A kind of long-distance management system and control device
[technical field]
The present invention relates to communication technical field, be specifically related to a kind of long-distance management system based on hardware bottom layer and control device.
[background technology]
Server is used very general in life, enterprise, education sector, financial industry, telecommunications industry, military-political industries etc. all are widely used, the server of cybertimes is being taken on more and more important position, server generally is automatic operation, and it is on duty to need not the people, certainly sometimes needs server is managed and safeguards, but, if in the time of need to safeguarding, need to be in the action, that will expend a large amount of costs.For example when carrying out system upgrade to hundreds of server, IT administrative staff blink takes transport cost will be very huge, so need a simple effective method to manage all servers concentratedly, finish the variety of steps of execute-in-place, and system is recovered.
The real-time of Internet and long-distance transmissions function provide a good platform for us, just control signal can be transferred to all over the world based on ICP/IP protocol by Internet, if by an equipment can with the information of computer real-time send remote control terminal to, so just can pass through remotely administered server, to the management of long-range server with regard to in this locality every station server to be carried out field control the same.
Server is in operation and have control system quite simple to server maintenance in support, namely can realize by telemanagement software, but the server in station system outside in thousands of delays when machine or control system collapse, situation in the past all is administrative staff's maintenances that are on the scene, and the maintenance cost that expends like this is quite high.So can not only rest on the level of operating system to the management of server, the high layer software that can also allow it from bottom is by certain standard and hardware layer communication, and more complete, transparent manages server.
IPMI comes from the server field, and purpose is that the functions such as equipment control, transducer/incident management, user management, fan frame/power shelf management, remote maintenance are provided for server.IPMI has the characteristics such as standardization, management channels and service channel separate, abundant command set, fail safe height.
The characteristics that the management channels of IPMI separates with service channel make IPMI have high availability, make the power supply of IPMI subsystem independent, make IPMI not rely on business management system, even when the operation system fault, still have operability, and IPMI is based on the intelligent management platform interface of Internet, the core of IPMI is processor-server or baseboard management controller (BMC), it does not also rely on the processor of server, BIOS or operating system are come work, be independent in the extreme, be one in system, move separately without the proxy management subsystem, it just can be started working as long as BMC and IPMI firmware are arranged, and the BMC chip is one and is installed on the server master board, provides IPMI to support by BMC to server master board.The autonomous characteristic that IPMI is good has overcome in the past based on the suffered restriction of the way to manage of operating system, and it still can carry out the operations such as switching on and shutting down, information extraction in the situation that does not respond or do not load such as operating system.
In fact server maintenance is being needed to do following operation:
(1) possess the IPMI function: the health status of remote monitoring server, comprise event log, transducer reading and warning function in the system, the health status of server, in time reaction is to the manager.
(2) remote dummy memory function: when operating system collapse or damaged can't the reparation; need to reinstall operating system; when installing operating system; need to be all virtual to server end the CD-ROM drive of remote control terminal, floppy drive and USB device, just can realize the various types of operating systems of Remote Installation by the computer of control end.
(3) long-range KVM function: when control system is installed, need also to realize that long-range picture, mouse, keyboard are synchronous, just as in person before the server.
(4) after the remote server system outage, when switching on again, need by long-range cold start-up server, just look like oneself the frontal startup button by server is the same in person, the while is controlled the various functions such as not having to shut down, restart server in the situation of control system.
Make a long-distance management system have the IPMI function, must make controlled server master board support the IPMI function, and at mainboard the IPMB interface be arranged.When controlled server end does not have IPMI and baseboard management controller, just can not monitor the health status of remote service.
If server master board is not supported the IPMI function, also can't affect the realization of other function.
Have in the market the remote server administration function, and the remote management card of external PCI slot or only have the virtual memory function, or only have the KVM function, can realize that long-range cold start-up controlled terminal server does not almost have.
Need to control long-range server by remote control terminal comprehensively, at least must possess long-range KVM function, the remote dummy memory function, and abnormal conditions appear at remote server, can make server work by the cold start-up server, and realize Long-distance Control by the KVM-over-IP function.
