CN114900448A - Micro-service gateway flow management method and device and electronic equipment - Google Patents
Micro-service gateway flow management method and device and electronic equipmentDownload PDFInfo
- Publication number
- CN114900448A CN114900448ACN202210598677.4ACN202210598677ACN114900448ACN 114900448 ACN114900448 ACN 114900448ACN 202210598677 ACN202210598677 ACN 202210598677ACN 114900448 ACN114900448 ACN 114900448A
- Authority
- CN
- China
- Prior art keywords
- information
- gateway
- service
- request
- flow
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Granted
Links
- 238000007726management methodMethods0.000titleclaimsabstractdescription25
- 238000012545processingMethods0.000claimsabstractdescription43
- 238000004458analytical methodMethods0.000claimsabstractdescription37
- 230000004044responseEffects0.000claimsabstractdescription34
- 238000000034methodMethods0.000claimsabstractdescription29
- 230000000977initiatory effectEffects0.000claimsabstractdescription6
- 238000011161developmentMethods0.000claimsdescription5
- 238000013500data storageMethods0.000claimsdescription4
- 230000006870functionEffects0.000description11
- 238000010586diagramMethods0.000description10
- 239000003795chemical substances by applicationSubstances0.000description4
- 238000004590computer programMethods0.000description4
- 230000008569processEffects0.000description4
- 230000001276controlling effectEffects0.000description3
- 230000003287optical effectEffects0.000description3
- 238000005206flow analysisMethods0.000description2
- 238000012986modificationMethods0.000description2
- 230000004048modificationEffects0.000description2
- 239000013307optical fiberSubstances0.000description2
- 230000000644propagated effectEffects0.000description2
- 238000003491arrayMethods0.000description1
- 238000012550auditMethods0.000description1
- 238000004891communicationMethods0.000description1
- 238000012790confirmationMethods0.000description1
- 238000005516engineering processMethods0.000description1
- 238000000605extractionMethods0.000description1
- 230000006872improvementEffects0.000description1
- 230000010354integrationEffects0.000description1
- 238000012423maintenanceMethods0.000description1
- 238000012544monitoring processMethods0.000description1
- 230000002093peripheral effectEffects0.000description1
- 238000003672processing methodMethods0.000description1
- 230000000750progressive effectEffects0.000description1
- 230000001105regulatory effectEffects0.000description1
- 230000003252repetitive effectEffects0.000description1
- 239000004065semiconductorSubstances0.000description1
- 230000009469supplementationEffects0.000description1
- 230000001960triggered effectEffects0.000description1
Images
Classifications
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L43/00—Arrangements for monitoring or testing data switching networks
- H04L43/08—Monitoring or testing based on specific metrics, e.g. QoS, energy consumption or environmental parameters
- H04L43/0876—Network utilisation, e.g. volume of load or congestion level
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L43/00—Arrangements for monitoring or testing data switching networks
- H04L43/04—Processing captured monitoring data, e.g. for logfile generation
- H04L43/045—Processing captured monitoring data, e.g. for logfile generation for graphical visualisation of monitoring data
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L47/00—Traffic control in data switching networks
- H04L47/10—Flow control; Congestion control
Landscapes
- Engineering & Computer Science (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- Data Mining & Analysis (AREA)
- Environmental & Geological Engineering (AREA)
- Data Exchanges In Wide-Area Networks (AREA)
Abstract
Description
Technical Field
The invention relates to the technical field of computers, in particular to a micro-service gateway flow management method and device and electronic equipment.
Background
With the development of information technology and the popularization of micro-service architecture, the API gateway of the back-end service slowly becomes an essential component in the software architecture, the API gateway makes the interface exposure of the service and the load balancing of the service more convenient, and different from the traditional load balancing middleware such as nginx and apache, there are many functions derived based on the micro-service, for example: the micro-service address can be dynamically taken through the registration center of the micro-service, so that the operation and maintenance are more intelligent, and complex request rules and the like can be written by simple grammars.
The API gateway, which is the mainstream in the market today, can perform these functions and can basically meet the basic requirements when used directly, but this has two problems:
firstly, the functions are used too originally, and no enterprise-level auxiliary facility is provided, so that only a few core technicians understand how to use the functions, the API gateway cannot be changed into an enterprise-level architecture, and each department or even each group has the respective API gateway, and the labor cost is greatly wasted.
Secondly, the native API gateway has too single function, and in some scenarios, the native function may not be enough to meet the actual business requirement, and how to integrate the specific requirement into the native gateway becomes a troublesome problem.
Disclosure of Invention
The invention provides a micro-service gateway traffic management method, a device and electronic equipment, which are used for improving the gateway traffic management and control capability and the service processing efficiency.
An embodiment of the present specification provides a method for managing microservice gateway traffic, including:
acquiring user service request information;
matching a request rule corresponding to the user service request information, and initiating an agent request to a service processing server corresponding to the request rule to obtain service response information;
processing the service request information and the service response information to obtain gateway flow information;
analyzing the specific field of the gateway traffic information to generate a gateway service traffic report;
and analyzing the gateway service flow report, and managing and controlling the micro service gateway flow according to the analysis.
