KR102430834B1 - Method and apparatus for providing real-time monitoring service for detecting line failure and collecting performance information - Google Patents

Abstract

A real-time monitoring service providing server for line failure detection and performance information collection receives detailed equipment information of an L4 switch from at least one L4 switch. The detailed equipment information may include information on an average central processing unit (CPU) utilization rate, a maximum CPU utilization rate, an average memory utilization rate, a maximum memory utilization rate, a CPU temperature, and a CPU response time. The server receives line performance information of lines connected to the L4 switch from the L4 switch. The line performance information may include information about the speed of traffic coming into the L4 switch, the speed of traffic going out of the L4 switch, and failure information of each line. The server may receive information about a current connection session and the number of users from the L4 switch. The server may transmit detailed equipment information of the L4 switch, information on whether the L4 switch is being operated by an operator, model name of the L4 switch, bandwidth of the L4 switch, and line performance information to a user terminal. The server may transmit, to the user terminal, a performance indicator ranking list in which the at least one L4 switch is arranged in an order of superior performance indicators. It is possible to detect line failure and collect performance information.

Description

Method and device for providing real-time monitoring service for detecting line failure and collecting performance information

Embodiments of the present invention relate to a server for providing a real-time monitoring service for detecting a line failure and collecting performance information and an operating method thereof.

L4 switch can read and process Layer 4 TCP information. The field that is mainly used is a function such as Load Balancing, and it can recognize the same traffic as TCP port 80, which is often used as a port of the web server, and allocate the traffic equally to the servers in the connected server farm. .

The L4 switch is used when L4 load balance must be used. It is used a lot when the importance of Internet business is high, and L4 load balancing is performed when server visitor congestion is expected or when server access is not possible.

In addition, in the case of operating multiple web servers, if one server fails and it is difficult to provide smooth service, the failure can be prevented in advance through load balancing. Because it is difficult to operate with one server due to server load, companies that require server expansion, or companies that need to operate with multiple servers due to increased traffic due to portal site advertisements and events, want a web server 365 days a year without failure. It is used by companies or companies that operate and plan social commerce sites.

The L4 switch has high security and advanced switching settings are possible, so you can make appropriate settings according to the situation. It can contribute to improving the performance of the network regardless of its capacity. However, it depends on the protocol and the setup is complicated.

The server load balancing function of the L4 switch is a server load balancing function of the Internet called server load balancing. By operating multiple servers as if they were one server, the performance and stability of the Internet server can be improved. The cache redirection function is a function that allows the caching server to be used more efficiently. The cache temporarily stores server data to improve speed and reduce traffic in the WAN section even at the server and client end of the Internet.

Embodiments of the present invention may provide a server for providing a real-time monitoring service for detecting a line failure and collecting performance information and an operating method thereof.

The technical problems to be achieved in the embodiments are not limited to those mentioned above, and other technical problems not mentioned may be considered by those of ordinary skill in the art from various embodiments to be described below. can

According to embodiments, in a method of providing a real-time monitoring service for line failure detection and performance information collection performed by at least one server, receiving, from at least one L4 switch, detailed equipment information of the L4 switch, The equipment detailed information includes information about an average central processing unit (CPU) usage rate, a maximum CPU usage rate, an average memory usage rate, a maximum memory usage rate, a CPU temperature, and a CPU response time; Receive, from the L4 switch, line performance information of lines connected to the L4 switch, wherein the line performance information includes information on a speed of traffic entering the L4 switch, a speed of traffic going out of the L4 switch, and failure information of each line comprising a step; receiving, from the L4 switch, information on a current access session and the number of users; transmitting, to a user terminal, detailed equipment information of the L4 switch, information on whether the L4 switch is being operated by an operator, a model name of the L4 switch, a bandwidth of the L4 switch, and the line performance information; and transmitting, to the user terminal, a performance index ranking list in which the at least one L4 switch is listed in order of superior performance index.

Here, the method may further include, by the server, transmitting, to the user terminal, real-time failure information and failure history status information occurring in the one or more L4 switches.

Here, the method may further include, by the server, transmitting information on the number of session connections, the number of virtual IP (VIP) connections, and the number of real IP (RIP) connections of the L4 switch to the user terminal.

Here, obtaining, by the server, from the user terminal, an input for defining an event for a specific character string and an event for the specific character string; obtaining, from the user terminal, an input for an event action for the specific character string; obtaining a system log original event message from the at least one L4 switch; determining an event level for the specific character string based on a character string included in the system log original event message and the specific character string; performing the action of the event for the specific character string; and providing, to the user terminal, information on an event that has occurred for each grade.

Here, the server transmits, to the user terminal, total monitoring information that simultaneously provides monitoring information for each of the at least one L4 switch, and the monitoring information of each L4 switch included in the total monitoring information is each L4 Listed in order based on the failure history status information of the switch, may further include a step.

An embodiment of the present invention provides a server for providing a real-time monitoring service for detecting line failure and collecting performance information, comprising: a processor; transceiver; and memory; , wherein the processor is configured to: receive, from at least one L4 switch, detailed equipment information of the L4 switch, wherein the detailed equipment information includes an average central processing unit (CPU) usage rate, a maximum CPU usage rate, an average memory usage rate, and a maximum memory contains information about utilization, CPU temperature, and CPU response time; Receive, from the L4 switch, line performance information of lines connected to the L4 switch, wherein the line performance information includes information on a speed of traffic entering the L4 switch, a speed of traffic going out of the L4 switch, and failure information of each line comprising; receive, from the L4 switch, information on a current connection session and the number of users; sending, to the user terminal, detailed equipment information of the L4 switch, information on whether the L4 switch is being operated by an operator, a model name of the L4 switch, a bandwidth of the L4 switch, and the line performance information; And it may be configured to transmit, to the user terminal, a performance index ranking list in which the at least one L4 switch is listed in order of excellent performance index.

According to embodiments, it is possible to periodically detect changes in configuration details of network equipment and traffic, and provide a custom function for change management items. In addition, it is possible to profile and manage equipment, traffic status, performance collection period, and event generation grade, and to create and flexibly apply various profiles according to the importance of equipment. It is possible to secure collection performance that accommodates large-scale network environments, such as supporting monitoring of 100 or more devices in one server.

Effects obtainable from the embodiments are not limited to the effects mentioned above, and other effects not mentioned are clearly derived and understood by those of ordinary skill in the art based on the following detailed description. can be

BRIEF DESCRIPTION OF THE DRAWINGS The accompanying drawings, which are included as part of the detailed description to aid understanding of the embodiments, provide various embodiments and, together with the detailed description, explain technical features of the various embodiments.
1 is a system diagram including a real-time monitoring service providing server for detecting line failure and collecting performance information according to an embodiment of the present invention.
2 is a block diagram showing the configuration of a server that provides a real-time monitoring service for detecting a line failure and collecting performance information according to an embodiment of the present invention.
3 is a system diagram including a real-time monitoring service providing server for detecting line failure and collecting performance information according to an embodiment of the present invention.
4 is a diagram illustrating an embodiment of a method of operating a real-time monitoring service providing server for detecting line failure and collecting performance information.
5 to 10 are diagrams illustrating a method of providing a real-time monitoring service for detecting a line failure and collecting performance information according to an embodiment of the present invention.

The following embodiments combine elements and features of the embodiments in a predetermined form. Each component or feature may be considered optional unless explicitly stated otherwise. Each component or feature may be implemented in a form that is not combined with other components or features. In addition, various embodiments may be configured by combining some components and/or features. The order of operations described in various embodiments may be changed. Some features or features of one embodiment may be included in another embodiment, or may be replaced with corresponding features or features of another embodiment.

In the description of the drawings, procedures or steps that may obscure the gist of various embodiments are not described, and procedures or steps that can be understood at the level of those of ordinary skill in the art are also not described. did.

Throughout the specification, when a part is said to "comprising or including" a certain component, it does not exclude other components unless otherwise stated, meaning that other components may be further included. do. In addition, terms such as "... unit", "... group", and "module" described in the specification mean a unit that processes at least one function or operation, which is hardware or software or a combination of hardware and software. can be implemented as Also, "a or an", "one", "the" and like related terms are used herein in the context of describing various embodiments (especially in the context of the claims that follow). Unless otherwise indicated or clearly contradicted by context, it may be used in a sense including both the singular and the plural.

Hereinafter, embodiments according to various embodiments will be described in detail with reference to the accompanying drawings. DETAILED DESCRIPTION The detailed description set forth below in conjunction with the appended drawings is intended to describe exemplary embodiments of various embodiments, and is not intended to represent the only embodiments.

In addition, specific terms used in various embodiments are provided to help the understanding of various embodiments, and the use of these specific terms may be changed to other forms without departing from the technical spirit of various embodiments. .

1 , the method for providing a real-time monitoring service for detecting line failure and collecting performance information according to an embodiment of the present invention has a storage space such as a personal computer (PC), can be connected to the Internet, and is not easy to carry. It may be performed in a computing device or in a portable terminal such as a smart phone. At this time, the method provides real-time monitoring service for line failure detection and performance information collection. The method provides real-time monitoring service for line failure detection and performance information collection. The application in which the method is implemented is downloaded from the App store, etc. It can be executed after being installed in the portable terminal.

And the method of providing a real-time monitoring service for detecting line failure and collecting performance information is inserted into a computing device such as a PC while being recorded on a recording medium such as a CD (Compact Disc) or USB (Universal Serial Bus) memory, and the computing device It may be performed through the access operation of the computing device, or may be performed through the access operation of the computing device after being stored in the storage space of the computing device from the recording medium.

On the other hand, when the computing device or portable terminal can access a server connected to the Internet, the method of providing a real-time monitoring service for detecting line failure and collecting performance information may also be executed on the server at the request of the computing device or portable terminal.

Hereinafter, a computing device, a portable terminal, or a server on which the method of providing a real-time monitoring service for detecting a line failure and collecting performance information is collectively referred to as a real-time monitoring service providing device for detecting a line failure and collecting performance information.

The device for providing real-time monitoring service for detecting line failure and collecting performance information may have the same configuration as the device for providing real-time monitoring service for detecting line failure and collecting performance information illustrated in FIG. The device for providing real-time monitoring service for collection may not be limited to the device for providing real-time monitoring service for detecting line failure and collecting performance information as shown in FIG. 1 .

A system according to an embodiment includes a user terminal 100, L4 switches 110, 120, 130, and a real-time monitoring service providing server 200 (hereinafter, server 200) for detecting line failure and collecting performance information. may include The network may include an Internet portal site server, an SNS server, a server operating a blog, and the like.

The user terminal 100, the L4 switch 110, 120, 130, a smart phone, a tablet PC, a PC, a smart TV, a mobile phone, a personal digital assistant (PDA), a laptop, a media player, a micro server, a global positioning system (GPS) ) devices, e-book terminals, digital broadcast terminals, navigation devices, kiosks, MP3 players, digital cameras, home appliances, camera-equipped devices, and other mobile or non-mobile computing devices, but is not limited thereto. Also, the user terminal 100 and the L4 switches 110 , 120 , and 130 may be wearable devices having a communication function and a data processing function. However, it is not limited thereto.

The server 200 is implemented as a computer device or a plurality of computer devices that communicate with the user terminal 100 and the L4 switches 110 , 120 , 130 and through a network to provide commands, codes, files, contents, services, etc. can be

For example, the server 200 may provide a file for installing an application to the user terminal 100 and the L4 switch 110 , 120 , 130 connected through a network. In this case, the user terminal 100 and the L4 switches 110 , 120 , and 130 may install an application using a file provided from the server 200 .

In addition, the user terminal 100, the L4 switches 110, 120, 130 access the server 200 under the control of an operating system (OS) and at least one program (eg, a browser or an installed application), A service or content provided by the server 200 may be provided.

As another example, the server 200 may establish a communication session for data transmission/reception, and route data transmission/reception between the user terminal 100 and the L4 switches 110 , 120 , and 130 through the established communication session.

The user terminal 100, the L4 switches 110, 120, and 130, and the real-time monitoring service providing server 200 for detecting a line failure and collecting performance information may perform communication using a network. For example, a network includes a local area network (LAN), a wide area network (WAN), a value added network (VAN), a mobile radio communication network, a satellite communication network, and their It is a data communication network in a comprehensive sense that includes mutual combinations and enables each network constituent entity shown in FIG. 1 to communicate smoothly with each other, and may include a wired Internet, a wireless Internet, and a mobile wireless communication network. In addition, wireless communication is, for example, wireless LAN (Wi-Fi), Bluetooth, Bluetooth low energy, Zigbee, WFD (Wi-Fi Direct), UWB (ultra wideband), infrared communication (IrDA, infrared) Data Association), NFC (Near Field Communication), etc. may be there, but is not limited thereto.

2 is a block diagram showing the configuration of a server that provides a real-time monitoring service for detecting a line failure and collecting performance information according to an embodiment of the present invention.

Referring to FIG. 2 , a server 200 (hereinafter, server 200 ) that provides a real-time monitoring service for detecting line failure and collecting performance information includes a communication unit 210 , a processor 220 and a DB 230 . can do. Only the components related to the embodiment are shown in the server 200 of FIG. 2 . Accordingly, it can be understood by those skilled in the art that other general-purpose components may be further included in addition to the components shown in FIG. 2 .

The communication unit 210 may include one or more components that enable wired/wireless communication between terminals. For example, the communication unit 210 may include at least one of a short-range communication unit (not shown), a mobile communication unit (not shown), and a broadcast receiving unit (not shown).

For example, a request generated according to a program code stored in a recording device such as the DB 230 may be transmitted to the terminal through a network under the control of the communication unit 210 . Conversely, a control signal, command, content, file, etc. provided under the control of the processor of the terminal may be received by the server 200 through the communication unit 210 through the network. For example, a control signal, command, content, file, etc. of the server 200 received through the communication unit 210 may be transmitted to the processor 220 or transmitted to the DB 230 and stored.

The DB 230 is hardware for storing various data processed in the server 200 , and may store a program for processing and controlling the processor 220 .

DB 230 is a random access memory (RAM), such as dynamic random access memory (DRAM), static random access memory (SRAM), read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM), CD- It may include ROM, Blu-ray or other optical disk storage, a hard disk drive (HDD), a solid state drive (SSD), or flash memory. The DB 230 may also be referred to as a memory.

The processor 220 controls the overall operation of the server 200 . For example, the processor 220 may generally control the input unit (not shown), the display (not shown), the communication unit 210 , the DB 230 , and the like by executing programs stored in the DB 230 . The processor 220 may control the operation of the external server 200 by executing programs stored in the DB 230 .

The communication unit 210 may include one or more components that allow the server 200 to communicate with another device (not shown) and a server (not shown). The other device (not shown) may be a computing device such as the server 200 or a sensing device, but is not limited thereto. The communication unit 210 may receive a user input from another electronic device or data stored in an external device from an external device through a network.

The DB 230 may store a program for processing and controlling the processor 220 . For example, the DB 230 may store an instruction for providing a service. Also, the DB 230 may store data generated by the processor 220 . For example, the DB 230 may store information related to a real-time monitoring service for line failure detection and performance information collection provided by the processor 220 . The DB 230 may store information input to or output from the server 200 .

The processor 220 includes application specific integrated circuits (ASICs), digital signal processors (DSPs), digital signal processing devices (DSPDs), programmable logic devices (PLDs), field programmable gate arrays (FPGAs), controllers, and microcontrollers. It may be implemented using at least one of (micro-controllers), microprocessors, and other electrical units for performing functions.

The DB 230 may store at least one instruction executed through the processor 220 . The at least one command receives, from the at least one L4 switch, detailed equipment information of the L4 switch, wherein the equipment detailed information includes an average central processing unit (CPU) usage rate, a maximum CPU usage rate, an average memory usage rate, a maximum memory usage rate, and a CPU contains information about temperature, and CPU response time; Receive, from the L4 switch, line performance information of lines connected to the L4 switch, wherein the line performance information includes information on a speed of traffic entering the L4 switch, a speed of traffic going out of the L4 switch, and failure information of each line comprising; receive, from the L4 switch, information on a current connection session and the number of users; sending, to the user terminal, detailed equipment information of the L4 switch, information on whether the L4 switch is being operated by an operator, a model name of the L4 switch, a bandwidth of the L4 switch, and the line performance information; And it may be configured to transmit, to the user terminal, a performance index ranking list in which the at least one L4 switch is listed in order of excellent performance index.

Here, the at least one command may be further configured to transmit, to the user terminal, real-time failure information and failure history status information generated in the one or more L4 switches.

Here, the at least one command may be further configured to transmit information on the number of session connections of the L4 switch, the number of virtual IP (VIP) connections, and the number of real IP (RIP) connections to the user terminal.

Here, the at least one command may include: obtaining, from the user terminal, an event for a specific character string and an input defining a grade of the event with respect to the specific character string; obtaining, from the user terminal, an input for an action of an event for the specific character string; obtain, from the at least one L4 switch, a system log original event message; determining an event grade for the specific character string based on a character string included in the system log original event message and the specific character string; perform the action of the event on the specific string; And it may be further configured to provide information about the event that has occurred for each level to the user terminal.

Here, the at least one command transmits, to the user terminal, total monitoring information for simultaneously providing monitoring information for each of the at least one L4 switch, and monitoring information of each L4 switch included in the total monitoring information. may be further set to be listed in order based on the failure history status information of each L4 switch.

3 is a system diagram including a real-time monitoring service providing server for detecting line failure and collecting performance information according to an embodiment of the present invention.

Referring to FIG. 3 , a real-time monitoring service providing server (eg, Netis-PAMS) for detecting line failure and collecting performance information may perform wired or wireless communication with an L4 switch (eg, PAS-K). have. The real-time monitoring service providing server for detecting line failure and collecting performance information may provide monitoring service information to the user terminal. The L4 switch may be connected to the L3 switch, and the L3 switch may be connected to the firewall (ie, F/W).

The L4 switch has a structure and operation principle similar to that of the L3 switch, except that it additionally includes a virtual LAN function and advanced settings such as grouping and load balancing. Most of them operate based on the TCP/IP protocol, and even switching using port numbers is possible. The port number is determined by the receiving computer in the form of an IP packet and delivered to the upper layer.

The L4 switch is used when L4 load balance must be used. It is used a lot when the importance of Internet business is high, and L4 load balancing is performed when server visitor congestion is expected or when server access is not possible. In addition, in the case of operating multiple web servers, if one server fails and it is difficult to provide smooth service, the failure can be prevented in advance through load balancing. Because it is difficult to operate with one server due to server load, companies that require server expansion, or companies that need to operate with multiple servers due to increased traffic due to portal site advertisements and events, want a web server 365 days a year without failure. It is used by companies or companies that operate and plan social commerce sites.

The L4 switch has high security and advanced switching settings are possible, so you can make appropriate settings according to the situation. It contributes to improving the performance of the network regardless of its capacity. However, the L4 switch depends on the protocol and the setting is complicated. It is expensive equipment and requires L2 and L3 switches and an appropriate mix arrangement.

The server load balancing function of the L4 switch is a server load balancing function of the Internet called server load balancing. By operating multiple servers as if they were one server, the performance and stability of the Internet server can be improved. The cache redirection function is a function that allows the caching server to be used more efficiently. The cache temporarily stores server data to improve speed and reduce traffic in the WAN section even at the server and client end of the Internet. In the past, the caching server acted as a proxy on the client side, but a transparent caching service can be provided by using an L4 switch. Transparency means that the client can use the caching service without any configuration in the web browser. The firewall/VPN load balancing function is a function to improve the performance and stability of a firewall or VPN gateway device.

The real-time monitoring service providing server for detecting line failure and collecting performance information may be a device that manages the L4 switch and provides a monitoring service for the L4 switch.

4 is a diagram illustrating an embodiment of a method of operating a real-time monitoring service providing server for detecting line failure and collecting performance information.

Referring to FIG. 4 , the real-time monitoring service providing server (hereinafter, the server) for detecting line failure and collecting performance information may receive detailed equipment information (S400). For example, the server may receive, from at least one L4 switch, equipment detailed information of the L4 switch.

For example, the detailed equipment information may include information on an average central processing unit (CPU) usage rate, a maximum CPU usage rate, an average memory usage rate, a maximum memory usage rate, a CPU temperature, and a CPU response time.

The server may receive the line performance information (S410). For example, the server may receive, from the L4 switch, line performance information of lines connected to the L4 switch. For example, the line performance information may include information on a speed of traffic coming into the L4 switch, a speed of traffic going out of the L4 switch, and failure information of each line.

The server may receive connection session and number of visitors information (S420). For example, the server may receive information on the current access session and the number of users from the L4 switch.

The server may transmit L4 switch information to the user terminal (S430). For example, the server transmits, to the user terminal, equipment detailed information of the L4 switch, information on whether the L4 switch is being worked by an operator, a model name of the L4 switch, a bandwidth of the L4 switch, and the line performance information can

The server may transmit a performance index ranking list (S440). For example, the server may transmit, to the user terminal, a performance index ranking list in which the at least one L4 switch is listed in order of excellent performance index.

For example, the server may calculate the performance index of each L4 switch based on detailed equipment information and line performance information of each L4 switch. That is, the performance index may be determined based on detailed equipment information and line performance information of the L4 switch. The server may generate a performance metric ranking list that lists the L4 switches in the order of the performance indicators.

The server may transmit failure information and failure history status information (S450). For example, the server may transmit, to the user terminal, real-time failure information and failure history status information occurring in the one or more L4 switches.

That is, the server determines what failures have occurred in the L4 switches, how many failures have occurred in the L4 switches so far, what is the failure time, how long the failures lasted, whether the failures were resolved, how the failures were resolved, and if the same failure occurred before. It is possible to provide information on how often it occurred, and the recurrence rate for each disability by the measures taken.

The server may transmit the number of L4 switch session connections and the number of virtual IP (VIP)/real IP (RIP) connections (S460). For example, the server may transmit information on the number of session connections, virtual IP (VIP) connections, and real IP (RIP) connections of the L4 switch to the user terminal.

The server may provide event information generated from the switch (S470). For example, the server may obtain, from the user terminal, an input for defining an event for a specific character string and a grade of the event for the specific character string.

For example, the server may obtain, from the user terminal, an input for the action of the event for the specific character string. For example, the server may obtain a system log original event message from the at least one L4 switch. For example, the server may determine the grade of the event for the specific character string based on the character string included in the original system log event message and the specific character string. For example, the server may perform the action of the event for the specific character string. For example, the server may provide the user terminal with information about the event occurring for each grade.

The server may provide monitoring information of each L4 switch (S480). For example, the server may transmit, to the user terminal, all monitoring information for simultaneously providing monitoring information for each to the at least one L4 switch. For example, the monitoring information of each L4 switch included in the overall monitoring information may be sequentially listed based on the failure history status information of each L4 switch.

For example, the server may assign a management index to the at least one L4 switch based on the failure history status information of each L4 switch and the number of users of the L4 switch. For example, the management index may be higher as the number of failure histories increases, and may be higher as the number of users increases.

For example, the server may assign a priority exposure range value to each of the L4 switches based on the management index. For example, the priority exposure range value may be assigned a lower integer as the management index of each L4 switch is higher.

For example, the server may select a priority exposure count that is an arbitrary integer from 0 to an integer including the priority exposure range value for each of the L4 switches.

For example, the monitoring information of each of the L4 switches included in the total monitoring information may be arranged in an order of decreasing the priority exposure count among the L4 switches.

In other words, the higher the number of failures and the higher the number of users, the higher the management index. An L4 switch with many failures and a large number of users has a higher management index. Therefore, a lower priority exposure range value can be given to an L4 switch with many failures and a large number of users. The lower the priority exposure range value is given to an L4 switch having a large number of failures and a large number of users. L4 switches with many failures and many users have a higher probability of selecting a lower priority exposure count, so they can be exposed at the top of all monitoring information. That is, since the L4 switch with many failures and the number of users increases the need for monitoring, it can be exposed at the top of the monitoring information. However, even if there are not many failures or the number of users is low, it does not mean that there is no need for monitoring.

The management index and preferred exposure range value are determined based on the history of failure and the number of visitors, but the preferred exposure count is selected as an arbitrary integer between 0 and the preferred exposure range value, and the server refreshes the priority each time it provides overall monitoring information. You can choose the exposure count. Therefore, whenever monitoring information is provided, it is highly probable that the monitoring information for L4 switches with a large number of failure histories and users will be located at the top, but L4 switches that do not are also randomly exposed to the top, so a balanced monitoring service is provided. can be

Some of the detailed steps shown in the example of FIG. 3 may not be essential steps and may be omitted. In addition to the steps shown in FIG. 3 , other steps may be added, and the order of the steps may vary. Some of the above steps may have their own technical meaning.

5 to 10 are diagrams illustrating a method of providing a real-time monitoring service for detecting a line failure and collecting performance information according to an embodiment of the present invention.

5 to 10 , a real-time monitoring service providing server (hereinafter referred to as a server) for detecting line failure and collecting performance information may provide various information to a user terminal.

For example, the server may provide equipment (eg, L4 switches) and traffic state information to the user terminal. For example, the equipment state information may be divided into five stages, and an alarm may be provided to the user terminal whenever the equipment state is changed. In addition, the server may provide the user terminal with status information such as whether each equipment is being worked by the user. The user can easily add/delete/change equipment through the comprehensive dashboard provided from the server.

For example, the server may provide the equipment status information inquiry service to the user terminal. The user can obtain equipment and traffic status information from the server. Equipment status information classified according to various criteria such as group and service may be provided. Configuration information such as equipment name, model, and bandwidth may also be provided. Summary information of traffic performance (eg, bps, pps, CRC, etc.) and a performance trend screen may be provided. The server may provide ping, traceroute, terminal access (Telnet/SSH), HTTP/HTTPS access, and diagnostic functions to the user terminal.

For example, the server may provide a network performance inquiry service to the user terminal. The server may provide the user terminal with a summary screen of TOP N for the equipment/traffic performance item index. The server may provide summary statistics and trend graph information on equipment resources such as CPU, memory, and temperature to the user terminal. Users can inquire traffic, PPS, CRC, and collision performance items through the server. The server may provide report export for various performance inquiry screens to the user terminal.

For example, the server may provide a service session monitoring service to the user terminal. The server may provide monitoring of various services such as SLB, CSLB, and FWLB. In the case of SLB, it is possible to provide a Real-linked expression belonging to Virtual with Drill-Down. The server can collect user-defined data using real and virtual templates. The server may provide a service group and device session access number and virtual IP and real IP access monitoring service to the user terminal. The server may provide a history inquiry and statistical function (eg, maximum value, average value) for the number of connections to the user terminal. The server may provide the user terminal with information on connection and session for each IP, setting a 5-step threshold, and monitoring event occurrence.

For example, the server may provide a system log monitoring service to the user terminal. The server may collect Syslog source event messages and provide Syslog source event message inquiry service. The server can provide a custom service for the event for a specific string. The server can compare the string included in the event message with a specific user-defined string. In the case of an event that matches the string, it can be changed to a predefined event name and grade.

For example, the server may provide an event monitoring/history inquiry service to the user terminal. Users can receive real-time event monitoring and history inquiry services through the server. The server may provide data such as event occurrence date and time, target, event type, grade, and duration to the user terminal. The server may provide a failover input function targeting an event that has occurred. Users can define grades for each event type through the server and set performance thresholds for each event grade. That is, the server may provide an event profiling function.

In the method of providing a real-time monitoring service for line failure detection and performance information collection performed by at least one server, receiving, from at least one L4 switch, detailed equipment information of the L4 switch, wherein the detailed equipment information includes: comprising information about an average central processing unit (CPU) usage rate, a maximum CPU usage rate, an average memory usage rate, a maximum memory usage rate, a CPU temperature, and a CPU response time; Receive, from the L4 switch, line performance information of lines connected to the L4 switch, wherein the line performance information includes information on a speed of traffic entering the L4 switch, a speed of traffic going out of the L4 switch, and failure information of each line comprising a step; receiving, from the L4 switch, information on a current access session and the number of users; transmitting, to a user terminal, detailed equipment information of the L4 switch, information on whether the L4 switch is being operated by an operator, a model name of the L4 switch, a bandwidth of the L4 switch, and the line performance information; and transmitting, to the user terminal, a performance index ranking list in which the at least one L4 switch is listed in order of superior performance index.

Here, the method may further include, by the server, transmitting, to the user terminal, real-time failure information and failure history status information occurring in the one or more L4 switches.

Here, the method may further include, by the server, transmitting information on the number of session connections, the number of virtual IP (VIP) connections, and the number of real IP (RIP) connections of the L4 switch to the user terminal.

Here, obtaining, by the server, from the user terminal, an input for defining an event for a specific character string and an event for the specific character string; obtaining, from the user terminal, an input for an event action for the specific character string; obtaining a system log original event message from the at least one L4 switch; determining an event level for the specific character string based on a character string included in the system log original event message and the specific character string; performing the action of the event for the specific character string; and providing, to the user terminal, information on an event that has occurred for each grade.

Here, the server transmits, to the user terminal, total monitoring information for simultaneously providing monitoring information for each of the at least one L4 switch, and the monitoring information of each L4 switch included in the overall monitoring information is each L4 Listed in order based on the failure history status information of the switch, may further include a step.

Here, the step of simultaneously providing each monitoring information for the at least one L4 switch may include managing the at least one L4 switch based on the failure history status information of each L4 switch and the number of users of the L4 switch. but giving an index, wherein the management index is higher as the number of failures occurs, and the higher the number of users, the higher; assigning a priority exposure range value to each of the L4 switches based on the management index, wherein the priority exposure range value is given an integer of a lower value as the management index of each L4 switch is higher; Selecting a priority exposure count that is an arbitrary integer from 0 to an integer including the priority exposure range value for each L4 switch, wherein the monitoring information of each L4 switch included in the overall monitoring information includes the L4 Among the switches, the priority exposure count may be arranged in descending order.

The operation according to the embodiment of the present specification may be implemented as a computer-readable program or code on a computer-readable recording medium. The computer-readable recording medium includes all types of recording devices in which data readable by a computer system is stored. In addition, the computer-readable recording medium may be distributed in a network-connected computer system to store and execute computer-readable programs or codes in a distributed manner.

When the embodiment is implemented in software, the above-described technique may be implemented as a module (process, function, etc.) that performs the above-described function. A module may be stored in a memory and executed by a processor. The memory may be internal or external to the processor, and may be coupled to the processor by various well-known means.

In addition, the computer-readable recording medium may include a hardware device specially configured to store and execute program instructions, such as ROM, RAM, and flash memory. The program instructions may include not only machine language codes such as those generated by a compiler, but also high-level language codes that can be executed by a computer using an interpreter or the like.

Although some aspects of the invention have been described in the context of an apparatus, it may also represent a description according to a corresponding method, wherein a block or apparatus corresponds to a method step or feature of a method step. Similarly, aspects described in the context of a method may also represent a corresponding block or item or a corresponding device feature. Some or all of the method steps may be performed by (or using) a hardware device such as, for example, a microprocessor, a programmable computer, or an electronic circuit. In some embodiments, one or more of the most important method steps may be performed by such an apparatus.

In embodiments, a programmable logic device (eg, a field programmable gate array) may be used to perform some or all of the functions of the methods described herein. In embodiments, the field programmable gate array may operate in conjunction with a microprocessor to perform one of the methods described herein. In general, the methods are preferably performed by some hardware device.

The various embodiments described above may be embodied in other specific forms without departing from the technical idea and essential characteristics thereof. Accordingly, the above detailed description should not be construed as restrictive in all respects but as exemplary. The scope of the various embodiments should be determined by a reasonable interpretation of the appended claims, and all modifications within the equivalent scope of the various embodiments are included in the scope of the various embodiments. In addition, claims that are not explicitly cited in the claims may be combined to form an embodiment or may be included as a new claim by amendment after filing.

Claims (5)

A method for providing a real-time monitoring service for detecting line failures and collecting performance information performed by at least one server, the method comprising:
Receive, from at least one L4 switch, equipment detailed information of the L4 switch, wherein the equipment detailed information includes an average central processing unit (CPU) usage rate, a maximum CPU usage rate, an average memory usage rate, a maximum memory usage rate, a CPU temperature, and a CPU response. comprising information about time;
Receive, from the L4 switch, line performance information of lines connected to the L4 switch, wherein the line performance information includes information on a speed of traffic entering the L4 switch, a speed of traffic out of the L4 switch, and failure information of each line comprising a step;
receiving, from the L4 switch, information on a current access session and the number of users;
transmitting, to a user terminal, detailed equipment information of the L4 switch, information on whether the L4 switch is being worked by an operator, a model name of the L4 switch, a bandwidth of the L4 switch, and the line performance information; and
transmitting, to the user terminal, a performance index ranking list in which the at least one L4 switch is listed in order of excellent performance index,
Transmitting the performance index ranking list comprises:
calculating a performance index of each of the at least one L4 switch based on the detailed equipment information and the line performance information of the at least one L4 switch;
Further comprising the step of transmitting, to the user terminal, real-time failure information and failure history status information that occurred in the at least one L4 switches,
The method further comprising transmitting information on the number of session connections, the number of virtual IP (VIP) connections, and the number of real IP (RIP) connections of the L4 switch to the user terminal;
obtaining, from the user terminal, an input for defining an event for a specific character string and an event for the specific character string;
obtaining, from the user terminal, an input for an action of an event with respect to the specific character string;
obtaining, from the at least one L4 switch, a system log original event message;
determining an event level for the specific character string based on a character string included in the system log original event message and the specific character string;
performing the action of the event for the specific character string; and
Further comprising the step of providing, to the user terminal, information about the event that has occurred for each grade,
Further comprising the step of transmitting, to the user terminal, the entire monitoring information for simultaneously providing monitoring information for each of the at least one L4 switch,
assigning a management index of each L4 switch based on the failure history status information of each L4 switch and the number of users information;
assigning a priority exposure range value to each of the L4 switches based on the management index, wherein the priority exposure range value is given as an integer of a lower value as the management index increases; and
The method further comprising the step of selecting, for each L4 switch, an arbitrary integer from 0 to the priority exposure range value as the priority exposure count of each L4 switch;
The monitoring information of each L4 switch included in the overall monitoring information is listed in the order of the smallest exposure count among the L4 switches,
A method of providing a real-time monitoring service for detecting line failures and collecting performance information. delete delete delete delete

Images