Owing to be based on ICP/IP protocol when server is carried out telemanagement, control end searches out controlled terminal by the IP address, although the IP of controlled terminal fixes, controlled terminal has without limits control end, for example the IP address limitation or control software limitations, it is extremely important that this can manage remote server very easily to the IT manager, when long-distance management system need control end that specific software is installed or need control end and controlled terminal at same local area network (LAN), this just can not guarantee that the IT manager controls remote server fast whenever and wherever possible and easily.
For the IT manager, if control command is too complicated, this has just caused the applicable surface of this management system very narrow in addition.
In sum, former technology possesses following shortcoming at least:
1. function singleness, or can only realize the function of KVM, or can only realize the function of remote dummy storage, realize that simultaneously the remote on-off function needs the support of IPMI interface.
2. poor compatibility needs IPMI interface and corresponding BMC module support as realizing to the monitoring of server health status and warning function, can't realize the data monitoring of distance sensor for general personal computer.
3. after suddenly outage of remote terminal, when switching on again, can't realize the remote opening function.
[summary of the invention]
The present invention is just in order to solve a kind of by long-distance management system and the control device of ARM Implementation of Embedded System based on hardware bottom layer that above-mentioned said technical problem proposes.
The concrete technical scheme that the present invention adopts is as follows:
A kind of long-distance management system, this long-distance management system is used for the controlled terminal of control terminal supervising the network side, comprise and control subsystem, long-range KVM subsystem and remote storage subsystem, describedly control the data command that subsystem is transformed into the information of controlling of control terminal the long-range KVM subsystem of control and remote dummy storage subsystem, wherein
Described long-range KVM subsystem is for the synchronous and long-range cold start-up server of video information, mouse and keyboard operation instruction of realizing control terminal and controlled terminal;
Described remote storage subsystem is synchronized to controlled terminal by described long-range KVM subsystem with the mouse of described control terminal or the operational order of keyboard, sets up the storage device of control terminal and the corresponding relation of described controlled terminal.
Described control terminal comprises the WEB browsing apparatus, described controlled terminal comprises the control unit of Base on Web, the described subsystem of controlling comprises described WEB browsing apparatus and control unit, and the WEB browsing apparatus of control terminal and the control unit of controlled terminal are set up control link.
Described KVM subsystem comprises USB interface, the KVM module, the VGA input interface that is connected with controlled terminal VGA output interface and the Power/Reset output interface that is connected with the Power/Reset input interface of controlled terminal, described KVM module is used for the control command of control terminal mouse and keyboard is changed synchronously, generate the mouse of controlled terminal and the control command of keyboard, be connected with the USB delivery outlet of controlled terminal by USB interface, mouse and the Keyboard Control of the controlled terminal of described generation are transferred to controlled terminal by USB interface, described KVM module also is used for to Power/Reset input interface transmit button machine or restarts the instruction of controlled terminal, the VGA output interface of described KVM module and controlled terminal is set up communication link, the controlled terminal VGA information exchange that obtains is crossed network send to control terminal.
Described KVM module comprises a USB hub submodule, be used for setting up the memory device of control terminal and the connection between the controlled terminal memory device, described control terminal sends to controlled terminal and sets up the control signal that remote storage device is connected with controlled terminal, and USB hub submodule is set up the communication link between the memory device of the memory device of controlled terminal and control terminal by USB interface.
This long-distance management system also comprises:
The intelligent management platform subsystem is used for obtaining the sensing data of controlled terminal and the bios information of bios memory module, and described sensing data and bios information exchange are crossed network and sent to control terminal.
This long-distance management system also comprises: the network security subsystem, carry out encryption and decryption for the authentication between control terminal and the controlled terminal with to the data of transmission.
The present invention also provides a kind of control device by control terminal telemanagement controlled terminal, it is characterized in that, this control device is installed on the controlled terminal, described control device comprises a network interface card module, set up network connection by this network interface card module and control terminal, described control device is connected with data by setting up control between data-interface and the controlled terminal.
