CN110727501B - Practicing method and system based on virtual machine backup data - Google Patents

Practicing method and system based on virtual machine backup data Download PDF

Info

Publication number
CN110727501B
CN110727501B CN201910934912.9A CN201910934912A CN110727501B CN 110727501 B CN110727501 B CN 110727501B CN 201910934912 A CN201910934912 A CN 201910934912A CN 110727501 B CN110727501 B CN 110727501B
Authority
CN
China
Prior art keywords
drilling
network
virtual machine
backup data
virtual
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Active
Application number
CN201910934912.9A
Other languages
Chinese (zh)
Other versions
CN110727501A (en
Inventor
杨杰
陈勇铨
周华
胡军擎
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Shanghai Information2 Software Inc
Original Assignee
Shanghai Information2 Software Inc
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Shanghai Information2 Software Inc filed Critical Shanghai Information2 Software Inc
Priority to CN201910934912.9A priority Critical patent/CN110727501B/en
Publication of CN110727501A publication Critical patent/CN110727501A/en
Application granted granted Critical
Publication of CN110727501B publication Critical patent/CN110727501B/en
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Images

Classifications

    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F9/00Arrangements for program control, e.g. control units
    • G06F9/06Arrangements for program control, e.g. control units using stored programs, i.e. using an internal store of processing equipment to receive or retain programs
    • G06F9/44Arrangements for executing specific programs
    • G06F9/455Emulation; Interpretation; Software simulation, e.g. virtualisation or emulation of application or operating system execution engines
    • G06F9/45533Hypervisors; Virtual machine monitors
    • G06F9/45558Hypervisor-specific management and integration aspects
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F11/00Error detection; Error correction; Monitoring
    • G06F11/07Responding to the occurrence of a fault, e.g. fault tolerance
    • G06F11/14Error detection or correction of the data by redundancy in operation
    • G06F11/1402Saving, restoring, recovering or retrying
    • G06F11/1446Point-in-time backing up or restoration of persistent data
    • G06F11/1458Management of the backup or restore process
    • G06F11/1464Management of the backup or restore process for networked environments
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F9/00Arrangements for program control, e.g. control units
    • G06F9/06Arrangements for program control, e.g. control units using stored programs, i.e. using an internal store of processing equipment to receive or retain programs
    • G06F9/44Arrangements for executing specific programs
    • G06F9/455Emulation; Interpretation; Software simulation, e.g. virtualisation or emulation of application or operating system execution engines
    • G06F9/45533Hypervisors; Virtual machine monitors
    • G06F9/45558Hypervisor-specific management and integration aspects
    • G06F2009/45595Network integration; Enabling network access in virtual machine instances

Landscapes

  • Engineering & Computer Science (AREA)
  • Theoretical Computer Science (AREA)
  • Software Systems (AREA)
  • Physics & Mathematics (AREA)
  • General Engineering & Computer Science (AREA)
  • General Physics & Mathematics (AREA)
  • Quality & Reliability (AREA)
  • Data Exchanges In Wide-Area Networks (AREA)

Abstract

The invention discloses a drilling method and a system based on virtual machine backup data, wherein the method comprises the following steps: step S1, selecting a drilling platform, creating a virtual switch on the drilling platform to form an isolated network, creating a proxy gateway virtual machine on the drilling platform, configuring two network adapters, wherein one is configured to a source production network, the other is configured to the isolated network, and setting an IP address and a network mapping relation; step S2, adding drilling rules, creating virtual machines or virtual machine groups for drilling through the selected backup data, restoring to the drilling platform, and configuring the network adapters of all the virtual machines as the isolated network created in step S1; step S3, completing a drilling task by executing the configured drilling script; and step S4, recording the results of successful execution and failure of the drilling script into drilling statistics and outputting a drilling report.

Description

Practicing method and system based on virtual machine backup data
Technical Field
The invention relates to the technical field of disaster recovery backup, in particular to a practicing method and a practicing system based on virtual machine backup data.
Background
With the rapid development of information technology, the requirements of enterprises on disaster recovery backup are gradually increased in the informatization construction process, and virtual machine backup recovery is also a representative scheme in the field of disaster recovery backup.
In the virtual machine backup, the backup modes include full backup, incremental backup and differential backup, the backup strategies are generally divided into daily backup, weekly backup, monthly backup, quarterly backup and annual backup, and the backup period can be different according to the specific business requirements and budgets of enterprises. In the prior art, a method for backing up a virtual machine generally includes: and generating an image file of the virtual machine by using a disk snapshot technology, backing up the image file of the virtual machine to a specified position, and recovering the virtual machine to the condition of backup by using the image file when the virtual machine fails.
However, as backup data increases, the probability of disaster occurrence is low, leading to some concerns and worries for enterprises: how to guarantee the validity of data backed up by the disaster backup system and how to ensure the time point of disaster occurrence so as to restore the data to the specified backup point in preparation, wherein the restored data is accurate, whether the application can run normally or not, and the like.
Therefore, in order to ensure the safety and reliability of the backup data, it is actually necessary to provide a method for regularly and automatically verifying the backup data to verify the validity of the backup data of the virtual machine.
Disclosure of Invention
In order to overcome the defects in the prior art, the invention aims to provide a practicing method and a practicing system based on virtual machine backup data, wherein the backup data is restored to a new virtual machine, an environment isolated from a production network is set, and whether the virtual machine data and application are normal or not is verified, so that the validity of the backup data is ensured, and the safety and reliability of the backup data when a disaster occurs are ensured.
In order to achieve the above object, the present invention provides a practicing method based on virtual machine backup data, comprising the following steps:
step S1, selecting a drilling platform, creating a virtual switch on the drilling platform to form an isolated network, creating a proxy gateway virtual machine on the drilling platform, configuring two network adapters, wherein one is configured to a source production network, the other is configured to the isolated network, and setting an IP address and a network mapping relation;
step S2, adding drilling rules, creating virtual machines or virtual machine groups for drilling through the selected backup data, restoring to the drilling platform, and configuring the network adapters of the drilling virtual machines as the isolated network created in step S1;
step S3, completing a drilling task by executing the configured drilling script;
and step S4, recording the results of successful execution and failure of the drilling script into drilling statistics and outputting a drilling report.
Preferably, the step S1 further includes:
step S100, selecting a target virtual platform as the drilling platform, and creating a virtual port group and a virtual switch on the drilling platform for isolating a network;
step S101, a new virtual machine is created and recovered on the drilling platform to serve as a proxy gateway, and two network adapters are configured at the same time, wherein one network adapter is assigned to a source production network and the other network adapter is assigned to the isolation network of a virtual switch;
and step S102, writing the appointed proxy gateway IP, isolated network, routing rule and NAT conversion relation information into the proxy gateway virtual machine, and setting an IP address and a network mapping relation.
Step S103, adding an IP of the same network segment with the IP of the proxy network on the production network on the management end, configuring a routing rule at the same time, selecting a network segment which is mapped to the source production network by a specified network segment, and adding a gateway as a proxy gateway so as to realize the request forwarding through the proxy gateway.
Preferably, in step S102, the proxy gateway virtual machine is started, the proxy gateway is pre-loaded with a start script, and executes loading and parsing of the floppy disk information, and configures two network card IP, routing and NAT conversion rules of the local machine.
Preferably, the network card IP of the source production network is set to be a non-existent address for communicating with the management terminal; the network card in the isolation network is set as the IP of the source production network segment, and if the virtual machine group to be exercised comprises virtual machines of a plurality of production network segments, the network card in the isolation network needs to be set with a plurality of corresponding network segment IPs.
Preferably, the step S2 further includes:
step S200, creating a drilling rule, selecting backup data, designating a drilling strategy, setting a drilling script step S201, selecting virtual machine backup data of designated reduction points and data of reduction time points, and rapidly restoring the drilling virtual machine to the drilling platform through common restoration or NFS;
step S202, setting the network adapter of the drilling virtual machine on the drilling platform, and configuring the network adapter on the isolated network created in the step S1
Step S203, starting the drilling virtual machine, verifying the mapping IP corresponding to the source production network through the management terminal, thereby accessing the IP in the isolation network and verifying the validity of the corresponding virtual machine and the application.
Preferably, in step S2, the operations are executed concurrently when there are multiple virtual machines.
Preferably, in step S3, the management end is used to execute the added drilling script one by one, the IP of the drilling virtual machine in the drilling script uses the IP mapped by the production network segment, the mapped IP is forwarded to the proxy gateway eth0 entry, and is converted to the proxy gateway eth1 port output through IP forwarding and NAT, after the proxy gateway eth1 finds the target virtual machine in the isolated network, the response data is finally returned to the management end through conversion to the proxy gateway eth 0.
Preferably, in step S3, the exercise task is executed periodically.
Preferably, the periodic policy execution drilling task comprises:
step S300, the drilling task is executed regularly according to the set drilling strategy, when the drilling task is executed regularly, the data of the last reducing point is searched each time, whether the drilling is executed in the previous time or not is judged, if the drilling is executed, the drilling is skipped, the drilling is re-checked and executed after the next period of scheduling is waited, and if the drilling is not executed, the step S301 is executed;
step S301, restoring the selected virtual machine or virtual machine set required to be used for drilling to the drilling platform, and configuring the network adapter of each drilling virtual machine as the isolated network
Step S302, the rule drilling script is executed by the management terminal.
In order to achieve the above object, the present invention further provides a drilling system based on virtual machine backup data, including the following:
