WO2013107170A1

WO2013107170A1 - Remote network management system and service operation method therefor

Info

Publication number: WO2013107170A1
Application number: PCT/CN2012/078949
Authority: WO
Inventors: 赵巍
Original assignee: 中兴通讯股份有限公司
Priority date: 2012-01-17
Filing date: 2012-07-20
Publication date: 2013-07-25
Also published as: JP2015511421A; IN2014DN06903A; JP5970559B2; CN103209090A

Abstract

Disclosed are a remote network management system and a service operation method therefor. The remote network management system comprises a proxy server connected to a network, a naming server for storing registered contents, and a service server for executing a network management service. The method comprises: a proxy server receiving a service request sent by a service network manager through a network; the proxy server obtaining identification information about the service server from a naming server according to the service request; and the proxy server conducting a service operation through the service server corresponding to the identification information about the service server. The present invention solves the problem that a network management system cannot be accessed remotely in the related art, releases the limitation that the network management system is only operated locally, and enlarges the application range of the network management system.

Description

The present invention relates to the field of communications, and in particular to a remote network management system and a service operation method thereof. A network management system is a system for managing network elements of a communication network. The configuration data of the network elements of the entire network is configured, and the alarms, performance, and version data reported by the network elements of the entire network are displayed. The user uses this data to monitor the operation of the entire communication network. Based on the consideration of network management processing capability and reliability, each module of the network management system is distributedly deployed. The network management system is divided into modules such as configuration, alarm, performance, and tools. Each module has multiple instances running on different distributed servers to process the business data of the network element concurrently. When a distributed node has a problem, other nodes can replace its work and manage the communication network element to ensure that the network element service can run normally. The distributed technology of the existing network management system is to simply deploy the various modules of the network management system to different nodes, and provide external access interfaces for the network management system to perform unified scheduling. The services provided by each node of the network management system need to be accessed and obtained through the user name and password of the network management client. Under this technology, network management customers cannot implement remote access to the network management system, which affects the use of network management customers. In view of the problem that the network management system cannot be accessed remotely in the related art, an effective solution has not been proposed yet. SUMMARY OF THE INVENTION The embodiments of the present invention provide a remote network management system and a service operation method thereof to solve at least the problem that the network management system cannot be remotely accessed in the related art. According to an aspect of the embodiments of the present invention, a service operation method of a remote network management system is provided. The remote network management system includes: a proxy server connected to a network, a naming server for storing registered content, and a service server for performing network management services. The proxy server receives the service request sent by the service network management network through the network; the proxy server obtains the service server identifier information from the naming server according to the service request; the proxy server performs the service operation by using the service server corresponding to the service server identifier information. The remote network management system may further include: a management server connected to the network; the method further includes: the management server receiving, by using a web browser, the registration information sent by the network management terminal, where the proxy server receives the service request sent by the service network management, The registration information carries the registration content of the service network management, the proxy server, and the service server; the foregoing service network management, the proxy server, and the service server are at least one; The management server sends the registration information to the naming server; after receiving the registration information, the naming server saves and sets the registration content. The above method may further include: the management server receiving, by using the web browser, the registration information modification message sent by the network management terminal, wherein the registration information modification message carries a modification indication; the management server notifying the modification server to the name server The naming server modifies the corresponding registration content according to the above modification instruction. The obtaining, by the proxy server, the service server identifier information from the naming server according to the service request may include: sending, by the proxy server, the service request to the naming server; and after receiving the service request, determining, by the naming server, the corresponding service server according to the service request; The naming server sends the determined service server identification information of the service server to the proxy server. The service operation performed by the proxy server by using the service server corresponding to the service server identifier information may include: the proxy server sending a service operation request to the service server corresponding to the service server identifier information, where the service operation request is based on a secure shell protocol (Secure) a message of the shell (referred to as SSH); after receiving the service operation request, the service server parses the service operation request by using the SSH, performs a service operation corresponding to the service operation request, and feeds back the result of the service operation to the agent. server. The above business operation request may include the above service server requesting access to hardware resources and/or software resources. Each of the remote service