CN103634378A - Online time scheduling system and method for virtual servers - Google Patents
Online time scheduling system and method for virtual servers Download PDFInfo
- Publication number
- CN103634378A CN103634378A CN201310565658.2A CN201310565658A CN103634378A CN 103634378 A CN103634378 A CN 103634378A CN 201310565658 A CN201310565658 A CN 201310565658A CN 103634378 A CN103634378 A CN 103634378A
- Authority
- CN
- China
- Prior art keywords
- virtual server
- line
- virtual
- server
- standard grade
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Granted
Links
Images
Landscapes
- Computer And Data Communications (AREA)
Abstract
The invention discloses an online time scheduling system and an online time scheduling method for virtual servers. The system comprises a management module, a timing module and a scheduling module, wherein the management module is used for creating at least two virtual servers, and operating the virtual servers according to a received scheduling instruction; the timing module is used for counting the online time of the virtual servers, and transmitting a scheduling request when the online time reaches an online time threshold value; the scheduling module is used for setting a virtual server scheduling strategy and the online time threshold value, determining the virtual server of which the online time reaches the online time threshold value to be an offline virtual server when the scheduling request is received from the timing module, simultaneously selecting and determining the virtual server consistent with the scheduling strategy to be the virtual server to be online, and transmitting a corresponding scheduling instruction to the management module. According to the system and the method, the time of exposure of the virtual servers on the Internet can be controlled, the probability of effective attacks of hackers to the servers is reduced, and the security of the servers on the Internet is greatly improved.
Description
Technical field
The present invention relates to virtual machine technique field, relate in particular to a kind of dispatching patcher and method of virtual server line duration.
Background technology
In current cybertimes, computer network security is the theme of network now, about the topic of network security, is seen everywhere in the media, and assault also becomes a great trouble of network security.Hacker attack event emerges in an endless stream all over the world, the scope of assault object also very extensively, military establishment, political organizations and financial commercial undertaking, all at the row of hacker's target of attack.
According to the statistics of domestic a data security report, only in China in 2012, be tampered nearly 16388 of Websites quantities within the border, wherein government website is 1802, increases by respectively 6.1% and 21.4% on a year-on-year basis.The network security that can see China from statistics, is faced with serious threat.And external network security situation allows of no optimist too, government organs website, transnational enterprise website, financial sector etc. spread out of while suffering the message of assault.
In practice, server conventionally can be exposed in the Internet and reach some months, and the even longer time, this just provides a large amount of chances for assailant, allows assailant have time enough to go the various security protections of the system of breaking through, and successfully invades goal systems.
Summary of the invention
One of technical problem to be solved by this invention is the dispatching patcher that a kind of virtual server line duration need to be provided, and it improves the degree of safety of virtual server by controlling the line duration of virtual server.A kind of dispatching method of virtual server line duration is also provided in addition.
In order to solve the problems of the technologies described above, the invention provides a kind of dispatching patcher of virtual server line duration, comprise: administration module, it for creating at least two virtual servers on physical server, formulate virtual server list, and according to the dispatch command receiving, corresponding virtual server is reached the standard grade and off-line operation; Timing module, it is for the line duration of each virtual server is carried out to timing, and when the line duration of virtual server reaches line duration threshold value, sends virtual server dispatch request; Scheduler module, it is for arranging virtual server scheduling strategy and line duration threshold value, it is when the virtual server dispatch request receiving from described timing module, the virtual server that line duration is reached to line duration threshold value is defined as the virtual server of wanted off-line, from described virtual server list, select the virtual server that meets scheduling strategy to be defined as the virtual server that will reach the standard grade simultaneously, and send corresponding dispatch command to described administration module.
In one embodiment, also comprise: synchronization module, it is for being synchronized to the data of the virtual server of wanted off-line and session status for replacing its virtual server that will reach the standard grade.
In one embodiment, also comprise: forward control module, it is used to each virtual server operating on described physical server that unified IP address and port are set, described administration module reach the standard grade and off-line operation after, the external request of access described IP address and port is forwarded to the virtual server of newly reaching the standard grade.
