WO2021078192A1 - 一种云服务管理方法、云服务管理装置及可读存储介质 - Google Patents

一种云服务管理方法、云服务管理装置及可读存储介质 Download PDF

Info

Publication number
WO2021078192A1
WO2021078192A1 PCT/CN2020/122796 CN2020122796W WO2021078192A1 WO 2021078192 A1 WO2021078192 A1 WO 2021078192A1 CN 2020122796 W CN2020122796 W CN 2020122796W WO 2021078192 A1 WO2021078192 A1 WO 2021078192A1
Authority
WO
WIPO (PCT)
Prior art keywords
work order
resource
management module
service management
cloud service
Prior art date
Application number
PCT/CN2020/122796
Other languages
English (en)
French (fr)
Inventor
沈世元
袁俊
吴萌
Original Assignee
中兴通讯股份有限公司
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by 中兴通讯股份有限公司 filed Critical 中兴通讯股份有限公司
Priority to US17/626,853 priority Critical patent/US11799946B2/en
Priority to EP20879980.9A priority patent/EP3955544A4/en
Publication of WO2021078192A1 publication Critical patent/WO2021078192A1/zh

Links

Images

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
    • H04L41/08—Configuration management of networks or network elements
    • H04L41/0803—Configuration setting
    • H04L41/0806—Configuration setting for initial configuration or provisioning, e.g. plug-and-play
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L67/00—Network arrangements or protocols for supporting network services or applications
    • H04L67/01—Protocols
    • H04L67/10—Protocols in which an application is distributed across nodes in the network
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L12/00—Data switching networks
    • H04L12/28—Data switching networks characterised by path configuration, e.g. LAN [Local Area Networks] or WAN [Wide Area Networks]
    • H04L12/40—Bus networks
    • H04L12/407—Bus networks with decentralised control
    • H04L12/413—Bus networks with decentralised control with random access, e.g. carrier-sense multiple-access with collision detection [CSMA-CD]
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L12/00—Data switching networks
    • H04L12/28—Data switching networks characterised by path configuration, e.g. LAN [Local Area Networks] or WAN [Wide Area Networks]
    • H04L12/46—Interconnection of networks
    • H04L12/4641—Virtual LANs, VLANs, e.g. virtual private networks [VPN]
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
    • H04L41/08—Configuration management of networks or network elements
    • H04L41/0876—Aspects of the degree of configuration automation
    • H04L41/0886—Fully automatic configuration
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
    • H04L41/08—Configuration management of networks or network elements
    • H04L41/0895—Configuration of virtualised networks or elements, e.g. virtualised network function or OpenFlow elements
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
    • H04L41/40—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks using virtualisation of network functions or resources, e.g. SDN or NFV entities
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
    • H04L41/50—Network service management, e.g. ensuring proper service fulfilment according to agreements
    • H04L41/5041—Network service management, e.g. ensuring proper service fulfilment according to agreements characterised by the time relationship between creation and deployment of a service
    • H04L41/5054—Automatic deployment of services triggered by the service manager, e.g. service implementation by automatic configuration of network components
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L67/00—Network arrangements or protocols for supporting network services or applications
    • H04L67/50—Network services
    • H04L67/51—Discovery or management thereof, e.g. service location protocol [SLP] or web services

