Files
notes/work/移动杭研/问题处理/2024-11/1031-005-20240918001 信安问题.md
2026-03-01 01:43:46 +08:00

4.9 KiB

日期, 来源
日期 来源
2024-10-31 10:55 客响

问题详情

验收报文:

{
    "code": "005-20240918001",
    "approve": "0",
    "plain_info": [
        {
            "approve": "0",
            "plain_name": "4",
            "domain_pre_info": [
                {
                    "domain": "activity.cmcc-cs.cn",
                    "sources": [
                        {
                            "primary": true,
                            "type": "ip",
                            "back_addr": "2409:8C20:7C91:0001:0000:0000:00ff:0105"
                        }
                    ],
                    "provinces": [
                        "all"
                    ],
                    "cname": "activity.cmcc-cs.cn.e.cdn.chinamobile.com",
                    "plain_name": "4",
                    "schedule_type": "CNAME",
                    "http_selection": {
                        "protocol": 0
                    },
                    "server_domain": [
                        "activity.cmcc-cs.cn"
                    ]
                }
            ]
        }
    ],
    "user_id": ""
}

处理过程

2024-10-31 02:21:54 [ibs-portal:sh-ibs02.shlg.cmcdn.net:8080,bc2ab0c7f2c41717,bc2ab0c7f2c41717,,true] [http-nio-8080-exec-33] INFO com.cmcc.cdn.platform.selfservice.service.impl.PortalInformationServiceImpl 515 updateDomainInformation - 信安同步参数 domain为:[{"domain":"activity.cmcc-cs.cn","enterpriseId":"nvqln09g-gct6z6ueir1naotw","icp":"豫ICP备15016518号-4","loopDomains":[{"mainFlag":true,"type":"ip","value":"2409:8C20:7C91:0001:0000:0000:00ff:0105"}],"provinceCode":["210","571","791","471","280","531","371","731","250","100","551","220","230","311","351","240","431","451","591","270","200","771","898","851","871","891","290","931","971","951","991"]}]

2024-10-31 02:21:55 [ibs-portal:sh-ibs02.shlg.cmcdn.net:8080,bc2ab0c7f2c41717,bc2ab0c7f2c41717,,true] [http-nio-8080-exec-33] INFO com.cmcc.cdn.platform.selfservice.service.impl.BigCloudBasicInfoServiceImpl 969 lambda$repeatXinan$0 - 【请求信安接口】param:{"update_domain_info_list":[{"distribute_prov":["210","571","791","471","280","531","371","731","250","100","551","220","230","311","351","240","431","451","591","270","200","771","898","851","871","891","290","931","971","951","991"],"domain":"activity.cmcc-cs.cn","domain_id_cdnsys":"UZcSXLohZ_42187","introduce_prov":"000","reg_id":"豫ICP备15016518号-4","source_list":[""],"top_domain":"cn","user_id_cdn":"UZcSXLohZ"}]}, 返回结果:{resp={"code": 1009, "chk_fail_dict_l": [{"domain": "activity.cmcc-cs.cn", "domain_id_cdnsys": "UZcSXLohZ_42187", "code": 212}], "sync_success_num": 0}, status=200}

同步信安 source_list 为空,原因:

Cache+ 需求变更工单验收反馈会同步信安,同步与否由下面三点决定。

  1. user_id_cdn 一致。(逻辑中用 big_cloud_information_domain 自身比较。)
  2. self_service_domain_configicpbig_cloud_information_domainreg_id 一致。(现网一致。)
  3. domain_config_provincebig_cloud_information_domain 一样。(支持无序。)

但是因为比较逻辑存在问题,如下,所以只能先将信安表的回原改为 IPV6 的前缀:

修复:

UPDATE big_cloud_information_domain t SET t.source_list = '["2409"]' WHERE t.id = 36039;

程序执行流程,未修改配置,不同步信安:

发起信安信息修改同步(/v1.0/update_domain_info):

{
    "update_domain_info_list": [
        {
            "distribute_prov": [
                "210",
                "571",
                "791",
                "471",
                "280",
                "531",
                "371",
                "731",
                "250",
                "100",
                "551",
                "220",
                "230",
                "311",
                "351",
                "240",
                "431",
                "451",
                "591",
                "270",
                "200",
                "771",
                "898",
                "851",
                "871",
                "891",
                "290",
                "931",
                "971",
                "951",
                "991"
            ],
            "domain": "activity.cmcc-cs.cn",
            "domain_id_cdnsys": "UZcSXLohZ_42187",
            "introduce_prov": "000",
            "reg_id": "豫ICP备15016518号-4",
            "source_list": [
                "2409:8C20:7C91:0001:0000:0000:00ff:0105"
            ],
            "top_domain": "cn",
            "user_id_cdn": "UZcSXLohZ"
        }
    ]
}

总结

赞不优化代码,向产品反馈问题。