CN104767781B - A kind of TCP agent device and method - Google Patents
A kind of TCP agent device and method Download PDFInfo
- Publication number
- CN104767781B CN104767781B CN201410008131.4A CN201410008131A CN104767781B CN 104767781 B CN104767781 B CN 104767781B CN 201410008131 A CN201410008131 A CN 201410008131A CN 104767781 B CN104767781 B CN 104767781B
- Authority
- CN
- China
- Prior art keywords
- message
- tcp
- data
- ssl
- data message
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Active
Links
- 238000000034 method Methods 0.000 title claims abstract description 24
- 238000012545 processing Methods 0.000 claims abstract description 42
- 230000005540 biological transmission Effects 0.000 claims abstract description 32
- 230000008859 change Effects 0.000 claims abstract description 17
- 230000004048 modification Effects 0.000 claims description 21
- 238000012986 modification Methods 0.000 claims description 21
- 230000002159 abnormal effect Effects 0.000 claims description 5
- 230000000694 effects Effects 0.000 abstract description 2
- 230000008569 process Effects 0.000 description 6
- 238000004891 communication Methods 0.000 description 4
- 230000003993 interaction Effects 0.000 description 4
- 238000010586 diagram Methods 0.000 description 3
- 238000012546 transfer Methods 0.000 description 3
- 230000003111 delayed effect Effects 0.000 description 2
- 238000005516 engineering process Methods 0.000 description 2
- 230000001133 acceleration Effects 0.000 description 1
- 238000004422 calculation algorithm Methods 0.000 description 1
- 238000004590 computer program Methods 0.000 description 1
- 238000012790 confirmation Methods 0.000 description 1
- 239000000686 essence Substances 0.000 description 1
- 230000006872 improvement Effects 0.000 description 1
- 230000014759 maintenance of location Effects 0.000 description 1
- 230000007246 mechanism Effects 0.000 description 1
- 230000009467 reduction Effects 0.000 description 1
- 238000003860 storage Methods 0.000 description 1
- 238000006467 substitution reaction Methods 0.000 description 1
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L69/00—Network arrangements, protocols or services independent of the application payload and not provided for in the other groups of this subclass
- H04L69/16—Implementation or adaptation of Internet protocol [IP], of transmission control protocol [TCP] or of user datagram protocol [UDP]
- H04L69/163—In-band adaptation of TCP data exchange; In-band control procedures
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L69/00—Network arrangements, protocols or services independent of the application payload and not provided for in the other groups of this subclass
- H04L69/16—Implementation or adaptation of Internet protocol [IP], of transmission control protocol [TCP] or of user datagram protocol [UDP]
- H04L69/166—IP fragmentation; TCP segmentation
-
- Y—GENERAL TAGGING OF NEW TECHNOLOGICAL DEVELOPMENTS; GENERAL TAGGING OF CROSS-SECTIONAL TECHNOLOGIES SPANNING OVER SEVERAL SECTIONS OF THE IPC; TECHNICAL SUBJECTS COVERED BY FORMER USPC CROSS-REFERENCE ART COLLECTIONS [XRACs] AND DIGESTS
- Y02—TECHNOLOGIES OR APPLICATIONS FOR MITIGATION OR ADAPTATION AGAINST CLIMATE CHANGE
- Y02D—CLIMATE CHANGE MITIGATION TECHNOLOGIES IN INFORMATION AND COMMUNICATION TECHNOLOGIES [ICT], I.E. INFORMATION AND COMMUNICATION TECHNOLOGIES AIMING AT THE REDUCTION OF THEIR OWN ENERGY USE
- Y02D30/00—Reducing energy consumption in communication networks
- Y02D30/50—Reducing energy consumption in communication networks in wire-line communication networks, e.g. low power modes or reduced link rate
Landscapes
- Engineering & Computer Science (AREA)
- Computer Security & Cryptography (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- Computer And Data Communications (AREA)
Abstract
A kind of TCP agent device of present invention offer and method, applied to establishing on the network equipment between the transmitting terminal of TCP connection and destination, wherein the device includes：Data acquisition module, for when it is TCP data message to receive the TCP message of transmitting terminal transmission, obtaining the clear data carried in the TCP data message；Message judgment module, for judging whether the clear data of the TCP data message needs to change according to default classifying rules, if it is, content processing module modifies to the clear data of the TCP data message, and is forwarded to destination after modifying to the header information of the TCP data message；If not, being forwarded to destination after modifying to the header information of the TCP data message.It The present invention reduces the consumption of operating-system resources, is greatly improved and acts on behalf of efficiency, using effect is more preferably on opposite core position in a network.