Described data-interface comprises a USB interface, and this USB interface is arranged on the control device, is used for being connected with the USB input interface of controlled terminal;
Described control device also comprises
Be independent of the external power interface of controlled terminal power supply;
For the treatment of the control signal of obtaining from the network interface card module and generate the control unit of control command;
To the KVM module that instruction is changed of controlling of the mouse of control terminal and keyboard, this KVM module is connected with control unit;
The VGA input interface that is connected with controlled terminal VGA output interface;
With the Power/Reset output interface that the Power/Reset input interface of controlled terminal is connected, this Power/Reset output interface is used for obtaining the KVM module to the switching on and shutting down of its transmission or restarts the instruction of controlled terminal;
Described KVM module is obtained the instruction of controlling of the mouse of control terminal and keyboard by the network interface card module, and to this control instruction process the mouse that converts Power/Reset instruction or controlled terminal to and and the son of keyboard control instruction, described Power/Reset instruction is sent to the Power/Reset output interface by the KVM module, and described Power/Reset input interface obtains the switching on and shutting down of described Power/Reset instruction control controlled terminal or restarts button work; The USB input interface of described controlled terminal obtains the mouse of described controlled terminal and the son of keyboard is controlled instruction, and this son is controlled the processing unit processes that instruction sends to controlled terminal; Described KVM module is set up communication link by the VGA output interface of VGA input interface and controlled terminal, sends to control terminal by the network interface card module after the VGA information of the controlled terminal that obtains is processed by control unit.
Described KVM module also comprises a USB hub submodule, described USB hub submodule and described control unit be connected USB interface and be connected.
Described data-interface also comprises the IPMB interface, described control unit is baseboard management controller, this baseboard management controller comprises an arm processor, described arm processor obtains the bios information in the BIOS memory module of data in the transducer of controlled terminal and controlled terminal by the IPMB interface, described, described arm processor is crossed network interface with these data communication devices and is sent to control terminal.
Described control device comprises a pci interface, and described pci interface card is connected in the PCI slot of described controlled terminal.
Described control unit comprises the control module of a Base on Web and supports the data encrypting and deciphering module of ssl protocol.
Useful technique effect of the present invention is:
1. the present invention controls the switch of the Power/Reset passage of controlled terminal by the ARM embedded system, even in the situation that does not have the IPMI assembly, also can realize the cold start function of controlled terminal.
2. the present invention is by being solidificated in control program in the ARM embedded system, this ARM embedded system is arranged on the control device, and this control device is installed on the controlled terminal, so by control terminal control ARM embedded system the time, need not very complicated operation, can enter the control platform of the Base on Web of ARM embedded system by IP, and also very hommization of operation and control interface.
3. the present invention is not owing to have specific (special) requirements to control terminal, only require to have browser and can carry out getting final product long-range the connection with controlled terminal, so can be whenever and wherever possible computer by arbitrary networking carry out Long-distance Control.
4. the present invention powers to the ARM embedded system by external power supply, so that the ARM embedded system can be independent of the state operation of controlled terminal, no matter whether the power supply of controlled terminal works, the ARM embedded system can both be moved, even controlled terminal in improper outage can not the situation of autoboot, also can carry out the cold start-up start to controlled terminal by long-range control terminal.
5. the present invention is owing to arrange the BMC module at control device, and connects controlled terminal by the IPMB interface.And the server master board state better fed back to the manager.
[description of drawings]
Fig. 1 is the block diagram of long-distance management system embodiment one of the present invention;
Fig. 2 is the block diagram of long-distance management system embodiment two of the present invention;
Fig. 3 is the operational flowchart of method for remote management of the present invention;
Fig. 4 is the product structure block diagram of control device of the present invention.
[embodiment]
The invention provides a long-distance management system, this long-distance management system comprises control terminal and controlled terminal, this control terminal is set up control link with controlled terminal by ICP/IP protocol, this long-distance management system has been realized long-range KVM function and remote dummy memory function by long-range KVM subsystem and remote storage subsystem, the switch of the Power/Reset passage by KVM subsystem controls controlled terminal has been realized long-range controlled terminal being carried out cold start-up simultaneously, restart and the shutdown task, thereby realized just can realizing function that long-range controlled terminal is fully controled and managed without the execute-in-place controlled terminal.
Below in conjunction with Figure of description and embodiment technical scheme of the present invention is described further,
Embodiment one:
Such as Fig. 1, the invention provides a kind of long-distance management system, this long-distance management system is used for the controlled terminal 3 of control terminal 1 supervising the network side, described control terminal 1 comprises WEB browsing apparatus 11, be connected with the control unit 22 of Base on Web between described control terminal and the controlled terminal, this long-distance management system comprises controls subsystem, long-range KVM subsystem and remote dummy storage subsystem, the described subsystem of controlling comprises described WEB browsing apparatus 11 and control unit 22, WEB browsing apparatus 11 and the control unit 22 of control terminal are set up control link by network interface card module 21, and described network interface card module 21 is connected with control unit 22.
