CN112202624B - Real equipment fast access system and method for network target range scene arrangement - Google Patents

Real equipment fast access system and method for network target range scene arrangement Download PDF

Info

Publication number
CN112202624B
CN112202624B CN202011413891.5A CN202011413891A CN112202624B CN 112202624 B CN112202624 B CN 112202624B CN 202011413891 A CN202011413891 A CN 202011413891A CN 112202624 B CN112202624 B CN 112202624B
Authority
CN
China
Prior art keywords
scene
network
real
virtual
real equipment
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Active
Application number
CN202011413891.5A
Other languages
Chinese (zh)
Other versions
CN112202624A (en
Inventor
程能杰
谢峥
高庆官
唐海均
王国伟
高丽彪
王鹏
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Nanjing Cyber Peace Technology Co Ltd
Original Assignee
Nanjing Cyber Peace Technology Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Nanjing Cyber Peace Technology Co Ltd filed Critical Nanjing Cyber Peace Technology Co Ltd
Priority to CN202011413891.5A priority Critical patent/CN112202624B/en
Publication of CN112202624A publication Critical patent/CN112202624A/en
Application granted granted Critical
Publication of CN112202624B publication Critical patent/CN112202624B/en
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Images

Classifications

    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L41/00Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
    • H04L41/14Network analysis or design
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L12/00Data switching networks
    • H04L12/28Data switching networks characterised by path configuration, e.g. LAN [Local Area Networks] or WAN [Wide Area Networks]
    • H04L12/46Interconnection of networks
    • H04L12/4641Virtual LANs, VLANs, e.g. virtual private networks [VPN]
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L49/00Packet switching elements
    • H04L49/35Switches specially adapted for specific applications
    • H04L49/354Switches specially adapted for specific applications for supporting virtual local area networks [VLAN]
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L49/00Packet switching elements
    • H04L49/70Virtual switches
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L61/00Network arrangements, protocols or services for addressing or naming
    • H04L61/50Address allocation
    • H04L61/5007Internet protocol [IP] addresses
    • H04L61/5014Internet protocol [IP] addresses using dynamic host configuration protocol [DHCP] or bootstrap protocol [BOOTP]
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L67/00Network arrangements or protocols for supporting network services or applications
    • H04L67/01Protocols
    • H04L67/12Protocols specially adapted for proprietary or special-purpose networking environments, e.g. medical networks, sensor networks, networks in vehicles or remote metering networks

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Health & Medical Sciences (AREA)
  • Computing Systems (AREA)
  • General Health & Medical Sciences (AREA)
  • Medical Informatics (AREA)
  • Computer Security & Cryptography (AREA)
  • Small-Scale Networks (AREA)

Abstract

The invention discloses a real equipment fast access system and a method for arranging network target range scenes, which adds a real equipment network management module on the basis of a scene management module, creates a real equipment private network virtual switch to access the real equipment into a private network, assigns an IP address in the specified private network for the real equipment by a real equipment private network DHCP server, and creates a corresponding real equipment scene mapping unit according to the real equipment configured in the scene. The real equipment scene mapping unit realizes scene mapping of real equipment through double-network-card design, the first virtual network card bears all functions of the real equipment in a scene and represents complete real equipment in the scene, and the two virtual network cards bear flow forwarding work between a scene local area network and a real equipment special network together. The invention can realize the sharing of real equipment in multiple scenes, improves the switching efficiency and leads the scene management to be more convenient.

