CN110225148A - IPv4/IPv6 address conversion system - Google Patents
IPv4/IPv6 address conversion system Download PDFInfo
- Publication number
- CN110225148A CN110225148A CN201910535511.6A CN201910535511A CN110225148A CN 110225148 A CN110225148 A CN 110225148A CN 201910535511 A CN201910535511 A CN 201910535511A CN 110225148 A CN110225148 A CN 110225148A
- Authority
- CN
- China
- Prior art keywords
- address
- ipv4
- ipv6
- exterior chain
- conversion
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Withdrawn
Links
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L61/00—Network arrangements, protocols or services for addressing or naming
- H04L61/09—Mapping addresses
- H04L61/25—Mapping addresses of the same type
- H04L61/2503—Translation of Internet protocol [IP] addresses
- H04L61/251—Translation of Internet protocol [IP] addresses between different IP versions
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L61/00—Network arrangements, protocols or services for addressing or naming
- H04L61/45—Network directories; Name-to-address mapping
- H04L61/4505—Network directories; Name-to-address mapping using standardised directories; using standardised directory access protocols
- H04L61/4511—Network directories; Name-to-address mapping using standardised directories; using standardised directory access protocols using domain name system [DNS]
Landscapes
- Engineering & Computer Science (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- Data Exchanges In Wide-Area Networks (AREA)
Abstract
The present invention provides IPv4/IPv6 address conversion systems, belong to Internet data transmission technical field, including address resolution module and application layer conversion module, application layer conversion module is used for according to preconfigured transformation rule, it is that IPv6 agreement supports address by the IPv4 exterior chain address conversion in the access resource, and send client for the text file containing chain address outside the IPv4, the transformation rule be using fixed domain name or real ip address it is preceding, by the conversion posterior address literary style in address.Converting system of the invention in turn avoids improving security of system using the general analytic technique of domain name while the skylight for solving the problems, such as exterior chain.
Description
Technical field
The present invention relates to Internet data transmission technical fields, and in particular to a kind of IPv4/IPv6 address conversion system.
Background technique
IPv4 is that the fourth edition of Internet protocol (Internet Protocol, IP) and first are widely used,
Constitute the agreement on the basis of Internet technology now.Jon Postel in 1981 defines IP in RFC791, and IPv4 can be transported
Row is on various bottom-layer networks, such as end-to-end serial data link (ppp protocol and SLIP agreement), satellite link
Deng.
IPv6 is the abbreviation of Ihternet Protocol Version6, and wherein Ihternet Protocol is translated into " mutually
Networking protocol ".IPv6 is what IETF (Internet Engineering Task group, Ihternet Engineering Task Force) was designed
For substituting the IP next generation protocol of IPv4.
Due to IPv4 the biggest problems are that network address resources are limited, the application and development of internet are seriously constrained.
The use of IPv6, the problem of not only can solve network address resources quantity, but also solve a variety of access devices and be connected into interconnection
The obstacle of net.Therefore, it only supports user to pass through IPv4 protocol access originally and obtains the website of service, upgrading is at also supporting
User passes through IPv6 protocol access and obtains service, for for accessing rapidly and efficiently being of great significance for internet.
For complexity, website IPv6 upgrading refers to through technology upgrading and transformation, is involved in web site traffic interaction
Types of applications system and equipment support IPv4 and IPv6 dual stack comprehensively, can be completed at the same time based on IPv4 and IPv6 agreement
Service interaction；Or by technological transformation, mapping connection is established between IPv6 agreement and IPv4 agreement, helps IPv6 user's energy
Enough resources for correctly obtaining IPv4.
Currently, the technology of website IPv6 upgrading mainly has following three kinds of technology paths in terms of the type of skill.
One is two quantum cryptography protocols, the technical principle is as shown in Figure 1.It is related to the types of applications system of web site traffic interaction
System, the network equipment, Operation Support System hardware and software device simultaneously run two sets of protocol stacks of IPv4 and IPv6, can handle simultaneously
IPv4 and IPv6 data packet.
Second is tunneling technique, and the technical principle is as shown in Figure 2.There are one or more between two homogenous networks
Non-homogeneous network, when causing two homogenous networks that can not communicate, by the way that data packet progress tunnel encapsulation is passed through non-homogeneous network
Complete the technology of communication.In the current situation, it refers mainly to establish tunnel in IPv4 network, the data envelope of IPv6 is attached to
In IPv4 data packet, IPv4 network is passed through by the transmission of IPv4 routing architecture, realizes the communication between IPv6 website.
The third is network address/protocol translation (NAT/PT) technology, the typical network in the IPv6 upgrading of website
The application of address/protocol translation (NAT/PT) technology is seven layers of reversed proxy server, and the technical principle is as shown in Figure 3.In IPv6
A protocol conversion device is disposed between IPv4 network node, and network layer address and agreement end are established between IPv6 and IPv4
The mapping relations of mouth, to realize that transparent IPv6 and IPv4 are mutually accessed.
