Audit method and device

Abstract

The present application relates to the field of network communication technology, and in particular to an auditing method and apparatus. The method comprises: upon detecting an audit of a target network device, determining whether the number of network devices currently being audited is less than a first threshold; if it is determined that the number of network devices currently being audited is less than the first threshold, obtaining the average CPU usage and the average memory usage of the controller within a preset time period before the current time; determining whether the obtained average CPU usage of the controller is less than a second threshold, and whether the average memory usage is less than a third threshold; if it is determined that the obtained average CPU usage of the controller is less than the second threshold, and the average memory usage is less than the third threshold, then auditing the target network device.

Description

Technical Field

[0001] The present application relates to the field of network communication technology, and in particular to an auditing method and device. Background Art

[0002] The large-scale development of SDN data centers necessitates the deployment of multiple fabrics, requiring the management of thousands of hardware networks within these fabrics. SDN controllers and hardware network devices require a persistent TCP connection to deliver configurations to these devices using the NETCONF protocol. SDN controllers not only need to deliver configurations to hardware network devices but also monitor their network performance. As the number of devices increases, the resource consumption of SDN controllers becomes significant.

[0003] After a controller manages hardware network devices, it can perform device audits. Audits compare controller memory data with the existing network device configurations. Using the controller memory data as the basis, audits can identify discrepancies where the controller has more or less configuration than the device, or where the controller and device are inconsistent. The audit process requires obtaining data from all modules on the controller and all corresponding data on the device through NETCONF, comparing and generating discrepancies. If the amount of discrepancies between the controller and the device is large, audits consume significant controller memory. When a controller manages a large number of devices, audits also consume significant controller memory and CPU resources.

[0004] The smoothing process uses audited discrepancies to synchronize device configurations with the controller. When adding a network device or reconnecting the controller to a network device, an automatic audit is triggered to promptly verify the correctness of the network device configuration. Because the controller configuration may have changed while the device was disconnected, it cannot be distributed to the network device due to the network disconnection. Therefore, when the controller and device are reconnected, it is necessary for the controller to automatically audit the network device to ensure that no discrepancies were found during the disconnection.

[0005] Auditing consumes significant controller resources. A switch is currently available to control whether an automatic audit is performed when the controller and network device are reconnected. When the switch is set to on, an automatic audit is performed upon connection between the controller and network device. This can lead to excessive controller resource consumption and controller anomalies. When the switch is set to off, an automatic audit is not performed upon connection between the controller and network device. This can cause configuration anomalies between the controller and network device, resulting in service interruptions. Summary of the Invention

[0006] This application provides an audit method and device.

[0007] In a first aspect, the present application provides an audit method, applied to a controller, the method comprising:

[0008] When an audit of a target network device is detected, determining whether the number of network devices currently being audited is less than a first threshold;

[0009] If it is determined that the number of network devices currently being audited is less than the first threshold, obtaining the average CPU usage and the average memory usage of the controller within a preset time period before the current time;

[0010] Determine whether the obtained average CPU usage of the controller is less than a second threshold and whether the average memory usage is less than a third threshold;

[0011] If it is determined that the obtained average CPU usage of the controller is less than the second threshold, and the average memory usage is less than the third threshold, the target network device is audited.

[0012] Optionally, the method further includes:

[0013] If it is determined that the number of network devices currently being audited is not less than the first threshold, the target network device is not audited, and an operation of determining whether the number of network devices currently being audited is less than the first threshold is performed.

[0014] Optionally, the method further includes:

[0015] If it is determined that the obtained average CPU usage of the controller is not less than the second threshold, and / or the average memory usage is not less than the third threshold, then the target network device is not audited;

[0016] After a specified time interval, an operation of obtaining an average CPU usage and an average memory usage of the controller within a preset time period before the current time is performed.

[0017] Optionally, the step of auditing the target network device includes:

[0018] Determining functional modules of the target network device to be audited, and classifying the functional modules into at least two categories of functional modules based on preset rules, wherein different audit priorities are preset for different types of functional modules;

[0019] Based on the audit priorities of the at least two types of functional modules, each type of functional module is audited separately.

[0020] Optionally, the step of classifying the functional modules into at least two categories of functional modules based on preset rules includes:

[0021] Based on the functional type of each functional module, the functional modules are divided into basic functional modules and application functional modules;

[0022] The audit priority of the basic function module is higher than the priority of the application function module; based on the audit priorities of the at least two types of function modules, the steps of auditing each type of function module separately include:

[0023] The basic function modules are audited, and after the audit is completed, the application function modules are audited.

[0024] In a second aspect, the present application provides an auditing device, applied to a controller, the device comprising:

[0025] a judgment unit, configured to judge whether the number of network devices currently under audit is less than a first threshold value if an audit of a target network device is detected;

[0026] an acquisition unit, configured to acquire an average CPU usage and an average memory usage of the controller within a preset time period before a current time if the determination unit determines that the number of network devices currently being audited is less than a first threshold;

[0027] The judgment unit is further configured to judge whether the obtained average CPU usage of the controller is less than a second threshold, and whether the average memory usage is less than a third threshold;

[0028] The audit unit is configured to audit the target network device if the judgment unit determines that the obtained average CPU usage of the controller is less than a second threshold and the average memory usage is less than a third threshold.

[0029] Optionally, if the judgment unit determines that the number of network devices currently being audited is not less than the first threshold, the audit unit does not audit the target network device, and the judgment unit performs an operation to determine whether the number of network devices currently being audited is less than the first threshold.

[0030] Optionally, if the judgment unit determines that the obtained average CPU usage of the controller is not less than a second threshold, and / or the average memory usage is not less than a third threshold, the audit unit does not audit the target network device;

[0031] After a specified time interval, the acquisition unit executes an operation of acquiring an average CPU usage and an average memory usage of the controller within a preset time period before a current time.

[0032] Optionally, when auditing the target network device, the audit unit is specifically configured to:

[0033] Determining functional modules of the target network device to be audited, and classifying the functional modules into at least two categories of functional modules based on preset rules, wherein different audit priorities are preset for different types of functional modules;

[0034] Based on the audit priorities of the at least two types of functional modules, each type of functional module is audited separately.

[0035] Optionally, when the functional modules are divided into at least two categories of functional modules based on preset rules, the audit unit is specifically configured to:

[0036] Based on the functional type of each functional module, the functional modules are divided into basic functional modules and application functional modules;

[0037] The audit priority of the basic function module is higher than the priority of the application function module; based on the audit priorities of the at least two types of function modules, the steps of auditing each type of function module separately include:

[0038] The basic function modules are audited, and after the audit is completed, the application function modules are audited.

[0039] In a third aspect, an embodiment of the present application provides an auditing device, the auditing device comprising:

[0040] a memory for storing program instructions;

[0041] The processor is configured to call the program instructions stored in the memory and execute the steps of the method as described in any one of the first aspects above according to the obtained program instructions.

[0042] In a fourth aspect, an embodiment of the present application further provides a computer-readable storage medium, wherein the computer-readable storage medium stores computer-executable instructions, and the computer-executable instructions are used to enable the computer to execute the steps of the method described in any one of the above-mentioned first aspects.

[0043] In summary, the audit method provided in the embodiment of the present application is applied to a controller. When the controller detects an audit of a target network device, it determines whether the number of network devices currently being audited is less than a first threshold value; if it is determined that the number of network devices currently being audited is less than the first threshold value, the average CPU usage and the average memory usage of the controller within a preset time period before the current time are obtained; it is determined whether the obtained average CPU usage of the controller is less than a second threshold value, and whether the average memory usage is less than a third threshold value; if it is determined that the obtained average CPU usage of the controller is less than the second threshold value, and the average memory usage is less than the third threshold value, the target network device is audited.