network management tubes corresponds to an authorization level; the service operation performed by the service server to perform the foregoing service operation request may include: the service server determining, according to the authorization level of the remote service network management, the permission of the service network management network to access the service server; The server performs the service operation corresponding to the foregoing service operation request according to the permission of the service server. The foregoing service server may include multiple, each of the service servers running a service process in the remote network management system, and the service process is named by a Universally Unique Identifier (UUID) command. According to another aspect of an embodiment of the present invention, a remote network management system is provided, the system includes a proxy server connected to a network, a naming server for storing registered content, and a service server for performing network management services, where the proxy server includes: The module is configured to receive a service request sent by the service network management system by using the network; the information acquisition module is configured to obtain the service server identification information from the name server according to the service request received by the service request receiving module; the service operation module is configured to pass the foregoing information The service server corresponding to the foregoing service server identifier information obtained by the module performs a service operation. The system further includes a management server connected to the network. The management server may include: a registration information receiving module, configured to receive, by using a web browser, registration information sent by the network management terminal, where the registration information carries a service network management server and a proxy server. And the registration content of the service server, the foregoing service network management, the foregoing proxy server, and the foregoing service server are at least one; the registration information sending module is configured to send the registration information received by the registration information receiving module to the naming server; the naming server may include The processing module is configured to save and set the registration content after receiving the registration information sent by the management server. The management server may further include: a modification message receiving module, configured to receive, by using the web browser, a registration information modification message sent by the network management terminal, where the registration information modification message carries a modification indication; and the notification module is configured to The modification indication is notified to the naming server; the naming server further includes: a modification module, configured to modify the corresponding registration content according to the modification instruction notified by the management server. The service operation module may include: a request sending unit, configured to send a service operation request to the service server corresponding to the service server identification information, where the service operation request is an SSH-based message; the service server may include: an execution unit, setting After receiving the service operation request sent by the proxy server, parsing the service operation request by using the SSH to perform a service operation corresponding to the service operation request; and the feedback unit is configured to feed back, by the execution unit, the result of performing the foregoing service operation The above proxy server. The execution unit may include: an authority determining sub-unit, configured to determine, according to the authorization level of the remote service network management, the permission of the service network management to access the service server, where each remote service network management corresponds to an authorization level; And performing a service operation corresponding to the foregoing service operation request according to the permission of the foregoing service server determined by the foregoing authority determining sub-unit. According to the present invention, the proxy server obtains the service server identification information from the naming server according to the service request sent by the service network management, and then the proxy server performs the service operation through the service server corresponding to the service server identification information, and solves the problem that the network management cannot be remotely accessed in the related technology. The problem of the system is to remove the limitation that the network management system can only operate locally, and expand the application scope of the network management system. BRIEF DESCRIPTION OF THE DRAWINGS The accompanying drawings, which are set to illustrate,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, In the drawing: 1 is a flow chart of a service operation method of a remote network management system according to an embodiment of the present invention; FIG. 2 is a schematic structural diagram of a remote network management system according to an embodiment of the present invention; FIG. 3 is an operation flow of a remote network management system according to an embodiment of the present invention; 4 is a structural block diagram of a remote network management system according to an embodiment of the present invention; and FIG. 5 is a block diagram showing a specific structure of a remote network management system according to an embodiment of the present invention. BEST MODE FOR CARRYING OUT THE INVENTION Hereinafter, the present invention will be described in detail with reference to the accompanying drawings. It should be noted that the embodiments in the present application and the features in the embodiments may be combined with each other without conflict. The embodiment of the invention provides a remote network management system and a service operation method thereof. Corresponding to the architecture of the remote network management system, the embodiment provides a service operation method of the remote network management system, and the method can be implemented on the remote network management system, where the remote network management system includes: a proxy server connected to the network, and the registration is saved. A naming server for content, a business server for performing network management services, and a management server connected to the above network. 1 is a flowchart of a service operation method of a remote network management system according to an embodiment of the present invention. The method includes the following steps (step S102 - step S106): Step S102: The proxy server receives a service request sent by the service network management network through the network; Step S104, The proxy server obtains the service server identifier information from the naming server according to the service request. In step S106, the proxy server performs a service operation by using the service server corresponding to the service server identifier information. Through the foregoing method, the proxy server obtains the service server identifier information from the service server according to the service request sent by the service network management, and then the proxy server performs the service operation through the service server corresponding to the service server identifier information, and solves the problem that the network management cannot be remotely accessed in the related technology. The problem of the system is to remove the limitation that the network management system can only operate locally, and expand the application scope of the network management system. The registration content saved on the naming server can be saved when the system is built, or can be selected as needed. In order to facilitate the registration of the network administrator, the system of the embodiment further includes a management server. Before the step S102, the proxy server receives the service request sent by the service network management network through the network. Before, the network management terminal needs to register on the management server first, and the registration includes the registration of the service network management, the registration of the foregoing proxy server, and the registration of the service server. After receiving the registration information of the network management terminal, the management server sends the registration information to the naming server, and the naming server saves and sets the registration content included in the registration information. This registration method is convenient, flexible and easy to implement. For the above registration method, the embodiment provides a preferred embodiment, that is, before the proxy server receives the service request sent by the service network management network, the management server receives the registration information sent by the network management terminal through the web browser, where the registration information Carrying the registration content of the service network management, the proxy server, and the service server, where the service network management, the proxy server, and the service server are at least one; the management server sends the registration information to the naming server, and the naming server receives the registration information and saves And set the registration content. In this way, the registration of the proxy server and the service server in the remote network management system is completed, and the registration of the service network management is completed, which provides conditions and basis for the subsequent service network management to perform remote business operations on the system. The network management terminal may also send registration information modification information to the management server, where the registration information modification information carries a modification indication. The name server is used to save and set the registration information, so the management server receives the modification indication. After that, the modification instruction is notified to the naming server, and then the naming server modifies the corresponding registration content according to the modification instruction. The above modification indication may be a node for indicating to increase, decrease or modify the distributed network management system, and not only to notify other distributed nodes that communicate with the node, but also to distribute through the management interface provided by the naming server. Add, remove, and modify this node in the network management system, that is, add, remove, or modify a running instance of a functional module. For the above modification, the embodiment provides a preferred implementation manner, that is, the management server receives the registration information modification message sent by the network management terminal by using the web browser, where the registration information modification message carries a modification indication, The management server notifies the modification server of the modification indication, and then the name server modifies the corresponding registration content according to the modification instruction. In the above manner, the running instance in the function module in the network management system can be adjusted in time to improve the performance of the network management system. After the registration of the servers of the network management system is completed, step S102 is performed, that is, the proxy server receives the service request sent by the service network management network through the network, and then performs step S104, that is, the proxy server acquires the service server identification information from the naming server according to the service request. For the step S104, the specific operation flow is: the proxy server sends the service request to the naming server, and after receiving the service request, the naming server determines the corresponding service server according to the service request, and the naming server determines the service of the service server. The server identification information is sent to the proxy server. In this way, the proxy server can learn the service server corresponding to the service server identification information, and then perform the service operation through the service server, and the remote service network is The authorization relationship between the service request sent by the pipe and the service server can ensure the security of access and save resources. After the proxy server obtains the service server identifier information, step S106 is performed, that is, the proxy server performs a service operation by using the service server corresponding to the service server identifier information, and the specific process includes: the proxy server corresponding to the service server identifier information Sending a service operation request, wherein the service operation request is a message based on a Secure Shell (SSH), and after receiving the service operation request, the service server parses the service operation request by using the SSH, and executes the service The operation corresponding to the business operation is requested, and the result of the business operation is fed back to the proxy server.