Above-mentioned three kinds of technologies have the disadvantage in that if there is also the exterior chain pictures that stack website in pairs is not transformed in webpage
Or exterior chain window, it there is also " skylight " of blank in webpage, influence normal use.The protocol conversion of network layer is rested on,
When occurring exterior chain picture or exterior chain window in Website page, it may appear that the problem of blank " skylight ".
The prior art solves the problems, such as that exterior chain " skylight " generallys use the general analytic technique of domain name, and there are security risks for the technology.
For caused by above-mentioned solution exterior chain " skylight " of the existing technology the technical issues of security risk, at present still
It does not put forward effective solutions.
Summary of the invention
The purpose of the present invention is to provide a kind of IPv4/IPv6 address conversion systems, to solve to deposit in above-mentioned background technique
The technical issues of.
To achieve the goals above, this invention takes following technical solutions:
A kind of IPv4/IPv6 address conversion system provided by the invention, including application layer conversion module and address resolution mould
Block.Application layer conversion module, for according to preconfigured transformation rule, chain address outside the IPv4 in the access resource to be turned
It is changed to IPv6 agreement and supports address, and send client for the text file containing the address information；The transformation rule packet
Include using fixed domain name or real ip address it is preceding, by the conversion posterior address literary style in address.Address resolution module, for parsing
The exterior chain access request that client is sent according to the text file obtains the exterior chain IPv4 target in IPv6 agreement support address
Address information；
Further, the system also includes gateway interface modules obtains for parsing the access request of client
IPv4 target address information is sent to master gateway processes module；
Further, the system also includes master gateway processes modules, for being accessed according to IPv4 target address information
DNS, obtains the IP address of the corresponding targeted website IPv4, and the request header content of the targeted website IPv4 is arranged, and IPv4 mesh
The request header content of mark website issues downlink gateway interface module, accesses the targeted website IPv4, obtains access resource；
Further, the system also includes application gateway processing modules, for according to the exterior chain IPv4 destination address
Message reference DNS, obtains the IP address of the targeted website corresponding exterior chain IPv4, and the request header of the targeted website exterior chain IPv4 is arranged
Content, and the request header content of the targeted website exterior chain IPv4 is sent to downlink gateway interface module, access exterior chain IPv4 target
Website obtains exterior chain and accesses resource.
Further, the text file includes html text file, JS text file.
Further, the transformation rule includes using fixed domain name or real ip address as host name, by conversion ground
Address literary style of the location as path.
Further, the address that the IPv6 agreement is supported includes the fixed domain name of IPv6 and exterior chain IPv4 destination address letter
Breath.
Further, the system further include:
Safety detection module, for being detected according to detected rule, whether the exterior chain IPv4 target address information is legal to have
Effect, if effectively, the exterior chain IPv4 target address information is sent to application gateway processing module；
Further, the detected rule includes: whether the detection exterior chain IPv4 target address information belongs to using net
It closes and approves effective address range；It is determined effectively by the access mode that page link comes, directly from the address of browser
The request of column input is then judged in vain, returns to 403 mistakes.
According to an aspect of an embodiment of the present invention, a kind of IPv4/IPv6 address conversion method is provided, comprising: according to
The exterior chain IPv4 destination address accessed in resource is converted to corresponding IPv6 agreement and supports address by preconfigured transformation rule,
And client is sent by the text file containing the exterior chain IPv4 destination address, wherein the transformation rule includes using
Fixed domain name or real ip address it is preceding, by the conversion posterior address literary style in address.
Further, the exterior chain IPv4 destination address accessed in resource is being converted to according to preconfigured transformation rule
Corresponding IPv6 agreement supports to include: the access request for parsing client before address, obtains IPv4 target address information；According to
The IPv4 target address information accesses DNS, obtains the IP address of the corresponding targeted website IPv4；The targeted website IPv4 is accessed,
Obtain access resource.
Further, sending the text file containing the exterior chain IPv4 destination address to includes: solution after client
The access request for the exterior chain IPv4 destination address that analysis client is sent according to the text file obtains IPv6 agreement and supports address
In exterior chain IPv4 target address information.
Further, it obtains IPv6 agreement and supports that the exterior chain IPv4 target address information in address includes: later according to institute
Exterior chain IPv4 destination address access DNS is stated, obtains the exterior chain IPv4 destination address of the targeted website corresponding exterior chain IPv4, and be arranged
The request header content of the targeted website the exterior chain IPv4；The request header content of the targeted website exterior chain IPv4 is sent to downlink gateway
Interface module accesses the targeted website the exterior chain IPv4, obtains exterior chain and accesses resource.
The invention has the advantages that: effective generally existing content missings (skylight) of network layer address switch technology that solves to ask
Topic, is also capable as content distributing network, accelerates for website, provides internet IntServ, effective protection equipment investment,
The seamless interfacing of IPv4 and IPv6 network are realized without changing existing system structure and software and hardware facilities in website；Using fixed field
Name or real ip address it is preceding, host name is used as rear, and by fixed domain name or real ip address by conversion address, by conversion ground
Address literary style of the location as path especially writes on domain name by conversion address compared to part while meeting address conversion
In address literary style, improve the safety of system.
Converting system of the invention includes network layer and application layer conversion, realizes the seamless right of IPv4 and IPv6 network
It connects, while solving the problems, such as that network layer converts existing content missing, and avoids in application layer conversion general using domain name
Parsing, reduces technical costs, improves security of system.
The additional aspect of the present invention and advantage will be set forth in part in the description, these will become from the following description
Obviously, or practice through the invention is recognized.
Detailed description of the invention
In order to illustrate the technical solution of the embodiments of the present invention more clearly, required use in being described below to embodiment
Attached drawing be briefly described, it should be apparent that, drawings in the following description are only some embodiments of the invention, for this
For the those of ordinary skill of field, without creative efforts, it can also be obtained according to these attached drawings others
Attached drawing.
Fig. 1 is the functional block diagram of dual stack switch technology in the prior art.
Fig. 2 is the functional block diagram of tunnel conversion technology in the prior art.
Fig. 3 is the functional block diagram of seven layers of reversed proxy server in the prior art.
Fig. 4 is the functional block diagram of IPv4/IPv6 address conversion system described in the embodiment of the present invention two.
Fig. 5 is IPv4/IPv6 address conversion system described described in the embodiment of the present invention three in master gateway processes
Functional block diagram.
Fig. 6 is IPv4/IPv6 address conversion system described described in the embodiment of the present invention three in application gateway processing
Functional block diagram.
Fig. 7 is a kind of optional IPv4/IPv6 address conversion system structure chart in the embodiment of the present invention one.
Specific embodiment
Embodiments of the present invention are described below in detail, the example of the embodiment is shown in the accompanying drawings, wherein from beginning
Same or similar element or module with the same or similar functions are indicated to same or similar label eventually.Below by ginseng
The embodiment for examining attached drawing description is exemplary, and for explaining only the invention, and is not construed as limiting the claims.
Those skilled in the art of the present technique are appreciated that unless expressly stated, singular " one " used herein, " one
It is a ", " described " and "the" may also comprise plural form.It is to be further understood that being arranged used in specification of the invention
Diction " comprising " refer to that there are the feature, integer, step, operation, element and/or modules, but it is not excluded that in the presence of or addition
Other one or more features, integer, step, operation, element, module and/or their group.
It should be noted that in embodiment of the present invention unless specifically defined or limited otherwise, term is " even
Connect ", " fixation " etc. shall be understood in a broad sense, may be a fixed connection, may be a detachable connection, or is integral, can be machine
Tool connection, is also possible to be electrically connected, can be and be directly connected to, be also possible to be indirectly connected with by intermediary, can be two
The interaction relationship of connection or two elements inside element, unless having specific limit.For those skilled in the art
For, the concrete meaning of above-mentioned term in embodiments of the present invention can be understood as the case may be.
Those skilled in the art of the present technique are appreciated that unless otherwise defined, all terms used herein (including technology art
Language and scientific term) there is meaning identical with the general understanding of those of ordinary skill in fields of the present invention.Should also
Understand, those terms such as defined in the general dictionary, which should be understood that, to be had and the meaning in the context of the prior art
The consistent meaning of justice, and unless defined as here, it will not be explained in an idealized or overly formal meaning.
In order to facilitate understanding of embodiments of the present invention, further by taking specific embodiment as an example below in conjunction with attached drawing to be solved
Explanation is released, and embodiment does not constitute the restriction to the embodiment of the present invention.
Those of ordinary skill in the art are it should be understood that attached drawing is the schematic diagram of one embodiment, the portion in attached drawing
Part or device are not necessarily implemented necessary to the present invention.
Embodiment one
As shown in fig. 7, the embodiment of the present invention provides a kind of IPv4/IPv6 address conversion system, including address resolution module
With application layer conversion module, application layer conversion module is used for according to preconfigured transformation rule, will be in the access resource
IPv4 exterior chain address conversion is that IPv6 agreement supports address, and sends visitor for the text file containing chain address outside the IPv4
Family end, the transformation rule be using fixed domain name or real ip address it is preceding, by the conversion posterior address literary style in address；Address
Parsing module, the exterior chain access request sent for parsing client according to the text file obtain IPv6 agreement and support ground
Exterior chain IPv4 target address information in location.
The converting system of the embodiment of the present invention in turn avoids general using domain name while the skylight for solving the problems, such as exterior chain
Analytic technique improves security of system.
Embodiment two
As shown in figure 4, the embodiment of the invention provides a kind of IPv4/IPv6 address conversion system, which includes:
Application layer conversion module is used for according to preconfigured transformation rule, by the IPv4 exterior chain in the access resource
Address conversion is that IPv6 agreement supports address, and sends client for the text file containing the address information, and application layer turns
Block is changed the mold, for being IPv6 association by the IPv4 exterior chain address conversion in the access resource according to preconfigured transformation rule
View supports address, and sends client for the text file containing the address information.
Address resolution module, the exterior chain access request sent for parsing client according to the text file obtain
IPv6 agreement supports the exterior chain IPv4 target address information in address.
Above system further include:
Application gateway processing module obtains corresponding outer for accessing DNS according to the exterior chain IPv4 target address information
The IP address of the targeted website chain IPv4, and the request header content of the targeted website exterior chain IPv4 is set, and exterior chain IPv4 target network
The request header content stood is sent to downlink gateway interface module, accesses the targeted website exterior chain IPv4, obtains exterior chain and accesses resource,
Gateway interface module obtains IPv4 target address information, is sent to major network for parsing the access request of client
Close processing module；
Master gateway processes module obtains the corresponding targeted website IPv4 for accessing DNS according to IPv4 target address information
IP address, and the request header content of the targeted website IPv4 is set, and the request header content of the targeted website IPv4 is issued downlink
Gateway interface module accesses the targeted website IPv4, obtains access resource；
In a specific embodiment of the present invention, the text file includes html text file, JS text file.
In a specific embodiment of the present invention, the transformation rule include using fixed domain name or real ip address it is preceding,
By the conversion posterior address literary style in address.
In a specific embodiment of the present invention, the transformation rule includes using fixed domain name or real ip address as master
Machine name, the address literary style by conversion address as path.
In a specific embodiment of the present invention, the address that the IPv6 agreement is supported includes the fixed domain name of IPv6 and exterior chain
IPv4 target address information.
In a specific embodiment of the present invention, the system further include:
Safety detection module, for being detected according to detected rule, whether the exterior chain IPv4 target address information is legal to have
Effect, if effectively, the exterior chain IPv4 target address information is sent to application gateway processing module；
In a specific embodiment of the present invention, the detected rule includes:
Detect whether the exterior chain IPv4 target address information belongs to the effective address range of application gateway approval；
It is determined effectively by the access mode that page link comes, the request directly inputted from the address field of browser is then
It is invalid to be judged, and returns to 403 mistakes.
Converting system of the invention in turn avoids while the skylight for solving the problems, such as exterior chain using the general parsing skill of domain name
Art improves security of system.
Embodiment three
The embodiment of the invention provides a kind of IPv4/IPv6 address conversion methods, will according to preconfigured transformation rule
Exterior chain IPv4 destination address in access resource is converted to corresponding IPv6 agreement and supports address, and will contain the exterior chain IPv4
The text file of destination address is sent to client, wherein the transformation rule includes using fixed domain name or real ip address
It is preceding, by conversion the posterior address literary style in address.
In a kind of optional embodiment, the exterior chain IPv4 in resource will accessed according to preconfigured transformation rule
Destination address, which is converted to corresponding IPv6 agreement, supports to include: the access request for parsing client before address, obtains IPv4 mesh
Mark address information；DNS is accessed according to the IPv4 target address information, obtains the IP address of the corresponding targeted website IPv4；It visits
It asks the targeted website IPv4, obtains access resource.
In a kind of optional embodiment, client is sent by the text file containing the exterior chain IPv4 destination address
Include: the access request for parsing the exterior chain IPv4 destination address that client is sent according to the text file after end, obtains
IPv6 agreement supports the exterior chain IPv4 target address information in address.
In a kind of optional embodiment, obtain IPv6 agreement support address in exterior chain IPv4 target address information it
After include: according to the exterior chain IPv4 destination address access DNS, obtain the exterior chain IPv4 mesh of the targeted website corresponding exterior chain IPv4
Address is marked, and the request header content of the targeted website the exterior chain IPv4 is set；The request header content of the targeted website exterior chain IPv4
It is sent to downlink gateway interface module, accesses the targeted website the exterior chain IPv4, exterior chain is obtained and accesses resource.
The method of the present embodiment in turn avoids while the skylight for solving the problems, such as exterior chain using the general parsing skill of domain name
Art improves security of system.
The systems and methods are illustrated with an optional embodiment below:
As shown in figure 5, above system, in master gateway processes process, client browser passes through IPv6 agreement to primary gateway
It initiates http request to parse request address after gateway interface module receives request by listening port,
Server host name and URL (uniform resource locator) title of access, according to the definition in configurator, and accesses DNS, looks for
To the address of corresponding IPv4 server, network layer address conversion is completed, then passes through downlink gateway interface to IPv4 server
URL initiate access request.
Response result is received by downlink gateway interface, and main processing block is transferred to handle, and then transfers to application layer conversion mould
Block is handled, and the multiple and different transformation rule of each application layer conversion module definition handles address date in order.Using
Layer conversion module major function is the outer chain address of identification, and externally chain address is handled, and converts address information therein, newly
It is directed toward application gateway address in location.
After all application layer conversions are all completed, final transformation result is sent back to client.
After client receives the response result that primary gateway is sent back to, outer chain address therein, which has all been done, to be handled and is directed toward
Application gateway address, when client triggers the request of external chain address, such as: resources-type picture request (src) etc., using net
Guan Zehui receives the request.
The processing of system external chain address, using special processing method, before each address that need to be to be converted,
In addition the fixation domain name or IP address of application gateway, and port numbers are added, and if it is 80 or 443 ports, it is convenient to omit port numbers,
It realizes addressing to application gateway, and by conversion address information as solicited message, is placed on application gateway domain name or IP address
Below, it can be directly written in behind application gateway address by conversion address as path, can also be done according to certain rule
Enciphering transformation.
Format is as follows:
Http: the fixation domain name or IP address/need of // application gateway raw address information to be converted
Http: the fixation domain name or IP address of // application gateway: port numbers/need raw address information to be converted
Https: the fixation domain name or IP address/need of // application gateway raw address information to be converted
Https: the fixation domain name or IP address of // application gateway: port numbers/need raw address information to be converted
The fixation domain name or IP address/need of // application gateway raw address information to be converted
The fixation domain name or IP address of // application gateway: port numbers/need raw address information to be converted
Example is as follows:
http://ipv6.voicesky.cn/www.sohu.com/pic/photo.jpg
Http:// ipv6.voicesky.cn:8080/www.sohu.com/pic/photo.jpg
https://ipv6.voicesky.cn/www.sohu.com/pic/photo.jpg
Https: // [2408:1800:512:330::2]/www.sohu.com/pic/photo.jpg
https://123.25.38.100/www.sohu.com/pic/photo.jpg
Https: // 123.25.38.100:8088/www.sohu.com/pic/photo.jpg
Wherein, ipv6.voicesky.cn is the fixation domain name example of application gateway,
Www.sohu.com/pic/photo.jpg is to need raw address example to be converted.
This processing method to address conversion, the address date that effectively needs can be converted are transferred to application gateway,
It also can guarantee the complete of former request address information simultaneously.
Under normal conditions, access application gateway only needs 80 ports or 443 ports by server, does not need to open it
The address conversion of application layer can be realized in its port, reduces the security risk of server.
After client browser receives the files such as response HTML, JS of primary gateway return, own in HTML, JS file
Application layer conversion is all done in the address for being related to exterior chain resource.
Browser accesses specified resource according to the address after conversion, and application gateway, exterior chain money have been directed toward in the address after conversion
The data acquisition in source is completed by application gateway.
As shown in fig. 6, system described in the embodiment of the present invention two, in application gateway process flow, http request enters
After the listening port of application gateway, the request address (URL) received is parsed by address resolution module first, is extracted
It is wherein actually subjected to the address of access, such as:
The address that application gateway receives is (example):
http://ipv6.test.com/www.sohu.com/pic/photol.jpg
After address resolution, the address for obtaining actual needs access is (example):
http://www.sohu.com/pic/photol.jpg
Enter safety detection module later, whether the address that safety detection module predominantly detects request is legal effectively, detection
Rule includes:
Whether request address, which belongs to application gateway, is approved effective address range.
The request method of client browser is determined by the access mode that page link comes effectively, if it is straight
It connects from the request that the address field of browser inputs and is then judged in vain, return to 403 mistakes.
When request address is determined it is effective when, main processing block starts to process request address, by downlink gateway interface to
The website IPv4 to be accessed sends Address requests, and returning the result for the website IPv4 is sent to application layer conversion module.
Application layer conversion module includes multiple transformation rules, and application layer conversion module major function is the outer chain address of identification,
And externally chain address is handled, and converts address information therein, application gateway address is directed toward in new address.The conversion regime of address
It is identical with the application layer address conversion regime in master gateway processes.
Since browser can send request to our primary gateway and application gateway repeatedly, we are only to the address of request
Format is parsed, and to returning the result carry out application layer conversion.
For example, when browser sends http://www.abc.com request, due to the practical IP of domain name www.abc.com
The IP of primary gateway has been directed toward in address, therefore primary gateway has received the request, and obtains data, application layer conversion meeting from the website IPv4
The data got are handled, looking for wherein needs address to be converted, these transformation rules are defined by people in advance, example
Such as: wherein having address is src=' http://www.sohu.com/pic.jpg ', since www.sohu.com only has IPv4 net
It stands, IPv6 client can not access, and need to convert the address.
Conversion are as follows: http://ipv6.abc.com/www.sohu.com/pic.jpg.And containing this address
Html text file is sent to client.Client will continue to open the process of webpage, it will continue to load all kinds of moneys therein
Source can then access http://ipv6.abc.com/ if being related to exterior chain resource, such as the pic.jpg in address above mentioned
The address www.sohu.com/pic.jpg, since ipv6.abc.com this IP address has been directed toward our application gateway, so
This request is handled by application gateway.Application gateway obtains data from the website IPv4, is pic.jpg file in this example,
Then it transfers to handle using conversion layer, due to being specifically picture file, does not need to handle using conversion layer, if it is html or js
Equal text files, then searched whether corresponding transformation rule, if there is rule, then can complete to convert, and result has been returned
Client.
