module 212 in the private network device 110 obtains the program of the network service from the service deployment instruction, and runs the network service, that is, the program for installing the network service.
- the network service that is, the program for installing the network service.
- Step 507 The third client sends a service query request to the address resolution module 212, where the service query request is used to request to query the IPv6 address of the private network device 110 providing the network service, and the address query request includes the identifier of the network service.
- the service query request is used to request to query the IPv6 address of the private network device 110 providing the network service, and the address query request includes the identifier of the network service.
- Step 508 After receiving the service query request, the address resolution module 212 may send a service query response to the third client according to the service query request, where the service query response includes the IPv6 address of the private network device 110.
- the service query response includes the IPv6 address of the private network device 110.
- Step 509 the third client requests the private network device 110 to provide network services based on the IPv6 address of the private network device 110 .
- the third client requests the private network device 110 to provide network services based on the IPv6 address of the private network device 110 .
- a computer cluster is provided in the embodiments of the present application.
- the computer cluster includes at least one computing device 300 , and each computing device 300 passes through A communication network establishes a communication path.
- Each computing device 300 includes a bus 301 , a processor 302 , a communication interface 303 and a memory 304 .
- the processor 302 , the memory 304 and the communication interface 303 communicate through the bus 301 .
- the processor 302 may be composed of one or more general-purpose processors, such as a central processing unit (central processing unit, CPU), or a combination of a CPU and a hardware chip.
- the above-mentioned hardware chip may be an application-specific integrated circuit (ASIC), a programmable logic device (PLD) or a combination thereof.
- the above-mentioned PLD may be a complex programmable logic device (CPLD), a field-programmable gate array (FPGA), a general array logic (generic array logic, GAL) or any combination thereof.
- Memory 304 may include volatile memory, such as random access memory (RAM).
- RAM random access memory
- the memory 304 may also include non-volatile memory (NVM), such as read-only memory (ROM), flash memory, hard disk drive (HDD), or solid-state drive (solid-state drive). state drive, SSD).
- NVM non-volatile memory
- ROM read-only memory
- HDD hard disk drive
- SSD solid-state drive
- Memory 304 may also include a combination of the above categories.
- Executable code is stored in the memory 304 , and the processor 302 can read the executable code in the memory 304 to implement functions, and can also communicate with other computing devices through the communication interface 303 .
- the processor 302 may implement the functions of one or more modules of the public network device 210 (eg, one or more modules of the node management module 211, the address resolution module 212, and the service management module 213).
- the memory 304 stores one or more modules of the public network device 210 (eg, one or more modules of the node management module 211 , the address resolution module 212 , and the service management module 213 ).
- the processors 301 in the multiple computing devices 300 may work in coordination to execute the method executed by the public network device in the private network-based network interworking method provided in the embodiment of the present application.
- a computer cluster is provided in the embodiments of the present application.
- the computer cluster includes at least one computing device 400 , and each computing device 400 passes through A communication network establishes a communication path.
- Each computing device 400 includes a bus 401 , a processor 402 , a communication interface 403 and a memory 404 .
- the computing device 40 may further include a display screen 405 .
- the processor 402 , the memory 404 and the communication interface 403 communicate through the bus 401 .
- the description of the processor 402 and the memory 404 refers to the description of the processor 302 and the storage 304, and details are not repeated here.
- Executable code is stored in the memory 404, and the processor 402 can read the executable code in the memory 404 to implement functions, and can also communicate with other computing devices through the communication interface 403, and the processor 402 can also trigger the display screen 405 to communicate to the user Display information, such as the information included in the interfaces shown in FIGS. 3A to 3C and FIGS. 4A to 4C in the embodiments of the present application.