SSH is a secure shell program that accesses remote network management module nodes through SSL security protocols. The distributed network management system in the prior art requires each program to embed a program that provides external access services to provide remote access. SSH can access all programs on remote computer nodes to remotely invoke network management module programs and resources on any remote node server. Therefore, this embodiment uses SSH to remotely call different nodes in a distributed network management system. The remote network management system in this embodiment is a general distributed network management system. The system is not a pure distributed map-reduce system, nor a supercomputer, nor a distributed storage system. However, the system can include all of the above functions of the map-reduce system, supercomputer, and distributed storage system. Only a few shell scripts or programs need to be written and then sent to the proxy server, which can implement any distributed function of the distributed network management system. In the SSH-based remote network management system of this embodiment, SSH can send commands synchronously, and can also send commands asynchronously. After SSH sends a synchronization command to the Host, it waits until the Host returns the result, and the SSH synchronization command returns. After SSH sends an asynchronous command to the host, it returns immediately. It does not wait for the execution result of the host. After the host executes the command, it sends the result to SSH. SSH can send the same command to multiple hosts at the same time. After all hosts return the result, SSH returns the command execution result. SSH can also send a host a synchronous command that needs to be returned multiple times. After sending, SSH will wait. Each time the host completes a specific step, it will return an intermediate result to SSH. Until the host returns all the results, the SSH synchronization command will be executed. return. SSH can also send multiple commands to a host in batches. These commands can be synchronous or asynchronous.

When SSH sends multiple commands (such as SSH to a host to send multiple commands in batches, or multiple hosts to send the same command at the same time), these commands can be logged in and sent using different usernames. For example, SSH sends three commands A, B, and C to a Host, user A when sending A, user b when sending B, and user c when sending C. For example, SSH sends the same command D to three hosts, user D when sending D to Hostl, user e when sending D to Host2, and user f when sending D to Host3. The result of the SSH command is not only a string, but also a binary message (such as a message message exchanged between the local network management system and the upper-layer NMS), or a file (such as a network management performance data file, a configuration backup file, and so on). The above remote network management system can be divided into multiple modules, such as configuration, alarm, performance, version, and tools, depending on the service provided. Each module has one or more instances, and distributed deployment runs on different server nodes. All modules of the entire network management system are clusters, which can hot plug any node without the problem of single point failure. Each module runs as a process on its own node. The proxy server sends a service operation request to the service server corresponding to the service server identifier information, where the service operation request may include the service server requesting access to the hardware resource and/or the software resource. For example, the hardware resource may be a central processing unit (CPU) usage rate and memory usage, etc., and the software resource may be a top program on the host. The foregoing solution solves the problem that the network management system in the prior art can only be implemented by providing remote access separately. This embodiment does not require a network management system to implement secure remote access separately. The distributed nodes can not only access the services provided by the network management module itself, but also the external nodes can access the various software and hardware resources of the server where the node is located. Each of the remote service network management systems corresponds to an authorization level. The remote network management system has an operating system authorization management module, which combines the rights management of the network management with the authority management of the operating system. The network management system can use the Linux user authorization mechanism, that is, use Linux. The user name and password are used to log in to the NMS to control the resources and permissions used by different users (that is, the remote service network management system). Because SSH is also logged in by the user using the operating system, SSH can directly log in to the NMS node to access the modules that it has access to. Linux controls the resources and permissions used by different users. When you log in to the NMS with different users (that is, the remote service network management system), the modules and functions of the NMS that can be operated are different. The resources and permissions assigned by Linux to each user are in one-to-one correspondence with the network management modules, functions, and resources that can be operated after the user logs in to the NMS, thus achieving fine-grained management.

SSH uses the user of the operating system to log in, so that any authorization can be implemented using the user authorization of the operating system itself. SSH users can have their own home folder, which can set the amount of memory used by the user, the number of hard disks, the number of processes that can be created, and so on. At the same time, the above mechanisms have many advantages such as not allowing access to other files, not allowing other users to run programs. For example, the remote service network management initiates a performance query cli command for starting the network management through the proxy server. This command belongs to a function provided by a performance module in the service server. When the proxy server uses SSH to initiate a request to the host (the host) to execute the cli command, the remote terminal The service network management is authorized to access only the performance module process and the specified performance data file, and cannot access any other processes and other files. The running instance of each module in the above module has an SSH command processing module, which can process various command requests initiated by SSH. For example, the proxy server can use SSH to initiate a request to execute a cli command to query the performance data of the network element. The performance module process on the host processes the SSH request to execute the cli command. Based on the foregoing authorization mechanism, the present embodiment provides a preferred implementation manner, that is, the service operation performed by the service server to perform the foregoing service operation request includes: determining, by the service server, the service network management station to access the service according to the authorization level of the remote service network management The authority of the server, the service server performs the business operation corresponding to the service operation request according to the permission of the service server. In this way, access is made more secure and reliable, while avoiding interference with the operation of other processes. There may be multiple service servers. Each service server runs a service process in the remote network management system. The service process is named by a Universally Unique Identifier (UUID) command. In a distributed remote network management system, the naming is not repeated. A node runs a module instance, and each module runs as a process. In addition to running the network management module, the node also runs some service processes of the network management system, such as Secure File Transfer Protocol (SFTP). Tomcat, etc., will also run the process of the monitor. Because these processes are restarted because of failures, upgrades, reconfigurations, and so on, you need to uniquely name the process to uniquely identify a process's "one run." Each time a process is started, the process should be given a unique name, which is different from the names of all processes currently running. Not only that, it should be different from all the names that have appeared, even if the name of the process that has been terminated cannot be reused in subsequent naming. Naming each process has great practical significance in distributed remote network management systems, especially when considering failoveit connection failure automatic retry, because the new process after a process restart is usually different from its previous state. Any other process that deals with the process should be able to determine that the program has been restarted by changing the name of the process, so that the necessary disaster relief measures can be taken immediately to prevent mistakes. For the above description of naming the process, this embodiment can be named by the UUID command. The naming method is: Execute the UUID command to return a globally unique string to uniquely identify the name of a process. This approach has theoretically proved that naming is impossible to repeat. UUID has also been widely used in many applications such as databases and ETs. This embodiment can create a structure to mark a process, the structure is as follows: struct Processj char [32] uuid Int ip, / / int pid, / / process number char * program, int valid / / whether the process still exists

Then, create a hashtable: (char * moduleName, struct Process* processes) such a key, value structure, corresponding to a module running on each node. This will find all the processes of all modules in the remote network management system. The schematic diagram of the architecture of the remote network management system shown in FIG. 2, the remote network management system includes: a proxy server connected to the network, a naming server for storing the registered content, and a service server for performing the network management service, wherein the number of the servers may be one or Multiple, when there are multiple, can be represented in a cluster form, as shown in Figure 2, where Proxy Cluster (proxy server cluster, described below as a proxy server) provides a network interface for receiving remote services over the network. The service request sent by the network management system. At the same time, the proxy server can provide a web browser to facilitate the remote service network management to send a service request. After receiving the above service request, use the api service provided by the Naming server cluster (named server cluster, exemplified by the name server) to find the appropriate Server Cluster (business server cluster, the following is a business server as an example) . The naming server is the brain of the entire system, which holds information about all servers in the proxy server cluster and the business server cluster. The proxy server must be registered with the name server to be used. The data for the named server is saved in the database cluster. The naming server is a stateless server cluster that uses memcached to cache data. Memcached is a high-performance distributed memory object caching system that improves the performance of the naming server. The naming server provides openAPI in the HTTP protocol, which is an open application programming interface (API) for providing services to the outside. After the naming server finds the appropriate service server, the proxy server performs business operations through the found service server. The service server cluster is a cluster that actually performs work. The service server has multiple functions, and each functional module corresponds to one node, and the service The server also has an SSH server installed so that both the proxy server and the name server can access it. The proxy server uses the SSH server to initiate a workload to the business server, and the naming server performs tasks such as configuration, management, and monitoring on the business server. The remote network management system further includes: a Manager Cluster connected to the network (the management server cluster, the following is an example of the management server), and the network management terminal can detect the remote network through the management server. Manage the health of the system, register a proxy server, unregister, modify registration content, authorize access, and more. Therefore, the management server can provide a web browser, which facilitates the network management terminal to send registration information or modify instructions. 3 is a schematic diagram of an operation flow of a remote network management system according to an embodiment of the present invention. This embodiment mainly describes a flow of a service operation performed by a service server. As shown in FIG. 3, the remote network management system includes a Naming server (name server). , Host (host) and worker cluster (that is, the collective name of all the hosts in the remote network management system mentioned above). The worker cluster is the host of each node of the network management distributed system. Each host corresponds to a running instance of a module of the network management system. Through the web-based registration interface provided by Naming Server, the network management terminal can add or remove the host to the remote network management system, that is, add or remove a running instance of a module. Naming Server accesses each Host through ssh. Each host has one or more processes. For example, some hosts have a configuration process, a monitor process, and an Sftp process. Some hosts have an alarm process and a monitor process. Then periodically execute the top program on the Host to check the CPU usage and memory usage of the system, so as to obtain the real-time pressure of each Host, and store the acquired data in the database and memcached. The business module is a process within the Host. By viewing the resource usage of the service module process, you can know the resource usage of the network management module. The remote service network management initiates a service requesting access to the network management through the proxy server, and the proxy server queries the Naming Server for which Host should be used. For example, the user initiates a cli command to start the network management through the proxy server, and queries the performance data of the network element A. First, the proxy server queries the Naming Server, and the performance data of the A network element is managed by Hostl. Then, the proxy server uses SSH to initiate a request to the Host1 to execute the cli command to query the performance data of the A network element.