Describedly control the data command that subsystem is transformed into the information of controlling of control terminal the long-range KVM subsystem of control and remote dummy storage subsystem.
Described control unit 22 comprises baseboard management controller (BMC), described baseboard management controller is an arm processor 223, this control unit 22 also comprises internal memory 221, Flash flash chip 222, store embedded control system in the described Flash flash chip 222, described control system runs on the arm processor 223, on this control system, also move the control program that a Base on Web is arranged, control terminal is by the IP address of input network interface card module 21 in its browser, set up control link with the control unit of controlled terminal, start the control program that runs on the Base on Web on the embedded control system.
Described KVM subsystem comprises KVM module 23 and USB interface 24, this USB interface 24 is connected by data wire with the USB interface of controlled terminal, described network interface card module 21 is obtained mouse that long-range control terminal sends over and the control information of keyboard, operational order is sent to arm processor 223 by network interface card module 21 and processes, control KVM module 23 work behind these arm processor 223 processing control informations, this KVM module 23 is connected with the South Bridge chip 34 of controlled terminal 3 by USB interface 24, mouse and the keyboard of controlled terminal 3 are synchronous, set up control link.
Described KVM subsystem also comprises VGA input interface 25, described VGA input interface 25 is connected with the VGA output interface 35 of controlled terminal 3 by data wire, this VGA input interface 35 obtains the VGA information of controlled terminal 3, KVM module 23 is crossed network with this VGA information exchange and is sent to long-range control terminal 1, after the VGA information exchange that is synchronized with the VGA output interface output of controlled terminal 3 is crossed arm processor and processed, send to control terminal 1 by network interface card module 21 again.
Described KVM subsystem also comprises the Power/Reset output interface, this Power/Reset output interface is connected with the Power/Reset input interface 31 of controlled terminal 3 by data wire, thereby KVM module 23 sends the cold start-up of Power/Reset instruction control controlled terminal, shuts down and restarts task to the Power/Reset output interface, and is identical with the principle of controlled terminal being controlled by the front end Power/Reset button of controlled terminal 3.
Described remote storage subsystem is synchronized to controlled terminal by described long-range KVM subsystem with the mouse of described control terminal or the operational order of keyboard, sets up the storage device of control terminal and the corresponding relation of described controlled terminal.Described KVM module 23 comprises USB hub submodule 231,24 described network interface card modules 21 are obtained control terminal with the control command of its memory device as the part of the memory device of controlled terminal, arm processor is processed 231 work of 223 this control commands control USB hub submodules, and USB hub submodule 231 is set up the communication link between the memory device of the memory device of control terminal 1 and controlled terminal 3.The communication link of setting up by USB hub submodule 231, can be all virtual in controlled terminal 3 the CD-ROM drive of long-range control terminal 1, floppy drive and USB device, the installation source image of the CD-ROM drive read operation system by control terminal 1, realize remote OS installation, comprise Windows, Linux and Unix etc.
Embodiment two: on the basis of above-described embodiment one, described long-distance management system comprises that also this long-distance management system also comprises the intelligent management platform subsystem, be used for obtaining the sensing data of controlled terminal and the bios information of bios memory module, described sensing data and bios information exchange are crossed network and are sent to control terminal.Described baseboard management controller (BMC) 22 is supported the IPMI2.0 standard, described controlled terminal 3 also comprises transducer 33, data communication device in this transducer 33 is crossed the IPMB bus transfer to arm processor 223, sends to control terminal 1 by network after these arm processor 223 these data compile.
This arm processor 223 obtains bios information from bios memory module 32, and be stored in the Flash flash chip 222, control terminal 1 sends the controlled terminal bios information that reads to controlled terminal 3, and arm processor 223 is directly transferred the bios information exchange and crossed network and send to control terminal 1 from Flash flash chip 222.