Definitions

  • the embodiment of the present invention relates to but not limited to the field of cloud computing, and specifically relates to but not limited to a cloud service management method, a cloud service management device, and a readable storage medium.
  • SDN Software Defined Network
  • NFV Network Function Virtualization
  • the main technical problem that the cloud service management method, cloud service management device, and readable storage medium provided by the embodiments of the present invention solve at least to a certain extent is that when the cloud management platform configures virtual resources for users and activates related cloud services, Manual operation is required, which is not convenient for unified management.
  • an embodiment of the present invention provides a cloud service management method.
  • the cloud service management method includes: when a service management module receives a work order requested by an application, splitting the work order; creating a department and Virtual machine data center VDC; create a user, bind and connect the user with the department and the VDC; the work order includes a resource creation request and resource parameters; the resource management module sends the resource parameters to the bottom layer through an interface Resource pool; the resource management module sends a first notification to the software-defined network SDN controller; the first notification is a notification requesting to issue a flow table; the SDN controller sends a flow to the gateway device according to the first notification table.
  • the embodiment of the present invention also provides a cloud service management device.
  • the cloud service management device includes: a cloud management platform, a virtual resource pool module, an SDN controller, and a gateway device; the cloud management platform includes a service management module and a resource management module ; Service management module, used to split the work order when receiving the work order requested by the application; create a department and virtual machine data center VDC; create a user, bind the user to the department and the VDC Connection; the work order includes a resource creation request, resource parameters; a resource management module, used to send the resource parameters to the underlying resource pool of the virtual resource pool module through an interface; the resource management module is also used to send The first notification is to the SDN controller; the first notification is a notification requesting the issuance of the flow table; the virtual resource pool module is used to share resources and provides an interface with the cloud management platform; the SDN controller is used to The first notification sends a flow table to the gateway device.
  • the embodiment of the present invention also provides a cloud service management device.
  • the cloud service management device includes a processor, a memory, and a communication bus; the communication bus is used to realize connection and communication between the processor and the memory; the processor is used to One or more computer programs stored in the memory are executed to implement the steps of the cloud service management method as described above.
  • the embodiment of the present invention also provides a computer storage medium, the computer-readable storage medium stores one or more programs, and the one or more programs can be executed by one or more processors to realize the above The steps of the cloud service management method.
  • FIG. 1 is a basic flowchart of a cloud service management method according to Embodiment 1 of the present invention
  • FIG. 2 is a detailed flowchart of the cloud service management method according to the second embodiment of the present invention.
  • FIG. 3 is a detailed flowchart of the cloud service management method according to the third embodiment of the present invention.
  • FIG. 4 is a schematic diagram of the composition of a cloud service management device according to the fourth embodiment of the present invention.
  • FIG. 5 is a schematic structural diagram of a cloud service management apparatus according to Embodiment 5 of the present invention.
  • the cloud management platform configures virtual resources for users, and when opening related cloud services, manual operations are required, which is inconvenient for unified management.
  • the present invention provides a cloud service management method. The cloud service management method proposed by the present invention will be described below in conjunction with embodiments.
  • Fig. 1 is a basic flowchart of a cloud service management method provided by a first embodiment of the present invention.
  • the cloud service management method includes the following steps S101-S104.
  • step S101 when the service management module receives the work order of the application request, the work order is split; the department and the virtual machine data center VDC are created; the user is created, and the user is bound and connected with the department and the VDC.
  • the service management module when it receives a work order requested by the service management module, it automatically creates a total thread.
  • the total thread can be called a "work order service” thread, but it is not limited to this thread, which can be defined by the developer. .
  • the "work order service” thread splits the work order; the work order includes a resource creation request and resource parameters.
  • the resource creation request includes at least one of the following: a network creation request, a route creation request, a firewall creation request, a virtual machine creation request, a cloud disk creation request, and a load balancing creation request.
  • the work order of the application request received in the service management module is the work order of the first application request
  • the work order of the first application request is the internal cloud service request.
  • the internal cloud service request can be the application process of submitting related resource products in the OA system of the traditional operator operation and maintenance system when internal employees want to subscribe to the service catalog or purchase resources and products.
  • This application is the work order of the first application request.
  • the service management module when the service management module receives the work order of the first application request, after the work order is split, the work order is also verified. Among them is whether the tenant of the virtual data center VDC for the cloud resources to be created for the work order exists. If so, the "work order service" thread calls the organization ORG (Organize) thread to create the department and VDC; then the "work order service” thread calls The Access Control List (Access Control List) thread creates a user, binds the user to the department created by the ORG thread, and binds the user to the VDC created by the ORG thread.
  • ORG Organization
  • the Access Control List Access Control List
  • the VDC tenant does not exist, you can select the cloud environment that meets the number of eni networks and the number of private networks applied for according to the number of quotas in the user's application ticket, and then verify the address pool.
  • the "work order service” thread directly handles the receipt processing and informs the user; when the verification meets the preset application requirements, the verification is successful, and the "work order service” thread is called Organize ORG threads to create departments and VDCs; then the "work order service” thread calls the access control ACL thread to create users, bind users and departments created by ORG threads, and bind users and VDCs created by ORG threads.
  • the work order further includes an access token (access_token), and before the ORG thread creates the department and VDC, it may also include: the service management module checks the user's authority according to the access token. Among them, the "work order service" thread of the service management module calls the security management IAM (Identity and Access Management) thread to check the user's authority based on the access token. Among them, the user's authority includes the resource authority that the user can call and the basic authority of access. Among them, after checking the user's specific authority, the user's authority is obtained and sent back to the "work order service" thread.
  • access_token access token
  • the service management module checks the user's authority according to the access token. Among them, the "work order service” thread of the service management module calls the security management IAM (Identity and Access Management) thread to check the user's authority based on the access token.
  • the user's authority includes the resource authority that the user can call and the basic authority of access. Among them, after checking the user's specific
  • the work order of the application request received in the service management module may also be the work order of the first application request and/or the second application request, and the work order of the second application request is an external cloud service request.
  • the external cloud service can be financial cloud, enterprise cloud and other external cloud services.
  • the external cloud service request can be for enterprise users to submit related resource products in the IBP system of the traditional operator operation and maintenance system when they want to open the external cloud link function.
  • Application process, the application is the work order requested by the second application.
  • the resource parameters of this work order also include port configuration information, such as ONU uplink port, OLT device uplink and downlink ports, aggregation switch uplink and downlink port information, LSNID, LAN access type, OLT device name, OLT port number , VLAN and other information.
  • port configuration information such as ONU uplink port, OLT device uplink and downlink ports, aggregation switch uplink and downlink port information, LSNID, LAN access type, OLT device name, OLT port number , VLAN and other information.
  • the service management module when the service management module receives the work order of the second application request, after splitting the work order, the department and the virtual machine data center VDC are created; the user is created, and the user is bound to the department and VDC. Before setting the connection, it also includes: sending the second application request for order splitting information to the operator's network transportation resource center.
  • the configuration information in the second application request is sent to the resource management module, and the resource management module performs port configuration on the access side of the external cloud service according to the port configuration information, and configures the rules of the front switch qinq to vlan or qinq to vxlan.
  • the DCI (Data Center Interconnection) thread in the resource management module automatically configures the access layer of the cloud service according to the configuration information of the ONU uplink port, the uplink port of the OLT device, and the uplink port of the aggregation switch; LSNID, LAN access type, OLT device name, OLT port number, VLAN and other information automatically configure the rules of qinq to vlan or qinq to vxlan.
  • the resource management module also calls the API interface of the SDN controller to configure the external network mapping relationship between VIN and VLAN.
  • step S102 the resource management module sends the resource parameters to the underlying resource pool through the interface.
  • the "work order service" thread of the service management module calls the operation OPERATE thread of the resource management module for the creation resource request and resource parameters of the work order.
  • the resource creation request is a virtual machine creation request
  • the virtual machine resource request The virtual resource management (VRM) thread sent to the resource management module, through the VRM thread, sends the resource parameters for creating the virtual machine to the underlying resource pool through the API interface, calls resources, and deploys virtual machine resource functions.
  • the resource parameters for creating the virtual machine include, but are not limited to, the virtual machine image and the virtual machine specifications.
  • the operation thread When the resource creation request is at least one of the network creation request, route creation request, firewall creation request, and load balancing creation request, the operation thread will send the resource creation request to the data center interconnection DCI thread to create the network, routing, firewall, and load balancing Create a request.
  • the resource parameter input parameter is sent to the underlying resource pool through the API interface through the DCI thread, the resource is called, and the resource function is deployed.
  • the resource creation parameters include at least one of the following: network CIDR, VLAN, cloud firewall, and cloud load balancing policy rules, but are not limited to the above resource parameters.
  • the operation thread sends the resource request to the capacity VOLUME thread to create the cloud disk.
  • the resource parameters for creating a cloud disk include at least one of the following: data disk size, system disk size, and cloud disk type.
  • step S103 the resource management module sends a first notification to the software-defined network SDN controller.
  • the first notification is a notification requesting to issue a flow table.
  • step S104 the SDN controller sends the flow table to the gateway device according to the first notification.
  • the SDN controller sends the flow table to the gateway device according to the notification of sending the flow table sent by the resource management module.
  • the gateway device includes a Bleaf gateway device and/or an ILeaf gateway device, which realizes connection and communication according to user requirements of the access layer device, and creates cloud resources.
  • the SDN controller sending the flow table to the gateway device according to the first notification also includes: the resource management module also calls the API interface of the SDN controller to configure the VIN and The external network mapping relationship of the VLAN, the SDN controller issues all VLAN/VXLAN mapping relationship flow tables to the gateway device.
  • the resource management module adds network VLAN information created by the DCI thread to the port according to the mapping relationship, and adds the port to the VNI under the VDC created by the ORG thread of the service management module.
  • the "work order service" thread returns the successful configuration response to the IBP system, and the IBP system issues a work order to the customer insurance center of the data center operation and maintenance for external line deployment.
  • the cloud service management method splits the work order when the service management module receives the work order requested by the application, creates a department and VDC, creates a user in the ACL thread, and binds the user to the department and VDC. Connection, where the work order includes a resource creation request and resource parameters.
  • the resource management module sends the resource request parameters to the underlying resource pool through the API interface.
  • the underlying resource pool creates resources based on the resource creation request parameters, and the resource management module sends a request to issue a flow table.
  • the notification is sent to the SDN controller, and the SDN controller sends the flow table to the gateway device, which realizes the automatic analysis of the user's application work order and completes the technical effect of automatic creation of cloud resources.
  • the management method of the present invention realizes the automatic analysis of the user's application work order and completes the automatic creation of cloud resources.
  • the cloud service management method of the present invention will be described below in conjunction with an application scenario.
  • the cloud service management method includes the following steps S201-S207.
  • step S201 when the service management module receives the work order requested by the application, the work order is split and verified.
  • the work order requested by the application is an internal employee who wants to apply for a cloud disk.
  • the service management module receives the work order for the application request, it automatically establishes a total thread, which can be called "work order service” Thread, but not limited to this kind of thread, can be defined by the developer. Then the "work order service” thread splits the work order; the work order includes the creation of cloud disk resource requests and resource parameters.
  • the resource parameters for creating a cloud disk include: data disk size, system disk size, and cloud disk type.
  • the service management module when the service management module receives the work order requested by the application, it splits the work order and verifies whether the tenant of the virtual data center VDC of the cloud resource to be created by the work order exists. If so, S202 is executed; or if the VDC tenant does not exist, the cloud environment that meets the number of applied eni networks and the number of private networks can be selected according to the number of quotas in the user application work order, and the address pool can be verified.
  • the "work order service" thread directly handles the receipt processing, and informs the user to execute S207.
  • the verification meets the preset application requirements, the verification is successful, and S202 is executed.
  • step S202 the service management module checks the user's authority according to the access token.
  • the work order requested by the application also includes an access token (access_token), which is that the "work order service" thread of the service management module calls the security management IAM thread to check the user's authority based on the access token.
  • access_token an access token
  • the user's authority includes the resource authority that the user can call and the basic authority of access. Among them, after checking the user's specific authority, the user's authority is obtained and sent back to the "work order service" thread.
  • step S203 a department and a virtual machine data center VDC are created; a user is created, and the user is bound and connected with the department and the VDC.
  • the "work order service” thread of the service management module calls the organization ORG thread to create the department and VDC; then the "work order service” thread calls the access control ACL thread to create users, bind users and ORG threads to create Department, bind user and VDC created by ORG thread.
  • step S204 the resource management module sends the resource parameters to the underlying resource pool through the API interface.
  • the "work order service" thread of the service management module calls the operation OPERATE thread of the resource management module for the creation resource request and resource parameters of the work order, and the operation thread sends the cloud disk resource request to the capacity VOLUME thread to create the cloud. plate.
  • the resource parameter input is sent to the underlying resource pool through the API interface, the resource is called, and the resource function is deployed.
  • step S205 the resource management module sends a first notification to the software-defined network SDN controller; the first notification is a notification requesting to issue a flow table.
  • step S206 the SDN controller sends the flow table to the gateway device according to the first notification.
  • the SDN controller sends the routing flow table to the gateway device according to the notification of issuing the routing flow table sent by the resource management module.
  • the gateway device includes the Bleaf gateway device and the ILeaf gateway device, which realizes connection and communication according to user requirements of the access layer device, and creates cloud resources.
  • step S207 the cloud service management method ends.
  • the service management module when the service management module receives an internal application for creating a cloud disk request, the work order is split and verified, and the service management module checks the user's authority according to the access token , And then call the ORG thread to create the department and VDC, the ACL thread to create a user, bind the user to the department and VDC, where the work order includes the creation of a resource request, resource parameters, and the resource management module sends the resource request parameters to the underlying resources through the API interface.
  • the underlying resource pool creates resources according to the resource creation request parameters
  • the resource management module sends a notification requesting to issue a flow table to the SDN controller
  • the SDN controller sends the flow table to the gateway device to automatically parse the user’s application work order, and Complete the automatic creation of cloud resources and realize the automatic activation of internal cloud services.