Description
Technical field
The present invention relates to field of communication technology more particularly to the devices and method of a kind of TCP agent.
Background technology
TCP agent is to handle the common means of the network service based on content, and basic model is the TCP in script intercommunication
Agent side is added between transmitting terminal and destination, so that the both ends of script direct interaction is interacted respectively with agent side, agent side
Play the role of one " passing on a message ", while needing the content interacted to both ends to modify according to business.Its application is very wide
It is general, such as：Seven layers of load balancing, SSL acceleration, SSLVPN, content auditing, proxy surfing, connection multiplexing, WEB cachings etc..It is most of
Business based on contents processing can be realized using TCP agent.
Existing TCP agent majority is acted on behalf of using socket to handle the network service based on content, in transmission process
The role that socket agencies serve as is two terminals, such as socket 1 and socket of agency agencies 2, wherein socket agencies 1
It is operated in same Agent with socket agencies 2.Socket agencies 1 are responsible for carrying out TCP connection with client, then extract and connect
The message data received is sent to application proxy program.Socket agencies 2 are attached with server later, and Agent uses
Socket agencies 2 are before from the data forwarding that socket agencies 1 obtain to server.In the Transmission system, socket generations
The similar system of reason is two completely self-contained links, and all data messages carry out transfer by application proxy program.
However socket need to be acted on behalf of the data that 1 obtains due to the use of socket agencies and be sent to application program, it has handled
At rear application proxy program also to transmit data to socket agency 2, therefore increase operating-system resources consumption and
Time loss of the message in network protocol stack, this undoubtedly deathblow when number of concurrent is huge.On the other hand, it uses
Socket agencies also need to monitor the read-write of socket constantly, and the socket of not read-write is equivalent in this way
Flogging a dead horse, even if setting out mechanism using signal, also cannot achieve the asynchronous process of multi -CPU, although for conventional system this
The concurrent processing of sample is enough, but this is far from being enough for the high-end network equipment, because high-end network is set
Standby to be located at network core position, Message processing amount thereon is very huge.
Invention content
In view of this, the present invention provides a kind of TCP agent device, applied to the transmitting terminal and purpose for establishing TCP connection
On the network equipment between end, wherein the device includes：
Data acquisition module, for when it is TCP data message to receive the TCP message of transmitting terminal transmission, described in acquisition
The clear data carried in TCP data message；
Message judgment module, for judging whether the clear data of the TCP data message needs according to default classifying rules
It changes, is handled if so, turning content processing module, if not, rotary head portion processing module is handled；
Content processing module is modified for the clear data to the TCP data message, and rotary head portion processing module
It is handled；
Head processing module is forwarded to destination after modifying for the header information to the TCP data message.
The present invention also provides a kind of TCP agent methods, applied to the net established between the transmitting terminal of TCP connection and destination
In network equipment, wherein this method includes：
Step A, when it is TCP data message to receive the TCP message of transmitting terminal transmission, the TCP data message is obtained
The clear data of carrying；
Step B, judge whether the clear data of the TCP data message needs to change according to default classifying rules, if
It is to go to step C processing, if not, going to step D processing；
Step C, it modifies to the content of the TCP data message, and goes to step D processing；
Step D, it modifies to the header information of the TCP data message and is forwarded to destination after handling.