Preferably, before acquiring the user service request, the method includes:
reading a pre-input request rule through an auxiliary configuration webpage end;
and auditing the pre-entered request rule, and issuing the request rule passing the auditing.
Preferably, the analyzing the specific field of the gateway traffic information includes:
processing the flow data into flow information with a preset structure;
storing the flow information of the preset structure to a full text search engine through message middleware;
and carrying out specific field analysis on the flow information of the preset structure through the full-text search engine.
Preferably, the performing specific field parsing on the traffic information with the predetermined structure by the full-text search engine includes:
judging service request information in the gateway flow information, and recording the service request information conforming to an analysis rule;
determining the identity authentication identification of the service request in the gateway flow information, searching and recording user information corresponding to the identity authentication identification of the service request through an authentication service;
searching and recording enterprise project attribution corresponding to the application service to which the gateway flow information belongs;
decrypting specific encrypted information in the gateway traffic information and recording the decrypted information;
and judging response information in the gateway flow information, and recording the response information conforming to the analysis rule.
Preferably, the auxiliary configuration web page terminal adopts Spring Boot as a development frame and MongoDB for data storage.
An embodiment of the present specification further provides a micro service gateway traffic management apparatus, including:
the information acquisition module is used for acquiring user service request information;
the response module is used for matching a request rule corresponding to the user service request information and initiating an agent request to a service processing server corresponding to the request rule to obtain service response information;
the information combination module is used for processing the service request information and the service response information to obtain gateway flow information;
the information analysis module is used for carrying out specific field analysis on the gateway traffic information to generate a gateway service traffic report;
and the flow control module is used for analyzing the gateway service flow report and controlling the micro service gateway flow according to the analysis.
Preferably, before acquiring the user service request, the method includes:
reading a pre-input request rule through an auxiliary configuration webpage end;
and auditing the pre-entered request rule, and issuing the request rule passing the auditing.
Preferably, the information parsing module includes:
the processing unit is used for processing the flow data into flow information with a preset structure;
the storage unit is used for storing the flow information of the preset structure to a full-text search engine through message middleware;
and the analysis unit is used for carrying out specific field analysis on the flow information with the preset structure through the full-text search engine.
An electronic device, wherein the electronic device comprises:
a processor and a memory storing computer executable instructions that, when executed, cause the processor to perform the method of any of the above.
A computer readable storage medium, wherein the computer readable storage medium stores one or more programs which, when executed by a processor, implement the method of any of the above.
The gateway traffic information is analyzed to generate a gateway service traffic report, and the gateway service traffic report is analyzed, so that the gateway traffic control capability and the service processing efficiency are improved.
Drawings
The accompanying drawings, which are included to provide a further understanding of the application and are incorporated in and constitute a part of this application, illustrate embodiment(s) of the application and together with the description serve to explain the application and not to limit the application. In the drawings:
fig. 1 is a schematic diagram illustrating a micro service gateway traffic management method according to an embodiment of the present disclosure;
fig. 2 is a flowchart of a micro service gateway traffic management rule configuration provided in an embodiment of the present specification;
fig. 3 is a flow chart of traffic analysis of micro service gateway traffic management according to an embodiment of the present disclosure;
fig. 4 is a schematic structural diagram of a micro service gateway traffic management apparatus according to an embodiment of the present disclosure;
fig. 5 is a schematic structural diagram of an electronic device provided in an embodiment of the present disclosure;
fig. 6 is a schematic diagram of a computer-readable medium provided in an embodiment of the present specification.
Detailed Description
Exemplary embodiments of the present invention will now be described more fully with reference to the accompanying drawings. The exemplary embodiments, however, may be embodied in many different forms and should not be construed as limited to the embodiments set forth herein. Rather, these exemplary embodiments are provided so that this disclosure will be thorough and complete, and will fully convey the concept of the invention to those skilled in the art. The same reference numerals denote the same or similar elements, components, or parts in the drawings, and thus their repetitive description will be omitted.
Features, structures, characteristics or other details described in a particular embodiment do not preclude the fact that the features, structures, characteristics or other details may be combined in a suitable manner in one or more other embodiments in accordance with the technical idea of the invention.
In describing particular embodiments, the present invention has been described with reference to features, structures, characteristics or other details that are within the purview of one skilled in the art to provide a thorough understanding of the embodiments. One skilled in the relevant art will recognize, however, that the invention may be practiced without one or more of the specific features, structures, characteristics, or other details.
The diagrams depicted in the figures are exemplary only, and do not necessarily include all of the contents and operations/steps, nor do they necessarily have to be performed in the order depicted. For example, some operations/steps may be decomposed, and some operations/steps may be combined or partially combined, so that the actual execution sequence may be changed according to the actual situation.
The block diagrams shown in the figures are functional entities only and do not necessarily correspond to physically separate entities. I.e. these functional entities may be implemented in the form of software, or in one or more hardware modules or integrated circuits, or in different networks and/or processor means and/or microcontroller means.