- the processor 402 may implement the functions of one or more modules of the private network device 110 (eg, one or more modules in the node proxy module 111 and the service proxy module 112 ).
- the memory One or more modules of the altering apparatus 400 (eg, one or more modules of the node agent module 111 and the service agent module 112 ) are stored in 404 .
- the processors 401 in the multiple computing devices 400 may work in coordination to execute the method executed by the private network device in the private network-based network interworking method provided in the embodiment of the present application.
- the disclosed system, apparatus and method may be implemented in other manners.
- the apparatus embodiments described above are only illustrative.
- the division of the units is only a logical function division. In actual implementation, there may be other division methods.
- multiple units or components may be combined or Can be integrated into another system, or some features can be ignored, or not implemented.
- the shown or discussed mutual coupling or direct coupling or communication connection may be through some interfaces, indirect coupling or communication connection of devices or units, which may be in electrical, mechanical or other forms.
- the units described as separate components may or may not be physically separated, and components displayed as units may or may not be physical units, that is, may be located in one place, or may be distributed to multiple network units. Some or all of the units may be selected according to actual needs to achieve the purpose of the solution in this embodiment.
Landscapes
- Engineering & Computer Science (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- Data Exchanges In Wide-Area Networks (AREA)
Abstract
一种基于私有网络的网络互通方法、设备以及计算机集群,本申请中,公网设备可以先从私网设备中获取网络服务部署许可,之后,可以指示私网设备部署网络服务,并记录部署网络服务的私网设备的IPv6地址。之后,当接收到来自客户端的、用于请求部署网络服务的私网设备的IPv6地址的服务查询请求时,公网设备可以向客户端提供网络服务的私网设备的IPv6地址。之后客户端可以基于该私网设备的IPv6地址从该私网设备获取网络服务。当客户端需要私网设备提供网络服务时,可以先从公网设备中获取该私网设备的IPv6地址,进而实现私有网络与其他网络之间的互连互通,为互联网借用私有网络的资源的方案提供了可能性。
Description
本申请涉及通信技术领域,尤其涉及一种基于私有网络的网络互通方法、设备以及计算机集群。
随着互联网的普及以及大数据、云计算技术的高速发展,互联网用户规模日益庞大。互联网用户规模的激增,使得互联网用户在访问互联网时需要占用的带宽也变大,导致带宽成本急剧增加,一定程度上,制约了互联网的发展。
目前,私有网络存在许多未被利用的带宽资源,若互联网能够借用这些带宽资源,能够节约较多的带宽成本。
但私有网络目前只能与互联网实现单向联通,也即私有网络中的网络设备只能单向访问互联网,而互联网中的设备却无法访问该私有网络。这种单向联通的方式成为互联网借用私有网络中的带宽资源的方案中一个亟需解决的问题。
发明内容
本申请提供一种基于私有网络的网络互通方法、设备以及计算机集群,用以实现私有网络与其他网络之间的互联互通。
第一方面,本申请实施例提供了一种基于私有网络的网络互通方法,所述方法可以由部署在公网中的设备(简称公网设备)执行,该方法包括:公网设备可以先从私网设备中获取网络服务部署许可,在获取网络服务部署许可后,可以指示私网设备部署网络服务,并记录部署网络服务的私网设备的IPv6地址,如记录网络服务的标识与私网设备的IPv6地址的对应关系。之后当接收到来自客户端的、用于请求部署网络服务的私网设备的IPv6地址的服务查询请求时,公网设备可以向客户端提供网络服务的私网设备的IPv6地址。
通过上述方法,当客户端需要私网设备提供网络服务时,可以先从公网设备中获取该私网设备的IPv6地址,进而实现私有网络与其他网络(如公网或其他私网)之间的互连互通,为互联网借用私有网络的资源的方案提供了可能性。
在一种可能的实现方式中,公网设备从私网设备中获取的网络服务部署许可,可以是公网设备向私网设备请求的,例如,公网设备可以向私网设备发送服务部署请求,服务部署请求用于请求部署网络服务;之后,公网设备可以从私网设备接收服务部署响应,服务部署响应用于同意部署网络服务。
通过上述方法,公网设备可以向私网设备中请求网络服务部署许可,以便后续能够部署网络服务。
在一种可能的实现方式中,服务部署请求还可以指示第一优惠策略,第一优惠策略是向私网设备提供的、针对私网设备的费用优惠信息,这里并不限定第一优惠策略的数量,可以为一个,也可以为多个,以便私网设备从多个第一优惠策略中进行选择。
通过上述方法,为了在私网设备中部署网络服务,公网设备可以提供一些优惠策略,以使得私网设备能够提供网络服务部署许可。
在一种可能的实现方式中,公网设备从私网设备中获取的网络服务部署许可,也可以是私网设备主动提供的,例如,公网设备可以接收私网设备的资源占用许可,资源占用许可用于指示允许占用私网设备的资源以部署网络服务。
通过上述方法,私网设备可以主动要求部署网络服务,提高私网设备的主动性,适用于其他场景。
在一种可能的实现方式中,资源占用许可还包括第二优惠策略,第二优惠策略为私网设备提出的、针对私网设备的费用优惠信息。这里并不限定第二优惠策略的数量,可以为一个,也可以为多个,以便公网设备从多个第二优惠策略中进行选择。
通过上述方法,私网设备可以主动要求部署网络服务时,还可以提出自对费用优惠的需求。
在一种可能的实现方式中,当网络服务发生更新,或网络服务需要删除或迁移时,公网设备还可以指示私网设备更新网络服务。
通过上述方法,公网设备可以及时的更新网络服务,以保证部署在私网设备中网络服务的有效性。
在一种可能的实现方式中,公网设备还可以从私网设备接收私网设备更新后的IPv6地址,更新本地保存的私网设备的IPv6地址。
通过上述方法,公网设备可以获取更新后的IPv6地址,以保证本地始终能够保存最新的、最准确的私网设备的IPv6地址,保证向客户端提供的IPv6地址的有效性。
第二方面,本申请实施例提供了一种基于私有网络的网络互通方法,该方法可以由私有网络中的私网设备执行,该方法中,私网设备可以向公网中的设备提供网络服务部署许可;之后,在公网中的设备的指示下,部署网络服务,还可以向公网中的设备发送私网设备的IPv6地址;在部署了网络服务之后,私网设备可以为客户端提供网络服务,也就是说,私网设备可以接收来自客户端的服务请求,服务请求用于请求网络服务;之后,根据服务请求,反馈服务响应。
通过上述方法,私网设备中可以部署网络服务,通过向公网设备提供该私网设备的IPv6地址,使得客户端可以访问到该私网设备获取网络服务,实现私网设备与其他网络中设备的互联互通。
在一种可能的实现方式中,私网设备在向公网中设备提供的网络服务部署许可时,可以是在公网设备的请求下提供的。例如,私网设备可以接收来自公网中的设备的服务部署请求,服务部署请求用于请求部署网络服务;之后,向公网中的设备发送服务部署响应,服务部署响应用于同意部署网络服务。
通过上述方法,私网设备在公网设备的请求下提供网络服务部署许可,以便后续能够部署网络服务。
在一种可能的实现方式中,服务部署请求还用于指示第一优惠策略,第一优惠策 略是向私网设备提供的、针对私网设备的费用优惠信息。这里并不限定第一优惠策略的数量,可以为一个,也可以为多个,当存在多个第一优惠策略时,私网设备从多个第一优惠策略中进行选择,并在服务部署响应中携带选择的第一优惠策略。
通过上述方法,私网设备可以同意部署网络服务时,获取相应的优惠策略,使得在私网设备中部署网络服务的方案的可行性更佳。
在一种可能的实现方式中,私网设备向公网中设备提供的网络服务部署许可,也可以是私网设备主动提出的,例如,私网设备可以向公网中的设备发送资源占用许可,资源占用许可用于指示允许占用私网设备的资源以部署网络服务。
通过上述方法,私网设备可以主动要求部署网络服务,提高私网设备的主动性,适用于其他场景。
在一种可能的实现方式中,资源占用许可还包括第二优惠策略,第二优惠策略为私网设备提出的、针对私网设备的费用优惠信息。这里并不限定第二优惠策略的数量,可以为一个,也可以为多个,以便公网设备从多个第二优惠策略中进行选择。
通过上述方法,私网设备可以主动要求部署网络服务时,还可以主动提出自对费用优惠的需求,以获得相应的补偿。
在一种可能的实现方式中,私网设备还可以在公网中设备的指示下更新网络服务。
通过上述方法,网络服务的及时更新,可以保证部署在私网设备中网络服务的有效性。
在一种可能的实现方式中,私网设备在自身IPv6地址发生更新的情况下,可以向公网中的设备发送更新后的IPv6地址。
通过上述方法,私网设备可以及时提供更新后的IPv6地址,保证公网设备能够获得最新的、最准确的私网设备的IPv6地址。
第三方面,本申请实施例提供了一种基于私有网络的网络互通方法,该方法可以由部署在公网中的设备(简称公网设备)执行,该方法包括:公网设备可以先从私网设备中获取IPv6地址暴露许可,在获取IPv6地址暴露许可后,可以从部署有网络服务的私网设备获取私网设备的IPv6地址和私网设备的标识。之后,当接收到来自客户端的、用于请求部署有该网络服务的私网设备的IPv6地址的地址查询请求时,该私网设备可以根据该私网设备的标识向客户端提供网络服务的私网设备的IPv6地址,其中,地址查询请求包括私网设备的标识。
通过上述方法,当客户端需要访问私网设备时,可以先从公网设备中获取该私网设备的IPv6地址,之后可以基于该私网设备的IPv6地址,与私网设备进行通信,实现了私有网络与其他网络(如公网或其他私网)之间的互连互通。
