CN103248531A - Server network monitoring mode - Google Patents
Server network monitoring mode Download PDFInfo
- Publication number
- CN103248531A CN103248531A CN2012104882685A CN201210488268A CN103248531A CN 103248531 A CN103248531 A CN 103248531A CN 2012104882685 A CN2012104882685 A CN 2012104882685A CN 201210488268 A CN201210488268 A CN 201210488268A CN 103248531 A CN103248531 A CN 103248531A
- Authority
- CN
- China
- Prior art keywords
- server
- safety island
- monitored
- machine
- network
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Pending
Links
Images
Landscapes
- Computer And Data Communications (AREA)
Abstract
The invention discloses a safety island based network and realizes a network monitoring mode which is capable of monitoring servers among different networks. For a special network where internet safety is particularly important, the safety island based network realizes a novel monitoring mode for monitoring servers among different networks, such as servers among internal networks, servers in the Internet and other local area network servers. Further more, a server to be monitored can be configured easily through a WebUI (Web User Interface).
Description
Technical field
The present invention relates to network service and network monitor field, particularly relate to a kind ofly based on the safety island network model, cross over heterogeneous networks and communicate, realize the new mode of webmaster monitoring function.
Background technology
Early stage in internet development under the intense market competition condition, had a style of one's own in hardware production in order to keep the advantage of oneself between each hardware business men, and hardware specification is widely different, just have only oneself machine man to communicate; After the unified hardware interface, because still there are differences between the different procotols, network service still is confined in the consolidated network.Along with the Internet develop rapidly of nearly decades, nowadays TCP/IP uses to such an extent that the communication between the global various networks of different type becomes possibility, formed the Internet, network communication protocol has shielded the difference of low layer different hardware system structure and different operating system.But bottle-neck of network communication still exists, and present the Internet is to move on the basis of IPv4 agreement.Along with the fast development that the Internet makes rapid progress, the limited address space of IPv4 definition will exhaust, and the also not popularization and application of IP next generation protocol standard.
In order to utilize the IP address to the full extent, we have successively adopted the IP classification, and methods such as CIDR are divided the IP address.Though NAT has ideally solved the problem of shortage of ip address, but also can avoid attack from network-external effectively, hide and the computer of protecting network inside, also expose the IP address fact of wretched insufficiency simultaneously.In order to realize the monitoring to server under a so complicated network environment, we must integrate various solutions, realize that module is independent, but information monitoring platform that can unified management.
Summary of the invention
Technical problem to be solved by this invention is for internetwork communication provides feasible solution, thereby realizes the function of webmaster monitor server.
For achieving the above object, the invention provides a kind of outgoing telecommunication solution based on agency service, comprise Intranet, safety island and second local area network (LAN) are provided with the information monitoring server in the described Intranet, safety island then is to exchange visits with Intranet, arranging Acting Center's server, Apache Server, and remote polling server, then arranging in described second local area network (LAN) needs monitored machine;
Described information monitoring tool server is used for: exploit information monitoring tool web uses, and it is main management platform that this web uses, and can finish the configuration to the monitored machine of needs, and by the displaying of the monitored situation data of machine.Along with using the polling data collection that also has bottom that starts together, web guards all threads;
Described Apache Server, be used for: provide possibility for extranet access web uses, outer net should directly be visited the web that arranges on the Intranet information monitoring instrument and be used, we are provided with an Apache Server as transfer at safety island, thereby dereference has arrived the web of information monitoring instrument and has used, and has made things convenient for the keeper to visit at any time and to arrange;
Described remote polling server is used for: move independently polling data collection procedure, because the machine on the safety island can be exchanged visits with outer net, he can be according to configuration, find the server that to monitor on interconnected, and such machine of poll initiatively, and the data of collecting are used unified representing by web.The concrete realization that provides of server on the monitoring the Internet is provided the deployed position of its flexibility and changeability;
Described Acting Center server, be used for: the operation acting server, it just is equivalent to the S in the C/S model, and it can initiatively not send request, but waits for, accept request, if the machine in other local area network (LAN)s is wanted to be monitored to, just must load onto the agency, agency's effect is regularly to go up server to send data, these data are handled by Acting Center's server, transfer to the unification of information monitoring instrument at last again and represent.
