The more examples of isomery redundancy Snmp agreements realize system and its implementation
Technical field
The invention belongs to the Snmp protocol realization technical fields in network communication technology, more particularly to a kind of isomery redundancy
The more examples of Snmp agreements realize system and its implementation.
Background technology
Core component of the router as network infrastructure, the security situation of its own are increasingly serious.And Snmp
Important component of the agreement as router administration plane realizes the configuration management, inquiry and alarm announcement function of router,
Its security situation also allows of no optimist.Snmp agreements mainly face the attack from loophole or back door.Conventional router passes through repairing
Snmp protocol bugs increase attack of the additional security mechanism reply based on known bugs or back door, to unknown loophole or after
Door is helpless, and mainly conventional method can not be fully solved fundamentally there is no the static characteristic for changing Snmp agreements
The fragile sex chromosome mosaicism of Snmp agreements and Mib information.
Invention content
To overcome deficiency of the prior art, the present invention provide a kind of more examples of isomery redundancy Snmp agreements realize system and
Its implementation, solving single Snmp Failure Of Protocols in router of the prior art causes router administration plane to be asked extremely
Topic, is effectively ensured network communication normal operation.
According to designing scheme provided by the present invention, a kind of more examples of isomery redundancy Snmp agreements realize system, comprising
Snmp agent units, Snmp agreements perform module, dynamic dispatching unit, wherein, Snmp agent units are responsible for receiving from net
The Snmp agreement requests of tube terminal, and request message duplication is distributed to Snmp agreements and performs module;Snmp agreements perform body
Module is handled according to Snmp agreement request types, handling result is sent to dynamic dispatching unit, Snmp agreements perform body
Module includes N number of isomery Snmp agreements run parallel and performs body unit;Dynamic dispatching unit safeguards that isomery Snmp agreements perform
Body unit is selected more preferable mechanisms to all Snmp agreements execution body unit operation result foundations and is arbitrated, from isomery Snmp
Agreement performs the normal Snmp agreements of one operating status of selection in body unit and performs woker marks in body unit juxtaposition, will be secondary
Cut out result and be transmitted to route control unit or data forwarding unit accordingly according to Snmp agreement requests type, wherein, N be more than
2 integer.
Above-mentioned, the Snmp agreement requests type of webmaster terminal includes Snmpset message, Snmpget message.
Above-mentioned, it is specifically as follows comprising content to select more preferable mechanisms:Multiple isomery Snmp agreements run parallel perform body
In unit, if the operation result that more than two Snmp agreements perform body unit is identical, by the most operation knot of same number
Fruit is as arbitration result, if the operation result that each Snmp agreements perform body unit is different, by the Snmp of highest priority
Agreement performs the operation result of body unit as arbitration result.
A kind of more example implementation methods of isomery redundancy Snmp agreements, it is real based on the above-mentioned more examples of isomery redundancy Snmp agreements
Existing system, specifically comprises the following steps:
Step 1, Snmp agent units receive webmaster terminal Snmp request commands, respectively with multiple isomeries run parallel
Snmp agreements perform body unit and establish internal Snmp session connections, replicate Snmp request commands and pass through internal Snmp session connections
It is distributed to each Snmp agreements and performs body unit, Snmp request commands include Snmpset orders, Snmpget orders;
Step 2, each Snmp agreements perform body unit and receive carries out operation after Snmp request commands respectively, and by operation
As a result it is advertised to dynamic dispatching unit;
Step 3, dynamic dispatching unit perform body unit operation result according to each Snmp agreement and carry out maintenance management simultaneously
It is arbitrated according to more preferable mechanisms are selected, is performed from isomery Snmp agreements and a normal Snmp of operating status is selected in body unit
Agreement performs woker marks in body unit juxtaposition, and arbitration result is transmitted to routing accordingly according to Snmp agreement requests type
Control unit or data forwarding unit.
Above-mentioned implementation method, step 2 specifically include following content:It is received when Snmp agreements perform body unit
During Snmpset orders, configuration data is obtained, and configuration data is notified to dynamic dispatching unit;When Snmp agreements perform body list
When member receives Snmpget orders, the variate-value to be inquired is obtained, and query result is notified to dynamic dispatching unit.
Above-mentioned implementation method, dynamic dispatching unit performs body unit operation knot according to each Snmp agreement in step 3
Fruit carries out maintenance management and is arbitrated according to more preferable mechanisms are selected, specifically comprising following content:Dynamic dispatching unit foundation
Snmp agreements perform the configuration data of body unit notification or query result carries out maintenance management, multiple isomery Snmp run parallel
Agreement is performed in body unit, if the operation result that more than two Snmp agreements perform body unit is identical, by same number most
More operation results are as arbitration result, if the operation result that each Snmp agreements perform body unit is different, by priority
Highest Snmp agreements perform the operation result of body unit as arbitration result.
Above-mentioned implementation method, dynamic dispatching unit performs body unit operation knot according to each Snmp agreement in step 3
Fruit carries out maintenance management and is arbitrated according to more preferable mechanisms are selected, also comprising following content:In arbitrated procedure is carried out, if hair
Some existing Snmp agreement performs body unit operation irregularity, and the Snmp agreements of the operation irregularity are performed body unit by dynamic dispatching unit
Working condition is cut out, and is reset so that Snmp agreements perform body unit and are restored to normal original state;Dynamic dispatching unit
Monitoring Snmp agreements perform body unit state in real time, when monitoring that Snmp agreements perform body unit failure or the company of mistake, pass through band
The Snmp agreements are performed body unit place machine and restarted by outer tunnel so that Snmp agreements perform body unit and are restored to normal initial shape
State.
Beneficial effects of the present invention:
1st, of the invention since multiple parallel isomery Snmp agreements perform body units, this isomerism determines different Snmp
Agreement, which performs body unit, will not have identical loophole or back door, greatly reduce multiple Snmp agreements and perform body unit by same
When paralysis is caused by attack or causes random possibility, therefore under conditions of some Snmp agreement performs body unit failure or failure,
Other Snmp agreements perform body unit and remain to effectively work, and system remains able to the configuration for having Snmp agreements, looks into as a whole
Alarm announcement function is inquired about, fault-tolerant ability is strong.
2nd, Snmp agencies, dynamic dispatching unit and each Snmp agreements in the present invention perform body unit and may operate in clothes
It is engaged on device or on virtual machine, installation and deployment are fairly simple;Snmp agreements perform body unit number and are no less than 3, can be according to reality
Border application environment demand and cost needs determine to perform body unit, Snmp agreements execution body unit number using how many a Snmp agreements
When amount increases, equipment and maintenance cost will not be dramatically increased, deployment is flexible.
Description of the drawings:
Fig. 1 is the systematic schematic diagram of the present invention;
Fig. 2 is the method flow schematic diagram of the present invention.
Specific embodiment:
The present invention is described in further detail with technical solution below in conjunction with the accompanying drawings, and it is detailed to pass through preferred embodiment
Describe bright embodiments of the present invention in detail, but embodiments of the present invention are not limited to this.
Embodiment one, shown in Figure 1, a kind of more examples of isomery redundancy Snmp agreements realize system, a kind of isomery redundancy
The more examples of Snmp agreements realize system, and module, dynamic dispatching unit are performed comprising Snmp agent units, Snmp agreements, wherein,
Snmp agent units are responsible for receiving the Snmp agreement requests from webmaster terminal, and request message duplication is distributed to Snmp associations
View performs module;Snmp agreements perform module, are handled according to Snmp agreement request types, handling result is sent to
Dynamic dispatching unit, Snmp agreements perform module and include N number of isomery Snmp agreements execution body unit run parallel;Dynamic is adjusted
Unit is spent, safeguards that isomery Snmp agreements perform body unit, it is more according to selecting that body unit operation result is performed to all Snmp agreements
Preferable mechanism is arbitrated, and performing the normal Snmp agreements of one operating status of selection in body unit from isomery Snmp agreements performs
Woker is identified in body unit juxtaposition, and arbitration result is transmitted to route control unit accordingly according to Snmp agreement request types
Or data forwarding unit, wherein, N is the integer more than 2.
Snmp agent units of the present invention, Snmp agreements perform body unit, dynamic dispatching unit is all run on the server, more
A parallel isomery Snmp agreements perform body unit and are distributed on different servers or different virtual machines, each unit module it
Between interconnected by interchanger, used since multiple parallel isomery Snmp agreements perform body units by different developers
What no language or translation and compiling environment were developed, it is identical that this isomerism determines that different Snmp agreements execution body units will not have
Loophole or back door, greatly reduce multiple Snmp agreements and perform body units by causing paralysis by attack simultaneously or cause random possibility
Property, therefore under conditions of some Snmp agreement performs body unit failure or failure, other Snmp agreements perform body unit still
It can effectively work, system remains able to the configuration for having Snmp agreements, inquiry and alarm announcement function, fault-tolerant ability as a whole
By force.
Embodiment two, it is essentially identical with embodiment one, the difference lies in:The Snmp agreement request type packets of webmaster terminal
Include Snmpset message, Snmpget message.
It is specifically as follows comprising content to select more preferable mechanisms:Multiple isomery Snmp agreements run parallel are performed in body unit,
If the operation result that more than two Snmp agreements perform body unit is identical, using the most operation result of same number as secondary
It cuts out as a result, if the operation result of each Snmp agreements execution body unit is different, by the Snmp agreements execution of highest priority
The operation result of body unit is as arbitration result.
Embodiment three, a kind of shown in Figure 2, more example implementation methods of isomery redundancy Snmp agreements, based on embodiment one
The more examples of the isomery redundancy Snmp agreements realize system, specifically comprise the following steps:
Step 1, Snmp agent units receive webmaster terminal Snmp request commands, respectively with multiple isomeries run parallel
Snmp agreements perform body unit and establish internal Snmp session connections, replicate Snmp request commands and pass through internal Snmp session connections
It is distributed to each Snmp agreements and performs body unit, Snmp request commands include Snmpset orders, Snmpget orders;
Step 2, each Snmp agreements perform body unit and receive carries out operation after Snmp request commands respectively, and by operation
As a result it is advertised to dynamic dispatching unit;
Step 3, dynamic dispatching unit perform body unit operation result according to each Snmp agreement and carry out maintenance management simultaneously
It is arbitrated according to more preferable mechanisms are selected, is performed from isomery Snmp agreements and a normal Snmp of operating status is selected in body unit
Agreement performs woker marks in body unit juxtaposition, and arbitration result is transmitted to routing accordingly according to Snmp agreement requests type
Control unit or data forwarding unit.
Example IV, a kind of shown in Figure 2, more example implementation methods of isomery redundancy Snmp agreements, based on embodiment one
The more examples of the isomery redundancy Snmp agreements realize system, specifically comprising following content:
First, Snmp agent units receive webmaster terminal Snmp request commands, respectively with multiple isomeries run parallel
Snmp agreements perform body unit and establish internal Snmp session connections, replicate Snmp request commands and pass through internal Snmp session connections
It is distributed to each Snmp agreements and performs body unit, Snmp request commands include Snmpset orders, Snmpget orders.
Secondly, each Snmp agreements perform body unit and receive carries out operation after Snmp request commands respectively, and by operation
As a result dynamic dispatching unit is advertised to, when Snmp agreements, which perform body unit, receives Snmpset orders, obtains configuration data,
And configuration data is notified to dynamic dispatching unit;When Snmp agreements, which perform body unit, receives Snmpget orders, obtaining will
The variate-value of inquiry, and query result is notified to dynamic dispatching unit.
Then, dynamic dispatching unit according to each Snmp agreement perform body unit operation result carry out maintenance management and by
It is arbitrated according to more preferable mechanisms are selected, the normal Snmp associations of one operating status of selection in body unit is performed from isomery Snmp agreements
View performs woker marks in body unit juxtaposition, and arbitration result is transmitted to routing control accordingly according to Snmp agreement requests type
Unit or data forwarding unit processed.Dynamic dispatching unit performs the configuration data of body unit notification or inquiry knot according to Snmp agreements
Fruit carries out maintenance management, and multiple isomery Snmp agreements run parallel are performed in body unit, if more than two Snmp agreements are held
The operation result of row body unit is identical, then using the most operation result of same number as arbitration result, if each Snmp agreements
The operation result for performing body unit is different, then the Snmp agreements of highest priority is performed the operation result of body unit as secondary
Cut out result.In arbitrated procedure is carried out, if finding, some Snmp agreement performs body unit operation irregularity, and dynamic dispatching unit should
The Snmp agreements of operation irregularity perform body unit and cut out working condition, and reset so that it is extensive that Snmp agreements perform body unit
Normal original state is arrived again;Dynamic dispatching unit monitors Snmp agreements and performs body unit state in real time, is monitoring Snmp agreements
When performing body unit failure or the company of mistake, which is performed by body unit place machine by out-band channel and is restarted so that Snmp is assisted
View performs body unit and is restored to normal original state.
The present invention while multiple isomery Snmp agreements are run parallel perform body units, it is how excellent by selecting by dynamic dispatching unit
The operation result of the multiple Snmp protocol instances execution units of mechanism ruling is selected, the configuration result of arbitration is exported and is put down to route test
The query result of arbitration is fed back to webmaster terminal by face and data plane, and installation and deployment are simple, and deployment is flexible, fault-tolerant ability
By force.
The present invention is not limited to above-mentioned specific embodiment, and those skilled in the art can also make a variety of variations accordingly, but
It is any all to cover within the scope of the claims with equivalent or similar variation of the invention.