In one embodiment, described virtual server scheduling strategy is included in to be selected the longest virtual server of off-line time or the minimum virtual server of load as the virtual server that will reach the standard grade and allows simultaneously online virtual server quantity in all off-line virtual servers, wherein, the described online virtual server quantity simultaneously of allowing is no more than half of virtual server quantity summation on physical server.
In one embodiment, described administration module is realized the off-line of described virtual server and the operation of reaching the standard grade by changing the state of the Microsoft Loopback Adapter of respective virtual server.
In one embodiment, each virtual server has the operating system of different platform, and described each virtual server deploy has identical WEB application.
According to a further aspect in the invention, a kind of dispatching method of virtual server line duration is also provided, comprise: management process, on physical server, create at least two virtual servers, formulate virtual server list, and according to the dispatch command receiving, corresponding virtual server is reached the standard grade and off-line operation; Timing step, carries out timing to the line duration of each virtual server, and when the line duration of virtual server reaches line duration threshold value, sends virtual server dispatch request; Scheduling step, the line duration threshold value of virtual server scheduling strategy and virtual server is set, when receiving virtual server dispatch request, the virtual server that line duration is reached to line duration threshold value is defined as the virtual server of wanted off-line, from described virtual server list, select the virtual server that meets scheduling strategy to be defined as the virtual server that will reach the standard grade simultaneously, and send corresponding dispatch command.
In one embodiment, also comprise: synchronizing step, is synchronized to the data in the virtual server of wanted off-line and session status for replacing its virtual server that will reach the standard grade.
In one embodiment, also comprise: forward and control step, for each virtual server operating on described physical server arranges unified IP address and port, reach the standard grade and off-line operation after, the external request of access described IP address and port is forwarded to the virtual server of newly reaching the standard grade.
In one embodiment, life cycle to described virtual server manages, and described management comprises: start virtual server, close virtual server, delete virtual server, add virtual server, upgrade virtual server information, check virtual server details, on virtual machine display console, show managed virtual server list.
Compared with prior art, one or more embodiment of the present invention can have the following advantages by tool:
The present invention is by the dispatching patcher of virtual server line duration, can adjust neatly reaching the standard grade of virtual server and off-line according to the line duration threshold value arranging, thereby control the time that virtual server exposes on the internet, and then the chance of the effective attack server of minimizing hacker, greatly improve the degree of safety of server in the Internet, and strengthened user's experience.
Other features and advantages of the present invention will be set forth in the following description, and, partly from specification, become apparent, or understand by implementing the present invention.Object of the present invention and other advantages can be realized and be obtained by specifically noted structure in specification, claims and accompanying drawing.
Accompanying drawing explanation
Accompanying drawing is used to provide a further understanding of the present invention, and forms a part for specification,, jointly for explaining the present invention, is not construed as limiting the invention with embodiments of the invention.In the accompanying drawings:
Fig. 1 is the structured flowchart of physical server that includes according to an embodiment of the invention the dispatching patcher of virtual server line duration;
Fig. 2 is the network connection architecture figure of four virtual servers of one example according to the present invention;
Fig. 3 is the flow chart of the dispatching method of virtual server line duration according to another embodiment of the present invention.
Embodiment
For making the object, technical solutions and advantages of the present invention clearer, below in conjunction with accompanying drawing, the present invention is described in further detail.
The present embodiment is mainly the scheduling of reaching the standard grade with off-line to operating in a plurality of virtual servers on physical server, as shown in Figure 1, at physical server inner setting the dispatching patcher 100 of one virtual server line duration.
As shown in Figure 1, the dispatching patcher 100 of this virtual server line duration mainly comprises administration module 10, scheduler module 20, synchronization module 30, forwards control module 40 and timing module 50.
Wherein, administration module 10, for create at least two virtual servers on physical server, is formulated virtual server list, and according to the dispatch command receiving, corresponding virtual server is reached the standard grade and off-line operation.