The present invention also provides a kind of webmaster monitoring function, wherein:
Its data come from three parts, namely based on three kinds of data receipt modes of heterogeneous networks, finally use unified the displaying by web:
Data 1 come from the information monitoring server to the monitoring of main frame in the present networks, and data 2 come from the remote polling server to the monitoring of internet host, and data 3 come from Acting Center's server to the monitoring of main frame on other local area network (LAN)s.
The main operating procedure of webmaster monitoring tool can divide for 3 steps, comprising:
Find node: be used for determining whether certain node exists, in case find node, just it is added in the middle of the poll plan.Specifically be to remove a certain machine of ping by the ICMP agreement, if can ping logical, just illustrate that this node can use;
The poll node: be used for determining having on the node which service open-minded, the ruuning situation of this service is checked in periodic polling;
Data are collected: being used for collecting the achievement data of machine and middleware, mainly is by SNMP, JMX, and agreements such as JDBC are finished data and are collected.
By such scheme as can be seen, among the present invention in the network environment of complexity, for realizing that the webmaster monitoring provides three kinds of solutions at the heterogeneous networks structure, combine two kinds of monitoring modes of active collection and passive collection, and the collected data of different solutions are carried out unified management, manage and show by webUI.
Description of drawings
In order to be illustrated more clearly in the embodiment of the invention or technical scheme of the prior art, to do simple the introduction to the accompanying drawing of required use in embodiment or the description of the Prior Art below, apparently, accompanying drawing in describing below only is some embodiments of the present invention, for those of ordinary skills, under the prerequisite of not paying creative work, can also obtain other accompanying drawing according to these accompanying drawings.
Fig. 1 is overall network structural representation of the present invention;
Fig. 2 is Intranet monitoring schematic flow sheet of the present invention;
Fig. 3 monitors schematic flow sheet for the present invention to internet host;
Fig. 4 monitors schematic flow sheet for the present invention to other local area network (LAN) main frames.
Embodiment
For above-mentioned purpose of the present invention, feature and advantage can be become apparent more, the present invention is further detailed explanation below in conjunction with the drawings and specific embodiments.Obviously, described embodiment only is the present invention's part embodiment, rather than whole embodiment.Based on the embodiment among the present invention, those of ordinary skills belong to the scope of protection of the invention not making the every other embodiment that obtains under the creative work prerequisite.
The invention provides a kind of information monitoring method of safety island Network Based, described network system comprises Intranet, middle safety island, outer net and other local area network (LAN)s are provided with information monitoring tool server and other OA servers to be monitored, database server in the described Intranet, be provided with Apache Server in the described safety island, remote polling server and Acting Center's server, server to be monitored in other local area network (LAN)s then needs the installation agent plug-in unit, wherein:
Described information monitoring tool server, be used for: operational management program, and the finger daemon collected of some main polls and data are the cores of whole information tool system, some other service all is to be based upon on its basis, so must start the earliest;
Described Apache Server is used for: the transfer request, and the administrative staff of outer net can be by it as transfer, the WebUI administration interface of visit information monitoring tool;
Described remote polling server is used for: start the remote polling plan of external network server and collect the server operation information, and preserve related data for the visit of information monitoring tool manager;
Described Acting Center server is used for: as the server for the visit of other subnet server plug-in units, and preserve that plug-in unit sends over need monitored data about some of this server, in order to allow the visit of information monitoring tool manager.
The course of work of said system is referring to Fig. 2, and 3,4, specifically may further comprise the steps:
Step S101, administrative staff can send the request of visit information monitoring tool hypervisor by browser in outer net;
Step S102, request can have access to the information monitoring tool manager indirectly by being placed on Apache Server in the safety island as transfer;
Step S103, by the information monitoring tool manager, we can arrange server ip to be monitored, can be comprised Intranet and outer net by the server that hypervisor directly arranges;
Step S104, if the IP that is set up be outer net just can jump to step 106;
Step S105, on the monitoring tool server and then hypervisor start simultaneously the poll thread, can be according to the IP of the server in the Intranet to be monitored that arranges in the previous step, judge by the ICMP agreement whether this node can be communicated with, if can be communicated with the poll plan of just opening this node, and collect data;
Step S106 wants to finish the monitoring of external network server, must the data polling function is independent, as an independent service, it is deployed on the safety island, just our remote polling server.Though the remote polling service is an independently function, it is must be based upon on the basis that the information monitoring instrument started, as it one can long-range independent function of disposing;
Step S107, the remote polling server can be according to the IP of the outer network server to be monitored that disposes on the management tool, be the data about disposing on the first visit information monitoring tool of remote polling server meeting, attempt connecting with the ICMP agreement at the IP that wants monitor server then, if connect, just open the poll plan of this node and collect data.