The term "and/or" and/or "includes all combinations of any one or more of the associated listed items.
Referring to fig. 1, a schematic diagram of a method for micro service gateway traffic management provided in an embodiment of the present disclosure includes:
s101: acquiring user service request information;
in a preferred embodiment of the present invention, when a user needs to invoke a micro service, a service request is sent to the gateway, the gateway receives service request information sent by the user and generates a proxy request, and the gateway sends the proxy request to a server of a corresponding micro service for processing according to the micro service requested in the service request.
S102: matching a request rule corresponding to the user service request information, and initiating an agent request to a service processing server corresponding to the request rule to obtain service response information;
in a preferred embodiment of the present invention, as shown in fig. 2, a rule configurator pre-records a request rule through an auxiliary configuration web page, stores the request rule in a rule storage module, when receiving a user service request message, a gateway reads the request rule issued in the rule storage module, matches the request rule with the user service request message, and finally forwards the user service request message to a corresponding microservice server for processing according to the matched request rule, thereby implementing fast processing of a service request.
S103: processing the service request information and the service response information to obtain gateway flow information;
in a preferred embodiment of the present invention, information extraction is performed on the service request information and the service response information, and the extracted information is integrated to form gateway traffic information, where the gateway traffic information includes: the request information includes requested website information, requested user authentication information, request rule information corresponding to the request, application service information to which the request rule belongs, a unique identification number of the request, rule information of flow limitation, and the like. The requested website information includes a request address, a request body, a request header, a response body, a response header, and the like.
Further, the requested user authentication information is used for the gateway to verify the certificate carried by the user so as to acquire corresponding user information; request rule information corresponding to the request is used for confirming a request rule finally matched with the current service request; the application service information to which the request rule belongs is used for confirming the concrete item of the company to which each business request belongs; the unique identification number of the request is used for ensuring that each service request can be traced, and can be combined with a service log to perform full link tracing of the service request; the rule information of the flow limitation is used for confirming the specific current limitation rule triggered by the service request. The gateway traffic information contains the whole process information of the service request and the service response, and the gateway traffic information is analyzed subsequently, so that the monitoring of the service and the regulation and control of the gateway traffic are realized, the service processing efficiency is improved, and the management capability of the gateway traffic is enhanced.
S104: analyzing the specific field of the gateway traffic information to generate a gateway service traffic report;
in a preferred embodiment of the present invention, the original gateway traffic information may include many unreadable information, and specific information supplementation or decryption is performed according to the traffic configuration, and the specific analysis of the gateway traffic information includes: judging the content type of the service request, and recording the request information meeting the analysis requirement; judging whether the service request contains an identity authentication identifier or not, and taking corresponding user detailed information for recording through the authentication service; judging the application service to which the flow belongs, finding out the enterprise project attribution corresponding to the service request, and facilitating enterprise-level flow statistics; decrypting specific encrypted information in the service request and recording the decrypted information; judging the content type of the server response service request, and recording the response information meeting the analysis requirement; and the customized analysis rule is supported, and the requirement that each project group records the specific gateway flow information is met. The gateway traffic information is analyzed in the specific field mode, so that a gateway service traffic report is generated, and a data basis is provided for the control of subsequent gateway traffic.
S105: and analyzing the gateway service flow report, and managing and controlling the micro service gateway flow according to the analysis.
In a preferred embodiment of the present invention, the management end obtains an analysis result by analyzing the gateway service traffic report, and then adjusts and controls a processing mode of the gateway for the service request according to the analysis result, wherein the processing mode includes current limiting, directional flow guiding and the like.
Further, before obtaining the user service request, the method includes:
reading a pre-input request rule through an auxiliary configuration webpage end;
and auditing the pre-entered request rule, and issuing the request rule passing the auditing.
In a preferred embodiment of the invention, the rule entry personnel enter the request rule through the auxiliary configuration webpage end, then the rule auditing personnel audit the entered request rule through the rule auditing webpage end, and issue and update the approved request rule so as to ensure the accuracy and the safety of the request rule.
Further, the analyzing the specific field of the gateway traffic information includes:
processing the flow data into flow information with a preset structure;
storing the flow information of the preset structure to a full text search engine through message middleware;
and carrying out specific field analysis on the flow information of the preset structure through the full-text search engine.
In the preferred embodiment of the present invention, by integrating the gateway and the ELK (open source software) architecture, the gateway traffic information is asynchronously stored in the Elastic Search by Kafka in a predefined structure, and then the specific field is analyzed by the Elastic Search, thereby generating the gateway traffic report. The integration of all contents of the service request information and the service response information is realized through the mode, the full-link tracking of the service request is favorably realized, and the service processing efficiency is improved.
Further, the performing specific field parsing on the traffic information of the predetermined structure by the full-text search engine includes:
judging service request information in the gateway flow information, and recording the service request information conforming to an analysis rule;
determining the identity authentication identification of the service request in the gateway flow information, searching and recording user information corresponding to the identity authentication identification of the service request through an authentication service;
searching and recording enterprise project attribution corresponding to the application service to which the gateway flow information belongs;
decrypting specific encrypted information in the gateway traffic information and recording the decrypted information;
and judging response information in the gateway flow information, and recording the response information conforming to the analysis rule.
Furthermore, the auxiliary configuration webpage side adopts Spring Boot as a development frame and MongoDB for data storage.
In the preferred embodiment of the invention, the auxiliary configuration webpage end adopts Spring Boot as a development frame, MongoDB is adopted for data storage, and the non-relational database can better support complex rule data. The auxiliary configuration webpage end can configure the complex gateways such as request rules and flow control rules, and the auxiliary functions related to configuration such as configuration input, configuration management, configuration authority control, configuration version control and configuration release and rollback are performed through the auxiliary configuration webpage end, so that the technical threshold of gateway configuration personnel is reduced, the configuration logic of a native gateway does not need to be learned, the configuration can be completed only by following interface flow guidance, and the whole configuration process can be managed and traceable.
Furthermore, the native Spring Cloud Gateway and WebFlux architecture are used as the basis of the bottom layer, mainstream middleware such as Nacos, Sentinel and Kafka are integrated in the Gateway in a reasonable mode, the native use mode is not affected, and meanwhile, various upper-layer functions are realized. The infrastructure of the gateway has functions of dynamic update of a request matching rule, dynamic update of a flow limiting rule, unified identity authentication of an enterprise level, interception of illegal requests, directional diversion according to a service version or an IP (Internet protocol), generalized Call of RPC (Remote Procedure Call) service, flow control of a specific index, recording of flow information and the like.
Referring to fig. 3, which is a flow analysis flow chart of micro-service gateway flow management provided in an embodiment of the present disclosure, when a gateway receives a service request initiated by a client, the gateway forwards the service request initiated by the client according to service request information in the service request, a proxy server corresponding to the service request information processes the service request, then the gateway obtains response information corresponding to the service request information by proxy, and integrates the service request information and the response information to generate a message queue in which gateway flow information is pushed to a message middleware, then consumes the message queue, stores the gateway flow information in a service database, finally queries the gateway flow information in the service database through a flow analysis module, analyzes the queried gateway flow information to generate a gateway service flow report, and analyzes the gateway service flow report, the service request is more effectively regulated and controlled, the auxiliary configuration webpage end is configured and modified, and the like, so that the service processing efficiency and the service processing capacity are improved.
Fig. 4 is a schematic structural diagram of a micro service gateway traffic management device provided in an embodiment of the present specification, including:
aninformation obtaining module 201, configured to obtain user service request information;
aresponse module 202, configured to match a request rule corresponding to the user service request information, and initiate an agent request to a service processing server corresponding to the request rule, so as to obtain service response information;
theinformation combining module 203 is configured to process the service request information and the service response information to obtain gateway traffic information;
theinformation analysis module 204 is configured to perform specific field analysis on the gateway traffic information to generate a gateway service traffic report;
and the flow management andcontrol module 205 is configured to analyze the gateway service flow report, and manage and control the micro service gateway flow according to the analysis.
Further, before obtaining the user service request, the method includes:
reading a pre-input request rule through an auxiliary configuration webpage end;
and auditing the pre-entered request rule, and issuing the request rule passing the auditing.
Further, theinformation parsing module 204 includes:
the processing unit is used for processing the flow data into flow information with a preset structure;
the storage unit is used for storing the flow information of the preset structure to a full-text search engine through message middleware;
and the analysis unit is used for carrying out specific field analysis on the flow information with the preset structure through the full-text search engine.
Further, the parsing unit includes:
the first judging subunit is used for judging the service request information in the gateway flow information and recording the service request information conforming to the analysis rule;
the identity confirmation subunit is used for determining the identity authentication identifier of the service request in the gateway flow information, searching and recording the user information corresponding to the identity authentication identifier of the service request through the authentication service;
the searching subunit is used for searching and recording enterprise item attribution corresponding to the application service to which the gateway traffic information belongs;
the decryption subunit is used for decrypting specific encrypted information in the gateway traffic information and recording the decrypted information;
and the second judgment subunit is used for judging the response information in the gateway flow information and recording the response information conforming to the analysis rule.
The functions of the apparatus in the embodiment of the present invention have been described in the above method embodiments, so that reference may be made to the related descriptions in the foregoing embodiments for details that are not described in the present embodiment, and further details are not described herein.
Based on the same inventive concept, the embodiment of the specification further provides the electronic equipment.
In the following, embodiments of the electronic device of the present invention are described, which may be regarded as specific physical implementations for the above-described embodiments of the method and apparatus of the present invention. Details described in the embodiments of the electronic device of the invention should be considered supplementary to the embodiments of the method or apparatus described above; for details which are not disclosed in embodiments of the electronic device of the invention, reference may be made to the above-described embodiments of the method or the apparatus.
Fig. 5 is a schematic structural diagram of an electronic device provided in an embodiment of the present specification. Anelectronic device 300 according to this embodiment of the invention is described below with reference to fig. 5. Theelectronic device 300 shown in fig. 5 is only an example, and should not bring any limitation to the functions and the scope of use of the embodiments of the present invention.
