CN110636149B - Remote access method, device, router and storage medium - Google Patents

Abstract

The invention provides a remote access method, which comprises the following steps: acquiring a first identifier of first equipment and acquiring a second identifier of second equipment; judging whether the first equipment and the second equipment are in the same virtual network or not according to the first identification and the second identification; if the first equipment and the second equipment are in the same virtual network, determining a target virtual network address of the second equipment; judging whether the type of network address resource conversion of a target route to which the second equipment belongs is conical network address resource conversion or not according to a network address resource conversion type detection algorithm; and if the type of the network address resource conversion of the target route to which the second equipment belongs is the cone network address resource conversion, sending the access request of the first equipment to the second equipment in a peer-to-peer network transmission mode according to the target virtual network address. The invention also provides a remote access device, a router and a storage medium. The invention can realize remote access by using simple equipment.

Description

Remote access method, device, router and storage medium

technical field

The present invention relates to the technical field of network transmission, and in particular, to a remote access method, device, router and storage medium.

Background technique

At present, when performing remote access, it is necessary to build a network structure with higher requirements and use high-end equipment to set up a hardware environment. Based on the above hardware environment, enterprises can conduct remote access to enjoy Internet technical services.

However, for ordinary users, the network structure used by ordinary users is usually relatively simple, and the devices for accessing the Internet are also relatively low-end. Ordinary users cannot build a hardware environment for remote access based on a simpler network structure and lower-end Internet access devices. Therefore, when ordinary users are in different places, they cannot perform remote access.

Therefore, how to use simple devices for remote access is an urgent technical problem to be solved.

SUMMARY OF THE INVENTION

In view of the above, it is necessary to provide a remote access method, device, router and storage medium, which can perform remote access by using simple devices.

A first aspect of the present invention provides a remote access method, the method comprising:

When the first device needs to perform remote access to the second device, acquiring the first identifier of the first device, and acquiring the second identifier of the second device;

According to the first identifier and the second identifier, determine whether the first device and the second device are in the same virtual network;

If the first device and the second device are in the same virtual network, determining the target virtual network address of the second device;

According to the network address resource conversion type detection algorithm, determine whether the network address resource conversion type of the target route to which the second device belongs is cone network address resource conversion;

If the type of network address resource translation of the target route to which the second device belongs is cone network address resource translation, according to the target virtual network address, the access request of the first device is transmitted through a peer-to-peer network. sent to the second device, wherein the access request carries the target virtual network address.

In a possible implementation manner, the sending the access request of the first device to the second device by means of peer-to-peer network transmission according to the target virtual network address includes:

obtaining the first external network address of the second device from the first server according to the target virtual network address;

According to the first external network address, the access request of the first device is sent to the target route to which the second device belongs, wherein the target route is based on the target virtual network address carried in the access request, The access request is sent to the second device.

In a possible implementation, the method further includes:

If the type of the network address resource translation of the target route to which the second device belongs is not cone network address resource translation, according to the target virtual network address, the access request of the first device is sent by means of server forwarding to the second device.

In a possible implementation manner, the sending the access request of the first device to the second device by forwarding the server according to the target virtual network address includes:

mapping the source address of the access request of the first device to the second external network address of the second server;

According to the target virtual network address, from a plurality of external network addresses stored by the second server, determine a third external network address of the second device;

The access request is sent to the second device according to the second external network address and the third external network address.

In a possible implementation, the method further includes:

If the first device and the second device are not in the same virtual network, add the first device and the second device to the target virtual network according to the first identifier and the second identifier middle;

From the virtual address pool of the target virtual network, selecting a first virtual network address and assigning the first virtual network address to the first device, and from the virtual network address pool of the target virtual network, selecting A second virtual network address and assigning the second virtual network address to the second device.

In a possible implementation manner, the second server is configured to store identification information, virtual network addresses, external network addresses, and configuration information of all devices in the virtual network.

A second aspect of the present invention provides a remote access device, the device comprising:

an acquisition module, configured to acquire the first identifier of the first device and acquire the second identifier of the second device when the first device needs to perform remote access to the second device;

a judgment module, configured to judge whether the first device and the second device are in the same virtual network according to the first identification and the second identification;

a determining module, configured to determine the target virtual network address of the second device if the first device and the second device are in the same virtual network;

The judging module is further configured to judge, according to a network address resource conversion type detection algorithm, whether the network address resource conversion type of the target route to which the second device belongs is a cone network address resource conversion;

The sending module is configured to, if the type of the network address resource conversion of the target route to which the second device belongs is cone network address resource conversion, according to the target virtual network address, transmit the An access request from a device is sent to the second device, wherein the access request carries the target virtual network address.

A third aspect of the present invention provides a router, the router includes a processor and a memory, and the processor is configured to implement the remote access method when executing a computer program stored in the memory.

A fourth aspect of the present invention provides a computer-readable storage medium, where a computer program is stored on the computer-readable storage medium, and the computer program implements the remote access method when executed by a processor.

From the above technical solutions, in the present invention, when the first device needs to perform remote access to the second device, the first identification of the first device is obtained, and the second identification of the second device is obtained; an identifier and the second identifier to determine whether the first device and the second device are in the same virtual network; if the first device and the second device are in the same virtual network, determine whether the first device and the second device are in the same virtual network. the target virtual network address of the second device; according to the network address resource conversion type detection algorithm, determine whether the network address resource conversion type of the target route to which the second device belongs is conical network address resource conversion; if the second The type of network address resource translation of the target route to which the device belongs is cone network address resource translation. According to the target virtual network address, the access request of the first device is sent to the first device by means of peer-to-peer network transmission. Two devices, wherein the access request carries the target virtual network address. It can be seen that in the present invention, each device in the same virtual network can directly communicate with each other through the virtual network address, so as to realize remote access of simple devices, provide Internet technical services for ordinary users, and can transmit data through peer-to-peer networks. It does not need to consume the bandwidth of the intermediate server node and saves bandwidth resources.

Description of drawings

FIG. 1 is a flow chart of a preferred embodiment of a remote access method disclosed in the present invention.

FIG. 2 is a functional block diagram of a preferred embodiment of a remote access device disclosed in the present invention.

FIG. 3 is a schematic structural diagram of a router according to a preferred embodiment of the remote access method according to the present invention.

Detailed ways

In order to more clearly understand the above objects, features and advantages of the present invention, the present invention will be described in detail below with reference to the accompanying drawings and specific embodiments. It should be noted that the embodiments of the present invention and the features in the embodiments may be combined with each other under the condition of no conflict.

Obviously, the described embodiments are only some, but not all, embodiments of the present invention. Based on the embodiments of the present invention, all other embodiments obtained by those of ordinary skill in the art without creative efforts shall fall within the protection scope of the present invention.

Unless otherwise defined, all technical and scientific terms used herein have the same meaning as commonly understood by one of ordinary skill in the art to which this invention belongs. The terms used herein in the description of the present invention are for the purpose of describing specific embodiments only, and are not intended to limit the present invention.

The remote access method of the embodiment of the present invention is applied in a router, and can also be applied in a hardware environment composed of a router and a server connected to the router through a network, and is jointly executed by the server and the router. The network includes, but is not limited to: a wide area network, a metropolitan area network or a local area network.

Please refer to FIG. 1. FIG. 1 is a flowchart of a preferred embodiment of a remote access method disclosed in the present invention. Wherein, according to different requirements, the order of the steps in the flowchart can be changed, and some steps can be omitted.

S11. When the first device needs to perform remote access to the second device, the router acquires the first identifier of the first device, and acquires the second identifier of the second device.

Wherein, the first device and the second device may be Internet access devices connected to a router, or may be mobile terminals installed with a router client, wherein the router client is used to simulate the function of a router.

The first identifier may be a device serial number of the first device, which is used to identify the identity of the first device.

Wherein, the first device and the second device may be devices located in different places and connected to different routers respectively.

In this embodiment of the present invention, the first identifier of the first device and the second identifier of the second device may be stored in the server in advance. If the first device wants to access the second device, the first The device will generate an access request to be sent to the second device, that is, a data packet, and the data packet will contain relevant information of the second device, such as network address information. The router can, according to the relevant information of the second device, Obtain the second identification of the second device from the server, because the first device is connected to the router, therefore, the router can obtain the first identification of the first device, or obtain the first identification from the server. The first identification of the device.

S12. The router determines whether the first device and the second device are in the same virtual network according to the first identifier and the second identifier, and if so, executes step S13, and if not, ends the process.

In this embodiment of the present invention, according to the first identifier and the second identifier, the server may be queried to the virtual network to which the first device and the second device respectively belong, so as to determine whether the first device and the second device belong to each other. Whether the second device is in the same virtual network, if the router stores the member list of the virtual network, it can be judged whether the member list of the virtual network exists according to the first identifier and the second identifier. The first device and the second device, if the first device and the second device exist in the member list of the virtual network, determine that the first device and the second device are in the same virtual network , if the first device or the second device does not exist in the member list of the virtual network, it is determined that the first device and the second device are not in the same virtual network.

S13. The router determines the target virtual network address of the second device.

Wherein, the virtual network address may be a network address allocated to the device members forming the virtual network from the network address pool of the same network segment.

As an optional embodiment, the method further includes:

If the first device and the second device are not in the same virtual network, add the first device and the second device to the target virtual network according to the first identifier and the second identifier middle;

From the virtual address pool of the target virtual network, selecting a first virtual network address and assigning the first virtual network address to the first device, and from the virtual network address pool of the target virtual network, selecting A second virtual network address and assigning the second virtual network address to the second device.

In this optional implementation manner, if the first device and the second device are not in the same virtual network, the first device and the second device may be identified according to the first identifier and the second identifier. The second device is added to the target virtual network, and the target virtual network will generate, according to the preconfigured target network segment, multiple virtual network addresses whose network segment is consistent with the target network segment, that is, a virtual network address pool, which can be Randomly select a first virtual network address that has not been used from the virtual network address pool of the target virtual network, assign the first virtual network address to the first device, and randomly select an unused first virtual network address. and assigning the second virtual network address to the second device.

Optionally, the first identifier of the first device, the first virtual network address, and the second identifier and the second virtual network address of the second device may be stored in a server, and the server may also Related information such as the external network address used by the first device and the external network address used by the second device is stored.

S14. According to the network address resource conversion type detection algorithm, the router determines whether the network address resource conversion type of the target route to which the second device belongs is cone network address resource conversion. If so, go to step S15, if not, end the process .

The network address resource translation (Network Address Translation, NAT) type detection algorithm may be used to detect the type of NAT configured by the router.

The types of the NAT may include full cone NAT, restricted cone NAT, port restricted cone NAT and symmetric NAT.

The cone NAT may include the full cone NAT, the restricted cone NAT, and the port restricted cone NAT.

S15. The router sends the access request of the first device to the second device by means of peer-to-peer network transmission according to the target virtual network address, where the access request carries the target virtual network address .

The peer-to-peer networking (P2P) is a distributed application architecture that distributes tasks and workloads among peers, and is formed by a peer-to-peer computing model at the application layer. A form of networking or networking. In the P2P network environment, multiple computers connected to each other are in a peer-to-peer position. Each computer has the same function, and there is no master-slave distinction. One computer can be used as a server, setting shared resources for the network. Other computers can also be used as workstations. Generally speaking, the entire network does not rely on dedicated centralized servers, nor does it have dedicated workstations. Each computer in the network can not only act as a requester of network services, but also respond to requests from other computers, providing resources, services and content.

In this embodiment of the present invention, if the type of network address resource translation of the target route to which the second device belongs is cone network address resource translation, the external network address and port number stored in the server by the second device can be used by other devices, That is, the data packets sent to the second device by other devices with different source addresses using the external network address stored in the server by the second device will not be intercepted by the destination route to which the second device belongs, thus The first device can communicate directly with the second device by means of peer-to-peer network transmission, without processing by other servers, thereby eliminating the need to consume bandwidth of other servers and saving bandwidth resources.

Specifically, according to the target virtual network address, sending the access request of the first device to the second device by means of peer-to-peer network transmission includes:

obtaining the first external network address of the second device from the first server according to the target virtual network address;

According to the first external network address, the access request of the first device is sent to the target route to which the second device belongs, wherein the target route is based on the target virtual network address carried in the access request, The access request is sent to the second device.

In this optional implementation manner, when the second device is added to the virtual network, the second device will communicate with the first server, and the first server will store the second device The external network address used by the device and the target virtual network address of the second device. Therefore, the first external network address of the second device may be queried and acquired from the first service according to the target virtual network address. After obtaining the first external network address, the router can map the destination address of the data packet with the access request sent by the first device to the second device to the first external network address, so that the access request can be Send to the target route to which the second device belongs, wherein the target route sends the access request to the second device according to the target virtual network address carried in the access request.

Wherein, the first server is used for storing identification information, virtual network addresses, external network addresses and configuration information of all devices in the virtual network.

Optionally, all devices in the virtual network will regularly communicate with the first server, so that the first server can regularly save or update the identification information, virtual network addresses, external network addresses and configuration information of all devices.

As an optional embodiment, the method further includes:

If the type of the network address resource translation of the target route to which the second device belongs is not cone network address resource translation, according to the target virtual network address, the access request of the first device is sent by means of server forwarding to the second device.

In this optional implementation manner, if the type of network address resource translation of the target route to which the second device belongs is not cone network address resource translation, that is, the second device communicates with devices with different source addresses When the external network address used by the second device is different, that is, the external network address of the second device stored in the server can only be used by the server to communicate with the second device. The external network address of the second device stored in the server is used to communicate with the device. Because the source address used by other devices is different from the source address of the server, all other devices send access requests to the second device ( data packets) will be intercepted by the target route to which the second device belongs, that is, other devices cannot communicate directly with the second device. Therefore, it is necessary to send the access request of the first device to the second device by means of server forwarding.

Specifically, the sending the access request of the first device to the second device by forwarding the server according to the target virtual network address includes:

mapping the source address of the access request of the first device to the second external network address of the second server;

According to the target virtual network address, from a plurality of external network addresses stored by the second server, determine a third external network address of the second device;

The access request is sent to the second device according to the second external network address and the third external network address.

In this optional implementation manner, the access request of the first device may be sent to the second server, and the second server may map the source address of the access request to the first address of the second server The second external network address, and according to the target virtual network address, the third external network address of the second device is determined from the multiple external network addresses stored by the second server, and the purpose of the access request can be determined. The address is mapped to the third external network address, so that when accessing the second device using the third external network address stored in the second server by the second device, the access request will not be Intercept to ensure that the access request can be sent to the second device.

Wherein, the second server is used for storing identification information, virtual network addresses, external network addresses and configuration information of all devices in the virtual network.

Optionally, all devices in the virtual network will regularly communicate with the second server, so that the first server can regularly save or update the identification information, virtual network addresses, external network addresses and configuration information of all devices.

In the method flow described in FIG. 1 , when the first device needs to perform remote access to the second device, it acquires the first identifier of the first device, and acquires the second identifier of the second device; according to the The first identifier and the second identifier are used to determine whether the first device and the second device are in the same virtual network; if the first device and the second device are in the same virtual network, determine whether the first device and the second device are in the same virtual network. The target virtual network address of the second device; according to the network address resource conversion type detection algorithm, determine whether the network address resource conversion type of the target route to which the second device belongs is conical network address resource conversion; if the first The type of network address resource translation of the target route to which the second device belongs is cone network address resource translation. According to the target virtual network address, the access request of the first device is sent to the The second device, wherein the access request carries the target virtual network address. It can be seen that each device in the same virtual network can directly communicate with each other through the virtual network address, so as to realize remote access of simple devices, provide Internet technical services for ordinary users, and transmit through peer-to-peer network transmission. There is no need to consume the bandwidth of intermediate server nodes, thus saving bandwidth resources.

The above are only specific embodiments of the present invention, but the protection scope of the present invention is not limited to this. improvements, but these all belong to the protection scope of the present invention.

Please refer to FIG. 2, which is a functional block diagram of a preferred embodiment of a remote access device disclosed in the present invention.

In some embodiments, the remote access device runs in a router. The remote access device may include a plurality of functional modules composed of program code segments. The program codes of each program segment in the remote access device may be stored in a memory and executed by at least one processor to perform some or all of the steps in the remote access method described in FIG. 1 .

In this embodiment, the remote access device may be divided into a plurality of functional modules according to the functions performed by the remote access device. The functional modules may include: an acquiring module 201 , a judging module 202 , a determining module 203 and a sending module 204 . The modules referred to in the present invention refer to a series of computer program segments that can be executed by at least one processor and can perform fixed functions, and are stored in a memory.

The acquiring module 201 is configured to acquire a first identifier of the first device and acquire a second identifier of the second device when the first device needs to perform remote access to the second device.

Wherein, the first device and the second device may be Internet access devices connected to a router, or may be mobile terminals installed with a router client, wherein the router client is used to simulate the function of a router.

The first identifier may be a device serial number of the first device, which is used to identify the identity of the first device.

Wherein, the first device and the second device may be devices located in different places and connected to different routers respectively.

In this embodiment of the present invention, the first identifier of the first device and the second identifier of the second device may be stored in the server in advance. If the first device wants to access the second device, the first The device will generate an access request to be sent to the second device, that is, a data packet, and the data packet will contain relevant information of the second device, such as network address information. The router can, according to the relevant information of the second device, Obtain the second identification of the second device from the server, because the first device is connected to the router, therefore, the router can obtain the first identification of the first device, or obtain the first identification from the server. The first identification of the device.

The determining module 202 is configured to determine whether the first device and the second device are in the same virtual network according to the first identifier and the second identifier.

In this embodiment of the present invention, according to the first identifier and the second identifier, the server may be queried to the virtual network to which the first device and the second device respectively belong, so as to determine whether the first device and the second device belong to each other. Whether the second device is in the same virtual network, if the router stores the member list of the virtual network, it can be judged whether the member list of the virtual network exists according to the first identifier and the second identifier. The first device and the second device, if the first device and the second device exist in the member list of the virtual network, determine that the first device and the second device are in the same virtual network , if the first device or the second device does not exist in the member list of the virtual network, it is determined that the first device and the second device are not in the same virtual network.

The determining module 203 is configured to determine the target virtual network address of the second device if the first device and the second device are in the same virtual network.

Wherein, the virtual network address may be a network address allocated to the device members forming the virtual network from the network address pool of the same network segment.

The judging module 202 is further configured to judge, according to the network address resource conversion type detection algorithm, whether the network address resource conversion type of the target route to which the second device belongs is cone network address resource conversion.

The network address resource translation (Network Address Translation, NAT) type detection algorithm may be used to detect the type of NAT configured by the router.

The types of the NAT may include full cone NAT, restricted cone NAT, port restricted cone NAT and symmetric NAT.

The cone NAT may include the full cone NAT, the restricted cone NAT, and the port restricted cone NAT.

The sending module 204 is configured to, if the type of the network address resource conversion of the target route to which the second device belongs is cone network address resource conversion, transmit the An access request from the first device is sent to the second device, wherein the access request carries the target virtual network address.

The peer-to-peer networking (P2P) is a distributed application architecture that distributes tasks and workloads among peers, and is formed by a peer-to-peer computing model at the application layer. A form of networking or networking. In the P2P network environment, multiple computers connected to each other are in a peer-to-peer position. Each computer has the same function, and there is no master-slave distinction. One computer can be used as a server, setting shared resources for the network. Other computers can also be used as workstations. Generally speaking, the entire network does not rely on dedicated centralized servers, nor does it have dedicated workstations. Each computer in the network can not only act as a requester of network services, but also respond to requests from other computers, providing resources, services and content.

In this embodiment of the present invention, if the type of network address resource translation of the target route to which the second device belongs is cone network address resource translation, the external network address and port number stored in the server by the second device can be used by other devices, That is, the data packets sent to the second device by other devices with different source addresses using the external network address stored in the server by the second device will not be intercepted by the route to which the second device belongs, so that it can be By means of peer-to-peer network transmission, the first device and the second device communicate directly without processing by other servers, so that bandwidth of other servers does not need to be consumed, and bandwidth resources are saved.

As an optional implementation manner, the remote access device may further include:

An adding module is configured to, if the first device and the second device are not in the same virtual network, add the first device and the second device to the first device and the second device according to the first identifier and the second identifier added to the target virtual network;

an allocation module, configured to select a first virtual network address from the virtual address pool of the target virtual network and allocate the first virtual network address to the first device, and select a virtual network address from the target virtual network In the address pool, a second virtual network address is selected and the second virtual network address is allocated to the second device.

In this optional implementation manner, if the first device and the second device are not in the same virtual network, the first device and the second device may be identified according to the first identifier and the second identifier. The second device is added to the target virtual network, and the target virtual network will generate, according to the preconfigured target network segment, multiple virtual network addresses whose network segment is consistent with the target network segment, that is, a virtual network address pool, which can be Randomly select a first virtual network address that has not been used from the virtual network address pool of the target virtual network, assign the first virtual network address to the first device, and randomly select an unused first virtual network address. and assigning the second virtual network address to the second device.

Optionally, the first identifier of the first device, the first virtual network address, and the second identifier and the second virtual network address of the second device may be stored in a server, and the server may also Related information such as the external network address used by the first device and the external network address used by the second device is stored.

As an optional implementation manner, the sending module 204 sends the access request of the first device to the second device by means of peer-to-peer network transmission according to the target virtual network address, specifically as follows: :

obtaining the first external network address of the second device from the first server according to the target virtual network address;

According to the first external network address, the access request of the first device is sent to the target route to which the second device belongs, wherein the target route is based on the target virtual network address carried in the access request, The access request is sent to the second device.

In this optional implementation manner, when the second device is added to the virtual network, the second device will communicate with the first server, and the first server will store the second device The external network address used by the device and the target virtual network address of the second device. Therefore, the first external network address of the second device may be queried and acquired from the first service according to the target virtual network address. After obtaining the first external network address, the router can map the destination address of the data packet with the access request sent by the first device to the second device to the first external network address, so that the access request can be Send to the target route to which the second device belongs, wherein the target route sends the access request to the second device according to the target virtual network address carried in the access request.

Wherein, the first server is used for storing identification information, virtual network addresses, external network addresses and configuration information of all devices in the virtual network.

Optionally, all devices in the virtual network will regularly communicate with the first server, so that the first server can regularly save or update the identification information, virtual network addresses, external network addresses and configuration information of all devices.

As an optional implementation manner, the sending module 204 is further configured to, if the type of network address resource translation of the target route to which the second device belongs is not conical network address resource translation, according to the target virtual network The address is forwarded by the server to send the access request of the first device to the second device.

In this optional implementation manner, if the type of network address resource translation of the target route to which the second device belongs is not cone network address resource translation, that is, the second device communicates with devices with different source addresses When the external network address used by the second device is different, that is, the external network address of the second device stored in the server can only be used by the server to communicate with the second device. The external network address of the second device stored in the server to communicate with the device, because the source address used by other devices is different from the source address of the server, all other devices send access requests to the second device ( data packets) will be intercepted by the destination route to which the second device belongs, that is, other devices cannot communicate directly with the second device. Therefore, the access request of the first device needs to be sent to the second device by means of server forwarding.

As an optional implementation manner, the manner in which the sending module 204 sends the access request of the first device to the second device by forwarding the server according to the target virtual network address is as follows:

mapping the source address of the access request of the first device to the second external network address of the second server;

According to the target virtual network address, from a plurality of external network addresses stored by the second server, determine a third external network address of the second device;

The access request is sent to the second device according to the second external network address and the third external network address.

In this optional implementation manner, the access request of the first device may be sent to the second server, and the second server may map the source address of the access request to the first address of the second server The second external network address, and according to the target virtual network address, the third external network address of the second device is determined from the multiple external network addresses stored by the second server, and the purpose of the access request can be determined. The address is mapped to the third external network address, so that when the access request is accessed to the second device using the third external network address stored in the second server by the second device, the access request will not be Intercept to ensure that the access request can be sent to the second device.

Wherein, the second server is used for storing identification information, virtual network addresses, external network addresses and configuration information of all devices in the virtual network.

Optionally, all devices in the virtual network will regularly communicate with the second server, so that the first server can regularly save or update the identification information, virtual network addresses, external network addresses and configuration information of all devices.

In the remote access apparatus described in FIG. 2, in the present invention, when the first device needs to perform remote access to the second device, the first identifier of the first device is acquired, and the second identifier of the second device is acquired. identification; according to the first identification and the second identification, determine whether the first device and the second device are in the same virtual network; if the first device and the second device are in the same virtual network In the virtual network, determine the target virtual network address of the second device; according to a network address resource translation type detection algorithm, determine whether the network address resource translation type of the target route to which the second device belongs is a cone network address resource translation If the type of the network address resource conversion of the target route to which the second device belongs is the cone network address resource conversion, according to the target virtual network address, through the mode of peer-to-peer network transmission, the access of the first device is A request is sent to the second device, wherein the access request carries the target virtual network address. It can be seen that each device in the same virtual network can directly communicate with each other through the virtual network address, so as to realize remote access of simple devices, provide Internet technical services for ordinary users, and transmit through peer-to-peer network transmission. There is no need to consume the bandwidth of intermediate server nodes, thus saving bandwidth resources.

As shown in FIG. 3 , FIG. 3 is a schematic structural diagram of a router according to a preferred embodiment of the remote access method of the present invention. The router 3 includes a memory 31 , at least one processor 32 , a computer program 33 stored in the memory 31 and executable on the at least one processor 32 , and at least one communication bus 34 .

Those skilled in the art can understand that the schematic diagram shown in FIG. 3 is only an example of the router 3, and does not constitute a limitation on the router 3, and may include more or less components than those shown in the figure, or combine some components, or different components, for example, the router 3 may also include input and output devices, network access devices, and the like.

The network where the router 3 is located includes but is not limited to the Internet, a wide area network, a metropolitan area network, a local area network, a virtual private network (Virtual Private Network, VPN), and the like.

The at least one processor 32 may be a central processing unit (Central Processing Unit, CPU), and may also be other general-purpose processors, digital signal processors (Digital Signal Processors, DSP), application specific integrated circuits (Application Specific Integrated Circuit, ASIC) ), Field-Programmable Gate Array (FPGA) or other programmable logic devices, transistor logic devices, discrete hardware components, etc. The processor 32 can be a microprocessor or the processor 32 can also be any conventional processor, etc. The processor 32 is the control center of the router 3, and uses various interfaces and lines to connect the various parts of the router 3 part.

The memory 31 can be used to store the computer program 33 and/or modules/units, and the processor 32 executes or executes the computer programs and/or modules/units stored in the memory 31 and calls the computer programs and/or modules/units stored in the memory 31. 31 to realize various functions of the router 3 . The memory 31 may mainly include a stored program area and a stored data area, wherein the stored program area may store an operating system, an application program required for at least one function (such as a sound playback function, an image playback function, etc.), etc.; the storage data area may Data (such as audio data, etc.) created in accordance with the use of the router 3 and the like are stored. In addition, the memory 31 may include non-volatile memory, such as hard disk, internal memory, plug-in hard disk, Smart Media Card (SMC), Secure Digital (SD) card, Flash Card (Flash Card), At least one disk storage device, flash memory device, etc.

1, the memory 31 in the router 3 stores multiple instructions to implement a remote access method, and the processor 32 can execute the multiple instructions to implement:

When the first device needs to perform remote access to the second device, acquiring the first identifier of the first device, and acquiring the second identifier of the second device;

According to the first identifier and the second identifier, determine whether the first device and the second device are in the same virtual network;

If the first device and the second device are in the same virtual network, determining the target virtual network address of the second device;

According to the network address resource conversion type detection algorithm, determine whether the network address resource conversion type of the target route to which the second device belongs is cone network address resource conversion;

If the type of network address resource translation of the target route to which the second device belongs is cone network address resource translation, according to the target virtual network address, the access request of the first device is transmitted through a peer-to-peer network. sent to the second device, wherein the access request carries the target virtual network address.

In an optional implementation manner, the sending the access request of the first device to the second device by means of peer-to-peer network transmission according to the target virtual network address includes:

obtaining the first external network address of the second device from the first server according to the target virtual network address;

According to the first external network address, the access request of the first device is sent to the target route to which the second device belongs, wherein the target route is based on the target virtual network address carried in the access request, The access request is sent to the second device.

In an optional implementation manner, the processor 32 can execute the plurality of instructions to achieve:

If the type of network address resource translation of the target route to which the second device belongs is not cone network address resource translation, send the access request of the first device by forwarding the server according to the target virtual network address to the second device.

In an optional implementation manner, the processor 32 can execute the plurality of instructions to achieve:

The sending the access request of the first device to the second device by forwarding the server according to the target virtual network address includes:

mapping the source address of the access request of the first device to the second external network address of the second server;

According to the target virtual network address, from a plurality of external network addresses stored by the second server, determine a third external network address of the second device;

The access request is sent to the second device according to the second external network address and the third external network address.

In an optional implementation manner, the processor 32 can execute the plurality of instructions to achieve:

If the first device and the second device are not in the same virtual network, add the first device and the second device to the target virtual network according to the first identifier and the second identifier middle;

From the virtual address pool of the target virtual network, selecting a first virtual network address and assigning the first virtual network address to the first device, and from the virtual network address pool of the target virtual network, selecting A second virtual network address and assigning the second virtual network address to the second device.

In an optional implementation manner, the second server is configured to store identification information, virtual network addresses, external network addresses, and configuration information of all devices in the virtual network.

Specifically, for the specific implementation method of the above-mentioned instruction by the processor 32, reference may be made to the description of the relevant steps in the embodiment corresponding to FIG. 1 , which is not repeated here.

In the router 3 described in FIG. 3 , when the first device needs to perform remote access to the second device, the first identification of the first device is obtained, and the second identification of the second device is obtained; according to the The first identifier and the second identifier are used to determine whether the first device and the second device are in the same virtual network; if the first device and the second device are in the same virtual network, determine whether the first device and the second device are in the same virtual network. The target virtual network address of the second device; according to the network address resource conversion type detection algorithm, determine whether the network address resource conversion type of the target route to which the second device belongs is cone network address resource conversion; if the first The type of network address resource translation of the target route to which the second device belongs is cone network address resource translation. According to the target virtual network address, the access request of the first device is sent to the The second device, wherein the access request carries the target virtual network address. It can be seen that each device in the same virtual network can directly communicate with each other through the virtual network address, so as to realize remote access of simple devices, provide Internet technical services for ordinary users, and transmit through peer-to-peer network transmission. There is no need to consume the bandwidth of intermediate server nodes, thus saving bandwidth resources.

If the modules/units integrated in the router 3 are implemented in the form of software functional units and sold or used as independent products, they may be stored in a computer-readable storage medium. Based on this understanding, the present invention can implement all or part of the processes in the methods of the above embodiments, and can also be completed by instructing relevant hardware through a computer program. The computer program can be stored in a computer-readable storage medium, and the computer When the program is executed by the processor, the steps of the foregoing method embodiments can be implemented. Wherein, the computer program includes computer program code, and the computer program code may be in the form of source code, object code, executable file or some intermediate form, and the like. The computer-readable medium may include: any entity or device capable of carrying the computer program code, a recording medium, a U disk, a removable hard disk, a magnetic disk, an optical disk, a computer memory, a read-only memory (ROM, Read-Only Memory) .

In the several embodiments provided by the present invention, it should be understood that the disclosed system, apparatus and method may be implemented in other manners. For example, the apparatus embodiments described above are only illustrative. For example, the division of the modules is only a logical function division, and there may be other division manners in actual implementation.

The modules described as separate components may or may not be physically separated, and the components shown as modules may or may not be physical units, that is, may be located in one place, or may be distributed to multiple network units. Some or all of the modules may be selected according to actual needs to achieve the purpose of the solution in this embodiment.

In addition, each functional module in each embodiment of the present invention may be integrated into one processing unit, or each unit may exist physically alone, or two or more units may be integrated into one unit. The above-mentioned integrated unit may be implemented in the form of hardware, or may be implemented in the form of hardware plus software function modules.

It will be apparent to those skilled in the art that the present invention is not limited to the details of the above-described exemplary embodiments, but that the present invention may be embodied in other specific forms without departing from the spirit or essential characteristics of the invention. Therefore, the embodiments are to be regarded in all respects as illustrative and not restrictive, and the scope of the invention is to be defined by the appended claims rather than the foregoing description, which are therefore intended to fall within the scope of the claims. All changes within the meaning and range of the equivalents of , are included in the present invention. Any reference signs in the claims shall not be construed as limiting the involved claim. Furthermore, it is clear that the word "comprising" does not exclude other elements or steps and the singular does not exclude the plural. Several units or means recited in the system claims can also be realized by one unit or means by means of software or hardware. Second-class terms are used to denote names and do not denote any particular order.

Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the present invention and not to limit them. Although the present invention has been described in detail with reference to the preferred embodiments, those of ordinary skill in the art should understand that the technical solutions of the present invention can be Modifications or equivalent substitutions can be made without departing from the spirit and scope of the technical solutions of the present invention.

Claims (8)

1. a remote access method, applied to router, is characterized in that, described method comprises: When the first device needs to perform remote access to the second device, acquiring the first identifier of the first device, and acquiring the second identifier of the second device; According to the first identifier and the second identifier, determine whether the first device and the second device are in the same virtual network; If the first device and the second device are in the same virtual network, determining the target virtual network address of the second device; According to the network address resource conversion type detection algorithm, determine whether the network address resource conversion type of the target route to which the second device belongs is cone network address resource conversion; If the type of network address resource translation of the target route to which the second device belongs is cone network address resource translation, according to the target virtual network address, the access request of the first device is transmitted through a peer-to-peer network. sent to the second device, wherein the access request carries the target virtual network address; If the type of the network address resource translation of the target route to which the second device belongs is not cone network address resource translation, according to the target virtual network address, the access request of the first device is sent by means of server forwarding to the second device; If the first device and the second device are not in the same virtual network, add the first device and the second device to the target virtual network according to the first identifier and the second identifier middle; From the virtual address pool of the target virtual network, selecting a first virtual network address and assigning the first virtual network address to the first device, and from the virtual network address pool of the target virtual network, selecting A second virtual network address and assigning the second virtual network address to the second device. 2 . The method according to claim 1 , wherein the sending the access request of the first device to the second device by means of peer-to-peer network transmission according to the target virtual network address comprises: 2 . : obtaining the first external network address of the second device from the first server according to the target virtual network address; According to the first external network address, the access request of the first device is sent to the target route to which the second device belongs, wherein the target route is based on the target virtual network address carried in the access request, The access request is sent to the second device. 3. The method according to claim 1, wherein, according to the target virtual network address, sending the access request of the first device to the second device by means of server forwarding comprises: mapping the source address of the access request of the first device to the second external network address of the second server; According to the target virtual network address, from a plurality of external network addresses stored by the second server, determine a third external network address of the second device; The access request is sent to the second device according to the second external network address and the third external network address. 4 . The method according to claim 3 , wherein the second server is configured to store identification information, virtual network addresses, external network addresses and configuration information of all devices in the virtual network. 5 . 5. A remote access device, wherein the remote access device comprises: an acquisition module, configured to acquire the first identifier of the first device and acquire the second identifier of the second device when the first device needs to perform remote access to the second device; a judgment module, configured to judge whether the first device and the second device are in the same virtual network according to the first identification and the second identification; a determining module, configured to determine the target virtual network address of the second device if the first device and the second device are in the same virtual network; The judging module is further configured to judge, according to a network address resource conversion type detection algorithm, whether the network address resource conversion type of the target route to which the second device belongs is a cone network address resource conversion; The sending module is configured to, if the type of the network address resource conversion of the target route to which the second device belongs is cone network address resource conversion, according to the target virtual network address, transmit the An access request from a device is sent to the second device, wherein the access request carries the target virtual network address; The sending module is further configured to, if the type of the network address resource conversion of the target route to which the second device belongs is not the cone network address resource conversion, according to the target virtual network address, through the server forwarding method, transfer the sending the access request of the first device to the second device; An adding module is configured to, if the first device and the second device are not in the same virtual network, add the first device and the second device to the first device and the second device according to the first identifier and the second identifier added to the target virtual network; an allocation module, configured to select a first virtual network address from the virtual address pool of the target virtual network and allocate the first virtual network address to the first device, and select a virtual network address from the target virtual network In the address pool, a second virtual network address is selected and the second virtual network address is allocated to the second device. 6 . The remote access device according to claim 5 , wherein the sending module sends the access request of the first device to the said target virtual network address by means of peer-to-peer network transmission. 7 . The method of the second device is as follows: obtaining the first external network address of the second device from the first server according to the target virtual network address; According to the first external network address, the access request of the first device is sent to the target route to which the second device belongs, wherein the target route is based on the target virtual network address carried in the access request, The access request is sent to the second device. 7 . A router, characterized in that the router comprises a processor and a memory, and the processor is configured to execute a computer program stored in the memory to implement the remote access method according to any one of claims 1 to 4 . 8. A computer-readable storage medium, wherein the computer-readable storage medium stores at least one instruction, and when the at least one instruction is executed by a processor, the implementation of any one of claims 1 to 4 is realized remote access method.

Images