TCP agent device provided by the invention and method, for the TCP data message for needing to change content received
It can directly be modified according to its type of service, the TCP data message for that need not change content then changes it by TCP agent
It is directly forwarded after header information, it is not necessary that all messages are sent to application proxy program, then is sent by application proxy program
To network layer.It can be seen that the TCP agent that the embodiment of the present invention is provided reduces the consumption and reduction of operating-system resources
Time loss of the message in network protocol stack, is greatly improved and acts on behalf of efficiency, is used on opposite core position in a network
It is better.
Description of the drawings
Fig. 1 is the structural schematic diagram of TCP agent device in the embodiment of the present invention；
Fig. 2 is the flow diagram of TCP agent method in the embodiment of the present invention；
Fig. 3 is the work flow diagram of TCP agent method in the embodiment of the present invention.
Specific implementation mode
A kind of TCP agent device of present invention offer and method, which passes through simulant-client and server is established
Connection, then emulating server establishes connection with client again, and after TCP connection foundation, TCP agent is then responsible for client
It modifies and forwards with the message data of server communication.Below using transmitting terminal as client, destination is that server is
The present invention is further elaborated for example.
Referring to FIG. 1, the present invention provides a kind of TCP agent device, applied to the network between transmitting terminal and destination
In equipment, the basic hardware environment of the device includes CPU, memory, nonvolatile memory and other hardware.The TCP agent
Device can be understood as corresponding computer program in CPU reading non-volatile storages and run in memory to be formed by, from
Essentially it is a logic device.In the present embodiment, which includes on logic level：Data acquisition module,
Message judgment module, content processing module and head processing module, referring to FIG. 2, the device executes such as in the process of running
Lower process flow：Including：
Step 201, data acquisition module obtains the TCP data after the TCP data message for receiving transmitting terminal transmission
The clear data carried in message；
Step 202, message judgment module according to default classifying rules judge the TCP data message clear data whether
It needs to change, be handled if so, going to step 203, handled if it is not, then going to step 204；
Step 203, content processing module modifies to the content of the TCP data message, and goes to step at 204
Reason；
Step 204, head processing module to the header information of the TCP data message modify processing after be forwarded to mesh
End.
Transmission Control Protocol is used for providing reliable Connection Service, when client and server establish TCP connection, TCP agent mould
Quasi- client and server, which are established, to be connected, and then emulating server establishes connection with client again.It establishes and connects by three-way handshake
After connecing, the TCP connection of TCP agent and both sides just establishes.Following TCP agent is then responsible for client and server communication
Message data modify and forward, a similar connection.Referring to FIG. 3, the data acquisition module of TCP agent is receiving
After the TCP message sent to client, if judging, the TCP message for TCP data message, further obtains the TCP data
The clear data carried in message.
After the clear data for getting the TCP data message, message judgment module judges according to default classifying rules
Whether the clear data of the TCP data message needs to change, if necessary to change, then according to type of service in the message
Appearance is modified, and turns to modify to the header information of the TCP data message by head processing module again after the completion of modification, and
The message that modification is completed is forwarded to specified destination according to its IP address；If judging the TCP data according to clear data
The content of message need not be changed, then directly modified to the header information of the TCP data message by head processing module, and
The message that modification is completed is forwarded to specified destination according to its IP address.
In embodiments of the present invention, TCP agent can be according to it for the TCP data message for needing to change content received
Type of service is directly modified, and the TCP data message for that need not change content then changes its header information by TCP agent
It is directly forwarded afterwards, it is not necessary that all messages are sent to application proxy program, then network layer is sent to by application program.Thus
It is assisted in network as it can be seen that the TCP agent that the embodiment of the present invention is provided reduces the consumption of operating-system resources and reduces message
The time loss in stack is discussed, effectively increases and acts on behalf of efficiency.
In preferred embodiment of the present invention, which further includes Transmission Control Protocol module, for according to Transmission Control Protocol pair
Transmission Control Protocol message from transmitting terminal is handled.After the TCP message for receiving transmitting terminal transmission, if judging the TCP message
It is that Transmission Control Protocol message is then handled it according to Transmission Control Protocol by Transmission Control Protocol module, is not forwarded to server.
Further, TCP agent provided in an embodiment of the present invention can also perfect compatible such as SSL upper layer securities agreement.Its
In, which further includes SSL deciphering modules, for SSL data messages being decrypted to obtain the plaintext number of message
According to；And ssl protocol module, for being handled ssl protocol message according to ssl protocol.
Specifically, after TCP connection foundation, the TCP message that data acquisition module receives is likely to be the SSL being encrypted
Message（Secure Sockets Layer secure socket layer protocol layers）.It, be into one if the message received is SSL messages
Step judges the SSL messages for ssl protocol message or SSL data messages, if the SSL messages are ssl protocol message, then TCP
Agency is handled ssl protocol message according to ssl protocol；If the SSL messages received are SSL data messages, then in reality
Before the data transmission on border starts, TCP agent respectively shake hands to SSL data messages progress SSL with server, assist by simulant-client
Quotient's Encryption Algorithm and key exchange etc., to obtain the clear data of the message.Usually it will produce in carrying out SSL handshake process
Some protocol massages still directly handle the message according to agreement after receiving the protocol massages, are not transmitted to server.
The SSL messages received are decrypted after obtaining clear data, judge the TCP data report according to default classifying rules
Whether the clear data of text needs to change, if the session status of clear data meets the default classifying rules with message characteristic,
Judge that the clear content of the message needs to change, then modify to the data content of the message, then by head processing module
It modifies to its header information and is forwarded to specified destination after handling.It, can according to clear data when changing message content
To learn which kind of type of service the message is, and modified to the content of the message according to the type of service.
Illustratively, for example there is of short duration failure in user's background server when accessing public network, and the webpage information of user is logical
Often it is shown as " miscue：403 " etc., however in order to increase the friendliness that the page is shown, then it needs wrong for this HTTP403
Mistake is handled accordingly, can specifically set the webpage information that user accesses to the friendly letter such as " loading ... "
Breath, TCP agent modify to the content of the TCP data message received according to business needs；HTTP403 mistakes are just at this time
It is a scheduled classifying rules.Certain developer can define various classifying rules according to the actual needs of user, hit
Classifying rules is required for carrying out corresponding content modification, and classifying rules itself be can be ever-changing.
On the other hand, if judging the report with message characteristic according to the session status of the clear data according to message classification rule
The clear data of text need not be changed, or after the completion of the message modification to needing to change clear data, by head processing module
It modifies to the header information of the TCP data message, the header information of the TCP data message is IP address and TCP sequence
Number.Since TCP agent is equivalent to a trunking, the TCP data message received will be forwarded to destination, therefore TCP
Agency is intended to for the IP address in its head to be revised as the IP address of destination, and phase after receiving all TCP data messages
It is forwarded again after TCP sequence number should be changed.
It further, can be between clients and servers in order to protect safety of the sensitive data in transmit process
Escape way is constructed to carry out data transmission, is supported with giving data communication to provide safety.Therefore TCP agent forward the packet to
It can judge whether the message meets encryption rule, and the report to meeting encryption rule according to message interaction agreement before destination
Text is forwarded to destination after being encrypted.
Specifically, TCP agent device provided by the invention further includes data encryption module, for by head processing module
The TCP data message that modification is completed is forwarded to before destination, judges whether the TCP data message meets predetermined encryption rule,
If met, the message to meeting predetermined encryption rule is forwarded to destination after being encrypted；Otherwise head processing module is repaiied
The TCP data message for changing completion is forwarded to destination.
The predetermined encryption rule can be manually set as needed, for example the predetermined encryption rule can be：When data obtain
When the TCP data message that modulus block receives transmitting terminal transmission is encrypted message, then the TCP data message is then pre- to meet
If the message of encryption rule, if the TCP data message that data acquisition module receives transmitting terminal transmission is clear data message, that
The TCP data message is then the message for not meeting predetermined encryption rule；Or the predetermined encryption rule is：It should according to carrying
The agreement of TCP data message judges whether the message meets encryption rule, for example, Https（Hypertext Transfer
Protocol Secure Secure Hypertext Transfer Protocols）The message of agreement；Or the predetermined encryption rule can be：In number
Though the TCP data message for receiving transmitting terminal transmission according to acquisition module is plaintext message, according to the carrying TCP data message
Agreement when judging that the message meets encryption rule, still judge that the message is the message for meeting encryption rule.Judging TCP data
Message is that the TCP data message is encrypted by data encryption module after meeting the message of predetermined encryption rule, and will encrypt
TCP data message afterwards is forwarded to destination.