As shown in fig. 5,electronic device 300 is embodied in the form of a general purpose computing device. The components ofelectronic device 300 may include, but are not limited to: at least oneprocessing unit 310, at least onememory unit 320, abus 330 connecting different device components (including thememory unit 320 and the processing unit 310), adisplay unit 340, and the like.
Wherein the storage unit stores program code executable by theprocessing unit 310 to cause theprocessing unit 310 to perform the steps according to various exemplary embodiments of the present invention described in the above-mentioned processing method section of the present specification. For example, theprocessing unit 310 may perform the steps as shown in fig. 1.
Thestorage unit 320 may include readable media in the form of volatile storage units, such as a random access memory unit (RAM)3201 and/or acache storage unit 3202, and may further include a read only memory unit (ROM) 3203.
Thestorage unit 320 may also include a program/utility 3204 having a set (at least one) ofprogram modules 3205,such program modules 3205 including, but not limited to: an operating device, one or more application programs, other program modules, and program data, each of which, or some combination thereof, may comprise an implementation of a network environment.
Theelectronic device 300 may also communicate with one or more external devices 400 (e.g., keyboard, pointing device, bluetooth device, etc.), with one or more devices that enable a user to interact with theelectronic device 300, and/or with any devices (e.g., router, modem, etc.) that enable theelectronic device 300 to communicate with one or more other computing devices. Such communication may occur via an input/output (I/O)interface 350. Also, theelectronic device 300 may communicate with one or more networks (e.g., a Local Area Network (LAN), a Wide Area Network (WAN), and/or a public network, such as the internet) via thenetwork adapter 360.Network adapter 360 may communicate with other modules ofelectronic device 300 viabus 330. It should be appreciated that although not shown in FIG. 5, other hardware and/or software modules may be used in conjunction withelectronic device 300, including but not limited to: microcode, device drivers, redundant processing units, external disk drive arrays, RAID devices, tape drives, and data backup storage devices, to name a few.
Through the above description of the embodiments, those skilled in the art will readily understand that the exemplary embodiments of the present invention described herein may be implemented by software, or by software in combination with necessary hardware. Therefore, the technical solution according to the embodiment of the present invention can be embodied in the form of a software product, which can be stored in a computer-readable storage medium (which can be a CD-ROM, a usb disk, a removable hard disk, etc.) or on a network, and includes several instructions to make a computing device (which can be a personal computer, a server, or a network device, etc.) execute the above-mentioned method according to the present invention. The computer program, when executed by a data processing apparatus, enables the computer readable medium to implement the above-described method of the invention, namely: such as the method shown in fig. 1.
Fig. 6 is a schematic diagram of a computer-readable medium provided in an embodiment of the present disclosure.
A computer program implementing the method shown in fig. 1 may be stored on one or more computer readable media. The computer readable medium may be a readable signal medium or a readable storage medium. The readable storage medium may be, for example, but not limited to, an electronic, magnetic, optical, electromagnetic, infrared, or semiconductor device, apparatus, or device, or a combination of any of the foregoing. More specific examples (a non-exhaustive list) of the readable storage medium include: an electrical connection having one or more wires, a portable disk, a hard disk, a Random Access Memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disc read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the foregoing.
The computer readable storage medium may include a propagated data signal with readable program code embodied therein, for example, in baseband or as part of a carrier wave. Such a propagated data signal may take many forms, including, but not limited to, electro-magnetic, optical, or any suitable combination thereof. A readable storage medium may also be any readable medium that is not a readable storage medium and that can communicate, propagate, or transport a program for use by or in connection with an instruction execution apparatus, device, or apparatus. Program code embodied on a readable storage medium may be transmitted using any appropriate medium, including but not limited to wireless, wireline, optical fiber cable, RF, etc., or any suitable combination of the foregoing.
Program code for carrying out operations for aspects of the present invention may be written in any combination of one or more programming languages, including an object oriented programming language such as Java, C + + or the like and conventional procedural programming languages, such as the "C" programming language or similar programming languages. The program code may execute entirely on the user's computing device, partly on the user's device, as a stand-alone software package, partly on the user's computing device and partly on a remote computing device, or entirely on the remote computing device or server. In the case of a remote computing device, the remote computing device may be connected to the user computing device through any kind of network, including a Local Area Network (LAN) or a Wide Area Network (WAN), or may be connected to an external computing device (e.g., through the internet using an internet service provider).
In summary, the invention may be implemented in hardware, or in software modules running on one or more processors, or in a combination thereof. Those skilled in the art will appreciate that some or all of the functionality of some or all of the components in embodiments in accordance with the invention may be implemented in practice using a general purpose data processing device such as a microprocessor or a Digital Signal Processor (DSP). The present invention may also be embodied as apparatus or device programs (e.g., computer programs and computer program products) for performing a portion or all of the methods described herein. Such programs implementing the present invention may be stored on computer-readable media or may be in the form of one or more signals. Such a signal may be downloaded from an internet website or provided on a carrier signal or in any other form.
While the foregoing embodiments have described the objects, aspects and advantages of the present invention in further detail, it should be understood that the present invention is not inherently related to any particular computer, virtual machine or electronic device, and various general-purpose machines may be used to implement the present invention. The invention is not to be considered as limited to the specific embodiments thereof, but is to be understood as being modified in all respects, all changes and equivalents that come within the spirit and scope of the invention.
The embodiments in the present specification are described in a progressive manner, and the same and similar parts among the embodiments are referred to each other, and each embodiment focuses on the differences from the other embodiments.
The above description is only an example of the present application and is not intended to limit the present application. Various modifications and changes may occur to those skilled in the art. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of the present application should be included in the scope of the claims of the present application.
Claims (10)
1. A micro service gateway traffic management method is characterized by comprising the following steps:
acquiring user service request information;
matching a request rule corresponding to the user service request information, and initiating an agent request to a service processing server corresponding to the request rule to obtain service response information;
processing the service request information and the service response information to obtain gateway flow information;
analyzing the specific field of the gateway traffic information to generate a gateway service traffic report;
and analyzing the gateway service flow report, and managing and controlling the micro service gateway flow according to the analysis.
2. The method for traffic management of a microservice gateway of claim 1, wherein prior to obtaining a user service request, comprising:
reading a pre-input request rule through an auxiliary configuration webpage end;
and auditing the pre-entered request rule, and issuing the request rule passing the auditing.
3. The method for micro-service gateway traffic management according to claim 1, wherein the performing field-specific resolution on the gateway traffic information comprises:
processing the flow data into flow information with a preset structure;
storing the flow information of the preset structure to a full text search engine through message middleware;
and carrying out specific field analysis on the flow information of the preset structure through the full-text search engine.
4. The method for traffic management of microservice gateway according to claim 3, wherein said performing field-specific parsing on said traffic information of said predetermined structure by said full-text search engine comprises:
judging service request information in the gateway flow information, and recording the service request information conforming to an analysis rule;
determining the identity authentication identification of the service request in the gateway flow information, searching and recording user information corresponding to the identity authentication identification of the service request through an authentication service;
searching and recording enterprise project attribution corresponding to the application service to which the gateway flow information belongs;
decrypting specific encrypted information in the gateway traffic information and recording the decrypted information;
and judging response information in the gateway flow information, and recording the response information conforming to the analysis rule.
5. The method for managing microservice gateway traffic according to claim 2, wherein the auxiliary configuration web page side uses Spring Boot as a development framework and uses MongoDB for data storage.
6. A microservice gateway traffic management apparatus, comprising:
the information acquisition module is used for acquiring user service request information;
the response module is used for matching a request rule corresponding to the user service request information and initiating an agent request to a service processing server corresponding to the request rule to obtain service response information;
the information combination module is used for processing the service request information and the service response information to obtain gateway flow information;
the information analysis module is used for carrying out specific field analysis on the gateway traffic information to generate a gateway service traffic report;
and the flow control module is used for analyzing the gateway service flow report and controlling the micro service gateway flow according to the analysis.
7. The microservice gateway traffic management device of claim 6, prior to obtaining the user service request, comprising:
reading a pre-input request rule through an auxiliary configuration webpage end;
and auditing the pre-entered request rule, and issuing the request rule passing the auditing.
8. The microservice gateway traffic management device of claim 6, wherein the information parsing module comprises:
the processing unit is used for processing the flow data into flow information with a preset structure;
the storage unit is used for storing the flow information of the preset structure to a full-text search engine through message middleware;
and the analysis unit is used for carrying out specific field analysis on the flow information with the preset structure through the full-text search engine.
9. An electronic device, wherein the electronic device comprises:
a processor and a memory storing computer-executable instructions that, when executed, cause the processor to perform the method of any of claims 1-5.
10. A computer readable storage medium, wherein the computer readable storage medium stores one or more programs which, when executed by a processor, implement the method of any of claims 1-5.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202210598677.4ACN114900448B (en) | 2022-05-30 | 2022-05-30 | Micro-service gateway flow management method and device and electronic equipment |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202210598677.4ACN114900448B (en) | 2022-05-30 | 2022-05-30 | Micro-service gateway flow management method and device and electronic equipment |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN114900448Atrue CN114900448A (en) | 2022-08-12 |
| CN114900448B CN114900448B (en) | 2024-08-06 |
Family
ID=82726930
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN202210598677.4AActiveCN114900448B (en) | 2022-05-30 | 2022-05-30 | Micro-service gateway flow management method and device and electronic equipment |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN114900448B (en) |
Cited By (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN115766527A (en)* | 2022-12-23 | 2023-03-07 | 普元信息技术股份有限公司 | Business analysis system and method based on API gateway inlet and outlet flow under trusted environment |
| CN115904361A (en)* | 2022-09-28 | 2023-04-04 | 建信金融科技有限责任公司 | Data processing method, device, equipment and medium applied to microservice |
| CN116112384A (en)* | 2022-12-28 | 2023-05-12 | 杭州乒乓智能技术有限公司 | Application flow integrated management method and device and electronic equipment |
| CN116232706A (en)* | 2023-02-09 | 2023-06-06 | 深圳市联软科技股份有限公司 | End-to-end network security micro-isolation system and method |
Citations (20)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US20150293764A1 (en)* | 2014-04-10 | 2015-10-15 | Omprakash VISVANATHAN | Method and system to compose and execute business rules |
| US20160092297A1 (en)* | 2014-09-29 | 2016-03-31 | Digital River, Inc. | API Gateway System and Method |
| US20190034210A1 (en)* | 2017-07-28 | 2019-01-31 | Kong Inc. | Systems and methods for distributed api gateways |
| CN109672612A (en)* | 2018-12-13 | 2019-04-23 | 中国电子科技集团公司电子科学研究院 | API gateway system |
| CN110019001A (en)* | 2017-08-17 | 2019-07-16 | 中国电信股份有限公司 | Promote method, system and the monitoring module of message-oriented middleware message trace ability |
| US20190227856A1 (en)* | 2018-01-19 | 2019-07-25 | Boe Technology Group Co., Ltd. | Application programming interface (api) service apparatus and application programming interface (api) service system |
| US10572315B1 (en)* | 2016-08-29 | 2020-02-25 | Amazon Technologies, Inc. | Application programming interface state management |
| CN110995702A (en)* | 2019-12-02 | 2020-04-10 | 杭州安恒信息技术股份有限公司 | User authentication method based on distributed micro service |
| CN111212038A (en)* | 2019-12-23 | 2020-05-29 | 江苏国泰新点软件有限公司 | Open data API gateway system based on big data artificial intelligence |
| CN111294288A (en)* | 2020-01-16 | 2020-06-16 | 深圳市朱墨科技有限公司 | Traffic identification method and device, application program interface gateway and storage medium |
| CN111741016A (en)* | 2020-07-23 | 2020-10-02 | 南京梦饷网络科技有限公司 | Method, computing device, and computer storage medium for managing application interfaces |
| US20200351332A1 (en)* | 2017-07-28 | 2020-11-05 | Kong Inc. | Auto-documentation for application program interfaces based on network requests and responses |
| CN112035182A (en)* | 2020-08-31 | 2020-12-04 | 浪潮云信息技术股份公司 | Kong-based API gateway monitoring method and system |
| CN112765117A (en)* | 2021-01-26 | 2021-05-07 | 中国船级社 | Industrial internet identification analysis system based on micro-service architecture |
| CN112804244A (en)* | 2021-01-26 | 2021-05-14 | 广州欢网科技有限责任公司 | Method, device and equipment for intelligently controlling bottom micro-service flow by API gateway |
| WO2021215864A1 (en)* | 2020-04-23 | 2021-10-28 | 주식회사 모비젠 | Api gateway accelerator system and method |
| CN113595925A (en)* | 2021-07-06 | 2021-11-02 | 中企云链（北京）金融信息服务有限公司 | Intelligent gateway dynamic current limiting implementation method |
| CN113781163A (en)* | 2021-08-31 | 2021-12-10 | 广州云徙科技有限公司 | A real estate online marketing system and method |
| CN114253707A (en)* | 2021-11-04 | 2022-03-29 | 华能信息技术有限公司 | Micro-service request method based on API gateway |
| CN114338682A (en)* | 2021-12-24 | 2022-04-12 | 北京字节跳动网络技术有限公司 | Flow identity mark transmission method and device, electronic equipment and storage medium |
- 2022
- 2022-05-30CNCN202210598677.4Apatent/CN114900448B/enactiveActive
Patent Citations (20)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US20150293764A1 (en)* | 2014-04-10 | 2015-10-15 | Omprakash VISVANATHAN | Method and system to compose and execute business rules |
| US20160092297A1 (en)* | 2014-09-29 | 2016-03-31 | Digital River, Inc. | API Gateway System and Method |
| US10572315B1 (en)* | 2016-08-29 | 2020-02-25 | Amazon Technologies, Inc. | Application programming interface state management |
| US20200351332A1 (en)* | 2017-07-28 | 2020-11-05 | Kong Inc. | Auto-documentation for application program interfaces based on network requests and responses |
| US20190034210A1 (en)* | 2017-07-28 | 2019-01-31 | Kong Inc. | Systems and methods for distributed api gateways |
| CN110019001A (en)* | 2017-08-17 | 2019-07-16 | 中国电信股份有限公司 | Promote method, system and the monitoring module of message-oriented middleware message trace ability |
| US20190227856A1 (en)* | 2018-01-19 | 2019-07-25 | Boe Technology Group Co., Ltd. | Application programming interface (api) service apparatus and application programming interface (api) service system |
| CN109672612A (en)* | 2018-12-13 | 2019-04-23 | 中国电子科技集团公司电子科学研究院 | API gateway system |
| CN110995702A (en)* | 2019-12-02 | 2020-04-10 | 杭州安恒信息技术股份有限公司 | User authentication method based on distributed micro service |
| CN111212038A (en)* | 2019-12-23 | 2020-05-29 | 江苏国泰新点软件有限公司 | Open data API gateway system based on big data artificial intelligence |
| CN111294288A (en)* | 2020-01-16 | 2020-06-16 | 深圳市朱墨科技有限公司 | Traffic identification method and device, application program interface gateway and storage medium |
| WO2021215864A1 (en)* | 2020-04-23 | 2021-10-28 | 주식회사 모비젠 | Api gateway accelerator system and method |
| CN111741016A (en)* | 2020-07-23 | 2020-10-02 | 南京梦饷网络科技有限公司 | Method, computing device, and computer storage medium for managing application interfaces |
| CN112035182A (en)* | 2020-08-31 | 2020-12-04 | 浪潮云信息技术股份公司 | Kong-based API gateway monitoring method and system |
| CN112765117A (en)* | 2021-01-26 | 2021-05-07 | 中国船级社 | Industrial internet identification analysis system based on micro-service architecture |
| CN112804244A (en)* | 2021-01-26 | 2021-05-14 | 广州欢网科技有限责任公司 | Method, device and equipment for intelligently controlling bottom micro-service flow by API gateway |
| CN113595925A (en)* | 2021-07-06 | 2021-11-02 | 中企云链（北京）金融信息服务有限公司 | Intelligent gateway dynamic current limiting implementation method |
| CN113781163A (en)* | 2021-08-31 | 2021-12-10 | 广州云徙科技有限公司 | A real estate online marketing system and method |
| CN114253707A (en)* | 2021-11-04 | 2022-03-29 | 华能信息技术有限公司 | Micro-service request method based on API gateway |
| CN114338682A (en)* | 2021-12-24 | 2022-04-12 | 北京字节跳动网络技术有限公司 | Flow identity mark transmission method and device, electronic equipment and storage medium |
Cited By (7)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN115904361A (en)* | 2022-09-28 | 2023-04-04 | 建信金融科技有限责任公司 | Data processing method, device, equipment and medium applied to microservice |
| CN115904361B (en)* | 2022-09-28 | 2023-09-22 | 建信金融科技有限责任公司 | Data processing method, device, equipment and medium applied to micro-service |
| CN115766527A (en)* | 2022-12-23 | 2023-03-07 | 普元信息技术股份有限公司 | Business analysis system and method based on API gateway inlet and outlet flow under trusted environment |
| CN116112384A (en)* | 2022-12-28 | 2023-05-12 | 杭州乒乓智能技术有限公司 | Application flow integrated management method and device and electronic equipment |
| WO2024139412A1 (en)* | 2022-12-28 | 2024-07-04 | 杭州乒乓智能技术有限公司 | Application traffic comprehensive management method, apparatus, and electronic device |
| CN116112384B (en)* | 2022-12-28 | 2025-01-14 | 杭州乒乓智能技术有限公司 | Application flow integrated management method and device and electronic equipment |
| CN116232706A (en)* | 2023-02-09 | 2023-06-06 | 深圳市联软科技股份有限公司 | End-to-end network security micro-isolation system and method |
Also Published As
| Publication number | Publication date |
|---|---|
| CN114900448B (en) | 2024-08-06 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN109670297B (en) | Method and device for opening service permission, storage medium and electronic equipment | |
| CN114900448A (en) | Micro-service gateway flow management method and device and electronic equipment | |
| CN109299131B (en) | Spark query method and system supporting trusted computing | |
| CN112017007B (en) | User behavior data processing method and device, computer equipment, and storage medium | |
| CN112104709B (en) | Intelligent contract processing method, device, medium and electronic equipment | |
| US8745088B2 (en) | System and method of performing risk analysis using a portal | |
| CN113497723B (en) | Log processing method, log gateway and log processing system | |
| CN108984170A (en) | H5 page multilingual rendering method and device | |
| CN112559010B (en) | Multi-application system data isolation implementation method and system based on micro-service | |
| CN110602043A (en) | API gateway implementation system and method for mobile application | |
| CN111699484A (en) | System and method for data management | |
| CN112612802B (en) | A real-time data processing method, device and platform | |
| CN117850771A (en) | Business application development platform, method and storage medium for web service | |
| CN114615138B (en) | Service containerization platform, service containerization method, device and electronic equipment | |
| CN116244682A (en) | Database access method, device, equipment and storage medium | |
| US11803786B2 (en) | Enterprise integration platform | |
| CN113760949B (en) | Data query method and device | |
| CN113765974B (en) | Business request idempotence control system, method, device and storage medium | |
| CN115576624A (en) | Programming framework optimization method, system, terminal equipment and storage medium | |
| CN112748960B (en) | Process control method, device, electronic equipment and storage medium | |
| CN111949472B (en) | A method and device for recording application logs | |
| CN113961468A (en) | Digital certificate filling method, apparatus, equipment, medium and program product for USB shield test | |
| CN112288396A (en) | A multi-system user attribute information management method, device and electronic device | |
| CN111797337A (en) | Method and device for generating export page | |
| CN111695986A (en) | Method and device for managing and controlling public accumulation fund image |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant |