CN114301872B - Domain name based access method and device, electronic equipment and storage medium - Google Patents
Domain name based access method and device, electronic equipment and storage medium Download PDFInfo
- Publication number
- CN114301872B CN114301872B CN202111616610.0A CN202111616610A CN114301872B CN 114301872 B CN114301872 B CN 114301872B CN 202111616610 A CN202111616610 A CN 202111616610A CN 114301872 B CN114301872 B CN 114301872B
- Authority
- CN
- China
- Prior art keywords
- domain name
- list
- internet protocol
- target
- protocol address
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Active
Links
- 238000000034 method Methods 0.000 title claims abstract description 48
- 230000015654 memory Effects 0.000 claims description 16
- 238000012545 processing Methods 0.000 claims description 11
- 238000004590 computer program Methods 0.000 claims description 6
- 238000010586 diagram Methods 0.000 description 16
- 230000006870 function Effects 0.000 description 10
- 230000004044 response Effects 0.000 description 4
- 238000005516 engineering process Methods 0.000 description 3
- 230000008569 process Effects 0.000 description 3
- 235000008694 Humulus lupulus Nutrition 0.000 description 2
- 238000013480 data collection Methods 0.000 description 2
- 238000013507 mapping Methods 0.000 description 2
- 238000004891 communication Methods 0.000 description 1
- 230000007423 decrease Effects 0.000 description 1
- 230000007246 mechanism Effects 0.000 description 1
- 230000003287 optical effect Effects 0.000 description 1
- 238000000926 separation method Methods 0.000 description 1
- 230000001360 synchronised effect Effects 0.000 description 1
Landscapes
- Data Exchanges In Wide-Area Networks (AREA)
Abstract
Description
技术领域Technical field
本申请涉及通信技术领域,特别涉及一种基于域名的访问方法及装置、电子设备、存储介质。This application relates to the field of communication technology, and in particular to a domain name-based access method and device, electronic equipment, and storage media.
背景技术Background technique
DNS(Domain Name System,域名系统)是记录域名和IP地址映射关系的分布式数据库,DNS解析即查找域名对应映射关系的IP地址并返回。DNS (Domain Name System) is a distributed database that records the mapping relationship between domain names and IP addresses. DNS resolution is to find the IP address corresponding to the mapping relationship of the domain name and return it.
域名可以帮助用户更方便记忆和管理资源业务,用户登录访问控制系统后,通过内网IP地址或域名访问授权资源,内网域名依赖内网DNS解析。传统模式下,所有域名请求在客户端被拦截,通过隧道发往内部域名服务器。如果内部域名服务器部署在与无法访问外网的环境中,通常无法解析外网域名,导致进入内网DNS的外网域名不可用;如果内网域名服务器级联可以解析外网DNS的服务器,随着级联深度的增加,访问效率大大下降。Domain names can help users remember and manage resource services more conveniently. After logging in to the access control system, users can access authorized resources through intranet IP addresses or domain names. Intranet domain names rely on intranet DNS resolution. In traditional mode, all domain name requests are intercepted on the client and sent to the internal domain name server through the tunnel. If the internal domain name server is deployed in an environment that cannot access the external network, it usually cannot resolve the external network domain name, resulting in the external network domain name entering the internal network DNS being unavailable; if the internal network domain name server is cascaded to a server that can resolve the external network DNS, then the external domain name will be unavailable. As the cascade depth increases, the access efficiency decreases greatly.
发明内容Contents of the invention
本申请实施例提供了基于域名的访问方法,用以提高访问效率。The embodiment of this application provides an access method based on domain name to improve access efficiency.
本申请实施例提供了一种基于域名的访问方法,包括:The embodiment of this application provides a domain name-based access method, including:
在用户登录状态下,拦截客户端发起的用户访问请求;When the user is logged in, intercept user access requests initiated by the client;
根据所述用户访问请求携带的域名名称,确定所述域名名称所属的目标域名名单;According to the domain name carried in the user access request, determine the target domain name list to which the domain name belongs;
根据所述目标域名名单对应的域名解析路径,获得所述域名名称对应的互联网协议地址,并将所述互联网协议地址返回所述客户端。According to the domain name resolution path corresponding to the target domain name list, the Internet protocol address corresponding to the domain name name is obtained, and the Internet protocol address is returned to the client.
在一实施例中,所述根据所述用户访问请求携带的域名名称,确定所述域名名称所属的目标域名名单,包括:In one embodiment, determining the target domain name list to which the domain name belongs based on the domain name carried in the user access request includes:
根据所述用户访问请求携带的域名名称,判断所述域名名称是否出现在虚拟域名名单、外网域名名单或内网域名名单;According to the domain name carried in the user's access request, determine whether the domain name appears in the virtual domain name list, the external network domain name list, or the intranet domain name list;
将出现所述域名名称的域名名单作为所述目标域名名单。The domain name list in which the domain name appears is used as the target domain name list.
在一实施例中,所述方法还包括:In one embodiment, the method further includes:
若任一域名名称同时出现在所述外网域名名单和内网域名名单,将所述外网域名名单作为所述目标域名名单。If any domain name appears in both the external network domain name list and the internal network domain name list, the external network domain name list is used as the target domain name list.
在一实施例中,所述根据所述目标域名名单对应的域名解析路径,获得所述域名名称对应的互联网协议地址,包括:In one embodiment, obtaining the Internet protocol address corresponding to the domain name based on the domain name resolution path corresponding to the target domain name list includes:
若所述目标域名名单为虚拟域名名单,在本地查询所述域名名称对应的互联网协议地址。If the target domain name list is a virtual domain name list, query the Internet protocol address corresponding to the domain name name locally.
在一实施例中,所述根据所述目标域名名单对应的域名解析路径,获得所述域名名称对应的互联网协议地址,包括:In one embodiment, obtaining the Internet protocol address corresponding to the domain name based on the domain name resolution path corresponding to the target domain name list includes:
若所述目标域名名单为外网域名名单,将所述域名名称发送给外网域名服务器,获得所述外网域名服务器返回的所述域名名称对应的互联网协议地址。If the target domain name list is an external network domain name list, send the domain name name to the external network domain name server, and obtain the Internet protocol address corresponding to the domain name name returned by the external network domain name server.
在一实施例中,所述根据所述目标域名名单对应的域名解析路径,获得所述域名名称对应的互联网协议地址,包括:In one embodiment, obtaining the Internet protocol address corresponding to the domain name based on the domain name resolution path corresponding to the target domain name list includes:
若所述目标域名名单为内网域名名单,将所述域名名称发送给内网域名服务器,获得所述内网域名服务器返回的所述域名名称对应的互联网协议地址。If the target domain name list is an intranet domain name list, send the domain name name to the intranet domain name server, and obtain the Internet protocol address corresponding to the domain name name returned by the intranet domain name server.
在一实施例中,所述在用户登录状态下,拦截客户端发起的用户访问请求之前,所述方法还包括:In one embodiment, before intercepting the user access request initiated by the client in the user login state, the method further includes:
在所述客户端本地创建域名服务,并设置所述域名服务的优先级最高,用于拦截所述客户端发起的用户访问请求。Create a domain name service locally on the client, and set the highest priority of the domain name service to intercept user access requests initiated by the client.
在一实施例中,所述方法还包括:In one embodiment, the method further includes:
在用户未登录状态下,将所述用户访问请求发送到外网域名服务器,获得所述外网域名服务器返回的所述域名名称对应的互联网协议地址。When the user is not logged in, the user access request is sent to the external network domain name server, and the Internet protocol address corresponding to the domain name returned by the external network domain name server is obtained.
在一实施例中,所述根据所述用户访问请求携带的域名名称,确定所述域名名称所属的目标域名名单,包括:In one embodiment, determining the target domain name list to which the domain name belongs based on the domain name carried in the user access request includes:
根据所述用户访问请求携带的域名名称和域名类型,若域名类型为虚拟域名,在虚拟域名名单中查找所述域名名称;According to the domain name and domain name type carried in the user access request, if the domain name type is a virtual domain name, search for the domain name in the virtual domain name list;
若在所述虚拟域名名单找到所述域名名称,确定所述虚拟域名名单为所述目标域名名单。If the domain name is found in the virtual domain name list, the virtual domain name list is determined to be the target domain name list.
本申请实施例还提供了一种基于域名的访问装置,包括:The embodiment of this application also provides a domain name-based access device, including:
请求拦截模块,用于在用户登录状态下,拦截客户端发起的用户访问请求;The request interception module is used to intercept user access requests initiated by the client when the user is logged in;
名单确定模块,用于根据所述用户访问请求携带的域名名称,确定所述域名名称所属的目标域名名单;A list determination module, configured to determine the target domain name list to which the domain name belongs based on the domain name carried in the user access request;
域名处理模块,用于根据所述目标域名名单对应的域名解析路径,获得所述域名名称对应的互联网协议地址,并将所述互联网协议地址返回所述客户端。The domain name processing module is configured to obtain the Internet protocol address corresponding to the domain name name according to the domain name resolution path corresponding to the target domain name list, and return the Internet protocol address to the client.
本申请实施例还提供了一种电子设备,所述电子设备包括:An embodiment of the present application also provides an electronic device, where the electronic device includes:
处理器;processor;
用于存储处理器可执行指令的存储器;Memory used to store instructions executable by the processor;
其中,所述处理器被配置为执行上述的基于域名的访问方法。Wherein, the processor is configured to execute the above domain name-based access method.
本申请实施例还提供了一种计算机可读存储介质,所述存储介质存储有计算机程序,所述计算机程序可由处理器执行以完成上述基于域名的访问方法。Embodiments of the present application also provide a computer-readable storage medium, the storage medium stores a computer program, and the computer program can be executed by a processor to complete the above domain name-based access method.
本申请上述实施例提供的技术方案,通过拦截客户端发起的用户访问请求;根据用户访问请求携带的域名名称,确定域名名称所属的目标域名名单;根据目标域名名单对应的域名解析路径,获得所述域名名称对应的互联网协议地址,从而无需内网域名服务器进行域名名称的转发,提高了域名的解析效率,从而提高了访问效率。The technical solution provided by the above embodiments of this application intercepts the user access request initiated by the client; determines the target domain name list to which the domain name belongs based on the domain name carried by the user access request; and obtains the target domain name list according to the domain name resolution path corresponding to the target domain name list. The Internet protocol address corresponding to the domain name name eliminates the need for the intranet domain name server to forward the domain name, improves the domain name resolution efficiency, and thus improves the access efficiency.
附图说明Description of drawings
为了更清楚地说明本申请实施例的技术方案,下面将对本申请实施例中所需要使用的附图作简单地介绍。In order to explain the technical solutions of the embodiments of the present application more clearly, the drawings required to be used in the embodiments of the present application will be briefly introduced below.
图1为本申请实施例提供的基于域名的访问方法的应用场景示意图;Figure 1 is a schematic diagram of the application scenario of the domain name-based access method provided by the embodiment of the present application;
图2为本申请一实施例提供的电子设备的结构示意图;Figure 2 is a schematic structural diagram of an electronic device provided by an embodiment of the present application;
图3是本申请实施例提供的一种基于域名的访问方法的流程示意图;Figure 3 is a schematic flow chart of a domain name-based access method provided by an embodiment of the present application;
图4是本申请实施例提供的基于域名的访问方法的整体架构示意图;Figure 4 is a schematic diagram of the overall architecture of the domain name-based access method provided by the embodiment of the present application;
图5是用户未登录访问控制系统时域名解析状态示意图;Figure 5 is a schematic diagram of the domain name resolution status when the user is not logged in to the access control system;
图6是用户登录访问控制系统后域名解析状态示意图;Figure 6 is a schematic diagram of the domain name resolution status after the user logs in to the access control system;
图7是本申请实施例提供的一种基于域名的访问装置的框图。Figure 7 is a block diagram of a domain name-based access device provided by an embodiment of the present application.
具体实施方式Detailed ways
下面将结合本申请实施例中的附图,对本申请实施例中的技术方案进行描述。The technical solutions in the embodiments of the present application will be described below with reference to the drawings in the embodiments of the present application.
相似的标号和字母在下面的附图中表示类似项,因此,一旦某一项在一个附图中被定义,则在随后的附图中不需要对其进行进一步定义和解释。同时,在本申请的描述中,术语“第一”、“第二”等仅用于区分描述,而不能理解为指示或暗示相对重要性。Similar reference numerals and letters refer to similar items in the following figures, so that once an item is defined in one figure, it does not need further definition or explanation in subsequent figures. Meanwhile, in the description of the present application, the terms "first", "second", etc. are only used to differentiate the description and cannot be understood as indicating or implying relative importance.
图1为本申请实施例提供的基于域名的访问方法的应用场景示意图。如图1所示,该应用场景包括第一终端110、内网DNS服务器120、外网DNS服务器130,内网资源服务器140以及外网资源服务器150。第一终端110分别连接内网DNS服务器120、外网DNS服务器130,内网资源服务器140以及外网资源服务器150。Figure 1 is a schematic diagram of the application scenario of the domain name-based access method provided by the embodiment of the present application. As shown in Figure 1, the application scenario includes a first terminal 110, an internal network DNS server 120, an external network DNS server 130, an internal network resource server 140, and an external network resource server 150. The first terminal 110 is connected to the internal network DNS server 120, the external network DNS server 130, the internal network resource server 140 and the external network resource server 150 respectively.
第一终端110可以是台式电脑、笔记本电脑、智能手机等智能终端。第一终端110可以运行浏览器等客户端还可以运行访问控制系统,第一终端110的访问控制系统可以执行本申请实施例提供的方法,在用户登录状态下,拦截客户端发起的用户访问请求;根据所述用户访问请求携带的域名名称,确定所述域名名称所属的目标域名名单;根据所述目标域名名单对应的域名解析路径,获得所述域名名称对应的互联网协议地址(IP地址),并将所述互联网协议地址返回所述客户端。The first terminal 110 may be a desktop computer, a notebook computer, a smartphone, or other smart terminal. The first terminal 110 can run a client such as a browser and can also run an access control system. The access control system of the first terminal 110 can execute the method provided in the embodiments of this application to intercept user access requests initiated by the client when the user is logged in. ; According to the domain name carried in the user access request, determine the target domain name list to which the domain name belongs; according to the domain name resolution path corresponding to the target domain name list, obtain the Internet Protocol address (IP address) corresponding to the domain name, and returns the Internet Protocol address to the client.
在一实施例中,如果域名名称在内网域名名单中,则访问控制系统可以将域名名称发送给内网DNS服务器120进行解析,得到IP地址返回客户端。之后客户端可以根据内网DNS服务器120返回的IP地址访问内网资源服务器140。In one embodiment, if the domain name is in the intranet domain name list, the access control system may send the domain name to the intranet DNS server 120 for analysis, and obtain the IP address and return it to the client. The client can then access the intranet resource server 140 according to the IP address returned by the intranet DNS server 120 .
在另一实施例中,如果域名名称在外网域名名单中,则访问控制系统可以将域名名称发送给外网DNS服务器130进行解析,得到IP地址返回客户端。之后客户端可以基于外网DNS服务器130返回的IP地址访问外网资源服务器150,提高基于域名的访问效率。In another embodiment, if the domain name is in the external network domain name list, the access control system can send the domain name to the external network DNS server 130 for analysis, and obtain the IP address and return it to the client. The client can then access the external network resource server 150 based on the IP address returned by the external DNS server 130, thereby improving access efficiency based on the domain name.
图2为本申请一实施例提供的电子设备的结构示意图。该电子设备200可以作为上述第一终端110,该电子设备200可以用于执行本申请实施例提供的基于域名的访问方法。如图2所示,该电子设备200包括:一个或多个处理器202、一个或多个存储处理器可执行指令的存储器204。其中,所述处理器202被配置为执行本申请下述实施例提供的基于域名的访问方法。FIG. 2 is a schematic structural diagram of an electronic device provided by an embodiment of the present application. The electronic device 200 can serve as the above-mentioned first terminal 110, and the electronic device 200 can be used to execute the domain name-based access method provided in the embodiment of the present application. As shown in FIG. 2 , the electronic device 200 includes: one or more processors 202 and one or more memories 204 that store instructions executable by the processors. The processor 202 is configured to execute the domain name-based access method provided in the following embodiments of this application.
所述处理器202可以是包含中央处理单元(CPU)、图像处理单元(GPU)或者具有数据处理能力和/或指令执行能力的其它形式的处理单元的设备,可以对所述电子设备200中的其它组件的数据进行处理,还可以控制所述电子设备200中的其它组件以执行期望的功能。The processor 202 may be a device including a central processing unit (CPU), a graphics processing unit (GPU), or other forms of processing units with data processing capabilities and/or instruction execution capabilities, and may perform processing on the electronic device 200 The data of other components is processed, and other components in the electronic device 200 can also be controlled to perform desired functions.
所述存储器204可以包括一个或多个计算机程序产品,所述计算机程序产品可以包括各种形式的计算机可读存储介质,例如易失性存储器和/或非易失性存储器。所述易失性存储器例如可以包括随机存取存储器(RAM)和/或高速缓冲存储器(cache)等。所述非易失性存储器例如可以包括只读存储器(ROM)、硬盘、闪存等。在所述计算机可读存储介质上可以存储一个或多个计算机程序指令,处理器202可以运行所述程序指令,以实现下文所述的基于域名的访问方法。在所述计算机可读存储介质中还可以存储各种应用程序和各种数据,例如所述应用程序使用和/或产生的各种数据等。The memory 204 may include one or more computer program products, which may include various forms of computer-readable storage media, such as volatile memory and/or non-volatile memory. The volatile memory may include, for example, random access memory (RAM) and/or cache memory (cache). The non-volatile memory may include, for example, read-only memory (ROM), hard disk, flash memory, etc. One or more computer program instructions may be stored on the computer-readable storage medium, and the processor 202 may execute the program instructions to implement the domain name-based access method described below. Various application programs and various data, such as various data used and/or generated by the application programs, may also be stored in the computer-readable storage medium.
在一实施例中,图2所示电子设备200还可以包括输入装置206、输出装置208以及数据采集装置210,这些组件通过总线系统212和/或其它形式的连接机构(未示出)互连。应当注意,图2所示的电子设备200的组件和结构只是示例性的,而非限制性的,根据需要,所述电子设备200也可以具有其他组件和结构。In one embodiment, the electronic device 200 shown in FIG. 2 may also include an input device 206, an output device 208, and a data acquisition device 210. These components are interconnected through a bus system 212 and/or other forms of connection mechanisms (not shown). . It should be noted that the components and structures of the electronic device 200 shown in FIG. 2 are only exemplary and not restrictive. The electronic device 200 may also have other components and structures as needed.
所述输入装置206可以是用户用来输入指令的装置,并且可以包括键盘、鼠标、麦克风和触摸屏等中的一个或多个。所述输出装置208可以向外部(例如,用户)输出各种信息(例如,图像或声音),并且可以包括显示器、扬声器等中的一个或多个。所述数据采集装置210可以采集对象的图像,并且将所采集的图像存储在所述存储器204中以供其它组件使用。示例性地,该数据采集装置210可以为摄像头。The input device 206 may be a device used by the user to input instructions, and may include one or more of a keyboard, a mouse, a microphone, a touch screen, and the like. The output device 208 may output various information (eg, images or sounds) to the outside (eg, a user), and may include one or more of a display, a speaker, and the like. The data acquisition device 210 can acquire images of objects and store the acquired images in the memory 204 for use by other components. For example, the data collection device 210 may be a camera.
在一实施例中,用于实现本申请实施例的基于域名的访问方法的示例电子设备200中的各器件可以集成设置,也可以分散设置,诸如将处理器202、存储器204、输入装置206和输出装置208集成设置于一体,而将数据采集装置210分离设置。In one embodiment, each component in the example electronic device 200 used to implement the domain name-based access method in the embodiment of the present application can be integrated or distributed, such as the processor 202, the memory 204, the input device 206 and the The output device 208 is integrated into one body, while the data collection device 210 is provided separately.
在一实施例中,用于实现本申请实施例的基于域名的访问方法的示例电子设备200可以被实现为诸如笔记本电脑、台式电脑、智能手机等智能设备。In one embodiment, the example electronic device 200 used to implement the domain name-based access method of the embodiment of the present application can be implemented as a smart device such as a laptop computer, a desktop computer, a smart phone, etc.
图3是本申请实施例提供的一种基于域名的访问方法的流程示意图。该方法可以由图1所示应用场景中第一终端110执行,如图3所示,该方法包括以下步骤S310-步骤S330。Figure 3 is a schematic flowchart of a domain name-based access method provided by an embodiment of the present application. This method can be executed by the first terminal 110 in the application scenario shown in Figure 1. As shown in Figure 3, the method includes the following steps S310 to S330.
步骤S310:在用户登录状态下,拦截客户端发起的用户访问请求。Step S310: In the user login state, intercept the user access request initiated by the client.
第一终端部署有访问控制系统,用户可以通过账号密码登录访问控制系统,从而进入用户登录状态。访问控制系统可以拦截客户端发起的用户访问请求。举例来说,客户端可以是浏览器。用户访问请求可以包括域名名称和域名类型等信息。访问控制系统可以截获客户端发起的域名请求报文(即用户访问请求),解析报文内容,获得用户查询的域名名称以及查询类型等。The first terminal is deployed with an access control system, and the user can log in to the access control system through the account and password, thereby entering the user login state. The access control system can intercept user access requests initiated by the client. For example, the client can be a browser. User access requests can include information such as domain name and domain name type. The access control system can intercept the domain name request message initiated by the client (ie, user access request), parse the message content, and obtain the domain name name and query type queried by the user.
需要说明的是,配置有多个DNS地址时,DNS优先级用于表示操作系统发送DNS请求的顺序,如Windows操作系统可配置首选DNS服务器和备选DNS服务器,首选优先于备选,两个DNS地址,接口跃点数低的优先于跃点数高的;Linux操作系统和Mac操作系统可配置全局DNS顺序,位置越靠前,优先级越高。It should be noted that when multiple DNS addresses are configured, DNS priority is used to indicate the order in which the operating system sends DNS requests. For example, the Windows operating system can be configured with a preferred DNS server and an alternative DNS server. The preferred DNS server takes precedence over the alternative. The two For DNS addresses, those with lower interface hops take precedence over those with higher hops; Linux operating systems and Mac operating systems can configure the global DNS order. The higher the position, the higher the priority.
因此,在用户登录访问控制系统后,访问控制系统可以在客户端本地创建域名服务,并设置所述域名服务的优先级最高。从而访问请求可以先经过本地创建的域名服务,从而起到拦截客户端发起的用户访问请求的作用。在一实施例中,可以在客户端本地127.0.0.1地址53端口上创建DNS服务,监听本地用户访问请求。本地域名服务的策略可以基于用户访问请求的域名名称,执行对应的处理动作,包括直接构造DNS响应返回域名名称对应绑定的IP地址、将域名名称发往内网DNS服务器解析或者将域名名称发往外网DNS服务器解析,具体参见下文。Therefore, after the user logs in to the access control system, the access control system can create a domain name service locally on the client and set the highest priority of the domain name service. Therefore, access requests can first pass through the locally created domain name service, thereby intercepting user access requests initiated by the client. In one embodiment, a DNS service can be created on the client's local 127.0.0.1 address port 53 to listen for local user access requests. The local domain name service policy can perform corresponding processing actions based on the domain name requested by the user, including directly constructing a DNS response to return the IP address bound to the domain name, sending the domain name to the intranet DNS server for resolution, or sending the domain name to Resolve to the external DNS server, see below for details.
步骤S320:根据所述用户访问请求携带的域名名称,确定所述域名名称所属的目标域名名单。Step S320: Determine a target domain name list to which the domain name belongs based on the domain name carried in the user access request.
本申请实施例可以有三种域名名单,虚拟域名名单、外网域名名单和内网域名名单。目标域名名单可能是上述三种域名名单中的任意一种。域名名称在哪个域名名单中,则该域名名单就是目标域名名单。This application embodiment may have three types of domain name lists, a virtual domain name list, an external network domain name list, and an intranet domain name list. The target domain name list may be any of the above three domain name lists. Which domain name list the domain name is in is the target domain name list.
举例来说,域名名称可以是demo.c.com,在一实施例中,可以根据所述用户访问请求携带的域名名称,判断所述域名名称是否出现在虚拟域名名单、外网域名名单或内网域名名单;将出现所述域名名称的域名名单作为所述目标域名名单。For example, the domain name may be demo.c.com. In one embodiment, based on the domain name carried in the user's access request, it may be determined whether the domain name appears in the virtual domain name list, the external domain name list, or the internal domain name list. Domain name list; use the domain name list in which the domain name appears as the target domain name list.
虚拟域名名单、外网域名名单和内网域名名单可以提前配置好,虚拟域名名单是相对真实域名而言的,不需要域名服务器解析,直接本地即可查询到虚拟域名对应的ip地址。内网域名名单中的域名名称由内网域名服务器解析得到域名名称对应的ip地址,外网域名名单中的域名名称由外网域名服务器解析得到域名名称对应的ip地址。The virtual domain name list, external network domain name list and intranet domain name list can be configured in advance. The virtual domain name list is relative to the real domain name and does not require domain name server resolution. The IP address corresponding to the virtual domain name can be directly queried locally. The domain name in the intranet domain name list is parsed by the intranet domain name server to obtain the IP address corresponding to the domain name. The domain name in the external network domain name list is parsed by the external network domain name server to obtain the IP address corresponding to the domain name.
举例来说,如果域名名称出现在虚拟域名名单中,则虚拟域名名单就是目标域名名单。如果域名名称出现在内网域名名单中,则内网域名名单就是目标域名名单。如果域名名称出现在外网域名名单中,则外网域名名单就是目标域名名单。For example, if a domain name appears in a virtual domain list, the virtual domain name list is the target domain name list. If the domain name appears in the intranet domain name list, the intranet domain name list is the target domain name list. If the domain name appears in the external domain name list, the external domain name list is the target domain name list.
步骤S330:根据所述目标域名名单对应的域名解析路径,获得所述域名名称对应的互联网协议地址,并将所述互联网协议地址返回所述客户端。域名解析路径用于表征由哪个域名服务系统负责对域名名称进行解析,获得IP地址。IP地址可以返回给发起用户访问请求的客户端,进而客户端可以基于IP地址,与IP地址对应的资源服务器进行握手操作,建立连接。客户端开始构建请求报文,向资源服务器请求获取资源。Step S330: Obtain the Internet protocol address corresponding to the domain name name according to the domain name resolution path corresponding to the target domain name list, and return the Internet protocol address to the client. The domain name resolution path is used to represent which domain name service system is responsible for parsing the domain name and obtaining the IP address. The IP address can be returned to the client that initiated the user access request, and the client can then perform a handshake operation with the resource server corresponding to the IP address based on the IP address to establish a connection. The client begins to construct a request message and requests the resource server to obtain resources.
在一实施例中,若所述目标域名名单为虚拟域名名单,在本地查询所述域名名称对应的互联网协议地址。In one embodiment, if the target domain name list is a virtual domain name list, the Internet protocol address corresponding to the domain name name is locally queried.
通过策略配置虚拟域名和IP的一一对应关系,此处域名名称无需在DNS服务器解析,相较于在DNS服务器中配置,用户访问速度更快,因为本地查询后直接构建DNS响应包返回IP地址,不会再向外传递。实现用户访问请求的高效响应,也可以解决在没有DNS服务器的情况中,通过虚拟域名绑定IP的方式达到域名使用的效果。Configure the one-to-one correspondence between virtual domain names and IPs through policies. The domain name here does not need to be resolved on the DNS server. Compared with configuring it on the DNS server, user access is faster because a DNS response packet is directly constructed after local query and the IP address is returned. , will no longer be passed out. Achieving efficient response to user access requests can also solve the problem of using domain names by binding IPs to virtual domain names when there is no DNS server.
在一实施例中,若所述目标域名名单为外网域名名单,将所述域名名称发送给外网域名服务器,获得所述外网域名服务器返回的所述域名名称对应的互联网协议地址。若所述目标域名名单为内网域名名单,将所述域名名称发送给内网域名服务器,获得所述内网域名服务器返回的所述域名名称对应的互联网协议地址。In one embodiment, if the target domain name list is an external network domain name list, the domain name name is sent to the external network domain name server, and the Internet protocol address corresponding to the domain name name returned by the external network domain name server is obtained. If the target domain name list is an intranet domain name list, send the domain name name to the intranet domain name server, and obtain the Internet protocol address corresponding to the domain name name returned by the intranet domain name server.
本申请上述实施例提供的技术方案,通过拦截客户端发起的用户访问请求;根据用户访问请求携带的域名名称,确定域名名称所属的目标域名名单;根据目标域名名单对应的域名解析路径,获得所述域名名称对应的互联网协议地址,从而无需内网域名服务器进行域名名称的转发,提高了域名的解析效率,从而提高了访问效率。The technical solution provided by the above embodiments of this application intercepts the user access request initiated by the client; determines the target domain name list to which the domain name belongs based on the domain name carried by the user access request; and obtains the target domain name list according to the domain name resolution path corresponding to the target domain name list. The Internet protocol address corresponding to the domain name name eliminates the need for the intranet domain name server to forward the domain name, improves the domain name resolution efficiency, and thus improves the access efficiency.
在一实施例中,若任一域名名称同时出现在所述外网域名名单和内网域名名单,可以将所述外网域名名单作为所述目标域名名单。In one embodiment, if any domain name appears in both the external network domain name list and the internal network domain name list, the external network domain name list can be used as the target domain name list.
举例来说,域名格式为*.demo.d.com在内网域名名单,而域名为bbs.demo.d.com,指向的是外网资源,与上述域名格式的描述规则相同,故域名名称bbs.demo.d.com可以认为即出现在外网域名名单,又出现在内网域名名单,此时可以将外网域名名单作为目标域名名单。For example, the domain name format *.demo.d.com is in the intranet domain name list, and the domain name is bbs.demo.d.com, which points to external network resources. The description rules of the above domain name format are the same, so the domain name bbs.demo.d.com can be considered to appear in both the external network domain name list and the internal network domain name list. At this time, the external network domain name list can be used as the target domain name list.
当然,随着具体应用场景的不同,也可以配置域名名称同时出现在所述外网域名名单和内网域名名单时,默认将内网域名名单作为目标域名名单。Of course, depending on the specific application scenarios, you can also configure that when a domain name appears in both the external network domain name list and the internal network domain name list, the internal network domain name list will be used as the target domain name list by default.
在一实施例中,用户访问请求除了包括域名名称还可以包括域名类型,访问控制系统可以根据所述用户访问请求携带的域名名称和域名类型,若域名类型为虚拟域名,在虚拟域名名单中查找所述域名名称;若在所述虚拟域名名单找到所述域名名称,确定所述虚拟域名名单为所述目标域名名单。In one embodiment, the user access request may include the domain name type in addition to the domain name. The access control system may search the virtual domain name list according to the domain name name and domain name type carried by the user access request. If the domain name type is a virtual domain name, The domain name name; if the domain name name is found in the virtual domain name list, determine that the virtual domain name list is the target domain name list.
需要说明的是,域名类型用于指示域名名称是虚拟域名还是真实域名。如果域名类型是虚拟域名,则可以直接在虚拟域名名单中查找是否存在该域名名称,提高域名名称属于哪个名单的判别效率。It should be noted that the domain name type is used to indicate whether the domain name is a virtual domain name or a real domain name. If the domain name type is a virtual domain name, you can directly search whether the domain name exists in the virtual domain name list, thereby improving the efficiency of determining which list the domain name belongs to.
图4是本申请实施例提供的基于域名的访问方法的整体架构示意图。如图4所示,包括以下过程:Figure 4 is a schematic diagram of the overall architecture of the domain name-based access method provided by the embodiment of the present application. As shown in Figure 4, it includes the following processes:
(1)创建本地DNS服务:在客户端本地127.0.0.1地址53端口上创建DNS服务,监听本地DNS请求;(1) Create a local DNS service: Create a DNS service on the client's local 127.0.0.1 address port 53 and listen for local DNS requests;
(2)设置本地DNS服务优先级最高,从而DND请求优先经过本地DNS服务;(2) Set the local DNS service to have the highest priority, so that DND requests go through the local DNS service first;
(3)DNS拦截:拦截客户端发起的用户访问请求,解析得到,域名名称和域名类型;(3) DNS interception: intercept user access requests initiated by the client, and obtain the domain name and domain name type through analysis;
(4)分离策略:基于用户请求的域名名称,执行对应的处理动作,包括直接构造DNS响应返回绑定的IP地址、将域名名称发往内网DNS服务器解析和将域名名称发往外网DNS服务器解析。(4) Separation strategy: Based on the domain name requested by the user, perform corresponding processing actions, including directly constructing a DNS response to return the bound IP address, sending the domain name to the intranet DNS server for resolution, and sending the domain name to the external network DNS server. parse.
其中,本地原始DNS配置是指启用本地高优先级DNS服务前,用户访问请求的默认发送地址。在一实施例中,在用户未登录状态下,直接将所述用户访问请求发送到外网域名服务器,获得所述外网域名服务器返回的所述域名名称对应的互联网协议地址。Among them, the local original DNS configuration refers to the default sending address of user access requests before enabling the local high-priority DNS service. In one embodiment, when the user is not logged in, the user access request is directly sent to the external domain name server, and the Internet protocol address corresponding to the domain name returned by the external domain name server is obtained.
在一实施例中,用户登录访问控制系统下可以有以下几种类型的资源:In one embodiment, the following types of resources may be available under the user login access control system:
资源A,内网资源,固定内网IP为10.92.2.250,为方便用户记忆,在DNS策略中配置域名绑定IP,demo.a.com@10.92.2.250;Resource A, intranet resource, fixed intranet IP is 10.92.2.250. To facilitate user memory, configure the domain name binding IP in the DNS policy, demo.a.com@10.92.2.250;
资源B,内网资源,域名固定demo.b.com,IP不固定,更新后的IP地址会在内网DNS服务器同步;Resource B is an intranet resource. The domain name is fixed demo.b.com and the IP is not fixed. The updated IP address will be synchronized with the intranet DNS server;
资源C1,内网资源,域名demo.c.com;Resource C1, intranet resource, domain name demo.c.com;
资源C2,外网资源,域名demo.c.com,C1和C2共用域名demo.c.com,不同时机指向不同资源,登录访问控制系统前指向外网资源C2,登录访问控制系统后指向内网资源C1;Resource C2, external network resource, domain name demo.c.com, C1 and C2 share the domain name demo.c.com, pointing to different resources at different times. Before logging in to the access control system, it points to the external network resource C2, and after logging in to the access control system, it points to the intranet. ResourceC1;
资源D,内网资源,多个具有同样域名后缀的内网资源合集,域名格式为*.demo.d.com;Resource D, intranet resources, a collection of multiple intranet resources with the same domain name suffix, the domain name format is *.demo.d.com;
资源E,外网资源,域名为bbs.demo.d.com,与资源D描述规则相同,但是指向的是外网资源。Resource E is an external network resource. The domain name is bbs.demo.d.com. It has the same description rules as resource D, but it points to external network resources.
图5是用户未登录访问控制系统时域名解析状态示意图,内网域名无法解析至正确的内网IP地址,涉及资源A、资源B、资源D;demo.c.com经过外网DNS解析指向外网资源C2;bbs.demo.d.com经过外网DNS解析指向外网资源E.Figure 5 is a schematic diagram of the domain name resolution status when the user is not logged in to the access control system. The intranet domain name cannot be resolved to the correct intranet IP address, involving resource A, resource B, and resource D; demo.c.com points to the outside through external network DNS resolution. Network resource C2; bbs.demo.d.com points to external network resource E through external network DNS resolution.
图6是用户登录访问控制系统后域名解析状态示意图,demo.a.com在虚拟域名名单中,根据域名对应绑定的IP地址,直接定位到资源A;demo.b.com,demo.c.com和oa.demo.d.com在内网域名名单中,经过内网DNS服务器解析获得IP地址,分别指向对应内网资源;bbs.demo.d.com设置内网解析例外(即在外网域名名单),直接由外网DNS解析获得IP地址,指向外网资源E。Figure 6 is a schematic diagram of the domain name resolution status after the user logs in to the access control system. demo.a.com is in the virtual domain name list. According to the IP address bound to the domain name, it is directly located to resource A; demo.b.com, demo.c. In the list of intranet domain names, com and oa.demo.d.com obtain IP addresses through intranet DNS server resolution and point to corresponding intranet resources respectively; bbs.demo.d.com sets an exception for intranet resolution (that is, the external domain name list), the IP address is obtained directly from the external network DNS and points to the external network resource E.
现有技术中如果内部域名服务器部署在与无法访问外网的环境中,通常无法解析外网域名,导致进入内网DNS的外网域名不可用;如果内网域名服务器级联可以解析外网DNS的服务器,随着级联深度的增加,访问效率大大下降。而本申请上述实施例提供的方案,可以避免依赖系统的DNS超时切换、主备切换、无响应切换等逻辑,精确支持用户域名访问请求。In the existing technology, if the internal domain name server is deployed in an environment that cannot access the external network, it is usually unable to resolve the external network domain name, resulting in the external network domain name entering the internal network DNS being unavailable; if the internal network domain name server is cascaded, it can resolve the external network DNS For servers, as the cascade depth increases, the access efficiency drops greatly. The solution provided by the above embodiments of the present application can avoid relying on system logic such as DNS timeout switching, active/standby switching, and unresponsive switching, and accurately support user domain name access requests.
上述方案,在无需修改既有DNS服务器配置和级联状态的情况下,通过灵活的配置内网DNS服务器、外网DNS服务器,实现内外网交叉域名使用场景,高效完成域名解析和转发。The above solution can realize cross-domain name usage scenarios between internal and external networks by flexibly configuring intranet DNS servers and external network DNS servers without modifying the existing DNS server configuration and cascade status, and efficiently complete domain name resolution and forwarding.
下述为本申请装置实施例,可以用于执行本申请上述基于域名的访问方法实施例。对于本申请装置实施例中未披露的细节,请参照本申请基于域名的访问方法实施例。The following are device embodiments of the present application, which can be used to execute the above domain name-based access method embodiments of the present application. For details not disclosed in the device embodiments of this application, please refer to the domain name-based access method embodiments of this application.
图7为本申请一实施例示出的基于域名的访问装置的框图。如图7所示,该装置包括:请求拦截模块710、名单确定模块720以及域名处理模块730。Figure 7 is a block diagram of a domain name-based access device according to an embodiment of the present application. As shown in Figure 7, the device includes: a request interception module 710, a list determination module 720, and a domain name processing module 730.
请求拦截模块710,用于在用户登录状态下,拦截客户端发起的用户访问请求;The request interception module 710 is used to intercept user access requests initiated by the client when the user is logged in;
名单确定模块720,用于根据所述用户访问请求携带的域名名称,确定所述域名名称所属的目标域名名单;The list determination module 720 is configured to determine the target domain name list to which the domain name belongs based on the domain name carried in the user access request;
域名处理模块730,用于根据所述目标域名名单对应的域名解析路径,获得所述域名名称对应的互联网协议地址,并将所述互联网协议地址返回所述客户端。The domain name processing module 730 is configured to obtain the Internet protocol address corresponding to the domain name name according to the domain name resolution path corresponding to the target domain name list, and return the Internet protocol address to the client.
上述装置中各个模块的功能和作用的实现过程具体详见上述基于域名的访问方法中对应步骤的实现过程,在此不再赘述。For details on the implementation process of the functions and roles of each module in the above device, please refer to the implementation process of the corresponding steps in the above domain name-based access method, which will not be described again here.
在本申请所提供的几个实施例中,所揭露的装置和方法,也可以通过其它的方式实现。以上所描述的装置实施例仅仅是示意性的,例如,附图中的流程图和框图显示了根据本申请的多个实施例的装置、方法和计算机程序产品的可能实现的体系架构、功能和操作。在这点上,流程图或框图中的每个方框可以代表一个模块、程序段或代码的一部分,模块、程序段或代码的一部分包含一个或多个用于实现规定的逻辑功能的可执行指令。在有些作为替换的实现方式中,方框中所标注的功能也可以以不同于附图中所标注的顺序发生。例如,两个连续的方框实际上可以基本并行地执行,它们有时也可以按相反的顺序执行,这依所涉及的功能而定。也要注意的是,框图和/或流程图中的每个方框、以及框图和/或流程图中的方框的组合,可以用执行规定的功能或动作的专用的基于硬件的系统来实现,或者可以用专用硬件与计算机指令的组合来实现。In the several embodiments provided in this application, the disclosed devices and methods can also be implemented in other ways. The device embodiments described above are only illustrative. For example, the flowcharts and block diagrams in the accompanying drawings show the possible implementation architecture, functions and functions of the devices, methods and computer program products according to multiple embodiments of the present application. operate. In this regard, each block in the flowchart or block diagram may represent a module, segment, or portion of code that contains one or more executable functions for implementing the specified logical function instruction. In some alternative implementations, the functions noted in the block may occur out of the order noted in the figures. For example, two consecutive blocks may actually execute substantially in parallel, or they may sometimes execute in the reverse order, depending on the functionality involved. It will also be noted that each block of the block diagram and/or flowchart illustration, and combinations of blocks in the block diagram and/or flowchart illustration, can be implemented by special purpose hardware-based systems that perform the specified functions or acts. , or can be implemented using a combination of specialized hardware and computer instructions.
另外,在本申请各个实施例中的各功能模块可以集成在一起形成一个独立的部分,也可以是各个模块单独存在,也可以两个或两个以上模块集成形成一个独立的部分。In addition, each functional module in each embodiment of the present application can be integrated together to form an independent part, each module can exist alone, or two or more modules can be integrated to form an independent part.
功能如果以软件功能模块的形式实现并作为独立的产品销售或使用时,可以存储在一个计算机可读取存储介质中。基于这样的理解,本申请的技术方案本质上或者说对现有技术做出贡献的部分或者该技术方案的部分可以以软件产品的形式体现出来,该计算机软件产品存储在一个存储介质中,包括若干指令用以使得一台计算机设备(可以是个人计算机,服务器,或者网络设备等)执行本申请各个实施例方法的全部或部分步骤。而前述的存储介质包括:U盘、移动硬盘、只读存储器(ROM,Read-Only Memory)、随机存取存储器(RAM,Random Access Memory)、磁碟或者光盘等各种可以存储程序代码的介质。If functions are implemented in the form of software function modules and sold or used as independent products, they can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present application is essentially or the part that contributes to the existing technology or the part of the technical solution can be embodied in the form of a software product. The computer software product is stored in a storage medium, including Several instructions are used to cause a computer device (which may be a personal computer, a server, or a network device, etc.) to execute all or part of the steps of the methods of various embodiments of the present application. The aforementioned storage media include: U disk, mobile hard disk, read-only memory (ROM, Read-Only Memory), random access memory (RAM, Random Access Memory), magnetic disk or optical disk and other media that can store program code. .
Claims (11)
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202111616610.0A CN114301872B (en) | 2021-12-27 | 2021-12-27 | Domain name based access method and device, electronic equipment and storage medium |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202111616610.0A CN114301872B (en) | 2021-12-27 | 2021-12-27 | Domain name based access method and device, electronic equipment and storage medium |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN114301872A CN114301872A (en) | 2022-04-08 |
| CN114301872B true CN114301872B (en) | 2023-12-26 |
Family
ID=80970459
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN202111616610.0A Active CN114301872B (en) | 2021-12-27 | 2021-12-27 | Domain name based access method and device, electronic equipment and storage medium |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN114301872B (en) |
Families Citing this family (2)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN115001780B (en) * | 2022-05-26 | 2024-09-06 | 深圳小雨点数字技术有限公司 | Access control method, device, equipment and readable storage medium |
| CN115643297A (en) * | 2022-10-27 | 2023-01-24 | 网络通信与安全紫金山实验室 | Link establishment method and device, nonvolatile storage medium and computer equipment |
Citations (11)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN102130820A (en) * | 2010-01-14 | 2011-07-20 | 深圳市深信服电子科技有限公司 | Network service access method and access gateway equipment |
| CN103685583A (en) * | 2012-09-05 | 2014-03-26 | 阿里巴巴集团控股有限公司 | Method and system for domain name resolution |
| CN104052832A (en) * | 2014-06-30 | 2014-09-17 | 北京金山安全软件有限公司 | Method and device for setting IP address of domain name resolution server and server |
| WO2017177437A1 (en) * | 2016-04-15 | 2017-10-19 | 深圳前海达闼云端智能科技有限公司 | Domain name resolution method, device, and system |
| CN107438111A (en) * | 2016-05-27 | 2017-12-05 | 中兴通讯股份有限公司 | Method, server and the system of method and the domain name agency of inquiry of the domain name |
| CN108124020A (en) * | 2016-11-28 | 2018-06-05 | 中国电信股份有限公司 | Domain name analytic method, system and equipment |
| CN108702397A (en) * | 2017-08-08 | 2018-10-23 | 深圳前海达闼云端智能科技有限公司 | A kind of method and system obtained and collect client local dns server |
| CN108886540A (en) * | 2018-06-13 | 2018-11-23 | 深圳前海达闼云端智能科技有限公司 | Domain name resolution method, device and computer readable storage medium |
| CN110830458A (en) * | 2019-10-25 | 2020-02-21 | 云深互联(北京)科技有限公司 | Domain name access method, system and equipment |
| CN111262938A (en) * | 2020-01-17 | 2020-06-09 | 厦门网宿有限公司 | DNS server selection method and proxy server |
| CN112887444A (en) * | 2021-01-19 | 2021-06-01 | 网宿科技股份有限公司 | VPN (virtual private network) request processing method, client device and system |
Family Cites Families (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US9246874B2 (en) * | 2012-06-29 | 2016-01-26 | Verizon Patent And Licensing Inc. | Virtual domain name system |
-
2021
- 2021-12-27 CN CN202111616610.0A patent/CN114301872B/en active Active
Patent Citations (11)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN102130820A (en) * | 2010-01-14 | 2011-07-20 | 深圳市深信服电子科技有限公司 | Network service access method and access gateway equipment |
| CN103685583A (en) * | 2012-09-05 | 2014-03-26 | 阿里巴巴集团控股有限公司 | Method and system for domain name resolution |
| CN104052832A (en) * | 2014-06-30 | 2014-09-17 | 北京金山安全软件有限公司 | Method and device for setting IP address of domain name resolution server and server |
| WO2017177437A1 (en) * | 2016-04-15 | 2017-10-19 | 深圳前海达闼云端智能科技有限公司 | Domain name resolution method, device, and system |
| CN107438111A (en) * | 2016-05-27 | 2017-12-05 | 中兴通讯股份有限公司 | Method, server and the system of method and the domain name agency of inquiry of the domain name |
| CN108124020A (en) * | 2016-11-28 | 2018-06-05 | 中国电信股份有限公司 | Domain name analytic method, system and equipment |
| CN108702397A (en) * | 2017-08-08 | 2018-10-23 | 深圳前海达闼云端智能科技有限公司 | A kind of method and system obtained and collect client local dns server |
| CN108886540A (en) * | 2018-06-13 | 2018-11-23 | 深圳前海达闼云端智能科技有限公司 | Domain name resolution method, device and computer readable storage medium |
| CN110830458A (en) * | 2019-10-25 | 2020-02-21 | 云深互联(北京)科技有限公司 | Domain name access method, system and equipment |
| CN111262938A (en) * | 2020-01-17 | 2020-06-09 | 厦门网宿有限公司 | DNS server selection method and proxy server |
| CN112887444A (en) * | 2021-01-19 | 2021-06-01 | 网宿科技股份有限公司 | VPN (virtual private network) request processing method, client device and system |
Also Published As
| Publication number | Publication date |
|---|---|
| CN114301872A (en) | 2022-04-08 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| WO2020083189A1 (en) | Request processing method and device, api gateway, and readable storage medium | |
| US9554276B2 (en) | System and method for on the fly protocol conversion in obtaining policy enforcement information | |
| US8650326B2 (en) | Smart client routing | |
| US20200228433A1 (en) | Computer-readable recording medium including monitoring program, programmable device, and monitoring method | |
| EP2769307B1 (en) | Answer augmentation system for authoritative dns servers | |
| US20150213134A1 (en) | Data query method and system and storage medium | |
| CN108200165B (en) | request transmission system, method, device and storage medium | |
| CN107613037B (en) | Domain name redirection method and system | |
| EP4035344B1 (en) | Redirector based on resolver transparency | |
| WO2013143403A1 (en) | Method and system for accessing website | |
| CN111414208A (en) | Application program starting method, device and equipment | |
| KR20150013860A (en) | Clientless cloud computing | |
| CN114301872B (en) | Domain name based access method and device, electronic equipment and storage medium | |
| CN115189897A (en) | Access processing method, device, electronic device and storage medium for zero trust network | |
| CN109413224B (en) | Message forwarding method and device | |
| CN107332813A (en) | A kind of ACL collocation methods, ACL configuration equipment and server | |
| CN103957252B (en) | The journal obtaining method and its system of cloud stocking system | |
| US11811734B2 (en) | Protocol switching for connections to zero-trust proxy | |
| WO2023050933A1 (en) | Method and apparatus for determining lost host | |
| JP2023522785A (en) | Harmony Comprehensive Proxy Service | |
| WO2015117380A1 (en) | Method, device and system for remote desktop protocol gateway to conduct routing and switching | |
| CN113014426B (en) | Method and device for establishing communication between cloud server and client server | |
| US20250291770A1 (en) | Seamless NFS Server Pod Addition | |
| CN117395227A (en) | Business processing methods, devices, electronic equipment and storage media | |
| CN118740796A (en) | Domain name processing method, device, equipment and medium for zero-trust network |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| CB02 | Change of applicant information |
Address after: 100032 NO.332, 3rd floor, Building 102, 28 xinjiekouwai street, Xicheng District, Beijing Applicant after: QAX Technology Group Inc. Applicant after: Qianxin Wangshen information technology (Beijing) Co.,Ltd. Address before: 100032 NO.332, 3rd floor, Building 102, 28 xinjiekouwai street, Xicheng District, Beijing Applicant before: QAX Technology Group Inc. Applicant before: LEGENDSEC INFORMATION TECHNOLOGY (BEIJING) Inc. |
|
| CB02 | Change of applicant information | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant |