JP6334771B1 - Construction order determination device, construction order determination method, and construction order determination program - Google Patents

Abstract

An object of the present invention is to reduce the workload of maintenance personnel and shorten the construction period when updating software. A server configuration table 132 that stores information on configuration groups in which servers having the same software configuration are grouped, an environment configuration table 131 in which information on environment groups in which configuration groups are grouped for each service to be provided, and configuration groups A software configuration table 133 that stores information on the software installed for each operation, and a dependency software condition table 134 that stores software dependency relationships. Establish the construction order for the configuration group based on the software dependency, arrange all the configuration groups belonging to the environmental group to be constructed according to the construction order established, and configure the server construction order based on the startup conditions for each configuration group Formulate your server To, to develop a work order of the construction target software. [Selection] Figure 2

Description

  The present invention relates to a technique for updating software installed in a server.

  Servers that provide IT services require file updates such as software upgrades and patching in order to deal with security vulnerabilities. When the file is updated, the maintenance person works on the target server according to the construction procedure manual.

JP 2011-60142 A

  Even when multiple constructions occur on the same server, a construction procedure manual is prepared for each construction and the construction is carried out separately. For this reason, there has been a problem that construction is performed many times on the same server, increasing the burden on the maintenance personnel and the operation cost.

  In addition, when a plurality of works are performed on the same server, the next work is performed after one work is completed. There was also a problem in that a mechanism for minimizing the impact of services for each construction was not taken.

  The present invention has been made in view of the above, and an object of the present invention is to reduce the work burden on a maintenance person and shorten the construction period when updating software.

  The construction order determination apparatus according to the first aspect of the present invention stores a server configuration table storing information on configuration groups in which servers having the same software configuration are stored, and information on environment groups in which the configuration groups are combined for each service to be provided. An environment configuration table, a software configuration table storing information of software installed for each configuration group, a dependency software condition table storing software dependency, and the configuration for each environment group to be constructed Configuration group order determining means for determining the construction order of the configuration group in the environmental group based on the dependency relationship of the software installed in the group, and all the configuration groups belonging to the environmental group to be constructed are Arranged according to the construction order and before For each configuration group, server order determination means for determining the construction order of the servers based on the activation conditions of the servers in the configuration group, and software order determination means for determining the construction order of the software for each server It is characterized by having.

  The construction order determination method according to the second aspect of the present invention stores a server configuration table storing information on configuration groups in which servers having the same software configuration are stored, and information on environment groups in which the configuration groups are combined for each service to be provided. A construction order determination executed by a construction order determination apparatus having a configured environment configuration table, a software configuration table storing information of software installed for each of the configuration groups, and a dependent software condition table storing dependency relations of the software Determining the construction order of the configuration group within the environmental group based on the dependency of the software installed in the configuration group for each environmental group to be constructed; and All the environmental groups Arranging the configuration groups according to the construction order, determining the construction order of the servers based on the activation conditions of the servers in the configuration group for each of the configuration groups, and for each server, And a step of determining a construction order.

  A construction order determination program according to a third aspect of the present invention is characterized by operating a computer as each means of the construction order determination apparatus.

  According to the present invention, when updating software, it is possible to reduce a work burden on a maintenance person and shorten a construction period.

1 is an overall configuration diagram of a system that determines a construction order by a construction order determination device of the present embodiment. It is a functional block diagram which shows the structure of the construction order determination apparatus of this embodiment. It is a figure which shows the example of an environment structure table. It is a figure which shows the example of a server structure table. It is a figure which shows the example of a software structure table. It is a figure which shows the example of a dependence software condition table. It is a sequence diagram which shows the flow of a process of the construction order determination apparatus of this embodiment. It is a flowchart which shows the flow of the process which formulates the construction order of a composition group. It is a figure which shows the example of construction conditions. It is a figure which shows the result of having extracted the construction object software in a structure group about each environmental group. It is a flowchart which shows the flow of the process which determines the construction order of a structure group based on the dependence relationship of software. It is a figure which shows the investigation result of the prerequisite of a construction object software, and a subsequent condition. It is a figure which shows the example which classified the structure group. It is a figure which shows the result of having changed the software prerequisites after classifying a composition group. It is a figure which shows the example of the order | rank of a structure group. It is a flowchart which shows the flow of the process which formulates the construction order of each server and each software of a composition group. It is a figure which shows how a configuration group was arranged according to the order of each configuration group. It is the figure which has arrange | positioned each structural group in the hierarchy according to the order | rank of FIG. It is a figure which shows the example of the order of the server of each structure group, and a server. It is a figure which shows a mode that the construction object software was expand | deployed to each server according to the order in a server. It is a figure which shows the example of the construction order which the construction order determination apparatus of this embodiment devised.

  Hereinafter, embodiments of the present invention will be described with reference to the drawings.

  FIG. 1 is an overall configuration diagram of a system that determines a work order by the work order determination apparatus 1 according to the present embodiment. The system shown in FIG. 2 includes a server group that provides a service X and a server group that provides a service Y. The server group that provides the service X includes DB servers X-A, XS, Web servers X-1, X-2, X-3, and a load balancer X. The server group that provides the service Y includes DB servers YA and YS, Web servers Y-1 and Y-2, and a load balancer Y. In addition, a monitoring server XY that monitors the servers of the services X and Y is included.

[Configuration of construction order determination device]
FIG. 2 is a functional block diagram showing the configuration of the construction order determination apparatus 1 according to this embodiment. The construction order determination apparatus 1 inputs a construction procedure manual, displays a determined construction order, a user interface 11, and a control section 12 that determines the construction order based on the construction procedure manual and the server configuration and software configuration of the construction target system. And a storage unit 13 for holding various information such as the server configuration and software configuration of the construction target system. Each unit included in the construction order determination device 1 may be configured by a computer including an arithmetic processing device, a storage device, and the like, and the processing of each unit may be executed by a program. This program is stored in a storage device included in the construction order determination apparatus 1, and can be recorded on a recording medium such as a magnetic disk, an optical disk, or a semiconductor memory, or provided through a network. Hereinafter, each part with which the construction order determination apparatus 1 is provided is demonstrated.

  The user interface 11 has a construction procedure manual input function 111, a setting function 112, and a construction order display function 113. The construction procedure manual input function 111 inputs a construction procedure manual from the construction staff. The construction procedure manual input function 111 may input a plurality of construction procedure manuals. The setting function 112 inputs settings necessary for determining the construction procedure. For example, information on a service to be constructed is input. The construction order display function 113 displays the construction order determined by the control unit 12.

  The control unit 12 has an information collection function 121 and a construction order determination function 122. The information collection function 121 receives a construction procedure manual from the user interface 11. The information collection function 121 receives necessary information from each server of the construction target system. The construction order determination function 122 determines the construction procedure of the server included in the construction target system based on the construction procedure manual and various information stored in the storage unit 13.

  The storage unit 13 includes an environment configuration table 131, a server configuration table 132, a software configuration table 133, and a dependent software condition table 134.

  The environment configuration table 131 holds server group information for each service provided by the construction target system. FIG. 3 shows an example of the environment configuration table 131. The environment configuration table 131 illustrated in FIG. 3 holds items of environment, environment group, configuration group, and service.

  The environment group is a group of servers (configuration groups) for each service to be provided, and is a series of groups to which software dependency is applied. The configuration group is a group in which servers having the same software configuration are collected. In this embodiment, servers having the same software configuration are grouped as a configuration group, and the construction order of the configuration group is determined based on the software dependency for each environment group, and then, for each configuration group, based on the server start condition. Develop the construction order of the servers in the configuration group.

  The server configuration table 132 is a table for managing servers included in the configuration group. FIG. 4 shows an example of the server configuration table 132. The server configuration table 132 illustrated in FIG. 4 holds items of configuration group, server, cluster configuration, cluster configuration operation / non-operation, distributed operation, and distributed operation work order.

  The server item stores information on servers belonging to each configuration group. For example, in the example of FIG. 4, the configuration group of the Web server_X group includes three servers: Web server_X-1, Web server_X-2, and Web server_X-3. The same software is installed on all three servers.

  The server configuration table 132 holds cluster configuration and distributed operation information as server activation conditions. Specifically, the cluster configuration and the cluster configuration operation / non-operation items store information on whether or not the cluster configuration is active and whether the system is active or standby. In the items of distributed operation and distributed operation work order, whether or not the server is a distributed operation and the work order in the distributed operation server are stored. This server activation condition is used to formulate the construction order of the servers in the configuration group.

  The software configuration table 133 is a table for managing software installed in the configuration group. FIG. 5 shows an example of the software configuration table 133. The software configuration table 133 illustrated in FIG. 5 holds items of configuration group, software, version, and in-server order. In the example of FIG. 5, Linux (registered trademark), Apache, Tomcat, and Zabbix Agent are installed in the Web server_X group. That is, the above software is installed in Web server_X-1, Web server_X-2, and Web server_X-3. The server order indicates the software update order in the configuration group.

  The dependency software condition table 134 defines dependency relationships between software. FIG. 6 shows an example of the dependent software condition table 134. In the example of FIG. 6, Tomcat and PostgreSQL operate on the assumption of Apache, and Zabbix Agent operates on the assumption of Zabbix Server.

[Operation of construction order determination device]
Next, operation | movement of the construction order determination apparatus 1 of this embodiment is demonstrated.

  FIG. 7 is a sequence diagram illustrating a processing flow of the construction order determination apparatus 1 according to the present embodiment.

  The person in charge of the construction selects a construction target environment and inputs a construction procedure manual via the user interface 11 (steps S11 and S12).

  The control unit 12 refers to the environment configuration table 131 and acquires configuration group information for each environment group (step S13).

  The control unit 12 refers to the software configuration table 133 and acquires information about the software installed in each configuration group (step S14).

  The control unit 12 refers to the dependency software condition table 134 and acquires the software dependency relationship (step S15).

  And the control part 12 formulates the construction order of a structure group for every environmental group based on the information acquired by step S13-S15 (step S16). Details of the formulation of the construction order for the composition group will be described later.

  After formulating the construction order of the configuration groups for each environmental group, the control unit 12 refers to the server configuration table 132 and acquires information on the servers of each configuration group (step S17).

  The control unit 12 refers to the software configuration table 133 and acquires information about the software installed in each server (step S18).

  Then, the control unit 12 formulates the software construction order for each server based on the construction order of the configuration group established in step S16 and the information acquired in steps S17 and S18 (step S19), and the server construction order. Then, the software construction order is determined (step S20). Details of the creation of the software construction sequence will be described later.

  The person in charge of construction confirms the construction order determined by the construction order determination apparatus 1 (step S21).

  Next, the process in which the construction order determination apparatus 1 of this embodiment determines a construction order is demonstrated using a specific example. Here, it is assumed that the data shown in FIGS.

  FIG. 8 is a flowchart showing a flow of processing in which the construction order determination device 1 according to the present embodiment formulates the construction order of the constituent groups.

  First, the person in charge of construction inputs construction conditions to the construction order determination apparatus 1 (step S31). For example, the construction conditions shown in FIG. 9 are input. Specifically, a construction procedure including instructions for updating Linux (construction 1), Zabbix Server and Zabbix Agent (construction 2), and PostgreSQL and Apache (construction 3), with services X and Y in a commercial environment as construction targets. Enter the certificate.

  The construction order determination apparatus 1 identifies an environmental group to be constructed, and extracts each configuration group of the environmental group with reference to the environment configuration table 131 (step S32). The environmental groups to be constructed are commercial environment_service X and commercial environment_service Y. Referring to the environment configuration table 131 in FIG. 3, the configuration group of the commercial environment_service X is a Web server_X group, a DB server_X group, and a monitoring server_XY group, and the configuration group of the commercial environment_service Y is Web A server_Y group, a DB server_Y group, and a monitoring server_XY group.

  The construction order determination apparatus 1 refers to the software configuration table 133 and extracts the construction target software in the configuration group obtained in step S32 (step S33). FIG. 10 shows the result of extracting the construction target software in the configuration group for the construction target commercial environment_service X and the commercial environment_service Y. For example, in the example of FIG. 10, Linux, Apache, and Zabbix Agent are extracted from the Web server_X group. Looking at the software configuration table 133 in FIG. 5, Tomcat is also installed in the Web server_X group. However, Tomcat is not extracted in step S33 because it is not the current construction target.

  The construction order determination apparatus 1 refers to the dependency software condition table 134 and determines the construction order of the configuration group (step S34).

  Here, the process of determining the construction order of the configuration group based on the software dependency in step S34 will be described. FIG. 11 is a flowchart showing the flow of processing for determining the construction order of configuration groups based on software dependency.

  The construction order determination apparatus 1 refers to the dependency software condition table 134 and checks the preconditions and subsequent conditions between the construction target software of each component group (step S41). FIG. 12 shows the investigation results of the preconditions and subsequent conditions of the construction target software. For example, in the example of FIG. 12, the precondition for the Web server_X group is Zabbix Server, and the subsequent condition is PostgreSQL. The prerequisites for the DB server_X group are Apache and Zabbix Server, and there are no subsequent conditions. There is no precondition for the monitoring server_XY group, and the subsequent condition is Zabbix Agent.

  The construction order determination device 1 determines the rank of each component group based on the presence / absence of the precondition and the presence / absence of the subsequent condition based on the investigation result in step S41 (step S42). Specifically, as shown in the table of FIG. 11, a configuration group without a precondition and without a subsequent condition is “single-capable”, a configuration group without a precondition and with a subsequent condition is “first”, with a precondition, and subsequent A configuration group without a condition is classified as “final”, with a precondition, and a configuration group with a subsequent condition is classified as “unranked”. Then, set the rank of the configuration group classified as “single-capable” and “first” higher (as if it was constructed first), and lower the rank of the configuration group classified as “final” (behind later) To set). Note that the order of the configuration groups is set for each environment group.

  In the example of FIG. 12, for the environment group of commercial environment_service X, the Web server_X group is classified as “ranking undecided” because it has a precondition and a subsequent condition, and the DB server_X group has a precondition and a subsequent condition. Since there is none, it is classified as “final”, and the monitoring server_XY group is classified as “first” because there is no precondition and there is a subsequent condition. FIG. 13 shows the result of classifying the configuration groups. In FIG. 13, the Web server_X group and the DB server_X group are classified as “order undecided”, and the monitoring server_XY group is classified as “head”. Since the subsequent condition of the DB server_X group is none, the table in FIG. 12 is used to classify it as “final”. However, here, in order to explain the second classification, it is classified as “rank undecided”. Yes. In this way, the order of the constituent groups may be set only by the presence or absence of the precondition. Specifically, the rank of the configuration group without the precondition is set high, and the configuration group with the precondition is classified as “order not yet determined”.

  Subsequently, the construction order determination apparatus 1 changes the investigation result in which the software of the constituent group whose order has been determined is a precondition without a precondition (step S43). In the example of FIG. 12, since the order of the monitoring server_XY group is determined, the location where the Zabbix Server of the monitoring server_XY group is a precondition is changed without a precondition. FIG. 14 shows the result of changing the precondition. In the example of FIG. 14, the preconditions of the Web server_X group and the Web server_Y group are changed without any.

  The construction order determination apparatus 1 repeats the processes of steps S42 and S43 until there is no constituent group whose order has not been determined (step S44).

  In the present embodiment, in the environment group of the commercial environment_service X, the ranking of the Web server_X group and the DB server_X group is undecided when the first classification is completed. In step S43, the preconditions of the Web server_X group and the DB server_X group are updated, and the Web server_X group has no precondition and a subsequent condition. As a result, the Web server_X group is classified as “first” in the second classification process. FIG. 15 shows the order of the constituent groups of this embodiment determined by the above processing.

  Next, the formulation of the construction order for each server and each software in the configuration group will be described.

  By the processing so far, the construction order of the constituent groups is established for each environmental group. In the subsequent processing, the server construction order and the software construction order are formulated in accordance with the environmental groups to be constructed.

  FIG. 16 is a flowchart showing the flow of processing for establishing the construction order of each server and each software in the configuration group.

  The construction order determination apparatus 1 arranges all the constituent groups of the environmental group to be constructed based on the order (step S51). 17 and 18 show how the configuration groups are arranged according to the rank of each configuration group. If the order of configuration groups is the same, you can work in parallel.

  Note that ranks may be set between the environmental groups, and the overall ranks of the constituent groups may be determined in consideration of the ranks of the environmental groups. For example, when the order of the commercial environment_service X is set higher than the order of the commercial environment_service Y, the configuration group of the commercial environment_service Y is aligned after the configuration group of the commercial environment_service X.

  Subsequently, the construction order determination device 1 refers to the server configuration table 132, acquires the activation conditions of the servers belonging to the configuration group, and formulates the server rank within each configuration group (step S52). FIG. 19 shows the servers and server ranks of each configuration group formulated in step S52. In the present embodiment, the order of the servers that are distributedly operated is the same except for the last server in the distributed operation work order, and the last server is the last. The order of servers in a cluster configuration is the order of standby → operation. Specifically, the Web server_X group includes a Web server_X-1, a Web server_X-2, and a Web server_X-3 that are distributedly operated. Since the distributed operation work order of Web server_X-3 is the last, the order of Web server_X-1 and Web server_X-2 is the same first, and the order of Web server_X-3 is the second. The DB server_X group has a cluster configuration of a standby DB server_X-S and an active DB server_X-A. In this case, the ranking is given in the order of DB server_XS, DB server_X-A.

  Subsequently, the construction order determination apparatus 1 refers to the software configuration table 133, develops the construction target software of each configuration group to each server, and formulates the software order according to the order of the software in the server (step S53). FIG. 20 shows a state in which the construction target software is expanded on each server according to the order in the server.

  The construction order determination device 1 displays the construction order of the construction target software for each server (step S54). In FIG. 21, the example of the construction order which the construction order determination apparatus 1 formulated is shown. Servers having the same configuration group order and server order within the configuration group can work in parallel. Specifically, since all of the Web server_X-1, Web server_X-2, and Web server_Y-1 have the configuration group rank of 2 and the intra-configuration group server rank of 1, the work can be performed in parallel. Further, according to FIG. 21, after the operations of the Web server_X-1 and the Web server_X-2, the subsequent Web server_X-3 can be performed, and after the operation of the Web server_Y-1, the subsequent Web server_Y. -2 can be done.

  As described above, according to the present embodiment, the server configuration table 132 that stores information on the configuration group in which the servers having the same software configuration are stored, and the information on the environment group in which the configuration group is integrated for each service to be provided. It has a stored environment configuration table 131, a software configuration table 133 that stores information about the software installed for each configuration group, and a dependency software condition table 134 that stores software dependency relationships, and for each environment group to be constructed. Based on the dependency relationship of the installation target software installed in each configuration group, the construction order of the configuration group is formulated, and all the configuration groups belonging to the environmental group subject to construction are arranged according to the construction order, and for each configuration group Configure a configuration group Even if there are multiple works, the server can formulate the construction order based on the server start conditions and formulate the construction order of the software to be installed installed on the server for each server. It is possible to determine an appropriate construction order for each unit, and when updating software, it is possible to reduce the burden on the maintenance personnel and shorten the construction period. As a result, it is possible to reduce business loss due to a reduction in the probability of occurrence of security incidents by immediate response to vulnerabilities, and to provide early services.

DESCRIPTION OF SYMBOLS 1 ... Construction order determination apparatus 11 ... User interface 111 ... Construction procedure manual input function 112 ... Setting function 113 ... Construction order display function 12 ... Control part 121 ... Information collection function 122 ... Construction order determination function 13 ... Storage part 131 ... Environment configuration Table 132 ... Server configuration table 133 ... Software configuration table 134 ... Dependent software condition table

Claims (5)

A server configuration table storing information of a configuration group in which servers having the same software configuration are collected;
An environment configuration table storing information on environment groups in which the configuration groups are grouped for each service to be provided;
A software configuration table storing information of software installed for each of the configuration groups;
A dependency software condition table storing dependency relationships of the software;
Configuration group order determination means for determining the construction order of the configuration group in the environment group based on the dependency relationship of the software installed in the configuration group for each environment group to be constructed;
A server that arranges all the configuration groups belonging to the environmental group to be constructed according to the construction order, and determines the construction order of the servers for each of the configuration groups based on the activation conditions of the servers in the configuration group Order determination means;
Software order determining means for determining the construction order of the software for each server;
A construction order determination device characterized by comprising:   The construction order determining apparatus according to claim 1, wherein the server order determining unit arranges the constituent groups according to the order of the environmental groups. Installed for each configuration group, a server configuration table that stores information on configuration groups that group servers with the same software configuration, an environment configuration table that stores information on environment groups that group the configuration groups for each service provided, and A construction order determination method executed by a construction order determination apparatus having a software configuration table storing software information and a dependency software condition table storing dependency relations of the software,
Determining the construction order of the configuration group within the environmental group based on the dependency of the software installed in the configuration group for each environmental group to be constructed;
Arranging all the configuration groups belonging to the environmental group to be constructed according to the construction order, and determining, for each of the configuration groups, the construction order of the servers based on activation conditions of the servers in the configuration group; When,
Determining the construction order of the software for each server;
A construction order determination method characterized by comprising:   4. The construction order determination method according to claim 3, wherein the construction order determination step of the server arranges the constituent groups according to the order of the environmental groups.   A construction order determination program for operating a computer as each means of the construction order determination apparatus according to claim 1 or 2.

Images