CN111510300A - Data processing method, device, equipment and computer readable storage medium - Google Patents

Abstract

The present invention provides a data processing method, device, device and computer-readable storage medium. The method includes: acquiring and storing a network request packet sent by a terminal device; signing the network request packet with a preset security certificate to obtain a target data packet ; When the preset trigger condition is met, send the target data packet to the cloud resource pool where the target Internet Protocol address is located. By transmitting the network request packet when the acquired network request packet sent by the terminal device satisfies the preset trigger condition, it is possible to avoid frequently sending requests to the cloud resource pool. In addition, by performing a signature operation on the network request packet before transmitting the network request packet, the subsequent cloud resource pool can verify the target data packet according to the signature, thereby effectively avoiding the DDOS attack on the server and preventing the switch from being attacked. specification requirements are low.

Description

Data processing method, apparatus, device, and computer-readable storage medium

technical field

The present invention relates to the field of the Internet, and in particular, to a data processing method, apparatus, device, and computer-readable storage medium.

Background technique

In most current applications, in order to maintain efficient communication between the client and the server, it is necessary to keep the client online for a long time. For example, map applications and game applications that need to refresh the page display data in real time need to keep the client online for a long time. . However, in the process of interacting with the server, the long-lived application needs to send heartbeat messages frequently. As a result, the number of requests sent to the server increases, which is easy to be imitated, and the server suffers from a Distributed Denial of Service (DDoS) attack. In addition, it will also lead to an increase in network traffic, which is likely to cause network congestion, and the common way of determining by sending request packets multiple times based on the IP address will cause technical problems of manslaughter.

In order to solve the above problem, in the prior art, the synchronization request from the same IP address is generally discarded, so as to achieve the purpose of cleaning traffic, reducing the large-traffic cleaning of the server, and ensuring the stability and normality of the server's service.

However, the above method can only be intercepted on the core switch, and cannot really reduce the traffic in the network, and the pressure on the ingress switch is relatively large, and the Internet content providers that require cloud computing servers are equipped with high-standard switches.

SUMMARY OF THE INVENTION

The present invention provides a data processing method, device, device and computer-readable storage medium, which are used to solve the technical problem that the existing data processing method has high requirements on equipment and cannot effectively reduce traffic in the network.

A first aspect of the present invention is to provide a data processing method, comprising:

Obtaining and storing a network request packet sent by the terminal device, where the network request packet includes application process information, target Internet Protocol address, and the identifier of the application server to be sent;

Sign the network request package by using the preset security certificate to obtain the target data package;

When a preset trigger condition is satisfied, the target data packet is sent to the cloud resource pool where the target Internet Protocol address is located.

In a possible design, when a preset trigger condition is met, the network request packet is signed by a preset security certificate to obtain a target data packet, including:

If it is detected that the packet length of the currently obtained network request packet exceeds a preset length threshold, the target data packet is sent to the cloud resource pool where the target Internet Protocol address is located.

In a possible design, when a preset trigger condition is met, the network request packet is signed by a preset security certificate to obtain a target data packet, including:

If the current time for obtaining the network request packet exceeds a preset time threshold, the target data packet is sent to the cloud resource pool where the target Internet Protocol address is located.

In a possible design, signing the network request package with a preset security certificate includes:

The network request package is signed by the security certificate in the preset sim module.

A second aspect of the present invention is to provide a data processing method, which is applied to a cloud resource pool, the cloud resource pool includes an edge check node and a cloud resource pool border gateway, and the method includes:

Obtain a target data packet sent by the data processing device, where the target data packet is sent when a preset trigger condition is satisfied after the data processing device signs the network request packet with a preset security certificate, wherein the network The request packet includes application process information, target internet protocol address and the identifier of the application server to be sent;

Verify the signature of the target data packet by the edge check node;

When the verification is passed, the target data packet is sent to the border gateway of the cloud resource pool where the target Internet Protocol address is located.

In a possible design, after verifying the signature of the target data packet by the edge checking node, the method further includes:

When the verification fails, the target data packet is sent to a preset black hole route for processing.

In a possible design, after the sending the target data packet to the cloud resource pool border gateway where the target Internet Protocol address is located, the method further includes:

The target internet protocol address and target port number in the target data packet are replaced by the preset internet protocol address and port number through the cloud resource pool border gateway.