  • the management method of the present invention realizes the automatic analysis of the user's application work order and completes the automatic creation of cloud resources.
  • the cloud service management method of the present invention will be described below in conjunction with an application scenario.
  • Fig. 3 is a detailed flowchart of a cloud service management method according to the third embodiment of the present invention.
  • the cloud service management method includes the following steps S301-S308.
  • step S301 when the service management module receives the work order requested by the application, the work order is split.
  • the work order of the application request is that an external enterprise wants to apply for cloud services.
  • the external enterprise user or the operation and maintenance staff of the data center can enter the application request into the IBP system of the traditional operator operation and maintenance system.
  • the module receives the work order requested by the application, it automatically establishes a total thread.
  • the total thread can be called a "work order service” thread, but it is not limited to this thread and can be defined independently by the developer.
  • the "work order service” thread splits the work order. After the order is split, the ONU, OLT, and aggregation switch application resources in the work order are sent to the operator's network operation resource center for processing.
  • the work order includes a request to create a cloud disk resource, resource parameters, and port configuration information.
  • the resource creation request includes: network creation request, route creation request, firewall creation request, virtual machine creation request, cloud disk creation request, and load balancing creation request.
  • the port configuration information includes: ONU uplink port, OLT device uplink and downlink ports, aggregation switch uplink and downlink port information, LSNID, LAN access type, OLT device name, OLT port number, VLAN and other information.
  • step S302 the configuration information in the work order is sent to the operator and the resource management module, and the resource management module performs port configuration on the access side of the external cloud service according to the configuration information.
  • the device configuration information in the work order is sent to the network transportation resource center of the operator, and the equipment to be changed is recorded and reviewed in the network transportation resource center of the operator.
  • the DCI thread in the resource management module can be configured according to the ONU uplink port, the uplink port of the OLT device, and the uplink port of the aggregation switch in the configuration information.
  • the information automatically configures the port of the access layer of the cloud service.
  • step S303 the resource management module configures a rule for the front switch qinq to vlan or qinq to vxlan according to the configuration information.
  • the DCI thread in the resource management module automatically configures the qinq to vlan or qinq to vxlan rule according to the LSNID, LAN access type, OLT device name, OLT port number, VLAN and other information in the configuration information.
  • step S304 the resource management module calls the API interface of the SDN controller to configure the external network mapping relationship between VIN and VLAN.
  • the DCI thread in the resource management module calls the API interface of the SDN controller to configure the external network mapping relationship between VIN and VLAN.
  • step S305 the resource management module sends the resource parameters to the underlying resource pool through the API interface
  • the "work order service" thread of the service management module calls the operation OPERATE thread of the resource management module for the creation resource request and resource parameters of the work order.
  • the virtual machine resource request is sent
  • the virtual resource management VRM thread for the resource management module sends the resource parameters of creating a virtual machine to the underlying resource pool through the VRM thread through the API interface, calls resources, and deploys virtual machine resource functions.
  • the resource parameters for creating the virtual machine include, but are not limited to, the virtual machine image and the virtual machine specifications.
  • Resource creation requests include network creation requests, route creation requests, firewall creation requests, and load balancing creation requests.
  • the operation thread sends the resource creation request to the data center interconnection DCI thread to create network, routing, firewall, and load balancing creation requests.
  • the resource parameter input parameter is sent to the underlying resource pool through the API interface through the DCI thread, the resource is called, and the resource function is deployed.
  • the resource creation parameters include at least one of the following: network CIDR, VLAN, cloud firewall, and cloud load balancing policy rules, but are not limited to the above resource parameters.
  • the resource creation request includes a cloud disk creation request, and the operation thread sends the resource request to the capacity VOLUME thread to create the cloud disk.
  • the resource parameters for creating a cloud disk include at least one of the following: data disk size, system disk size, and cloud disk type.
  • step S306 the resource management module sends a first notification to the software-defined network SDN controller.
  • the first notification is a notification requesting to issue a flow table.
  • step S307 the SDN controller sends the external network mapping relationship of the VIN and VLAN to the ILEAF gateway device according to the first notification.
  • the SDN controller sends the external network mapping relationship flow table of VIN and VLAN to the ILEAF gateway device according to the notification sent by the resource management module for issuing the external network mapping relationship flow table of VIN and VLAN.
  • step S308 the SDN controller sends the external network mapping relationship of the VIN and VLAN to the BLEAF gateway device according to the first notification.
  • the SDN controller sends the external network mapping relationship flow table of VIN and VLAN to the BLEAF gateway device according to the notification sent by the resource management module for issuing the external network mapping relationship flow table of VIN and VLAN.
  • the service management module when the service management module receives a work order requested by an external application, the work order is split, and the configuration information in the work order is sent to the resource management module, and the resource management module is configured according to the configuration.
  • Configure the port configuration on the access side of the information external cloud service configure the front switch qinq to vlan or qinq to vxlan rules, call the API interface of the SDN controller to configure the external network mapping relationship between VIN and VLAN, and then pass the resource parameters through the API
  • the interface is sent to the underlying resource pool, resources are called, and resource functions are deployed.
  • the resource management module sends the first notification to the SDN controller, and the SDN controller sends the external network mapping configuring VIN and VLAN to the ILEAF gateway device and the BLEAF gateway device according to the first notification.
  • the flow table of the relationship Avoid manual operation of resource configuration, realize automatic analysis of user application work orders, and complete automatic creation of cloud resources, avoid manual operation to configure information to the front switch of the OLT, and realize the pre-configuration of automatic delivery to the OLT
  • the switch automatically configures the rules of the front switch qinq to vlan (vxlan) to realize the automatic activation of external cloud services.
  • the present invention provides a cloud service management device.
  • the cloud service management device proposed by the present invention will be described below in conjunction with embodiments.
  • the cloud service management apparatus includes: a cloud management platform, a virtual resource pool module, an SDN controller, and a gateway device; the cloud management platform includes Service management module and resource management module;
  • the service management module is used to split the work order when the work order requested by the application is received; create a department and virtual machine data center VDC; create a user, bind and connect the user with the department and VDC; work order includes creation Resource request, resource parameters;
  • the resource management module sends resource parameters to the underlying resource pool of the virtual resource pool module through the interface; the resource management module is also used to send a first notification to the SDN controller; the first notification is a notification requesting to issue a flow table;
  • the virtual resource pool module is used to share resources and provide an interface with the cloud management platform;
  • the SDN controller is configured to send the flow table to the gateway device according to the first notification.
  • the service management module of the cloud management platform receives the work order requested by the internal cloud service application
  • the work order is split and verified.
  • a work order for an internal cloud service application request is received, a total thread is automatically established.
  • the total thread can be called a "work order service” thread, but it is not limited to this thread and can be defined by the developer.
  • the "work order service” thread splits the work order; the work order includes a resource creation request and resource parameters.
  • the resource creation request includes at least one of the following: a network creation request, a route creation request, a firewall creation request, a virtual machine creation request, a cloud disk creation request, and a load balancing creation request.
  • the "work order service” thread calls the organization ORG thread to create the department and VDC; then the "work order service” thread calls the organization ORG thread to create the department and VDC;
  • the "Ticket Service” thread calls the access control ACL thread to create a user, binds the user to the department created by the ORG thread, and binds the user to the VDC created by the ORG thread.
  • the "work order service” thread When the verification does not meet the preset application requirements, the "work order service” thread directly handles the receipt processing and informs the user; when the verification meets the preset application requirements, the verification is successful, and the "work order service” thread is called Organize ORG threads to create departments and VDCs; then the "work order service” thread calls the access control ACL thread to create users, bind users and departments created by ORG threads, and bind users and VDCs created by ORG threads.
  • the service management module of the cloud management platform is also used to split and verify the work order when the work order requested by the first application is received, and then check the user according to the access token in the work order.
  • the permissions of the user include the resource permissions that the user can call and the basic permissions for access. Among them, after checking the user's specific authority, the user's authority is obtained and sent back to the "work order service" thread.
  • the work order of the first application request in this embodiment is an internal cloud service application request.
  • the service management module of the cloud management platform when the work order of the application request received by the service management module of the cloud management platform is the second application request work order, after the work order is split, the department and the virtual machine data center VDC are created; For the user, before binding and connecting the user with the department and the VDC, the service management module is also used to send the configuration information in the second application request to the operator and the resource management module of the cloud management platform.
  • the second application request is an external cloud service request, and the work order of the second application request includes port configuration information.
  • the resource management module is also used to configure the port of the access side of the external cloud service according to the port configuration information, and configure the front switch qinq to vlan or qinq to vxlan rule.
  • the port configuration on the access side includes: configuring the connected LSN (Local Service Node) stacking the BLEAF switch and port group, and the front switch device name and port group of the connected OLT.
  • LSN Local Service Node
  • the Spine-leaf boundary aggregation switch in the LSN is triggered through the interface of the SDN controller, the VLAN/VXLAN mapping relationship of the BLEAF switch port is configured, and the multi-service edge router MSE device of the LSN is connected through VLAN encapsulation, and the MSE completes the internal LSN Mutual mapping between VLAN and VxLAN.
  • MSE is the access directly facing the metropolitan area network.
  • the SDN controller is further configured to send the external network mapping relationship flow table for configuring VIN and VLAN to the gateway device according to the first notification;
  • the resource management module is further configured to add the created network VLAN information to the port according to the mapping relationship, and add the port to the VNI under the VDC.
  • the cloud service management device is also provided with the management of the virtualization system, and the management of the SDN module is used for unified management of the entire process.
  • the virtual resource pool module integrates physical servers to form one or more logical virtual resource pools. Sharing includes but not limited to computing, storage, and network resources. It also provides connections to the cloud management platform. The external interface.
  • the gateway device may include a BLEAF gateway device and/or an ILEAF gateway device.
  • the gateway device supports the OpenFlow protocol and is mainly a three-layer switch. It works at the network layer and has a routing function. It will also provide a northbound interface to communicate with SDN.
  • the controller is connected.
  • the cloud service management device provided by the embodiment of the present invention, through the service management module, when receiving the work order for the internal cloud service and/or the external cloud service application request, the work order of the internal cloud service is split and verified, and the work order is checked.
  • the resource management module sends to the resource pool of the virtual resource pool module through the API interface, and the resource management module also sends a first notification to the SDN controller; the first notification is a notification requesting to issue a flow table.
  • the resource pool of the virtual resource module provides an interface with the cloud management platform, allowing the cloud management platform to uniformly arrange, manage, and monitor the resources of the resource pool.
  • the SDN controller sends the flow table to the gateway device according to the first notification.
  • Split the work order of the external cloud service and send the configuration information in the work order to the resource management module.
  • the resource management module configures the port of the external cloud service access side according to the configuration information, and configures the front switch qinq to vlan or qinq Switch to vxlan rules, call the API interface of the SDN controller to configure the external network mapping relationship between VIN and VLAN, and then send the resource parameters to the underlying resource pool through the API interface, call the resource, deploy the resource function, and the resource management module sends the first notification
  • the SDN controller may send a flow table configuring the external network mapping relationship between VIN and VLAN to the gateway device according to the first notification.
  • This embodiment also provides a cloud service management device. See FIG. 5, which includes a processor 501, a memory 502, and a communication bus 503, where:
  • the communication bus 503 is used to implement connection and communication between the processor 501 and the memory 502;
  • the processor 501 is configured to execute one or more computer programs stored in the memory 502, so as to implement at least one step in the cloud service management method of any one of the first to third embodiments.
  • the service management module when the service management module receives the work order for the application request, the work order is split, the department and the VDC are created, the ACL thread creates the user, and the user is bound and connected with the department and the VDC.
  • the list includes resource creation request and resource parameters.
  • the resource management module sends the resource request parameters to the underlying resource pool through the API interface.
  • the underlying resource pool creates resources based on the resource creation request parameters.
  • the resource management module sends a notification requesting to issue a flow table to SDN control.
  • the SDN controller sends the flow table to the gateway device, which can automatically parse the user's application work order and complete the technical effect of automatic creation of cloud resources.
  • Embodiment 6 is a diagrammatic representation of Embodiment 6
  • This embodiment also provides a computer-readable storage medium, which is included in any method or technology for storing information (such as computer-readable instructions, data structures, computer program modules, or other data). Volatile or non-volatile, removable or non-removable media.
  • Computer-readable storage media include but are not limited to RAM (Random Access Memory), ROM (Read-Only Memory, read-only memory), EEPROM (Electrically Erasable Programmable read only memory, charged Erasable Programmable Read-Only Memory) ), flash memory or other memory technology, CD-ROM (Compact Disc Read-Only Memory), digital versatile disk (DVD) or other optical disk storage, magnetic cassettes, magnetic tapes, magnetic disk storage or other magnetic storage devices, Or any other medium that can be used to store desired information and that can be accessed by a computer.
  • the computer-readable storage medium in this embodiment can be used to store one or more computer programs, and the stored one or more computer programs can be executed by a processor, so as to implement the cloud service in any one of the first to third embodiments. At least one step of the management method.
  • the service management module when the service management module receives the work order for the application request, the work order is split, the department and the VDC are created, the ACL thread creates the user, and the user is bound and connected with the department and the VDC.
  • the list includes resource creation request and resource parameters.
  • the resource management module sends the resource request parameters to the underlying resource pool through the API interface.
  • the underlying resource pool creates resources based on the resource creation request parameters.
  • the resource management module sends a notification requesting to issue a flow table to SDN control.
  • the SDN controller sends the flow table to the gateway device, which can automatically parse the user's application work order and complete the technical effect of automatic creation of cloud resources.
  • a cloud service management device when the service management module receives the work order requested by the application, the work order is split, and the department, VDC, and ACL are created. Thread creates users, binds users to departments and VDCs.
  • the work order includes resource creation requests and resource parameters.
  • the resource management module sends resource request parameters to the underlying resource pool through the interface, and the underlying resource pool creates resources based on the resource creation request parameters.
  • the resource management module sends a notification requesting the delivery of the flow table to the SDN controller, and the SDN controller sends the flow table to the gateway device, avoiding the cloud management platform from configuring virtual resources for users and requiring manual operation and configuration by the administrator when opening related cloud services , Inconvenient for unified management, in some implementation processes, including but not limited to automatic analysis of user application work orders, and complete the technical effect of automatic creation of cloud resources.
  • communication media usually contain computer-readable instructions, data structures, computer program modules, or other data in a modulated data signal such as carrier waves or other transmission mechanisms, and may include any information delivery medium. Therefore, the present invention is not limited to any specific combination of hardware and software.

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Computer Security & Cryptography (AREA)
  • Automation & Control Theory (AREA)
  • Data Exchanges In Wide-Area Networks (AREA)

Abstract

一种云服务管理方法、云服务管理装置及可读存储介质。该方法包括：当服务管理模块接收到申请请求的工单时，对所述工单进行拆单；创建部门和虚拟机数据中心VDC；创建用户，将所述用户与所述部门及所述VDC绑定连接；所述工单包括创建资源请求、资源参数(S101)；资源管理模块将所述资源参数通过接口发送给底层资源池(S102)；所述资源管理模块发送第一通知给软件定义网络SDN控制器；所述第一通知为请求下发流表的通知(S103)；以及所述SDN控制器根据所述第一通知向网关设备发送流表(S104)。

Description

一种云服务管理方法、云服务管理装置及可读存储介质
相关申请的交叉引用
本申请基于申请号为201911008069.8、申请日为2019年10月22日的中国专利申请提出，并要求该中国专利申请的优先权，该中国专利申请的全部内容在此引入本申请作为参考。
技术领域
本发明实施例涉及但不限于云计算领域，具体而言，涉及但不限于一种一种云服务管理方法、云服务管理装置及可读存储介质。
背景技术
随着互联网的兴盛和ICT服务的快速发展，整个社会的信息化发展将进入一个新的智能化服务时代，要求网络具备弹性连接、智能数据、自然交互等新型能力；而传统网络无法满足这些新能力要求，因此运营商必须要对网络进行转型重构。在未来ICT网络演进的大方向上，各通信厂家提出了转型3.0计划，目标是成为领先的综合智能信息服务运营商，着力推进以网络智能化、业务生态化、运营智慧化为特点的未来网络重构，而LSN是区域的综合信息服务节点，通过将运营商传统端局升级重构为云化VDC，点面结合布局ICT综合服务能力，可以为企业用户提供属地化的政企业务和行业解决方案；为家庭、个人用户提供4K/8K超高清视频服务，以及VR/AR等新型交互式视频体验，还可以提供基于物联网的万物互联服务。
SDN(Software Defined Network，软件定义网络)/NFV(Network Function Virtualization，网络功能虚拟化)技术的发展，使网络功能虚拟化成为当前热点，也为网络的快速部署、调整提供可能。但在相关技术中，在云管平台为用户配置虚拟资源，开通相关云服务时，需要管理员人工操作配置，不便于统一管理。
发明内容
本发明实施例提供的一种云服务管理方法、云服务管理装置及可读存储介质，在至少一定程度上解决的主要技术问题是，云管平台为用户配置虚拟资源，开通相关云服务时，需要人工参与操作，不便于统一管理。
有鉴于上述问题，本发明实施例提供一种云服务管理方法，所述云服务管理方法包括： 当服务管理模块接收到申请请求的工单时，对所述工单进行拆单；创建部门和虚拟机数据中心VDC；创建用户，将所述用户与所述部门及所述VDC绑定连接；所述工单包括创建资源请求，资源参数；资源管理模块将所述资源参数通过接口发送给底层资源池；所述资源管理模块发送第一通知给软件定义网络SDN控制器；所述第一通知为请求下发流表的通知；所述SDN控制器根据所述第一通知向网关设备发送流表。
本发明实施例还提供一种云服务管理装置，所述云服务管理装置包括：云管理平台、虚拟资源池模块、SDN控制器、网关设备；所述云管理平台包括服务管理模块和资源管理模块；服务管理模块，用于接收到申请请求的工单时，对所述工单进行拆单；创建部门和虚拟机数据中心VDC；创建用户，将所述用户与所述部门及所述VDC绑定连接；所述工单包括创建资源请求，资源参数；资源管理模块，用于将所述资源参数通过接口发送给所述虚拟资源池模块的底层资源池；所述资源管理模块还用于发送第一通知给SDN控制器；所述第一通知为请求下发流表的通知；虚拟资源池模块，用于共享资源，提供与所述云管理平台的接口；SDN控制器，用于根据所述第一通知向所述网关设备发送流表。
本发明实施例还提供一种云服务管理装置，所述云服务管理装置包括处理器、存储器及通信总线；所述通信总线用于实现处理器和存储器之间的连接通信；所述处理器用于执行存储器中存储的一个或者多个计算机程序，以实现如上所述的云服务管理方法的步骤。
本发明实施例还提供一种计算机存储介质，所述计算机可读存储介质存储有一个或者多个程序，所述一个或者多个程序可被一个或者多个处理器执行，以实现如上所述的云服务管理方法的步骤。
本发明其他特征和相应的有益效果在说明书的后面部分进行阐述说明，且应当理解，至少部分有益效果从本发明说明书中的记载变的显而易见。
附图说明
图1为本发明实施例一的云服务管理方法基本流程图；
图2为本发明实施例二的云服务管理方法细化流程图；
图3为本发明实施例三的云服务管理方法细化流程图；
图4为本发明实施例四的云服务管理装置组成示意图；
图5为本发明实施例五的云服务管理装置结构示意图。
具体实施方式
为了使本发明的目的、技术方案及优点更加清楚明白，下面通过具体实施方式结合附图对本发明实施例作进一步详细说明。应当理解，此处所描述的具体实施例仅仅用以解释本发明，并不用于限定本发明。
实施例一：
为了解决在接收到申请请求时，云管理平台为用户配置虚拟资源，开通相关云服务时，需要人工参与操作，不便于统一管理的问题。本发明提供一种云服务管理方法，下面结合实施例对本发明提出的云服务管理方法进行说明。
请参见图1，图1为本发明第一实施例提供的云服务管理方法的基本流程图，该云服务管理方法包括以下步骤S101-S104。
在步骤S101中，当服务管理模块接收到申请请求的工单时，对工单进行拆单；创建部门和虚拟机数据中心VDC；创建用户，将用户与部门及VDC绑定连接。
在本实施例中，当服务管理模块接收到申请请求的工单时，自动建立一个总线程，该总线程可以叫“工单服务”线程，但不限于这种线程，可根据开发者自主定义。然后“工单服务”线程对工单进行拆单；其中工单包括创建资源请求，资源参数。其中创建资源请求包括以下至少一种：网络创建请求、路由创建请求、防火墙创建请求、虚拟机创建请求、云盘创建请求及负载均衡创建请求。
在本实施例中，在服务管理模块接收到申请请求的工单为第一申请请求的工单，该第一申请请求的工单为内部云服务请求。其中内部云服务请求可以为内部员工想订阅服务目录或购买资源及产品时，在传统运营商运维系统OA系统中提交相关资源产品的申请流程，该申请就是第一申请请求的工单。
在本实施例中，在服务管理模块接收到第一申请请求的工单时，对工单进行拆单后，还包括对工单进行校验。其中是对工单要创建的云资源的虚拟数据中心VDC的租户是否存在，如是，该“工单服务”线程调用组织ORG(Organize)线程创建部门和VDC；然后该“工单服务”线程调用访问控制ACL(Access Control List)线程创建用户，绑定用户和ORG线程创建的部门，绑定用户和ORG线程创建的VDC。或者如果不存在该VDC租户，则可以根据用户申请工单中的配额个数来选择符合申请eni网络个数、私网个数的云环境、然后校验地址池。当校验不满足预设申请要求时，该“工单服务”线程直接做回单处理，并告知用户；当校验满足预设申请要求，则校验成功，该“工单服务”线程调用组织ORG线程创建部门和VDC；然后该“工单服务”线程调用访问控制ACL线程创建用户，绑定用户和ORG线程创建的部门， 绑定用户和ORG线程创建的VDC。
在本实施例中，工单还包括访问令牌(access_token)，在ORG线程创建部门和VDC之前还可以包括：服务管理模块根据访问令牌检查用户的权限。其中可以是服务管理模块的“工单服务”线程调用安全管理IAM(Identity and Access Management)线程来根据访问令牌检查用户的权限。其中用户的权限包括用户可以调用的资源权限和访问的基本权限。其中，在检查用户的具体权限后，获取到用户的权限，并返送给“工单服务”线程。
在本实施例中，在服务管理模块接收到申请请求的工单还可以为第一申请请求和/或第二申请请求的工单，该第二申请请求的工单为外部云服务请求。其中外部云服务可以为金融云、企业云等的外部云服务，其中外部云服务请求可以为企业用户想开通外网云链接功能时，在传统运营商运维系统IBP系统中提交相关资源产品的申请流程，该申请就是第二申请请求的工单。该工单除了资源请求，资源参数还包括端口配置信息，比如ONU上联端口、OLT设备的上下联端口、汇聚交换机的上下联端口信息、LSNID、LAN接入类型、OLT设备名称、OLT端口号、VLAN等信息等。
在本实施例中，在服务管理模块接收到第二申请请求的工单时，对工单进行拆单后，创建部门和虚拟机数据中心VDC；创建用户，将用户与所述部门及VDC绑定连接之前还包括：将第二申请请求拆单信息发送给运营商的网运资源中心。将第二申请请求中的配置信息发送给资源管理模块，资源管理模块根据端口配置信息对外部云服务的接入侧进行端口配置，配置前置交换机qinq转vlan或qinq转vxlan的规则。
其中是资源管理模块中DCI(Data Center Interconnection数据中心互联)线程根据ONU上联端口、OLT设备的上下联端口、汇聚交换机的上下联端口配置信息自动对云服务的接入层进行端口配置；根据LSNID、LAN接入类型、OLT设备名称、OLT端口号、VLAN等信息等自动配置qinq转vlan或qinq转vxlan的规则。资源管理模块还调用SDN控制器的API接口来配置VIN和VLAN的外部网络映射关系。
在步骤S102中，资源管理模块将资源参数通过接口发送给底层资源池。
在本实施例中服务管理模块的“工单服务”线程将工单的创建资源请求、资源参数调用资源管理模块的操作OPERATE线程，当创建资源请求为虚拟机创建请求时，将虚拟机资源请求发送给资源管理模块的虚拟资源管理VRM(Virtual Resource Management)线程，通过VRM线程将创建虚拟机的资源参数入参通过API接口发送给底层资源池，调用资源，部署虚拟机资源功能等。其中创建虚拟机的资源参数包括但不限于虚拟机镜像、虚拟机规格。
当创建资源请求为网络创建请求、路由创建请求、防火墙创建请求、负载均衡创建请求以上至少一种时，操作线程将创建资源请求发送给数据中心互联DCI线程去创建网络、路由、防火墙及负载均衡创建请求。通过DCI线程将资源参数入参通过API接口发送给底层资源池，调用资源，部署资源功能等。其中创建资源参数包括以下至少一种：网络CIDR、VLAN、云防火墙及云负载均衡策略规则，但不限于以上的资源参数。
当创建资源请求为云盘创建请求时，操作线程将资源请求发送给容量VOLUME线程去创建云盘。其中创建云盘的资源参数包括以下至少一种：数据盘大小、系统盘大小、云盘类型。通过VOLUME线程将资源参数入参通过API接口发送给底层资源池，调用资源，部署资源功能。
在步骤S103中，资源管理模块发送第一通知给软件定义网络SDN控制器。
在本实施例中，第一通知为请求下发流表的通知。
在步骤S104中，SDN控制器根据第一通知向网关设备发送流表。
在本实施例中，SDN控制器根据资源管理模块发送的下发流表的通知向网关设备发送流表。其中网关设备包括Bleaf网关设备和/或ILeaf网关设备，实现按照接入层设备用户需求的连接通信，创建的云资源。
在本实施例中，在服务管理模块在接收到第二申请请求时，SDN控制器根据第一通知向网关设备发送流表还包括：资源管理模块还调用SDN控制器的API接口来配置VIN和VLAN的外部网络映射关系，SDN控制器下发所有VLAN/VXLAN的映射关系流表至网关设备。资源管理模块根据映射关系对所述端口添加DCI线程创建的网络VLAN信息，将所述端口添加到服务管理模块的ORG线程创建的VDC下的VNI。配置成功后，“工单服务”线程将配置成功的响应返回给IBP系统，IBP系统下发工单到数据中心运维的客保中心进行外线布放。
本发明实施例提供的云服务管理方法，通过在服务管理模块接收到申请请求的工单时，对工单进行拆单，创建部门和VDC，ACL线程创建用户，将用户与部门及VDC绑定连接，其中工单包括创建资源请求，资源参数，资源管理模块将资源请求参数通过API接口发送给底层资源池，底层资源池根据创建资源请求参数创建资源，资源管理模块发送请求下发流表的通知给SDN控制器，SDN控制器向网关设备发送流表，实现了自动解析用户的申请工单，并完成云资源自动创建的技术效果。
实施例二：
本发明的管理方法实现了对用户的申请工单自动解析，完成云资源自动创建，为了便于理解，下面结合一种应用场景对本发明的云服务管理方法进行说明。
图2为本发明实施例二的云服务管理方法细化流程图，该云服务管理方法包括以下步骤S201-S207。
在步骤S201中，当服务管理模块接收到申请请求的工单时，对工单进行拆单并校验。
在本实施例中，该申请请求的工单为内部员工想申请一个云盘，当服务管理模块接收到申请请求的工单时，自动建立一个总线程，该总线程可以叫“工单服务”线程，但不限于这种线程，可根据开发者自主定义。然后“工单服务”线程对工单进行拆单；其中工单包括创建云盘资源请求和资源参数。其中创建云盘的资源参数包括：数据盘大小、系统盘大小和云盘类型。
在本实施例中，当服务管理模块接收到申请请求的工单时，对工单进行拆单并校验，是对工单要创建的云资源的虚拟数据中心VDC的租户是否存在，如是，则执行S202；或者如果不存在该VDC租户，则可以根据用户申请工单中的配额个数来选择符合申请eni网络个数、私网个数的云环境，并校验地址池。当校验不满足预设申请要求时，该“工单服务”线程直接做回单处理，并告知用户，执行S207。当校验满足预设申请要求，则校验成功，则执行S202。
在步骤S202中，服务管理模块根据访问令牌检查用户的权限。
在本实施例中，申请请求的工单还包括访问令牌(access_token)，是服务管理模块的“工单服务”线程调用安全管理IAM线程来根据访问令牌检查用户的权限。其中用户的权限包括用户可以调用的资源权限和访问的基本权限。其中，在检查用户的具体权限后，获取到用户的权限，并返送给“工单服务”线程。
在步骤S203中，创建部门和虚拟机数据中心VDC；创建用户，将用户与所述部门及所述VDC绑定连接。
在本实施例中，是服务管理模块的“工单服务”线程调用组织ORG线程创建部门和VDC；然后该“工单服务”线程调用访问控制ACL线程创建用户，绑定用户和ORG线程创建的部门，绑定用户和ORG线程创建的VDC。
在步骤S204中，资源管理模块将资源参数通过API接口发送给底层资源池。
在本实施例中，服务管理模块的“工单服务”线程将工单的创建资源请求、资源参数调用资源管理模块的操作OPERATE线程，操作线程将云盘资源请求发送给容量VOLUME线程去创建云盘。通过VOLUME线程将资源参数入参通过API接口发送给底层资源池，调用资源，部署资源功能。
在步骤S205中，资源管理模块发送第一通知给软件定义网络SDN控制器；第一通知为请求下发流表的通知。
在步骤S206中，SDN控制器根据第一通知向网关设备发送流表。
在本实施例中，SDN控制器根据资源管理模块发送的下发路由流表的通知向网关设备发送路由流表。其中网关设备包括Bleaf网关设备和ILeaf网关设备，实现按照接入层设备用户需求的连接通信，创建的云资源。
在步骤S207，该云服务管理方法结束。
本发明实施例提供的云服务管理方法，通过在服务管理模块接收到内部申请创建云盘请求的工单时，对工单进行拆单并校验，服务管理模块根据访问令牌检查用户的权限，然后调用ORG线程创建部门和VDC，ACL线程创建用户，将用户与部门及VDC绑定连接，其中工单包括创建资源请求，资源参数，资源管理模块将资源请求参数通过API接口发送给底层资源池，底层资源池根据创建资源请求参数创建资源，资源管理模块发送请求下发流表的通知给SDN控制器，SDN控制器向网关设备发送流表，实现了自动解析用户的申请工单，并完成云资源自动的创建，并实现对内部云服务的自动开通。
实施例三：
本发明的管理方法实现了对用户的申请工单自动解析，完成云资源自动创建，为了便于理解，下面结合一种应用场景对本发明的云服务管理方法进行说明。
图3为本发明实施例三的云服务管理方法细化流程图，该云服务管理方法包括以下步骤S301-S308。
在步骤S301中，当服务管理模块接收到申请请求的工单时，对工单进行拆单。
在本实施例中，该申请请求的工单为外部企业想申请云服务，可以由外部企业用户或数据中心的运维工作人员将申请请求录入传统运营商运维系统IBP系统中，当服务管理模块接收到申请请求的工单时，自动建立一个总线程，该总线程可以叫“工单服务”线程，但不限于这种线程，可根据开发商自主定义。然后“工单服务”线程对工单进行拆单。拆单后将工单中的ONU、OLT及汇聚交换机申请资源发送到运营商的网络运营资源中心去处理。其中工单包括创建云盘资源请求和资源参数、端口配置信息。其中创建资源请求包括：网络创建请求、路由创建请求、防火墙创建请求、虚拟机创建请求、云盘创建请求及负载均衡创建请求。其中端口配置信息包括：ONU上联端口、OLT设备的上下联端口、汇聚交换机的上下联端口信息、LSNID、LAN接入类型、OLT设备名称、OLT端口号、VLAN等信息等。
在步骤S302中，将工单中的配置信息发送给运营商及资源管理模块，资源管理模块根据配置信息对外部云服务的接入侧进行端口配置。
在本实施例中，将工单中的设备配置信息发送给运营商的网运资源中心，在运营商的网运资源中心对要更改的设备进行记录并审核。
在本实施例中，在运营商的网运资源中心审核通过后，可通过资源管理模块中DCI线程根据配置信息中的ONU上联端口、OLT设备的上下联端口、汇聚交换机的上下联端口配置信息自动对云服务的接入层进行端口配置。
在步骤S303中，资源管理模块根据配置信息配置前置交换机qinq转vlan或qinq转vxlan的规则。
在本实施例中，资源管理模块中DCI线程根据配置信息中的LSNID、LAN接入类型、OLT设备名称、OLT端口号、VLAN等信息等自动配置qinq转vlan或qinq转vxlan的规则。
在步骤S304中，资源管理模块调用SDN控制器的API接口来配置VIN和VLAN的外部网络映射关系。
在本实施例中，资源管理模块中的DCI线程调用SDN控制器的API接口来配置VIN和VLAN的外部网络映射关系。
在步骤S305中，资源管理模块将所述资源参数通过API接口发送给底层资源池；
在本实施例中服务管理模块的“工单服务”线程将工单的创建资源请求、资源参数调用资源管理模块的操作OPERATE线程，当创建资源请求有虚拟机创建请求，将虚拟机资源请求发送给资源管理模块的虚拟资源管理VRM线程，通过VRM线程将创建虚拟机的资源参数入参通过API接口发送给底层资源池，调用资源，部署虚拟机资源功能等。其中创建虚拟机的资源参数包括但不限于虚拟机镜像、虚拟机规格。
创建资源请求有网络创建请求、路由创建请求、防火墙创建请求、负载均衡创建请求，操作线程将创建资源请求发送给数据中心互联DCI线程去创建网络、路由、防火墙及负载均衡创建请求。通过DCI线程将资源参数入参通过API接口发送给底层资源池，调用资源，部署资源功能等。其中创建资源参数包括以下至少一种：网络CIDR、VLAN、云防火墙及云负载均衡策略规则，但不限于以上的资源参数。
创建资源请求有云盘创建请求，操作线程将资源请求发送给容量VOLUME线程去创建云盘。其中创建云盘的资源参数包括以下至少一种：数据盘大小、系统盘大小、云盘类型。通过VOLUME 线程将资源参数入参通过API接口发送给底层资源池，调用资源，部署资源功能。
在步骤S306中，资源管理模块发送第一通知给软件定义网络SDN控制器。
在本实施例中第一通知为请求下发流表的通知。
在步骤S307中，SDN控制器根据第一通知向ILEAF网关设备发送配置VIN和VLAN的外部网络映射关系。
在本实施例中，SDN控制器根据资源管理模块发送的下发VIN和VLAN的外部网络映射关系流表的通知向ILEAF网关设备发送VIN和VLAN的外部网络映射关系流表。
在步骤S308中，SDN控制器根据第一通知向BLEAF网关设备发送配置VIN和VLAN的外部网络映射关系。
在本实施例中，SDN控制器根据资源管理模块发送的下发VIN和VLAN的外部网络映射关系流表的通知向BLEAF网关设备发送VIN和VLAN的外部网络映射关系流表。
本发明提供的云服务管理方法，通过在服务管理模块接收到外部申请请求的工单时，对工单进行拆单后，将工单中的配置信息发送给资源管理模块，资源管理模块根据配置信息对外云服务的接入侧进行端口配置，配置前置交换机qinq转vlan或qinq转vxlan的规则，调用SDN控制器的API接口来配置VIN和VLAN的外部网络映射关系，然后将资源参数通过API接口发送给底层资源池，调用资源，部署资源功能，资源管理模块发送第一通知给SDN控制器，SDN控制器根据第一通知向ILEAF网关设备和BLEAF网关设备发送配置VIN和VLAN的外部网络映射关系的流表。避免人工操作对资源的配置，实现了自动解析用户的申请工单，并完成云资源自动的创建，避免人工操作将信息配置到OLT的前置交换机，实现了自动下发配置到OLT的前置交换机，自动配置前置交换机qinq转vlan(vxlan)的规则，实现对外部云服务的自动开通。
实施例四：
为了解决在接收到申请请求时，云管理平台为用户配置虚拟资源，需要人工参与操作，不便于统一管理的问题。本发明提供一种云服务管理装置，下面结合实施例对本发明提出的云服务管理装置进行说明。
请参见图4，图4为本发明实施例四提供的云服务管理装置的组成示意图，该云服务管理装置包括：云管理平台、虚拟资源池模块、SDN控制器、网关设备；云管理平台包括服务管理模块和资源管理模块；
服务管理模块，用于接收到申请请求的工单时，对工单进行拆单；创建部门和虚拟机数据中心VDC；创建用户，将用户与所述部门及VDC绑定连接；工单包括创建资源请求，资源参数；
资源管理模块，将资源参数通过接口发送给虚拟资源池模块的底层资源池；资源管理模块还用于发送第一通知给SDN控制器；第一通知为请求下发流表的通知；
虚拟资源池模块，用于共享资源，提供与云管理平台的接口；
SDN控制器，用于根据第一通知向网关设备发送流表。
在本实施例中，云管平台的服务管理模块在接收到内部云服务申请请求的工单时，对工单进行拆单并校验。其中在接收到内部云服务申请请求的工单时，会自动建立一个总线程，该总线程可以叫“工单服务”线程，但不限于这种线程，可根据开发者自主定义。然后“工单服务”线程对工单进行拆单；其中工单包括创建资源请求，资源参数。其中创建资源请求包括以下至少一种：网络创建请求、路由创建请求、防火墙创建请求、虚拟机创建请求、云盘创建请求及负载均衡创建请求。
而对工单进行拆单并校验是对工单要创建的云资源的虚拟数据中心VDC的租户是否存在，如是，该“工单服务”线程调用组织ORG线程创建部门和VDC；然后该“工单服务”线程调用访问控制ACL线程创建用户，绑定用户和ORG线程创建的部门，绑定用户和ORG线程创建的VDC。或者如果不存在该VDC租户，则可以根据用户申请工单中的配额个数来选择符合申请eni网络个数、私网个数的云环境，并校验地址池。当校验不满足预设申请要求时，该“工单服务”线程直接做回单处理，并告知用户；当校验满足预设申请要求，则校验成功，该“工单服务”线程调用组织ORG线程创建部门和VDC；然后该“工单服务”线程调用访问控制ACL线程创建用户，绑定用户和ORG线程创建的部门，绑定用户和ORG线程创建的VDC。
在本实施例中，在云管平台的服务管理模块还用于在接收到第一申请请求的工单时，对工单进行拆单并校验后，根据工单中的访问令牌检查用户的权限，其中用户的权限包括用户可以调用的资源权限和访问的基本权限。其中，在检查用户的具体权限后，获取到用户的权限，并返送给“工单服务”线程。本实施例的第一申请请求的工单为内部云服务申请请求。
在本实施例中，在云管平台的服务管理模块接收到的申请请求的工单为第二申请请求工单时，在对工单进行拆单后，创建部门和虚拟机数据中心VDC；创建用户，将用户与所述部门及VDC绑定连接之前，服务管理模块还用于将第二申请请求中的配置信息发送给运营商及云管平台的资源管理模块。其中第二申请请求为外部云服务请求，第二申请请求的工单包括 端口配置信息。
在本实施例中，资源管理模块还用于根据端口配置信息对外部云服务的接入侧进行端口配置，配置前置交换机qinq转vlan或qinq转vxlan的规则。调用SDN控制器的API接口来配置VIN和VLAN的外部网络映射关系。其中对接入侧进行端口配置包括：配置对接的LSN(Local Service Node本地综合服务节点)堆叠BLEAF交换机和端口组以及对接的OLT的前置交换机设备名称和端口组。其中是通过SDN控制器的接口触发LSN中的Spine-leaf边界汇聚交换机，配置BLEAF交换机端口的VLAN/VXLAN的映射关系，并通过VLAN封装与LSN的多业务边缘路由器MSE设备对接，MSE完成LSN内部VLAN与VxLAN的相互映射。其中MSE是直接面向城域网的接入。
在本实施例中，SDN控制器还用于根据第一通知向网关设备发送所述配置VIN和VLAN的外部网络映射关系流表；
资源管理模块，还用于根据所述映射关系对所述端口添加创建的网络VLAN信息，将所述端口添加到所述VDC下的VNI。
在本实施例中，云服务管理装置还设置有虚拟化系统的管理，对SDN模块的管理，用于对整个过程统一管理。
在本实施例中，虚拟资源池模块是将物理服务器经过整合后，形成一个或多个逻辑上的虚拟资源池，共享包括但不限于计算、存储、网络资源，还提供了与云管平台连接的对外接口。
在本实施例中，网关设备可以包括BLEAF网关设备和/或ILEAF网关设备，该网关设备支持OpenFlow协议，主要是三层交换机，工作在网络层，具有路由功能，还将提供北向接口可以与SDN控制器连通。
本发明实施例提供的云服务管理装置，通过服务管理模块，在接收到内部云服务和/或外部云服务申请请求的工单时，对内部云服务的工单进行拆单并校验，检查用户的权限，创建部门和VDC，创建用户，将用户与部门及VDC绑定连通。资源管理模块通过API接口发送给虚拟资源池模块的资源池，资源管理模块还发送第一通知给SDN控制器；第一通知为请求下发流表的通知。虚拟资源模块的资源池提供与云管理平台的接口，可以让云管理平台对资源池的资源统一编排、统一管理、统一监控。SDN控制器，根据第一通知向网关设备发送流表。对外部云服务的工单进行拆单，将工单中的配置信息发送给资源管理模块，资源管理模块根据配置信息对外云服务的接入侧进行端口配置，配置前置交换机qinq转vlan或qinq转vxlan 的规则，调用SDN控制器的API接口来配置VIN和VLAN的外部网络映射关系，然后将资源参数通过API接口发送给底层资源池，调用资源，部署资源功能，资源管理模块发送第一通知给SDN控制器，SDN控制器可根据第一通知向网关设备发送配置VIN和VLAN的外部网络映射关系的流表。避免了云管平台为用户配置虚拟资源时，需要管理员人工操作配置，不便于统一管理。避免了人工下发配置到OLT的前置交换机，实现对自动配置对接的LSN堆叠BLEAF交换机和端口组、OLT前置交换机设备名称和端口组，完成qinq转vlan(vxlan)规则的自动配置，可实现用户的内部云服务的自动开通，外部云服务的自动开通，以此来达到一体化的内外混合云服务，减少维护成本。
实施例五：
本实施例还提供一种云服务管理装置，参见图5，其包括处理器501、存储器502及通信总线503，其中：
通信总线503用于实现处理器501和存储器502之间的连接通信；
处理器501用于执行存储器502中存储的一个或者多个计算机程序，以实现上述实施例一至实施例三任一种的云服务管理方法中的至少一个步骤。
通过本发明实施例的实施，在服务管理模块接收到申请请求的工单时，对工单进行拆单，创建部门和VDC，ACL线程创建用户，将用户与部门及VDC绑定连接，其中工单包括创建资源请求，资源参数，资源管理模块将资源请求参数通过API接口发送给底层资源池，底层资源池根据创建资源请求参数创建资源，资源管理模块发送请求下发流表的通知给SDN控制器，SDN控制器向网关设备发送流表，可实现自动解析用户的申请工单，并完成云资源自动创建的技术效果。
实施例六：
本实施例还提供了一种计算机可读存储介质，该计算机可读存储介质包括在用于存储信息(诸如计算机可读指令、数据结构、计算机程序模块或其他数据)的任何方法或技术中实施的易失性或非易失性、可移除或不可移除的介质。计算机可读存储介质包括但不限于RAM(Random Access Memory，随机存取存储器),ROM(Read-Only Memory，只读存储器),EEPROM(Electrically Erasable Programmable read only memory，带电可擦可编程只读存储器)、闪存或其他存储器技术、CD-ROM(Compact Disc Read-Only Memory，光盘只读存储器)，数字多功能盘(DVD)或其他光盘存储、磁盒、磁带、磁盘存储或其他磁存储装置、或者可以用于存储期望的信息并且可以被计算机访问的任何其他的介质。
本实施例中的计算机可读存储介质可用于存储一个或者多个计算机程序，其存储的一个或者多个计算机程序可被处理器执行，以实现上述实施例一至实施例三任一种的云服务管理方法的至少一个步骤。
通过本发明实施例的实施，在服务管理模块接收到申请请求的工单时，对工单进行拆单，创建部门和VDC，ACL线程创建用户，将用户与部门及VDC绑定连接，其中工单包括创建资源请求，资源参数，资源管理模块将资源请求参数通过API接口发送给底层资源池，底层资源池根据创建资源请求参数创建资源，资源管理模块发送请求下发流表的通知给SDN控制器，SDN控制器向网关设备发送流表，可实现自动解析用户的申请工单，并完成云资源自动创建的技术效果。
本发明实施例的有益效果是：
根据本发明实施例提供的一种云服务管理方法、云服务管理装置及可读存储介质，在服务管理模块接收到申请请求的工单时，对工单进行拆单，创建部门和VDC，ACL线程创建用户，将用户与部门及VDC绑定连接，其中工单包括创建资源请求，资源参数，资源管理模块将资源请求参数通过接口发送给底层资源池，底层资源池根据创建资源请求参数创建资源，资源管理模块发送请求下发流表的通知给SDN控制器，SDN控制器向网关设备发送流表，避免了云管平台为用户配置虚拟资源，开通相关云服务时，需要管理员人工操作配置，不便于统一管理，在某些实施过程中可实现包括但不限于的自动解析用户的申请工单，并完成云资源自动创建的技术效果。
可见，本领域的技术人员应该明白，上文中所公开方法中的全部或某些步骤、系统、装置中的功能模块/单元可以被实施为软件(可以用计算装置可执行的计算机程序代码来实现)、固件、硬件及其适当的组合。在硬件实施方式中，在以上描述中提及的功能模块/单元之间的划分不一定对应于物理组件的划分；例如，一个物理组件可以具有多个功能，或者一个功能或步骤可以由若干物理组件合作执行。某些物理组件或所有物理组件可以被实施为由处理器，如中央处理器、数字信号处理器或微处理器执行的软件，或者被实施为硬件，或者被实施为集成电路，如专用集成电路。
此外，本领域普通技术人员公知的是，通信介质通常包含计算机可读指令、数据结构、计算机程序模块或者诸如载波或其他传输机制之类的调制数据信号中的其他数据，并且可包括任何信息递送介质。所以，本发明不限制于任何特定的硬件和软件结合。
以上内容是结合具体的实施方式对本发明实施例所作的进一步详细说明，不能认定本发 明的具体实施只局限于这些说明。对于本发明所属技术领域的普通技术人员来说，在不脱离本发明构思的前提下，还可以做出若干简单推演或替换，都应当视为属于本发明的保护范围。

Claims (14)

  1. 一种云服务管理方法，包括：
    当服务管理模块接收到申请请求的工单时，对所述工单进行拆单；创建部门和虚拟机数据中心VDC；创建用户，将所述用户与所述部门及所述VDC绑定连接；所述工单包括创建资源请求、资源参数；
    资源管理模块将所述资源参数通过接口发送给底层资源池；
    所述资源管理模块发送第一通知给软件定义网络SDN控制器；所述第一通知为请求下发流表的通知；以及
    所述SDN控制器根据所述第一通知向网关设备发送流表。
  2. 如权利要求1所述的云服务管理方法，其中，所述的当服务管理模块接收到申请请求的工单时，对所述工单进行拆单的步骤包括：当服务管理模块接收到第一申请请求的工单时，对所述工单进行拆单并校验，所述第一申请请求为内部云服务请求。
  3. 如权利要求2所述的云服务管理方法，其中，所述的对所述工单进行拆单并校验的步骤包括：对所述工单拆单后，校验所述工单要创建的云资源的虚拟数据中心VDC的租户是否存在，如是，创建部门和虚拟机数据中心VDC。
  4. 如权利要求3所述的云服务管理方法，其中，所述工单中还包括访问令牌，在创建部门和虚拟机数据中心VDC之前还包括：
    所述服务管理模块根据所述访问令牌检查用户的权限。
  5. 如权利要求1-4任一项所述的云服务管理方法，其中，所述的当服务管理模块接收到申请请求的工单时，对所述工单进行拆单的步骤还包括：
    当服务管理模块接收到第二申请请求的工单时，对所述工单进行拆单，所述第二申请请求为外部云服务请求；所述第二申请请求的工单还包括端口配置信息；
    将所述第二申请请求中的配置信息发送给运营商及所述资源管理模块；以及
    所述资源管理模块根据所述配置信息对所述外部云服务的接入侧进行端口配置。
  6. 如权利要求5所述的云服务管理方法，其中，所述资源管理模块还根据所述配置信息配置前置交换机qinq转vlan或qinq转vxlan的规则；所述资源管理模块调用所述SDN控制器的API接口配置VIN和VLAN的外部网络映射关系。
  7. 如权利要求6所述的云服务管理方法，其中，所述的SDN控制器根据所述第一通知向网关设备发送流表的步骤还包括：
    所述SDN控制器根据第一通知向网关设备发送所述配置VIN和VLAN的外部网络映射关系流表；以及
    所述资源管理模块根据所述映射关系对所述端口添加所述DCI线程创建的网络VLAN信息，将所述端口添加到所述VDC下的VNI。
  8. 一种云服务管理装置，包括：云管理平台、虚拟资源池模块、SDN控制器、网关设备；所述云管理平台包括服务管理模块和资源管理模块；其中：
    服务管理模块，用于接收到申请请求的工单时，对所述工单进行拆单；创建部门和虚拟机数据中心VDC；创建用户，将所述用户与所述部门及所述VDC绑定连接；所述工单包括创建资源请求，资源参数；
    资源管理模块，将所述资源参数通过接口发送给所述虚拟资源池模块的底层资源池；所述资源管理模块还用于发送第一通知给SDN控制器；所述第一通知为请求下发流表的通知；
    虚拟资源池模块，用于共享资源，提供与所述云管理平台的接口；
    SDN控制器，用于根据所述第一通知向所述网关设备发送流表。
  9. 如权利要求8所述的云服务管理装置，其中，所述服务管理模块，用于接收到申请请求的工单时，对所述工单进行拆单，包括：所述服务管理模块，用于接收到第一申请请求的工单时，对所述工单进行拆单并校验，所述第一申请请求为内部云服务请求。
  10. 如权利要求9所述的云服务管理装置，其中，所述服务管理模块创建部门和虚拟机数据中心VDC之前还包括：检查用户的权限。
  11. 如权利要求8-10任一项所述的云服务管理装置，其中，所述服务管理模块，用于接收到申请请求的工单时，对所述工单进行拆单，还包括：所述服务管理模块，用于接收到第二申请请求的工单，对所述工单进行拆单，所述第二申请请求为外部云服务请求，将所述拆单信息发送给运营商；所述第二申请请求的工单包括端口配置信息，将所述配置信息发送给资源管理模块；
    所述资源管理模块，还用于根据所述配置信息对所述外部云服务的接入侧进行端口配置，配置前置交换机qinq转vlan或qinq转vxlan的规则；调用SDN控制器的API接口配置VIN和VLAN的外部网络映射关系。
  12. 如权利要求11所述的云服务管理装置，其中，所述SDN控制器，用于根据所述第一通知向网关设备发送流表，还包括：所述SDN控制器根据第一通知向网关设备发送所述配置VIN和VLAN的外部网络映射关系流表；
    资源管理模块，还用于根据所述映射关系对所述端口添加创建的网络VLAN信息，将所述端口添加到所述VDC下的VNI。
  13. 一种云服务管理装置，包括处理器、存储器及通信总线；其中：
    所述通信总线用于实现处理器和存储器之间的连接通信；
    所述处理器用于执行存储器中存储的一个或者多个计算机程序，以实现如权利要求1至7中任一项所述的云服务管理方法的步骤。
  14. 一种计算机可读存储介质，存储有一个或者多个计算机程序，所述一个或者多个计算机程序可被一个或者多个处理器执行，以实现如权利要求1至7中任一项所述的云服务管理方法的步骤。
PCT/CN2020/122796 2019-10-22 2020-10-22 一种云服务管理方法、云服务管理装置及可读存储介质 WO2021078192A1 (zh)

Priority Applications (2)

Application Number Priority Date Filing Date Title
US17/626,853 US11799946B2 (en) 2019-10-22 2020-10-22 Method and apparatus for cloud service management, and readable storage medium
EP20879980.9A EP3955544A4 (en) 2019-10-22 2020-10-22 CLOUD SERVICE MANAGEMENT METHOD, CLOUD SERVICE MANAGEMENT APPARATUS AND READABLE STORAGE MEDIA

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
CN201911008069.8 2019-10-22
CN201911008069.8A CN112702372B (zh) 2019-10-22 2019-10-22 一种云服务管理方法、云服务管理装置及可读存储介质

Publications (1)

Publication Number Publication Date
WO2021078192A1 true WO2021078192A1 (zh) 2021-04-29

Family

ID=75504977

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2020/122796 WO2021078192A1 (zh) 2019-10-22 2020-10-22 一种云服务管理方法、云服务管理装置及可读存储介质

Country Status (4)

Country Link
US (1) US11799946B2 (zh)
EP (1) EP3955544A4 (zh)
CN (1) CN112702372B (zh)
WO (1) WO2021078192A1 (zh)

Cited By (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN113259272A (zh) * 2021-05-13 2021-08-13 中国建设银行股份有限公司 一种基于虚拟网关的流量管理方法、装置及设备
CN117375803A (zh) * 2023-12-05 2024-01-09 飞腾信息技术有限公司 密钥派生接口注册方法、调用方法、相关设备及存储介质

Families Citing this family (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN113592436B (zh) * 2021-07-09 2024-02-06 上海云轴信息科技有限公司 一种基于政务云平台的云服务管理方法与设备
CN114124675B (zh) * 2021-11-03 2023-08-25 中盈优创资讯科技有限公司 一种基于城域网的家宽业务故障诊断方法及装置
CN115277422B (zh) * 2022-07-21 2024-04-16 浪潮思科网络科技有限公司 一种sdn组网生成方法、装置、设备及介质
CN116566844B (zh) * 2023-07-06 2023-09-05 湖南马栏山视频先进技术研究院有限公司 一种基于多云融合的数据管控方法与多云融合管理平台
CN117097573B (zh) * 2023-10-19 2024-01-30 深圳竹云科技股份有限公司 一种零信任安全体系下的防火墙动态访问控制方法及装置

Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20150139238A1 (en) * 2013-11-18 2015-05-21 Telefonaktiebolaget L M Ericsson (Publ) Multi-tenant isolation in a cloud environment using software defined networking
CN107104871A (zh) * 2016-02-22 2017-08-29 中兴通讯股份有限公司 子网互通方法和装置
CN107133083A (zh) * 2017-04-13 2017-09-05 大连理工大学 一种基于虚拟化技术的虚拟数据中心资源提供方法

Family Cites Families (10)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN103164286A (zh) * 2013-03-12 2013-06-19 无锡云动科技发展有限公司 云计算平台部署的实现方法、资源管理器、云计算系统
CN103703724B (zh) * 2013-08-15 2015-06-10 华为技术有限公司 一种资源发放方法
US10291726B2 (en) * 2015-05-12 2019-05-14 Equinix, Inc. Network field unit for a cloud-based services exchange
US10419530B2 (en) 2015-11-02 2019-09-17 Telefonaktiebolaget Lm Ericsson (Publ) System and methods for intelligent service function placement and autoscale based on machine learning
US20170289002A1 (en) * 2016-03-31 2017-10-05 Mrittika Ganguli Technologies for deploying dynamic underlay networks in cloud computing infrastructures
CN106899518B (zh) * 2017-02-27 2022-08-19 腾讯科技（深圳）有限公司 一种基于互联网数据中心的资源处理方法以及装置
CN109150737A (zh) * 2017-06-28 2019-01-04 上海宽带技术及应用工程研究中心 基于sdn的混合云组网方法及混合云网络
CN109218360B (zh) * 2017-07-03 2021-03-23 中国电信股份有限公司 Co机房向ICP服务器动态开通云资源块的方法和系统
CN108199889A (zh) * 2018-01-11 2018-06-22 上海有云信息技术有限公司 服务链的创建方法、装置、服务器及存储介质
US20220327359A1 (en) * 2022-06-29 2022-10-13 Nilesh A. Ahuja Compression for split neural network computing to accommodate varying bitrate

Patent Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20150139238A1 (en) * 2013-11-18 2015-05-21 Telefonaktiebolaget L M Ericsson (Publ) Multi-tenant isolation in a cloud environment using software defined networking
CN107104871A (zh) * 2016-02-22 2017-08-29 中兴通讯股份有限公司 子网互通方法和装置
CN107133083A (zh) * 2017-04-13 2017-09-05 大连理工大学 一种基于虚拟化技术的虚拟数据中心资源提供方法

Non-Patent Citations (2)

* Cited by examiner, † Cited by third party
Title
SPADARO SALVATORE; PAGES ALBERT; AGRAZ FERNANDO; MONTERO RAFAEL; PERELLO JORDI: "Orchestrated SDN-based VDC provisioning over multi-technology optical data centre networks", 2017 19TH INTERNATIONAL CONFERENCE ON TRANSPARENT OPTICAL NETWORKS (ICTON), IEEE, 2 July 2017 (2017-07-02), pages 1 - 4, XP033148005, DOI: 10.1109/ICTON.2017.8025181 *
ZUO, CHENG: "Study of Multi-tenant Data Center Network Based on SDN", INFORMATION & TECHNOLOGY, CHINA MASTER'S THESES FULL-TEXT DATABASE, no. 2, 15 February 2017 (2017-02-15), pages 1 - 105, XP055805091 *

Cited By (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN113259272A (zh) * 2021-05-13 2021-08-13 中国建设银行股份有限公司 一种基于虚拟网关的流量管理方法、装置及设备
CN113259272B (zh) * 2021-05-13 2022-05-27 中国建设银行股份有限公司 一种基于虚拟网关的流量管理方法、装置及设备
CN117375803A (zh) * 2023-12-05 2024-01-09 飞腾信息技术有限公司 密钥派生接口注册方法、调用方法、相关设备及存储介质
CN117375803B (zh) * 2023-12-05 2024-02-06 飞腾信息技术有限公司 密钥派生接口注册方法、调用方法、相关设备及存储介质

Also Published As

Publication number Publication date
CN112702372B (zh) 2024-04-05
EP3955544A1 (en) 2022-02-16
US11799946B2 (en) 2023-10-24
US20220232065A1 (en) 2022-07-21
CN112702372A (zh) 2021-04-23
EP3955544A4 (en) 2022-07-20

Similar Documents

Publication Publication Date Title
WO2021078192A1 (zh) 一种云服务管理方法、云服务管理装置及可读存储介质
US11290336B1 (en) Controlling permissions for remote management of computing resources
AU2017204316B2 (en) Providing devices as a service
US11394714B2 (en) Controlling user access to command execution
US10411947B2 (en) Hot swapping and hot scaling containers
US11336735B2 (en) Method and apparatus for managing service access authorization using smart contracts
CN105379185B (zh) 用于创建和管理网络群组的方法和系统
US20140068703A1 (en) System and method providing policy based data center network automation
US11503028B2 (en) Secure remote troubleshooting of private cloud
US20170346831A1 (en) Vnf package operation method and apparatus
US9417997B1 (en) Automated policy based scheduling and placement of storage resources
US10785056B1 (en) Sharing a subnet of a logically isolated network between client accounts of a provider network
US10171322B2 (en) Dynamic and secure cloud to on-premise interaction and connection management
WO2017211161A1 (zh) 基于软件定义网络的资源管理方法及装置
CN108270858A (zh) 一种基于api网关的私有云架构及其数据处理方法
US20130086140A1 (en) Cloud management system and method
EP4160407A1 (en) Protecting instances of resources of a container orchestration platform from unintentional deletion
US10623370B1 (en) Secure data flow for virtual workspaces
CN113132295A (zh) 集群内网访问外网的方法及装置、存储介质、电子设备
US11811558B2 (en) Cross-subscription multi-VNet homing
Arora NFV Orchestration using OpenStack
Sunita et al. Tools for Cloud for Resource Management: NOVA and SNMP
Khan Transforming IT Service Delivery by Leveraging Private Clouds

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 20879980

Country of ref document: EP

Kind code of ref document: A1

ENP Entry into the national phase

Ref document number: 2020879980

Country of ref document: EP

Effective date: 20211108

NENP Non-entry into the national phase

Ref country code: DE