It should be noted that, in virtual machine technique field, install operating system and WEB service in a virtual machine after, this virtual machine can be used as a virtual server.In the virtual machine creating, install respectively operating system, and required WEB application on disposing respectively in each operating system, make each virtual machine become the virtual server of this WEB application, each virtual machine can independently externally provide WEB service.
Installing operating system while disposing WEB application, can adopt safe diversification strategy.In the present embodiment, the virtual machine using is all the virtual server of WEB application, preferably, the operating system of different platform is installed for different virtual machine server, but all dispose identical WEB application, can make like this assailant's work more complicated, and then can strengthen the fail safe of virtual server.
Shown in Fig. 2, be the network connection architecture figure of 4 virtual servers.In this example, administration module 10 has created 4 virtual servers.Shown in Fig. 2 is the network structure of these four virtual servers.In this example, and each virtual server at least comprises two Microsoft Loopback Adapters (preferably two Microsoft Loopback Adapters).
As shown in Figure 2, virtual server 1, virtual server 2, virtual server 3 and virtual server 4 include two Microsoft Loopback Adapters, wherein a Microsoft Loopback Adapter is for linking the inner high speed local area network (LAN) between virtual machine, another piece Microsoft Loopback Adapter is for being connected with external network, the inner high speed local area network (LAN) between virtual machine completely and external network completely cut off.Can strengthen the fail safe of virtual server like this.
In addition, administration module 10, except carrying out aforesaid operations, also manages the life cycle of virtual server.Comprising: start virtual server, close virtual server, delete virtual server, add virtual server, upgrade virtual server information, check virtual server details, on virtual machine display console, show managed virtual server list.
For scheduler module 20, it is for arranging virtual server scheduling strategy and line duration threshold value, when the virtual server dispatch request receiving from timing module 50, the virtual server that line duration is reached to line duration threshold value is defined as the virtual server of wanted off-line, from virtual server list, select the virtual server that meets scheduling strategy to be defined as the virtual server that will reach the standard grade simultaneously, and send corresponding dispatch command to administration module 10.
Below in conjunction with timing module 50, illustrate how to dispatch.Timing module 50 carries out timing to the line duration of each virtual server, and when the line duration of virtual server reaches the line duration threshold value of formulating in scheduler module 20, to scheduler module 20, send the dispatch request of reaching the standard grade with off-line for virtual server.According to received dispatch request, the virtual server that scheduler module 20 reaches line duration line duration threshold value is on the one hand defined as the virtual server of wanted off-line, in virtual server list from administration module 10, choose on the other hand meet virtual server scheduling strategy virtual server as the virtual server that will reach the standard grade, and to administration module 10, send dispatch commands and realize the off-line of virtual server and the state conversion of reaching the standard grade with the state of the Microsoft Loopback Adapter of notice administration module 10 change virtual servers.
Preferably, above-mentioned scheduling strategy is included in and in all off-line virtual servers, selects the longest virtual server of off-line time or the minimum virtual server of load as the virtual server that will reach the standard grade and allow online virtual server quantity to be simultaneously no more than half of virtual server quantity summation on physical server.
In detail, preferentially select the longest virtual server of off-line time to refer to and from the virtual server of all off-lines, select one in the longest virtual server of the time of off-line state, as the virtual server that will reach the standard grade; The minimum virtual server of preferential selection load refers to selects a virtual server that load is minimum from the virtual server of all off-lines, as the virtual server that will reach the standard grade.
In addition, scheduler module 20 is gone back on-line time and the off-line time of each virtual server of real-time servicing, and each online time of assurance virtual server is no more than set point, and guarantees that each has online virtual server constantly simultaneously.
Further, for the normal operation that guarantees WEB service is not because the switching of virtual server is interrupted, synchronization module 30 need to be synchronized to the data in the virtual server of wanted off-line and session status for replacing its virtual server that will reach the standard grade, and so-called session status refers to the state of the session of setting up between client and the virtual server of the off-line of wanting.
In addition, owing to moving a plurality of virtual servers on physical server, in order to simplify the complexity of system, forwarding control module 40 is that each virtual server operating on physical server arranges unified IP address and port, and the external request of this IP address of access and port is forwarded to the virtual server of newly reaching the standard grade.; if administration module 10 has carried out off-line and has reached the standard grade after operation; if exist the external request of this IP address of an access and port to send to the virtual server A of firm off-line; now just this external request need to be sent on the virtual server B that replaces this virtual server A; when can guarantee virtual machine security like this, can also continual service provide.
It should be noted that and according to self-defining line duration threshold value, dispatch that virtual server is reached the standard grade and off-line, can reduce the time that virtual server exposes in the Internet, thereby make assault virtual machine more difficult, greatly improved the degree of safety of server.Such as, if be 1 minute by the line duration threshold value setting of virtual server, virtual server is reached the standard grade 1 minute with regard to off-line, makes hacker only have the time of 1 minute to attack; If virtual server line duration is arranged shortlyer, the invasion time that hacker can utilize is just shorter.
From another viewpoint, the present invention also proposes a kind of dispatching method of virtual server line duration.Below in conjunction with the dispatching patcher 100 of above-mentioned virtual server line duration, each step of the scheduling of virtual server line duration is described.
Fig. 3 is the flow chart of the dispatching method of virtual server line duration according to another embodiment of the present invention.Please also refer to Fig. 1 and Fig. 3, first as shown in step S310, administration module 10 creates at least two virtual servers on physical server, and formulates virtual server list, further according to the dispatch command receiving, corresponding virtual server is reached the standard grade and off-line operation.
In addition, the life cycle of 10 pairs of virtual servers of administration module manages and comprises: start virtual server, close virtual server, delete virtual server, add virtual server, upgrade virtual server information, check virtual server details, on virtual machine display console, show managed virtual server list.
Then, in step S320, timing module 50 carries out timing to the line duration of each virtual server, and when the line duration of virtual server reaches line duration threshold value, to scheduler module 20, sends virtual server dispatch request.
Then, in step S330, scheduler module 20 arranges virtual server scheduling strategy and line duration threshold value, it is when the virtual server dispatch request receiving from timing module 50, the virtual server that line duration is reached to line duration threshold value is defined as the virtual server of wanted off-line, from virtual server list, select the virtual server that meets scheduling strategy to be defined as the virtual server that will reach the standard grade simultaneously, and send corresponding dispatch command to administration module 10.
As mentioned above, preferably, this virtual server scheduling strategy is included in and in all off-line virtual servers, selects the longest virtual server of off-line time or the minimum virtual server of load as the virtual server that will reach the standard grade and allow online virtual server quantity to be simultaneously no more than half of virtual server quantity summation on physical server.
Afterwards, as shown in step S340, synchronization module 30 is synchronized to the data in the virtual server of wanted off-line and session status for replacing its virtual server that will reach the standard grade, thereby the normal operation that guarantees WEB service is not because the switching of virtual server is interrupted.
Finally, in step S350, forward control module 40 for each virtual server operating on described physical server arranges unified IP address and port, the external request of access described IP address and port is forwarded to the virtual server of newly reaching the standard grade.
In addition, be appreciated that and when dispatching patcher 100 initial start of virtual server line duration, also follow the virtual server scheduling strategy in scheduler module 20.
In sum, the present embodiment is by the dispatching patcher of virtual server line duration, can adjust neatly reaching the standard grade of virtual server and off-line according to the line duration threshold value arranging, thereby control the time that virtual server exposes on the internet, and then the chance of the effective attack server of minimizing hacker, greatly improve the degree of safety of server in the Internet, and strengthened user's experience.
The above; be only specific embodiment of the invention case, protection scope of the present invention is not limited to this, is anyly familiar with those skilled in the art in technical specification of the present invention; to modification of the present invention or replacement, all should be within protection scope of the present invention.
Claims (10)
1. a dispatching patcher for virtual server line duration, is characterized in that, comprising:
Administration module, it,, for create at least two virtual servers on physical server, is formulated virtual server list, and according to the dispatch command receiving, corresponding virtual server is reached the standard grade and off-line operation;
Timing module, it is for the line duration of each virtual server is carried out to timing, and when the line duration of virtual server reaches line duration threshold value, sends virtual server dispatch request;
Scheduler module, it is for arranging virtual server scheduling strategy and line duration threshold value, it is when the virtual server dispatch request receiving from described timing module, the virtual server that line duration is reached to line duration threshold value is defined as the virtual server of wanted off-line, from described virtual server list, select the virtual server that meets scheduling strategy to be defined as the virtual server that will reach the standard grade simultaneously, and send corresponding dispatch command to described administration module.
2. dispatching patcher according to claim 1, is characterized in that, also comprises:
Synchronization module, it is for being synchronized to the data of the virtual server of wanted off-line and session status for replacing its virtual server that will reach the standard grade.
3. dispatching patcher according to claim 2, is characterized in that, also comprises:
Forward control module, it is used to each virtual server operating on described physical server that unified IP address and port are set, described administration module reach the standard grade and off-line operation after, the external request of access described IP address and port is forwarded to the virtual server of newly reaching the standard grade.
4. dispatching patcher according to claim 1, is characterized in that,
Described virtual server scheduling strategy is included in to be selected the longest virtual server of off-line time or the minimum virtual server of load as the virtual server that will reach the standard grade and allows simultaneously online virtual server quantity in all off-line virtual servers, wherein, the described online virtual server quantity simultaneously of allowing is no more than half of virtual server quantity summation on physical server.
5. according to the dispatching patcher described in claim 1-4 any one, it is characterized in that,
Described administration module is realized the off-line of described virtual server and the operation of reaching the standard grade by changing the state of the Microsoft Loopback Adapter of respective virtual server.
6. dispatching patcher according to claim 5, is characterized in that,
Each virtual server has the operating system of different platform, and described each virtual server deploy has identical WEB application.
7. a dispatching method for virtual server line duration, is characterized in that, comprising:
Management process creates at least two virtual servers on physical server, formulates virtual server list, and according to the dispatch command receiving, corresponding virtual server is reached the standard grade and off-line operation;
Timing step, carries out timing to the line duration of each virtual server, and when the line duration of virtual server reaches line duration threshold value, sends virtual server dispatch request;
Scheduling step, the line duration threshold value of virtual server scheduling strategy and virtual server is set, when receiving virtual server dispatch request, the virtual server that line duration is reached to line duration threshold value is defined as the virtual server of wanted off-line, from described virtual server list, select the virtual server that meets scheduling strategy to be defined as the virtual server that will reach the standard grade simultaneously, and send corresponding dispatch command.
8. dispatching method according to claim 7, is characterized in that, also comprises:
Synchronizing step, is synchronized to the data in the virtual server of wanted off-line and session status for replacing its virtual server that will reach the standard grade.
9. dispatching method according to claim 7, is characterized in that, also comprises:
Forward to control step, for each virtual server operating on described physical server arranges unified IP address and port, reach the standard grade and off-line operation after, the external request of access described IP address and port is forwarded to the virtual server of newly reaching the standard grade.
10. according to the dispatching method described in claim 7-9 any one, it is characterized in that, life cycle to described virtual server manages, and described management comprises: start virtual server, close virtual server, delete virtual server, add virtual server, upgrade virtual server information, check virtual server details, on virtual machine display console, show managed virtual server list.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201310565658.2A CN103634378B (en) | 2013-11-13 | 2013-11-13 | Online time scheduling system and method for virtual servers |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201310565658.2A CN103634378B (en) | 2013-11-13 | 2013-11-13 | Online time scheduling system and method for virtual servers |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN103634378A true CN103634378A (en) | 2014-03-12 |
| CN103634378B CN103634378B (en) | 2017-05-17 |
Family
ID=50214994
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201310565658.2A Active CN103634378B (en) | 2013-11-13 | 2013-11-13 | Online time scheduling system and method for virtual servers |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN103634378B (en) |
Cited By (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN106326007A (en) * | 2016-08-22 | 2017-01-11 | 北京信安世纪科技有限公司 | Distribution operation method, device and system |
Citations (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US20070094659A1 (en) * | 2005-07-18 | 2007-04-26 | Dell Products L.P. | System and method for recovering from a failure of a virtual machine |
| CN101383688A (en) * | 2007-09-06 | 2009-03-11 | 凹凸科技（中国）有限公司 | Data communication device and method for keeping high availability of data communication device |
| CN101778091A (en) * | 2009-01-08 | 2010-07-14 | 王垒 | Expandable security server alternate system |
| US20100332643A1 (en) * | 2009-06-24 | 2010-12-30 | Red Hat Israel, Ltd. | Pre-Scheduling the Timelines of Virtual Machines |
-
2013
- 2013-11-13 CN CN201310565658.2A patent/CN103634378B/en active Active
Patent Citations (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US20070094659A1 (en) * | 2005-07-18 | 2007-04-26 | Dell Products L.P. | System and method for recovering from a failure of a virtual machine |
| CN101383688A (en) * | 2007-09-06 | 2009-03-11 | 凹凸科技（中国）有限公司 | Data communication device and method for keeping high availability of data communication device |
| CN101778091A (en) * | 2009-01-08 | 2010-07-14 | 王垒 | Expandable security server alternate system |
| US20100332643A1 (en) * | 2009-06-24 | 2010-12-30 | Red Hat Israel, Ltd. | Pre-Scheduling the Timelines of Virtual Machines |
Cited By (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN106326007A (en) * | 2016-08-22 | 2017-01-11 | 北京信安世纪科技有限公司 | Distribution operation method, device and system |
Also Published As
| Publication number | Publication date |
|---|---|
| CN103634378B (en) | 2017-05-17 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| JP5715185B2 (en) | Packet processing method, apparatus and system | |
| US8442958B2 (en) | Server change management | |
| EP3288269A1 (en) | Method and system for cloud-based storage of video, and method and system for previewing cloud-stored video | |
| CN104317764B (en) | A kind of real-time control method of 1553B buses asynchronous message | |
| CN104011687A (en) | System and method for non-disruptive management of services in network environment | |
| CN102546839B (en) | Efficient and reliable software distribution method for large scale network | |
| CN104639464A (en) | System and method for realizing cross-interchanger link aggregation on OpenFlow interchanger | |
| EP3076290B1 (en) | Method and device for remotely updating application program | |
| CN105592127B (en) | Application management system for cloud computing environment | |
| CN101815005B (en) | network device, system and network management method | |
| CN104038376A (en) | Method and device for managing real servers and LVS clustering system | |
| CN104243205A (en) | Message processing method and device used during virtual switch fault | |
| CN104767634A (en) | Method and apparatus for managing flow table | |
| CN106789521A (en) | A kind of ring network fault reverse method and link point | |
| CN108366087B (en) | ISCSI service realization method and device based on distributed file system | |
| CN103634378A (en) | Online time scheduling system and method for virtual servers | |
| CN105515869A (en) | Out-of-band management method and device for virtual switching unit | |
| CN103051482A (en) | Method for isolating and restoring port based on FC (Fiber Channel) switchboard | |
| CN103179013A (en) | Looped network protection achieving method and system | |
| CN107124316B (en) | Hardware based quick switching action implementation method in a kind of data communications equipment | |
| CN102594696A (en) | Method and device for managing link aggregation groups (LAGs) of network device | |
| CN103138961A (en) | Server control method, controlled server and central control server | |
| CN103716186B (en) | Artificial telephone traffic system with network fault tolerance capability and method thereof | |
| CN105391565A (en) | Method for achieving synchronization of backup business configuration | |
| KR102113641B1 (en) | Packet scheduling method by using mixed-criticality mode in software-defined network system, computer program therefor, and switch apparatus therefor |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| C10 | Entry into substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant |