CN110324436A - A kind of Proxy Method and device of transport-layer proxy - Google Patents

Abstract

The invention discloses a kind of Proxy Method of transport-layer proxy and devices, wherein the described method includes: obtaining the IP address in the access request after application layer initiates access request；Determine the corresponding domain name of IP address in the access request；Judge whether the access request meets the condition of agency based on domain name；If met, the access request is sent to proxy server.The present invention can use domain name matching way being filtered and distribute to proxy data, so the access request that can be suitable for initiating domain name, and since the same domain name can correspond to multiple IP address, for domain name matching way compared with IP address matching way, domain name matching way can simplify the setting of matching condition.

Description

Agent method and device for transport layer agent

technical field

The invention relates to the technical field of transport layer proxy, in particular to a proxy method and device for transport layer proxy.

Background technique

The proxy server can be used as a transfer station for data transmission between the client and the server. For example, the access request sent by the client is sent to the server to be accessed through the proxy server. If the access request sent by the client meets the proxy conditions, it will be sent to the server to be accessed by the proxy server, otherwise it will be sent directly to the server. If the data proxied by the TCP/UDP transport layer proxy is to be filtered or distributed, the proxy condition is set using the regular matching method of the IP address and port. Since the transport layer can only obtain the IP address and port of the server to be accessed during the proxy process of the transport layer, if only the regular matching of the IP address and port is used, it can only support simple IP requests and cannot be applied to domain name requests.

Contents of the invention

In order to solve the problems in the prior art, the embodiment of the present invention provides a transport layer proxy method and device. Described technical scheme is as follows:

In a first aspect, a proxy method of a transport layer proxy is provided, the method is applied to a client, and the method includes:

After the application layer initiates the access request, obtain the IP address in the access request;

determining the domain name corresponding to the IP address in the access request;

judging whether the access request meets a proxy condition based on the domain name;

If so, send the access request to the proxy server.

Optionally, the method also includes:

The application layer initiates a DNS request, and sends the DNS request through a proxy interface;

receiving the IP address sent by the DNS server based on the DNS request through the proxy interface;

Obtaining the domain name in the DNS request and the IP address sent by the DNS server from the proxy interface;

Establish a mapping relationship between domain names and IP addresses;

Correspondingly, the step of determining the domain name corresponding to the IP address in the access request includes:

Based on the established mapping relationship between the domain name and the IP address, determine the domain name corresponding to the IP address in the access request.

Optionally, the step of sending the DNS request through a proxy interface includes:

If the operating system is an iOS system, select the original DNS request interface of the OC layer, and use the iOS MethodSwizzling technology to take over the original DNS request interface by the proxy interface, and send the DNS request through the proxy interface;

If the operating system is an Android system, select the original DNS request interface of the java layer, and utilize java reflection technology to take over the original DNS request interface by the proxy interface, and send the DNS request through the proxy interface;

If a custom DNS request is adopted, the original DNS request interface of the native layer is selected, and the function hijacking technology is used to take over the original DNS request interface by the proxy interface, and the DNS request is sent through the proxy interface.

Optionally, after the step of establishing the mapping relationship between the domain name and the IP address, it includes:

Judging whether the established domain name and IP address mapping relationship has been cached in the domain name and IP address relationship list; if not, the established domain name and IP address mapping relationship is cached in the domain name and IP address relationship list;

Correspondingly, the step of determining the domain name corresponding to the IP address in the access request includes:

Query the IP address in the access request in the domain name and IP address relationship list;

If the search is successful, the domain name corresponding to the IP address in the access request is determined in the domain name-IP address relationship list.

Optionally, the list of relationships between domain names and IP addresses is cached in a map list in memory.

In a second aspect, a proxy device of a transport layer proxy is provided, the device comprising:

A sending module, configured to initiate an access request from the application layer;

An acquisition module, configured to acquire the IP address in the access request;

A determining module, configured to determine the domain name corresponding to the IP address in the access request;

A judging module, configured to judge whether the access request meets proxy conditions based on the domain name;

The sending module is further configured to send the access request to a proxy server when the access request meets a proxy condition.

Optionally, the device further includes a receiving module and a creating module;

The sending module is further configured to send the DNS request through the proxy interface when the application layer initiates the DNS request;

The receiving module is configured to receive the IP address sent by the DNS server based on the DNS request through the proxy interface;

The creating module is configured to obtain the domain name in the DNS request and the IP address sent by the DNS server from the proxy interface, and establish a mapping relationship between the domain name and the IP address;

Correspondingly, the determining module is specifically configured to determine the domain name corresponding to the IP address in the access request based on the established mapping relationship between the domain name and the IP address.

Optionally, the sending module is specifically used for:

If the operating system is an iOS system, select the original DNS request interface of the OC layer, and use the iOS MethodSwizzling technology to take over the original DNS request interface by the proxy interface, and send the DNS request through the proxy interface;

If the operating system is an Android system, select the original DNS request interface of the java layer, and utilize java reflection technology to take over the original DNS request interface by the proxy interface, and send the DNS request through the proxy interface;

If a custom DNS request is adopted, the original DNS request interface of the native layer is selected, and the function hijacking technology is used to take over the original DNS request interface by the proxy interface, and the DNS request is sent through the proxy interface.

Optionally, the creating module is specifically used for:

Judging whether the established domain name and IP address mapping relationship has been cached in the domain name and IP address relationship list; if not, the established domain name and IP address mapping relationship is cached in the domain name and IP address relationship list;

Correspondingly, the determination module is specifically used for:

Query the IP address in the access request in the domain name and IP address relationship list;

If the search is successful, the domain name corresponding to the IP address in the access request is determined in the domain name-IP address relationship list.

In a third aspect, an agent device is provided, the agent device includes a processor and a memory, at least one instruction, at least one program, code set or instruction set are stored in the memory, the at least one instruction, the at least A program, the code set or instruction set is loaded and executed by the processor to implement the proxy method of the transport layer proxy described in the first aspect above.

A fourth aspect provides a computer-readable storage medium storing a computer program, wherein when the computer program is executed by a processor, the proxy method of the transport layer proxy described in the first aspect is implemented.

In the embodiment of the present invention, after the IP address is obtained by using the transport layer agent, the domain name corresponding to the IP address is determined, so the data of the agent can be filtered and distributed by using the domain name matching method, and it can also be applied to the access request initiated by the domain name. And because the same domain name can correspond to multiple IP addresses, compared with the IP address matching method, the domain name matching method can simplify the setting of matching conditions.

Description of drawings

In order to more clearly illustrate the technical solutions in the embodiments of the present invention, the drawings that need to be used in the description of the embodiments will be briefly introduced below. Obviously, the drawings in the following description are only some embodiments of the present invention. For those skilled in the art, other drawings can also be obtained based on these drawings without creative effort.

FIG. 1 is a structural block diagram of a network framework provided by an embodiment of the present invention;

Fig. 2 is a flowchart of a proxy method of a transport layer proxy provided by an embodiment of the present invention;

Fig. 3 is a schematic flowchart of a proxy method of a transport layer proxy provided by an embodiment of the present invention;

FIG. 4 is a schematic flow diagram of establishing a mapping relationship between a domain name and an IP address provided by an embodiment of the present invention;

Fig. 5 is a structural block diagram of a proxy device of a transport layer proxy provided by an embodiment of the present invention;

Fig. 6 is a structural block diagram of an electronic device provided by an embodiment of the present invention.

Detailed ways

In order to make the object, technical solution and advantages of the present invention clearer, the implementation manner of the present invention will be further described in detail below in conjunction with the accompanying drawings.

An embodiment of the present invention provides a proxy method of a transport layer proxy, which can be applied to the network framework shown in FIG. 1 . The network framework includes a proxy device, a proxy server and a server to be accessed. Wherein, the proxy device may be a client. A transport layer proxy SDK (Software Development Kit, software development kit) is embedded in the proxy device, and the proxy device executes the proxy method provided by the implementation of the present invention by calling the transport layer proxy SDK. The proxy method includes: after the proxy device initiates the access request from the application layer, obtains the IP address in the access request, then determines the domain name corresponding to the IP address in the access request, and judges the access request based on the domain name Whether the proxy condition is met; if so, the access request is sent to the proxy server, and the proxy server sends the access request to the server to be accessed.

Referring to FIG. 2 , it is a flowchart of a proxy method of a transport layer proxy provided by an embodiment of the present invention, and the method specifically includes the following steps.

Step 201, the application layer of the proxy device sends a DNS request, and sends the DNS request through a proxy interface.

Step 202, the proxy device receives the IP address sent by the DNS server based on the DNS request through the proxy interface.

In a specific application, the proxy device also receives the port number while receiving the IP address.

Step 203, the proxy device acquires the domain name in the DNS request and the IP address sent by the DNS server from the proxy interface.

As shown in Figure 3, the steps for the application layer to initiate an access request include: the first step is to initiate a DNS request for the domain name and obtain an IP address, and the second step is to use the IP address to initiate a connection, that is, to connect to the server to be accessed and send an access request, and receive data. In the scenario where the transport layer proxy SDK is embedded in the proxy device, the proxy interface takes over the original DNS request interface, that is, the proxy interface is used to replace the original DNS request interface, and the proxy interface is connected to the DNS server, and the proxy interface is used for proxy data sending and receiving. Specifically, when the application layer initiates a DNS request, the proxy interface intercepts the DNS request, sends the DNS request to the DNS server, and then receives the IP address returned by the DNS server.

As shown in FIG. 4 , the embodiment of the present invention is applicable to agent devices of iOS system and Android system. If the operating system of the proxy device is an iOS system, select the original DNS request interface of the OC layer, and utilize iOS Method Swizzling (iOS method conversion) technology to take over the original DNS request interface by the proxy interface. If the operating system of the proxy device is the Android system, select the original DNS request interface of the java layer, and use java reflection technology to take over the original DNS request interface by the proxy interface. If the proxy device adopts custom DNS request, select the original DNS request interface of the native layer, and use the function hijacking technology to let the proxy interface take over the original DNS request interface.

Because the embodiment of the present invention obtains the domain name directly from the proxy interface, there is no need to analyze the application protocol during the proxy process of the transport layer proxy, so the embodiment of the present invention can be applied to all application protocol scenarios, and can also reduce the amount of code of the proxy itself.

And when the application layer initiates a domain name access request, the mapping relationship between the domain name and the IP address can be obtained from the proxy interface and cached, so there is no need to open a new interface to pass in the domain name and IP address relationship list, reducing development difficulty and improving the transport layer The embedding efficiency of the agent SDK and the operational efficiency in the process of domain name matching are improved, and the agent does not need to actively perform domain name resolution on DNS requests, which can simplify the embedding operation.

In step 204, the proxy device establishes a mapping relationship between domain names and IP addresses.

In an implementation, the mapping relationship between the domain name and the IP address may be cached in a list, that is, a list of domain name and IP address relationships. The domain name and IP address relationship list can be cached in a memory map (associated container) list.

The process of caching the mapping relationship between the domain name and the IP address by the proxy device can be summarized as follows: after the proxy device establishes the mapping relationship between the domain name and the IP address, it determines whether the established mapping relationship between the domain name and the IP address has been cached in the relationship list between the domain name and the IP address , specifically, it may be determined whether the established mapping relationship between the domain name and the IP address has been cached in the list through an IP address query; if not, the established mapping relationship between the domain name and the IP address is cached in the domain name and the IP address In the relationship list, if yes, there is no need to cache, and go to the next step; return the domain name resolution result to the original DNS request interface. After the proxy device receives the domain name resolution result sent by the DNS server through the proxy interface, that is, the IP address and port number, it returns the received domain name resolution result to the original DNS request interface, thereby completing the domain name resolution process.

Step 205, after the proxy device initiates the access request from the application layer, obtains the IP address in the access request.

After receiving the IP address sent by the DNS server, the proxy device may send an access request to the server at the IP address to obtain the target data.

Step 206, the agent device determines the domain name corresponding to the IP address in the access request.

The procedure for the agent device to determine the domain name corresponding to the IP address in the access request specifically includes: after obtaining the IP address in the access request, querying the IP address in the list of relationships between domain names and IP addresses; Determine the domain name corresponding to the IP address in the above domain name and IP address relationship list; if the IP address is not found, the process ends.

In step 207, the proxy device judges whether the access request meets proxy conditions based on the domain name.

The proxy device can use the domain name regular expression to perform regular matching on the domain name. If the match is successful, it means that the access request for the domain name meets the proxy conditions; if the match is not successful, it means that the access request does not meet the proxy conditions.

Step 208, if it matches, send the access request to the proxy server.

If the domain name meets the proxy condition, it means that the request to access the IP address needs to be proxied, so the proxy device needs to send a request to access the IP address to the proxy server, and the proxy server sends the access request to the server to be accessed.

In implementation, multiple proxy conditions can be set, that is, multiple domain name regular expressions can be set. Each proxy condition corresponds to a proxy with different functions, for example, an acceleration proxy or an encryption proxy. The proxy device matches the domain name with the regular expression of each domain name, and performs corresponding proxy permission for the access request when the match is successful.

In the embodiment of the present invention, after the IP address is obtained by using the transport layer agent, the domain name corresponding to the IP address is determined, so the data of the agent can be filtered and distributed by using the domain name matching method, and it can also be applied to the access request initiated by the domain name. And because the same domain name can correspond to multiple IP addresses, compared with the IP address matching method, the domain name matching method can simplify the setting of matching conditions.

Referring to Fig. 5, it is a structural block diagram of a proxy device of a transport layer proxy provided by an embodiment of the present invention, the device includes:

A sending module 501, configured to initiate an access request from the application layer;

Obtaining module 502, configured to obtain the IP address in the access request;

A determining module 503, configured to determine the domain name corresponding to the IP address in the access request;

A judging module 504, configured to judge whether the access request meets proxy conditions based on the domain name;

The sending module 501 is further configured to send the access request to a proxy server when the access request meets the proxy condition.

Optionally, the device further includes a receiving module 505 and a creating module 506;

The sending module 501 is further configured to send the DNS request through the proxy interface when the application layer initiates the DNS request;

The receiving module 505 is configured to receive the IP address sent by the DNS server based on the DNS request through the proxy interface;

The creating module 506 is configured to obtain the domain name in the DNS request and the IP address sent by the DNS server from the proxy interface, and establish a mapping relationship between the domain name and the IP address;

Correspondingly, the determining module 503 is specifically configured to determine the domain name corresponding to the IP address in the access request based on the established mapping relationship between the domain name and the IP address.

Optionally, the sending module 501 is specifically used for:

If the operating system is an iOS system, select the original DNS request interface of the OC layer, and use the iOS MethodSwizzling technology to take over the original DNS request interface by the proxy interface, and send the DNS request through the proxy interface;

If the operating system is an Android system, select the original DNS request interface of the java layer, and utilize java reflection technology to take over the original DNS request interface by the proxy interface, and send the DNS request through the proxy interface;

If a custom DNS request is adopted, the original DNS request interface of the native layer is selected, and the function hijacking technology is used to take over the original DNS request interface by the proxy interface, and the DNS request is sent through the proxy interface.

Optionally, the creating module 506 is specifically used for:

Judging whether the established domain name and IP address mapping relationship has been cached in the domain name and IP address relationship list; if not, the established domain name and IP address mapping relationship is cached in the domain name and IP address relationship list;

Correspondingly, the determining module 503 is specifically used for:

Query the IP address in the access request in the domain name and IP address relationship list;

If the search is successful, the domain name corresponding to the IP address in the access request is determined in the domain name-IP address relationship list.

In the embodiment of the present invention, after the IP address is obtained by using the transport layer agent, the domain name corresponding to the IP address is determined, so the data of the agent can be filtered and distributed by using the domain name matching method, and it can also be applied to the access request initiated by the domain name. And because the same domain name can correspond to multiple IP addresses, compared with the IP address matching method, the domain name matching method can simplify the setting of matching conditions.

It should be noted that: the proxy device of the transport layer proxy provided by the above-mentioned embodiment can be realized based on a computer program, and when the device performs screening, it is only illustrated with the division of the above-mentioned functional modules. In practical applications, the The above function allocation is accomplished by different functional modules, that is, the internal structure of the device is divided into different functional modules to complete all or part of the functions described above. In addition, the proxy device of the transport layer proxy provided by the above embodiment and the proxy method embodiment of the transport layer proxy belong to the same concept, and the specific implementation process thereof is detailed in the method embodiment, and will not be repeated here.

Fig. 6 is a schematic structural diagram of an electronic device provided by an embodiment of the present invention. The electronic device 600 may have relatively large differences due to different configurations or performances, and may include one or more central processing units 622 (for example, one or more processors) and memory 632, and one or more storage application programs 642 or The storage medium 630 of the data 644 is also a computer-readable storage medium (such as one or more mass storage devices). Wherein, the memory 632 and the storage medium 630 may be temporary storage or persistent storage. The program stored in the storage medium 630 may include one or more modules (not shown in the figure), and each module may include a series of instruction operations on the electronic device. Furthermore, the central processing unit 622 may be configured to communicate with the storage medium 630 , and execute a series of instruction operations in the storage medium 630 on the electronic device 600 .

Electronic device 600 may also include one or more power supplies 624, one or more wired or wireless network interfaces 650, one or more input and output interfaces 658, one or more keyboards 654, and/or, one or more operating systems 641, such as Windows ServerTM, Mac OS XTM, UnixTM, LinuxTM, FreeBSDTM and so on.

The electronic device 600 may include a memory, and at least one instruction, at least one program, code set or instruction set is stored in the memory, and the at least one instruction, the at least one program, the code set or the instruction set are controlled by the The processor loads and executes the agent method for implementing the above-mentioned transport layer agent.

Those of ordinary skill in the art can understand that all or part of the steps for implementing the above embodiments can be completed by hardware, and can also be completed by instructing related hardware through a program. The program can be stored in a computer-readable storage medium. The above-mentioned The storage medium mentioned may be a read-only memory, a magnetic disk or an optical disk, and the like.

The above descriptions are only preferred embodiments of the present invention, and are not intended to limit the present invention. Any modifications, equivalent replacements, improvements, etc. made within the spirit and principles of the present invention shall be included in the protection of the present invention. within range.

Claims (10)

1. a kind of Proxy Method of transport-layer proxy, which is characterized in that the method is applied to agent apparatus, the method packet It includes:

After application layer initiates access request, the IP address in the access request is obtained；

Determine the corresponding domain name of IP address in the access request；

Judge whether the access request meets the condition of agency based on domain name；

If met, the access request is sent to proxy server.

2. the method according to claim 1, wherein the method also includes:

Application layer initiates DNS request, and sends the DNS request by proxy interface；

The IP address that dns server is sent based on the DNS request is received by the proxy interface；

The domain name in the DNS request and the IP address of dns server transmission are obtained from the proxy interface；

Establish the mapping relations of domain name and IP address；

Correspondingly, the step of IP address in the determination access request corresponding domain name, comprising:

Based on the mapping relations of the domain name and IP address established, the corresponding domain name of IP address in the access request is determined.

3. according to the method described in claim 2, it is characterized in that, the step for sending the DNS request by proxy interface Suddenly, comprising:

If operating system is iOS system, OC layers of original DNS request interface is selected, and utilize iOS Method Swizzling Technology takes over the original DNS request interface by proxy interface, sends the DNS request by the proxy interface；

If operating system is android system, java layers of original DNS request interface is selected, and utilize java reflection technology, by Proxy interface takes over the original DNS request interface, sends the DNS request by the proxy interface；

According to customized DNS request, native layers of original DNS request interface is selected, and kidnaps technology using function, by generation Reason interface takes over the original DNS request interface, sends the DNS request by the proxy interface.

4. according to the method described in claim 2, it is characterized in that, the step of the mapping relations for establishing domain name and IP address Later, comprising:

Judge in domain name and IP address relation list whether the mapping relations of buffered established domain name and IP address；If It is no, the mapping relations of the domain name established and IP address are cached in domain name and IP address relation list；

Correspondingly, the step of IP address in the determination access request corresponding domain name, comprising:

The IP address in the access request is inquired in domain name and IP address relation list；

It is corresponding with the IP address in the access request determining in IP address relation list in domain name if searched successfully Domain name.

5. according to the method described in claim 4, it is characterized in that, domain name and IP address relation list are buffered in memory In map list.

6. a kind of agent apparatus of transport-layer proxy, which is characterized in that described device includes:

Sending module, for initiating access request from application layer；

Module is obtained, for obtaining the IP address in the access request；

Determining module, for determining the corresponding domain name of IP address in the access request；

Judgment module, for judging whether the access request meets the condition of agency based on domain name；

The sending module is also used to when the access request meets and acts on behalf of condition, sends the access to proxy server Request.

7. device according to claim 6, which is characterized in that further include receiving module and creation module；

The sending module is also used to send the DNS request by proxy interface when application layer initiates DNS request；

The receiving module, for by the proxy interface with receiving the IP that sends based on the DNS request of dns server Location；

The creation module, for obtaining domain name and dns server hair in the DNS request from the proxy interface The IP address sent, and establish the mapping relations of domain name and IP address；

Correspondingly, the determining module determines the visit specifically for the mapping relations based on the domain name and IP address established Ask the corresponding domain name of IP address in request.

8. device according to claim 7, which is characterized in that the creation module is specifically used for:

Judge in domain name and IP address relation list whether the mapping relations of buffered established domain name and IP address；If It is no, the mapping relations of the domain name established and IP address are cached in domain name and IP address relation list；

Correspondingly, the determining module, is specifically used for:

The IP address in the access request is inquired in domain name and IP address relation list；

It is corresponding with the IP address in the access request determining in IP address relation list in domain name if searched successfully Domain name.

9. a kind of electronic equipment, which is characterized in that the electronic equipment includes processor and memory, is stored in the memory Have at least one instruction, at least a Duan Chengxu, code set or instruction set, at least one instruction, an at least Duan Chengxu, The code set or instruction set are loaded by the processor and are executed to realize the transmission as described in any in claim 1 to 5 The Proxy Method of layer proxy.

10. a kind of computer readable storage medium, is stored with computer program, which is characterized in that the computer program is located Reason device realizes the Proxy Method of transport-layer proxy described in any one of claims 1 to 5 when executing.