In the prior art, since socket agencies are that oneself is carried out with client and server respectively as two terminals
Interaction, if therefore it is necessary to carrying out re-transmission and delayed ACK to the TCP data message the case where interrupted in TCP transmission.
However carry out re-transmission and delayed ACK etc. using socket agencies and timer auxiliary is required for realize, and in the embodiment of the present invention
Middle TCP agent is the equal of then a trunking, the characteristics of being based on trunking, and TCP agent can be real-time according to message
Interaction scenario carries out triggering re-transmission by message, does not need timer to safeguard, also just without oneself come control message retransmission with
ACK etc..
Specifically, it when the TCP data message after the completion of head processing module changes header information is sent to destination, protects
It deposits before TCP data message is modified with modified TCP sequence number, establishes and preserve its correspondence list item, which uses
Which in when retransmitting exception message, convenient for knowing need that message retransmitted to destination, therefore sent successfully in TCP data message
Afterwards, you can delete the correspondence of TCP data message in the table entry.When destination receives message appearance exception, TCP agent
TCP before then searching corresponding modification in the correspondence list item according to the modified TCP sequence number of the exception message
Sequence number, notice transmitting terminal retransmit the TCP data message that TCP sequence number is the TCP sequence number before the modification, and destination is receiving
ACK messages are correspondingly sent when to TCP data message, TCP agent is after receiving ACK messages just to transmitting terminal forwarding ACK reports
Text, and retransmitting the TCP sequence number correspondence for deleting the TCP data message after the completion.
| TCP sequence number before header information modification | The modified TCP sequence number of header information |
| AAAA | BBBB |
| XXXX | YYYY |
Table 1
Table 1 is that TCP data message is carried out with modified TCP sequence number correspondence list item before header information is changed, should
List item only illustrates to further understand the present invention.Illustratively, as described in Table 1, if TCP agent receives transmitting terminal hair
The TCP sequence number of the TCP data message sent is XXXX, which is passing through the modified TCP sequence number of header information
For YYYY, if TCP agent occur in repeating process it is abnormal, then according to the modified TCP sequence number YYYY of the exception message
The TCP sequence number XXXX before corresponding modification is searched in table 1, notice transmitting terminal retransmits the TCP that TCP sequence number is XXXX
Data message, TCP agent are modified again, and sequence number is revised as YYYY, is then sent to destination.Destination is in success
ACK messages are correspondingly sent when receiving TCP data message, TCP agent is receiving ACK messages, determines that the message is to be directed to
TCP sequence number be YYYY messages confirmation, then just to transmitting terminal send ACK messages, to TCP sequence number for XXXX message into
Row confirms that so primary complete retransmit just completes.The TCP of the TCP data message is deleted after the completion of this time retransmits
Sequence number correspondence.It can be seen that the present invention does not need re-transmission and the ACK of oneself control exception message, without timer
It is safeguarded, the efficiency of exception message re-transmission can be effectively improved.
In conclusion TCP agent provided by the invention can directly handle the protocol massages received, for datagram
Wen Ze, for partly needing the message of modification content, can be carried out directly without above sending application proxy program according to its type of service
Destination is forwarded to after modification again, equally without being sent to application proxy program, then network is sent to by application proxy program
Layer.In addition, in preferred mode, TCP agent provided by the present invention can also perfectly be compatible with the upper-layer protocols such as SSL, and
It is forwarded the packet to destination by the form directly forwarded, it need not be using complicated network protocol stack, in multi-core CPU height
Under the running environment of concurrent condition, the effect of the invention that improved efficiency is acted on behalf of to entirety will be more apparent.
The foregoing is merely illustrative of the preferred embodiments of the present invention, is not intended to limit the invention, all essences in the present invention
With within principle, any modification, equivalent substitution, improvement and etc. done should be included within the scope of protection of the invention god.
Claims (12)
- It is special applied to establishing on the network equipment between the transmitting terminal of TCP connection and destination 1. a kind of TCP agent device Sign is that described device includes：Data acquisition module, for when it is TCP data message to receive the TCP message of transmitting terminal transmission, obtaining the TCP numbers According to the clear data carried in message, wherein the data acquisition module is further used for receiving the TCP numbers of transmitting terminal transmission When according to message, first judge whether the data that the message carries are SSL messages, if it is not, then determining the data that the message carries For clear data, transit telegram text judgment module is handled；If it is further judge whether the SSL messages are agreement report Otherwise text determines that the SSL messages are SSL data messages, turns at SSL deciphering modules if it is, turning ssl protocol resume module Reason；SSL deciphering modules, for SSL data messages being decrypted to obtain the clear data of message, and transit telegram text judges mould Block is handled；Ssl protocol module, for being handled ssl protocol message according to ssl protocol；Message judgment module, for judging whether the clear data of the TCP data message needs to repair according to default classifying rules Change, handled if so, turning content processing module, if not, rotary head portion processing module is handled；Content processing module is modified for the clear data to the TCP data message, and rotary head portion processing module carries out Processing；Head processing module is forwarded to destination after modifying for the header information to the TCP data message.
- 2. device as described in claim 1, which is characterized in that further include Transmission Control Protocol module, be used for according to Transmission Control Protocol to coming It is handled from the Transmission Control Protocol message of transmitting terminal；The data acquisition module is further used for when it is protocol massages to receive the TCP message of transmitting terminal transmission, by the association View message is submitted to Transmission Control Protocol module and is handled.
- 3. device as described in claim 1, which is characterized in that further include：Data encryption module, for judging whether the TCP data message that head processing module modification is completed meets predetermined encryption rule Then, if so, being forwarded to destination after the message for meeting predetermined encryption rule is encrypted；Otherwise head processing module is repaiied The TCP data message for changing completion is forwarded to destination.
- 4. device as described in claim 1, which is characterized in that the clear data includes session status and message characteristic, report Judge whether the clear data of the TCP data message needs to change specific packet according to default classifying rules described in literary judgment module It includes：If the session status of clear data meets the default classifying rules with message characteristic, the clear content of the message is judged It needs to change；Otherwise, judge that the clear content of the message need not be changed.
- 5. device as described in claim 1, which is characterized in that the head processing module is specifically used for：It modifies to the IP address and TCP sequence number of the TCP data message.
- 6. device as described in claim 1, which is characterized in that the head processing module is further used for：Preserve TCP data The header information of message changes preceding and modified TCP sequence number and correspondence；When TCP data message forwards appearance abnormal, the lookup TCP data message abnormal with appearance is repaiied in the correspondence The TCP sequence number before the corresponding modification of TCP sequence number after changing；Transmitting terminal is notified to retransmit the TCP data message that TCP sequence number is the TCP sequence number before the modification.
- It is special applied to establishing on the network equipment between the transmitting terminal of TCP connection and destination 7. a kind of TCP agent method Sign is, the method includes：Step A, it when it is TCP data message to receive the TCP message of transmitting terminal transmission, obtains the TCP data message and carries Clear data；When the step A further comprises receiving the TCP data message of transmitting terminal transmission, the data that the message carries first are judged Whether it is SSL messages, if it is not, then determining that the data that the message carries are clear data, goes to step B processing；If It is further to judge whether the SSL messages are protocol massages, if it is, going to step A2 processing, otherwise determines SSL reports Text is SSL data messages, goes to step A1 processing；Step A1, SSL data messages are decrypted to obtain the clear data of message, and go to step B processing；Step A2, ssl protocol message is handled according to ssl protocol；Step B, judge whether the clear data of the TCP data message needs to change according to default classifying rules, if so, turning Step C processing, if not, going to step D processing；Step C, it modifies to the content of the TCP data message, and goes to step D processing；Step D, it modifies to the header information of the TCP data message and is forwarded to destination after handling.
- 8. the method for claim 7, which is characterized in that the method further includes：Step A3, the Transmission Control Protocol message from transmitting terminal is handled according to Transmission Control Protocol；The step A further comprises, when it is protocol massages to receive the TCP message of transmitting terminal transmission, which being carried Give step A3 processing.
- 9. the method for claim 7, which is characterized in that further include：Whether the TCP data message that judgment step D modifications are completed meets predetermined encryption rule, if so, to meeting predetermined encryption The message of rule is forwarded to destination after being encrypted；Otherwise the TCP data message that step D modifications are completed is forwarded to purpose End.
- 10. the method for claim 7, which is characterized in that the clear data includes session status and message characteristic, step Judge whether the clear data of the TCP data message needs modification to specifically include according to default classifying rules described in rapid B：If the session status of clear data meets the default classifying rules with message characteristic, the clear content of the message is judged It needs to change；Otherwise, judge that the clear content of the message need not be changed.
- 11. the method for claim 7, which is characterized in that the step D is specifically included：It modifies to the IP address and TCP sequence number of the TCP data message.
- 12. the method for claim 7, which is characterized in that the step D further comprises：The header information for preserving TCP data message changes preceding and modified TCP sequence number and correspondence；When TCP data message forwards appearance abnormal, the lookup TCP data message abnormal with appearance is repaiied in the correspondence The TCP sequence number before the corresponding modification of TCP sequence number after changing；Transmitting terminal is notified to retransmit the TCP data message that TCP sequence number is the TCP sequence number before the modification.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201410008131.4A CN104767781B (en) | 2014-01-08 | 2014-01-08 | A kind of TCP agent device and method |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201410008131.4A CN104767781B (en) | 2014-01-08 | 2014-01-08 | A kind of TCP agent device and method |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN104767781A CN104767781A (en) | 2015-07-08 |
| CN104767781B true CN104767781B (en) | 2018-09-04 |
Family
ID=53649384
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201410008131.4A Active CN104767781B (en) | 2014-01-08 | 2014-01-08 | A kind of TCP agent device and method |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN104767781B (en) |
Families Citing this family (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN109088892B (en) | 2018-10-19 | 2021-02-12 | 网宿科技股份有限公司 | Data transmission method, system and proxy server |
| CN114422563A (en) * | 2021-12-29 | 2022-04-29 | 海南同享数字科技有限公司 | Method, device, equipment and storage medium for calling background data by page |
| CN116684492A (en) * | 2022-02-22 | 2023-09-01 | 中国移动通信有限公司研究院 | Data transmission method, device, related equipment and storage medium |
Citations (6)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| WO2002102020A1 (en) * | 2001-06-08 | 2002-12-19 | Corrent Corporation | Transparent ssl proxy |
| WO2004004272A1 (en) * | 2002-06-26 | 2004-01-08 | Sandvine Incorporated | A tcp proxy providing application layer modifications |
| JP2005136684A (en) * | 2003-10-30 | 2005-05-26 | Nippon Telegr & Teleph Corp <Ntt> | Data transfer method, TCP proxy device, and network system using the same |
| US7328267B1 (en) * | 2002-01-18 | 2008-02-05 | Cisco Technology, Inc. | TCP proxy connection management in a gigabit environment |
| CN101867558A (en) * | 2009-04-17 | 2010-10-20 | 深圳市永达电子股份有限公司 | User mode network protocol stack system and method for processing message |
| CN102130910A (en) * | 2011-02-28 | 2011-07-20 | 华为技术有限公司 | Method for inserting and unloading transmission control protocol (TCP) proxy and service gateway equipment |
Family Cites Families (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US20070283429A1 (en) * | 2006-05-30 | 2007-12-06 | A10 Networks Inc. | Sequence number based TCP session proxy |
-
2014
- 2014-01-08 CN CN201410008131.4A patent/CN104767781B/en active Active
Patent Citations (6)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| WO2002102020A1 (en) * | 2001-06-08 | 2002-12-19 | Corrent Corporation | Transparent ssl proxy |
| US7328267B1 (en) * | 2002-01-18 | 2008-02-05 | Cisco Technology, Inc. | TCP proxy connection management in a gigabit environment |
| WO2004004272A1 (en) * | 2002-06-26 | 2004-01-08 | Sandvine Incorporated | A tcp proxy providing application layer modifications |
| JP2005136684A (en) * | 2003-10-30 | 2005-05-26 | Nippon Telegr & Teleph Corp <Ntt> | Data transfer method, TCP proxy device, and network system using the same |
| CN101867558A (en) * | 2009-04-17 | 2010-10-20 | 深圳市永达电子股份有限公司 | User mode network protocol stack system and method for processing message |
| CN102130910A (en) * | 2011-02-28 | 2011-07-20 | 华为技术有限公司 | Method for inserting and unloading transmission control protocol (TCP) proxy and service gateway equipment |
Also Published As
| Publication number | Publication date |
|---|---|
| CN104767781A (en) | 2015-07-08 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| Kumar et al. | Implementation and analysis of QUIC for MQTT | |
| US10419348B2 (en) | Efficient intercept of connection-based transport layer connections | |
| US10419406B2 (en) | Efficient forwarding of encrypted TCP retransmissions | |
| CN202206418U (en) | Traffic management device, system and processor | |
| JP5797739B2 (en) | Method and system for reliable protocol tunneling over HTTP | |
| US8200957B1 (en) | Using SYN-ACK cookies within a TCP/IP protocol | |
| US7984160B2 (en) | Establishing a split-terminated communication connection through a stateful firewall, with network transparency | |
| US20030217149A1 (en) | Method and apparatus for tunneling TCP/IP over HTTP and HTTPS | |
| US8782772B2 (en) | Multi-session secure tunnel | |
| CN111628976B (en) | Message processing method, device, equipment and medium | |
| US11777915B2 (en) | Adaptive control of secure sockets layer proxy | |
| CN109040059B (en) | Protected TCP communication method, communication device and storage medium | |
| CN104539587A (en) | Thing access and group interaction method used for Internet of things | |
| CN108429682A (en) | Method and system for optimizing network transmission link | |
| JP2007538444A (en) | Firewall system | |
| CN104767781B (en) | A kind of TCP agent device and method | |
| Nowlan et al. | Reducing latency in Tor circuits with unordered delivery | |
| CN102202108A (en) | Method, device and system for realizing NAT (network address translation) traverse of IPSEC (Internet protocol security) in AH (authentication header) mode | |
| CN105791239B (en) | A TCP middleman processing method | |
| WO2018225330A1 (en) | Communication device, relay device, information processing system, communication system, communication method, and program | |
| Shokunbi | COMPARISON AND FEASIBILITY OF NETWORK HETEROGENEITY AND INSPECTION TOOLS FOR QUIC | |
| KR20080092332A (en) | Method and system for lightweight SOAP transmission for web service based management | |
| CN120711097A (en) | Message transmission method, electronic device and readable storage medium | |
| Al-Hakeem et al. | Development of fast reliable secure file transfer protocol (FRS-FTP) | |
| Clark | QUUX: a QUIC un-multiplexing of the Tor relay transport |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| C06 | Publication | ||
| PB01 | Publication | ||
| EXSB | Decision made by sipo to initiate substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| CB02 | Change of applicant information |
Address after: Binjiang District and Hangzhou city in Zhejiang Province Road 310051 No. 68 in the 6 storey building Applicant after: Hangzhou Dipu Polytron Technologies Inc Address before: Binjiang District and Hangzhou city in Zhejiang Province Road 310051 No. 68 in the 6 storey building Applicant before: Hangzhou Dipu Technology Co., Ltd. |
|
| CB02 | Change of applicant information | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant |