CN112702319B - Access request port standardization method and device, electronic equipment and storage medium - Google Patents

Abstract

The present application discloses a standardization method, device, electronic equipment, and computer-readable storage medium for an access request port. The method includes: obtaining an access request, and extracting a destination port corresponding to the access request; judging whether the destination port is a preset port; If it is a preset port, obtain the standard port corresponding to the destination port, and use the standard port to generate a standard request; send the standard request to the proxy module that monitors the target port, and use the proxy module to perform proxy access according to the server configuration; the target port includes standard port; this method uses the standard port corresponding to the destination port belonging to the preset port to generate a standard request, which can make the proxy module monitor the standard request and perform corresponding proxy access to complete the processing of the access request; since the proxy module only needs to monitor the target Ports, and the number of standard ports is very small, so a large number of ports can be reserved for initiating connections to the web server to avoid port conflicts.

Description

Standardized method, device, electronic device and storage medium for accessing request port

technical field

The present application relates to the technical field of network security, and in particular to a method for standardizing an access request port, a device for standardizing an access request port, electronic equipment, and a computer-readable storage medium.

Background technique

Cloud WAF is a WAF (Web Application Firewall, website application-level intrusion prevention system) deployed on the cloud. Technology changes the original flow of network traffic, pulls the network traffic to itself, purifies and filters the network traffic, and sends the safe traffic back to the server, finally achieving the role of security filtering and protection. When the cloud WAF needs to access many website servers, because many websites do not use standard ports to provide services, the cloud WAF needs to occupy its own ports to monitor the ports provided by all servers, so as to obtain user access requests to websites. The cloud WAF itself needs to initiate a connection to the website server as a client, and will consume the local port at random. Therefore, at a certain moment, the randomly consumed local port is the port that needs to be monitored. At this time, a port conflict occurs. , which will cause users to fail to access the website.

Therefore, the problem of port conflict existing in related technologies is a technical problem to be solved by those skilled in the art.

Contents of the invention

In view of this, the purpose of this application is to provide a method for standardizing access request ports, a device for standardizing access request ports, electronic equipment, and computer-readable storage media, so as to avoid port conflicts and ensure normal access by users.

In order to solve the above technical problems, this application provides a standardized method for accessing request ports, including:

Obtaining an access request, and extracting a destination port corresponding to the access request;

judging whether the destination port is a preset port;

If it is the preset port, then obtain a standard port corresponding to the destination port, and use the standard port to generate a standard request;

The standard request is sent to a proxy module monitoring a target port, and the proxy module is used to perform proxy access according to server configuration; the target port includes the standard port.

Optionally, the judging whether the destination port is a preset port includes:

identifying the transport protocol corresponding to the access request;

Obtain port information corresponding to the transport protocol, and determine whether the port information includes the destination port;

If the destination port is included, it is determined that the destination port is the preset port.

Optionally, before obtaining the port information corresponding to the transport protocol, it also includes:

Obtain multiple port configuration data, and extract the non-standard port and the transmission protocol corresponding to each port configuration data;

Classifying the non-standard ports based on the transmission protocol to obtain initial port information;

Deduplication processing is performed on the initial port information to obtain the port information.

Optionally, also include:

Acquiring update data, and using the update data to update the port information.

Optionally, the obtaining the standard port corresponding to the destination port includes:

Identify the transmission protocol corresponding to the access request, and acquire the standard port according to the transmission protocol.

Optionally, using the proxy module to perform proxy access according to server configuration includes:

Using the proxy module to obtain host data in the standard request;

determining the target server configuration corresponding to the host data from the server configuration;

Use the target server configuration for proxy access.

Optionally, the proxy access using the target server configuration includes:

Parse the target server configuration to get the server address and server port:

generating a server access request by using the server address and the server port;

Send the server access request to the target server corresponding to the target server configuration.

The present application also provides a standardized device for accessing a request port, including:

An acquisition module, configured to acquire an access request, and extract a destination port corresponding to the access request;

A judging module, configured to judge whether the destination port is a preset port;

A port conversion module, configured to obtain a standard port corresponding to the destination port if it is the preset port, and use the standard port to generate a standard request;

A proxy access module, configured to send the standard request to a proxy module monitoring a target port, and use the proxy module to perform proxy access according to server configuration; the target port includes the standard port.

The present application also provides an electronic device, including a memory and a processor, wherein:

The memory is used to store computer programs;

The processor is configured to execute the computer program, so as to realize the above-mentioned standardized method for accessing a request port.

The present application also provides a computer-readable storage medium for storing a computer program, wherein when the computer program is executed by a processor, the above-mentioned standardized method for accessing a request port is realized.

The method for standardizing the access request port provided by this application obtains the access request, and extracts the destination port corresponding to the access request; judges whether the destination port is a preset port; if it is a preset port, obtains the standard port corresponding to the destination port, and uses The standard port generates a standard request; the standard request is sent to the proxy module monitoring the target port, and the proxy module is used to perform proxy access according to the server configuration; the target port includes the standard port.

It can be seen that in this method, the proxy module is used to perform the work of proxy access, and it only listens to the label port, that is, receives and responds to the request of the standard port. After obtaining the access request, it is first judged whether the corresponding destination port is a standard port, and the destination port is the port that the server provides services. If the destination port is not a standard port, it means that the request will not be monitored by the proxy module, so the corresponding standard port is obtained, a standard request is generated, and the standard request is sent to the proxy module. The proxy module can monitor the target port, and the target port includes a standard port, so the proxy module can monitor the standard request, and can determine the server that the standard request wants to access according to the server configuration, and complete the proxy access. The proxy module only needs to monitor the target port, and does not need to monitor the ports of all servers. The standard port corresponding to the destination port belonging to the preset port is used to generate a standard request, so that the proxy module can monitor the standard request and perform corresponding proxy access. Processing of access requests. By converting access requests with preset ports into standard requests, the number of ports monitored by the proxy module can be reduced, so that the number of target ports is much smaller than the number of ports that the server provides services to, and a large number of ports can be reserved for initiating connections to the website server , to avoid port conflicts, to ensure that users can access normally, and to solve the problem of port conflicts in related technologies.

In addition, the present application also provides a standardized device for accessing a request port, an electronic device, and a computer-readable storage medium, which also have the above beneficial effects.

Description of drawings

In order to more clearly illustrate the technical solutions in the embodiments of the present application or related technologies, the following will briefly introduce the accompanying drawings that need to be used in the description of the embodiments or related technologies. Obviously, the accompanying drawings in the following description are only For the embodiments of the application, those skilled in the art can also obtain other drawings according to the provided drawings without creative work.

FIG. 1 is a flow chart of a method for standardizing an access request port provided by an embodiment of the present application;

FIG. 2 is a flow chart of a specific standardization process of an access request port provided by an embodiment of the present application;

FIG. 3 is a schematic structural diagram of an access request port standardization device provided in an embodiment of the present application;

FIG. 4 is a schematic structural diagram of an electronic device provided by an embodiment of the present application.

Detailed ways

In order to make the purposes, technical solutions and advantages of the embodiments of the present application clearer, the technical solutions in the embodiments of the present application will be clearly and completely described below in conjunction with the drawings in the embodiments of the present application. Obviously, the described embodiments It is only a part of the embodiments of the present application, but not all the embodiments. Based on the embodiments in this application, all other embodiments obtained by persons of ordinary skill in the art without making creative efforts belong to the scope of protection of this application.

Please refer to FIG. 1 . FIG. 1 is a flow chart of a method for standardizing an access request port provided by an embodiment of the present application. The method includes:

S101: Obtain an access request, and extract a destination port corresponding to the access request.

Part or all of the steps in this embodiment can be executed by a cloud WAF, which is a WAF (Web Application Firewall, website application-level intrusion prevention system) deployed on the cloud. Cloud WAF can use DNS (DomainName System, domain name system) scheduling technology to change the original flow of network traffic and pull network traffic to itself to process access requests. The access request is transmitted based on the HTTP (HyperText Transfer Protocol, Hypertext Transfer Protocol) protocol or the HTTPS (Hyper Text Transfer Protocol over Secure Socket Layer, Hypertext Transfer Security Protocol) protocol, and its specific content is not limited. This embodiment does not limit the specific manner of obtaining the access request, and reference may be made to related technologies, which will not be repeated here. After the access request is obtained, the destination port to be accessed by the access request can be extracted. The destination port is a port for the website server to provide services to the outside. It can be a standard port, such as port 80 corresponding to the HTTP protocol, or a non-standard port, such as port 8080 or port 60000.

S102: Determine whether the destination port is a preset port.

Because the port that the website server provides services to the outside may be a standard port or a non-standard port, in order to process the service requests corresponding to each website server in related technologies, multiple interfaces are required to monitor the interfaces that all servers provide services to the outside, so that Respond to any access request from any web server. However, this will occupy the port of the cloud WAF itself, which is likely to cause port conflicts.

In order to solve this problem, in this application, only the target port is monitored, that is, the proxy module that monitors the target port is used for proxy access, and the access request corresponding to the preset port is standardized. The target port includes a standard port. In one embodiment, it may also include some non-standard ports. The preset port and the target port may cover all non-standard ports; or may only cover some non-standard ports. In this case, Uncovered non-standard ports cannot be processed, so preferably, the preset port and the target port include all non-standard ports. It can be understood that when an access request is obtained, in order to determine whether it can be directly processed, it is necessary to determine whether its destination port is a preset port, and in order to enable the proxy module to identify an access request with a preset port, it is necessary to determine whether the access request has a preset port. The request is converted to generate the corresponding standard request.

Specifically, after obtaining the destination port, first determine whether the destination port is a preset port. It is understandable that the preset port must be a non-standard port. If the destination port is a standard port, it can be directly monitored and processed by the proxy module. The preset port can be any non-standard port, or can be any non-standard port that provides external services for multiple web servers corresponding to the proxy module. This embodiment does not limit the specific judgment method, and the judgment method is different according to the actual meaning of the preset port. For example, when the preset port is a non-standard port, it can be directly judged whether the destination port is a standard port. Determined as the default port.

In a specific implementation manner, step S102 may include:

Step 11: Identify the transport protocol corresponding to the access request.

The transmission protocol specifically refers to the HTTP protocol or the HTTPS protocol. Since the above two transmission protocols correspond to different standard ports, the HTTP protocol corresponds to port 80, and the HTTPS protocol corresponds to port 443. Therefore, before judging whether the destination port is a preset port, first Identify the transport protocol corresponding to the access request. This embodiment does not limit a specific identification manner, and any currently existing identification manner may be used, which will not be described in detail here in this embodiment.

Step 12: Obtain port information corresponding to the transport protocol, and determine whether the port information includes the destination port.

This embodiment does not determine the specific acquisition method of the port information, for example, it may be generated locally and stored, and read directly during acquisition; or it may be input externally, such as sent by other electronic devices or manually input by the user. By identifying the transmission protocol and selecting the corresponding port information, it can be accurately determined whether the destination port is a preset port.

In order to flexibly adjust the processing method of the access request, the port information can be used to record the preset port, and the non-standard port not recorded in the port information can be determined as the target port. This embodiment does not limit the specific content of the port information. For example, in one implementation, in order to improve the overall processing speed of access requests, the port information can be used to record the non-standard ports corresponding to some servers, so as to convert some access requests into For standard requests, use the original method to process another part of access requests, which can also reduce the number of ports that the proxy module needs to monitor. Or in another embodiment, in order to reduce the number of ports that the proxy module needs to monitor as much as possible, port information can be used to record all non-standard ports other than the standard ports of the transport protocol, or port information can be used to record non-standard ports corresponding to all servers. port.

After obtaining the port information, filter the port information to determine whether there is a destination port. If the destination port is not included, it means that the destination port may be a standard port or a non-standard port that does not need to be converted. In this case, it can be directly sent to the proxy module so that the proxy module can directly process it.

Step 13: If the destination port is included, determine that the destination port is a default port.

If the port information includes the destination port, it means that the destination port is a default port. Access requests need to be converted to standard requests.

In an implementation manner, before using the port information to determine whether the destination port is a preset port, the port information may be locally generated first. Specifically, before obtaining the port information corresponding to the transport protocol, it may also include:

Step 21: Obtain multiple port configuration data, and extract non-standard ports and transmission protocols corresponding to each port configuration data.

Step 22: Classify the non-standard ports based on the transmission protocol to obtain initial port information.

Step 23: Perform deduplication processing on the initial port information to obtain port information.

In this embodiment, the port configuration data corresponds to each website server, which records the transmission protocol adopted by the access request and the port providing the service. Therefore, after obtaining the port configuration data, the corresponding port and transport protocol can be extracted. After filtering out the standard ports based on the transport protocol, the non-standard ports corresponding to all the port configuration data can be obtained, and the non-standard port can be analyzed based on the transport protocol. Ports are classified to obtain initial port information. Since different web servers may use the same non-standard port, the initial port information is deduplicated, and the duplicated part is deleted to obtain the port information. The port information obtained by this generation method records the non-standard ports used by all web servers, that is, all non-standard ports used by the web server are determined as preset ports, which can minimize the number of ports that the proxy module needs to monitor, and avoid There is a port conflict problem.

Furthermore, the port information can be updated in real time, so it can also include:

Step 31: Acquire update data, and use the update data to update port information.

This embodiment does not limit the specific content of the update data. For example, in one embodiment, it may be brand new port information. At this time, the update of the port information can be completed by replacing the original port information with the update data. . In another embodiment, the update data may include a non-standard port with a mark, and the mark may include a new mark and a delete mark, and by adding a mark to the non-standard port, the non-standard port recorded in the port information may be added or delete. It can be understood that the port information originally did not record the non-standard port with the new mark in the update data, and the port information should record the non-standard port with the delete mark in the update data. By updating the port information, the specific content of the preset port can be flexibly adjusted, thereby flexibly adjusting the processing method of the access request.

S103: Obtain a standard port corresponding to the destination port, and use the standard port to generate a standard request.

After determining that the destination port is the preset port, it means that the proxy module does not monitor it, and the access request needs to be converted into a standard request before it can be monitored and processed by the proxy module. Therefore, the standard port corresponding to the destination port is obtained, and a standard request is generated using the standard port. The difference between a standard request and an access request is only the destination port, and the other contents are the same. Specifically, the transmission protocol corresponding to the access request may be identified, and a standard port may be obtained according to the transmission protocol.

S104: Send the standard request to the proxy module monitoring the target port, and use the proxy module to perform proxy access according to the server configuration.

After a standard request is generated, it can be sent to a proxy module listening on the target port. The proxy module can monitor the standard request, and use the proxy module to perform proxy access after receiving the standard request. It should be noted that the server configuration records in this application include the server ports corresponding to all the website servers corresponding to the proxy module, and the server port is the port that the website server provides services, that is, the destination port in the access request. Since the destination port in the standard request is a standard port, and the target server corresponding to the access request does not provide services through the standard port, the purpose of converting the access request into a standard request is only to enable the proxy module to monitor the request, and the standard port cannot Access the target server normally. Therefore, when actually performing proxy access, it is also necessary to use server configuration to determine the server port, and use the server port to perform proxy access.

Specifically, in an implementation manner, the step of using the proxy module to perform proxy access according to server configuration may include:

Step 41: Use the proxy module to obtain the host data in the standard request.

Step 42: Determine the target server configuration corresponding to the host data from the server configuration.

Step 43: Use the target server configuration for proxy access.

The host data in the standard request is the host data in the access request, which can be used to determine which web server the access request wants to access, and the proxy can only be performed after determining the web server (ie, the target server) the access request wants to access access. Therefore, during proxy access, first obtain the host data in the standard request, and use the host data to filter in the server configuration to obtain the target server configuration corresponding to the target server, and use the target server configuration to perform proxy access.

Further, step 43 may include:

Step 44: Parse the configuration of the target server to obtain the server address and server port.

Step 45: Generate a server access request by using the server address and server port.

Step 46: Send the server access request to the target server corresponding to the target server configuration.

The server address and server port are recorded in the target server configuration, and the server address is specifically an IP address. After obtaining the server address and server port, use it to generate a server access request, and send it to the target server to achieve access to the target server, and the target server responds to the server access request to achieve user access to the target server.

S105: preset operation.

If the destination port is not a preset port, it means that it does not need to be converted into a standard port so that the proxy module can monitor it. At this time, it can be directly sent to the proxy module, or no operation can be performed, that is, no operation.

Applying the standardized method for accessing the request port provided by the embodiment of the present application, the proxy module is used to perform the work of proxying access, and it only listens to the marker port, that is, receives and responds to the request of the standard port. After obtaining the access request, it is first judged whether the corresponding destination port is a standard port, and the destination port is the port that the server provides services. If the destination port is not a standard port, it means that the request will not be monitored by the proxy module, so the corresponding standard port is obtained, a standard request is generated, and the standard request is sent to the proxy module. The proxy module can monitor the target port, and the target port includes a standard port, so the proxy module can monitor the standard request, and can determine the server that the standard request wants to access according to the server configuration, and complete the proxy access. The proxy module only needs to monitor the target port, and does not need to monitor the ports of all servers. The standard port corresponding to the destination port belonging to the preset port is used to generate a standard request, so that the proxy module can monitor the standard request and perform corresponding proxy access. Processing of access requests. By converting access requests with preset ports into standard requests, the number of ports monitored by the proxy module can be reduced, so that the number of target ports is much smaller than the number of ports that the server provides services to, and a large number of ports can be reserved for initiating connections to the website server , to avoid port conflicts, to ensure that users can access normally, and to solve the problem of port conflicts in related technologies.

Based on the foregoing embodiments, this embodiment describes a whole process of processing an access request. Please refer to FIG. 2 . FIG. 2 is a flow chart of a specific standardization process of an access request port provided by an embodiment of the present application. The client is the client, specifically the generation and sending end of the access request, the destination IP of the access request is the service IP, the service IP is the IP used by the cloud WAF to obtain the access request, and the domain name of the website server corresponding to the cloud WAF is resolved. Service IP is available. In this embodiment, there is also a firewall FW in front of the cloud WAF, which is used to perform destination address translation (i.e. DNAT), and guide the traffic corresponding to the service IP to the monitoring IP of the cloud WAF, where the monitoring IP is the intranet IP of the cloud WAF. By listening to this IP, the HTTP and HTTPS traffic sent by the client can be received, and the access request can be obtained. After the cloud WAF obtains the access request, it performs the above-mentioned processing steps of the access request, and uses the back-to-source IP to go back to the source. The back-to-source is the process of the cloud WAF accessing the website server, that is, the process of proxy access. It should be noted that since the proxy module in the cloud WAF only monitors a small number of target ports, the monitoring IP can provide more ports for the cloud WAF to establish a connection with the website server through the proxy module, so in this embodiment , the back-to-source IP is the listening IP. In actual proxy access, the IPs arriving at the source site (ie, web1, web2, etc. in the figure) are usually public network IPs obtained after source address translation (ie, SNAT) processing by the firewall. In another related technology, by setting the back-to-source IP as any IP other than the listening IP, the number of ports that can be used when back-to-source is expanded, thereby avoiding port conflicts. However, this related technology needs to change the back-to-source IP so that it cannot be the same as the listening IP, resulting in a large development workload and maintenance costs.

It can be understood that by converting the destination port belonging to the preset port into a standard port, the number of ports monitored by the proxy module can be reduced, port conflicts can be avoided, and there is no need to set the back-to-source IP so that it can be the same as the listening IP. No need for additional development and maintenance, reducing workload and maintenance costs.

The apparatus for standardizing the access request port provided by the embodiment of the present application is introduced below. The apparatus for standardizing the access request port described below and the method for standardizing the access request port described above may be referred to in correspondence.

Please refer to FIG. 3. FIG. 3 is a schematic structural diagram of a standardized device for accessing a request port provided by an embodiment of the present application, including:

An acquisition module 110, configured to acquire an access request, and extract a destination port corresponding to the access request;

A judging module 120, configured to judge whether the destination port is a preset port;

The port conversion module 130 is configured to obtain a standard port corresponding to the destination port if it is a preset port, and generate a standard request using the standard port;

The proxy access module 140 is configured to send the standard request to the proxy module monitoring the target port, and use the proxy module to perform proxy access according to the server configuration; the target port includes a standard port.

Optionally, the judging module 120 includes:

a first identifying unit, configured to identify a transmission protocol corresponding to the access request;

A port information judging unit, configured to obtain port information corresponding to the transmission protocol, and judge whether the port information includes a destination port;

The default port determining unit is configured to determine that the destination port is the default port if the destination port is included.

Optionally, also include:

A port configuration data acquisition unit, configured to acquire multiple port configuration data, and extract non-standard ports and transmission protocols corresponding to each port configuration data;

A classification unit, configured to classify non-standard ports based on transmission protocols, to obtain initial port information;

The deduplication processing unit is configured to deduplicate the initial port information to obtain port information.

Optionally, also include:

The update unit is used to obtain update data, and use the update data to update the port information.

Optionally, the port conversion module 130 includes:

The second identification unit is configured to identify the transmission protocol corresponding to the access request, and obtain the standard port according to the transmission protocol.

Optionally, the proxy access module 140 includes:

The data acquisition unit is used to acquire the host data in the standard request by using the proxy module;

The configuration determining unit is used to determine the target server configuration corresponding to the host data from the server configuration;

Access unit for proxy access with target server configuration.

Optionally, the access unit includes:

The parsing subunit is used to parse the target server configuration to obtain the server address and server port:

The request generation subunit is used to generate a server access request by using the server address and server port;

The sending subunit is configured to send the server access request to the target server corresponding to the target server configuration.

The electronic device provided by the embodiment of the present application is introduced below, and the electronic device described below and the method for standardizing the access request port described above may be referred to in correspondence.

Please refer to FIG. 4 , which is a schematic structural diagram of an electronic device provided in an embodiment of the present application. The electronic device 100 may include a processor 101 and a memory 102 , and may further include one or more of a multimedia component 103 , an information input/information output (I/O) interface 104 and a communication component 105 .

Among them, the processor 101 is used to control the overall operation of the electronic device 100, so as to complete all or part of the steps in the above-mentioned standardized method for accessing the request port; the memory 102 is used to store various types of data to support the operation of the electronic device 100 , these data may include, for example, instructions for any application or method operating on the electronic device 100 , as well as application-related data. The memory 102 can be implemented by any type of volatile or non-volatile memory device or their combination, such as Static Random Access Memory (Static Random Access Memory, SRAM), Electrically Erasable Programmable Read-Only Memory (Electrically Erasable Programmable Read-Only Memory, EEPROM), Erasable Programmable Read-Only Memory (Erasable Programmable Read-Only Memory, EPROM), Programmable Read-Only Memory (Programmable Read-Only Memory, PROM), Read-Only Memory (Read-Only One or more of Memory, ROM), magnetic memory, flash memory, magnetic disk or optical disk.

Multimedia components 103 may include screen and audio components. The screen can be, for example, a touch screen, and the audio component is used for outputting and/or inputting audio signals. For example, an audio component may include a microphone for receiving external audio signals. The received audio signal may be further stored in the memory 102 or sent via the communication component 105 . The audio component also includes at least one speaker for outputting audio signals. The I/O interface 104 provides an interface between the processor 101 and other interface modules, which may be a keyboard, a mouse, buttons, and the like. These buttons can be virtual buttons or physical buttons. The communication component 105 is used for wired or wireless communication between the electronic device 100 and other devices. Wireless communication, such as Wi-Fi, Bluetooth, Near Field Communication (Near Field Communication, NFC for short), 2G, 3G or 4G, or one or a combination of them, so the corresponding communication component 105 may include: Wi-Fi parts, Bluetooth parts, NFC parts.

The electronic device 100 may be implemented by one or more application-specific integrated circuits (Application Specific Integrated Circuit, ASIC for short), digital signal processors (Digital Signal Processor, DSP for short), digital signal processing devices (Digital Signal Processing Device, DSPD for short), Programmable logic device (Programmable Logic Device, be called for short PLD), field programmable gate array (Field ProgrammableGate Array, be called for short FPGA), controller, microcontroller, microprocessor or other electronic components realize, be used to carry out the above-mentioned embodiment given A standardized way of accessing request ports.

The computer-readable storage medium provided by the embodiment of the present application is introduced below, and the computer-readable storage medium described below and the standardization method for accessing a request port described above may be referred to in correspondence.

The present application also provides a computer-readable storage medium, on which a computer program is stored, and when the computer program is executed by a processor, the steps of the above-mentioned standardized method for accessing a request port are implemented.

The computer-readable storage medium may include: U disk, mobile hard disk, read-only memory (Read-Only Memory, ROM), random access memory (Random Access Memory, RAM), magnetic disk or optical disk, etc., which can store program codes. medium.

Each embodiment in this specification is described in a progressive manner, each embodiment focuses on the difference from other embodiments, and the same or similar parts of each embodiment can be referred to each other. As for the device disclosed in the embodiment, since it corresponds to the method disclosed in the embodiment, the description is relatively simple, and for the related information, please refer to the description of the method part.

Those skilled in the art can further appreciate that the units and algorithm steps of the examples described in conjunction with the embodiments disclosed herein can be implemented by electronic hardware, computer software, or a combination of the two. In order to clearly illustrate the hardware and software In the above description, the components and steps of each example have been generally described according to their functions. Whether these functions are executed by means of hardware or software depends on the specific application and design constraints of the technical solution. Those skilled in the art may implement the described functionality using different methods for each particular application, but such implementation should not be considered as exceeding the scope of the present application.

The steps of the methods or algorithms described in connection with the embodiments disclosed herein may be directly implemented by hardware, software modules executed by a processor, or a combination of both. Software modules can be placed in random access memory (RAM), internal memory, read-only memory (ROM), electrically programmable ROM, electrically erasable programmable ROM, registers, hard disk, removable disk, CD-ROM, or any other Any other known storage medium.

Finally, it should also be noted that in this article, relationships such as first and second etc. are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply that these entities or operations, any such actual relationship or order exists. Furthermore, the term comprises, comprises, or any other variation is intended to cover a non-exclusive inclusion such that a process, method, article, or apparatus comprising a set of elements includes not only those elements but also other elements not expressly listed, or Yes also includes elements inherent to such a process, method, article, or device.

In this paper, specific examples are used to illustrate the principles and implementation methods of the application. The descriptions of the above embodiments are only used to help understand the method and core idea of the application; meanwhile, for those of ordinary skill in the art, according to the application There will be changes in the specific implementation and scope of application. In summary, the content of this specification should not be construed as limiting the application.

Claims (10)

1. A method for standardizing access to a request port, comprising:

acquiring an access request, and extracting a destination port corresponding to the access request;

judging whether the destination port is a preset port or not;

if the port is the preset port, acquiring a standard port corresponding to the target port, and generating a standard request by using the standard port;

sending the standard request to an agent module of a monitoring target port, and carrying out agent access by utilizing the agent module according to server configuration; the destination port comprises the standard port.

2. The method of claim 1, wherein the determining whether the destination port is a default port comprises:

identifying a transmission protocol corresponding to the access request;

acquiring port information corresponding to the transmission protocol, and judging whether the port information comprises the target port;

and if the destination port is included, determining that the destination port is the preset port.

3. The method of claim 2, further comprising, before obtaining port information corresponding to the transport protocol:

acquiring a plurality of port configuration data, and extracting a non-standard port and the transmission protocol corresponding to each port configuration data;

classifying the non-standard ports based on the transmission protocol to obtain initial port information;

and carrying out duplicate removal processing on the initial port information to obtain the port information.

4. The method of claim 2, further comprising:

and acquiring updating data, and updating the port information by using the updating data.

5. The method according to claim 1, wherein the obtaining the standard port corresponding to the destination port comprises:

and identifying a transmission protocol corresponding to the access request, and acquiring the standard port according to the transmission protocol.

6. The method of claim 1, wherein the utilizing the proxy module for proxy access according to a server configuration comprises:

acquiring host data in the standard request by using the proxy module;

determining target server configuration corresponding to the host data from the server configuration;

and carrying out proxy access by utilizing the target server configuration.

7. The method of claim 6, wherein said utilizing the target server configuration for proxy access comprises:

analyzing the configuration of the target server to obtain a server address and a server port:

generating a server access request by using the server address and the server port;

and sending the server access request to a target server corresponding to the target server configuration.

8. A standardized apparatus for accessing a request port, comprising:

the acquisition module is used for acquiring an access request and extracting a destination port corresponding to the access request;

the judging module is used for judging whether the destination port is a preset port or not;

the port conversion module is used for acquiring a standard port corresponding to the target port if the preset port is the target port, and generating a standard request by using the standard port;

the proxy access module is used for sending the standard request to a proxy module of a monitoring target port and carrying out proxy access according to server configuration by utilizing the proxy module; the destination port comprises the standard port.

9. An electronic device comprising a memory and a processor, wherein:

the memory is used for storing a computer program;

the processor for executing the computer program to implement the standardized method of accessing a request port of any one of claims 1 to 7.

10. A computer-readable storage medium for storing a computer program, wherein the computer program, when executed by a processor, implements the standardized method of accessing a request port of any one of claims 1 through 7.

Images