Embodiment three:
On the basis of above-described embodiment two or embodiment one, described long-distance management system also comprises the network security subsystem, carries out encryption and decryption for the authentication between control terminal and the controlled terminal with to the data of transmission.222 li data encrypting and deciphering programs that also store the support ssl protocol of described Flash flash chip, this data encryption program is decrypted processing to the data that network interface card module 21 receives, and the data that network interface card module 21 is sent are encrypted processing.
Embodiment four: corresponding, the present invention also provides another long-distance management system, as shown in Figure 2, described controlled terminal 3 also comprises baseboard management controller (BMC) 36, described BMC obtains the data of Flash flash chip in the BIOS memory module of data in the transducer of controlled terminal and controlled terminal by the IPMB interface, and these data communication devices are crossed the IPMB interface send to arm processor 223, this arm processor 223 is stored in these data in the Flash flash chip 222, when control terminal need to obtain these data these data communication devices is crossed network interface and sends to control terminal.
Embodiment five: the present invention also provides a kind of method for remote management, and the method is based on above-mentioned long-distance management system, and as shown in Figure 3, the actuation step of this management system is as follows,
A. control terminal is set up control link by IP address and controlled terminal;
B. process the control signal of control terminal by a baseboard management controller that is independent of the controlled terminal operation;
C. this baseboard management controller is controlled a KVM module mouse and the Keyboard Control instruction of control terminal is synchronized to controlled terminal;
D1. the switch of the Power/Reset passage of this KVM module controls controlled terminal;
E. by the KVM module with the VGA information synchronization of controlled terminal to control terminal;
Further among the embodiment, after above-mentioned steps d1, this method for remote management also comprises: steps d 2, the USB hub submodule in this baseboard management controller control KVM module are set up the communication link between the memory device of the memory device of control terminal and controlled terminal.
Further among the embodiment, after above-mentioned steps d2 (front), this method for remote management also comprises: this baseboard management controller obtains the transducer of controlled terminal and the data d3 among the bios, and process this data, the data communication device after this baseboard management controller will be processed is crossed Internet Transmission to control terminal.
Be specially:
Control terminal is set up control link by IP address and the controlled terminal of the control device that is connected with controlled terminal, control terminal sends to control device with the instruction of controlling of its mouse and keyboard, the network interface card module of control device is obtained this arm processor processing of controlling instruction and sending it to baseboard management controller, this arm processor switches by control KVM module, remote mouse is connected with keyboard controls instruction and be sent on the USB interface that is connected with the South Bridge chip of controlled terminal by the USB line.Mouse and the Keyboard Control instruction of control terminal are synchronized to controlled terminal.
The processor of controlled terminal receives the control command of mouse and the keyboard of long-range control terminal, carry out a series of manipulation tasks, the VGA information exchange of result after this controlled terminal will be carried out is crossed the VGA output interface that the video card module sends to controlled terminal, the VGA input interface that described VGA information exchange is crossed the control device that is connected with the VGA output interface is transferred to the KVM module, this KVM module is crossed the network interface card module with this VGA information exchange and is sent to control terminal, and control terminal obtains this video information and shows at display screen after treatment.
When control terminal connects upper controlled terminal, when controlled terminal is carried out the manipulation tasks of Power/Reset, this controls instruction to this controlled terminal by Network Capture, sending it to arm processor processes, this arm processor is by the Power/Reset passage of KVM module controls Power/Reset interface, carry out the Power/Reset instruction, by the KVM module this VGA information synchronization is arrived control terminal simultaneously, control terminal shows at display screen after treatment.
When control terminal connects upper controlled terminal, need to be with the CD-ROM drive of control terminal, floppy drive and USBdevice are virtual to controlled terminal, during as the virtual memory facilities of controlled terminal, this controls instruction to this controlled terminal by Network Capture, sending it to arm processor processes, the work of this arm processor control USB hub submodule, this USB hub submodule is set up and being connected of the South Bridge chip of controlled terminal by USB interface, realize the transfer of data between the memory device of the memory device of control terminal and controlled terminal by network, when installing operating system, the source file of control terminal read operation system, and by Internet Transmission to controlled terminal.
, by network file transfer is processed to the arm processor of control device during to the controlled terminal transfer files at control terminal, this arm processor sends data to controlled terminal by USB interface.
When control terminal obtains the sensor information, event log of controlled terminal and bios data by control device, control terminal by network to the arm processor sending controling instruction, this arm processor reads the information such as voltage, temperature and rotation speed of the fan from transducer by the IPMB bus, from the bios memory module, read the bios data message, send to control terminal by network.
Comprise also in the described operating system that runs on the arm processor that one supports the encryption and decryption program of ssl protocol, described encryption and decryption program is encrypted the data that send to control terminal, the data that the control terminal that receives is sent are decrypted, after control terminal and control device are set up control and communication link, control terminal is downloaded the SSL safe key by network from control device, and is embedded in browser.
The present invention also provides a kind of and is connected with controlled terminal and sets up control between control terminal and the controlled terminal and the control device 2 of communication link, control device as described in Figure 4 comprises network interface card module 21 and a processing unit, described processing unit is baseboard management controller (BMC) 22, this network interface card module 21 comprises LAN interface and network card chip, described baseboard management controller 22 comprises an arm processor 223, described control device 2 also comprises internal memory 221, Flash flash chip 222, store embedded control system in the described Flash flash chip 222, described control system runs on the arm processor 223, on this control system, also move the control program that a Base on Web is arranged, control terminal is by the IP address of input control device network interface card module in its browser, thereby startup runs on the control program of the Base on Web on the embedded control system.
Described control device 2 also comprises KVM module 23 and USB interface 24, this USB interface 24 is connected by data wire with the USB interface of controlled terminal, described network interface card module 21 is obtained mouse that long-range control terminal sends over and the control information of keyboard, operational order is sent to arm processor by network interface card module 21 and processes 223, and this arm processor is processed 223 control KVM modules 23 and switched remote mouse is connected with keyboard and control instruction and be sent on the USB interface that is connected with the South Bridge chip of controlled terminal by the USB line.Mouse and the Keyboard Control instruction of control terminal are synchronized to controlled terminal.
Described control device 2 also comprises VGA input interface 25, described VGA input interface 25 is connected with the VGA output interface of controlled terminal by data wire, this VGA input interface 25 obtains the VGA information of controlled terminal, and KVM module 23 sends to long-range control terminal by the arm processor compression is rear by network with this VGA signal.
Described control device 2 also comprises Power/Reset output interface 27, this Power/Reset output interface 27 is connected with the Power/Reset input interface of controlled terminal by data wire, thereby KVM module 23 sends the cold start-up of Power/Reset instruction control controlled terminal, shuts down and restarts task to Power/Reset output interface 27, and is identical with the principle of controlled terminal being controlled by the front end Power/Reset button of controlled terminal.
Described KVM module 23 comprises USB hub submodule 231, described network interface card module 21 is obtained control terminal with the control command of its memory device as the part of the memory device of controlled terminal, arm processor 223 is processed 231 work of this control commands control USB hub submodule, and USB hub submodule 231 is set up the communication link between the memory device of the memory device of control terminal and controlled terminal.The communication link of setting up by USBhub submodule 231, can be all virtual in controlled terminal the CD-ROM drive of long-range control terminal, floppy drive and USBdevice, the installation source image of the CD-ROM drive read operation system by control terminal, realize remote OS installation, comprise Windows, Linux and Unix etc.
Described baseboard management controller (BMC) 22 is supported the IPMI2.0 standard, described controlled terminal also comprises transducer, data communication device in this transducer is crossed the IPMB bus transfer to arm processor 223, sends to control terminal by network after these arm processor 223 these data compile.
This arm processor 223 obtains sensing data and when the value of front sensor from the BIOS module, and after compiling through arm processor, the controlled terminal sensing data message, send to by the network interface module and to execute the control end.
Described control device also comprises an external power interface 28, and described external power interface is connected with electrical network by a power supply adaptor.
222 li data encrypting and deciphering programs that also store the support ssl protocol of described Flash flash chip, this data encryption program is decrypted processing to the data that network interface card module 21 receives, and the data that network interface card module 21 is sent are encrypted processing.
It should be noted that, above embodiment is only unrestricted in order to technical scheme of the present invention to be described, although with reference to preferred embodiment the present invention is had been described in detail, those of ordinary skill in the art is to be understood that, can make amendment or be equal to replacement technical scheme of the present invention, and not breaking away from the spirit and scope of technical solution of the present invention, it all should be encompassed in the middle of the claim scope of the present invention.