CN102035904A - Method for converting TCP network communication server into client - Google Patents

Abstract

The invention relates to a method for converting a TCP network communication server into a client, comprising: establishing a forwarding server providing data forwarding in the TCP network, at least one internal network server machine establishes a connection with the forwarding server through a command port and a data port ; At least one external network client machine is connected with the forwarding server through the command port and the data port; a TCP network IP address, a command port and a data port are arranged in the forwarding server, and the forwarding server listens to the command port and the data port all the time port; the forwarding server of the present invention is only responsible for processing such as service registration, service query, and communication transfer. A precious resource; the present invention is based on the general implementation method of TCP communication forwarding, the existing server and client software do not need to be modified, and the existing software assets can be fully utilized.

Description

A method for converting TCP network communication server to client

technical field

The present invention is applied to the field of computer network communication, and particularly relates to a method for converting a TCP network communication server into a client. The method adopts a public forwarding server module to realize communication forwarding between an external network client and an internal network server. The server machine does not need to be configured with a fixed IP, nor does it need to modify the existing server and client software, so that the external network machine can access the services on the internal network machine. the

Background technique

In the internal network of the enterprise, in order to ensure network security, a firewall is set up, and only the internal network machine is allowed to be used as the client to connect to the server machine of the external network, and the internal network machine is not allowed to be used as the server to allow the external network machine to connect. For example, machines in the general company intranet can be used as clients to access Internet web pages or FTP servers on the Internet, but machines such as FTP servers in the intranet are not allowed to be accessed by external network machines.

The internal network machine is not allowed to be accessed from the external network as a server. In addition to security factors, another reason is that if the server is accessed from the external network, the server must have a fixed external network IP and port number. Due to the limited number of fixed external network IP resources, they are very valuable, therefore, general enterprises only apply for a few fixed IPs. Through network address translation (NAT) technology, many intranet machines can be allowed to connect to the external network as clients and share these fixed IPs, such as Ethernet. Although the external IP used by each client connection is the same, the port number is different, so there is no conflict between multiple connections. If it is used as a server, not only the IP is required to be fixed, but also the port number of the server is required to be the same. Therefore, multiple server machines with the same port number cannot share the external network IP.

In some application scenarios, it is necessary to allow the internal network machine to be accessed by the external network as a server. For example, if the network administrator needs to remotely connect to the internal network machine through Telnet, SSH, etc. As a server, external network machines are allowed to connect.

There is currently no general solution for this situation where only intranet machines are allowed to be connected to the Internet as clients, and the intranet machines are required to provide external services and allow external network machines to access. Some existing solutions develop special software for different services, and cannot directly utilize existing server software and client software. For example, the foreign TeamViewer software is a specially developed remote desktop control software. After it is installed on the controlled machine, as long as the controlled machine can be connected to the Internet as a client, the TeamViewer client software can be used to remotely control the controlled machine. Information is forwarded between machines through an intermediate server. The domestic 51MyPC software also uses a similar mechanism to realize the remote control function.

The disadvantage of the existing solutions is that different developments must be made for different types of services, and existing server and client software cannot be used. For example, the existing Telnet, SSH, Windows remote desktop, etc. are very mature and widely used network management services, but all must require the server to have a fixed external network IP and port, so that the client program can connect. Currently there is no general method for converting a TCP network communication server to a client, allowing direct use of existing server and client software. the

Contents of the invention

The purpose of the present invention is to propose a technical solution for converting the TCP network communication service end into a client for the above problems. The method adopts a public forwarding server module to realize the communication forwarding between the external network client and the internal network server. , the server machine does not directly expose services to the external network, and the server machine no longer needs to be configured with a fixed IP, which improves the security of the internal network.

In order to achieve the above object, the technical solution of the present invention is, a kind of method that TCP network communication service end is converted into client, comprise forwarding server module, server agent and client machine, the step of described method comprises:

At least one forwarding server module providing data forwarding is set up in the TCP network, a TCP network IP address, a command port and a data port, a data transponder and a user authentication submodule are provided in the forwarding server module, and the forwarding The server module always listens to the command port and the data port, and is ready to receive connections initiated by the server agent and the client machine, and the client machine includes the client agent and the client;

There is at least one intranet server proxy to establish a connection with the forwarding server module through the command port and the data port, and the intranet server proxy is connected to at least one actual service of the intranet server;

At least one client agent of the external network client machine establishes a connection with the forwarding server module through the command port, and a client of the same client machine establishes a connection with the data port of the forwarding server module.

The steps performed by the forwarding server module include: command port monitoring thread processing and data port monitoring thread processing;

The command port monitoring thread processing steps include: after receiving the command connection, user name and password verification are carried out by the user authentication submodule; the password verification is wrong, close the connection, and continue to wait for a new command connection; the password verification is successful, start the command processing thread;

The data port monitoring thread processing step includes: first receiving fixed-length data connection command words and service access ID information, and then receiving data related to specific services, the forwarding server module only parses the fixed-length data at the beginning, and then directly performs Forwarding processing, the data connection command words include "provide service" and "access service", the "provide service" command is sent by the server proxy data connection, and the "access service" command is sent by the client data connection, if "provide service" The connection and the "access service" have the same service access ID, indicating that the two connections correspond to the same service access request. The Socket information of the two connections is passed in and recorded as SocketS1 and SocketS2, and the communication forwarding thread is started.

The steps of the forwarding server module command processing thread are:

a. Judging the command type; for the server proxy service registration command: save the service registration information and the connected Socket information, and return the registration result information; for the client proxy service query command: return the list of all currently registered service information, and then wait for the follow-up The service selection command;

b. After receiving the service selection command, send the service selection command to the corresponding server agent Socket according to the service entry selected in the command;

c. The server agent Socket returns the execution result of the service selection command. If the execution is successful, it returns the service access ID value, and the forwarding server module returns the ID to the client agent; if the execution fails, the forwarding server module returns the error description information to the client acting;

d. Continue to wait for subsequent service selection commands until the thread exits. the

The connection between the command port and the server agent and the client agent adopts an SSL/TLS transport layer encryption mechanism.

The steps performed by the server agent include:

a1. Connect to the command port of the transfer server and send the service registration command;

a2. After the service registration is successful, wait to receive the service selection command until the program is manually closed;

a3. After receiving the service selection command, connect to the corresponding service in the service selection command, create Socket S1, if the connection fails, return an error message, execute step a2, and continue to wait for the service selection command to be received;

a4. If the connection service is successful, use the standard GUID method to generate a random service ID;

a5. Create Socket S2, and send the "provide service" command word + service ID.

a6. If there is an error in connection or sending, return an error message, execute step a2, and continue to wait for the service selection command to be received;

a7. After the connection and sending are successful, the service ID information is returned to the service selection command, and the thread is started to process the service communication forwarding of Socket S1 and Socket S2.

The steps of forwarding the service communication are:

a10. Call the select function to detect whether the data of SocketS1 or SocketS2 is readable;

a11. If SocketS1 is readable, read data from SocketS1 and send to SocketS2; if SocketS2 is readable, read data from SocketS2 and send to SocketS1;

a12. If there is no error, continue to step a10, and perform loop transfer processing;

a13. If there is any error in SocketS1 or SocketS2, or if either party is disconnected, close SocketS1 and SocketS2, and exit the transfer thread.

The steps performed by the client agent include:

b1. Connect to the command port of the forwarding server module, and send the service query command;

b2. According to the return of the service query command, display the list of accessible services;

b3. Wait for the user to select a service;

b4. After the user chooses to access, send a service selection command. If the return fails, an error message will be prompted, and step b3 will be executed to allow the user to continue to choose other services, or exit the program;

b5. After the service selection command returns successfully, save the returned service access ID;

b6. Register the Socket Hook module, so that the module can intercept the call to the socket connect function in the subsequent client program;

b7. Start the sub-process of the client program corresponding to the service, and pass in the IP and data port of the forwarding server module as connection parameters. After the sub-process is started, the main program executes step b3, allowing the user to continue to select other services.

The steps performed by the Socket Hook module include, after intercepting the calling of the socket connect function in the client program, at first calling the connect function of the client operating system itself; Whether the process ID is a client subprocess started by a client agent, if not, the module returns directly to the main program; if it is a client subprocess started by a client agent, the client agent will return the service access corresponding to the subprocess at the same time ID, the Socket Hook module sends the "service access" command word + the corresponding service access ID to the server, and then returns to the main program.

The present invention's contribution to prior art is:

1. The server machine does not directly expose services to the external network, which improves the security of the internal network, no longer needs to configure a fixed IP, reduces the precious resource of fixed IP, and can save costs for the company.

2. The network transfer is a pure data transfer mechanism without other additional processing logic, so the communication efficiency of this method is very high.

3. Communication forwarding is based on TCP protocol layer forwarding, and supports a wide range of services, such as Windows remote desktop, VNC, TELNET, SSH and other TCP-based services can be used.

4. This invention is a general implementation method based on TCP communication forwarding. The existing server and client software do not need to be modified, and existing software assets can be used.

5. Through the multi-server agent and multi-public forwarding server module mechanism, the client software can access the corresponding services through different public forwarding server modules, which greatly improves the fault tolerance of the system.

6. The public forwarding server module is only responsible for service registration, service query, communication transfer, etc., and its processing logic has nothing to do with specific services; therefore, a third party can build a public forwarding server module to provide commercial or free communication forwarding services.

The present invention will be described in detail below in conjunction with the embodiments and accompanying drawings.

Description of drawings

Fig. 1 is a logical block diagram of the method system of the present invention;

Fig. 2 is a logical flowchart of command port monitoring thread processing;

Fig. 3 is the processing logic flowchart of command processing thread;

Fig. 4 is a flow chart of data port monitoring thread processing logic;

Fig. 5 is a flow chart of the processing logic of the server agent processing module;

Fig. 6 is the processing logic of the client agent processing module.

Detailed ways

A kind of method embodiment that TCP network communication service end is converted into client, referring to Fig. 1, comprise forwarding server module 1, server agent 2 and client machine 3, the steps of described method comprise:

At least one forwarding server module providing data forwarding is set up in the TCP network. The forwarding server module is provided with a TCP network IP address, a command port 1-1 and a data port 1-2, a data transponder and a The user authentication submodule, the forwarding server module always listens to the command port and the data port, and is ready to receive the connection initiated by the server agent and the client machine, and the client machine includes the client agent and the client;

There is at least one intranet server agent to establish a connection with the forwarding server module through the command port and the data port, and the intranet server agent is at least connected to the actual service of an intranet server 4; wherein the intranet server agent can be in In the same server or not in the same server;

At least one client agent of the external network client machine establishes a connection with the forwarding server module through the command port, and a client of the same client machine establishes a connection with the data port of the forwarding server module.

Of course, as shown in Figure 1, in the actual application, there are not only one server and client machines but multiple ones. As an intranet server, only one server agent needs to be deployed, and the server agent is a service program. , the program supports a variety of different actual services located on this server or other intranet servers connected to it, such as Telnet, SSH, Windows Remote Desktop and other services, and Telnet, SSH, Windows Remote Desktop and other services will no longer Provide directly to the external network.

The service program in the server can also be located on other servers that the server can access, so that the server can be used as an internal forwarding server in the intranet, as long as this machine can connect to the external network (TCP network ) forwarding server module. In this deployment method, the forwarding efficiency of the server proxy will be slightly reduced, but only this server needs to be connected to the external network, thus increasing network security. The server agent program itself has nothing to do with the platform, and the operating system of the server in this deployment mode is not limited to the operating platform supported by the actual service program. For example, you can deploy a Linux machine with a server agent installed on it, and access Windows Remote Desktop Services on other servers through this machine.

The server agent supports connecting multiple forwarding server modules at the same time, therefore, multiple public forwarding server modules can be established and deployed to improve system fault tolerance.

The forwarding server module mainly provides functions of service registration, service query, service selection and service access forwarding.

The forwarding server module has a fixed external network IP, and both the client machine and the server agent need to be able to access the forwarding server module. Therefore, as each user network, there is no need to deploy a server that can be accessed by the external network, as long as the server of the user network can access the forwarding server module located on the external network as a service client, so the server here can be regarded as a Serving clients.

The forwarding server module described in this embodiment includes a forwarding server module program processing module, the server agent is a server agent processing module, the client agent is a client agent processing module, and the client is a client processing module where the client agent processing module and the client processing module are in the same client machine.

The forwarding server module program processing module is a background service program processing module that provides service registration, service query, service selection and service access forwarding functions, and supports Windows, Linux and other system platforms. The specific description of the forwarding server module program processing logic is as follows:

After the forwarding server module program is started, as the server of TCP communication, two threads are opened to listen to the command port and the data port respectively; the specific values of these two ports can be set arbitrarily within the legal range of the TCP port, in order to avoid modifying the service as much as possible It is best to set these two ports to common port values, such as port 80 and port 21;

Therefore, the steps performed by the forwarding server module include: command port monitoring thread processing and data port monitoring thread processing.

The command port monitoring thread processing logic is:

a. Listen to the command port and wait for the command connection; since the command connection will transmit sensitive information such as user name and password, the connection adopts the standard SSL/TLS transport layer encryption mechanism to encrypt the connection communication;

b. After receiving the command connection, verify the user name and password; the user name and password are configured in the forwarding server module through the user authentication sub-module, the purpose is to prevent unauthorized command access;

c. Password verification error, close the connection directly, return to a, and continue to wait for a new command connection;

d. If the password verification is successful, the command processing thread is started and the command is processed separately; the thread mode is used to enable the subsequent new command connection to be processed in time.

The processing logic of the command processing thread is:

e. Determine the command type;

e1. For the server service registration command, save the service registration information and the Socket information of the connection, and return the registration result information;

The service registration command includes information such as service registration command word, server agent ID, forwarding server module user name, forwarding server module password, message length, server machine description, and service information list; each in the service information list Each service item includes service IP, service port, service type, service description and other fields; the server proxy ID is the unique identification of the server proxy.

After the service registration command processing is completed, the command processing thread exits; before exiting, the Socket information connected by the server proxy must be saved together, and will be used for command interaction in subsequent service selection processing;

e2. For the client proxy service query command, return the list of all service information currently registered and the user has the right to access, and then wait for the subsequent service selection command until the connection is disconnected before exiting the thread;

f. After receiving the service selection command, send the service selection command to the corresponding server agent Socket according to the service item selected in the command.

The content of the service selection command includes the service selection command word, server proxy ID (the IP is not used because multiple server proxy IPs may be the same), service IP, service port, etc.

g. The server agent Socket returns the execution result of the service selection command. If the execution is successful, it will return the service access ID value, and the forwarding server module will return the ID to the client agent; if the execution fails, the forwarding server module will return the error description information to the client. end agent.

The service access ID is a unique ID randomly generated by the server agent, and GUID can be used. According to the ID, the forwarding server module communicates and forwards the two data connections respectively established by the client and the server agent whose IDs match.

h. Continue to wait for subsequent service selection commands until the connection is disconnected before exiting the thread.

The data port monitoring thread processing logic is:

i. Listen to the data port and wait for the data connection.

j. After receiving the data connection, save the connection Socket and the corresponding service access ID;

The forwarding server module first receives the fixed-length data connection command word and service access ID information, and then the data related to the specific service. The forwarding server module only parses the fixed-length data at the beginning, and the subsequent specific service-related data Don't care about the specific content of , and directly carry out subsequent forwarding processing;

The data connection command word has two kinds of "provide service" and "access service", the "provide service" command is sent by the server proxy data connection, and the "access service" command is sent by the client proxy data connection;

k. Compare service IDs;

If the service access ID corresponding to the connection is not found, it indicates that the matching connection has not been established. After saving the connection Socket and service access ID information, go to i and continue to wait for a new data connection;

If a "providing service" connection has the same service access ID as an "access service", it indicates that the two connections correspond to the same service access request, and the Socket information of the two connections is passed in and recorded as SocketS1 and SocketS2 , start the communication forwarding thread, then go to i, continue to wait for new data connection.

The communication forwarding logic to two Socket S1 and SocketS2 in described communication forwarding thread is:

l. Call the select function to check whether the data of SocketS1 or SocketS2 is readable?

m. If SocketS1 is readable, read data from SocketS1 and send to SocketS2; if SocketS2 is readable, read data from SocketS2 and send to SocketS1;

n. If there is no error, continue to execute step 1 to perform circular transfer processing;

o. If there is any error in SocketS1 or SocketS2, or if either party is disconnected, close SocketS1 and SocketS2, and exit the transfer thread.

The forwarding server module provides user management functions. Users are divided into two categories: "Service Admin Users" and "Service Access Users". The service administrator user can be manually configured in the forwarding server module, or use the user self-registration method (registered users need to be reviewed to take effect). The server agent needs to provide the user name and password of the service administrator when registering the service. Use the service administrator username and password to access all services registered with it. The service administrator user can log in to the user management module of the forwarding server module, create a new service access user, and set which services the user can access. User password and access authority verification work is carried out in the forwarding server module, but which services the user can access is determined by the service administrator of the service provider, not by the administrator of the forwarding server module.

The server agent processing module is a background service module, the processing module uses the server machine as a client to connect to the forwarding server module, and simultaneously connects to the service provided by this machine or other local machines in the network to realize service registration and service communication Transit function.

The server agent processing module supports multiple platforms such as Linux and Windows, and if it is deployed with specific services, it can only be deployed on the system platforms supported by the services.

In the server agent processing module, it is necessary to configure a list of service information that the server agent processing module can access, including service IP (default is local IP: 127.0.0.1), service port, service description, etc.

In a subnet, independent server agent processing modules can be configured on multiple machines, which greatly improves the fault tolerance of the system.

The processing logic of the server agent processing module is:

The server agent process starts;

a1. Connect to the command port of the forwarding server module, and send the service registration command;

For the content of the service registration command, refer to the description of the service registration command in the processing logic of the forwarding server module, where the server agent ID can be a unique ID automatically generated by the server agent processing module, and GUID can be used;

a2. After the service registration is successful, wait to receive the service selection command until the program is manually closed;

a3. After receiving the service selection command, connect to the corresponding service in the service selection command, create Socket S1, if the connection fails, return an error message, execute step a2, and continue to wait for the service selection command to be received;

a4. If the connection service is successful, use the standard GUID method to generate a random service ID;

a5. Connect to the data port of the forwarding server module, create Socket S2, and send the "provide service" command word + service ID.

a6. If there is an error in connection or sending, return an error message, execute step a2, and continue to wait for the service selection command to be received;

a7. After the connection and sending are successful, the service ID information is returned to the service selection command, and the thread is started to process the service communication forwarding of the two Sockets, Socket S1 and Socket S2. After the thread is started, execute step a2 and continue to wait for the service selection command to be received;

The service communication forwarding processing logic is the same as the communication forwarding logic of the forwarding server module.

a10. Call the select function to detect whether the data of SocketS1 or SocketS2 is readable.

a11. If SocketS1 is readable, read data from SocketS1 and send to SocketS2; if SocketS2 is readable, read data from SocketS2 and send to SocketS1;

a12. If there is no error, continue to step a11 to perform circular transfer processing;

a13. If there is any error in SocketS1 or SocketS2, or if either party is disconnected, close SocketS1 and SocketS2, and exit the transfer thread.

After simple modification on the basis of the above process, the server agent processing module can support the simultaneous registration function to a plurality of different forwarding server modules: after the program is started, a thread is respectively started for each forwarding server module configured, and the Executing the above process steps in each thread can support multiple public forwarding server modules. In this way, the client agent processing module can access the services relayed by the server agent processing module through different forwarding server modules, which provides the fault tolerance of the system.

The client agent processing module is a program module with an interface, which is used as a client to connect with the public forwarding server module to realize functions such as displaying a service list, selecting a service, and accessing a service.

After the user selects a service in the service list of the client agent processing module, the server agent processing module will start the client program corresponding to the service, connect with the data port of the forwarding server module, pass the transfer of the forwarding server module, and the server The relay of the proxy realizes the access function to the service.

The system requires that after the data connection between the client and the forwarding server module is established, first send the "service access" command word + corresponding service access ID to the forwarding server module, so that the forwarding server module can connect the data connection with the corresponding server agent data connection Match and forward the communication.

However, the client programs are generally existing programs, most of which do not have source codes, so the client programs cannot be directly modified. You can use the Socket interface provided by Winsock SPI, or use the general Windows API Hook method to write a Socket Hook module, and use this module to intercept calls to the socket connect function by all network communication programs including client programs. There is communication between the Socket Hook module and the client agent program. This module judges that if the caller to connect is the client subprocess started by the client agent program, after the connect is successful, it first sends the "service access" command word + the corresponding Service access ID. The above functions can also be realized through connection transfer. The client agent starts the client program to connect to the local port monitored by the client agent, and the communication data is forwarded to the forwarding server module through the client agent, but the efficiency of communication forwarding will be slightly reduced once more. Therefore, this solution recommends using the Socket Hook module.

The processing logic of the client agent processing module is:

Client agent handles startup;

b1. Connect to the command port of the forwarding server module, and send the service query command;

b2. According to the return of the service query command, display the list of accessible services;

b3. Wait for the user to select a service;

b4. After the user chooses to access, send a service selection command; if the return fails, an error message will be prompted, and step b3 will be executed to allow the user to continue to select other services, or exit the program;

For the specific content of the service selection command, refer to the description of the service selection command in the processing logic of the forwarding server module.

b5. After the service selection command returns successfully, save the returned service access ID;

b6. Register the Socket Hook module, so that the module can intercept the call to the socket connect function in the subsequent client program;

b7. Start the sub-process of the client program corresponding to the service, and pass in the IP and data port of the public forwarding server module as connection parameters. After the child process is started, the main program executes step b3, allowing the user to continue to select other services;

b8. The client program will call the socket connect function to establish a connection with the data port of the forwarding server module. Since the Socket Hook module is registered, the client's call to the socket connect function will enter the custom connect function of the Socket Hook module;

The following is the processing logic of the Socket Hook module.

c1. The Socket Hook module first calls the connect function of the operating system itself;

The Socket Hook module obtains the process ID currently executing the connect function, and queries the client agent module whether the process ID is a client subprocess started by the client agent module. If not, the module returns directly;

c2. If the client subprocess is started by the client proxy module, the client proxy module will return the service access ID corresponding to the sub process at the same time, and the Socket Hook module will send the "service access" command word + the corresponding service access ID to the server ;

c3. The module returns, and continues to execute the internal processing logic of the client program until the user closes the client program and the child process exits.

Finally, it should be noted that the above is only used to illustrate the technical solution of the present invention and not to limit it. Although the present invention has been described in detail with reference to the preferred arrangement, those skilled in the art should understand that the technical solution of the present invention can be modified Or equivalent replacement (for example: deploy 2 or more public forwarding server modules to improve the reliability of the overall system work; or provide dedicated forwarding server modules for some users with high confidentiality requirements; in some real-time For applications with high requirements, if necessary, each server device in some client intranets can be configured with an independent server agent processing module, etc.), without departing from the spirit and scope of the technical solution of the present invention. the

Claims (8)

1. one kind is converted to the method for client with TCP network communication services end, it is characterized in that comprise forwarding server module, service end agency and client machine, the step of described method comprises:

Have at least one to provide the forwarding server module of data forwarding to be based upon in the TCP network, be provided with a TCP network ip address in the forwarding server module, be provided with command port and FPDP, be provided with a data transponder and an authentification of user submodule, the forwarding server module is snoop command port and FPDP all the time, prepare to receive service end agency and being connected that client machine is initiated, described client machine comprises Client Agent and client;

Have at least Intranet service end agency to connect with the forwarding server module by described command port and FPDP, described Intranet service end is acted on behalf of the active service that connects an Intranet service end at least;

Have at least the Client Agent of an outer net client machine to connect by described command port and forwarding server module, the FPDP of the client of same client machine and forwarding server module connects.

2. according to claim 1ly a kind of TCP network communication services end is converted to the method for client, it is characterized in that the step that described forwarding server module is carried out comprises: the command port watcher thread is handled and the processing of FPDP watcher thread;

Described command port watcher thread treatment step comprises: receive orders after the connection, carry out user name, password authentification by the authentification of user submodule; Password authentification makes mistakes, and closes this connection, continues to wait for that new order connects; The password authentification success, the starting command processing threads;

Described FPDP watcher thread treatment step comprises: the data bind command word and the service access id information that receive fixed length earlier, receive then and the relevant data of concrete service, described forwarding server module is only resolved the fixed-length data of beginning, directly transmit processing then, described data bind command word has " service is provided " and " access services ", order connects transmission by the service end proxy data " to provide service ", " access services " order connects transmission by client data, connection has identical service access ID with " access services " if " provide service ", what show these two connection correspondences is same service access request, import the Socket information of two connections into and be designated as SocketS1 and SocketS2, start communication and transmit thread.

3. according to claim 2ly a kind of TCP network communication services end is converted to the method for client, it is characterized in that the step of described forwarding server module command processing threads is:

A. judge command type; For service end agency service log-in command: preserve the Socket information that service registry information is connected with this, return registering result information; For Client Agent service-seeking order: return all information on services tabulations of present registration, wait for follow-up services selection order then;

B. after receiving the services selection order,, act on behalf of Socket to the service end of correspondence and send the services selection order according to the service listings of selecting in the order;

C. service end is acted on behalf of Socket and is returned the services selection command execution results, if run succeeded, returns service access ID value, and the forwarding server module returns to Client Agent with this ID; If carry out failure, the forwarding server module returns to Client Agent with error description information;

D. continue after to wait for follow-up services selection order, up to withdrawing from this thread.

4. according to claim 1ly a kind of TCP network communication services end is converted to the method for client, it is characterized in that, described command port and service end agency and Client Agent be connected employing SSL/TLS transport layer encryption mechanism.

5. according to claim 1ly a kind of TCP network communication services end is converted to the method for client, it is characterized in that the step that described service end agency carries out comprises:

A1. connect the transfer server command port, send the service registry order;

A2. after the service registry success, wait for receiving the services selection order, up to program by manual-lock;

A3. after receiving the services selection order, Socket S1 is created in the service of correspondence in the Connection Service select command, makes mistakes if connect, and returns error message, and execution in step a2 continues to wait for the order of reception services selection;

If a4. Connection Service success, the GUID mode of employing standard generates service ID at random;

A5. create Socket S2, send " service is provided " command word+service ID;

Make mistakes if a6. connect or send, return error message, execution in step a2 continues to wait for the order of reception services selection;

A7. after connecting and sending successfully, return service ID information to the services selection order, the communication for service that starts thread process Socket S1 and Socket S2 is transmitted.

6. according to claim 5ly a kind of TCP network communication services end is converted to the method for client, it is characterized in that the step that described communication for service is transmitted is:

A10. call the select function, whether the data that detect SocketS1 or SocketS2 are readable;

If a11. SocketS1 is readable, send to SocketS2 from the SocketS1 reading of data; If SocketS2 is readable, send to SocketS1 from the SocketS2 reading of data;

If a12. there is not mistake, continue execution in step a10, the transfer that circulates is handled;

If a13. any mistake appears in SocketS1 or SocketS2, perhaps either party connects disconnection, closes SocketS1 and SocketS2, withdraws from the transfer thread.

7. according to claim 1ly a kind of TCP network communication services end is converted to the method for client, it is characterized in that the step that described Client Agent is carried out comprises:

B1. connect forwarding server module command port, send the service-seeking order;

B2. return the service list that demonstration can be visited according to the service-seeking order;

B3. wait for that the user selects certain service;

B4. after the user selects visit, send the services selection order, if return failure, the prompting error message, execution in step b3 allows the user to continue to select other services, perhaps quits a program;

B5. after the services selection order returns success, preserve the service access ID that returns;

B6. register Socket Hook module, this module can be intercepted and captured in the subsequent client program socket connect function calls;

B7. start service clients corresponding program subprocess, the IP that imports the forwarding server module into and FPDP be as being connected parameter, after subprocess starts, and main program execution in step b3, the permission user continues to select other services.

8. a kind of method that TCP network communication services end is converted to client according to claim 7, it is characterized in that, the step that described Socket Hook module is carried out comprises, to after the socket connect function calls, at first call the connect function of client operating system self in the intercepting and capturing client-side program; Whether obtain the process ID of current execution connect function then, inquiring about this process ID to Client Agent is the client subprocess that is started by Client Agent, if not, this module directly turns back to main program; If the client subprocess that starts by Client Agent, Client Agent can return the service access ID of this subprocess correspondence simultaneously, Socket Hook module turns back to main program then to the service access ID of service end transmission " service access " command word+correspondence.

Images