Step S108, no matter be information monitoring tool server or remote polling server, under general condition all be initiatively to visit server in other local area network (LAN)s, for the server in other local area network (LAN)s is monitored, must allow monitored server initiatively initiate access request.；
Step S109, for this reason, little plug-in unit of server operation that we are to be monitored in other local area network (LAN)s, at Acting Center's server of safety island deploy, the two has formed B/S pattern communication mode again, and little plug-in unit just is equivalent to client, Acting Center's server is then as server end, client initiatively sends request to server end, and some basic condition data of this machine are sent to server end, and server end can be preserved some relevant data;
Step S110, the information monitoring tool manager can be visited the data at three places, comprises this machine of monitoring tool, the data that remote polling server and Acting Center's server are preserved.
System of the present invention is usually used in the server monitoring of complex network, below quotes the E-Government center using to example of this invention described.
The one described safety island network configuration as figure has been set up at the E-Government center in this process.
What the Intranet at center was mainly moved is some OA system servers of center routine office work, these all are main targets to be monitored, account for the very big ratio of required monitoring machinery, because can free communication between Intranet, so we just can monitor this machine by certain specific address or address field in the configuration Intranet, configuration simple (as illustration 2).
In addition, the center also has some placements machine on the internet, this machine all has independent IP, independent I P is configured among the IP to be monitored, because the information monitoring server can't directly be visited the Internet, but safety island can directly be visited the Internet, and can exchange visits between Intranet and the safety island, so in safety island, arrange independently remote polling service, treat monitor server by him and monitor.(as illustration 3)
In addition, the part machine that the center is responsible for safeguarding provides service in other local area network (LAN)s, because employed IP must could communicate in the Internet through the NAT agreement in this local area network (LAN), so must plug-in unit be installed at this monitored server, be arranged by certain hour by plug-in unit and initiatively send data to Acting Center's server at interval.(as illustration 4)
Therefore the webmaster monitoring mode at complex network provided by the invention has following advantage.
(1) flexible, can expand
To monitor which server among the present invention, and which service, all can realize by disposing, flexibly, and can expand.
(2) applied widely
Monitoring target scope of the present invention is wide, not only comprises Intranet, public network server, can also realize the monitoring to server in other local area network (LAN)s.
(3) visualized management interface
This monitoring tool is used by a unified Web and is managed and monitor, and easy to operate, the user experiences.
By the description of above method embodiment, the those skilled in the art can be well understood to the present invention for system embodiment, because it is substantially corresponding to method embodiment, so relevant part gets final product referring to the part explanation of method embodiment.In several embodiment that the application provides, should be understood that disclosed system and method not surpassing in the application's the spirit and scope, can be realized in other way.Current embodiment is a kind of exemplary example, should be as restriction, and given particular content should in no way limit the application's purpose.In addition, the schematic diagram of institute's descriptive system and method and different embodiment, in the scope that does not exceed the application, can with other system, module, technology or method in conjunction with or integrated.
The above only is the specific embodiment of the present invention; should be pointed out that for those skilled in the art, under the prerequisite that does not break away from the principle of the invention; can also make some improvements and modifications, these improvements and modifications also should be considered as protection scope of the present invention.
Claims (5)
1. one kind based on the safety island network, the webmaster monitoring mode that realization is monitored server between heterogeneous networks, it is characterized in that, it is based on the safety island net, and the concept of safety island comprises following 2 points: the server in (1), the same net territory only allows directly to visit from the terminal in the same net territory; (2), the data interaction between the different network domains carries out exchanges data between server by the safety island server,
In this case, an end of safety island is our Intranet, main deployment information monitoring tool server, and database server, and other 0A servers, and these all are the main targets that we will monitor; What mainly put in the safety island is the Apache acting server, remote polling server and Acting Center's server.
2. one kind based on the safety island network, the webmaster monitoring mode that realization is monitored server between heterogeneous networks, it is characterized in that it can not only finish the monitoring to the consolidated network inner machine, it is breakthrough to be that it can finish monitoring to outer net machine and other subnets.
3. one kind based on the safety island network, the webmaster monitoring mode that realization is monitored server between heterogeneous networks is characterized in that, its each module is all relatively independent, but all be based on the main service, the main service on the information monitoring instrument must at first be opened in other words.
4. method according to claim 2, it is characterized in that, also comprise: in order to monitor the outer net machine, the function that monitoring tool is collected data to poll make one can independent operating the unit, may operate on the remote server, and just can determine that by configuration file which machine and which service are to collect to finish by the remote polling data merely.By above-mentioned operation, outer online machine has been finished monitored by the remote polling server that is arranged on the safety island.
5. method according to claim 2, it is characterized in that, also comprise: in order to monitor the machine on other local area network (LAN)s, we must dispose another Acting Center's server again on safety island, wanting monitored machine that the agency is set again, the agency who adorns in Acting Center's server and the service to be monitored is just playing the part of the C/S framework model, initiatively initiate request by the agency on the machine, self needing data monitored and management regularly to send on Acting Center's server, WebUI comes out the data exhibiting on Acting Center's server database again.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN2012104882685A CN103248531A (en) | 2012-11-16 | 2012-11-16 | Server network monitoring mode |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN2012104882685A CN103248531A (en) | 2012-11-16 | 2012-11-16 | Server network monitoring mode |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| CN103248531A true CN103248531A (en) | 2013-08-14 |
Family
ID=48927763
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN2012104882685A Pending CN103248531A (en) | 2012-11-16 | 2012-11-16 | Server network monitoring mode |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN103248531A (en) |
Cited By (12)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN104754060A (en) * | 2015-04-16 | 2015-07-01 | 成都猴子软件有限公司 | Network selection type computer network monitor |
| CN104754059A (en) * | 2015-04-16 | 2015-07-01 | 成都猴子软件有限公司 | Energy-saving computer network monitor |
| CN104753742A (en) * | 2015-04-16 | 2015-07-01 | 成都猴子软件有限公司 | Intelligent node type computer network monitor |
| CN104754061A (en) * | 2015-04-16 | 2015-07-01 | 成都猴子软件有限公司 | Energy-saving memory type computer network monitor |
| CN104767645A (en) * | 2015-04-16 | 2015-07-08 | 成都猴子软件有限公司 | Computer network monitor |
| CN104767818A (en) * | 2015-04-16 | 2015-07-08 | 成都猴子软件有限公司 | Multi-network selection type computer network monitor |
| CN104767644A (en) * | 2015-04-16 | 2015-07-08 | 成都猴子软件有限公司 | Multi-application type computer network monitor |
| CN104767817A (en) * | 2015-04-16 | 2015-07-08 | 成都猴子软件有限公司 | Intelligent memory type computer network monitor |
| CN104767646A (en) * | 2015-04-16 | 2015-07-08 | 成都猴子软件有限公司 | Intelligent webmaster computer network monitor |
| CN104883280A (en) * | 2015-04-16 | 2015-09-02 | 成都猴子软件有限公司 | Storage recording type computer network monitor |
| CN106453686A (en) * | 2016-11-18 | 2017-02-22 | 畅捷通信息技术股份有限公司 | Connecting method and connecting device for JMX (Java Management Extensions) client |
| WO2021056715A1 (en) * | 2019-09-26 | 2021-04-01 | 平安科技（深圳）有限公司 | Server proxy monitoring method and related product |
Citations (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101170687A (en) * | 2007-11-28 | 2008-04-30 | 武汉烽火网络有限责任公司 | Method for front recording order to penetrate NAT based on video monitoring |
| CN201194396Y (en) * | 2008-05-08 | 2009-02-11 | 天津市国瑞数码安全系统有限公司 | Safe gateway platform based on transparent proxy gateway |
| CN102377697A (en) * | 2011-11-16 | 2012-03-14 | 华为技术有限公司 | Data processing method under condition of network physical isolation |
-
2012
- 2012-11-16 CN CN2012104882685A patent/CN103248531A/en active Pending
Patent Citations (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101170687A (en) * | 2007-11-28 | 2008-04-30 | 武汉烽火网络有限责任公司 | Method for front recording order to penetrate NAT based on video monitoring |
| CN201194396Y (en) * | 2008-05-08 | 2009-02-11 | 天津市国瑞数码安全系统有限公司 | Safe gateway platform based on transparent proxy gateway |
| CN102377697A (en) * | 2011-11-16 | 2012-03-14 | 华为技术有限公司 | Data processing method under condition of network physical isolation |
Cited By (13)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN104754060A (en) * | 2015-04-16 | 2015-07-01 | 成都猴子软件有限公司 | Network selection type computer network monitor |
| CN104754059A (en) * | 2015-04-16 | 2015-07-01 | 成都猴子软件有限公司 | Energy-saving computer network monitor |
| CN104753742A (en) * | 2015-04-16 | 2015-07-01 | 成都猴子软件有限公司 | Intelligent node type computer network monitor |
| CN104754061A (en) * | 2015-04-16 | 2015-07-01 | 成都猴子软件有限公司 | Energy-saving memory type computer network monitor |
| CN104767645A (en) * | 2015-04-16 | 2015-07-08 | 成都猴子软件有限公司 | Computer network monitor |
| CN104767818A (en) * | 2015-04-16 | 2015-07-08 | 成都猴子软件有限公司 | Multi-network selection type computer network monitor |
| CN104767644A (en) * | 2015-04-16 | 2015-07-08 | 成都猴子软件有限公司 | Multi-application type computer network monitor |
| CN104767817A (en) * | 2015-04-16 | 2015-07-08 | 成都猴子软件有限公司 | Intelligent memory type computer network monitor |
| CN104767646A (en) * | 2015-04-16 | 2015-07-08 | 成都猴子软件有限公司 | Intelligent webmaster computer network monitor |
| CN104883280A (en) * | 2015-04-16 | 2015-09-02 | 成都猴子软件有限公司 | Storage recording type computer network monitor |
| CN106453686A (en) * | 2016-11-18 | 2017-02-22 | 畅捷通信息技术股份有限公司 | Connecting method and connecting device for JMX (Java Management Extensions) client |
| CN106453686B (en) * | 2016-11-18 | 2019-09-03 | 畅捷通信息技术股份有限公司 | The connection method and attachment device of JMX client |
| WO2021056715A1 (en) * | 2019-09-26 | 2021-04-01 | 平安科技（深圳）有限公司 | Server proxy monitoring method and related product |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN103248531A (en) | Server network monitoring mode | |
| US7418513B2 (en) | Method and system for network management with platform-independent protocol interface for discovery and monitoring processes | |
| US8458301B1 (en) | Automated configuration of network devices administered by policy enforcement | |
| US20200162517A1 (en) | Method and apparatus to have entitlement follow the end device in network | |
| US20030009552A1 (en) | Method and system for network management with topology system providing historical topological views | |
| US7310666B2 (en) | Method and system for restricting and enhancing topology displays for multi-customer logical networks within a network management system | |
| US20030041238A1 (en) | Method and system for managing resources using geographic location information within a network management framework | |
| US20030041167A1 (en) | Method and system for managing secure geographic boundary resources within a network management framework | |
| US20030009540A1 (en) | Method and system for presentation and specification of distributed multi-customer configuration management within a network management framework | |
| US20020112051A1 (en) | Method and system for network management with redundant monitoring and categorization of endpoints | |
| CN101164283A (en) | Method and system of performing initialization configuration to managed equipment | |
| CN107222462A (en) | A kind of LAN internals attack being automatically positioned of source, partition method | |
| US11121923B2 (en) | Automatic provisioning of network components | |
| CN112956158A (en) | Structured data plane monitoring | |
| US8204972B2 (en) | Management of logical networks for multiple customers within a network management framework | |
| CN103597466B (en) | Real time data based on data-pushing is monitored | |
| US20020124066A1 (en) | Method and system for unambiguous addressability in a distributed application framework in which duplicate network addresses exist across multiple customer networks | |
| Marotta et al. | Through the Internet of Things--A Management by Delegation Smart Object Aware System (MbDSAS) | |
| Zhang et al. | SDNMP: Enabling SDN management using traditional NMS | |
| CN110196721B (en) | Internet data center management method, system and medium | |
| US6883024B2 (en) | Method and apparatus for defining application scope and for ensuring finite growth of scaled distributed applications | |
| Saravanan et al. | Enhancing enterprise network management using SMART | |
| CN116582424B (en) | Switch configuration method and device, storage medium and electronic equipment | |
| US20020144143A1 (en) | Method and system for network management capable of restricting consumption of resources along endpoint-to-endpoint routes throughout a network | |
| Klang | Network Device Enumeration and Identification Using Passive Asset Detection |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| C06 | Publication | ||
| PB01 | Publication | ||
| C10 | Entry into substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| C02 | Deemed withdrawal of patent application after publication (patent law 2001) | ||
| WD01 | Invention patent application deemed withdrawn after publication |
Application publication date: 20130814 |