CN101242413A - System and method for obtaining service resource address in same-root multi-layer NAT network - Google Patents

Abstract

The invention discloses a system and method for obtaining service resource addresses in a multi-layer NAT network with the same root. By deploying an index service device in the multi-layer NAT network with the same root, the mapping of service resources in the private network in the multi-layer NAT network is established. The service resource is registered on the service device, and the client can query the service resource based on the index service device, and can use the service resource in the private network. By applying the present invention, in the network application of the server-client mode, the server can be deployed not only in the public network, but also in the multi-level private network; at the same time, the service quality of the transmission is improved, and the need for public network addresses and data is reduced. Demand pressure for transmission capacity.

Description

System and method for obtaining service resource address in same-root multi-layer NAT network

technical field

The present invention relates to the technical field of computer network communication, and more specifically, the present invention relates to a system and method for acquiring service resource addresses in a same-root multi-layer NAT network.

Background technique

At present, the IPv4-based Internet address space is insufficient to meet the needs of many users for network access, especially for countries such as my country with large network requirements and insufficient address allocation, the problem of insufficient space is more prominent. From the perspective of actual application and deployment, Network Address Translation (NAT) technology is an effective method to solve the problem of insufficient Internet IP (Internet Protocol) addresses for Internet users to access the Internet.

NAT is a standard of the Internet Engineering Task Force (IETF), which allows an entire organization to appear on the Internet with a public IP address, and converts internal private network addresses (IP addresses) into legal network public IP addresses. Network Address Port Translation (Network Address Port Translation, NAPT) is to further extend the concept of "NAT", while converting the network address, it also converts the transport layer signs (such as TCP/UDP port number, ICMP query ID), so that the The transport layer identifiers of multiple internal hosts are multiplexed into a unique external address. NAPT enables a group of hosts to share a unique external address. Usually mentioned NAT refers to NAPT.

With the increase of personal information equipment, the popularization of network access equipment and the development of network technology, more and more companies, groups and families hope to organize these information equipment together in the form of a network and connect to the Internet. In consideration of security, how to hide nodes with high security level on the network is a problem faced by many companies. In the case of a serious lack of IP addresses, urgent needs for device networking and interconnection, and a large number of security risks, the single-level or multi-level private network structure formed by NAT technology has become more and more common in actual deployment to access the Internet. .

The control range of the NAT device extends from the internal network interface of the NAT device along the network connected to the interface to the network range between the external network interface of the next NAT, and other NAT devices are not included in the network range. Compared with the network connected to the internal network interface of the NAT device, the network connected to the external network interface of the NAT device is the direct upper layer network of the current network, referred to as the direct upper layer; The network connected to the interface is the direct lower layer network of the current network, referred to as the direct lower layer. A NAT device directly connected to the Internet is called a root NAT. Make a directed edge from each directly upper-layer NAT to the immediate lower layer. In the formed topology diagram, if there is a path from NAT A to NAT B, then NAT A is said to be the same-root upper-layer NAT of NAT B. If there is also a path from NAT A to NAT C, then NAT B and NAT C are said to be the same root NAT.

At present, various services on the Internet generally have public network IP addresses, and servers (such as Web servers, FTP servers, etc.) The service is only visible to hosts under the same NAT control as it. For hosts under the jurisdiction of NAT located at the same root layer as these servers, although they have physical links with these servers, due to protocol restrictions, they cannot access these services and cannot obtain resources on these servers.

Contents of the invention

In order to overcome the defect that service resources cannot be obtained in the existing same-root multi-layer NAT network environment, the present invention proposes a system and method for obtaining the address of a service device in the same-root multi-layer NAT network.

According to one aspect of the present invention, there is provided an index service device for service resources in the same-root multi-layer NAT network, including:

The top-level index service unit is connected to the public network through the top-level service bus device, records the network address and port of the service resource in the public network and the network controlled by the NAT device directly connected to the public network, and provides the user equipment with the service resource network address and port;

At least one basic index service unit is connected to the corresponding private network through the service bus device, records the network addresses and ports of the service resources in the private network and other private networks that the private network extends downward through the NAT device, and provides The private network and the user terminal equipment in other private networks extending downward through the private network through the NAT device provide the network address and port of the service resource;

Wherein, the basic index service unit sends a registration request to the upper-level index service unit to apply for joining the index service device, and the upper-level index service unit determines that the data packet carrying the registration request passes through the NAT device, and extracts the layer information in the registration request , if the basic index service unit is a sub-index service unit of the upper-level index service unit, the upper-level index service unit completes the registration of the basic index service unit, and if the basic index service unit is not the upper-level index service unit The sub-index service unit of the unit, the upper-layer index service unit returns a response message including the network address and port of the index service unit corresponding to the NAT device.

Wherein, if the level of the basic index service unit is 1 greater than the level of the upper index service unit, the basic index service unit is a sub-index service unit of the upper index service unit.

Wherein, the upper layer index service unit judges whether the data packet carrying the registration request has passed NAT device.

Among them, the public network is connected to the top-level index service unit, and the private network is only connected to a basic index service unit, and the basic index service unit can be connected to a private network and multiple networks in other private networks connected to the private network Service resource registration.

Wherein, the upper-level index service unit may be a top-level index service unit, or a basic index service unit.

According to a second aspect of the present invention, there is provided an index service device for service resources in a same-root multi-layer NAT network, including:

A storage medium, the storage medium is used to store and record the identification, host address, port information and level information of the index service device, and the storage medium is used to store the index service device directly above and directly below the index service device Network address and port information and the identification of the directly lower index service device and the network address and port information of the NAT device corresponding to the directly lower index service device, and the storage medium is used to store the network address, port, resource name and corresponding NAT device of the service resource network address and port information;

a communication unit, the communication unit is connected with the service bus device and is responsible for sending and receiving data;

A logic control unit, the logic control unit controls the sending and receiving of data and the reading and writing of data.

Wherein, the index service device further includes:

A level information record table, used to record the level information of the index service device;

A target index server record table, used to record the network address and port information of the ancestor index service device of the index service device;

A sub-index server record table, used to record the identifier, network address, port of the sub-index service device of the index service device, and the network address and port information of the corresponding NAT device;

The network service resource device record table is used to record the network address, port, resource name of the service resource and the network address and port information of the corresponding NAT device;

The "network service resource address query message" response control table is used to control the generation of the response message to the network service resource address query request;

An index service logic control unit, the index service logic control unit is respectively connected with the target index service device record table, the sub-index service unit record table, the network service resource device record table and the communication unit, and controls all The target index service device record table, the sub-index service unit record table, the network service resource device record table and the communication unit perform read and write operations; the index service logic control unit reads and writes from the "network service resource address query message The response control table reads the control information to generate a response message; the index service logic control unit is connected with the hierarchical information recording table to read the hierarchical information.

Wherein, the index service device further includes: a basic configuration information record table, the basic configuration information record table is connected to the index service logic control unit, and is used to record the index service device identifier, host address and port information.

According to a third aspect of the present invention, there is provided an index service registration method for a basic index service unit in a same-root multi-layer NAT network, the method comprising:

Step 10), the top-level index service unit starts to receive the registration request, the basic index service unit accesses the private network through the service bus device, and sends a registration request to the upper-level index service unit;

Step 20), after the upper layer index service unit determines whether the data packet carrying the registration request passes through the NAT device, extracts the layer information in the registration request;

Step 30), if the basic index service unit is a sub-index service unit of the upper-level index service unit, record the network address of the basic index service unit in the sub-index service unit record table of the upper-level index service unit , port, identifier, and the network address and port of the corresponding NAT device, and return a successful response message;

Step 40), if the basic index service unit is not a sub-index service unit of the upper-level index service unit, then look up the index service unit corresponding to the NAT device in the sub-index service unit record table of the upper-level index service unit, If the corresponding index service unit exists, return a response message including the network address and port of the index service unit corresponding to the NAT device to the basic index service unit that made the registration request;

Step 50), after the basic index service unit that made the registration request extracts the network address and port in the response message, it sends a registration request to the corresponding index service unit.

Wherein, in step 10), the upper-level index service unit may be a top-level index service unit, or a basic index service unit.

Wherein, step 20) further includes: the upper layer index service unit judges whether the source address of the data packet of the registration application is equal to the network address of the basic index service unit carried in the registration application message, Whether the requested data packet passes through the NAT device.

Wherein, step 30) further includes: if the level of the basic index service unit is 1 greater than the level of the upper index service unit, then the basic index service unit is a sub-index service unit of the upper index service unit.

Among them, the public network is connected to the top-level index service unit, and the private network is only connected to a basic index service unit, and the basic index service unit can be connected to a private network and multiple networks in other private networks connected to the private network Service resource registration.