In a possible design, after the sending the target data packet to the cloud resource pool border gateway where the target Internet Protocol address is located, the method further includes:

Determine the correspondence between the channel identifier for transmitting the target data packet, the sequence number corresponding to the target data packet, the target Internet Protocol address, and the target port number through the cloud resource pool border gateway;

The target data packet is sent to the application server to be sent through the cloud resource pool border gateway.

A third aspect of the present invention provides a data processing device, comprising:

an acquisition module, configured to acquire and store a network request packet sent by the terminal device, where the network request packet includes application process information, a target Internet Protocol address and an application server identifier to be sent;

a signature module, configured to sign the network request package through a preset security certificate to obtain a target data package;

A sending module, configured to send the target data packet to the cloud resource pool where the target Internet Protocol address is located when a preset trigger condition is met.

A fourth aspect of the present invention is to provide a cloud resource pool, the cloud resource pool includes an edge inspection node and a cloud resource pool border gateway, and the cloud resource pool includes:

A data packet acquisition module, configured to acquire a target data packet sent by the data processing device, where the target data packet is sent when a preset trigger condition is met after the data processing device signs the network request packet with a preset security certificate , wherein the network request packet includes application process information, target Internet Protocol address and the identifier of the application server to be sent;

a verification module, configured to verify the signature of the target data packet through the edge check node;

A processing module, configured to send the target data packet to the cloud resource pool border gateway where the target Internet Protocol address is located when the verification is passed.

A fifth aspect of the present invention is to provide a data processing device, comprising: a memory, and a processor;

memory; memory for storing instructions executable by the processor;

Wherein, the processor is configured to execute the data processing method according to the first aspect or the second aspect by the processor.

A sixth aspect of the present invention is to provide a computer-readable storage medium, wherein computer-executable instructions are stored in the computer-readable storage medium, and when the computer-executable instructions are executed by a processor, are used to implement the first aspect or the first aspect. The data processing method described in the second aspect.

The data processing method, device, device and computer-readable storage medium provided by the present invention can avoid frequent network request packets by transmitting the network request packets when the acquired network request packets sent by the terminal equipment meet the preset trigger conditions. Send a request to the cloud resource pool. In addition, by performing a signature operation on the network request packet before transmitting the network request packet, the subsequent cloud resource pool can verify the target data packet according to the signature, thereby effectively avoiding the DDOS attack on the server and preventing the switch from being attacked. specification requirements are low.

Description of drawings

In order to illustrate the embodiments of the present invention or the technical solutions in the prior art more clearly, the following briefly introduces the accompanying drawings that need to be used in the description of the embodiments or the prior art. Obviously, the drawings in the following description are For some embodiments of the present invention, those of ordinary skill in the art can also obtain other drawings according to these drawings.

1 is a schematic diagram of a system architecture on which the present invention is based;

2 is a schematic flowchart of a data processing method provided in Embodiment 1 of the present invention;

3 is a schematic diagram of an application scenario provided by an embodiment of the present invention;

4 is a structural diagram of a data processing apparatus provided by an embodiment of the present invention;

5 is a schematic flowchart of a data processing method according to Embodiment 2 of the present invention;

6 is a schematic structural diagram of a data processing apparatus according to Embodiment 3 of the present invention;

7 is a schematic structural diagram of a cloud resource pool according to Embodiment 4 of the present invention;

FIG. 8 is a schematic structural diagram of a data processing device according to Embodiment 5 of the present invention.

Detailed ways

In order to make the purposes, technical solutions and advantages of the embodiments of the present invention clearer, the technical solutions in the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings in the embodiments of the present invention. Obviously, the described embodiments These are some embodiments of the present invention, but not all embodiments. All other embodiments obtained based on the embodiments of the present invention belong to the protection scope of the present invention.

Glossary:

DDOS: Distributed Denial of Service attack refers to the use of client/server technology to combine multiple computers as an attack platform to launch DDoS attacks on one or more targets, thereby multiplying the risk of denial of service attacks. power. Typically, an attacker uses a stolen account to install a DDoS master program on a computer, and at a set time the master program will communicate with a large number of agents, which have been installed on many computers on the network. The agent attacks when instructed to do so. Using client/server technology, the host program can activate hundreds of agent runs in seconds.

Internet Protocol Address (IP address for short): IP address is a unified address format provided by the IP protocol. It assigns a logical address to each network and each host on the Internet to shield physical address differences.

Aiming at the above-mentioned technical problems that the existing data processing methods have higher requirements on equipment and cannot effectively reduce traffic in the network, the present invention provides a data processing method, apparatus, equipment and computer-readable storage medium.

It should be noted that the data processing method, apparatus, device and computer-readable storage medium provided by this application can be applied in various data transmission scenarios.

For example, this application can be applied in the field of games. If the game server cannot receive/process the data packets sent by the client in time, the user will experience screen freezes, delayed skill release, and poor player communication. may even cause the client to drop out. The hearty game experience is gone, which seriously affects the player's experience and retention.

For example, this application can be applied in the field of cloud computing. In the field of cloud computing, if there are some servers that cannot receive/process the data packets sent by the client in time, the client of the server will lose communication and cannot browse the relevant information. Information, or webpage data cannot be updated, for example, the securities industry cannot see real-time updated information on changes in securities indices, resulting in investment mistakes. As a result, the security and stability of cloud computing services are greatly reduced, and the operating profits of cloud computing enterprises are reduced on a large scale with the loss of potential.

In order to avoid being attacked by ddos, in the prior art, when the amount of synchronization request data obtained by the server is large, the synchronization request from the same IP address is discarded, which has achieved the purpose of reducing the amount of data and ensured the normal operation of the server. However, the above method can only intercept on the core switch, which puts a lot of pressure on the ingress switch, and requires high-standard switches around the Internet content provider of the cloud computing server.

Therefore, in order to reduce the demand for equipment on the basis of reducing the amount of data, the inventor found in the research process that different trigger conditions can be preset, and when the trigger conditions are met, the network request packet is sent. Thus, frequent sending of network request packets can be avoided.

The inventor has further researched and found that when the acquired network request packet sent by the terminal device satisfies the preset trigger condition, the network request packet is transmitted, thereby avoiding frequently sending requests to the cloud resource pool. In addition, by performing a signature operation on the network request packet before transmitting the network request packet, the subsequent cloud resource pool can perform a verification operation on the target data packet according to the signature, thereby effectively avoiding DDOS attacks on the server.

FIG. 1 is a schematic diagram of a system architecture on which the present invention is based. As shown in FIG. 1 , the system architecture on which the present invention is based at least includes: a terminal device 1 and a data processing apparatus 2 . The testing device 2 is written in languages such as C/C++, Java, Shell, or Python; the terminal device 1 can be, for example, a desktop computer, a tablet computer, or the like. The terminal device 1 is connected in communication with the data processing apparatus 2, so as to be able to exchange information with the data processing apparatus.

FIG. 2 is a schematic flowchart of a data processing method according to Embodiment 1 of the present invention. As shown in FIG. 2 , the method includes:

Step 101: Acquire and store a network request packet sent by a terminal device, where the network request packet includes application process information, a target Internet Protocol address, and an identifier of an application server to be sent.

The execution body of this embodiment is a data processing apparatus, and the data processing apparatus is communicatively connected with the terminal device, so as to be able to perform information interaction with the terminal device. It should be noted that the data processing apparatus may be installed in the terminal equipment, or may be an apparatus independent of the terminal equipment.

In this embodiment, when the application software installed on the terminal device needs to perform data update, a network request packet can be sent to the data processing apparatus. Correspondingly, after acquiring the network request packet sent by the terminal device, the data processing apparatus may temporarily not perform the forwarding operation on the network request packet. The network request packet may be temporarily stored, and when the stored network request packet meets a preset condition, the network request packet is sent. Wherein, the network request packet includes application process information, target internet protocol address and the identifier of the application server to be sent.

Specifically, the network request packet is sent by the terminal device after being signed by the security certificate preset by the terminal. Therefore, after the data processing device obtains the network request packet, it first needs to verify the network request packet, and after the verification is passed, then Store network request packets.

Step 102: Sign the network request packet with a preset security certificate to obtain a target data packet.

In this embodiment, after acquiring and storing the network request packet sent by the terminal device, the network request packet is signed by using a preset security certificate to obtain the target data packet to be transmitted.

Specifically, the network request package may be signed by the security certificate in the preset sim module. If the data processing device is installed on a terminal device such as a mobile phone, the signature operation can be performed through the SIM card module that comes with the mobile phone; if the data processing device is installed on a terminal device such as a computer, since the terminal device does not have a SIM module, then First, a SIM module needs to be set on the terminal device, and then a signature operation is performed through the SIM card module.

Step 103: When a preset trigger condition is satisfied, send the target data packet to the cloud resource pool where the target Internet Protocol address is located.

In this embodiment, it can be determined whether the currently acquired target data packet satisfies a preset trigger condition. When the trigger condition is satisfied, the data processing apparatus may send the target data packet to the cloud resource pool where the target Internet Protocol address is located. Therefore, the subsequent cloud resource pool can forward the target data packet to the application server to be sent according to the identifier of the application server to be sent.

FIG. 3 is a schematic diagram of an application scenario provided by an embodiment of the present invention. As shown in FIG. 3, when a user browses a page through application software, the page can be refreshed by pulling down. The data processing device sends a network request packet, and performs a page refresh operation according to the data fed back by the server. The page may specifically be a weather reference information page, and the user can obtain the latest weather by pulling down.

FIG. 4 is a structural diagram of a data processing apparatus provided by an embodiment of the present invention. As shown in FIG. 4 , the solid line represents the structure of an existing data processing apparatus, including an application layer, a socket abstraction layer, a transport layer, a network layer, and a link layer , the dotted line is the newly added module of the present invention, including an encryption module and an interception module. The application layer is used to obtain the network request packet triggered by the user. After obtaining the network request packet sent by the application layer, the encryption module encrypts the network request packet through the SIM module, and the interception module encrypts the encrypted target data packet. Storage, when the preset trigger conditions are met, the target data packet is sent to the hardware interface in the link layer, so that the hardware interface can send the target data packet to the cloud resource pool through the transmission medium.

Further, on the basis of Embodiment 1, step 103 specifically includes:

If it is detected that the packet length of the currently obtained network request packet exceeds a preset length threshold, the target data packet is sent to the cloud resource pool where the target Internet Protocol address is located.

In this embodiment, the preset trigger condition may be that the length of the packet exceeds the preset length threshold. If it is detected that the packet length of the currently obtained network request packet exceeds the preset length threshold, the target data The packet is sent to the cloud resource pool where the target Internet Protocol address is located. Thus, the service pressure caused by frequently sending target data packets can be effectively avoided. The length threshold may be a default empirical value, or may be set by a user according to actual needs, which is not limited in the present invention.

Further, on the basis of Embodiment 1, step 103 specifically includes:

If the current time for obtaining the network request packet exceeds a preset time threshold, the target data packet is sent to the cloud resource pool where the target Internet Protocol address is located.

In this embodiment, the preset trigger condition may be that the time for acquiring the network request packet exceeds a preset time threshold, and if the current time for acquiring the network request packet exceeds the preset time threshold, the preset security certificate The network request packet is signed to obtain the target data packet. Thus, the service pressure caused by frequently sending target data packets can be effectively avoided. The time threshold may be a default empirical value, or may be set by a user according to actual needs, which is not limited in the present invention.

The data processing method provided by this embodiment can avoid sending requests to the cloud resource pool frequently by transmitting the network request packet when the acquired network request packet sent by the terminal device satisfies the preset trigger condition. In addition, by performing a signature operation on the network request packet before transmitting the network request packet, the subsequent cloud resource pool can perform a verification operation on the target data packet according to the signature, thereby effectively avoiding DDOS attacks on the server.

FIG. 5 is a schematic flowchart of a data processing method according to Embodiment 2 of the present invention. As shown in FIG. 5 , the method includes:

Step 201: Obtain a target data packet sent by a data processing device, where the target data packet is sent when a preset trigger condition is satisfied after the data processing device signs the network request packet with a preset security certificate, wherein, The network request packet includes application process information, target Internet Protocol address and application server identifier to be sent;

Step 202, verifying the signature of the target data packet by the edge checking node;

Step 203: When the verification is passed, send the target data packet to the border gateway of the cloud resource pool where the target Internet Protocol address is located.

Further, on the basis of Embodiment 2, after step 202, it also includes:

When the verification fails, the target data packet is sent to a preset black hole route for processing.

The execution body of this embodiment is a cloud resource pool, and the cloud resource pool is communicatively connected with the data processing apparatus, so that information can be exchanged with the data processing apparatus. The cloud resource pool may specifically include edge inspection nodes and cloud resource pool border gateways.

In this embodiment, the cloud resource pool may acquire a target data packet sent by the data processing device, where the target data packet is specifically, after the data processing device signs the network request packet with a preset security certificate, when a preset trigger condition is satisfied sent, wherein the network request packet includes application process information, target Internet Protocol address and the identifier of the application server to be sent.

After acquiring the target data packet sent by the data processing device, in order to avoid the application server to be sent from being subjected to DDOS attack, the validity of the target data packet needs to be verified. Specifically, the signature of the target data packet can be verified through a preset security certificate, and when the verification is passed, the target data packet can be sent to the cloud resource pool border gateway where the target Internet Protocol address is located. Correspondingly, when the verification fails, in order to ensure the security of the server, the target data packet may be sent to a preset black hole route for processing.

Further, on the basis of Embodiment 2, the method further includes:

The target internet protocol address and target port number in the target data packet are replaced by the preset internet protocol address and port number through the cloud resource pool border gateway.

In this embodiment, the cloud resource pool may also replace the target Internet protocol address and target port number in the target data packet with the preset Internet protocol address and port number through the cloud resource pool gateway. Therefore, it can be avoided that the service of the long application sends the response of the sub-message directly to the terminal device, instead of sending the response through the special channel for message sending established by the data processing device.

Further, on the basis of Embodiment 2, after step 203, it also includes:

Determine the correspondence between the channel identifier for transmitting the target data packet, the sequence number corresponding to the target data packet, the target Internet Protocol address, and the target port number through the cloud resource pool border gateway;

The target data packet is sent to the application server to be sent through the cloud resource pool border gateway.

In this embodiment, the cloud resource pool may further determine the correspondence between the channel identifier for transmitting the target data packet, the sequence number corresponding to the target data packet, the target Internet Protocol address, and the target port number through the cloud resource pool border gateway; The target data packet is sent to the application server to be sent through the cloud resource pool border gateway. Therefore, after the application server to be sent identifies the response packet of the returned sub-message, the destination address and destination port number of the response packet can be replaced.

In the data processing method provided in this embodiment, by verifying the target data packet sent by the data processing device, and correspondingly processing the target data packet according to the verification result, the suspected attack data is sent to the preset black hole route for processing, so that it can be processed. Effectively avoid DDOS attacks on the server.

FIG. 6 is a schematic structural diagram of a data processing apparatus provided in Embodiment 3 of the present invention. As shown in FIG. 6 , the apparatus includes: an acquisition module 31 , a signature module 32 and a sending module 33 , wherein the acquisition module 31 is used for acquiring and The network request package sent by the terminal device is stored, and the network request package includes the application process information, the target Internet protocol address, and the identifier of the application server to be sent; the signature module 32 is used for performing a preset security certificate on the network request package. signature to obtain the target data packet; the sending module 33 is configured to send the target data packet to the cloud resource pool where the target Internet Protocol address is located when a preset trigger condition is satisfied.

Further, on the basis of Embodiment 3, the sending module 33 is specifically used for:

If it is detected that the packet length of the currently obtained network request packet exceeds a preset length threshold, the target data packet is sent to the cloud resource pool where the target Internet Protocol address is located.

Further, on the basis of Embodiment 3, the sending module 33 is specifically used for:

If the current time for obtaining the network request packet exceeds a preset time threshold, the target data packet is sent to the cloud resource pool where the target Internet Protocol address is located.

Further, on the basis of the third embodiment, the signature module 32 is specifically used for:

The network request package is signed by the security certificate in the preset sim module.

The data processing apparatus provided in this embodiment can avoid sending requests to the cloud resource pool frequently by transmitting the network request packet when the acquired network request packet sent by the terminal device satisfies the preset trigger condition. In addition, by performing a signature operation on the network request packet before transmitting the network request packet, the subsequent cloud resource pool can perform a verification operation on the target data packet according to the signature, thereby effectively avoiding DDOS attacks on the server.

FIG. 7 is a schematic structural diagram of a cloud resource pool according to Embodiment 4 of the present invention. As shown in FIG. 7 , the cloud resource pool includes an edge inspection node and a cloud resource pool border gateway, and the cloud resource pool includes: a data packet acquisition module 41. The verification module 42 and the processing module 43, wherein the data packet acquisition module 41 is used to acquire the target data packet sent by the data processing device, and the target data packet is a request made by the data processing device to the network through a preset security certificate. After the package is signed, it is sent when a preset trigger condition is met, wherein the network request package includes application process information, target Internet Protocol address, and the identifier of the application server to be sent; the verification module 42 is configured to pass the edge check The node verifies the signature of the target data packet; the processing module 43 is configured to send the target data packet to the border gateway of the cloud resource pool where the target Internet Protocol address is located when the verification is passed.

Further, on the basis of the fourth embodiment, the processing module 43 is also used for:

When the verification fails, the target data packet is sent to a preset black hole route for processing.

Further, on the basis of Embodiment 4, the device further includes:

A replacement module, configured to replace the target internet protocol address and target port number in the target data packet with a preset internet protocol address and port number through the cloud resource pool border gateway.

Further, on the basis of Embodiment 4, the device further includes:

a determining module, configured to determine, through the cloud resource pool border gateway, the channel identifier for transmitting the target data packet, the sequence number corresponding to the target data packet, the target Internet Protocol address and the corresponding relationship between the target port number;

A forwarding module, configured to send the target data packet to the application server to be sent through the cloud resource pool border gateway.

FIG. 8 is a schematic structural diagram of a data processing device according to Embodiment 5 of the present invention. As shown in FIG. 8 , the data processing device includes: a memory 51 and a processor 52;

memory 51; memory 51 for storing executable instructions of the processor 52;

Wherein, the processor 52 is configured to execute the data processing method according to any one of the above embodiments by the processor 52 .

The memory 51 is used to store programs. Specifically, the program may include program code, and the program code includes computer operation instructions. The memory 51 may include high-speed RAM memory, and may also include non-volatile memory, such as at least one disk memory.

The processor 52 may be a central processing unit (Central Processing Unit, referred to as CPU), or a specific integrated circuit (Application Specific Integrated Circuit, referred to as ASIC), or is configured to implement one or more embodiments of the present invention. multiple integrated circuits.

Optionally, in terms of specific implementation, if the memory 51 and the processor 52 are implemented independently, the memory 51 and the processor 52 may be connected to each other through a bus and complete mutual communication. The bus may be an Industry Standard Architecture (referred to as ISA) bus, a Peripheral Component (referred to as PCI) bus, or an Extended Industry Standard Architecture (referred to as EISA) bus or the like. The bus can be divided into an address bus, a data bus, a control bus, and the like. For ease of presentation, only one thick line is used in FIG. 8, but it does not mean that there is only one bus or one type of bus.

Optionally, in terms of specific implementation, if the memory 51 and the processor 52 are integrated on one chip, the memory 51 and the processor 52 can complete the same communication through an internal interface.

The present invention further provides a computer-readable storage medium, where computer-executable instructions are stored in the computer-readable storage medium, and when the computer-executable instructions are executed by a processor, are used to implement the data processing described in any of the foregoing embodiments method.

Those skilled in the art can clearly understand that, for the convenience and brevity of description, for the specific working process of the device described above, reference may be made to the corresponding process in the foregoing method embodiments, which will not be repeated here.

Those of ordinary skill in the art can understand that all or part of the steps of implementing the above method embodiments may be completed by program instructions related to hardware. The aforementioned program can be stored in a computer-readable storage medium. When the program is executed, the steps including the above method embodiments are executed; and the aforementioned storage medium includes: ROM, RAM, magnetic disk or optical disk and other media that can store program codes.

Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the present invention, but not to limit them; although the present invention has been described in detail with reference to the foregoing embodiments, those of ordinary skill in the art should understand that: The technical solutions described in the foregoing embodiments can still be modified, or some or all of the technical features thereof can be equivalently replaced; and these modifications or replacements do not make the essence of the corresponding technical solutions deviate from the technical solutions of the embodiments of the present invention. scope.

Claims (12)

1. a data processing method, is characterized in that, comprises: Acquire and store a network request packet sent by the terminal device, where the network request packet includes application process information, target internet protocol address and the identifier of the application server to be sent; Sign the network request package by using the preset security certificate to obtain the target data package; When a preset trigger condition is satisfied, the target data packet is sent to the cloud resource pool where the target Internet Protocol address is located. 2. The method according to claim 1, wherein when a preset trigger condition is met, sending the target data packet to the cloud resource pool where the target Internet Protocol address is located, comprising: If it is detected that the packet length of the currently obtained network request packet exceeds a preset length threshold, the target data packet is sent to the cloud resource pool where the target Internet Protocol address is located. 3. The method according to claim 1, wherein when a preset trigger condition is met, sending the target data packet to the cloud resource pool where the target Internet Protocol address is located, comprising: If the current time for obtaining the network request packet exceeds a preset time threshold, the target data packet is sent to the cloud resource pool where the target Internet Protocol address is located. 4. The method according to any one of claims 1-3, wherein the signing the network request package by using a preset security certificate comprises: The network request package is signed by the security certificate in the preset sim module. 5. A data processing method, characterized in that, applied to a cloud resource pool, the cloud resource pool comprising an edge inspection node and a cloud resource pool border gateway, the method comprising: Obtain a target data packet sent by the data processing device, where the target data packet is sent when a preset trigger condition is satisfied after the data processing device signs the network request packet with a preset security certificate, wherein the network The request packet includes application process information, target internet protocol address and the identifier of the application server to be sent; Verify the signature of the target data packet by the edge check node; When the verification is passed, the target data packet is sent to the border gateway of the cloud resource pool where the target Internet Protocol address is located. 6. The method according to claim 5, wherein after verifying the signature of the target data packet by the edge checking node, the method further comprises: When the verification fails, the target data packet is sent to a preset black hole route for processing. 7. The method according to any one of claims 5-6, wherein the method further comprises: The target internet protocol address and target port number in the target data packet are replaced by the preset internet protocol address and port number through the cloud resource pool border gateway. 8. The method according to any one of claims 5-6, wherein after the sending the target data packet to the border gateway of the cloud resource pool where the target Internet Protocol address is located, the method further comprises: Determine the correspondence between the channel identifier for transmitting the target data packet, the sequence number corresponding to the target data packet, the target Internet Protocol address, and the target port number through the cloud resource pool border gateway; The target data packet is sent to the application server to be sent through the cloud resource pool border gateway. 9. A data processing device, comprising: an acquisition module, configured to acquire and store a network request packet sent by the terminal device, where the network request packet includes application process information, a target Internet Protocol address and an application server identifier to be sent; a signature module, configured to sign the network request package through a preset security certificate to obtain a target data package; A sending module, configured to send the target data packet to the cloud resource pool where the target Internet Protocol address is located when a preset trigger condition is satisfied. 10. A cloud resource pool, characterized in that the cloud resource pool comprises an edge inspection node and a cloud resource pool border gateway, and the cloud resource pool comprises: A data packet acquisition module, configured to acquire a target data packet sent by the data processing device, where the target data packet is sent when a preset trigger condition is met after the data processing device signs the network request packet with a preset security certificate , wherein the network request packet includes application process information, target Internet Protocol address and the identifier of the application server to be sent; a verification module, configured to verify the signature of the target data packet through the edge check node; A processing module, configured to send the target data packet to the cloud resource pool border gateway where the target Internet Protocol address is located when the verification is passed. 11. A data processing device, comprising: a memory and a processor; memory; memory for storing instructions executable by the processor; Wherein, the processor is configured to execute the data processing method according to any one of claims 1-4 or 5-8 by the processor. 12. A computer-readable storage medium, characterized in that, computer-executable instructions are stored in the computer-readable storage medium, and when the computer-executable instructions are executed by a processor, they are used to implement claims 1-4 or 5- 8. The data processing method described in any one of 8.

Images