The Monitor is a monitor running inside the Host. Since it is an internal program, it is not shown in Figure 3. Through Monitor, you can know the resource usage of each process inside the Host. In this way, the Naming Server can obtain the running status of each process in the Host through SSH, and learn whether the operating system where the Host is running is normal, and whether each service is running normally. Some services inside Host are very critical, such as SSH, and servers started by the network management system (such as sftp, web server Tomcat, etc.). Naming Server can learn about this through Monitor. Corresponding to the service operation method of the remote network management system, the embodiment provides a remote network management system, the system includes: a proxy server 40 connected to the network, a naming server 50 storing the registered content, and a service server 60 executing the network management service. This system is used to implement the above embodiments. 4 is a far view of an embodiment of the present invention The block diagram of the network management system, as shown in FIG. 4, the proxy server 40 in the system includes: a service request receiving module 42, an information obtaining module 44, and a service operating module 46. The structure will be described below. The service request receiving module 42 is configured to receive a service request sent by the service network management network through the network; the information obtaining module 44 is connected to the service request receiving module 42 and configured to acquire the service from the name server according to the service request received by the service request receiving module 42. The service identification module 46 is connected to the information acquisition module 44, and is configured to perform a service operation by the service server corresponding to the service server identification information acquired by the information acquisition module 44. Through the above system, the information obtaining module 44 obtains the service server identification information from the service server according to the service request sent by the service network management, and then the service operation module 46 performs the service operation through the service server corresponding to the service server identification information, thereby solving the problem in the related technology. The problem of remote access to the network management system removes the limitation that the network management system can only operate locally, and expands the application scope of the network management system. Before the service request receiving module 42 receives the service request sent by the service network management system, the network management terminal needs to register first. Therefore, this embodiment provides a preferred implementation manner, as shown in FIG. 5 according to the embodiment of the present invention. A detailed structural block diagram of the remote network management system, the system includes a management server 70 connected to the network, in addition to the modules in FIG. 4, and the management server 70 is connected to the service server 60. The management server 70 includes: a registration information receiving module 72, configured to receive, by using a web browser, registration information sent by the network management terminal, where the registration information carries the registration content of the service network management, the proxy server, and the service server, the service network management, the foregoing The proxy server and the foregoing service server are at least one; the registration information sending module 74 is connected to the registration information receiving module 72, and is configured to send the registration information received by the registration information receiving module 72 to the naming server; the naming server 50 includes: the processing module 52 After the registration information sent by the management server 70 is received, the registration content is saved and set. Through the above system, the registration of the proxy server and the service server in the remote network management system is completed, and the registration of the service network management is completed, which provides conditions and basis for the subsequent service network management to perform remote business operations on the system. The network management terminal sends the registration information to the management server, and the registration information may also be the registration information modification information. Therefore, the management server 70 may further include: a modification message receiving module, configured to receive, by using the web browser, the network management terminal to send a registration information modification message, wherein the registration information modification message carries a modification indication; the notification module is configured to notify the name modification server 50 of the modification indication; The server 50 may further include: a modification module configured to modify the corresponding registration content according to the modification instruction notified by the management server 70. The modification instructions have been described in detail above and will not be described here. The information obtaining module 44 obtains the service server identification information from the naming server according to the service request received by the service request receiving module 42. The following is a description of the specific process. The information obtaining module 44 may include: a service request sending unit, configured to The service request is sent to the naming server; the naming server 50 may further include: a determining module, configured to: after receiving the service request sent by the service request sending unit, determine a corresponding service server according to the service request; and the information sending module is configured to The service server identification information of the service server determined by the determining module is sent to the proxy server 40. In this way, the service request sent by the remote service network management can be established with the authorization relationship of the service server to ensure the security of the access and save resources. After the information acquisition module 44 obtains the service server identification information, the service operation module 46 performs a service operation by using the service server corresponding to the service server identification information acquired by the information acquisition module ₄₄ , and the specific process is described below. The method includes: a request sending unit, configured to send a service operation request to a service server corresponding to the service server identification information, where the service operation request is an SSH-based message. The service server includes: an execution unit, configured to: after receiving the service operation request sent by the proxy server 40, parse the service operation request by using the SSH, and perform a service operation corresponding to the service operation request; and the feedback unit is configured to execute the foregoing The result of the unit performing the above business operations is fed back to the proxy server 40. Each of the above-mentioned remote service network management systems corresponds to an authorization level. The remote network management system has an operating system authorization management module, which combines the rights management of the network management with the authority management of the operating system. The network management system can use the Linux user authorization mechanism. The authorization mechanism is described and will not be described here. The present embodiment provides a preferred implementation manner, that is, the execution unit may include: an authority determining sub-unit, configured to determine, according to the authorization level of the remote service network management, the permission of the service network management service server 60, wherein Each remote service network management device corresponds to an authorization level; and the execution sub-unit is configured to execute the service operation corresponding to the service operation request according to the authority of the service server 60 determined by the foregoing authority determination sub-unit. This makes access more secure and reliable, while avoiding interference with other processes. The above business operation request includes the service server 60 requesting access to hardware resources and/or software resources. The service server 60 includes a plurality of services, and each service server 60 runs a service process in the remote network management system, and the service process is named by a UUID command. The specific UUID naming method has been described above and will not be described here. As can be seen from the above description, the remote network management system in the embodiment of the present invention is implemented based on SSH. The SSH can remotely invoke programs and resources on any service server in the distributed network management system, and the network management system can only be removed. The limitation of local operation expands the application scope of the network management system, thereby constructing a simple, secure and effective remote network management system. Obviously, those skilled in the art should understand that the above modules or steps of the present invention can be implemented by a general-purpose computing device, which can be concentrated on a single computing device or distributed over a network composed of multiple computing devices. Alternatively, they may be implemented by program code executable by the computing device, such that they may be stored in the storage device by the computing device and, in some cases, may be different from the order herein. The steps shown or described are performed, or they are separately fabricated into individual integrated circuit modules, or a plurality of modules or steps are fabricated as a single integrated circuit module. Thus, the invention is not limited to any specific combination of hardware and software. The above is only the preferred embodiment of the present invention, and is not intended to limit the present invention, and various modifications and changes can be made to the present invention. Any modifications, equivalent substitutions, improvements, etc. made within the spirit and scope of the present invention are intended to be included within the scope of the present invention.

Claims

Claim

A service operation method of a remote network management system, the remote network management system includes: a proxy server connected to the network, a naming server for storing the registered content, and a service server for performing the network management service; the method includes:

The proxy server receives the service request sent by the service network management network through the network;

The proxy server obtains service server identification information from the name server according to the service request;

The proxy server performs a service operation by using a service server corresponding to the service server identifier information.

2. The method according to claim 1, wherein the remote network management system further comprises: a management server connected to the network;

Before the proxy server receives the service request sent by the service network management system, the method further includes: the management server receives, by using a web browser, the registration information sent by the network management terminal, where the registration information carries the service network management, the proxy server, and the service server. Registration content; at least one of the service network management, the proxy server, and the service server;

The management server sends the registration information to a naming server;

After the registration server receives the registration information, the registration content is saved and set.

The method according to claim 2, wherein the method further comprises: the management server receiving, by using the web browser, a registration information modification message sent by the network management terminal, where the registration information modification message Carrying instructions for modification;

The management server notifying the modification indication to the name server;

The naming server modifies the corresponding registration content according to the modification indication.

The method according to claim 1, wherein the obtaining, by the proxy server, the service server identification information from the naming server according to the service request includes:

Sending, by the proxy server, the service request to a naming server;

After receiving the service request, the naming server determines a corresponding service server according to the service request; The naming server sends the determined service server identification information of the service server to the proxy server.

The method according to claim 1, wherein the proxy server performs a service operation by using a service server corresponding to the service server identifier information, including:

The proxy server sends a service operation request to the service server corresponding to the service server identification information, where the service operation request is a message based on the secure shell protocol SSH;

After receiving the service operation request, the service server parses the service operation request by using the SSH, performs a service operation corresponding to the service operation request, and feeds back a result of the service operation to the proxy server.

6. The method of claim 5, wherein the service operation request comprises the service server requesting access to hardware resources and/or software resources.

The method according to claim 5, wherein each remote service network management device corresponds to an authorization level; the service operation performed by the service server to perform the service operation request comprises: the service server according to the remote service network management The authorization level determines the right of the service network management to access the service server; the service server performs a service operation corresponding to the service operation request according to the permission of the service server.

The method according to any one of claims 1-6, wherein the service server comprises a plurality, each of the service servers running a service process in the remote network management system, and the service process is universal The unique identifier UUID command is named.

A remote network management system, the system comprising: a proxy server connected to the network, a naming server for storing the registered content, and a service server for performing the network management service, the proxy server comprising:

The service request receiving module is configured to receive the service request sent by the service network management system by using the network; the information obtaining module is configured to obtain the service server identification information from the naming server according to the service request received by the service request receiving module;

The service operation module is configured to perform a service operation by using a service server corresponding to the service server identifier information acquired by the information acquisition module.

10. The system according to claim 9, wherein the system further comprises a management server connected to the network; The management server includes: a registration information receiving module, configured to receive, by using a web browser, registration information sent by the network management terminal, where the registration information carries the registration content of the service network management, the proxy server, and the service server, where the service network management The proxy server and the service server are at least one; the registration information sending module is configured to send the registration information received by the registration information receiving module to the naming server;

The naming server includes: a processing module, configured to save and set the registration content after receiving the registration information sent by the management server.

11. The system according to claim 10, wherein

The management server further includes: a modification message receiving module, configured to receive, by the web browser, a registration information modification message sent by the network management terminal, where the registration information modification message carries a modification indication; a notification module, setting And the naming server further includes: a modification module, configured to modify the corresponding registration content according to the modification indication notified by the management server.

12. The system according to claim 9, wherein

The service operation module includes: a request sending unit, configured to send a service operation request to a service server corresponding to the service server identification information, where the service operation request is a message based on a secure shell protocol SSH; the service server includes The execution unit is configured to: after receiving the service operation request sent by the proxy server, parse the service operation request by using the SSH, and perform a service operation corresponding to the service operation request; and the feedback unit is set to be The result of the execution unit performing the business operation is fed back to the proxy server.

The system according to claim 12, wherein the execution unit comprises: a rights determining subunit, configured to determine, according to an authorization level of the remote service network management, permission of the service network management to access the service server, where , each remote service network management corresponds to an authorization level;

And an execution subunit, configured to perform a service operation corresponding to the service operation request according to the authority of the service server determined by the authority determination subunit.