Transformation rule example: src=' // 123.23.55.120:8080/test.js ' is replaced with src=' http: //
Ipv6.abc.com/123.23.55.120:8080/test.js '.
In conclusion IPv4/IPv6 address conversion platform described in the embodiment of the present invention, has merged application layer protocol conversion
With network layer protocol switch technology, while IPv4/IPv6 agreement is converted from application layer and network layer, effectively solution network
The generally existing content of layer switch technology lacks (skylight) problem, has more preferably conversion effect.It can fast implement from IPv4
To the upgrading of IPv6, without being transformed to former IPv4 system, while guaranteeing that two systems can operate normally, reduce skill
Art improvement cost.Using the application gateway of fixed domain name or IP address, while meeting protocol conversion, general parsing domain name is compared
Application gateway, also increase the safety of system.
The foregoing is only a preferred embodiment of the present invention, but scope of protection of the present invention is not limited thereto,
In the technical scope disclosed by the present invention, any changes or substitutions that can be easily thought of by anyone skilled in the art,
It should be covered by the protection scope of the present invention.Therefore, protection scope of the present invention should be with scope of protection of the claims
Subject to.
Claims (10)
1. a kind of IPv4/IPv6 address conversion system, including address resolution module and application layer conversion module, it is characterised in that:
Application layer conversion module is used for according to preconfigured transformation rule, by the IPv4 exterior chain address conversion in the access resource
Address is supported for IPv6 agreement, and sends client, the conversion rule for the text file containing chain address outside the IPv4
Be then using fixed domain name or real ip address it is preceding, by the conversion posterior address literary style in address；Address resolution module, for solving
The exterior chain access request that analysis client is sent according to the text file obtains the exterior chain IPv4 mesh in IPv6 agreement support address
Mark address information.
2. IPv4/IPv6 address conversion system according to claim 1, which is characterized in that the text file includes
Html text file, JS text file.
3. IPv4/IPv6 address conversion system according to claim 1, which is characterized in that the transformation rule includes adopting
Use fixed domain name or real ip address as host name, the address literary style by conversion address as path.
4. IPv4/IPv6 address conversion system according to claim 3, which is characterized in that the IPv6 agreement was supported
Address includes the fixed domain name of IPv6 and exterior chain IPv4 target address information.
5. IPv4/IPv6 address conversion system according to claim 4, which is characterized in that further include:
Safety detection module, for whether legal effectively according to the detected rule detection exterior chain IPv4 target address information, if
Effectively, then the exterior chain IPv4 target address information is sent to application gateway processing module.
6. IPv4/IPv6 address conversion system according to claim 5, which is characterized in that the detected rule includes:
Detect whether the exterior chain IPv4 target address information belongs to the effective address range of application gateway approval；
It is determined effectively by the access mode that page link comes, is directly then judged to from the request that the address field of browser inputs
It is disconnected invalid, return to 403 mistakes.
7. a kind of IPv4/IPv6 address conversion method characterized by comprising
The exterior chain IPv4 destination address accessed in resource is converted into corresponding IPv6 agreement according to preconfigured transformation rule
It supports address, and sends client for the text file containing the exterior chain IPv4 destination address, wherein the transformation rule
Including using fixed domain name or real ip address it is preceding, by the conversion posterior address literary style in address.
8. IPv4/IPv6 address conversion method according to claim 7, which is characterized in that according to preconfigured turn
It changes before the exterior chain IPv4 destination address accessed in resource is converted to corresponding IPv6 agreement support address by rule and includes:
The access request of client is parsed, IPv4 target address information is obtained；
DNS is accessed according to the IPv4 target address information, obtains the IP address of the corresponding targeted website IPv4；
The targeted website IPv4 is accessed, access resource is obtained.
9. IPv4/IPv6 address conversion method according to claim 7, which is characterized in that the exterior chain IPv4 will be contained
The text file of destination address is sent to client
The access request for the exterior chain IPv4 destination address that parsing client is sent according to the text file, obtains IPv6 agreement branch
Hold the exterior chain IPv4 target address information in address.
10. IPv4/IPv6 address conversion method according to claim 9, which is characterized in that obtain IPv6 agreement and support ground
Include: after exterior chain IPv4 target address information in location
DNS is accessed according to the exterior chain IPv4 destination address, obtains the exterior chain IPv4 target of the targeted website corresponding exterior chain IPv4
Address, and the request header content of the targeted website the exterior chain IPv4 is set；
The request header content of the targeted website exterior chain IPv4 is sent to downlink gateway interface module, accesses the exterior chain IPv4 target
Website obtains exterior chain and accesses resource.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201910535511.6A CN110225148A (en) | 2019-01-02 | 2019-01-02 | IPv4/IPv6 address conversion system |
Applications Claiming Priority (2)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201910535511.6A CN110225148A (en) | 2019-01-02 | 2019-01-02 | IPv4/IPv6 address conversion system |
| CN201910002333.0A CN109451097B (en) | 2019-01-02 | 2019-01-02 | IPv4/IPv6 address conversion system |
Related Parent Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201910002333.0A Division CN109451097B (en) | 2019-01-02 | 2019-01-02 | IPv4/IPv6 address conversion system |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| CN110225148A true CN110225148A (en) | 2019-09-10 |
Family
ID=65540076
Family Applications (2)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201910535511.6A Withdrawn CN110225148A (en) | 2019-01-02 | 2019-01-02 | IPv4/IPv6 address conversion system |
| CN201910002333.0A Active CN109451097B (en) | 2019-01-02 | 2019-01-02 | IPv4/IPv6 address conversion system |
Family Applications After (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201910002333.0A Active CN109451097B (en) | 2019-01-02 | 2019-01-02 | IPv4/IPv6 address conversion system |
Country Status (2)
| Country | Link |
|---|---|
| CN (2) | CN110225148A (en) |
| WO (1) | WO2020140433A1 (en) |
Cited By (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN111416862A (en) * | 2020-03-20 | 2020-07-14 | 福建万物易联网络科技有限公司 | CDN platform access method and system based on IPV6IPV4 |
Families Citing this family (24)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN110225148A (en) * | 2019-01-02 | 2019-09-10 | 北京宏图佳都通信设备有限公司 | IPv4/IPv6 address conversion system |
| CN111756866B (en) * | 2019-03-29 | 2023-11-07 | 深信服科技股份有限公司 | Website content intercommunication method, device, equipment and storage medium |
| CN109951493B (en) * | 2019-03-29 | 2021-10-22 | 深圳市信锐网科技术有限公司 | Network intercommunication method, device, equipment and storage medium |
| CN111818002A (en) * | 2019-04-12 | 2020-10-23 | 杭州泽力科技有限公司 | Internet interaction system based on web information technology |
| CN111865886A (en) * | 2019-04-30 | 2020-10-30 | 深信服科技股份有限公司 | IP address information configuration method, system, device and storage medium |
| CN111866198A (en) * | 2019-04-30 | 2020-10-30 | 深信服科技股份有限公司 | Link access method, system, device and computer readable storage medium |
| CN110198365B (en) * | 2019-05-27 | 2022-12-23 | 杭州迪普科技股份有限公司 | Address translation detection method and system |
| CN110417932B (en) * | 2019-07-30 | 2020-08-04 | 睿哲科技股份有限公司 | IPv 6-based out-link resource upgrading device, electronic equipment and computer readable medium |
| CN110392130B (en) * | 2019-08-23 | 2022-09-23 | 北京天融信网络安全技术有限公司 | Information processing method based on network, electronic equipment and network system |
| CN110636148A (en) * | 2019-09-19 | 2019-12-31 | 国家电网有限公司 | Network address upgrading processing method |
| CN111222068A (en) * | 2019-11-29 | 2020-06-02 | 云深互联(北京)科技有限公司 | Private network IP conversion method and device |
| CN110839046B (en) * | 2019-12-03 | 2022-04-22 | 睿哲科技股份有限公司 | Multi-protocol intercommunication method and system |
| CN111031128B (en) * | 2019-12-12 | 2022-06-21 | 杭州安恒信息技术股份有限公司 | Method for realizing skylight-free website IPv6 transformation based on cloud technology |
| CN111404878B (en) * | 2020-02-26 | 2022-06-24 | 新浪网技术(中国)有限公司 | Method and system for converting ipv4 address into ipv6 address |
| CN112398963A (en) * | 2020-10-13 | 2021-02-23 | 易讯科技股份有限公司 | Method for realizing intelligent recognition and flexible translation of IPv4 external link |
| CN112671912A (en) * | 2020-12-25 | 2021-04-16 | 中国农业银行股份有限公司 | Data processing method and device and electronic equipment |
| CN113518066A (en) * | 2021-03-25 | 2021-10-19 | 国网浙江省电力有限公司衢州供电公司 | Scanning system for address proxy conversion and address conversion method |
| CN113840018A (en) * | 2021-09-13 | 2021-12-24 | 支付宝(杭州)信息技术有限公司 | DNS-based IPv6 drainage method, device and equipment |
| CN114070818B (en) * | 2021-11-17 | 2024-04-02 | 山石网科通信技术股份有限公司 | Website access system, method and device |
| CN114448849B (en) * | 2021-12-17 | 2023-12-05 | 北京邮电大学 | Method for detecting supporting mode of IPv6 network of website and electronic equipment |
| CN114650271B (en) * | 2022-03-23 | 2023-12-05 | 杭州迪普科技股份有限公司 | Global load DNS neighbor site learning method and device |
| CN115022284A (en) * | 2022-06-01 | 2022-09-06 | 睿哲科技股份有限公司 | Method and system for identifying external links in webpage and electronic equipment |
| CN115277809B (en) * | 2022-08-02 | 2024-05-24 | 北京有竹居网络技术有限公司 | Processing method of access request in content distribution network and edge server |
| CN115442280A (en) * | 2022-08-10 | 2022-12-06 | 天翼安全科技有限公司 | IPv6 concentration detection method, device and storage medium |
Family Cites Families (7)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN102546850B (en) * | 2010-12-08 | 2015-11-25 | 中国电信股份有限公司 | Support the IPv4 content providing of IPv6, device and server |
| CN102739809B (en) * | 2011-04-07 | 2015-07-15 | 中国电信股份有限公司 | DNS64 database, server, system and IPv4/IPv6 communication method |
| US8949952B2 (en) * | 2012-04-25 | 2015-02-03 | Cisco Technology, Inc. | Multi-stack subscriber sign on |
| CN102694754A (en) * | 2012-06-07 | 2012-09-26 | 广州睿哲网络科技有限公司 | Application gateway technology and system for realizing content interchange of Internet protocol version 4/Internet protocol version 6 (IPv4/IPv6) websites |
| CN106790503A (en) * | 2016-12-16 | 2017-05-31 | 广东睿哲科技股份有限公司 | It is a kind of to realize the IPv4 websites without skylight using the device upgraded to IPv6 based on HTTP reverse proxys |
| CN106790098B (en) * | 2016-12-26 | 2020-11-10 | 睿哲科技股份有限公司 | IPv4/IPv6 intercommunication system based on HTTP ALG and NAT64 technology |
| CN110225148A (en) * | 2019-01-02 | 2019-09-10 | 北京宏图佳都通信设备有限公司 | IPv4/IPv6 address conversion system |
-
2019
- 2019-01-02 CN CN201910535511.6A patent/CN110225148A/en not_active Withdrawn
- 2019-01-02 CN CN201910002333.0A patent/CN109451097B/en active Active
- 2019-08-08 WO PCT/CN2019/099715 patent/WO2020140433A1/en active Application Filing
Cited By (2)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN111416862A (en) * | 2020-03-20 | 2020-07-14 | 福建万物易联网络科技有限公司 | CDN platform access method and system based on IPV6IPV4 |
| CN111416862B (en) * | 2020-03-20 | 2021-06-15 | 福建万物易联网络科技有限公司 | CDN platform access method and system based on IPV6IPV4 |
Also Published As
| Publication number | Publication date |
|---|---|
| WO2020140433A1 (en) | 2020-07-09 |
| CN109451097B (en) | 2019-07-12 |
| CN109451097A (en) | 2019-03-08 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN109451097B (en) | IPv4/IPv6 address conversion system | |
| CN104270379B (en) | HTTPS agency retransmission methods and device based on transmission control protocol | |
| US10003576B2 (en) | Rule-based routing to resources through a network | |
| US7120148B1 (en) | System and method for providing source awareness in a wireless application protocol network environment | |
| EP2306689B1 (en) | Devices and method for accessing a web server in a local space | |
| US7734822B2 (en) | Method and apparatus for resolving a web site address when connected with a virtual private network (VPN) | |
| US20100228813A1 (en) | Information conversion apparatus, information conversion method, information conversion program and relay device | |
| CN101132420B (en) | Link overwriting method and device based on SSL VPN | |
| CN110049022A (en) | A kind of domain name access control method, device and computer readable storage medium | |
| CN106790503A (en) | It is a kind of to realize the IPv4 websites without skylight using the device upgraded to IPv6 based on HTTP reverse proxys | |
| JP2011515945A (en) | Method and apparatus for communicating data packets between local networks | |
| CN101136834B (en) | SSL VPN based link rewriting method and apparatus | |
| US7173933B1 (en) | System and method for providing source awareness in a network environment | |
| CN102546407B (en) | File transmitting method and device | |
| CN101582856A (en) | Session setup method of Portal server and BAS (broadband access server) device and system thereof | |
| CN107463453A (en) | Method, apparatus, equipment and the storage medium to be communicated between same terminal different application | |
| CN109862130A (en) | A kind of access IPv4 exterior chain method, apparatus, equipment and computer media | |
| CN100471163C (en) | Method for supporting IPv4 applied program utilizing intermain machine tunnel in IPV6 | |
| CN103581361A (en) | Domain name resolution proxy method, device and system | |
| CN110392066A (en) | A kind of method and apparatus of access service | |
| CN111343083A (en) | Instant messaging method, instant messaging device, electronic equipment and readable storage medium | |
| CN112272134B (en) | IPSec tunnel establishment method and device, branch equipment and center-end equipment | |
| CN104756462B (en) | For carrying out the method and system of TCP TURN operation after restricted firewall | |
| CN106453399B (en) | A kind of domain name resolution service method and system of user oriented secret protection | |
| US7788407B1 (en) | Apparatus and methods for providing an application level gateway for use in networks |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| WW01 | Invention patent application withdrawn after publication | ||
| WW01 | Invention patent application withdrawn after publication |
Application publication date: 20190910 |