According to a fourth aspect of the present invention, there is provided a service resource address acquisition system in the same-root multi-layer NAT network, including:

The indexing service device;

The top-level service bus device is respectively connected to the top-level index service unit of the index service device and the public network, and connects the index service device to the public network;

The service bus device is respectively connected to the basic index service unit of the index service device and the private network, and connects the index service device to the private network;

Wherein, after the index service device receives the network service resource registration/network service resource request message sent by the index service device client through the top-level index service bus device or the service bus device, it judges whether it can be executed according to logic, If it can be executed, return a request success message; for the network service resource registration message, if it cannot be executed and can be redirected, then return a redirection message, and the client re-registers; for the network service resource request message, if cannot be executed, and if the index service unit that accepts the request in the index service device is not the top-level index service unit, return a redirection message including the network address and port in the target index service device record of the index service unit, and the client end to resend the request.

Wherein, the index service device is connected to the public network via the top-level service bus device, and uses the network address of the public network for addressing to become a part of the public network.

Wherein, the index service device is connected to the private network via the service bus device, and is addressed by using the network address of the private network, and becomes a part of the accessed private network.

Wherein, in the index service device, the public network is connected to the top-level index service unit, and the private network is only connected to a basic index service unit, and the basic index service unit can be connected to the private network and other Multiple web service resource registrations in a private network.

Wherein, the client of the index service device includes user machines and service resource devices in the public network and the private network.

According to a fifth aspect of the present invention, there is provided a method for registering network service resources by an index service device client in a multi-layer NAT network with the same root, including:

Step 10), the index service device client sends a network service resource registration message to the index service device, and the registration message includes the network address, port and registered resource name of the service resource;

Step 20), the indexing service device receiving the service registration message judges whether the data packet carrying the registration message passes through the NAT device;

Step 30), if the NAT device is passed, and if the level in the registration message is 1 greater than the level of the index service unit, record the service resource registration message including the network address and port of the NAT device, and return a successful registration message ;

Step 40), if passing through the NAT device, and if the level in the registration message is not greater than the level of the index service unit by 1, when there is an index service unit in the network controlled by the NAT device, return to the client including the A redirection message of the network address and port of the indexing service unit;

Step 50), the client extracts the network address and port of the returned index service unit from the redirection message to replace the original network address and port of the index service device, and sends a registration request.

Wherein, the client of the index service device includes user machines and service resource devices in the public network and the private network.

Wherein, the index service unit may be a top-level index service unit or a basic index service unit.

Wherein, the method further includes: the client of the indexing service device sets the number of attempts of the registration request and the timeout control of the registration request, and ends the request if the registration request exceeds the set number of attempts or the timeout control.

Wherein, step 20) further includes: the index service device determines whether the registration message passes through the NAT device by judging whether the source address of the registration message is the same as the network address of the client.

Wherein, step 20) further includes: if the registration message does not pass through the NAT device, record the service resource information of the registration message, and return a success response message.

According to a sixth aspect of the present invention, there is provided a method for querying network service resources by an index service device client in a same-root multi-layer NAT network, including:

Step 10), the client side of the index service device judges whether there is a response message from the index service device, and then sends a network service resource address query message to the index service device, the query message includes at least the name of the service resource, when there is a response message from the index service device When the response message of the index service device, the query message also includes the respondent in the response message;

Step 20), the index service unit of the index service device that receives the network service resource query message determines whether it has the requested network service resource, and sets the status of the requested resource as found or not found;

Step 30), the index service unit of the index service device that receives the network service resource query message determines its own location status, including: an independent top-level index service unit, a top-level index service unit, an intermediate index service unit, and a bottom-level index service unit unit;

Step 40), the index service unit of the index service device that receives the network service resource query message determines the direction status of the query message according to the responder included in the query message: when there is no responder in the message , it is set as "initial query message"; when the responder is a sub-index service unit of the index service unit that received the network service resource query message, it is set as "upward query message"; when the When the responder is the index service unit in the target index server record of the index service unit that received the network service resource query message, it is set to "downward query message";

Step 50), the index service unit of the index service device that receives the network service resource query message matches in the following table according to the requested resource state, the location state of itself, and the direction state of the query message, and returns Corresponding reply message;

Index service unit location status The status of the requested resource query request direction return reply message Reply message additional information Top Index Service Unit did not find initial query message Redirection message, the redirection target is the network address and port of the corresponding sub-index service unit Respondent-based index service unit network address Top Index Service Unit did not find query message up failure message Top Index Service Unit turn up initial query message Redirection message, the redirection target is the network address and port of the corresponding sub-index service unit, the network address and port of the service resource The respondent is the network address of this index service unit, Top Index Service Unit turn up query message up Success message, including service resource network address and port Intermediate Service Unit did not find initial query message redirect message The redirection target can be selected according to the policy: upper-level index service unit, lower-level index service unit, top-level index service unit Intermediate Index Service Unit did not find query message up Redirect message to the network address and port in the local target index server record Respondent-based index service unit network address Intermediate Index Service Unit did not find Drill down for messages Redirection message, the redirection target is the network address and port of the corresponding sub-index service unit Respondent-based index service unit network address Intermediate Index Service Unit turn up initial query message Redirection message, the redirection target is the network address and port of the corresponding sub-index service unit, the network address and port of the service resource Respondent-based index service unit network address Intermediate Index Service Unit turn up query message up Success message, including service resource network address and port Respondent-based index service unit network address Intermediate Index Service Unit turn up Drill down for messages Redirection message, the redirection target is the network address and port of the corresponding sub-index service unit, the network address and port of the service resource Respondent-based index service unit network address underlying index service unit did not find initial query message Redirect message to the network address and port in the local target index server record Respondent-based index service unit network address underlying index service unit did not find Drill down for messages failure message underlying index service unit turn up initial query message Success message, including service resource network address and port Independent top-level index service unit did not find query message (initial) failure message Independent top-level index service unit turn up query message (initial) Success message, including service resource network address and port

Wherein, in step 10), the responder is the index service unit that sends the reply message in the index service device.

Wherein, in step 30), the top-level index service unit means that the index service unit has only lower-level sub-index service units and no upper-level index service unit; the intermediate index service unit means that the index service unit has lower-level sub-index service units and no The upper-level index service unit; the bottom-level index service unit means that the index service unit has no lower-level sub-index service units, but only a higher-level index service unit; the independent top-level index service unit refers to a top-level index service unit without sub-index service units.

By applying the present invention, in the network application of the server-client mode, the server can be deployed not only in the public network, but also in the multi-level private network; at the same time, the quality of service (Qos) of the transmission is improved, and the impact on the public network is reduced. Address and data transfer capacity demand pressure.

Description of drawings

Fig. 1 is a schematic diagram of the same root multi-layer NAT network;

Fig. 2 is a schematic structural diagram of the server address acquisition system;

Fig. 3 is a schematic diagram of a NAT device connection matrix;

Fig. 4 is a schematic structural diagram of an index service device and an index service unit;

Fig. 5 is a schematic diagram of the establishment process of the index service device;

Fig. 6 is a schematic diagram of the establishment process of the index service device;

Fig. 7 is a schematic diagram of the establishment process of the index service device;

Fig. 8 is a schematic diagram of a query method based on a known service entry in a public network;

FIG. 9 is a schematic diagram of a query method based on a locally stored service entry;

FIG. 10 is a schematic flow diagram of a service client obtaining a service entry by listening to a broadcast message containing the service entry;

Fig. 11 is a schematic diagram of server agent broadcast mode;

Fig. 12 is a flowchart of a processing method for receiving a service resource registration message by an index service device;

Fig. 13 is a flow chart of the server processing network service resource registration message interaction process;

Fig. 14 is a flow chart of the interaction process of the network service resource queryer processing the "network service resource address query message";

Fig. 15 is a flowchart of a processing method for the index service device to receive a service resource network address request message from a client;

Fig. 16 is a flowchart of a method for processing a service resource network address request message.

Detailed ways

The index service device, service resource address acquisition system and method in the same-root multi-layer NAT network provided by the present invention will be further described below with reference to the accompanying drawings and specific embodiments.

In the traditional Internet, service resources are generally only deployed in the public network. In the same-root multi-layer NAT network, service resources can be deployed in the first layer, second layer, and third layer along the connection relationship of the private network. The same-root multi-layer NAT network can not only expand the number of user access, but also expand the scope of deployment of service resources. According to the physical connection relationship, when users use network services, they should be able to directly access the service resources deployed in the network controlled by each layer of NAT devices, not just the service resources deployed in the public network. In this way, it can effectively reduce the The pressure on the root NAT device and the network it controls also improves the quality of service of network services. However, due to limitations of existing network protocols, the network address of the NAT device cannot be routed on the network. Therefore, in the same-root multi-layer NAT network, the service resource requester cannot obtain the network address and port of the network service resource in the network environment. The network address of the NAT device refers to the network address bound to the external network interface of the NAT device. For a large-scale private network, the external network interface of the NAT router can be bound with multiple network addresses. In network management, multiple network addresses can be mapped to a NAT device by enumerating addresses or enumerating network segments. Ordinary users can access the network by themselves through a low-end NAT router. Generally, the external network interface of the NAT router is only bound to one network address. In the following description of the NAT router, the external network interface of a NAT router is only bound to one network address. Therefore, a NAT device can be represented by a network address bound to the external network interface of the NAT device. It is not difficult for those skilled in the art to find that the following description is also applicable to a NAT router whose external network interface is bound to multiple network addresses.

FIG. 1 is a schematic diagram of the same-root multi-layer NAT network structure. A private network 4-1 accesses the public network 3 through a NAT device 1001, and a private network 4-2 accesses the private network 4-1 through another NAT device 1002. The private network connected to the public network 3 through the NAT device 1001 is a network controlled by the NAT device, and the private network 4-2 connected to the private network 4-1 through the NAT device 1002 is a network controlled by the NAT device. The NAT device directly connected to the public network 3 is the root NAT device. The minimum number of NAT devices that each private network passes through to the public network 3 is the number of layers of the private network, and the path is the shortest path from the private network to the public network 3 . The fewer layers from the private network to the public network 3, the higher the layer. If at least one NAT device in the shortest path from two private networks to the public network is the same, the two private networks have a common root NAT device. A multi-layer NAT network can be viewed as a combination of multiple same-root multi-layer NAT networks.

In order to enable service resource requesters to obtain network addresses and ports of network service resources in the same-root multi-layer NAT network, in an embodiment of the present invention, a service resource address acquisition system is provided for use in the same-root multi-layer NAT network , help the service resource requester obtain the network address and port of the network service resource in the network environment.

FIG. 2 is a schematic structural diagram of a system for obtaining service resource addresses. The service resource address acquisition system 10 includes: an index service device 2001, which is used to record the network address and port of the server 3001 in the public network 3 and each private network, and provide server information for the user terminal equipment 6001 in the public network 3 and each private network. The network address and port of 3001; the top-level service bus device 1 is connected to the index service device 2001 and the public network respectively, and is used to connect the index service device to the public network 3; the service bus device 2 is connected to the index service device 2001 and the private network respectively. The network is connected to connect the index service device 2001 to the private network. The index service device 2001 is connected to the public network 3 through the top-level service bus device 1, accesses the existing network, and uses the network address of the public network for addressing, which is a part of the public network; the index service device 2001 communicates with the private network through the service bus device 2. The network is connected and connected to the existing network, and the network address of the connected private network is used for addressing, which is a part of the connected private network.

The public network 3 and the private network can be connected together through independent NAT devices, or can be connected together through a NAT device connection matrix 1001 formed by a NAT device group. Each user terminal device 6001 and each server 3001 are respectively connected to the public network 3 and the private network.

FIG. 3 shows the connection manner of the NAT device connection matrix 1001 . In the NAT device connection matrix 1001 , the relationship between NAT devices is determined by the private network and public network connected to the NAT device connection matrix 1001 . The connection rules between the private network and the public network and the NAT device are as follows: the NAT device connection matrix 1001 has at least one line 5 connected to the public network; each private network has at least one line 6 connected to the NAT device connection matrix 1001; each private The network may not have, or may have multiple lines 7 connected to the private network by the NAT device connection matrix 1001 . Taking the three-level NAT network structure shown in FIG. 3a as an example, FIG. 3b shows a connection diagram of the NAT device connection matrix 1001 in FIG. 3a , which includes a public network 3 and a private network. The NAT device connection matrix 1001 is connected to the public network through line 5 , the private network is connected to the NAT device connection matrix 1001 through line 6 , and the NAT device connection matrix 1001 is connected to the private network through line 7 .

FIG. 4 is a schematic structural diagram of the index service device 2001 . As shown in FIG. 4 a , the index service device 2001 is composed of a top-level index service unit 2011 and at least one basic index service unit 2021 . The top-level index service unit 2011 is connected to the public network 3 through the top-level service bus device 1 ; at least one basic index service unit 2021 is connected to the private network 4 through the service bus device 2 . The index service unit is the collective name of the top-level index service unit 2011 and the basic index service unit 2021, and can also be called an index service device. 2801 is the same.

As shown in Figure 4b, the index service unit 2801 includes: index service logic control unit 2100, basic configuration information record table 2101, hierarchical information record table 2102, target index service device record table 2103, sub-index service unit record table 2104, network service The resource device record table 2105 , the message buffer area 2109 , the communication unit 2110 , and the response control table 2108 for "network service resource address query message".

The index service logic control unit 2100 is used to control the execution of the index service, and is respectively connected with the basic configuration information record table 2101, the target index service device record table 2103, the sub-index service unit record table 2104, the network service resource device record table 2105, and the message buffer area 2109 is connected to the communication unit 2110 for two-way data transmission, and the index service logic control unit 2100 is connected to the hierarchical information record table 2102 to receive the hierarchical information of the index service equipment; the basic configuration information record table 2101 is used to record the index service unit identification, the index The service unit host address and the service port of the index service unit; the level information record table 2102 is used to record the level information of the index service unit; the target index server record table 2103 is used to record the network address and port of the ancestor index service unit; the child index server The record table 2104 is used to record the network address, port, and identifier of the sub-index service unit and the network address of the corresponding NAT device, see Table 1.

Table 1 Sub-index service unit record table

logo website address port NAT device network address Config103 10.23.0.22 11223 192.168.1.23

The network service resource device record table 2105 is used to record the network service resource identifier, the network address and port corresponding to the resource identifier, and the network address of the NAT device corresponding to the resource identifier, see Table 2;

Table 2 Network service resource record table

logo website address port NAT device network address Server128 10.23.0.128 80 192.168.1.23

The message buffer area 2109 is used to temporarily store the information in the received data packet;

The communication unit 2110 is connected with the top-level service bus device or the service bus device, and is responsible for sending and receiving basic configuration information, layer information, target index service device information, sub-index service unit information and network service resource device information;

The "network service resource address query message" response control table 2108 is used to control the generation of the response message to the network service resource address query request, see Table 3.

Table 3 "Network service resource address query message" response control table

Reply message control code message type Answer unit (Y/N) Redirect target (Y/N) Redirect strategy (superior, subordinate, top-level) Service resources (Y/N) 00000 fail N N N 00100 success N N Y 11100 Redirect Y Y Subordinate Y

The index service logic control unit reads the identification of the index service unit, the host address of the index service unit, and the service port of the index service unit from the basic configuration information record table 2101, reads the record level information from the level information record 2102, and records it from the target index server. 2103 reads and records the network address and port of the ancestor index server, reads and records the network address, port, identification of the sub-index service unit and the network address of the corresponding NAT device from the sub-index server record table 2104, and reads and records the network address of the sub-index service unit from the network service resource device record table 2105 reads the network address, port, identification of the recording service device and the network address of the corresponding NAT device, reads the information in the temporarily stored data packet received from the message buffer area 2109, and reads the received data from the communication unit 2110 At the same time, the index service logic control unit writes the unit identification, the host address of the unit, and the service port of the unit to the basic configuration information record table 2101 according to the execution needs, writes the record level information to the level information record 2102, and records the level information to the target index server 2103 writes and records the network address and port of the ancestor index server, writes to the sub-index server record table 2104 the network address of the record sub-index service unit, port, identification and the network address of the corresponding NAT device, and writes to the network service resource device record table 2105 writes the network address, port, identification of the recording service device and the network address of the corresponding NAT device, writes into the message buffer 2109 to temporarily save the information in the received data packet, and writes the data to be sent to the communication unit 2110 .

The indexing service logic control unit reads the control information from the "network service resource address query message" response control table 2108 to generate a response message according to execution needs.

In the multi-level NAT network environment of the embodiment of the present invention, the index service device provides registration services for various service resources in the network, and provides network address and port query services corresponding to the network service resources for customers who request network service resources.

When registering and querying the network resources of the private network under the same root NAT device, an index service unit needs to be added to the index service device to provide index services for the network resources in the index service device. The process of the index service unit joining the index service device includes: starting from the top-level index service unit, completing the initial identification of the index service device, accessing the private network through the service bus device, and performing network service resource registration and network service resource query; secondly, the root The basic index service unit in the network controlled by the NAT device registers with the index service device to join the system; again, the second layer NAT basic index service unit registers with the index service device to join the system; again, the third layer NAT basic index service unit registers with the index service device The device registers with the system. In the manner described above, the basic index service units are sequentially added to the index service device as needed to provide index service for the server device end address acquisition system 10 . There is only one top-level index service unit in a public network; there is only one base index service unit in each private network. The indexing service can register for multiple servers in the same private network.

The index service unit that receives the registration message from the lower index service unit performs the following steps. The index service unit judges the index service unit carried according to the source address of the data packet of the registration application and the network address of the index service unit carried in the registration application message. Whether it is in the network controlled by the same root NAT device; if it is not in the network controlled by the NAT device, it means that the configuration server is not in the same root NAT network, and returns a registration failure message; if it is in the network controlled by the NAT device, extract the level in the registration request information, if the level is 1 greater than the current index service unit, record the network address, port, identifier and network address of the corresponding NAT device in the sub-index service unit record table, and return to the index service unit that proposed registration Registration success message. If the level is not greater than the current index service unit by 1, search the index service unit corresponding to the same NAT device in the sub-index service unit record table, and if the index service unit exists, return the index corresponding to the NAT device to the index service unit that made the registration request For the response message of the network address and port of the service unit, the index service unit that made the registration request sends a registration request to the corresponding index service unit, and the above process is re-executed; if there is no corresponding NAT device in the sub-index service unit record table The record of the index service unit returns a registration failure message to the index service unit that made the registration request.

Fig. 5 shows the process of establishing the index service device, which is used to illustrate how the basic index service unit under the root NAT device joins the index service device. As shown in the figure, the index service device 2001 is connected to the public network through the top index service unit 2011. Initialization. The top-level index service unit 2011 is equipped with a globally unique IP address, and the address and the service port are well-known service entrances in the system. The NAT device 1010 directly accesses the public network and is the root NAT device. The basic index service unit 2021 is connected to the network controlled by the root NAT device. The NAT device modifies the source or destination address of the passed data packet, and the description of the modification of the data packet by the NAT device is ignored in this figure. The following describes the specific process of setting up the index service device:

The basic index service unit 2021 in the network controlled by the root NAT device sends a registration application message to the top-level index service unit 2011; the message includes the network address, port, identification, and preset level information of the index service unit 2021 as 1, indicating that the The index service unit 2021 is located at the shortest distance from the network controlled by the root NAT device to the public network.

The top-level index service unit 2011 judges whether the configuration server is in the network controlled by the NAT device according to the network address of the data packet carrying the registration application and the network address of the index service unit carried in the registration application message; if it is in the network controlled by the NAT device In the network, extract the level information in the registration request, if the level is 1 greater than the current index service unit, record the network address, port, identification and corresponding NAT device 1010 of the index service unit 2021 in the sub-index service unit record table the network address, and return a registration success message to the index service unit 2021. If the level is not greater than the current index service unit by 1, and there is no record of the index service unit corresponding to the NAT device in the sub-index service unit record table, a registration failure message will be returned; if it is not in the network controlled by the NAT device, a registration failure message will be returned.

FIG. 6 shows the establishment process of the index service device, which is used to illustrate the process of adding the basic index service unit under the second-layer NAT device to the index service device. The top-level index service unit 2011 is equipped with a globally unique IP address, and the address and the service port are known service entrances in the system, or can be obtained through a method defined by the system. The first NAT device 1010 directly accesses the public network and is a root NAT device. The first index service unit 2021 is deployed in the network controlled by the root NAT device 1010 . The second NAT device 1020 directly accesses the network controlled by the root NAT device 1010 , and the second index service unit 2031 is deployed in the network controlled by the second NAT device 1020 . The NAT device modifies the source or destination address of the passed data packet, and the description of the modification of the data packet by the NAT device is ignored in this figure. The following describes the specific process of setting up the index service device:

The second index service unit 2031 in the network controlled by the second NAT device 1020 initiates a registration application message to the top-level index service unit 2011, and the message includes the network address, port, identification, and prefabricated level information of the second index service unit 2031 as 2, indicating that the index service unit 2031 is located at the shortest distance from the network controlled by the second NAT device 1020 to the public network.

The top-level index service unit 2011 judges whether the configuration server is in the network controlled by the NAT device according to the network address of the data packet carrying the registration application and the network address of the index server carried in the registration application message; if it is in the network controlled by the NAT device , extract the level information in the registration request, if the level is not 1 greater than the current index service unit, then look up the index service unit corresponding to the NAT device 1010 in the sub-index service unit record table, if the index service unit exists, send the index service unit to the second The index service unit 2031 returns a response message including the network address and port of the index service unit 2021 corresponding to the NAT device 1010 .

After receiving the response message from the top-level index service unit 2011, the second index service unit 2031 initiates a registration application message to the index service device according to the network address and port information of the index service unit 2021 included in the message; the application message includes the first The network address, port, and prefabricated level information of the second index service unit 2031 are 2, indicating that the index service unit 2031 is located at the shortest distance from the network controlled by the second NAT device 1020 to the public network.

●The first index service unit 2021 judges whether the index service unit is in the network controlled by the NAT device according to the network address of the data packet carrying the registration application and the network address of the index service unit carried in the registration application message; In the controlled network, extract the level information in the registration request, if the level is 1 greater than the current index service unit, record the network address, port and corresponding NAT device 1020 of the index service unit 2031 in the sub-index service unit record table the network address, and return a registration success message to the second index service unit 2031. If the level is not 1 greater than the current index service unit, and there is no record of the index service unit corresponding to the NAT device 1020 in the sub-index service unit record table, return a registration failure message; if not in the network controlled by the NAT device, return a registration failure message .

Fig. 7 shows the establishment process of the index service device, which is used to explain the process of the basic index service unit agent under the second-layer NAT device joining the index service device by broadcasting. The top-level index service unit 2011 is equipped with a globally unique IP address, and the address and the service port are well-known service entrances in the system, or can be obtained through a method defined by the system. The first NAT device 1010 directly accesses the public network and is a root NAT device. The first index service unit 2021 is deployed in the network controlled by the root NAT device 1010; the second NAT device 1020 directly accesses the network controlled by the root NAT device 1010, and the first index service unit agent 2032 and the second index service unit 2031 are deployed at the In the network controlled by the second NAT device 1020 . The NAT device modifies the source or destination address of the passed data packet, and the description of the modification of the data packet by the NAT device is ignored in this figure. The following describes the specific process of setting up the index service device:

The first index service unit proxy 2032 broadcasts a message containing the network address and port of the index service device in the network controlled by the second NAT device 1020, and the message contains the level information of the proxy index service unit, that is, the first index service unit Hierarchy information.

● The second index service unit 2031 listens to the messages broadcast in the network controlled by the second NAT device 1020 that include the network address and port of the index service device.

●The second index service unit 2031 receives the message containing the network address and port of the index service device, according to the level provided in the message, set the local level information after adding one level, and according to the network address and port of the index service device provided in the message Initiate a registration application message to the first index service unit 2021, which includes the network address, port, and preset level information of the second index service unit 2031, which means that the index service unit 2031 is located in the network controlled by the second NAT device 1020. The shortest distance of the public network.

●The first index service unit 2021 judges whether the index service unit is in the network controlled by the NAT device according to the converted IP address of the data packet carrying the registration application and the network address of the index service unit carried in the registration application message; if in the NAT In the network controlled by the device, extract the level information in the registration request, if the level is 1 greater than the current index service unit, record the network address, port and corresponding NAT device of the index service unit 2031 in the sub-index service unit record table 1020, and return a registration success message to the second index service unit 2031. If the level is not 1 greater than the current index service unit, and there is no record of the index service unit corresponding to the NAT device 1020 in the sub-index service unit record table, the registration failure message is returned; if not in the network controlled by the NAT device, the registration failure message is returned.

The first index service unit proxy shown in FIG. 7 does not provide the message forwarding function. It is not difficult for developers to develop an index server agent with message forwarding function if necessary.

In addition, the broadcast method can use wired, wireless, or both wired and wireless according to the network environment where various service agents are located.

In addition, referring to FIG. 5 , FIG. 6 and FIG. 7 , according to the description of the specific embodiments, those skilled in the art can implement the deployment of the index service device in a multi-level NAT network.

In addition, considering security issues, all or part of the registration message can be encrypted. This security problem must be considered in various service devices constituting the server address acquisition system 10, and the basic method is to encrypt all or part of the communication messages in each service device and between service devices.

Under the same root multi-level NAT network environment, the interaction process of the server registering the network service resource with the index service device 2001 and the client querying the index service device 2001 for the network address and port of the network service resource are basically the same. Figures 8-11 describe this interactive process. In the figure, the index service device client 9004 is used to represent the server registering network service resources and the client querying network service resources. At the same time, the service device registration message or service device address request message sent by the server and the client to the index service device 2001 is collectively referred to as Service request message.

FIG. 8 is a flow chart of the index service client requesting or submitting data to the index service device based on the known network address and port of the index service device in the public network, which is used to illustrate that the index service device client obtains the service of the index service device. The top-level index service unit 2011 is equipped with a globally unique IP address, and the address and the service port are well-known service entrances in the system, or can be obtained through a method defined by the system. The first NAT device 1010 directly accesses the public network and is a root NAT device. The second basic index service unit 2021 is deployed in the network controlled by the root NAT device 1010; the second NAT device 1020 directly accesses the network controlled by the root NAT device 1010, and the third basic index service unit 2022 is deployed in the network controlled by the second NAT device 1020. In the network, the index server client 9004 is deployed in the network controlled by the second NAT device 1020; the NAT device modifies the source or destination address of the passing data packet, and the description of the modification of the data packet by the NAT device is omitted in this figure. The specific process is described as follows:

The index service device client 9004 sends a service request message to the top-level index service unit 2011 deployed in the public network;

After receiving the service request message, the top-level index service unit 2011 judges whether it can be executed according to logic, and if it can be executed, returns a success message; if it cannot be executed, judges whether it can be redirected to the sub-index service unit, and if yes, returns a redirection message , otherwise a failure message is returned; in this example, the redirection message returned includes the network address and port information of the second basic index service unit 2021 .

The index service device client 9004 sends a service request message to the second basic index service unit 2021 of the index service device according to the network address and port of the index service device included in the redirection message;

●After receiving the service request message, the second basic index service unit 2021 judges logically whether it can be executed, and if it can be executed, returns a success message; if not, judges whether it can be redirected to the sub-index service unit, and if yes, returns Orientation message, otherwise a failure message is returned, and the redirection message returned in this example includes the third basic index service unit 2022 network address and port message

The index service device client 9004 sends a service request message to the index service device according to the network address and port of the index service device included in the response message;

●After receiving the service request message, the second basic index service unit 2021 judges logically whether it can be executed, and if it can be executed, returns a success message; if not, judges whether it can be redirected to the sub-index service unit, and if yes, returns Orientation message, otherwise a failure message is returned.

The request message in FIG. 8 can be sent and received by wire or/and wirelessly.

FIG. 9 is a flowchart of the index service client requesting or submitting data to the index service device based on the locally stored network address and port of the index service device. The flow chart is an example of the index server client obtaining the index service device service. The top-level index service unit 2011 is equipped with a globally unique IP address, and the address and the service port are well-known service entrances in the system, or can be obtained through a method defined by the system. The first NAT device 1010 directly accesses the public network and is a root NAT device. The second basic index service unit 2021 is deployed in the network controlled by the root NAT device 1010; the second NAT device 1020 directly accesses the network controlled by the root NAT device 1010, and the third basic index service unit 2022 is deployed in the network controlled by the second NAT device 1020. In the network, the index service device client 9004 is deployed in the network controlled by the second NAT device 1020; the NAT device modifies the source or destination address of the passing data packet, and the description of the modification of the data packet by the NAT device is omitted in this figure. The specific process is described as follows:

The index service device client 9004 sends a service request message to the third basic index service unit 2022 deployed in the network controlled by the second NAT device 1020;

After the third basic index service unit 2022 receives the service request message, it judges logically whether it can be executed, if it can be executed, it returns a success message, if it cannot be executed, it judges whether it is a top-level index service unit, if yes, it returns a failure message, if No, return the network address and port in the record of the target index service device, in this example return a redirection message including the network address and port of the second basic index service unit 2021 .

The index service device client 9004 sends a service request message to the second basic index service unit 2021 of the index service device according to the network address and port of the index service device included in the response message;

After receiving the service request message, the second basic index service unit 2021 judges logically whether it can be executed, and if it can be executed, returns a success message; if not, judges whether it is a top-level index service unit, and if so, returns a failure message, if No, return the network address and port in the record of the target index service device. In this example, return a redirection message including the network address and port of the top-level index service unit 2011.

The index service device client 9004 sends a service request message to the index service device according to the network address and port of the index service device included in the response message;

After the top-level index service unit 2011 receives the service request message, it judges logically whether it can be executed, and if it can be executed, it returns a success message; if it cannot be executed, it judges whether it is a top-level index service unit; Returns the network address and port in the target index server record.

The request message in FIG. 9 can be sent and received by wire or/and wirelessly.

FIG. 10 is a flow of the index service client requesting or submitting data to the index service device based on monitoring the network address and port of the index service device. The flow chart is an example of the index server client obtaining the index service device service. The top-level index service unit 2011 is equipped with a globally unique IP address, and the address and the service port are well-known service entrances in the system, or can be obtained through a method defined by the system. The first NAT device 1010 directly accesses the public network and is a root NAT device. The second basic index service unit 2021 is deployed in the network controlled by the root NAT device 1010; the second NAT device 1020 directly accesses the network controlled by the root NAT device 1010, and the third basic index service unit 2022 is deployed in the network controlled by the second NAT device 1020. In the network, the index server client 9004 is deployed in the network controlled by the second NAT device 1020; the NAT device modifies the source or destination address of the passing data packet, and the description of the modification of the data packet by the NAT device is omitted in this figure. The specific process is described as follows:

●The third basic index service unit 2022 broadcasts a message including the network address and port of the index service device in the network controlled by the NAT to which it belongs;

The index service device client 9004 monitors the broadcast message containing the network address and port of the index service device in the network controlled by the NAT to which it belongs;

The index service device client 9004 sends a service request message to the index service device after receiving the message containing the network address and port of the index service device broadcast by the third basic index service unit 2022 in the network controlled by the NAT to which it belongs;

After receiving the above-mentioned service request message, the third basic index service unit 2022 judges logically whether it can be executed, and if it can be executed, returns a success message; Meet, then the index service device forwards the service request, if not, forward the condition of the service request to the index service device, judge whether it can be redirected to the sub-index service unit, if yes, return the redirection message, otherwise return the failure message, In this example, a success message including the network address and port of the service device is returned to the index service device client 9004.

In addition, the method of broadcasting the service entry in FIG. 10 can be replaced by means of publicity and pre-informing the user, and the user configures the service client 9004 manually.

FIG. 11 is a flow of the index service client requesting or submitting data to the index service device based on monitoring the network address and port of the index service device. The flow chart is an example of the index server client obtaining the index service device service. The top-level index service unit 2011 is equipped with a globally unique IP address, and the address and the service port are well-known service entrances in the system, or can be obtained through a method defined by the system. The first NAT device 1010 directly accesses the public network and is a root NAT device. The second basic index service unit 2021 is deployed in the network controlled by the root NAT device 1010; the second NAT device 1020 directly accesses the network controlled by the root NAT device 1010, and the second basic index service unit agent 2023 is deployed in the network controlled by the second NAT device 1020 In the network, the index service device client 9004 is deployed in the network controlled by the second NAT device 1020; the NAT device modifies the source or destination address of the passing data packet, and the description of the modification of the data packet by the NAT device is ignored in this figure. There may be a private communication interface between the service function entity proxy and the proxied service object, which is used for information exchange between the service function entity proxy and the proxied service object. In this figure, the transformation of the data packet by the NAT routing device is ignored.

●The second basic index service unit agent 2023 is deployed in the network controlled by the second NAT device 1020 to broadcast a message containing the network address and port of the index service device;

The index service device client 9004 monitors the broadcast message containing the network address and port of the index service device in the network controlled by the NAT to which it belongs;

After the index service device client 9004 receives the message containing the network address and port of the index service device broadcast by the agent 2023 of the second basic index service unit in the network controlled by the NAT to which it belongs, the index service device 2022 sends a service request message;

After receiving the above-mentioned service request message, the second basic index service unit 2021 judges logically whether it can be executed, and if it can be executed, returns a success message; if it cannot be executed, it judges whether it meets the conditions for forwarding the service request to the index service device, if Meet, then the index service device forwards the service request, if not, forward the condition of the service request to the index service device, judge whether it can be redirected to the sub-index service unit, if yes, return the redirection message, otherwise return the failure message, In this example, a successful message including the server network address and port is returned to the index server client 9004.

The second index service unit proxy shown in FIG. 11 does not provide the message forwarding function. It is not difficult for developers to develop an index server agent with message forwarding function if necessary.

In addition, in a multi-level NAT network, it is not difficult for developers to propose relevant procedures according to this procedure. The execution process of the process can be wired or/and wireless.

In addition, the method of broadcasting the service entry in Figure 11 can be replaced by means of publicity, pre-informing users, etc., and the user configures the service client manually. The information and related content in the index service device are as follows Table 4.

Table 4 Index service device configuration table

message name Purpose Basic content of the message Additional information Web service resource registration message The server registers network service resources with the index service device Message type identification, network resource name, network address, port and hierarchy information Network resource names are represented by URI or URL Network service resource address query message The client queries the address of the network service resource from the index service device Message type identifier, network resource name, message sender identifier. The network resource name is represented by a character string, such as URI or URL; if there is a reply unit in the corresponding redirection message, add the reply unit information in this message. Successful response message Return a success message to the sender of the message, message type identifier, The response to the "network service resource address query message" includes the network address and port of the network service resource. A successful response message is a type of response message. Failed response message Return a failure message to the sender of the message message type identifier, The response to the "network service resource address query message" includes the network address and port number of the network service resource. The failure reply message is a kind of reply message. Redirect message Return to the sender of the message and also include the network address and port of the index service device Message type identification; network address of the reply index service unit; (reply unit for short) the network address and port of the redirection target of the index service device. (Redirect target for short) The response to the "network service resource address query message" may include the network address and port of the network service resource. A redirect message is a type of reply message.

Fig. 12 is a processing method for receiving a service resource registration message and a service resource network address request message sent by the client by the index service device.

S101 starts;

S102 waits to receive data;

S103 judges whether data is received, if no data is received, go to S102; if data is received, go to S104;

S104 judges the message type, if it is a "network service resource address query message", go to S110, if it is a "network service resource registration message", go to S130, if it is not the above message, go to S120;

S130 extracting the content of the "network service resource registration message";

S131 judges whether the data packet carrying the message passes through the NAT device, that is, whether the source address of the packet is the same as the network address of the message sender in the message, if they are the same, turn to S133, if they are different, turn to S134;

S133 judges whether the level information in the registration message is greater than the level of the current index service unit by 1, if yes, turn to S134, if not, turn to S135;

S134 records the content and relevant information of the service resource registration message, such as the address of the NAT device, and returns a successful response message;

S135 judges whether there is an index service unit in the network controlled by the NAT device, if not, turn to S136, if there is, turn to S137;

S136 returns a failure response message to the sender of the request message;

S137 returns the network address and port of the index service unit to the sender of the request message;

S110 "network service resource address query message" processing flow (see Figure 16), and return to S102;

S120 Return a failure response message to the sender of the request message.

Fig. 13 is a flow chart of the interaction process of the server processing the "network service resource registration message".

S200 start;

S201 sets the number of attempts to send the device registration message to 0, sets the maximum number of attempts, and sets timeout control;

S202 After obtaining the network address and port of the index service device, send a "network service resource registration message" to the index service device, the message at least includes information such as the network address, port and registered resource name of the service device, and the number of attempts is increased by 1;

S203 waits for a response message;

S204 judges whether to receive data, if received data, turn to S208, if not received data, turn to S205;

S205 judges whether it is overtime, if not overtime, turn to S203, if overtime, turn to S206;

S206 judges whether the number of attempts exceeds the limit; if it does not exceed the limit of attempts, turn to S202, and if it exceeds the limit of attempts, turn to S207;

S208 judges the type of the received message, if it is a "redirection response message", go to S221, if it is a "success response message" or "failure response message", go to S207;

S221 extracts the network address and port of the indexing service device in the response message, and replaces the network address and port of the original indexing service device with the network address and port of the new indexing service device.

S207 End processing.

Network service resource queryers need to have a network service resource address correspondence table, see Table 5;

Table 5 Network service resource list of user terminal

Network service resource network address Web service resource port Web service resource name 10.23.0.128 11223 URL/URI

Figure 14 is a flow chart of the network service resource queryer processing the interactive process of "network service resource address query message". After the service resource requester obtains the network address and port of the index service device, the network service resource query interaction process is processed according to the following steps:

S300 start

S301 initialization timeout, maximum number of initialization attempts

S302 The number of attempts is initialized to 0

S303 Send a network service resource address query message to the index service device according to the record of the target index service device, and add 1 to the number of attempts

S304 waits for a response message;

Whether S305 has received the data, if not transferred to S306, if yes transferred to S320;

Whether S306 is timed out, if it is transferred to S307, if not transferred to S304;

S307 Whether the number of attempts exceeds the limit, if not to S309, if it is to S322;

S322 searches for the record of the requested service resource in the network service resource table, if not turn to S308, if there is turn to S323

S323 extracting relevant records in the network service resource table;

S308 end

S309 initialization timeout;

S310 resends the network service resource address query message, adds 1 to the number of attempts, and returns to S304;

S320 message type judgment, if it is a "failure message" turn to S322, if it is a "success response message" turn to S321,

If it is a "redirect response message", go to S312;

S321 extracts the network address and port of the network service resource in the message, to S308

S312 extracting the network address and port of the reply indexing service device and redirection target in the message;

S313 judges whether the network address and the port of the network service resource exist in the message, if there is, turn to S314, if not turn to S316;

S314 extracting the network address and port of the network service resource in the message;

S315 Store the network address, port and resource name of the network service resource in the network service resource table, and replace the existing record if there is a relevant record;

S316 initialization timeout, initialization maximum number of attempts;

S317 The number of attempts is initialized to 0;

S318 Use the network address and port of the redirection target to replace the network address and port in the target index service device record, send a network service resource address query message to the index service device, if there is a reply to the network address of the index service device, include in the message Reply to the network address of the index service device, add 1 to the number of attempts, and return to S304.

Figure 15 is the processing flow of the "network service resource address query message":

S8999 start;

The S9000 extracts the content of the "network service resource address query message";

Whether the data packet carrying the message of S9001 passes through the NAT device, if it is transferred to S9005, if not transferred to S9100;

S9100 judges whether the index service unit has a record of the requested service device, if not, go to S9110, if yes, go to S9101;

S9101 returns a successful response message including the network address and port of the requested service device to the sender of the request message;

S9102 ends.

S9110 judges whether the index service unit is a top-level index service unit, if not, turn to S9120, if it is, turn to S9111;

After S9111 returns a failure message to the sender of the request message, go to S9102;

S9120 judges whether the message carries the network address of the index service unit, if not, go to S9122, if yes, go to S9121;

After S9121 returns a failure message to the sender of the request message, go to S9102;

S9122 Return a redirection message including the network address and port of the index service unit and the local target index service unit to the sender of the request message, the index service unit is the reply unit, and the local target index service unit is the redirection target, go to S9102;

S9005 judges whether there is an index service unit in the network controlled by the NAT device, if not, go to S9100, if yes, go to S9200;

S9200 judges whether there is the requested network service resource in the network service resource record table, if yes, go to S9300, if not, go to S9201;

S9201 judges whether the index service unit is a top-level index service unit, if not, go to S9205, if yes, go to S9202;

S9202 Determine whether the message carries the network address of the index service unit, if not, go to S9204, if yes, go to S9203;

After S9203 returns a failure message to the sender of the request message, go to S9102;

S9204 Return a redirection message including the network address and port of the index service unit and the index service unit corresponding to the NAT device to the sender of the request message, the index service unit is a reply unit, and the index service unit corresponding to the NAT device is a redirection message target, to S9102;

S9205 judges whether the message carries the network address of the index service unit, if yes, go to S9207, if not, go to S9206;

S9206 returns a redirection message including the network address and port of the top-level index service unit to the sender of the request message, the top-level index service unit is the redirection target, and goes to S9102;

S9207 judges whether the network address is equal to the network address in the local target index server record, if they are equal, go to S9209, if not, go to S9208;

S9208 Return a redirection message including the network address and port of the index service unit and the local target index service unit to the sender of the request message, the index service unit is the reply unit, and the local target index service unit is the redirection target, go to S9102;

S9209 Return a redirection message including the network address and port of the index service unit and the index service unit corresponding to the NAT device to the sender of the request message, the index service unit is a reply unit, and the index service unit corresponding to the NAT device is a redirection message target, to S9102;

S9300 judges whether the message carries the network address of the index service unit, if yes, go to S9302, if not, go to S9301

S9301 Return to the sender of the request message a redirection message including the index service unit, the index service unit corresponding to the NAT device, the network address and port of the requested network service resource, the index service unit is the reply unit, and the index service unit corresponding to the NAT device The indexing service unit is the redirection target, to S9102;

S9302 judges whether the network address is the same as the local target index server record, if yes, go to S9304, if not, go to S9303;

After S9303 returns a successful response message including the network address and port of the requested service device to the sender of the request message, go to S9102;

S9304 Return to the sender of the request message a redirection message including the index service unit, the index service unit corresponding to the NAT device, the network address and port of the requested network service resource, the index service unit is the reply unit, and the index service unit corresponding to the NAT device The indexing service unit is the redirection target, and it goes to S9102.

For the processing flow of the "network service resource address query message" shown in FIG. 15 , the present invention proposes another preferred embodiment, as described below.

When the client of the index service device queries network resources, it needs to repeatedly exchange information with the index service unit of the index service device. Since the service resource is registered in each index service unit, the index service device does not maintain the global information of the service resource, and the index service unit that receives the query request does not know the information in other index service units. Therefore, the indexing service unit that receives the query request needs to determine the reply content according to the current state of the indexing service unit. The current state includes: the location state of the index service unit, the state of the requested resource, and the query request direction of the "network service resource address query message".