a virtual machine switch and proxy gateway creation unit, configured to create a virtual switch on the drilling platform according to the selected drilling platform to form an isolation network, and create a proxy gateway virtual machine on the drilling platform, configure two network adapters, one of which is configured to a source production network and the other is configured to the isolation network, and set an IP address and a network mapping relationship;
a virtual machine recovery unit, configured to add a drilling rule, create a virtual machine or a virtual machine group for drilling through the selected backup data, recover to the drilling platform, and configure a network adapter of each drilling virtual machine as an isolated network created by the virtual machine switch and the proxy gateway creation unit;
the task execution unit is used for completing a drilling task by executing the configured drilling script;
and the result recording unit is used for recording the results of successful execution and failure of the drilling script into drilling statistics and outputting a drilling report.
Compared with the prior art, the virtual machine backup data-based drilling method and system provided by the invention have the advantages that a virtual switch is created to serve as a proxy gateway to isolate the production network from the drilling network, the virtual machine IP in the isolation network is not required to be modified manually, and the network mapping relation can be configured in advance, so that the full-automatic drilling function is realized, and a drilling result report can be output for enterprise reference and evaluation.
Drawings
FIG. 1 is a flowchart illustrating steps of a method for practicing data based on a virtual machine according to the present invention;
fig. 2 is a schematic diagram of a system architecture according to an embodiment of the present invention.
FIG. 3 is a system architecture diagram of a rehearsal system based on virtual machine backup data according to the present invention;
FIG. 4 is a timing diagram illustrating the performance of the present embodiment;
FIG. 5 is a flowchart illustrating the implementation of the drill platform;
FIG. 6 is a flowchart of adding a drill task in the present embodiment;
FIG. 7 is a flowchart illustrating the implementation of the periodic strategy drill according to the present embodiment;
fig. 8 is a schematic diagram of data of each restore point stored in the virtual machine backup data in this embodiment.
Detailed Description
Other advantages and capabilities of the present invention will be readily apparent to those skilled in the art from the present disclosure by describing the embodiments of the present invention with specific embodiments thereof in conjunction with the accompanying drawings. The invention is capable of other and different embodiments and its several details are capable of modification in various other respects, all without departing from the spirit and scope of the present invention.
Fig. 1 is a flowchart illustrating steps of a practicing method based on backup data of a virtual machine according to the present invention. As shown in fig. 1, the present invention provides a practicing method based on virtual machine backup data, which includes the following steps:
step S1, selecting a drilling platform, creating a virtual switch on the drilling platform to form an isolated network, creating a proxy gateway virtual machine on the drilling platform, configuring two network adapters, the first one configured to the source production network and the second one configured to the isolated network, and setting an IP address and a network mapping relationship.
In the embodiment of the present invention, when a drilling operation needs to be performed, a user initiates a command of adding a drilling platform to a management end, the management end creates a new virtual switch to a target platform through a built-in mirror image data packet to form an isolated network, the drilling platform may be a production platform or a standby platform, and an application architecture thereof is shown in fig. 2.
Specifically, step S1 further includes:
step S100, selecting a target virtual platform as the drilling platform, and creating a virtual port group and a virtual switch thereon for isolating a network.
Step S101, a new virtual machine is created and recovered on the target virtual platform (namely, the drilling platform) as a proxy gateway through virtual machine backup data built in the management platform, and two network adapters are configured at the same time, wherein one virtual machine is assigned to a source production network and the other virtual machine is assigned to an isolation network of a virtual switch.
Step S102, writing information such as the specified proxy gateway IP, isolated Network, routing rule, NAT (Network Address Translation) Translation relationship, etc. into the floppy disk of the proxy gateway virtual machine, and setting an IP Address and a Network mapping relationship. Specifically, a proxy gateway virtual machine is started, a start script is pre-built in the proxy gateway, loading and analyzing floppy disk information is executed, and two network card IP, routing and NAT conversion rules of the local machine are configured. In the specific embodiment of the invention, the network card IP of the set production network is a nonexistent address and is used for communicating with the management terminal machine; and the network card in the isolated network is set as the IP of the source production network segment, and if the virtual machine group to be exercised contains virtual machines of a plurality of production network segments, the network card in the isolated network needs to be set with a plurality of corresponding network segment IPs.
Step S103, adding an IP in the same network segment as the IP on the proxy gateway production network on the management terminal machine, configuring a routing rule, selecting a network segment which is mapped to the source production network by a specified network segment, and adding a gateway as the proxy gateway to realize the request forwarding through the proxy gateway, namely when the management terminal machine accesses a certain network segment, the data is forwarded to the proxy gateway.
And when the work of adding the drilling platform is finished, waiting for the virtual machine for subsequent drilling to be added, executing the drilling script and verifying the validity of the backup data.
Step S2, add drilling rules, restore the selected virtual machine or virtual machine group needed for drilling to the target drilling platform, and configure the network adapter of each virtual machine as the isolated network created in step S1. Specifically, when drilling is needed, a user selects specified virtual machine backup data and data at a restoration time point, and quickly restores the drilling virtual machine to a target drilling platform through normal restoration or NFS (Network File System).
Specifically, step S2 further includes:
and step S200, creating a drilling rule, selecting backup data, specifying a drilling strategy and setting a drilling script.
Step S201, selecting the virtual machine backup data of the designated restore point and the data of the restore time point, and rapidly restoring the drilling virtual machine to the target drilling platform through normal restoration or NFS. When multiple virtual machines are in use, the operations can be executed concurrently.
Step S202, a network adapter of the drilling virtual machine on the target drilling platform is set and configured on the isolated network created in step S1.
Step S203, the drilling virtual machine is started, and the mapping IP corresponding to the production network is verified through the management end machine, so that the IP in the isolation network is accessed, and the validity of the corresponding virtual machine and the application is verified.
In step S3, a drill task is executed.
Specifically, the added drill script is executed item by using the management-side machine. The IP of the target virtual machine (i.e. the drill virtual machine) in the script uses the IP mapped by the production network segment, i.e. the mapped IP is forwarded to an entrance of a proxy gateway eth0 and is converted into an eth1 port for output through IP FORWARD (IP forwarding) and NAT, and after the eth1 finds the target virtual machine in the isolated network, response data is finally returned to the management terminal machine through conversion to eth 0.
And step S4, recording the results of successful execution and failure of the drilling script into drilling statistics, and outputting a drilling report to finish the drilling.
Preferably, in step S3, the exercise task may be executed periodically, and the method specifically includes the following steps:
step S300, the drilling task is executed regularly according to the set drilling strategy, when the drilling task is executed regularly, the data of the last reducing point is searched each time, whether the drilling is executed in the previous time or not is judged, if the drilling is executed, the drilling is skipped, the drilling is re-checked and executed after the next period of scheduling is waited, and if the drilling is not executed, the step S301 is executed;
step S301, restoring the selected virtual machine or virtual machine group required to be used for drilling to the target drilling platform, and configuring the network adapter of each virtual machine as the isolated network.
Step S302, the rule drilling script is executed by the management terminal machine.
The invention selects the reduction point to be exercised based on the virtual machine backup data, creates a new virtual machine on the target exercise virtual platform, isolates the production gateway by configuring the virtual switch network, and simultaneously can map the production network segment through the appointed network segment through the routing and NAT conversion of the proxy gateway, thereby achieving the purpose of accessing and verifying the exercise virtual machine.
Therefore, in the invention, the virtual machine IP in the isolated network is not required to be modified manually, and the network mapping relation can be configured in advance, thereby realizing the function of full-automatic drilling and outputting a drilling result report for enterprise reference and evaluation. In addition, the invention can set automatic drilling scripts and strategies, regularly and automatically drill the latest backup data, and support the verification of the validity of the database or the port through the scripts, thereby ensuring that the service can be effectively taken over after the source production machine fails, ensuring the reliability of the backup data and providing a method for automatically checking the validity of the backup data for enterprises.
Fig. 3 is a system architecture diagram of a drilling system based on virtual machine backup data according to the present invention. As shown in fig. 3, the present invention provides a drilling system based on virtual machine backup data, which includes the following:
a virtual machine switch and proxy gateway creating unit 301, configured to create a virtual switch on the drilling platform according to the selected drilling platform to form an isolated network, and create a proxy gateway virtual machine on the drilling platform, configure two network adapters, a first configured to a source production network, a second configured to the isolated network, and set an IP address and a network mapping relationship. In the embodiment of the invention, when the drilling is required, a user initiates a command of adding the drilling platform to the management end, the management end creates a new virtual switch to the target drilling platform through the built-in mirror image data packet to form an isolated network, and the drilling platform can be a production platform or a standby platform.
Specifically, the virtual machine switch and proxy gateway creating unit 301 further includes:
and the virtual switch creating module selects a target virtual platform as the drilling platform, and creates a virtual port group and a virtual switch on the drilling platform for isolating the network.
And the proxy gateway creating module is used for creating and restoring a new virtual machine on the target virtual platform (namely the drilling platform) as a proxy gateway through virtual machine backup data built in the management platform, and simultaneously configuring two network adapters, one assigned to the source production network and the other assigned to the isolation network of the virtual switch.
And the configuration module is used for writing information such as the designated proxy gateway IP, the isolation network, the routing rule, the NAT conversion relation and the like into a floppy disk of the proxy gateway virtual machine and setting an IP address and a network mapping relation. Specifically, a proxy gateway virtual machine is started, a start script is pre-built in the proxy gateway, loading and analyzing floppy disk information is executed, and two network card IP, routing and NAT conversion rules of the local machine are configured. In the specific embodiment of the invention, the network card IP of the set production network is a nonexistent address and is used for communicating with the management terminal machine; and the network card in the isolated network is set as the IP of the source production network segment, and if the virtual machine group to be exercised contains virtual machines of a plurality of production network segments, the network card in the isolated network needs to be set with a plurality of corresponding network segment IPs.
The virtual IP address increasing module is used for increasing a virtual IP address which is in the same network segment with the IP on the proxy gateway production network on the management terminal machine, configuring routing rules, selecting a specified network segment to be mapped to the network segment of the source production network, and increasing the gateway as the proxy gateway so as to realize the purpose of forwarding the request through the proxy gateway, namely when the management terminal machine accesses a certain network segment, forwarding data to the proxy gateway.
A virtual machine recovery unit 302, configured to add a drilling rule, recover the selected virtual machine or virtual machine group that needs to be used for drilling to the target drilling platform, and configure the network adapter of each virtual machine as the isolated network created by the virtual machine switch and proxy gateway creation unit 301. Specifically, when the drilling is needed, the user selects the backup data of the specified virtual machine and the data at the restoration time point, and the recovery virtual machine unit 302 quickly recovers the drilling virtual machine to the target drilling platform through normal recovery or NFS.
Specifically, the restoring virtual machine unit 302 further includes:
and the drilling rule strategy configuration module is used for creating a drilling rule, selecting backup data, specifying a drilling strategy and setting a drilling script.
And the recovery creation virtual machine module is used for selecting the virtual machine backup data of the designated recovery point and the data of the recovery time point, and rapidly recovering the drilling virtual machine to the target drilling platform through common recovery or NFS. When multiple virtual machines are in use, the operations can be executed concurrently.
And the network adapter configuration module is used for setting a network adapter of a new virtual machine on the target drilling platform and configuring the network adapter to the created isolated network.
And the verification module is used for verifying the mapping IP corresponding to the production network through the management terminal machine after the drilling virtual machine is started, so that the IP in the isolation network is accessed, and the validity of the corresponding virtual machine and the application is verified.
A task execution unit 303, configured to execute the drilling task.
Specifically, the task execution unit 303 executes the added drill script item by item using the management-side machine. The IP of the target virtual machine in the script uses the IP mapped by the production network segment, namely, the mapped IP is forwarded to an entrance of an eth0 proxy gateway and is converted into an eth1 port for output through IP FORWARD and NAT, and after the eth1 finds the target virtual machine in the isolated network, response data finally returns to the management terminal machine through conversion into eth 0.
And a result recording unit 304, configured to record the results of successful and failed execution of the drilling script into drilling statistics, and output a drilling report to complete the drilling.
Preferably, the task execution unit 303 may further execute the drilling task periodically according to a set drilling policy, and specifically, the task execution unit 303 may periodically execute the drilling task according to the set drilling policy, and each time the drilling task is executed periodically, search data of a last reduction point, and simultaneously determine whether the drilling task has been executed last time, if the drilling task has been executed, skip the drilling task, wait for a next period to schedule, and then recheck and execute the drilling task, and if the drilling task has not been executed, enter the virtual machine recovery unit.
Examples
Fig. 4 is a timing chart of the exercise of the present embodiment, the process is divided into three steps, and the process is as follows:
first, a drill platform is added. A user initiates a command of adding a drilling platform to a management end, and the management end creates a new virtual machine to a target platform through a built-in mirror image data packet;
secondly, adding a drilling rule, selecting the backup data of the specified virtual machine and the data of the restoration time point by a user, and quickly restoring the drilling virtual machine to a target platform through common restoration or NFS.
And finally, completing the drilling task and outputting a drilling report by executing the configured drilling script.
Fig. 5 is a specific flowchart of the process of adding a drilling platform in this embodiment, and the process is as follows:
first, a target virtual platform is selected as a drilling platform, and a virtual port group and a virtual switch are created on the drilling platform for isolating a network.
Then, a new virtual machine is created and recovered on a target platform as a proxy gateway through mini virtual machine backup data built in a management platform, and two network adapters are configured at the same time, wherein one virtual machine is assigned to a source production network and the other virtual machine is assigned to an isolation network of a virtual switch.
Writing the appointed proxy gateway IP, isolated network, routing rule, NAT conversion relation and other information into the floppy disk of the proxy gateway virtual machine, starting the proxy gateway virtual machine, pre-setting a start script in the proxy gateway, executing loading and analyzing the floppy disk information, and configuring two network card IP, routing and NAT conversion rules of the local machine. The network card IP of the production network is set as a non-existent address for communicating with the management terminal machine. And the network card in the isolated network is set as the IP of the source production network segment, and if the virtual machine group to be exercised contains virtual machines of a plurality of production network segments, the network card in the isolated network needs to be set with a plurality of corresponding network segment IPs.
Then, adding an IP in the same network segment as the IP on the proxy gateway production network on the management terminal machine, setting a route, designating the network segment to be mapped to the source production network, and adding the gateway as the proxy gateway, that is, when the management terminal machine accesses a certain network segment, the data is forwarded to the proxy gateway.
Finally, the proxy gateway IP is accessed through the management terminal to check whether the access is normal; if yes, finishing the work of adding the drilling platform, otherwise deleting the proxy gateway virtual machine, deleting the virtual switch, deleting the newly added IP and the route by the management terminal, and finishing the addition.
And when the work of adding the drilling platform is finished, waiting for the virtual machine for subsequent drilling to be added, executing the drilling script and verifying the validity of the backup data.
Fig. 6 is a flowchart of adding a drilling task in the present embodiment, specifically, the process is as follows:
firstly, a drilling rule is created, backup data is selected, a drilling strategy is designated, and a drilling script is set.
And secondly, creating a virtual machine by designating backup data, restoring the created virtual machine to the target drilling platform, and executing operation concurrently when a plurality of backup data comprise a plurality of virtual machines.
Then, a network adapter of a new virtual machine on the target drilling platform is set and configured to the isolated network.
And thirdly, automatically starting the newly-built virtual machine.
Next, the added drill script is executed item by item through the management side. The IP of the target virtual machine in the script uses the IP mapped by the production network segment, namely, the mapped IP is forwarded to an eth0 entrance of the proxy gateway and is converted into an eth1 exit through IP FORWARD and NAT. After eth1 finds the target virtual machine in the isolated network, the response data finally returns to the management side machine by switching to eth 0.
And finally, recording the results of successful execution and failure of the drilling script into drilling statistics, and outputting a drilling report form to finish the drilling. Namely, if the drilling script is successfully executed, outputting a success log record, otherwise, outputting a failure log record, and counting and outputting a drilling report.
In the present invention, a drilling task may also be executed periodically, and fig. 7 is a flowchart for executing periodic policy drilling in this embodiment, and the process is as follows:
the method comprises the steps that firstly, a drilling task is executed regularly according to a set drilling strategy, data of a last reducing point is searched each time when the drilling task is executed regularly, whether drilling is executed in the previous time or not is judged, if the drilling is executed, the drilling is skipped, and the drilling is rechecked and executed after the next period of scheduling is waited.
Then, other steps are the same as the flow of fig. 6, and are not described herein again.
Fig. 8 is a schematic diagram of data of each restore point stored in the virtual machine backup data in this embodiment. The incremental backup data is based on the full backup data and the subsequent incremental data, and when the incremental restore point data is selected, the data on the backup data chain is used. The differential backup data is based on the full backup data and the current differential data, and the full backup data and the current differential data are used when the differential restore point data is selected.
In summary, the virtual machine backup data-based drilling method and system provided by the invention isolate the production network from the drilling network by creating a virtual switch as a proxy gateway, the virtual machine IP in the isolated network is not modified manually, and the network mapping relationship can be configured in advance, so that the full-automatic drilling function is realized, and a drilling result report can be output for enterprise reference and evaluation.
The foregoing embodiments are merely illustrative of the principles and utilities of the present invention and are not intended to limit the invention. Modifications and variations can be made to the above-described embodiments by those skilled in the art without departing from the spirit and scope of the present invention. Therefore, the scope of the invention should be determined from the following claims.

Claims (10)

1. A drilling method based on virtual machine backup data comprises the following steps:
step S1, selecting a drilling platform, creating a virtual switch on the drilling platform to form an isolated network, creating a proxy gateway virtual machine on the drilling platform, configuring two network adapters, wherein one is configured to a source production network, the other is configured to the isolated network, and setting an IP address and a network mapping relation;
step S2, adding drilling rules, creating virtual machines or virtual machine groups for drilling through the selected backup data, restoring to the drilling platform, and configuring the network adapters of the drilling virtual machines as the isolated network created in step S1;
step S3, completing a drilling task by executing the configured drilling script;
and step S4, recording the results of successful execution and failure of the drilling script into drilling statistics and outputting a drilling report.
2. The method for rehearsal based on virtual machine backup data according to claim 1, wherein the step S1 further comprises:
step S100, selecting a target virtual platform as the drilling platform, and creating a virtual port group and a virtual switch on the drilling platform for isolating a network;
step S101, a new virtual machine is created and recovered on the drilling platform to serve as a proxy gateway, and two network adapters are configured at the same time, wherein one network adapter is assigned to a source production network and the other network adapter is assigned to the isolation network of a virtual switch;
step S102, writing the appointed proxy gateway IP, isolated network, routing rule and NAT translation relation information into the proxy gateway virtual machine, and setting IP address and network mapping relation;
step S103, adding an IP of the same network segment with the IP of the proxy network on the production network on the management end, configuring a routing rule at the same time, selecting a network segment which is mapped to the source production network by a specified network segment, and adding a gateway as a proxy gateway so as to realize the request forwarding through the proxy gateway.
3. The rehearsal method based on virtual machine backup data as claimed in claim 2, characterized in that: in step S102, the proxy gateway virtual machine is started, the proxy gateway embeds a start script in advance, executes loading and parsing of the floppy disk information, and configures two network card IP, routing, and NAT conversion rules of the local machine.
4. The rehearsal method based on virtual machine backup data as claimed in claim 3, characterized in that: setting the network card IP of the source production network as a nonexistent address for communicating with the management terminal; the network card in the isolation network is set as the IP of the source production network segment, and if the virtual machine group to be exercised comprises virtual machines of a plurality of production network segments, the network card in the isolation network needs to be set with a plurality of corresponding network segment IPs.
5. The virtual machine backup data based drilling method according to claim 2, wherein the step S2 further comprises:
step S200, creating a drilling rule, selecting backup data, designating a drilling strategy and setting a drilling script
Step S201, selecting virtual machine backup data of a designated restoration point and data of a restoration time point, and rapidly restoring a drilling virtual machine to the drilling platform through common restoration or NFS;
step S202, setting the network adapter of the virtual machine of the drilling virtual machine on the drilling platform, and configuring the network adapter on the isolated network created in the step S1
Step S203, starting the drilling virtual machine, verifying the mapping IP corresponding to the source production network through the management terminal, thereby accessing the IP in the isolation network and verifying the validity of the corresponding virtual machine and the application.
6. The rehearsal method based on virtual machine backup data as claimed in claim 5, characterized in that: in step S2, operations are executed concurrently when there are multiple virtual machines.
7. The rehearsal method based on virtual machine backup data as claimed in claim 5, characterized in that: in step S3, the management end is used to execute the added drilling script one by one, the IP of the drilling virtual machine in the drilling script uses the IP mapped by the production network segment, the mapped IP is forwarded to the proxy gateway eth0 entry, and is converted to the proxy gateway eth1 port for output through IP forwarding and NAT, and after the proxy gateway eth1 finds the target virtual machine in the isolated network, the response data is converted to the proxy gateway eth0 and finally returns to the management end.
8. The rehearsal method based on virtual machine backup data as claimed in claim 7, characterized in that: in step S3, the exercise task is executed periodically.
9. The drilling method based on virtual machine backup data as claimed in claim 8, wherein the periodic strategy execution drilling task comprises:
step S300, the drilling task is executed regularly according to the set drilling strategy, when the drilling task is executed regularly, the data of the last reducing point is searched each time, whether the drilling is executed in the previous time or not is judged, if the drilling is executed, the drilling is skipped, the drilling is re-checked and executed after the next period of scheduling is waited, and if the drilling is not executed, the step S301 is executed;
step S301, restoring the selected virtual machine or virtual machine set required to be used for drilling to the drilling platform, and configuring the network adapter of each drilling virtual machine as the isolated network
Step S302, the rule drilling script is executed by the management terminal.
10. A rehearsal system based on virtual machine backup data comprises the following components:
a virtual machine switch and proxy gateway creation unit, configured to create a virtual switch on the drilling platform according to the selected drilling platform to form an isolation network, and create a proxy gateway virtual machine on the drilling platform, configure two network adapters, one of which is configured to a source production network and the other is configured to the isolation network, and set an IP address and a network mapping relationship;
a virtual machine recovery unit, configured to add a drilling rule, create a virtual machine or a virtual machine group for drilling through the selected backup data, recover to the drilling platform, and configure a network adapter of each drilling virtual machine as an isolated network created by the virtual machine switch and the proxy gateway creation unit;
the task execution unit is used for completing a drilling task by executing the configured drilling script;
and the result recording unit is used for recording the results of successful execution and failure of the drilling script into drilling statistics and outputting a drilling report.
CN201910934912.9A 2019-09-29 2019-09-29 Practicing method and system based on virtual machine backup data Active CN110727501B (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN201910934912.9A CN110727501B (en) 2019-09-29 2019-09-29 Practicing method and system based on virtual machine backup data

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN201910934912.9A CN110727501B (en) 2019-09-29 2019-09-29 Practicing method and system based on virtual machine backup data

Publications (2)

Publication Number Publication Date
CN110727501A CN110727501A (en) 2020-01-24
CN110727501B true CN110727501B (en) 2021-12-17

Family

ID=69219699

Family Applications (1)

Application Number Title Priority Date Filing Date
CN201910934912.9A Active CN110727501B (en) 2019-09-29 2019-09-29 Practicing method and system based on virtual machine backup data

Country Status (1)

Country Link
CN (1) CN110727501B (en)

Families Citing this family (8)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN111580929A (en) * 2020-05-07 2020-08-25 上海英方软件股份有限公司 Validity verification system and method based on virtual machine protection data
CN112380062A (en) * 2020-11-17 2021-02-19 上海英方软件股份有限公司 Method and system for rapidly recovering system for multiple times based on system backup point
CN112565048B (en) * 2020-11-20 2022-06-07 华云数据控股集团有限公司 Three-layer VPN (virtual private network) network creation method, three-layer VPN network data transmission method, three-layer VPN network creation device, three-layer VPN network data transmission device and electronic equipment
CN112463455B (en) * 2020-12-08 2024-02-23 深信服科技股份有限公司 Disaster recovery exercise method, device, equipment and readable storage medium
CN112583671B (en) * 2020-12-14 2022-03-25 上海英方软件股份有限公司 Method and system for practicing virtual machine through proxy gateway
CN113608932B (en) * 2021-10-09 2022-02-15 深圳市科力锐科技有限公司 Database drilling method, device, equipment and storage medium
CN115622815B (en) * 2022-12-19 2023-02-24 苏州浪潮智能科技有限公司 Port isolation implementation method, device, equipment and medium based on virtualization environment
CN115996150B (en) * 2023-03-22 2023-05-23 成都云祺科技有限公司 Virtual studio creation method and system storage medium and data verification method

Citations (7)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US6745210B1 (en) * 2000-09-19 2004-06-01 Bocada, Inc. Method for visualizing data backup activity from a plurality of backup devices
CN101442429A (en) * 2007-11-20 2009-05-27 华为技术有限公司 Method and system for implementing disaster-tolerating of business system
CN102142998A (en) * 2011-03-22 2011-08-03 辽宁国兴科技有限公司 Backup interactive method based on remote on-line data disaster tolerance and system for executing method
JP2014048869A (en) * 2012-08-31 2014-03-17 Hitachi Systems Ltd Disaster recovery method and disaster recovery system
CN105025067A (en) * 2014-04-30 2015-11-04 中国银联股份有限公司 Information security technology research platform
CN205792734U (en) * 2016-07-13 2016-12-07 袁凌 The disaster recovery drilling system that a kind of facing cloud calculates
CN107506295A (en) * 2017-07-12 2017-12-22 深信服科技股份有限公司 Method of testing, equipment and the computer-readable recording medium of virtual machine backup

Patent Citations (7)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US6745210B1 (en) * 2000-09-19 2004-06-01 Bocada, Inc. Method for visualizing data backup activity from a plurality of backup devices
CN101442429A (en) * 2007-11-20 2009-05-27 华为技术有限公司 Method and system for implementing disaster-tolerating of business system
CN102142998A (en) * 2011-03-22 2011-08-03 辽宁国兴科技有限公司 Backup interactive method based on remote on-line data disaster tolerance and system for executing method
JP2014048869A (en) * 2012-08-31 2014-03-17 Hitachi Systems Ltd Disaster recovery method and disaster recovery system
CN105025067A (en) * 2014-04-30 2015-11-04 中国银联股份有限公司 Information security technology research platform
CN205792734U (en) * 2016-07-13 2016-12-07 袁凌 The disaster recovery drilling system that a kind of facing cloud calculates
CN107506295A (en) * 2017-07-12 2017-12-22 深信服科技股份有限公司 Method of testing, equipment and the computer-readable recording medium of virtual machine backup

Non-Patent Citations (2)

* Cited by examiner, † Cited by third party
Title
System Construction Technology and Solutions to Support Disaster Recovery;Masahiro Takaya 等;《NEC technical journal 》;20061130;第33-41页 *
面向云计算数据中心的灾难备份解决方案;蔡诗威 等;《电信快报》;20151010(第10期);第45-48页 *

Also Published As

Publication number Publication date
CN110727501A (en) 2020-01-24

Similar Documents

Publication Publication Date Title
CN110727501B (en) Practicing method and system based on virtual machine backup data
CN107729041A (en) The hot update method of application program, device, terminal and storage medium
US7634679B2 (en) Remote location failover server application
KR101602312B1 (en) Data sending method, data receiving method, and storage device
CN107102916B (en) Replaying jobs at a secondary location of a service
CN110309218B (en) Data exchange system and data writing method
WO2017107900A1 (en) Virtual machine recovery method and virtual machine management device
CN111399984A (en) File recovery method and system based on virtual machine backup data
CN109325016B (en) Data migration method, device, medium and electronic equipment
US20110231532A1 (en) Network management apparatus, network management method and network management program
US10048978B2 (en) Apparatus and method for identifying a virtual machine having changeable settings
CN111651238A (en) System and method for acquiring effective data in virtual machine protection
US20210089379A1 (en) Computer system
CN107506295A (en) Method of testing, equipment and the computer-readable recording medium of virtual machine backup
CN104899116A (en) Data backup method, source server, target server and system
CN111656325A (en) Fast recovery from failure in a time-ordered log structured key-value storage system
CN111684437A (en) Chronologically ordered staggered updated key-value storage system
CN109739691A (en) DB Backup and restoration methods, device, terminal device and storage medium
KR20080050276A (en) Distributed object-sharing system and method thereof
US20100017863A1 (en) Portable storage apparatus for providing working environment migration service and method thereof
CN112035062B (en) Migration method of local storage of cloud computing, computer equipment and storage medium
CN117118814A (en) Cloud resource switching method, device, equipment and medium based on multi-cloud management platform
US20180089034A1 (en) Retrospective snapshots in log-structured storage systems
CN111786808A (en) Cloud system migration method and device and mixed cloud system
CN105988885A (en) Compensation rollback-based operation system fault self-recovery method

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination
GR01 Patent grant
GR01 Patent grant