Summary of the invention
Embodiment of the present invention is designed to provide a kind of resource allocation methods, device and readable storage medium storing program for executing, so thatResource allocation device can refuse part resource request, the inquiry pressure of inquiry unit be reduced, to reduce under attack modeInquiry unit improves user experience since queries crosses the probability of crash.
In order to solve the above technical problems, embodiments of the present invention provide a kind of resource allocation methods, including following stepIt is rapid: to determine present mode after attack mode, to judge to request in the user information stored in database with the presence or absence of first resourceIn user information；It include the identification information of user information and the server requested access in first resource request；If it is determined that depositing, according to first resource request in user information and the identification information of server that requests access to, determine that first resource distributesAs a result, and first resource allocation result to be transmitted to the terminal for sending first resource request；It otherwise, is not first resource request pointWith resource.
Embodiments of the present invention additionally provide a kind of resource allocation device, comprising: judgment module and processing module；JudgementModule after attack mode, judges in the user information stored in database for determining present mode with the presence or absence of first resourceUser information in request；It include the identification information of user information and the server requested access in first resource request；ProcessingModule be used for judgment module determine in the user information stored in database there are first resource request in user information after,According to first resource request in user information and the identification information of server that requests access to, determine first resource distribution knotFruit, and first resource allocation result is transmitted to the terminal for sending first resource request；It determines in database and deposits in judgment moduleThere is no after the user information in first resource request in the user information of storage, distribution resource is not requested for first resource.
Embodiments of the present invention additionally provide a kind of resource allocation device, comprising: at least one processor；And withThe memory of at least one processor communication connection；And, wherein memory is stored with and can be executed by least one processorInstruction, instruction is executed by least one processor, so that at least one processor is able to carry out as above embodiment refers toResource allocation methods.
Embodiments of the present invention additionally provide a kind of computer readable storage medium, are stored with computer program, calculateThe resource allocation methods that above embodiment refers to are realized when machine program is executed by processor.
In terms of existing technologies, resource allocation device judges present mode to embodiment of the present invention, if reallySurely it is attack mode, illustrates that scheduling system may be under attack, needs the resource request distribution money selectively for receipt of subsequentSource, in order to avoid scheduling system crash.If in the user information stored in database, there are the user informations in resource request, sayThe bright terminal for sending the resource request is not the terminal launched a offensive, and resource allocation device is the terminal distribution resource.If numberAccording in the user information stored in library, there is no the user information in resource request, illustrate that the terminal for sending the resource request canIt can be the terminal launched a offensive, be not the terminal distribution resource.Resource allocation device is selectively resource request distribution resource,Reduce the number that inquiry unit query resource requests corresponding resource, the inquiry pressure of inquiry unit is reduced, to reduceInquiry unit improves user experience since queries crosses the probability of crash.
In addition, being also stored with pair of user information, the identification information of server and resource allocation result three in databaseIt should be related to；According to first resource request in user information and the identification information of server that requests access to, determine first resourceAllocation result specifically includes: according to the identification information and resource allocation result three of the user information, server stored in databaseThe corresponding relationship of person, inquiry first resource request corresponding resource allocation result；According to query result, determine that first resource distributesAs a result.In the realization, resource allocation device can be according to the corresponding relationship stored in own database, to send resource requestTerminal distribution resource further reduces the pressure of inquiry unit.
In addition, determining first resource allocation result according to query result, specifically including: if it is determined that query result instruction is looked intoIt askes successfully, according to the resource allocation result in query result, determines first resource allocation result；If it is determined that query result instruction is looked intoFailure is ask, first resource request is transmitted to inquiry unit；Receive the first resource for the first resource request that inquiry unit returnsAllocation result；Wherein, inquiry unit is according to the user information and the mark of the server requested access in first resource requestKnow information, determine and returns to first resource allocation result.It is not stored with resource request phase in resource allocation device in the realizationIt is the resource for sending the terminal distribution of the resource request by inquiry unit in the case where the corresponding relationship answered, so that scheduling systemEffective service can be provided for user.
In addition, according to first resource request in user information and the identification information of server that requests access to, determine theOne resource allocation result, specifically includes: first resource request is transmitted to inquiry unit；Wherein, inquiry unit is according to the first moneyThe identification information of user information and the server requested access in the request of source, determines and returns to first resource allocation result；It connectsReceive first resource allocation result.
In addition, before determining present mode for attack mode, resource allocation methods further include: if it is determined that preset time is longReceived resource request quantity reaches threshold value in spending, and present mode is switched to attack mode.In the realization, according to resource requestQuantity automatic switchover mode, improve the intelligence of scheduling system.
In addition, the user information stored in database is according to the user in Secondary resource received under nonaggressive model requestInformation determines.
In addition, the identification information of the user information stored in database, server and the correspondence of resource allocation result threeThe Secondary resource allocation result that relationship is requested according to Secondary resource received under nonaggressive model and inquiry unit returns is trueIt is fixed；Wherein, Secondary resource allocation result be inquiry unit according to Secondary resource request in user information and the clothes that request access toThe resource allocation result that the identification information of business device determines.
In addition, resource allocation methods are applied to content distributing network CDN, first resource request is hypertext transfer protocolHttp request, the identification information of the server requested access to are the domain name of the server requested access to, and user information is internetProtocol IP address, first resource allocation result are according to the money for sending the IP address for the terminal that first resource is requested and requesting access toThe IP address for the CDN node server that the domain name in source determines.
Specific embodiment
In order to make the object, technical scheme and advantages of the embodiment of the invention clearer, below in conjunction with attached drawing to the present inventionEach embodiment be explained in detail.However, it will be understood by those skilled in the art that in each embodiment party of the present inventionIn formula, in order to make the reader understand this application better, many technical details are proposed.But even if without these technical detailsAnd various changes and modifications based on the following respective embodiments, the application technical solution claimed also may be implemented.
It should be noted that the resource allocation methods that embodiment of the present invention is related to can be applied to CDN network, WWWIn the scheduling systems of networks such as (World Wide Web, WEB).The resource allocation device and inquiry that embodiment of the present invention refers toDevice can be different equipment, is also possible to be provided simultaneously with the function of execution resource allocation methods and one of query function setsStandby (server as dispatched system).Resource request can be http request, be also possible to Hypertext Transfer Protocol Secure(Hyper Text Transfer Protocol over Secure Socket Layer, https) request.In resource requestUser information can be the address Internet protocol (Internet Protocol, IP), be also possible to other indicate send the moneyThe information of the identity of the terminal of source request.When the resource allocation methods are applied to CDN network, resource allocation result is according to hairThe IP for the CDN node server that the domain name of the IP address for the terminal for sending first resource to request and the resource requested access to determinesLocation.When the resource allocation methods are applied to WWW, resource allocation result is the IP address of the server of WWW.The present inventionEmbodiment in, dispatch system by taking the scheduling system of CDN network as an example, resource request by taking http request as an example, dispatch systemType for other scheduling systems and/or resource request is that the implementation procedure of other kinds of resource allocation methods can refer toEmbodiments of the present invention.
The first embodiment of the present invention is related to a kind of resource allocation methods, are applied to resource allocation device.Such as Fig. 1 instituteShow, the resource allocation methods the following steps are included:
Step 101: determining present mode to judge to whether there is in the user information stored in database after attack modeUser information in first resource request.
Specifically, including the identification information of user information and the server requested access to, resource in first resource requestDistributor executes step if it is determined that there are the user information in first resource request in the user information stored in database102, otherwise, execute step 103.
In the specific implementation, user information is stored in database profession in the form of a list, so that resource allocation device is to storageUser information be managed and inquire.
The mode of resource allocation device includes attack mode and nonaggressive model, and resource allocation device can be asked according to resourceThe modes such as quantity, received instruction are sought, any mode in both of which is switched to.Below to above two switching mode intoRow explanation:
Mode 1: resource allocation device judges whether received resource request quantity reaches threshold value in predetermined time period, ifDetermine that received resource request quantity reaches threshold value in predetermined time period, is switched to attack mode for present mode.Due to CCThe characteristics of attack is the server of the system of dispatching of being crushed using a large amount of requests, and resource allocation device can be according to resource request quantityJudge whether under attack.It will be understood by those skilled in the art that predetermined time period and threshold value can according to actual needs intoRow setting, present embodiment is with no restriction.
Mode 2: resource allocation device judges whether to receive the instruction of instruction switching present mode, however, it is determined that is, from working asPreceding pattern switching is to another mode.For example, the present mode of resource allocation device is nonaggressive model, then receivingAfter the instruction for indicating switching present mode, attack mode is switched to.
It should be noted that it will be understood by those skilled in the art that in practical application, according to actual scene and can want gramThe attack type of clothes, the trigger condition of setting switching present mode, the switching mode of present embodiment not unrestricted model.
It should be noted that being stored it will be understood by those skilled in the art that can obtain in database in several waysUser information.For example, resource allocation device is true according to the user information in Secondary resource received under nonaggressive model requestDetermine the user information stored in database.Resource allocation device by Secondary resource received under nonaggressive model request in userInformation is written in database.For another example, the user information stored in database is the pre-stored use for having confirmed that safe terminalFamily information.
Step 102: according to first resource request in user information and the identification information of server that requests access to, determineFirst resource allocation result, and first resource allocation result is transmitted to the terminal for sending first resource request.Terminate to flow laterJourney.
Specifically, if, there are the user information in resource request, illustrating to send out in the user information stored in databaseThe terminal for giving the resource request is not the terminal launched a offensive, and resource allocation device is the terminal distribution resource.
It should be noted that the identification information of the server requested access to can be uniform resource locator (UniformResource Locator, URL), it is also possible to other information.
Step 103: not requesting distribution resource for first resource.
Specifically, if there is no the user information in resource request, explanations in the user information stored in databaseThe terminal for sending the resource request may be the terminal launched a offensive, and resource allocation device is not the terminal distribution resource.SpecificallyIn realization, the first resource request in user information not stored in the database for user information, resource allocation request canNot respond thereto, error code (such as 403) can also be sent to the terminal for sending first resource request.
Resource allocation device in scheduling system is such as equipped with the server of a certain open source software, primarily serves offer friendshipThe effect of mutual interface, inquiry unit are such as equipped with the server of scheduling tool, then need to provide accurate inquiry, so that inquiryDevice needs to read more multifile, assumes responsibility for more calculating logics, consumes the performances such as more machine CPU and memory.Therefore,When the system of scheduling is under attack, inquiry unit is often easier to collapse.In present embodiment, under attack mode, resource pointThe resource request received with device docking is detected, and the information of a part of resource request is only transmitted to inquiry unit, inquiry dressThe inquiry times set are under control, and reduce the probability of inquiry unit collapse.
It is noted that being requested for undesirable first resource, resource is not distributed for it, that is, do not need to inquireThe corresponding resource of the resource request, reduces the inquiry times of inquiry unit, the inquiry pressure of inquiry unit is reduced, to dropLow inquiry unit improves user experience since queries crosses the probability of crash.
It should be noted that the above is only limit for example, not constituting to technical solution of the present invention.
Compared with prior art, the resource allocation methods provided in present embodiment, resource allocation device is to present modeJudged, however, it is determined that be attack mode, illustrate that scheduling system may be under attack, need the money selectively for receipt of subsequentSource request distribution resource, in order to avoid scheduling system crash.If there are in resource request in the user information stored in databaseUser information illustrates that the terminal for sending the resource request is not the terminal launched a offensive, and resource allocation device is the terminal distributionResource.If in the user information stored in database, there is no the user information in resource request, illustrating that sending the resource asksThe terminal asked may be the terminal launched a offensive, and be not the terminal distribution resource.Resource allocation device is selectively resource and asksDistribution resource is sought, the number that inquiry unit query resource requests corresponding resource is reduced, reduces the inquiry pressure of inquiry unitPower improves user experience to reduce inquiry unit since queries crosses the probability of crash.
Second embodiment of the present invention is related to a kind of resource allocation methods, and present embodiment is big to first embodimentThe further refinement caused, specifically illustrates step 102.
Specifically, as shown in Fig. 2, in the present embodiment, including step 201 is to step 205, wherein step 201,Step 205 is roughly the same with step 101, the step 103 in embodiment respectively, and details are not described herein again.It is main below to introduce notSame place:
Step 201: determining present mode to judge to whether there is in the user information stored in database after attack modeUser information in first resource request.
Specifically, resource allocation device is if it is determined that there are in first resource request in the user information stored in databaseUser information, execute step 202, otherwise, execute step 205.
Step 202: identification information and resource allocation result three according to the user information, server stored in databaseCorresponding relationship, inquiry first resource requests corresponding resource allocation result.
Specifically, being also stored with user information, the identification information of server and money in the database of resource allocation deviceThe corresponding relationship of source allocation result three.
In the specific implementation, identification information and the resource allocation result three of the user information stored in database, serverCorresponding relationship requested according to Secondary resource received under nonaggressive model and inquiry unit return Secondary resource distribution knotFruit determines.Wherein, Secondary resource allocation result be inquiry unit according to Secondary resource request in user information and request access toServer identification information determine resource allocation result.
It is noted that resource allocation device can be according to the corresponding relationship stored in own database, for terminal pointWith resource, the pressure of inquiry unit is further reduced.
Step 203: according to query result, determining first resource allocation result.
Specifically, inquiring knot if resource allocation device inquires first resource and requests corresponding resource allocation resultFruit indicates successful inquiring.In this case, resource allocation device determines first resource according to the resource allocation result in query resultAllocation result.If resource allocation device does not inquire first resource and requests corresponding resource allocation result, query result instructionInquiry failure.In this case, first resource request is transmitted to inquiry unit by resource allocation device, receive what inquiry unit returnedThe first resource allocation result of first resource request.Wherein, inquiry unit according to first resource request in user information and askThe identification information of the Website server of access is sought, determine and returns to first resource allocation result.
It is noted that the not stored corresponding relationship corresponding with first resource request in resource allocation device, by looking intoAsking device is the terminal distribution resource for sending the resource request, and scheduling system is enabled to provide effective service for user.
Step 204: first resource allocation result is transmitted to the terminal for sending first resource request.Terminate process later.
Step 205: not requesting distribution resource for first resource.
Resource allocation methods are described above, are exemplified below: it is assumed that resource allocation device, inquiryFor interactive relation between device and each terminal as shown in figure 3, in Fig. 3, resource allocation device is the clothes for being equipped with open source softwareBusiness device, inquiry unit is the server for being equipped with scheduling tool, and open source software and scheduling tool are installed on same server.TerminalA (IP:6.6.6.6) initiates a http request to scheduling system, and open source software determines that present mode is nonaggressive model, to tuneDegree tool initiates inquiry, i.e., by http request that terminal A is sent IP:6.6.6.6 and URL be sent to scheduling tool.SchedulingAfter tool receives the query task of open source software, according to the URL that the IP of terminal A and Terminal A requests access, determine most suitableCDN node server, and using the IP address of the CDN node server as resource allocation result, return to open source software.Open sourceAfter software receives the resource allocation result of scheduling tool, by resource allocation result, terminal A IP:6.6.6.6 and request access toURL is written in cache database, and resource allocation result is sent to terminal A.It, may when resource request quantity reaches threshold valueThere are attack, present mode is switched to attack mode by open source software.Under attack mode, asked if terminal A initiates http againIt asks, after open source software receives the http request of terminal A, query caching database determines the IP:6.6.6.6 in http requestWhether in cache database, if open source software is this request visit of 6.6.6.6 and terminal A according to IP in cache databaseThe URL asked, searches resource allocation result in cache database.If corresponding resource allocation knot is not present in cache databaseThe IP and this URL requested access to of terminal A in the http request of this initiation of terminal A are sent to tune by fruit, open source softwareDegree tool.The IP and this URL requested access to of terminal A in the scheduling tool http request that this is initiated according to terminal A, reallyDetermine this resource allocation result, and is sent to open source software.The resource allocation result is sent to terminal A by open source software.IfUnder attack mode, attacker 1 initiates http request, and open source software query caching database determines that the IP of attacker 1 is not being cachedIn database, denied access, response 403.
It should be noted that the above is only limit for example, not constituting to technical solution of the present invention.
Compared with prior art, the resource allocation device provided in present embodiment judges present mode, if reallySurely it is attack mode, illustrates that scheduling system may be under attack, needs the resource request distribution money selectively for receipt of subsequentSource, in order to avoid scheduling system crash.If in the user information stored in database, there are the user informations in resource request, sayThe bright terminal for sending the resource request is not the terminal launched a offensive, and resource allocation device is the terminal distribution resource.If numberAccording in the user information stored in library, there is no the user information in resource request, illustrate that the terminal for sending the resource request canIt can be the terminal launched a offensive, be not the terminal distribution resource.And resource request distribution is selectively by resource allocation deviceResource, reduce the number that inquiry unit query resource requests corresponding resource, reduce the inquiry pressure of inquiry unit, fromAnd inquiry unit is reduced since queries crosses the probability of crash, improve user experience.In addition to this, resource allocation deviceIt can be further reduced according to the corresponding relationship stored in own database for the terminal distribution resource for sending resource requestThe pressure of inquiry unit.
Third embodiment of the present invention is related to a kind of resource allocation methods, and present embodiment is to first embodimentFurther refinement, specifically illustrates step 102.
Specifically, as shown in figure 4, in the present embodiment, including step 301 is to step 304, wherein step 301,Step 304 is roughly the same with step 101, the step 103 in embodiment respectively, and details are not described herein again.It is main below to introduce notSame place:
Step 301: determining present mode to judge to whether there is in the user information stored in database after attack modeUser information in first resource request.
Specifically, resource allocation device is if it is determined that there are in first resource request in the user information stored in databaseUser information, execute step 302, otherwise, execute step 304.
Step 302: first resource request is transmitted to inquiry unit.
Specifically, inquiry unit according to first resource request in user information and the mark of server that requests access toInformation determines and returns to first resource allocation result.
It should be noted that inquiry unit according to first resource request in user information and the server that requests access toIdentification information, determines and the method for returning to first resource allocation result can be with reference to the associated description in second embodiment, thisPlace repeats no more.
Step 303: receiving first resource allocation result, first resource allocation result is transmitted to and sends first resource requestTerminal.Terminate process later.
Step 304: not requesting distribution resource for first resource.
Compared with prior art, the resource allocation methods provided in present embodiment, resource allocation device is to present modeJudged, however, it is determined that be attack mode, illustrate that scheduling system may be under attack, need the money selectively for receipt of subsequentSource request distribution resource, in order to avoid scheduling system crash.If there are in resource request in the user information stored in databaseUser information illustrates that the terminal for sending the resource request is not the terminal launched a offensive, and resource allocation device is the terminal distributionResource.If in the user information stored in database, there is no the user information in resource request, illustrating that sending the resource asksThe terminal asked may be the terminal launched a offensive, and be not the terminal distribution resource.Resource allocation device is selectively resource and asksThe resource for asking distribution reduces the number that inquiry unit query resource requests corresponding resource, reduces the inquiry of inquiry unitPressure improves user experience to reduce inquiry unit since queries crosses the probability of crash.
The step of various methods divide above, be intended merely to describe it is clear, when realization can be merged into a step orCertain steps are split, multiple steps are decomposed into, as long as including identical logical relation, all in the protection scope of this patentIt is interior；To adding inessential modification in algorithm or in process or introducing inessential design, but its algorithm is not changedCore design with process is all in the protection scope of the patent.
Four embodiment of the invention is related to a kind of resource allocation device, as shown in Figure 5, comprising: judgment module 401 and placeManage module 402.Judgment module 401 after attack mode, judges the user information stored in database for determining present modeIn with the presence or absence of first resource request in user information.It wherein, include user information and requesting access in first resource requestServer identification information.Processing module 402 is used to determine in the user information stored in database in judgment module 401 and depositAfter the user information in first resource request, according to first resource request in user information and the server that requests access toIdentification information determines first resource allocation result, and first resource allocation result is transmitted to the end for sending first resource requestEnd；After judgment module determines the user information being not present in first resource request in the user information stored in database, noDistribution resource is requested for first resource.
It is not difficult to find that present embodiment is system embodiment corresponding with first embodiment, present embodiment can be withFirst embodiment is worked in coordination implementation.The relevant technical details mentioned in first embodiment still have in the present embodimentEffect, in order to reduce repetition, which is not described herein again.Correspondingly, the relevant technical details mentioned in present embodiment are also applicable inIn first embodiment.
It is noted that each module involved in present embodiment is logic module, and in practical applications, oneA logic unit can be a physical unit, be also possible to a part of a physical unit, can also be with multiple physics listsThe combination of member is realized.In addition, in order to protrude innovative part of the invention, it will not be with solution institute of the present invention in present embodimentThe technical issues of proposition, the less close unit of relationship introduced, but this does not indicate that there is no other single in present embodimentMember.
Fifth embodiment of the invention is related to a kind of resource allocation device, as shown in fig. 6, including at least one processor501；And the memory 502 with the communication connection of at least one processor 501；And, wherein memory 502 is stored with can quiltThe instruction that at least one processor 501 executes, instruction is executed by least one processor 501, so that at least one processor 501It is able to carry out the resource allocation methods referred to such as above embodiment.
The resource allocation device includes: one or more processors 501 and memory 502, with a processor in Fig. 6For 501.Processor 501, memory 502 can be connected by bus or other modes, to be connected as by bus in Fig. 6Example.Memory 502 is used as a kind of non-volatile computer readable storage medium storing program for executing, can be used for storing non-volatile software program, non-Volatile computer executable program and module, as database is stored in memory 502 in the application embodiment.PlaceNon-volatile software program, instruction and the module that reason device 501 is stored in memory 502 by operation, thereby executing equipmentVarious function application and data processing, that is, realize above-mentioned resource allocation methods.
Memory 502 may include storing program area and storage data area, wherein storing program area can store operation systemApplication program required for system, at least one function；It storage data area can the Save option list etc..In addition, memory 502 can be withIt can also include nonvolatile memory, for example, at least disk memory, a flash memory including high-speed random access memoryDevice or other non-volatile solid state memory parts.In some embodiments, it includes relative to processing that memory 502 is optionalThe remotely located memory of device 501, these remote memories can pass through network connection to external equipment.The example of above-mentioned networkIncluding but not limited to internet, intranet, local area network, mobile radio communication and combinations thereof.
One or more module is stored in memory 502, when being executed by one or more processor 501, is heldResource allocation methods in the above-mentioned any means embodiment of row.
The said goods can be performed the application embodiment provided by method, have the corresponding functional module of execution method andBeneficial effect, the not technical detail of detailed description in the present embodiment, reference can be made to method provided by the application embodiment.
Sixth embodiment of the invention is related to a kind of computer readable storage medium, is stored with computer program.ComputerAbove method embodiment is realized when program is executed by processor.
That is, it will be understood by those skilled in the art that implement the method for the above embodiments be can be withRelevant hardware is instructed to complete by program, which is stored in a storage medium, including some instructions are to makeIt obtains an equipment (can be single-chip microcontroller, chip etc.) or processor (processor) executes side described in each embodiment of the applicationThe all or part of the steps of method.And storage medium above-mentioned includes: USB flash disk, mobile hard disk, read-only memory (ROM, Read-OnlyMemory), random access memory (RAM, Random Access Memory), magnetic or disk etc. are various can store journeyThe medium of sequence code.
It will be understood by those skilled in the art that the respective embodiments described above are to realize specific embodiments of the present invention,And in practical applications, can to it, various changes can be made in the form and details, without departing from the spirit and scope of the present invention.