The location status of the index service unit includes: top-level index service unit, intermediate index service unit, bottom-level index service unit, and independent top-level index service unit. The top-level index service unit means that the index service unit has only lower-level sub-index service units and no upper-level index service unit; the intermediate index service unit means that the index service unit has lower-level sub-index service units and no upper-level index service unit; the bottom-level index service unit It means that the unit has no lower-level sub-index service unit, but only a higher-level index service unit. An independent top-level index service unit refers to a top-level index service unit without child index service units.

The requested resource status includes: there is a requested resource record in this index service unit, and there is no requested resource record in this index service unit.

The query request direction of the "network service resource address query message" includes: whether the message is an initial query message, that is, sent by the user, and the information of the index service unit is not included in the message; query message, that is, sent by the user, and the index service unit is included in the message unit information. According to the information including the index service unit in the query message, the service unit receiving the query message further divides the query message into an upward query message and a downward query message. The upward query message means that the index service unit in the message is the index service unit in the sub-index service record table of this index service unit; the downward query message means that the index service unit in the message is the target index server record of this index service unit The indexing service unit in . The query message direction is generally divided into: initial query message, upward query message, and downward query message.

According to the location of the index service unit, whether there is a requested resource in the index service unit, the direction of the query request, etc., the index service unit that receives the "Internet service resource address query message" can reply according to the combination in Table 6.

Table 6 "Network service resource address query message" response decision table

Index service unit location status The status of the requested resource query request direction return reply message Reply message additional information Top Index Service Unit did not find initial query message Redirection message, the redirection target is the network address and port of the corresponding sub-index service unit Respondent-based index service unit network address Top Index Service Unit did not find query message up failure message Top Index Service Unit turn up initial query message Redirection message, the redirection target is the network address and port of the corresponding sub-index service unit, the network address and port of the service resource The respondent is the network address of this index service unit, Top Index Service Unit turn up query message up Success message, including service resource network address and port Intermediate Service Order did not find initial query redirect message Redirect targets can be based on policy

Yuan information Slight selection: upper-level index service unit, lower-level index service unit, top-level index service unit Intermediate index service unit did not find Query message up Redirection message, the redirection target is the network address and port in the record of the local target index server Responder-oriented index service unit network address Intermediate index service unit did not find Query message down Redirection message, the redirection target is the network address and port of the corresponding sub-index service unit Responder-oriented index service unit network address Intermediate index service unit turn up Initial query message Redirection message, the redirection target is the network address and port of the corresponding sub-index service unit, the network address and port of the service resource Responder-oriented index service unit network address Intermediate index service unit turn up Query message up Success message, including service resource network address and port Responder-oriented index service unit network address Intermediate index service unit turn up Query message down Redirection message, the redirection target is the network address and port of the corresponding sub-index service unit, the network address and port of the service resource Responder-oriented index service unit network address The underlying index service unit did not find Initial query message Redirection message, the redirection target is the network address and port in the record of the local target index server Responder-oriented index service unit network address The underlying index service unit did not find Query message down failure message The underlying index service unit turn up Initial query message Success message, including service resource network address and port Independent top-level index service unit did not find query message (initial) failure message Independent top-level index service unit turn up query message (initial) Success message, including service resource network address and port

Based on the reply decision table described above, a number of methods can be used to generate the reply message. Taking into account the actual operating environment, the large number of concurrent messages, processing speed and other issues. In the following, the input conditions of each case are encoded by means of state encoding. In the state space determined by the three states, the encodings of any two cases are different.

A "network service resource address query message" response control table is stored in each index service unit, and the response message control code in the control table consists of the index unit position status bit (index service unit position status bit), the requested resource status bit (resource Status bit), query message direction status bit composition (message direction bit) and other components. The server program uses the response control table to control the generation of response messages. Redirection strategies are divided into upper-level, lower-level, and top-level. The upper level is the record of the local target index server, the lower level is the network address and port of the corresponding sub-index service unit, and the top level is the network address and port of the target index service unit.

The following is the encoding scheme of the response message control code, which is an example of the encoding scheme of the response message control code.

The location status of the index service unit includes: an independent top index service unit (00), a top index service unit (11), an intermediate index service unit (01), and a bottom index service unit (10);

The status of the requested resource: there is a record in this index service unit (1), and there is no record in this index service unit (0).

Query message direction status: initial query message (00), upward query message (01), downward query message (10).

Fig. 16 is the processing flow of the "network service resource address query message".

S9000: start;

S9001: Initialize the response message control code, such as 00000;

S9002: Calculate the location status of the index service unit to obtain the location status code; use the location status code to set the "index service unit location status bit" in the response message control code, for example: the same as the current response message control code "index service unit location status bit" " OR operation;

S9004: Read the content of the request message for the requested service resource, calculate the status of the requested resource, and obtain the status code of the requested resource;

S9005: Use the resource status code to set the "resource bit" in the response message control code, for example: perform an OR operation with the "resource bit" bit of the current response message control code;

S9006: Check and read the responder information in the request message, calculate the direction status of the query message, and obtain the direction status code of the query message;

S9007: Use the message direction state code to set the "message direction bit" in the response message control code, for example: perform an OR operation with the "message direction bit" bit of the current response message control code;

S9008: Determine whether the current response message control code belongs to the response message control code in the "network service resource address query message" response control table, if it belongs, go to S9010, if not, go to S9009;

S9009: Return a failure message to the message originator, and turn to S9012;

S9010: Generate a response message according to the "network service resource address query message" response control table;

S9011: Return a response message to the message initiator;

S9012: end.

In addition, based on the "network service resource address query message" response decision table, the response message control codes in the "network service resource address query message" response control table can be generated in parallel.

Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the present invention without limiting them, and can be extended to other modifications, changes, applications and embodiments in application, and all such modifications and changes are considered to be , applications, and embodiments are all within the spirit and scope of the present invention.

Claims (27)

1. An index service device for service resources in a multi-layer NAT network with the same root, comprising: The top-level index service unit is connected to the public network through the top-level service bus device, records the network address and port of the service resource in the public network and the network controlled by the NAT device directly connected to the public network, and provides the user equipment with the service resource network address and port; At least one basic index service unit is connected to the corresponding private network through the service bus device, records the network addresses and ports of the service resources in the private network and other private networks that the private network extends downward through the NAT device, and provides The private network and the user terminal equipment in other private networks extending downward through the private network through the NAT device provide the network address and port of the service resource; Wherein, the basic index service unit sends a registration request to the upper-level index service unit to apply for joining the index service device, and the upper-level index service unit determines that the data packet carrying the registration request passes through the NAT device, and extracts the layer information in the registration request , if the basic index service unit is a sub-index service unit of the upper-level index service unit, the upper-level index service unit completes the registration of the basic index service unit, and if the basic index service unit is not the upper-level index service unit The sub-index service unit of the unit, the upper-layer index service unit returns a response message including the network address and port of the index service unit corresponding to the NAT device. 2. The index service device of claim 1, wherein if the level of the basic index service unit is one greater than the level of the upper index service unit, the basic index service unit is a sub-index of the upper index service unit service unit. 3. The index service device of claim 1, wherein the upper layer index service unit determines whether the source address of the data packet of the registration application is the same as the network address of the basic index service unit carried in the registration application message Whether the data packet carrying the registration request passes through the NAT device. 4. The indexing service device of claim 1, wherein the public network is connected to the top-level indexing service unit, and the private network is only connected to one basic indexing service unit, and the basic indexing service unit can be connected to the private network and the private Multiple web service resource registrations in other private networks of the network. 5. The index service device of claim 1, wherein the upper-level index service unit may be a top-level index service unit or a basic index service unit. 6. An index service device for service resources in a same-root multi-layer NAT network, comprising: A storage medium, the storage medium is used to store and record the identification, host address, port information and level information of the index service device, and the storage medium is used to store the index service device directly above and directly below the index service device Network address and port information and the identification of the directly lower index service device and the network address and port information of the NAT device corresponding to the directly lower index service device, and the storage medium is used to store the network address, port, resource name and corresponding NAT device of the service resource network address and port information; a communication unit, the communication unit is connected with the service bus device and is responsible for sending and receiving data; A logic control unit, the logic control unit controls the sending and receiving of data and the reading and writing of data. 7. The indexing service device of claim 6, further comprising: A level information record table, used to record the level information of the index service device; A target index service device record table, used to record the network address and port information of the ancestor index service device of the index service device; Sub-index service unit record table, used to record the identification, network address, port of the sub-index service device of the index service device, and the network address and port information of the corresponding NAT device; The network service resource device record table is used to record the network address, port, resource name of the service resource and the network address and port information of the corresponding NAT device; The network service resource address query message response control table is used to control the generation of the response message to the network service resource address query request; An index service logic control unit, the index service logic control unit is respectively connected with the target index service device record table, the sub-index service unit record table, the network service resource device record table and the communication unit, and controls all The target index service device record table, the sub-index service unit record table, the network service resource device record table and the communication unit perform read and write operations; the index service logic control unit queries the message response from the network service resource address The control table reads the control information to generate a response message; the index service logic control unit is connected with the layer information recording table to read the layer information. 8. The index service device of claim 7, further comprising: a basic configuration information record table, the basic configuration information record table is connected to the index service logic control unit, and is used to record the index service device identifier, host address and port information. 9. An index service registration method for a basic index service unit in a same-root multi-layer NAT network, the method comprising: Step 10), the top-level index service unit starts to receive the registration request, the basic index service unit accesses the private network through the service bus device, and sends a registration request to the upper-level index service unit; Step 20), after the upper layer index service unit determines whether the data packet carrying the registration request passes through the NAT device, extracts the layer information in the registration request; Step 30), if the basic index service unit is a sub-index service unit of the upper-level index service unit, record the network address of the basic index service unit in the sub-index service unit record table of the upper-level index service unit , port, identifier, and the network address and port of the corresponding NAT device, and return a successful response message; Step 40), if the basic index service unit is not a sub-index service unit of the upper-level index service unit, then look up the index service unit corresponding to the NAT device in the sub-index service unit record table of the upper-level index service unit, If the corresponding index service unit exists, return a response message including the network address and port of the index service unit corresponding to the NAT device to the basic index service unit that made the registration request; Step 50), after the basic index service unit that made the registration request extracts the network address and port in the response message, it sends a registration request to the corresponding index service unit. 10. The method of claim 9, wherein, in step 10), the upper-level index service unit may be a top-level index service unit or a basic index service unit. 11. The method of claim 9, wherein, step 20) further comprises: the upper layer index service unit according to the source address of the data packet of the registration application and the network address of the basic index service unit carried in the registration application message Whether they are equal, judging whether the data packet carrying the registration request passes through the NAT device. 12. The method of claim 9, wherein step 30) further comprises: if the level of the basic index service unit is 1 greater than the level of the upper index service unit, then the basic index service unit serves the upper index Unit's child index service unit. 13. The method of claim 9, wherein the public network is connected to the top-level index service unit, and the private network is only connected to a basic index service unit, and the basic index service unit can be connected to the private network and the private network connected to the private network. Multiple web service resource registrations in other private networks. 14. A system for acquiring service resource addresses in a same-root multi-layer NAT network, comprising: The index service device as claimed in claim 3; The top-level service bus device is respectively connected to the top-level index service unit of the index service device and the public network, and connects the index service device to the public network; The service bus device is respectively connected to the basic index service unit of the index service device and the private network, and connects the index service device to the private network; Wherein, after the index service device receives the network service resource registration/network service resource request message sent by the index service device client through the top-level index service bus device or the service bus device, it judges whether it can be executed according to logic, If it can be executed, return a request success message; for the network service resource registration message, if it cannot be executed and can be redirected, then return a redirection message, and the client re-registers; for the network service resource request message, if cannot be executed, and if the index service unit that accepts the request in the index service device is not the top-level index service unit, return a redirection message including the network address and port in the target index service device record of the index service unit, and the client end to resend the request. 15. The system of claim 14, wherein said index service device is connected to a public network via a top-level service bus device, is addressed using a network address of the public network, and becomes a part of said public network. 16. The system of claim 14, wherein said index service device is connected to a private network via a service bus device, is addressed using a network address of the private network, and becomes a part of said accessed private network. 17. The system of claim 14, wherein, in the index service device, the public network is connected to the top-level index service unit, and the private network is only connected to a basic index service unit, and the basic index service unit can be connected to the private network and A plurality of network service resources in other private networks accessing the private network are registered. 18. The system of claim 14, wherein said index service device clients include user machines and service resource devices in public networks and private networks. 19. A method for registering network service resources by a client of an index service device in a same-root multi-layer NAT network, comprising: Step 10), the index service device client sends a network service resource registration message to the index service device, and the registration message includes the network address, port and registered resource name of the service resource; Step 20), the indexing service device receiving the service registration message judges whether the data packet carrying the registration message passes through the NAT device; Step 30), if the NAT device is passed, and if the level in the registration message is 1 greater than the level of the index service unit, record the service resource registration message including the network address and port of the NAT device, and return a successful registration message ; Step 40), if passing through the NAT device, and if the level in the registration message is not greater than the level of the index service unit by 1, when there is an index service unit in the network controlled by the NAT device, return to the client including the A redirection message of the network address and port of the indexing service unit; Step 50), the client extracts the network address and port of the returned index service unit from the redirection message to replace the original network address and port of the index service device, and sends a registration request. 20. The method of claim 19, wherein said index service device clients include user computers and service resource devices in public networks and private networks. 21. The method of claim 19, wherein the index service unit can be a top-level index service unit or a basic index service unit. 22. The method of claim 19, wherein the method further comprises: setting the number of attempts of registration requests and the timeout control of registration requests by the client of the index service device, if the registration request exceeds the set number of attempts or the Timeout control, end this request. 23. The method of claim 19, wherein step 20) further comprises: said indexing service device determines whether said registration message passes through a NAT device by judging whether the source address of said registration message is the same as the network address of said client. 24. The method of claim 19, wherein step 20) further comprises: if the registration message does not pass through the NAT device, recording the service resource information of the registration message, and returning a success response message. 25. A method for querying network service resources by a client of an index service device in a same-root multi-layer NAT network, comprising: Step 10), the client side of the index service device judges whether there is a response message from the index service device, and then sends a network service resource address query message to the index service device, the query message includes at least the name of the service resource, when there is a response message from the index service device When the response message of the index service device, the query message also includes the respondent in the response message; Step 20), the index service unit of the index service device that receives the network service resource query message determines whether the requested network service resource exists, and sets the status of the requested resource as found or not found; Step 30), the index service unit of the index service device that receives the network service resource query message determines its own location status, including: an independent top-level index service unit, a top-level index service unit, an intermediate index service unit, and a bottom-level index service unit unit; Step 40), the index service unit of the index service device that receives the network service resource query message determines the direction status of the query message according to the responder included in the query message: when there is no responder in the message , it is set as "initial query message"; when the responder is a sub-index service unit of the index service unit that received the network service resource query message, it is set as "upward query message"; when the When the responder is the index service unit in the target index server record of the index service unit that received the network service resource query message, it is set to "downward query message"; Step 50), the index service unit of the index service device that receives the network service resource query message matches in the following table according to the requested resource state, the location state of itself, and the direction state of the query message, and returns Corresponding reply message; Index service unit location status The status of the requested resource query request direction return reply message Reply message additional information Top Index Service Unit did not find initial query message Redirection message, the redirection target is the network address and port of the corresponding sub-index service unit Respondent-based index service unit network address Top Index Service Unit did not find query message up failure message Top Index Service Unit turn up initial query message Redirection message, the redirection target is the network address and port of the corresponding sub-index service unit, the network address and port of the service resource The respondent is the network address of the index service unit, Top Index Service Unit turn up query message up Success message, including service resource network address and port Intermediate Service Unit did not find initial query message redirect message The redirection target can be selected according to the policy: upper-level index service unit, lower-level index service unit, top-level index service unit Intermediate Index Service Unit did not find query message up Redirect message to the network address and port in the local target index server record Respondent-based index service unit network address Intermediate Index Service Unit did not find Drill down for messages Redirection message, the redirection target is the network address and port of the corresponding sub-index service unit Respondent-based index service unit network address Intermediate Index Service Unit turn up initial query message Redirection message, the redirection target is the network address and port of the corresponding sub-index service unit, the network address and port of the service resource Respondent-based index service unit network address Intermediate Index Service Unit turn up query message up Success message, including service resource network address and port Respondent-based index service unit network address Intermediate Index Service Unit turn up Drill down for messages Redirection message, the redirection target is the network address and port of the corresponding sub-index service unit, the network address and port of the service resource Respondent-based index service unit network address underlying index service unit did not find initial query message Redirect message to the network address and port in the local target index server record Respondent-based index service unit network address underlying index service unit did not find Drill down for messages failure message underlying index service unit turn up initial query message Success message, including service resource network address and port Independent top-level index service unit did not find query message (initial) failure message Independent top-level index service unit turn up query message (initial) Success message, including service resource network address and port 26. The method of claim 25, wherein, in step 10), the responder is the index service unit that sends the reply message in the index service device. 27. The method of claim 25, wherein, in step 30), the top-level index service unit means that the index service unit has only subordinate sub-index service units and no upper-level index service unit; the intermediate index service unit refers to the index service unit There are lower-level sub-index service units and no upper-level index service units; the lower-level index service unit means that the index service unit has no lower-level sub-index service units, but only upper-level index service units; the independent top-level index service unit means that there is no sub-index The service unit's top-level index service unit.

Images