在一种可能的实现方式中,公网设备从私网设备中获取的IPv6地址暴露许可,可以是公网设备向私网设备请求的,例如,公网设备可以向私网设备发送地址获取请求,地址获取请求用于请求私网设备的IPv6地址;之后,公网设备可以从私网设备接收地址获取响应,地址获取响应用于同意暴露IPv6地址,地址获取响应中包括IPv6地址和私网设备的标识。
通过上述方法,公网设备可以向私网设备中请求IPv6地址,以便后续能够将该IPv6地址提供给需要访问该私网设备的客户端。
在一种可能的实现方式中,地址获取请求还可以指示第一优惠策略,第一优惠策略是向私网设备提供的、针对私网设备的费用优惠信息,这里并不限定第一优惠策略的数量,可以为一个,也可以为多个,以便私网设备从多个第一优惠策略中进行选择。
通过上述方法,为了在私网设备中部署网络服务并且可以暴露该私网设备的IPv6地址,公网设备可以提供一些优惠策略,以使得私网设备能够提供IPv6地址暴露许可。
在一种可能的实现方式中,公网设备从私网设备中获取的IPv6地址暴露许可,也可以是私网设备主动提供的,公网设备可以从私网设备接收私网设备的IPv6地址和私网设备的标识,也即私网设备通过主动发送私网设备的IPv6地址和私网设备的标识的方式提供IPv6地址暴露许可。
通过上述方法,公网设备主动提供IPv6地址暴露许可,提高私网设备的主动性,适用于其他场景。
在一种可能的实现方式中,公开设备在主动提供IPv6地址暴露许可,还可以发送第二优惠策略,第二优惠策略为私网设备提出的、针对私网设备的费用优惠信息。这里并不限定第二优惠策略的数量,可以为一个,也可以为多个,以便公网设备从多个第二优惠策略中进行选择。
通过上述方法,私网设备可以主动要求部署网络服务以及暴露IPv6地址时,还可以提出自对费用优惠的需求。
在一种可能的实现方式中,公网设备还可以从私网设备接收私网设备更新后的IPv6地址或标识,更新本地保存的私网设备的IPv6地址或标识。
通过上述方法,公网设备可以获取更新后的IPv6地址或标识,以保证本地始终能够保存最新的、最准确的私网设备的IPv6地址或标识,以使得能够向客户端提供的真实、有效的IPv6地址。
第四方面,本申请实施例提供了一种基于私有网络的网络互通方法,该方法可以由私有网络中的私网设备执行,该方法中,私网设备可以向公网中的设备提供IPv6地址暴露许可;之后,再向公网中的设备发送私网设备的IPv6地址和私网设备的标识。之后私网设备可以与客户端进行数据交互,例如,可以接收来自客户端的数据消息,数据消息的目的地址为私网设备的IPv6地址。
通过上述方法,私网设备通过向公网设备提供该私网设备的IPv6地址,使得客户端可以访问到该私网设备已进行数据交互,实现私网设备与其他网络中设备的互联互通。
在一种可能的实现方式中,私网设备向公网中设备提供的网络服务部署许可,可以是在公网设备的请求下提供的,例如,私网设备可以接收来自公网中的设备的地址获取请求,地址获取请求用于请求私网设备的IPv6地址,地址获取请求还用于指示IPv6地址暴露后需面临的状况;私网设备在用户确认了IPv6地址暴露后需面临的状况后,从公网中的设备发送地址获取响应,地址获取响应用于同意暴露IPv6地址,地址获取响应中包括IPv6地址和私网设备的标识。
通过上述方法,私网设备在公网设备的请求下提供Pv6地址,以便后续公网设备可以将该Pv6地址提供给客户端。
在一种可能的实现方式中,私网设备向公网中设备提供的网络服务部署许可,也 可以是私网设备主动提供的,例如,私网设备可以在用户的指示下,向公网中的设备发送IPv6地址和私网设备的标识。
通过上述方法,私网设备可以主动要求暴露Pv6地址,提高私网设备的主动性,适用于其他场景。
在一种可能的实现方式中,私网设备在自身IPv6地址或标识发生更新的情况下,可以向公网中的设备发送更新后的IPv6地址或标识。
通过上述方法,私网设备可以及时提供更新后的IPv6地址或标识,保证公网设备及时获得最新的、最准确的私网设备的IPv6地址或标识。
第五方面,本申请实施例还提供了一种公网设备,有益效果可以参见第一方面的描述此处不再赘述。该装置具有实现上述第一方面的方法实例中行为的功能。所述功能可以通过硬件实现,也可以通过硬件执行相应的软件实现。所述硬件或软件包括一个或多个与上述功能相对应的模块。在一个可能的设计中,所述装置的结构中包括节点管理模块、服务管理模块以及地址解析模块,这些模块可以执行上述第一方面方法示例中的相应功能,具体参见方法示例中的详细描述,此处不做赘述。
第六方面,本申请实施例还提供了一种私网设备,有益效果可以参见第二方面的描述此处不再赘述。该装置具有实现上述第二方面的方法实例中行为的功能。所述功能可以通过硬件实现,也可以通过硬件执行相应的软件实现。所述硬件或软件包括一个或多个与上述功能相对应的模块。在一个可能的设计中,所述装置的结构中包括节点代理模块以及服务代理模块,这些模块可以执行上述第二方面方法示例中的相应功能,具体参见方法示例中的详细描述,此处不做赘述。
第七方面,本申请实施例还提供了一种公网设备,有益效果可以参见第三方面的描述此处不再赘述。该装置具有实现上述第三方面的方法实例中行为的功能。所述功能可以通过硬件实现,也可以通过硬件执行相应的软件实现。所述硬件或软件包括一个或多个与上述功能相对应的模块。在一个可能的设计中,所述装置的结构中包括节点管理模块、地址解析模块,这些模块可以执行上述第三方面方法示例中的相应功能,具体参见方法示例中的详细描述,此处不做赘述。
第八方面,本申请实施例还提供了一种私网设备,有益效果可以参见第四方面的描述此处不再赘述。该装置具有实现上述第四方面的方法实例中行为的功能。所述功能可以通过硬件实现,也可以通过硬件执行相应的软件实现。所述硬件或软件包括一个或多个与上述功能相对应的模块。在一个可能的设计中,所述装置的结构中包括节点代理模块,这些模块可以执行上述第四方面方法示例中的相应功能,具体参见方法示例中的详细描述,此处不做赘述。
第九方面,本申请实施例还提供了一种计算设备,所述计算设备包括处理器和存储器,还可以包括通信接口。所述处理器执行所述存储器中的程序指令执行上述第一方面或第一方面任一可能的实现方式提供的方法。所述存储器与所述处理器耦合,其保存必要的程序指令和数据。所述通信接口,用于与其他设备进行通信,如接收私网设备的IPv6地址、服务查询请求,发送服务查询响应等。
第十方面,本申请实施例还提供了一种计算设备,所述计算设备包括处理器和存储器,还可以包括通信接口。可选的还包括显示屏。所述处理器执行所述存储器中的 程序指令执行上述第二方面或第二方面任一可能的实现方式提供的方法。所述存储器与所述处理器耦合,必要的程序指令和数据。所述通信接口,用于与其他设备进行通信,如发送IPv6地址、接收服务请求,反馈服务响应等。所述显示屏用于在所述处理器的触发下向用户显示信息。
第十一方面,本申请实施例还提供了一种计算设备,所述计算设备包括处理器和存储器,还可以包括通信接口。所述处理器执行所述存储器中的程序指令执行上述第三方面或第三方面任一可能的实现方式提供的方法。所述存储器与所述处理器耦合,其保存必要的程序指令和数据。所述通信接口,用于与其他设备进行通信,如接收私网设备的IPv6地址或标识、地址查询请求,发送地址查询响应等。
第十二方面,本申请实施例还提供了一种计算设备,所述计算设备包括处理器和存储器,还可以包括通信接口。可选的还包括显示屏。所述处理器执行所述存储器中的程序指令执行上述第四方面或第四方面任一可能的实现方式提供的方法。所述存储器与所述处理器耦合,必要的程序指令和数据。所述通信接口,用于与其他设备进行通信,如发送IPv6地址或标识、接收数据消息等。所述显示屏用于在所述处理器的触发下向用户显示信息。
第十三方面,本申请提供了一种计算设备集群,该计算设备集群包括至少一个计算设备。每个计算设备包括存储器和处理器。至少一个计算设备的处理器用于访问所述存储器中的代码以执行前述任一方面或任一方面的任意一种可能的实现方式提供的方法。
第十四方面,本申请提供了一种非瞬态的可读存储介质,所述非瞬态的可读存储介质被计算设备执行时,所述计算设备执行前述第一方面或第一方面的任意可能的实现方式中提供的方法。该存储介质中存储了程序。该存储介质包括但不限于易失性存储器,例如随机访问存储器,非易失性存储器,例如快闪存储器、硬盘(hard disk drive,HDD)、固态硬盘(solid state drive,SSD)。
第十五方面,本申请提供了一种计算机程序产品,所述计算机程序产品包括计算机指令,在被计算设备执行时,所述计算设备执行前述第一方面或第一方面的任意可能的实现方式中提供的方法。该计算机程序产品可以为一个软件安装包,在需要使用前述任一方面或任一方面的任意可能的实现方式中提供的方法的情况下,可以下载该计算机程序产品并在计算设备上执行该计算机程序产品。
第十六方面,本申请还提供一种计算机芯片,芯片与存储器相连,芯片用于读取并执行存储器中存储的软件程序,执行前述任一方面或任一方面的任意可能的实现方式中提供的方法。
图1为本申请提供的一种系统的架构示意图;
图2为本申请提供的一种基于私有网络的网络互通方法示意图;
图3A~3C为本申请提供的一种向用户展示的显示界面示意图;
图4A~4C为本申请提供的一种向用户展示的显示界面示意图;
图5为本申请提供的一种基于私有网络的网络互通方法示意图;
图6为本申请提供的一种计算机集群的结构示意图;
图7为本申请提供的一种计算机集群的结构示意图。
在对本申请实施例提供的一种基于私有网络的网络互通方法、设备以及计算机集群进行说明之前,先对本申请实施例涉及的一些概念进行说明:
1、私有网络
私有网络是指在特定范围内实现设备之间的互通互联的网络,私有网络并非公共网络,是个人或组织组件并在特定范围内使用的,该私有网络中的资源(如存储资源、带宽资源等)以及私有网络中的设备是个人或组织所有的。
私有网络中网络设备的类型有许多种,包括但不限于:通信设备、娱乐设备、家用电器、照明设备、监控装置及水电气热表设备、家庭报警装置等。私有网络中的网络设备(简称为私网设备)配置有网络地址,该网络设备可以是运营商定期为私网设备分配的。私网设备基于该网络地址,能够访问公网中的设备。
2、公网
公网,也可以称为广域网,广域网中的设备与互联网中的设备可以互相访问,这种访问是不受限制的。
下面对本申请实施例提供的一种基于私有网络的网络互通方法所适用的系统架构进行说明,如图1所示,为本申请实施例提供的一种系统架构的示意图,该系统架构中可以包括部署在私有网络100中的网络设备(该网络设备可以称为私网设备)以及部署在公网200中的设备(公网200中的设备也可以称为公网设备),本申请实施例并不限定私有网络100的数量,以及该私有网络100中家庭网络设备的数量。图1中仅示例性的绘制了三个私有网络100,为了区分不同的私有网络100,分别将该三个私有网络100命名为私有网络100A、私有网络100B以及私有网络100C。
私有网络100中可以包括一个或多个私网设备,本申请实施例并不限定私网设备的类型,私网设备包括但不限于:调制解调器、路由器、笔记本、计算机等。
在本申请实施例中以私有网络100中的一个私网设备可以实现与公网的连接,以及对外提供网络服务的功能。在实际应用中,与公网连接的功能以及对外提供网络服务的功能可以部署在该私有网络100的多个私网设备中,由多个私网设备配合完成。
图1中将私有网络100A中的私网设备标识为私网设备110,将私有网络100B中的私网设备标识为私网设备120,将私有网络100C中的私网设备标识为私网设备130。
下面以私网设备110为例,对私网设备中包括的模块进行说明:
私网设备110中包括节点代理模块111以及服务代理模块112。
节点代理模块111用于将该私网设备110连接到公网200中,例如,可以向公网200中的公网设备210主动的提供该私网设备110的网际协议第6版(internet protocol version 6,IPv6)地址,也可以在公网设备210的请求下提供该私网设备110的IPv6地址。还可以接收来自其他网络中网络设备(如其他私有网络100中的私网设备或其他公网设备)的访问请求,以及反馈访问响应等。
服务代理模块112可以在公网设备210的请求下,在用户同意该公网设备210的请求 的情况下,在私网设备110中部署网络服务。服务代理模块112还可以管理该私网设备110上部署的网络服务,其中,包括但不限于:网络服务的运行、更新等,还用于向网络服务的服务对象提供网络服务,该网络服务的服务对象(也即接受该网络服务的对象)可以是部署在私有网络110A中的其他私网设备,也可以是部署在其他私有网络100中的私网设备,还可以是公网设备。
公网可以包括一个或多个公网设备210,本申请实施例并不限定公网设备210的设备形态,例如,该公网设备210可以是服务器,也可以是服务器中的虚拟机,还可以是部署在服务器或虚拟机上的软件装置。
在本申请实施例中以公网中的一个公网设备210为例进行说明,该公网设备210能够与私有网络100中的私网设备连接,管理与其连接的私网设备110。例如,该公网设备210可以获取该私网设备的网络服务部署许可后,在私网设备上部署网络服务;并在客户端查询该网络服务所在的私网设备的IPv6地址,向该客户端提供该私网设备的IPv6地址。在获取该私网设备的IPv6地址暴露许可后,获取该私网设备的IPv6地址,并在客户端需要查询该私网设备的IPv6地址时,反馈该私网设备的IPv6地址。
在实际应用中,上述公网设备210的功能也可以部署在该公网中的多个公网设备210中,由多个公网设备210配合实现。
下面以公网设备210为例,对公网设备210中包括的模块进行说明:
公网设备210包括节点管理模块211、地址解析模块212、以及服务管理模块213。
节点管理模块211,用于管理与该公网设备210连接的私网设备110,其中包括但不限于:获取私网设备的IPv6地址暴露许可、该私网设备110的标识以及IPv6地址、保存该私网设备110的标识以及IPv6地址的对应关系、更新该私网设备110的标识以及IPv6地址的对应关系。
地址解析模块212,用于接收其他设备(如其他公网设备、私有网络100中的私网设备)的地址查询请求,该地址查询请求用于请求私网设备的IPv6地址,该地址查询请求中包括该私网设备的标识。地址解析模块212可以基于私网设备的标识以及IPv6地址的对应关系,根据该私网设备的标识确定该私网设备的IPv6地址,并向其他设备反馈地址查询响应,该地址查询响应中包括该私网设备的IPv6地址。
服务管理模块213,用于接收网络服务的程序,在从私网设备获取网络服务部署许可后,将该网络服务的程序部署在与该公网设备210连接的一个或多个私网设备上,记录部署该网络服务的私有设备的IPv6地址。服务器管理模块123还可以管理部署在该一个或多个私网设备上的网络服务的程序。例如,更新在该一个或多个私网设备上的网络服务的程序。
地址解析模块212,还用于接收其他设备(如其他公网设备、私有网络100中的私网设备)的服务查询请求,该服务查询请求用于请求提供网络服务的私网设备的IPv6地址。地址解析模块122可以确定部署该网络服务该私网设备的IPv6地址,并向其他设备反馈服务查询响应,该服务查询响应中包括该私网设备的IPv6地址。
下面结合图2以私网设备110与公网设备210之间的交互为例,对本申请实施例提供的一种基于私有网络100的网络互通方法进行说明。参见图2,该方法包括两部分内容, 其一为私网设备110与该私有网络100外其他设备进行数据交互的方法,参见步骤201~206,其二为私有网络100部署网络服务以及提供网络服务的方法,参见步骤206~213:
步骤201:节点代理模块111向节点管理模块211发送注册请求,该注册请求中包括私网设备110的标识以及私网设备110的IPv6地址,该注册请求用于请求注册到该公网设备210中。这里仅是以节点代理模块111通过发送注册请求的方式发送私网设备110的标识以及私网设备110的IPv6地址,在实际应用中,该节点代理模块111也可以以其他消息载体发送网设备110的标识以及私网设备110的IPv6地址,凡是能够发送私网设备110的标识以及私网设备110的IPv6地址的方式均适用于本申请实施例。
私网设备110的标识为能唯一标识该私网设备110的信息,本申请实施例并不限定私网设备110的标识的类型,例如,该私网设备110的标识可以为私有网络100或公网200中,预先为该私网设备110配置的标号,也可以为该私网设备110的设备编号,还可以为公网200(如公网中的设备)或运营商按照预设的约束规则和生成方法,分配给私网设备110的标识。凡事能够唯一标识该私网设备110的信息均可以作为私网设备110的标识。
本申请实施例并不限定节点代理模块111执行步骤201的时机,例如当私有网络100A组网成功后,节点代理模块111可以直接执行步骤201;又例如,节点代理模块111也可以在确定需要与公网设备210或其他私有网络100中的私网设备进行通信后,执行步骤201;又例如,节点代理模块111也可以是在公网200的指示(如公网设备210下发的指示)下,如指示需要进行注册,执行步骤201;又例如,节点代理模块111也可以是在用户的触发下,如用户触发启动注册到公网设备210的流程,执行步骤201。
在一种可能的实施方式中,节点代理模块111向公网设备210提供该私网设备110的标识以及私网设备110的IPv6地址之前,节点代理模块110可以先提供IPv6地址暴露许可,也即节点代理模块110需要先允许暴露自己的IPv6地址,而该IPv6地址暴露许可可以是节点代理模块111主动提供的,也可以是在公网设备210的请求下提供的。
下面分别对这两种可能的情况进行分别进行说明:
(1)、节点代理模块111主动提供IPv6地址暴露许可。
节点代理模块111在用户的指示下确定需要与该私有网络110A之外的其他私有网络或者公网进行通信。例如,私网设备110可以向用户提供可以与该私有网络110A之外的其他私有网络或者公网进行通信的选择,如私网设备110可以通过如图3A所示的显示界面询问用户是否需要与该私有网络110A之外的其他私有网络或者公网进行通信,在用户点击“是”后,确定需要与该私有网络110A之外的其他私有网络或者公网进行通信。节点代理设备111还可以通过如图3B所示的显示界面提醒用户是否确定需要暴露该私网设备110的IPv6地址,以及暴露该私网设备110的IPv6地址所面临的状况,如被攻击的可能性会提高、资源可能被占用或消耗等。在用户点击“确认”后,确定需要与该私有网络110A之外的其他私有网络或者公网进行通信,可以暴露该私网设备110的IPv6地址。
通信的前提是需要通信的对端获知该私网设备110的IPv6地址。节点代理模块110可以在确定需要与该私有网络110A之外的其他私有网络或者公网进行通信后,向公网设备210发送注册请求或该私网设备110的标识以及私网设备110的IPv6地址。
IPv6地址暴露许可可以为显式的信息,如指示信息1,该指示信息1指示同意暴露该私网设备110的IPv6地址,如节点代理模块111可以在用户的指示下,向公网设备210发 送该指示信息1,在发送指示信息1的同时或在发送指示信息1之后,发送该私网设备110的标识以及私网设备110的IPv6地址,也可以在注册请求中携带指示信息1。IPv6地址暴露许可可以为隐式的信息,如只要该公网设备210收到注册请求,或接收到该私网设备110的标识以及私网设备110的IPv6地址就表明该私网设备210同意暴露该IPv6地址暴露许可,也就是说,该私网设备110的标识以及私网设备110的IPv6地址可以隐式的指示该IPv6地址暴露许可。
节点代理模块111主动提供IPv6地址暴露许可时,还可以提供优惠策略,该优惠策略是针对该私网设备的费用优惠信息,如费用折扣或费用的减免等,节点代理模块111可以向用户展示可选择的优惠策略,检测到用户的选择后,节点代理模块111可以将用户选择的优惠策略发送给公网设备210。
(2)节点代理模块111在公网设备210的请求下提供IPv6地址暴露许可。
公网设备210可以向节点代理模块111发送地址获取请求,用于请求该私网设备的IPv6地址,该地址获取请求中还可以指示IPv6地址暴露后需面临的状况。
节点代理模块111在接收到该地址获取请求后,可以向用户展示如图3C所示的显示界面,通过该显示界面告知用于公网设备请求本私网设备的IPv6地址以及IPv6地址暴露后需面临的状况,在用户点击了确认之后,节点代理模块111确定用户同意提供该私网设备的IPv6地址,向公网设备210发送注册请求或携带有该私网设备110的标识以及私网设备110的IPv6地址的地址获取响应。
该地址获取请求中还可以指示同意暴露IPv6地址的优惠策略,节点代理模块111页可以通过显示界面向用户展示优惠策略,若存在多个优惠策略,用户还可以选择优惠策略,用户选择的优惠策略可以携带在该地址获取响应中。
关于IPv6地址暴露许可的说明可以参见前述内容,此处不再赘述。
需要说明的是,本申请实施例并不限定公网设备210发送地址获取请求的方式,例如该地址获取地请求可以是公网设备210单独发送给节点代理模块111的请求,也可以是公网设备210定期或不定期向节点代理模块111推送的地址获取信息,该地址获取信息可以显示在私网设备上,用户可以查看该信息,对该信息进行确认以提供IPv6地址暴露许可。
步骤202:节点管理模块211接收该注册请求后,可以保存该私网设备110的标识以及私网设备110的IPv6地址,建立并保存该私网设备110的标识以及私网设备110的IPv6地址之间的对应关系。
节点管理模块211可以接收与该公网设备210连接的任一私网设备发送的注册请求,保存各个私网设备的标识以及私网设备的IPv6地址,并建立并保存各个私网设备的标识以及私网设备的IPv6地址之间的对应关系。
节点代理模块111除了向节点管理模块211发送该注册请求之外,在私网设备110的标识或私网设备110的IPv6地址更新的情况下,还可以向节点管理模块211发送该更新请求,该更新请求可以携带更新后的私网设备110的标识或私网设备110的IPv6地址。
节点管理模块211在接收到更新请求后,可以利用该更新请求携带的更新后的私网设备110的标识或私网设备110的IPv6地址更新保存的该私网设备110的标识或私网设备110的IPv6地址,以及更新私网设备110的标识以及私网设备110的IPv6地址之间的对应关系。
在执行了步骤201以及步骤202之后,私网设备110注册到了该公网设备210中,公网设备210中保存了私网设备110的标识以及私网设备110的IPv6地址之间的对应关系,下面以访问该私网设备110的设备是第一客户端为例,对访问私网设备110的方式进行说明,参见步骤203~步骤206。该第一客户端可以为公网设备210,也可以为其他私有网络100中的私网设备。
步骤203:第一客户端向地址解析模块212发送地址查询请求,该地址查询请求用于请求查询私网设备110的IPv6地址,该地址查询请求中包括该家庭私有地址的标识。
当第一客户端需要访问私网设备110,如第一客户端需要向私网设备110请求数据,或第一客户端需要向私网设备110发送数据时,第一客户端需要先获取该私网设备110的IPv6地址。由于私网设备110的IPv6地址可能会发生变化,第一客户端可以先查询该私网设备110的IPv6地址,也即向地址解析模块212发起地址查询请求,以便后续能够正确访问到该私网设备110。
本申请实施例并不限定第一客户端获取私网设备110的标识的方式,例如该私网设备的标识是第一客户端通过查询服务查询获取的,也可以是该第一客户端本地预先保存了该私网设备110的标识。
步骤204:地址解析模块212接收到该地址查询请求后,基于节点管理模块211保存的该私网设备的标识以及私网设备的IPv6地址之间的对应关系,确定该私网设备110的IPv6地址。
地址解析模块212接收到该地址查询请求,可以直接基于节点管理模块211保存的该私网设备的标识以及私网设备的IPv6地址之间的对应关系,确定该私网设备110的IPv6地址;地址解析模块212也可以先对第一客户端进行验证,如验证第一客户端的身份、验证第一客户端是否具备查询私网设备110的权限。在验证通过后,再基于节点管理模块211保存的该私网设备的标识以及私网设备的IPv6地址之间的对应关系,确定该私网设备110的IPv6地址。
这里并不限定地址解析模块212对第一客户端进行验证的方式,下面列举其中一种:
地址查询请求可以携带第一客户端的身份信息,该第一客户端的身份信息可以为下列信息的部分或全部:第一客户端的标识、第一客户端所属的网络(如所属的私有网络100或所属的公网)的信息。
地址解析模块212根据该第一客户端的身份信息对该第一客户端进行验证,例如,地址解析模块212可以确定该第一客户端的标识是否属于标识集合,该标识集合为允许访问私网设备110的设备的标识集合,若该第一客户端的标识属于该标识集合,则验证通过,否则验证失败;又例如,地址解析模块212可以确定该第一客户端所属的网络是否为允许访问私网设备110的网络,若第一客户端所属的网络为允许访问私网设备110的网络,则验证通过,否则验证失败。
若地址解析模块212对第一客户端验证失败,地址解析模块212可以拒绝该地址查询请求,如反馈拒绝查询响应。
若地址解析模块212对第一客户端验证成功,地址解析模块212在查询到该私网设备110的IPv6地址后,可执行步骤205。
步骤205:地址解析模块212向第一客户端发送地址查询响应,该地址查询响应中包括私网设备110的IPv6地址。
步骤206:第一客户端基于该私网设备110的IPv6地址,访问该私网设备110。
当第一客户端需要向私网设备110请求数据时,第一客户端可以向私网设备110发送数据请求,该数据请求用于向私网设备110请求数据,该数据请求的目的地址为该私网设备110的IPv6地址。
当第一客户端需要向私网设备110发送数据时,第一客户端可以向私网设备110发送数据传输消息,该数据传输消息用于向私网设备110传输数据,该数据传输消息的目的地址为该私网设备110的IPv6地址。
通过步骤201~步骤206,私有网络100A之外的设备能够与私有网络100A中的私网设备110进行交互,为了进一步,利用该私有网络100A中的网络资源,如带宽等,私有网络100中还可以部署网络服务,向公网设备210或其他私有网络100(如其他私有网络100中的私网设备)提供网络服务,具体参见步骤207~步骤213。在步骤207~步骤213中以第二客户端为向公网设备210发布网络服务,以第三客户端请求网络服务为例进说明,该第二客户端以及第三客户端可以为公网设备210,也可以为其他私有网络100中的私网设备。第一客户端、第二客户端、第三客户端可以为同一客户端,也可以为不同的客户端。
步骤207:第二客户端向服务管理模块213发送服务部署请求,该服务部署请求用于请求部署网络服务,该服务部署请求中包括网络服务的程序。
这里并不限定服务部署请求中包括的网络服务的程序的数量,可以为一个网络服务的程序,也可以为多个网络服务程序。
步骤208:服务管理模块213接收到第一服务部署请求后,确定能够部署该网络服务的私网设备。本申请实施例并不限定该私网设备的数量,可以为一个,也可以为多个。这里以确定的私网设备为私网设备110为例进行说明。
服务管理模块213在确定能够部署该网络服务的私网设备110时,可以根据与该公网设备210连接的各个私网设备的空闲资源,如私网设备的空闲带宽、空闲虚拟机等,确定需要部署该网络服务的私网设备。例如,服务管理模块213可以优先选择空闲资源最多的私网设备110为能够部署该网络服务的私网设备。
服务管理模块213在确定能够部署该网络服务的私网设备110时,也可以根据与该公网设备210连接的各个私网设备110的性能,如服务管理模块213可以根据私网设备的带宽(上行带宽和下行带宽)、中央处理器、内存、磁盘等指标及带宽(上行带宽和下行带宽)、中央处理器、内存、以及磁盘的当前状态确定私网设备的性能,其中,私网设备的带宽(上行带宽和下行带宽)、中央处理器、内存、磁盘等指标及带宽(上行带宽和下行带宽)、中央处理器、内存、以及磁盘的当前状态可以是私网设备110上报给服务管理模块的。例如,服务管理模块213可以优先选择性能最优的私网设备110为能够部署该网络服务的私网设备。
需要说明的是,针对一个网络服务,服务管理模块213也可以确定多个私网设备,也即该多个私网设备中部署相同的网络服务。
当服务管理模块213接收的第一服务部署请求中包括多个网络服务的程序时,可以采 用上述方式分别确定部署每个网络服务的私网设备,服务管理模块213确定的私网设备可以为一个,也可以为多个,也即该家庭私有设备可以部署该多个网络服务中的部分或全部。
可选的,服务管理模块213还可以对网络服务进行拆解,将该网络服务拆解为多个网络子服务,也就是说,服务管理模块213可以将该网络服务的程序拆解为多个网络子服务的程序。
例如,网络服务为语音识别服务,语音识别服务可以拆分为语音降噪、去除背景音、以及语音转文字这三个网络子服务。又例如,网络服务为基于图像的目标识别服务,基于图像的目标识别服务可以拆分为提取特征图像、基于特征图像选取候选目标、从候选目标中识别目标这三个网络子服务。
服务管理模块213在确定能够部署该网络服务的私网设备时,可以确定能够部署每个网络子服务的私网设备,服务管理模块213确定的私网设备可以为一个,也可以为多个,也即该家庭私有设备可以部署该多个网络子服务中的部分或全部。
服务管理模块213在确定了能够部署该网络服务的私网设备110后,可以建立并保存该网络服务的标识与该私网设备110的标识之间的对应关系。若该网络服务部署在多个私网设备中(如网络服务被拆解为多个网络子服务,该多个网络子服务部署在多个私网设备中),服务管理模块213可以保存该网络服务的标识与该多个私网设备110的标识之间的对应关系。
其中,本申请实施例并不限定网络服务的标识的具体类型,例如该网络服务的标识可以是一个对接该网络服务的应用程序接口的标识,也可以是该网络服务的名称,凡是能够标识该网络服务的信息均适用于本申请实施例。
若服务管理模块213对网络服务有进一步的拆解操作,服务管理模块213在确定了能够部署各个网络子服务的私网设备后,还可以建立并保存该网络子服务的标识与私网设备的标识之间的对应关系。其中,网络子服务的标识可以是服务管理模块213自行配置的,如可以是基于该网络服务的标识配置的。
如,网络服务的标识为AAA,该网络服务被拆解为三个网络子服务,服务管理模块213可以配置该网络子服务的标识分别为AAA-1、AAA-2以及AAA-3。
值得注意的是,公网设备210中可以保存如下几种对应关系:
该私网设备的标识以及私网设备的IPv6地址之间的对应关系、网络服务的标识与该私网设备的标识之间的对应关系、该网络子服务的标识与私网设备的标识之间的对应关系。
对这些对应关系进行进一步处理,服务管理模块213还可以生成网络服务的标识以及私网设备的IPv6地址之间的对应关系,如存在对网络服务有进一步的拆解操作,服务管理模块213还可以生成网络子服务的标识以及私网设备的IPv6地址之间的对应关系。这种情况下,公网设备210可以保存如下几种对应关系:该私网设备的标识以及私网设备的IPv6地址之间的对应关系、网络服务的标识以及私网设备的IPv6地址之间的对应关系,如存在对网络服务有进一步的拆解操作,公网设备210还可以保存该网络子服务的标识与私网设备的IPv6地址之间的对应关系,或只保存该私网设备的标识以及私网设备的IPv6地址之间的对应关系以及该网络子服务的标识与私网设备的IPv6地址之间的对应关系。
步骤209:服务管理模块213向私网设备110发送服务部署指令,该服务部署指令中包括该网络服务的程序。
需要说明的是,服务管理模块213在执行步骤209之前,还可以预先获取私网设备110的网络服务部署许可,下面列举其中几种网络服务部署许可获取方式:
方式一、私网设备110可以预先签订协议,该协议同意在该私网设备110中部署网络服务,而该私网设备110所签订的协议的信息可以预先保存在公网设备210中,服务管理模块210通过该协议可以确定该私网设备110同意部署网络服务,也即获取了该私网设备110的网络服务部署许可。
方式二、私网设备110(服务代理模块212)主动提供该网络服务部署许可。
服务代理模块212在用户的指示下确定可以用户允许占用该私网设备110的资源以部署网络服务。例如,私网设备110可以向用户提供可以与部署网络服务的选择,如私网设备110可以通过如图4A所示的显示界面询问用户是否部署网络服务,以及同意部署网络服务后允许请求的优惠策略。该优惠策略可以是针对私有设备的费用优惠信息,如租金成本减、租金折扣、服务费用折扣等。
在用户点击“是”以及选择了优惠策略后,确定能够在私网设备110上部署网络服务,以及用户选择的优惠策略。进一步的,节点代理设备111还可以通过如图4B所示的显示界面提醒用户是否确定部署网络服务,以及部署网络服务后所面临的状况,如资源可能被占用或消耗等。在用户点击“确认”后,向公网设备发送资源占用许可,还可以发送用户选择的优惠策略,该资源占用许可指示允许占用该私网设备的资源以部署网络服务,该资源占用许可可以理解为网络服务部署许可的另一种表现形式。
资源占用许可以及网络服务部署许可可以为显式的信息,如指示信息2,该指示信息2指示同意部署网络服务,如服务代理模块212可以在用户的指示下,向公网设备210发送该指示信息1。IPv6地址暴露许可可以为隐式的信息,如在执行步骤209时,服务管理模块213向私网设备110发送服务部署指令后,服务代理模块212发送服务部署成功响应,指示该网络服务部署成功,则表明该私网设备110同意部署网络服务或允许占用该私网设备110的资源。
方式三、服务管理模块213可以向私网设备110(服务代理模块212)请求该网络服务部署许可。
服务管理模块21可以向服务代理模块212发送第二服务部署请求,用于请求部署网络服务,该第二服务部署请求中还可以指示部署网络服务后所面临的状况,如资源可能被占用或消耗等。该第二服务部署请求中还可以携带一个或多个优惠策略,该优惠策略可以是针对私有设备的费用优惠信息,如租金成本减、租金折扣、服务费用折扣等。
服务代理模块212在接收到该第二服务部署请求后,可以向用户展示如图4C所示的显示界面,通过该显示界面告知用户公网设备请求在本私网设备上部署网络服务,还可以告知部署网络服务后所面临的状况以及该服务部署请求中还可以携带一个或多个优惠策略。
在用户点击了“确认”以及选择了优惠策略(对应存在多个优惠策略供用户选择的情况下)后,服务代理模块212确定用户同意在该私网设备上部署网络服务,向公网设备210发送服务部署响应,该服务部署响应用于同意部署网络服务,该服务部署响应可以理解为网络服务部署许可的一种表现形式。若用户选择了优惠策略,该服务部署响应中还可以携 带用户选择的优惠策略。
需要说明的是,本申请实施例并不限定公网设备210发送第二服务部署请求的方式,例如该第二服务部署请求可以是公网设备210单独发送给节点代理模块111的请求,也可以是公网设备210定期或不定期向节点代理模块111推送的服务部署信息,该信息可以提示用户是否同意部署网络服务,该信息还可以包括该多个优惠策略,该服务部署信息可以显示在私网设备上,用户可以查看该信息,对该信息进行确认以提供网络服务部署许可。
步骤210:私网设备110中的服务代理模块212接收到该服务部署指令后,从服务部署指令中获取该网络服务的程序,运行该网络服务,也即安装该网络服务的程序。
需要说明的是,在步骤209以及步骤210中是以服务部署指令携带的程序为网络服务的程序,在实际应用中,若服务管理模块213对网络服务存在进一步的拆解操作,且确定该集团私网设备110中需部署一个或多个网络子服务,则该服务部署指令中携带的是该一个或多个网络子服务的程序。
需要说明的是,当一个网络服务被拆解为多个网络子服务,该多个网络子服务部署在多个私网设备中时,对于该多个私网设备中的任一私网设备,该私网设备可以保存该多个私网设备中除自己之外的私网设备的IPv6地址,例如,该私网设备保存的私网设备的IPv6地址可以为对该私网设备在运行网络子服务生产的数据进行下一步处理的网络子服务所在的私网设备的IPv6地址。
服务管理模块213除了确定能够部署网络服务或网络子服务的私网设备110,还可以更新私网设备110中部署的网络服务。
更新私网设备110中部署的网络服务的场景有许多,下面列举其中几种场景:
场景一、修改网络服务的程序。
服务管理模块213在确定需要修改网络服务的程序时,可以向部署该网络服务的私网设备110发送第一服务更新指令,该第一服务更新指令中携带有修改后的网络服务的程序。
私网设备110中的服务代理模块212接收到该第一服务更新指令后,从第一服务更新指令中获取修改后的该网络服务的程序,安装修改后的该网络服务的程序。
服务管理模块213确定需要修改网络服务的程序的情况有许多种,例如第二客户端可以发送服务更新请求,服务更新请求中携带有网络服务的标识以及修改后的网络服务的程序,服务管理模块213在接收到该服务更新请求后,确定需要修改网络服务的程序。又例如,用户可以在公网设备210上进行操作,触发网络服务的程序修改流程,如公网设备210可以针对特定用户提供查看以及修改网络服务的程序的权限,该特定用户通过该公网设备210查看到该网络服务的程序后,可以修改该网络服务的程序,服务管理模块213在检测到用户对网络服务的程序的修改操作后,可以确定需要修改网络服务的程序。
场景二、删除私网设备110中部署的网络服务。
服务管理模块213在确定网络服务无需部署在私网设备110时,可以向部署该网络服务的私网设备110发送第二服务更新指令,该第二服务更新指令指示卸载网络服务。
私网设备110中的服务代理模块212接收到第二服务更新指令后,删除本地安装的该网络服务的程序。
服务管理模块213确定网络服务无需部署在私网设备110的情况有许多种,例如第二客户端可以发送服务中止请求,服务中止请求中携带有网络服务的标识,服务中止请求指示中止该网络服务,服务管理模块213在接收到该服务中止请求后,确定网络服务无需部署在私网设备110。又例如,服务管理模块213在获知当前部署该网络服务的私网设备110中部分组件发生故障或存在安全隐患时,可以确定网络服务无需部署在私网设备110;又例如,用户可以在公网设备210上进行操作,触发网络服务的程序删除流程,如公网设备210可以针对特定用户提供查看以及删除网络服务的程序的权限,该特定用户通过该公网设备210查看到该网络服务的程序后,可以删除该网络服务的程序,服务管理模块213在检测到用户对网络服务的程序的删除操作后,可以确定需要该网络服务无需部署。
服务管理模块213还可以删除该网络服务的标识与该私网设备110的标识(或IPv6地址)的对应关系。
场景三、迁移私网设备110中部署的网络服务。
服务管理模块213在确定迁移私网设备110中部署的网络服务时,确定需要部署该网络服务的目标私网设备,当前部署有该网络服务的私网设备110为源私网设备,服务管理模块213可以向源私网设备发送第二服务更新指令,向目标私网设备发送第三服务更新指令,该第三服务更新指令携带该网络服务的程序。
源私网设备接收到该第二服务更新指令的操作与场景三中私网设备110接收到第二服务更新指令的操作类似,具体可以参见前述说明,此处不再赘述。目标私网设备接收到第三服务更新指令与步骤210中私网设备110接收到该服务部署指令之后,执行的操作类似,具体可以参见前述说明,此处不再赘述。
服务管理模块213确定迁移私网设备110中部署的网络服务的情况有许多种,例如,服务管理模块213在获知当前部署该网络服务的私网设备110中部分组件发生故障或存在安全隐患时,可以确定需要迁移该网络服务;又例如,用户可以在公网设备210上进行操作,触发网络服务的迁移流程,如公网设备210可以针对特定用户提供查看以及修改网络服务部署位置的权限,该特定用户通过该公网设备210查看到该网络服务的程序后,可以修改该网络服务的部署位置,服务管理模块213在检测到用户对网络服务的部署位置的修改操作后,可以确定需要迁移该网络服务。
服务管理模块213还可以更新该网络服务的标识与该私网设备110的标识(或IPv6地址)的对应关系。将该私网设备110的标识或IPv6地址更新为目标私网设备的标识或IPv6地址。
步骤211:第三客户端向地址解析模块212发送服务查询请求,该服务查询请求用于请求查询提供网络服务的私网设备110的IPv6地址,该地址查询请求中包括该网络服务的标识。
当第三客户端获取网络服务时,第三客户端需要先获取部署有该网络服务的该私网设备110的IPv6地址。由于私网设备110的IPv6地址可能会发生变化,第三客户端可以先查询该私网设备110的IPv6地址,也即向地址解析模块212发起服务查询请求,以便后续能够正确访问到该私网设备110,获取该私网设备110提供的网络服务。
步骤212:地址解析模块212接收到该服务查询请求后,可以根据该服务查询请求向 第三客户端发送服务查询响应,该服务查询响应中包括私网设备110的IPv6地址。
地址解析模块212接到该服务查询请求,可以基于本地保存的对应关系,根据该网络服务的标识确定部署有该网络服务的私网设备110的IPv6地址,将该IPv6地址携带在服务查询响应中,发送给第三客户端。
需要说明的是,若该网络服务同时部署在多个私网设备时,址解析模块212可以选择一个私网设备,向第三客户端发送服务查询响应,该服务查询响应中可以携带选择的该私网设备的IPv6地址。也可以向第三客户端发送的携带多个私网设备的IPv6地址的服务查询响应,以供第三客户端自行选择由哪一个或哪几个私网设备提供该网络服务。
若该网络服务拆解为多个网络子服务,部署在多个私网设备时,地址解析模块212向第三客户端发送服务查询响应,该服务查询响应中可以携带该多个私网设备中最先运行的网络子服务所在的私网设备的IPv6地址,该服务查询响应还可以指示该多个私网设备配合提供该网络服务。该服务查询响应中也可以携带该多个私网设备的IPv6地址,该服务查询响应还可以指示该多个私网设备配合提供该网络服务。
步骤213:第三客户端基于该私网设备110的IPv6地址,请求该私网设备110提供网络服务。
以第三客户端请求语音识别服务,第三客户端可以向私网设备110发起目的地址为该私网设备110的IPv6地址、源地址为第三客户端的IPv6地址的服务请求,该服务请求包括待识别的语音数据。
该私网设备110在接收到该服务请求后,可以对该待识别的语音数据进行语音识别,并将语音识别后的文字信息反馈给第三客户端。
需要说明的是,若该网络服务拆解为多个网络子服务,多个网络子服务部署在多个私网设备时,若该服务查询响应中携带该多个私网设备中最先运行的网络子服务所在的私网设备的IPv6地址,第三客户端获取了该最先运行的网络子服务的私网设备110的IPv6地址,第三客户端可以向该私网设备110发起服务请求,该服务请求可以指示用于请求语音识别服务。当该私网设备110接收到该服务请求后,基于该待识别的语音数据,运行网络子服务,之后,再将该网络子服务产生的数据以及该第三客户端的IPv6地址传递给进行下一步处理的网络子服务所在的私网设备,直至传递给该网络服务中最后一个运行的网络子服务所在的私网设备,当最后一个运行的网络子服务所在的私网设备、运行结束后,可以基于该第三客户端的IPv6地址将语音识别后的文字信息反馈给第三客户端。
若该服务查询响应中携带该多个私网设备的IPv6地址,第三客户端获取了该多个私网设备的IPv6地址后,第三客户端可以依次向各个私网设备发起服务请求,以分别请求该多个私网设备中部署的网络子服务。
在如图2所示的实施例中,私网设备110先提供IPv6地址以及私网设备110的标识,之后在公网设备210的指示下部署网络服务,在实际应用中,私网设备110也可以直接在公网设备210的指示下部署网络服务,这样私网设备可以只提供私网设备110的IPv6地址,公网设备210可以保存网络服务的标识与私网设备110的IPv6地址的对应关系即可。
如图5所示,为本申请实施例提供的一种基于私有网络的网络互通方法,该方法包括:
步骤501:第二客户端向服务管理模块213发送服务部署请求,该服务部署请求用于请求部署网络服务,该服务部署请求中包括网络服务的程序。与步骤207相同,具体可以 参见步骤207的相干说明,此处不再赘述。
步骤502:服务管理模块213接收到第一服务部署请求后,确定能够部署该网络服务的私网设备。
步骤503:服务管理模块213从私网设备110中的服务代理模块112获取网络服务部署许可。
服务管理模块213获取网络服务部署许可的方式可以参见步骤209中的相关说明,此处不再赘述。
步骤504:节点管理模块211从节点代理模块111获取私网设备110的IPv6地址。
需要说明的是,私网设备110的IPv6地址可以是节点代理模块111在服务代理模块112向服务管理模块213发送网络服务部署许可时,或在服务代理模块112向服务管理模块213发送网络服务部署许可后,主动向节点管理模块211提供的,也可以是节点代理模块111在节点管理模块211的请求下提供的,例如,节点管理模块211向节点代理模块111发送地址获取请求,用于请求私网设备110的IPv6地址,之后节点代理模块111向节点管理模块212发送节点获取响应,其中携带私网设备110的IPv6地址。
服务管理模块213还可以记录网络服务的标识以及私网设备的IPv6地址之间的对应关系。
步骤505:服务管理模块213指示私网设备110中的服务代理模块112部署网络服务。如服务管理模块213可以向服务代理模块112发送服务部署指令,该服务部署指令中包括该网络服务的程序。具体可以参见步骤209的相关说明,此处不再赘述。
步骤506:私网设备110中的服务代理模块212接收到该服务部署指令后,从服务部署指令中获取该网络服务的程序,运行该网络服务,也即安装该网络服务的程序。具体可以参见步骤210的相关说明,此处不再赘述。
服务管理模块213更新私网设备110中部署的网络服务的方式以及场景可以参见前述说明此处不再赘述。
步骤507:第三客户端向地址解析模块212发送服务查询请求,该服务查询请求用于请求查询提供网络服务的私网设备110的IPv6地址,该地址查询请求中包括该网络服务的标识。具体可以参见步骤211的相关说明,此处不再赘述。
步骤508:地址解析模块212接收到该服务查询请求后,可以根据该服务查询请求向第三客户端发送服务查询响应,该服务查询响应中包括私网设备110的IPv6地址。具体可以参见步骤212的相关说明,此处不再赘述。
步骤509:第三客户端基于该私网设备110的IPv6地址,请求该私网设备110提供网络服务。具体可以参见步骤213的相关说明,此处不再赘述。
下面对本申请实施例所适用于的系统架构进行说明,如图6所示,为本申请实施例提供的一种计算机集群,该计算机集群中包括至少一个计算设备300,每个计算设备300间通过通信网络建立通信通路。
每个计算设备300中包括总线301、处理器302、通信接口303以及存储器304。处理器302、存储器304和通信接口303之间通过总线301通信。
其中,处理器302可以由一个或者多个通用处理器构成,例如中央处理器(central processing unit,CPU),或者CPU和硬件芯片的组合。上述硬件芯片可以是专用集成电路 (application-specific integrated circuit,ASIC)、可编程逻辑器件(programmable logic device,PLD)或其组合。上述PLD可以是复杂可编程逻辑器件(complex programmable logic device,CPLD)、现场可编程逻辑门阵列(field-programmable gate array,FPGA)、通用阵列逻辑(generic array logic,GAL)或其任意组合。
存储器304可以包括易失性存储器(volatile memory),例如随机存取存储器(random access memory,RAM)。存储器304还可以包括非易失性存储器(non-volatile memory,NVM),例如只读存储器(read-only memory,ROM),快闪存储器,硬盘(hard disk drive,HDD)或固态硬盘(solid-state drive,SSD)。存储器304还可以包括上述种类的组合。
存储器304中存储存可执行代码,处理器302可以读取存储器304中的该可执行代码实现功能,还可以通过通信接口303与其他计算设备进行通信。
在本申请实施例中,处理器302可以实现公网设备210的一个或多个模块(如节点管理模块211、地址解析模块212、服务管理模块213的一个或多个模块)的功能,这种情况下,存储器304中存储有公网设备210的一个或多个模块(如节点管理模块211、地址解析模块212、服务管理模块213的一个或多个模块)。
在本申请实施例中,多个计算设备300中的处理器301可以协调工作,执行本申请实施例提供的基于私有网络的网络互通方法中公网设备所执行的方法。
下面对本申请实施例所适用于的系统架构进行说明,如图7所示,为本申请实施例提供的一种计算机集群,该计算机集群中包括至少一个计算设备400,每个计算设备400间通过通信网络建立通信通路。
每个计算设备400中包括总线401、处理器402、通信接口403以及存储器404。可选的,计算设备40中还可以包括显示屏405。处理器402、存储器404和通信接口403之间通过总线401通信。
其中,处理器402以及存储器404的说明参见处理器302以及存储304的说明,此处不再赘述。
存储器404中存储存可执行代码,处理器402可以读取存储器404中的该可执行代码实现功能,还可以通过通信接口403与其他计算设备进行通信,处理器402还可以触发显示屏405向用户显示信息,如本申请实施例中如图3A~3C以及如图4A~4C所示的界面中包括的信息。
在本申请实施例中,处理器402可以实现私网设备110的一个或多个模块(如节点代理模块111以及服务代理模块112中的一个或多个模块)的功能,这种情况下,存储器404中存储有变更装置400的一个或多个模块(如节点代理模块111以及服务代理模块112中的一个或多个模块)。
在本申请实施例中,多个计算设备400中的处理器401可以协调工作,执行本申请实施例提供的基于私有网络的网络互通方法中私网设备所执行的方法。
在本申请所提供的几个实施例中,应该理解到,所揭露的系统、装置和方法,可以通过其它的方式实现。例如,以上所描述的装置实施例仅仅是示意性的,例如,所述单元的划分,仅仅为一种逻辑功能划分,实际实现时可以有另外的划分方式,例如多个单元或组件可以结合或者可以集成到另一个系统,或一些特征可以忽略,或不执行。另一点,所显示或讨论的相互之间的耦合或直接耦合或通信连接可以是通过一些接口,装置或单元的间 接耦合或通信连接,可以是电性,机械或其它的形式。
所述作为分离部件说明的单元可以是或者也可以不是物理上分开的,作为单元显示的部件可以是或者也可以不是物理单元,即可以位于一个地方,或者也可以分布到多个网络单元上。可以根据实际的需要选择其中的部分或者全部单元来实现本实施例方案的目的。
以上所述,仅为本发明的具体实施方式。熟悉本技术领域的技术人员根据本发明提供的具体实施方式,可想到变化或替换,都应涵盖在本发明的保护范围之内。
Claims (30)
- 一种基于私有网络的网络互通方法,其特征在于,所述方法应用于部署在公网中的设备,所述方法包括:在从私网设备中获取网络服务部署许可后,指示所述私网设备部署网络服务,记录部署所述网络服务的所述私网设备的网际协议第6版IPv6地址;接收来自客户端的服务查询请求,所述服务查询请求用于请求部署所述网络服务的所述私网设备的IPv6地址;向所述客户端提供所述网络服务的私网设备的IPv6地址。
- 如权利要求1所述的方法,其特征在于,所述从私网设备中获取网络服务部署许可,包括:向所述私网设备发送服务部署请求,所述服务部署请求用于请求部署网络服务;从所述私网设备接收服务部署响应,所述服务部署响应用于同意部署网络服务。
- 如权利要求2所述的方法,其特征在于,所述服务部署请求还用于指示第一优惠策略,所述第一优惠策略是向所述私网设备提供的、针对所述私网设备的费用优惠信息。
- 如权利要求1所述的方法,其特征在于,所述从私网设备中获取网络服务部署许可,包括:接收所述私网设备的资源占用许可,所述资源占用许可用于指示允许占用所述私网设备的资源以部署网络服务。
- 如权利要求1所述的方法,其特征在于,所述资源占用许可还包括第二优惠策略,所述第二优惠策略为所述私网设备提出的、针对所述私网设备的费用优惠信息。
- 如权利要求1~5任一所述的方法,其特征在于,所述方法还包括:指示所述私网设备更新所述网络服务。
- 如权利要求1~5任一所述的方法,其特征在于,所述方法还包括:从所述私网设备接收所述私网设备更新后的IPv6地址,更新本地保存的所述私网设备的IPv6地址。
- 一种基于私有网络的网络互通方法,其特征在于,所述方法应用于私有网络中的私网设备,所述方法包括:向公网中的设备提供网络服务部署许可;在所述公网中的设备的指示下,部署网络服务,向所述公网中的设备发送所述私网设备的IPv6地址;接收来自客户端的服务请求,所述服务请求用于请求所述网络服务;根据所述服务请求,反馈服务响应。
- 如权利要求8所述的方法,其特征在于,所述向公网中设备提供网络服务部署许可,包括:接收来自所述公网中的设备的服务部署请求,所述服务部署请求用于请求部署网络服务;向所述公网中的设备发送服务部署响应,所述服务部署响应用于同意部署网络服务。
- 如权利要求9所述的方法,其特征在于,所述服务部署请求还用于指示第一优惠策略,所述第一优惠策略是向所述私网设备提供的、针对所述私网设备的费用优惠信息。
- 如权利要求8所述的方法,其特征在于,所述向公网中设备提供网络服务部署许可,包括:向所述公网中的设备发送资源占用许可,所述资源占用许可用于指示允许占用所述私网设备的资源以部署网络服务。
- 如权利要求11所述的方法,其特征在于,所述资源占用许可还包括第二优惠策略,所述第二优惠策略为所述私网设备提出的、针对所述私网设备的费用优惠信息。
- 如权利要求8~12任一所述的方法,其特征在于,所述方法还包括:在所述公网中设备的指示下更新所述网络服务。
- 如权利要求8~12任一所述的方法,其特征在于,所述方法还包括:向所述公网中的设备发送更新后的IPv6地址。
- 一种基于私有网络的网络互通方法,其特征在于,所述方法应用于部署在公网中的设备,所述方法包括:在从私网设备中获取IPv6地址暴露许可后,从所述私网设备获取部署有网络服务的所述私网设备的IPv6地址和所述私网设备的标识;接收来自客户端的地址查询请求,所述地址查询请求用于请求部署有所述网络服务的所述私网设备的IPv6地址,所述地址查询请求包括所述私网设备的标识;向客户端提供所述网设备的IPv6地址。
- 如权利要求15所述的方法,其特征在于,所述从私网设备中获取IPv6地址暴露许可,包括:向所述私网设备发送地址获取请求,所述地址获取请求用于请求所述私网设备的IPv6地址;从所述私网设备接收地址获取响应,所述地址获取响应用于同意暴露IPv6地址,所述地址获取响应中包括所述IPv6地址和所述私网设备的标识。
- 如权利要求15所述的方法,其特征在于,所述从私网设备中获取IPv6地址暴露许可,包括:接收所述私网设备的IPv6地址和所述私网设备的标识。
- 如权利要求15~17任一所述的方法,其特征在于,所述方法还包括:从所述私网设备接收所述私网设备更新后的IPv6地址或标识,更新本地保存的所述私网设备的IPv6地址或标识。
- 一种基于私有网络的网络互通方法,其特征在于,所述方法应用于私有网络中的私网设备,所述方法包括:向公网中的设备提供IPv6地址暴露许可;向所述公网中的设备发送所述私网设备的IPv6地址和所述私网设备的标识;接收来自客户端的数据消息,所述数据消息的目的地址为所述私网设备的IPv6地址。
- 如权利要求19所述的方法,其特征在于,所述向公网中设备提供网络服务部 署许可,包括:接收来自所述公网中的设备的地址获取请求,所述地址获取请求用于请求所述私网设备的IPv6地址,所述地址获取请求还用于指示IPv6地址暴露后需面临的状况;在用户确认了所述IPv6地址暴露后需面临的状况后,从所述公网中的设备发送地址获取响应,所述地址获取响应用于同意暴露IPv6地址,所述地址获取响应中包括所述IPv6地址和所述私网设备的标识。
- 如权利要求19所述的方法,其特征在于,所述向公网中设备提供网络服务部署许可,包括:在用户的指示下,向所述公网中的设备发送所述IPv6地址和所述私网设备的标识。
- 如权利要求19~21任一所述的方法,其特征在于,所述方法还包括:向所述公网中的设备发送更新后的IPv6地址或标识。
- 一种公网设备,其特征在于,所述公网设备部署在公网中,该设备包括:节点管理模块,用于获取私网设备的IPv6地址;服务管理模块,用于在从所述私网设备中获取网络服务部署许可后,指示所述私网设备部署网络服务;以及记录部署所述网络服务的所述私网设备的IPv6地址;地址解析模块,用于接收来自客户端的服务查询请求,所述服务查询请求用于请求部署所述网络服务的所述私网设备的IPv6地址;向所述客户端提供所述网络服务的私网设备的IPv6地址。
- 一种私网设备,其特征在于,所述私网设备部署在私有网络中,该设备包括:服务代理模块,用于向公网中的设备提供网络服务部署许可;以及在所述公网中的设备的指示下,部署网络服务;节点代理模块,用于向所述公网中的设备发送所述私网设备的IPv6地址;所述服务代理模块,还用于接收来自客户端的服务请求,所述服务请求用于请求所述网络服务;以及根据所述服务请求,反馈服务响应。
- 一种公网设备,其特征在于,所述公网设备部署在公网中,该设备包括:节点管理模块,用于在从私网设备中获取IPv6地址暴露许可后,从所述私网设备获取所述私网设备的IPv6地址和所述私网设备的标识;地址解析模块,接收来自客户端的地址查询请求,所述地址查询请求用于请求所述网络服务的所述私网设备的IPv6地址,所述地址查询请求包括所述私网设备的标识;向客户端提供所述网络服务的私网设备的IPv6地址。
- 一种私网设备,其特征在于,所述私网设备部署在私有网络中,该设备包括:节点代理模块,用于向公网中的设备提供IPv6地址暴露许可;向所述公网中的设备发送所述私网设备的IPv6地址和所述私网设备的标识;所述节点代理模块,还用于接收来自客户端的数据消息,所述数据消息的目的地址为所述私网设备的IPv6地址。
- 一种计算设备集群,其特征在于,所述计算设备集群中包括至少一个计算设备,每个计算设备包括处理器和存储器;所述至少一个计算设备中的存储器,用于存储计算机程序指令;所述至少一个计算设备中的处理器调用所述存储器中存储的计算机程序指令执行 如权利要求1至7中任一项所述的方法。
- 一种计算设备集群,其特征在于,所述计算设备集群中包括至少一个计算设备,每个计算设备包括处理器和存储器;所述至少一个计算设备中的存储器,用于存储计算机程序指令;所述至少一个计算设备中的处理器调用所述存储器中存储的计算机程序指令执行如权利要求8至14中任一项所述的方法。
- 一种计算设备集群,其特征在于,所述计算设备集群中包括至少一个计算设备,每个计算设备包括处理器和存储器;所述至少一个计算设备中的存储器,用于存储计算机程序指令;所述至少一个计算设备中的处理器调用所述存储器中存储的计算机程序指令执行如权利要求15至18中任一项所述的方法。
- 一种计算设备集群,其特征在于,所述计算设备集群中包括至少一个计算设备,每个计算设备包括处理器和存储器;所述至少一个计算设备中的存储器,用于存储计算机程序指令;所述至少一个计算设备中的处理器调用所述存储器中存储的计算机程序指令执行如权利要求19至22中任一项所述的方法。
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| EP21871491.3A EP4203351A4 (en) | 2020-09-22 | 2021-09-22 | METHOD AND DEVICE FOR COMMUNICATION BETWEEN PRIVATE NETWORKS AND COMPUTER CLUSTER |
Applications Claiming Priority (2)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202011003839.2 | 2020-09-22 | ||
| CN202011003839.2A CN114301873B (zh) | 2020-09-22 | 2020-09-22 | 一种基于私有网络的网络互通方法、设备以及计算机集群 |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| WO2022063121A1 true WO2022063121A1 (zh) | 2022-03-31 |
Family
ID=80846236
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| PCT/CN2021/119602 Ceased WO2022063121A1 (zh) | 2020-09-22 | 2021-09-22 | 一种基于私有网络的网络互通方法、设备以及计算机集群 |
Country Status (3)
| Country | Link |
|---|---|
| EP (1) | EP4203351A4 (zh) |
| CN (1) | CN114301873B (zh) |
| WO (1) | WO2022063121A1 (zh) |
Families Citing this family (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN116846971B (zh) * | 2023-07-19 | 2026-03-03 | 广域铭岛数字科技有限公司 | 私有网络数据传输方法及装置 |
Citations (8)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US20040240468A1 (en) * | 2003-05-30 | 2004-12-02 | Chin Kwan Wu | Inter private newtwork communications between IPv4 hosts using IPv6 |
| US20050030956A1 (en) * | 2003-08-05 | 2005-02-10 | Lord Christopher J. | Method, apparatus and system for accessing multiple nodes on a private network |
| US20090113521A1 (en) * | 2007-10-31 | 2009-04-30 | Microsoft Corporation | Private network access using IPv6 tunneling |
| WO2010099680A1 (zh) * | 2009-03-06 | 2010-09-10 | 中兴通讯股份有限公司 | 私网用户对同侧私网设备访问的实现方法及系统 |
| CN102326157A (zh) * | 2009-02-20 | 2012-01-18 | 微软公司 | 使用服务地址的服务访问 |
| CN102447747A (zh) * | 2010-10-09 | 2012-05-09 | 中国移动通信集团公司 | 一种与私有网络的交互方法、装置及系统 |
| WO2018036667A1 (en) * | 2016-08-22 | 2018-03-01 | Siemens Aktiengesellschaft | Method for communicating data between a user device and a network device |
| CN110191031A (zh) * | 2019-05-10 | 2019-08-30 | 杭州迪普科技股份有限公司 | 网络资源访问方法、装置、电子设备 |
Family Cites Families (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101360030B (zh) * | 2008-08-21 | 2011-10-05 | 华为技术有限公司 | 一种私网用户使用公网地址接入公网的方法及网关 |
| CN101860536B (zh) * | 2010-05-31 | 2014-05-07 | 北京邮电大学 | 一种基于sip软终端的私网穿越系统和方法 |
| CN103338151B (zh) * | 2013-07-09 | 2017-07-14 | 新华三技术有限公司 | 公网客户端访问私网服务器的方法及路由器 |
| CN107835259A (zh) * | 2017-12-15 | 2018-03-23 | 睿哲科技股份有限公司 | 一种基于IPv6解决信息孤岛问题的互联互通装置 |
| CN109561171B (zh) * | 2019-01-22 | 2021-11-16 | 北京百度网讯科技有限公司 | 虚拟私有云服务的配置方法和装置 |
-
2020
- 2020-09-22 CN CN202011003839.2A patent/CN114301873B/zh active Active
-
2021
- 2021-09-22 EP EP21871491.3A patent/EP4203351A4/en active Pending
- 2021-09-22 WO PCT/CN2021/119602 patent/WO2022063121A1/zh not_active Ceased
Patent Citations (8)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US20040240468A1 (en) * | 2003-05-30 | 2004-12-02 | Chin Kwan Wu | Inter private newtwork communications between IPv4 hosts using IPv6 |
| US20050030956A1 (en) * | 2003-08-05 | 2005-02-10 | Lord Christopher J. | Method, apparatus and system for accessing multiple nodes on a private network |
| US20090113521A1 (en) * | 2007-10-31 | 2009-04-30 | Microsoft Corporation | Private network access using IPv6 tunneling |
| CN102326157A (zh) * | 2009-02-20 | 2012-01-18 | 微软公司 | 使用服务地址的服务访问 |
| WO2010099680A1 (zh) * | 2009-03-06 | 2010-09-10 | 中兴通讯股份有限公司 | 私网用户对同侧私网设备访问的实现方法及系统 |
| CN102447747A (zh) * | 2010-10-09 | 2012-05-09 | 中国移动通信集团公司 | 一种与私有网络的交互方法、装置及系统 |
| WO2018036667A1 (en) * | 2016-08-22 | 2018-03-01 | Siemens Aktiengesellschaft | Method for communicating data between a user device and a network device |
| CN110191031A (zh) * | 2019-05-10 | 2019-08-30 | 杭州迪普科技股份有限公司 | 网络资源访问方法、装置、电子设备 |
Non-Patent Citations (2)
| Title |
|---|
| CARPENTER, B. ET AL.: "Connection of IPv6 Domains via IPv4 Clouds", IETF RFC 3056, 28 February 2001 (2001-02-28), pages 1 - 23, XP002240357 * |
| See also references of EP4203351A4 * |
Also Published As
| Publication number | Publication date |
|---|---|
| CN114301873B (zh) | 2024-11-29 |
| EP4203351A1 (en) | 2023-06-28 |
| EP4203351A4 (en) | 2024-01-24 |
| CN114301873A (zh) | 2022-04-08 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| US12536034B2 (en) | Scheduling method and apparatus, and related device | |
| CN108549580B (zh) | 自动部署Kubernetes从节点的方法及终端设备 | |
| JP6190949B2 (ja) | 仮想ネットワーク機能マネージャによる仮想インフラストラクチャマネージャへのアクセスの自動化構成 | |
| JP5747981B2 (ja) | 仮想機械を用いた電子ネットワークにおける複数のクライアントの遠隔保守のためのシステム及び方法 | |
| JP6834033B2 (ja) | ネットワークスライス管理方法、ユニット、及びシステム | |
| CN110661647A (zh) | 一种生命周期管理方法及装置 | |
| JP2018530214A (ja) | ネットワークサービスをデプロイするための方法及び装置 | |
| CN113691575B (zh) | 通信方法、装置及系统 | |
| WO2017185251A1 (zh) | Vnfm的确定方法和网络功能虚拟化编排器 | |
| WO2019100266A1 (zh) | 移动边缘主机服务通知方法和装置 | |
| CN105095023A (zh) | 一种云主机创建装置、方法和计算设备 | |
| CN113608865A (zh) | 一种流量控制方法、装置、系统、电子设备及存储介质 | |
| CN109040263B (zh) | 基于分布式系统的业务处理方法及装置 | |
| CN111224952A (zh) | 用于定向流量的网络资源获取方法、装置及存储介质 | |
| EP4716194A1 (en) | Service governance method and apparatus, and computer-readable storage medium | |
| CN110855488B (zh) | 一种虚拟机接入方法及装置 | |
| CN115827223A (zh) | 一种基于云原生平台的服务网格托管方法和系统 | |
| CN108600151B (zh) | 一种数据通讯方法、设备及系统 | |
| CN108664274A (zh) | 操作系统初始化配置的实现方法、系统和装置 | |
| WO2022063121A1 (zh) | 一种基于私有网络的网络互通方法、设备以及计算机集群 | |
| CN108881460B (zh) | 一种云平台统一监控的实现方法和实现装置 | |
| CN114615285A (zh) | 一种物理机的部署方法、装置、电子设备及存储介质 | |
| WO2024156227A1 (zh) | 一种云监控服务的配置方法、装置及系统 | |
| CN117076046A (zh) | 云容器多级访问方法、装置、存储介质及芯片 | |
| CN117336257A (zh) | 容器间的通信方法及装置、计算机存储介质、电子设备 |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| ENP | Entry into the national phase |
Ref document number: 2021871491 Country of ref document: EP Effective date: 20230322 |
|
| NENP | Non-entry into the national phase |
Ref country code: DE |