Description

Real equipment fast access system and method for network target range scene arrangement
Technical Field
The invention relates to a real device fast access system and a method for arranging network shooting range scenes, belonging to the technical field of networks.
Background
The network target range is a test platform which is combined with a real device through a virtual environment, simulates a real network space attack and defense combat environment and can support combat capability research and weapon equipment verification. With the continuous development of the information age, the network environment is increasingly complex, part of real equipment cannot be virtualized, the network environment occupies an important position in scene arrangement, and requirements on the rapid access of the real equipment are provided for a network target range.
The deployment diagram of the network target range is shown in fig. 1, the network target range is connected with a control node, a computing node and real equipment through an entity switch, and the network target range forms a network through network topology. On the basis of the method disclosed in "a network target range attack and defense scene real device self-adaptive access method and system" of chinese patent CN 111600913B, the scene arrangement flow of the network target range containing real devices at present is as follows: 1) the scene configuration is created by an administrator. The method mainly comprises virtual local area network configuration, virtual machine configuration, real equipment network configuration and a DHCP server. 2) And creating a virtual network and a virtual machine. And the scene management module of the control node allocates the virtual local area network configuration and the virtual machine configuration to a proper computing node according to the scene configuration, the computing node creates a virtual switch according to the local area network segment, the computing node creates a virtual machine according to the virtual machine configuration information, and the network configuration information of the virtual machine is configured. 3) A DHCP server is created. And the scene management module of the control node configures the DHCP server and sends the configuration of the DHCP server to a computing node corresponding to the local area network, the computing node starts the DHCP server, and MAC address and IP address distribution records of all virtual machines and real equipment in the scene are saved. 4) The real device accesses the virtual local area network. And the scene management module sends a flow table control instruction to the virtual switch in the scene, and forwards the flow with the MAC address being the real equipment MAC address to a computing node physical network card, and the computing node physical network card is connected with a Trunk port of the entity switch, so that the real equipment is communicated with the scene virtual local area network. 5) The real device acquires the allocated IP address through DHCP. The real device initiates a DHCP request broadcast, the DHCP request broadcast is responded by a DHCP server where the scene is located, and a designated IP address is allocated. 6) And finishing scene arrangement, and performing network range training by using the scene. 7) And after training is finished, recovering the scene, and releasing the virtual machine, the virtual switch and the DHCP server. 8) Starting a new scene, creating a virtual network and a virtual machine, and creating a DHCP server. 9) Restarting the real equipment, releasing the original network configuration of the real equipment, accessing the virtual local area network of the new scene, and acquiring the newly allocated IP address by the real equipment through the DHCP. 10) And finishing the new scene arrangement.
The current scene layout has the following problems: 1) the real equipment is exclusive to one scene, a plurality of scenes cannot be accessed simultaneously, and the utilization rate of the real equipment is low; 2) the scene switching efficiency is low, the real equipment network configuration is asynchronous with the scene life cycle, and the original network configuration of the real equipment needs to be manually released during scene switching. Because the real device obtains the IP address through the DHCP, the IP address has the lease validity period, when the scene is released, the network configuration of the real device cannot be automatically released, and when the next scene is started, the network configuration of the real device needs to be manually released through the means of restarting the real device and the like.
Disclosure of Invention
The purpose of the invention is as follows: in view of the problems in the prior art, an object of the present invention is to provide a real device fast access system and method for network shooting range scene arrangement, so as to improve the real device utilization rate and switching efficiency.
The technical scheme is as follows: in order to achieve the above object, the present invention provides a real device fast access system for network shooting range scene arrangement, which includes a scene management module, a DHCP server for creating and configuring a virtual switch, a virtual machine and a virtual lan of a virtual lan in a scene according to scene configuration information, and a real device network management module, for creating a real device private network virtual switch and a real device private network DHCP server, allocating an IP address in a private network to a real device, and storing an MAC address and an IP address allocation record of the real device; creating a corresponding real device scene mapping unit responsible for forwarding the traffic between the scene local area network and the real device private network according to the real devices configured in the scene; the real equipment private network virtual switch is used for accessing the real equipment into a private network; the real equipment private network DHCP server is used for distributing an IP address in a designated private network for the real equipment;
the real device scene mapping unit is used for creating a first virtual network card and a second virtual network card, forwarding the flow received by the first virtual network card to a real device in a real device private network through the second virtual network card, and forwarding the flow received by the second virtual network card from the real device to a virtual machine in a scene through the first virtual network card; the first virtual network card is connected with a virtual local area network in a scene, the MAC address is the MAC address of real equipment, the IP address is the IP address allocated to the real equipment in the scene, the second virtual network card is connected with a special network of the real equipment, the MAC address is a random MAC address, and the IP address is the IP address of a randomly allocated special network which belongs to the scene.
Preferably, the real device network management module is deployed on a network range control node.
Preferably, the real device network management module releases the real device scene mapping unit associated with the scene when the scene is recovered.
Based on the same inventive concept, the invention provides a real device fast access method for network shooting range scene arrangement, which comprises the following steps:
step 1: creating a real equipment private network virtual switch and a real equipment private network DHCP server for real equipment, and storing the MAC address of the real equipment and the IP address distributed in a private network;
step 2: the real equipment is accessed to a private network through a virtual switch of the private network of the real equipment, and an IP address in a specified private network is distributed to the real equipment through a DHCP server of the private network of the real equipment;
and step 3: when a scene is started, creating and configuring a virtual switch, a virtual machine and a DHCP server of a virtual local area network in the scene according to scene configuration information, and creating a corresponding real device scene mapping unit for real devices in the scene, wherein the real device scene mapping unit is used for creating a first virtual network card and a second virtual network card, forwarding the flow received by the first virtual network card to the real devices in a real device private network through the second virtual network card, and forwarding the flow received by the second virtual network card from the real devices to the virtual machine in the scene through the first virtual network card; the first virtual network card is connected with a virtual local area network in a scene, the MAC address is the MAC address of real equipment, the IP address is the IP address allocated to the real equipment in the scene, the second virtual network card is connected with a special network of the real equipment, the MAC address is a random MAC address, and the IP address is the IP address of a randomly allocated special network which belongs to the scene.
Preferably, the real device fast access method for arranging the network target range scene further includes releasing the virtual machine, the virtual switch of the virtual local area network, the DHCP server of the virtual local area network, and the scene mapping unit of the real device associated with the scene in the scene during scene recovery.
Based on the same inventive concept, the other real device fast access system for network target range scene arrangement provided by the invention comprises a memory, a processor and a computer program which is stored on the memory and can run on the processor, wherein the computer program realizes the real device fast access method for network target range scene arrangement when being loaded to the processor.
Has the advantages that: the invention designs a special network for the real equipment, keeps the connection between the shooting range platform and the real equipment through the special network for the real equipment, and simultaneously ensures the network security of the real equipment. The scene mapping of the real equipment is realized through the double-network-card design, the first virtual network card bears all functions of the real equipment in the scene (the network configuration adopts the network configuration of the real equipment in the scene), the real equipment is represented as complete real equipment in the scene, and the first virtual network card and the second virtual network card bear the flow forwarding work between the scene local area network and the special network of the real equipment together. The life cycle of the real equipment in the scene is managed through the creation and deletion of the real equipment scene mapping unit, the life cycle of the real equipment in the scene is guaranteed to be consistent with the scene, the network configuration operation of the real equipment which is manually released due to the switching of a new scene and an old scene is avoided, and higher convenience is provided for scene management. Compared with the prior art, the invention has the following advantages: 1) the real equipment can be shared in multiple scenes, and the utilization rate of the real equipment is higher. 2) The scene management is more convenient and faster. The real equipment and the scene life cycle in the scene are ensured to be synchronous through the real equipment scene mapping unit, and the operation that the network configuration of the real equipment needs to be manually released in the prior art is avoided. 3) The unified management of real equipment can be realized, and the safety of the real equipment is better ensured.
Drawings
Fig. 1 is a deployment diagram of a conventional network range.
Fig. 2 is a schematic diagram of a network target range deployment architecture to which an embodiment of the present invention is applied.
Detailed Description
The technical solution of the present invention will be clearly and completely described below with reference to the accompanying drawings and specific embodiments.
As shown in fig. 2, a real device fast access system for network shooting range scene arrangement provided in the embodiment of the present invention includes a scene management module and a real device network management module. The scene management module is mainly used for creating and configuring a virtual switch of a virtual local area network, a virtual machine and a DHCP server of the virtual local area network in the scene according to the scene configuration information. The real equipment network management module is mainly used for creating a real equipment private network virtual switch and a real equipment private network DHCP server, allocating an IP address in a private network for real equipment, and storing an MAC address and an IP address allocation record of the real equipment; and creating a corresponding real device scene mapping unit responsible for forwarding the traffic between the scene local area network and the real device private network according to the real devices configured in the scene.
The real device scene mapping unit is used for creating a first virtual network card and a second virtual network card, forwarding the flow received by the first virtual network card to a real device in a real device private network through the second virtual network card, and forwarding the flow received by the second virtual network card from the real device to a virtual machine in a scene through the first virtual network card; the first virtual network card is connected with a virtual local area network in a scene, the MAC address is an MAC address of real equipment, the IP address is an IP address allocated to the real equipment by the scene, the second virtual network card is connected with a special network of the real equipment, the MAC address is a random MAC address, and the IP address is an IP address of a randomly allocated special network which is subordinate to the real equipment.
The real equipment network management module can be deployed on a network target range control node, can also be deployed on a computing node of a network target range, and can be communicated with the control node and other nodes in the network.
Based on the same inventive concept, the invention provides a real device fast access method for network shooting range scene arrangement, which comprises the following steps:
step 1: creating a real equipment private network virtual switch and a real equipment private network DHCP server for real equipment, and storing the MAC address of the real equipment and the IP address distributed in a private network;
step 2: the real equipment is accessed to a private network through a virtual switch of the private network of the real equipment, and an IP address in a specified private network is distributed to the real equipment through a DHCP server of the private network of the real equipment;
and step 3: when a scene is started, a virtual switch, a virtual machine and a DHCP server of a virtual local area network in the scene are created and configured according to scene configuration information, a corresponding real device scene mapping unit is created for real devices in the scene, the real device scene mapping unit is used for creating a first virtual network card and a second virtual network card, forwarding the flow received by the first virtual network card to the real devices in a real device private network through the second virtual network card, and forwarding the flow received by the second virtual network card from the real devices to the virtual machine in the scene through the first virtual network card; the first virtual network card is connected with a virtual local area network in a scene, the MAC address is the MAC address of real equipment, the IP address is the IP address allocated to the real equipment in the scene, the second virtual network card is connected with a special network of the real equipment, the MAC address is a random MAC address, and the IP address is the IP address of a randomly allocated special network which is subordinate to the real equipment.
And when the scene is recovered, releasing the virtual machine, the virtual switch of the virtual local area network, the DHCP server of the virtual local area network and the scene mapping unit of the real equipment associated with the scene in the scene.
Based on the same inventive concept, the other real device fast access system for network target range scene arrangement provided by the invention comprises a memory, a processor and a computer program which is stored on the memory and can run on the processor, wherein the computer program realizes the real device fast access method for network target range scene arrangement when being loaded to the processor.
The following further describes a scene layout process applying an embodiment of the present invention.
1) A real device-specific network is created. The real device network management module creates a private network for the real device, namely, creates a real device virtual switch and distributes private network segments. The real device network management module stores the real device MAC address and randomly creates an IP address allocated by the real device within the private network.
2) A real device specific network DHCP server is created. The real device network management module creates and starts a DHCP server on a real device private network, and simultaneously saves the MAC address and IP address distribution record of the real device.
3) The real device accesses the private network. The real device network management module controls a real device private network virtual switch, the flow with the target MAC address as the real device MAC address is forwarded to a control node physical network card through configuring a flow table rule of the virtual machine switch, the flow with the source MAC address as the real device MAC address is forwarded to a private network, the control node physical network card is connected with a Trunk port of an entity switch, and therefore the real device is communicated with the real device private network. As an example of the traffic configuration rule of real devices 08:9e:01:95:60:52 under private network VLAN 101:
rule 1: ovs-ofctl add-flow br-vlan 'table =0, in _ port = phy-br-vlan, dl _ dst =08:9e:01:95:60:52 actions = strip _ vlan, NORMAL'
Rule 2: ovs-ofctl add-flow br-vlan 'table =0, dl _ src =08:9e:01:95:60:52 actions = mod _ vlan _ vid:101, norm'.
4) The real device acquires the allocated IP address through DHCP. The real device initiates a DHCP request broadcast, which will be responded by the DHCP server of the real device private network and assigns an IP address within the designated private network.
5) The scene configuration is created by an administrator. The method mainly comprises the steps of virtual local area network configuration (local area network segments), virtual machine configuration (mirror images, CPU specifications, memory specifications, hard disk specifications, IP address allocation, MAC address allocation, gateway and subnet mask), real equipment network configuration (IP address allocation, real MAC address allocation, gateway and subnet mask) and a DHCP server (IP address allocation, gateway and subnet mask).
6) And creating a virtual network and a virtual machine. And the scene management module of the control node allocates the virtual local area network configuration and the virtual machine configuration to a proper computing node according to the scene configuration, the computing node creates a virtual switch according to the local area network segment, the computing node creates a virtual machine according to the virtual machine configuration information, and the network configuration information of the virtual machine is configured.
7) A DHCP server is created. And the scene management module of the control node sends the DHCP server configuration to the computing node corresponding to the local area network according to the scene configuration, the computing node starts the DHCP server, and simultaneously saves the MAC addresses and IP address distribution records (the IP addresses distributed to the real equipment by the administrator in the scene configuration) of all the virtual machines and the real equipment in the scene.
8) A real device scene mapping unit is created. The real device network management module creates a real device scene mapping unit, and for a real device used in a scene, the mapping unit comprises two virtual network cards and a flow forwarding program between the two virtual network cards, wherein a first virtual network card (marked as a network card A) is connected with a virtual local area network in the scene, the MAC address is a real device MAC address, and the IP address is an IP address allocated to the real device by the scene; the second virtual network card (marked as network card B) is connected with a real equipment private network, the MAC address is a random MAC address (the private network is ensured not to have the same MAC address), and the IP address is an IP address which is randomly distributed and belongs to the private network; the real device scene mapping unit forwards the traffic received by the network card a to the real device (modifying the source IP address and the port number) in the real device private network through the network card B, and forwards the traffic received by the network card B from the real device to the virtual machine (modifying the target IP address and the port number) in the scene through the network card a.
9) And finishing scene arrangement, and performing network range training by using the scene.
10) And after training is finished, recovering the scene, and releasing the scene virtual machine, the scene virtual switch, the scene DHCP server and the associated real equipment scene mapping unit.
11) Starting a new scene, creating a virtual switch, a virtual machine and a DHCP server of a virtual local area network of the new scene, and creating a real device scene mapping unit associated with the new scene.
12) And finishing the new scene arrangement.

Claims (6)

1. A real device fast access system for arranging network target range scenes comprises a scene management module, a virtual switch, a virtual machine and a DHCP server of a virtual local area network, wherein the virtual switch, the virtual machine and the DHCP server of the virtual local area network are used for creating and configuring the virtual local area network in the scene according to scene configuration information; creating a corresponding real device scene mapping unit responsible for forwarding the traffic between the scene local area network and the real device private network according to the real devices configured in the scene; the real equipment private network virtual switch is used for accessing the real equipment into a private network; the real equipment private network DHCP server is used for distributing an IP address in a designated private network for the real equipment;
the real device scene mapping unit is used for creating a first virtual network card and a second virtual network card, forwarding the flow received by the first virtual network card to a real device in a real device private network through the second virtual network card, and forwarding the flow received by the second virtual network card from the real device to a virtual machine in a scene through the first virtual network card; the first virtual network card is connected with a virtual local area network in a scene, the MAC address is the MAC address of real equipment, the IP address is the IP address allocated to the real equipment in the scene, the second virtual network card is connected with a special network of the real equipment, the MAC address is a random MAC address, and the IP address is the IP address of a randomly allocated special network which belongs to the scene.
2. The real plant fast access system for network range scene orchestration according to claim 1, wherein the real plant network management module is deployed on a network range control node.
3. The real device fast access system for network target range scene orchestration according to claim 1, wherein the real device network management module releases a real device scene mapping unit associated with a scene when the scene is reclaimed.
4. A real device fast access method for arranging network target range scenes is characterized by comprising the following steps:
step 1: creating a real equipment private network virtual switch and a real equipment private network DHCP server for real equipment, and storing the MAC address of the real equipment and the IP address distributed in a private network;
step 2: the real equipment is accessed to a private network through a virtual switch of the private network of the real equipment, and an IP address in a specified private network is distributed to the real equipment through a DHCP server of the private network of the real equipment;
and step 3: when a scene is started, creating and configuring a virtual switch, a virtual machine and a DHCP server of a virtual local area network in the scene according to scene configuration information, and creating a corresponding real device scene mapping unit for real devices in the scene, wherein the real device scene mapping unit is used for creating a first virtual network card and a second virtual network card, forwarding the flow received by the first virtual network card to the real devices in a real device private network through the second virtual network card, and forwarding the flow received by the second virtual network card from the real devices to the virtual machine in the scene through the first virtual network card; the first virtual network card is connected with a virtual local area network in a scene, the MAC address is the MAC address of real equipment, the IP address is the IP address allocated to the real equipment in the scene, the second virtual network card is connected with a special network of the real equipment, the MAC address is a random MAC address, and the IP address is the IP address of a randomly allocated special network which belongs to the scene.
5. The method of claim 4, further comprising releasing the virtual machine, the virtual switch of the virtual LAN, the DHCP server of the virtual LAN, and the scene mapping unit of the real device associated with the scene during scene retrieval.
6. Real device fast access system for network range scene orchestration comprising a memory, a processor and a computer program stored on the memory and executable on the processor, characterized in that the computer program, when loaded into the processor, implements the real device fast access method for network range scene orchestration according to claim 4 or 5.
CN202011413891.5A 2020-12-07 2020-12-07 Real equipment fast access system and method for network target range scene arrangement Active CN112202624B (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN202011413891.5A CN112202624B (en) 2020-12-07 2020-12-07 Real equipment fast access system and method for network target range scene arrangement

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN202011413891.5A CN112202624B (en) 2020-12-07 2020-12-07 Real equipment fast access system and method for network target range scene arrangement

Publications (2)

Publication Number Publication Date
CN112202624A CN112202624A (en) 2021-01-08
CN112202624B true CN112202624B (en) 2021-03-12

Family

ID=74034414

Family Applications (1)

Application Number Title Priority Date Filing Date
CN202011413891.5A Active CN112202624B (en) 2020-12-07 2020-12-07 Real equipment fast access system and method for network target range scene arrangement

Country Status (1)

Country Link
CN (1) CN112202624B (en)

Families Citing this family (10)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN112367239B (en) * 2021-01-11 2021-04-06 南京赛宁信息技术有限公司 Network target range rapid interconnection system and method
CN115484271A (en) * 2021-05-31 2022-12-16 任志翔 Power grid real-time data sharing method, system, equipment and storage medium
CN113268206B (en) * 2021-07-19 2021-10-19 南京赛宁信息技术有限公司 Network target range resource hot plug implementation method and system
CN114301656B (en) * 2021-12-23 2023-10-27 北京赛宁网安科技有限公司 Virtual-real combination system and method for network attack and defense platform
CN114281514B (en) * 2022-03-08 2022-05-24 南京赛宁信息技术有限公司 Method and system for recovering multi-stage queue scenes in shooting range environment
CN114826994B (en) * 2022-04-22 2023-08-29 重庆紫光华山智安科技有限公司 User environment playback method, system, electronic device and readable storage medium
CN114844845B (en) * 2022-07-05 2022-10-18 南京赛宁信息技术有限公司 Virtual-real combined network target range wireless real equipment access device, method and system
CN115348126A (en) * 2022-07-26 2022-11-15 北京永信至诚科技股份有限公司 Network target range entity equipment access method, device and implementation system
CN116366708B (en) * 2023-04-11 2023-10-27 南京审计大学 System and method for dynamically switching entity equipment in network target range virtual-real combined scene
CN116527494B (en) * 2023-07-05 2023-09-12 南京赛宁信息技术有限公司 Shooting range virtual machine network initialization method and system based on virtual network card cloning

Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN102469004A (en) * 2010-10-29 2012-05-23 中国科学院计算技术研究所 Virtual machine network system and creation method thereof
CN110290045A (en) * 2019-07-16 2019-09-27 北京计算机技术及应用研究所 A kind of soft or hard binding model construction method in cloud framework lower network target range
CN111711557A (en) * 2020-08-18 2020-09-25 北京赛宁网安科技有限公司 Remote access system and method for network target range users

Family Cites Families (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US9397856B2 (en) * 2005-12-02 2016-07-19 Ca, Inc. Virtual tunnel network router
US9436529B2 (en) * 2014-12-26 2016-09-06 Red Hat, Inc. Providing random data to a guest operating system
CN111600913B (en) * 2020-07-22 2020-11-24 南京赛宁信息技术有限公司 Self-adaptive access method and system for real equipment in attack and defense scene of network shooting range

Patent Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN102469004A (en) * 2010-10-29 2012-05-23 中国科学院计算技术研究所 Virtual machine network system and creation method thereof
CN110290045A (en) * 2019-07-16 2019-09-27 北京计算机技术及应用研究所 A kind of soft or hard binding model construction method in cloud framework lower network target range
CN111711557A (en) * 2020-08-18 2020-09-25 北京赛宁网安科技有限公司 Remote access system and method for network target range users

Also Published As

Publication number Publication date
CN112202624A (en) 2021-01-08

Similar Documents

Publication Publication Date Title
CN112202624B (en) Real equipment fast access system and method for network target range scene arrangement
CN111600913B (en) Self-adaptive access method and system for real equipment in attack and defense scene of network shooting range
CN106844000B (en) Method and device for accessing Linux container cluster by browser in multi-user environment
EP3287906B1 (en) Method, system, and apparatus for cloud application redundancy
CN108924268B (en) Container cloud service system and pod creation method and device
JP4681505B2 (en) Computer system, management computer, and program distribution method
CN111711557B (en) Remote access system and method for network target range users
US8423632B2 (en) Method, network management center, and a related device for configuring a network policy for a virtual port
EP2192725B1 (en) Packet switch being partitioned into virtual LANs (VLANs)
CN109981493B (en) Method and device for configuring virtual machine network
CN103078965B (en) The IP address management method of virtual machine
CN111934918A (en) Network isolation method and device for container instances in same container cluster
CN112099913B (en) Method for realizing virtual machine security isolation based on OpenStack
CN110572439B (en) Cloud monitoring method based on metadata service and virtual forwarding network bridge
CN107846313B (en) A kind of method and the network equipment of the generation of network service moulding plate
CN103957288A (en) Method, device and equipment for IP address dynamic allocation
CN110063045B (en) Message processing method and device in cloud computing system
CN112910685B (en) Method and device for realizing unified management of container network
CN104468574A (en) Dynamic IP address acquisition method, system and device for virtual machines
CN103581325A (en) Cloud computing resource pool system and implement method thereof
CN105704042A (en) Message processing method, BNG and BNG cluster system
CN104506654A (en) Cloud computing system and backup method of dynamic host configuration protocol server
CN112165502B (en) Service discovery system, method and second server
CN114338397A (en) Cloud platform network configuration method, device, server, storage medium and system
US20240155023A1 (en) Method and system for implementing bare metal inspection process, device, and storage medium

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination
GR01 Patent grant
GR01 Patent grant