[0044] The audit method provided by the embodiment of the present application is used, and a maximum number of devices to be audited simultaneously is preset. When a new network device needs to be audited, it is determined whether the current number of audited devices meets the preset requirements. In this way, a large number of audited devices and a large audit volume are avoided, which leads to a high controller load. Furthermore, before determining whether to audit the network device, statistics are also made on whether the average memory and CPU usage of the controller exceeds the preset threshold within a preset time period from the current time. The network device is audited only when the current number of audited devices meets the preset requirements and the average memory and CPU usage of the controller is less than the preset threshold. The resource utilization rate during the audit and smoothing process is reduced. Auditing and smoothing are performed when the controller resource utilization rate is low, avoiding abnormal situations such as controller crashes when auditing and smoothing are performed when the resource utilization rate is high. The occurrence of serious or even fatal faults such as abnormal restarts of the controller is greatly reduced. The stable operation of the controller is guaranteed, and the stability of the controller is enhanced. BRIEF DESCRIPTION OF THE DRAWINGS

[0045] In order to more clearly illustrate the embodiments of the present application or the technical solutions in the prior art, the following briefly introduces the drawings required for use in the embodiments of the present application or the description of the prior art. Obviously, the drawings described below are only some embodiments recorded in this application. For ordinary technicians in this field, other drawings can also be obtained based on these drawings of the embodiments of the present application.

[0046] Figure 1 A detailed flowchart of an audit method provided in an embodiment of the present application;

[0047] Figure 2 A schematic diagram of the process of an audit method provided in an embodiment of the present application;

[0048] Figure 3 A schematic diagram of the structure of an audit device provided in an embodiment of the present application;

[0049] Figure 4 A schematic diagram of the structure of another auditing device provided in an embodiment of the present application. DETAILED DESCRIPTION

[0050] The terms used in the embodiments of this application are only for the purpose of describing specific embodiments and are not intended to limit this application. The singular forms "a," "the," and "the" used in this application and claims are also intended to include plural forms unless the context clearly indicates otherwise. It should also be understood that the term "and / or" used herein refers to any or all possible combinations of one or more associated listed items.

[0051] It should be understood that although the terms first, second, third, etc. may be used to describe various information in the embodiments of the present application, such information should not be limited to these terms. These terms are only used to distinguish information of the same type from each other. For example, without departing from the scope of the present application, the first information may also be referred to as the second information, and similarly, the second information may also be referred to as the first information. Depending on the context, the word "if" used may also be interpreted as "at the time of" or "when" or "in response to determining".

[0052] For example, see Figure 1 FIG. 1 is a detailed flow chart of an audit method provided in an embodiment of the present application. The method is applied to a controller and includes the following steps:

[0053] Step 100: When an audit of a target network device is detected, it is determined whether the number of network devices currently being audited is less than a first threshold.

[0054] In an embodiment of the present application, a maximum number of devices to be audited simultaneously (e.g., a first threshold) is pre-set on the controller, that is, the controller can audit a maximum of the first threshold number of network devices at the same time. Then, when the controller detects that an audit of a target network device is required, it first determines whether the number of network devices currently being audited by the controller is less than the first threshold. This is one of the prerequisites for determining whether to immediately trigger an audit of the target network device.

[0055] Step 110: If it is determined that the number of network devices currently being audited is less than the first threshold, the average CPU usage and the average memory usage of the controller within a preset time period before the current time are obtained.

[0056] In an embodiment of the present application, when the controller determines that the number of network devices currently being audited is less than a first threshold, it further obtains its own average CPU and memory usage within a preset time period before the current time.

[0057] Specifically, the controller defines a monitoring module. It obtains the controller CPU usage and memory usage in the operating system every minute. It defines a time period T1 and calculates the average memory usage and CPU usage for the period T1 before the current time point.

[0058] For example, if you set the T1 time to 5 minutes and the current time is 12:00, the T1 average memory and CPU usage at 12:00 is the average memory and CPU usage obtained during the time period of 11:56-12:00.

[0059] It should be noted that if it is determined that the number of network devices currently being audited is not less than the first threshold, the target network device is not audited, and the operation of determining whether the number of network devices currently being audited is less than the first threshold is performed.

[0060] That is to say, if it is determined that the number of network devices currently being audited is not less than the first threshold, the subsequent steps are not executed. At this time, the operation of determining whether the number of network devices currently being audited is less than the first threshold can continue based on the preset period.

[0061] Step 120: Determine whether the obtained average CPU usage of the controller is less than a second threshold, and whether the average memory usage is less than a third threshold.

[0062] In an embodiment of the present application, a second threshold is set for the average CPU usage, and a third threshold is set for the average memory usage. That is, within a certain time period, when the average CPU usage is greater than or equal to the second threshold, and / or the average memory usage is greater than or equal to the third threshold, it indicates that the current resource load of the controller is large. At this time, no new audit operations for network devices are added.

[0063] Step 130: If it is determined that the obtained average CPU usage of the controller is less than the second threshold, and the average memory usage is less than the third threshold, then audit the target network device.

[0064] In the embodiment of the present application, if the controller determines that the obtained average CPU usage of the controller is less than the second threshold and the average memory usage is less than the third threshold, it indicates that the current resource load of the controller is low and the target network device can be audited. Then, the controller performs an audit operation on the target network device.

[0065] Furthermore, in an embodiment of the present application, if it is determined that the obtained average CPU usage of the controller is not less than a second threshold, and / or the average memory usage is not less than a third threshold, the target network device is not audited; and after a specified time interval, the operation of obtaining the average CPU usage and the average memory usage of the controller within a preset time period before the current time is executed.

[0066] In an embodiment of the present application, when auditing the target network device, a preferred implementation method is: determining the functional modules of the target network device to be audited, and dividing the functional modules into at least two categories of functional modules based on preset rules, wherein different audit priorities are preset for different types of functional modules.

[0067] Specifically, a network device may include multiple functional modules. When performing a configuration audit, it can be understood as auditing the configurations of multiple functional modules. In the embodiment of the present application, in some cases, the amount of audit data for a network device may be very large. If the network device is audited at the same time, it may cause excessive use of controller resources, thereby affecting the performance of the controller.

[0068] Based on the audit priorities of the at least two types of functional modules, each type of functional module is audited separately.

[0069] In an embodiment of the present application, the functional modules to be audited in the target network community are divided into at least two categories of functional modules, and then each category of functional modules is audited in sequence based on the audit priority of each category of functional modules in a serial manner to reduce the concurrent audit volume of the controller.

[0070] In the embodiment of the present application, when the functional modules are divided into at least two categories of functional modules based on preset rules, a preferred implementation method is: based on the functional type of each functional module, the functional modules are divided into basic functional modules and application functional modules;

[0071] The audit priority of the basic function module is higher than the priority of the application function module; then, based on the audit priorities of the at least two types of function modules, when auditing each type of function module separately, a better implementation method is: audit the basic function module, and after determining that the audit is completed, audit the application function module.

[0072] The following describes in detail the audit process provided by the embodiment of this application in conjunction with specific application scenarios. Figure 2 The following is a process diagram of an audit method provided in an embodiment of the present application:

[0073] Parameter definition:

[0074] Num_Dev: Set the maximum number of devices to be audited simultaneously

[0075] T1, Mem_T1, CPU_T1: Average memory usage Mem_T1 and average CPU usage CPU_T1 of the controller in the time period T1 before the current time point.

[0076] Ave_Mem, Ave_CPU: Manually set the average memory usage threshold Ave_Mem and the average CPU usage threshold Ave_CPU.

[0077] T2: Waiting time T2 after the audit condition is not met.

[0078] After the controller and the network device are reconnected, the controller determines whether the number of network devices currently being audited exceeds the set maximum number of devices to be audited simultaneously (Num_Dev). If so, it waits for a device being audited to complete the audit; if not, it obtains the average memory usage Mem_T1 and the average CPU usage CPU_T1 within the time T1 before the current time, and then determines whether the average memory usage Mem_T1 within the time T1 before the current time is less than Ave_Mem, and whether the average CPU usage within the time T1 before the current time is less than the average CPU usage CPU_T1. If so, the network device is audited; otherwise, it waits for the time interval T2, and then executes the operation of obtaining the average memory usage Mem_T1 and the average CPU usage CPU_T1 within the time T1 before the current time.

[0079] For example, see Figure 3 FIG. 1 is a schematic diagram of the structure of an audit device provided in an embodiment of the present application, which is applied to a controller and includes:

[0080] The judging unit 30 is configured to judge whether the number of network devices currently under audit is less than a first threshold value if an audit of the target network device is detected;

[0081] The acquiring unit 31 is configured to acquire an average CPU usage and an average memory usage of the controller within a preset time period before the current time if the determining unit 30 determines that the number of network devices currently being audited is less than the first threshold value;

[0082] The judging unit 30 is further configured to judge whether the obtained average CPU usage of the controller is less than a second threshold, and whether the average memory usage is less than a third threshold;

[0083] The audit unit 32 is configured to audit the target network device if the judgment unit 30 determines that the obtained average CPU usage of the controller is less than the second threshold and the average memory usage is less than the third threshold.

[0084] Optionally, if the judgment unit 30 determines that the number of network devices currently being audited is not less than the first threshold, the audit unit 32 does not audit the target network device, and the judgment unit 30 performs an operation to determine whether the number of network devices currently being audited is less than the first threshold.

[0085] Optionally, if the judgment unit 30 determines that the obtained average CPU usage of the controller is not less than a second threshold, and / or the average memory usage is not less than a third threshold, the audit unit 32 does not audit the target network device;

[0086] After a specified time interval, the acquiring unit 31 acquires the average CPU usage and the average memory usage of the controller within a preset time period before the current time.

[0087] Optionally, when auditing the target network device, the audit unit 32 is specifically configured to:

[0088] Determining functional modules of the target network device to be audited, and classifying the functional modules into at least two categories of functional modules based on preset rules, wherein different audit priorities are preset for different types of functional modules;

[0089] Based on the audit priorities of the at least two types of functional modules, each type of functional module is audited separately.

[0090] Optionally, when the functional modules are divided into at least two categories of functional modules based on a preset rule, the audit unit 32 is specifically configured to:

[0091] Based on the functional type of each functional module, the functional modules are divided into basic functional modules and application functional modules;

[0092] The audit priority of the basic function module is higher than the priority of the application function module; based on the audit priorities of the at least two types of function modules, the steps of auditing each type of function module separately include:

[0093] The basic function modules are audited, and after the audit is completed, the application function modules are audited.

[0094] The above units may be one or more integrated circuits configured to implement the above methods, such as one or more application specific integrated circuits (ASICs), one or more digital singnal processors (DSPs), or one or more field programmable gate arrays (FPGAs). For another example, when a unit is implemented by scheduling program code through a processing element, the processing element may be a general-purpose processor, such as a central processing unit (CPU) or other processor that can call program code. For another example, these units may be integrated together and implemented in the form of a system-on-a-chip (SOC).

[0095] Furthermore, the audit device provided in the embodiment of the present application, from the hardware level, the hardware architecture diagram of the audit device can be found in Figure 4 As shown, the auditing device may include: a memory 40 and a processor 41,

[0096] The memory 40 is used to store program instructions. The processor 41 calls the program instructions stored in the memory 40 and executes the above method embodiment according to the obtained program instructions. The specific implementation method and technical effect are similar and will not be repeated here.

[0097] Optionally, the present application also provides a controller comprising at least one processing element (or chip) for executing the above method embodiment.

[0098] Optionally, the present application also provides a program product, such as a computer-readable storage medium, which stores computer-executable instructions, and the computer-executable instructions are used to enable the computer to execute the above method embodiments.

[0099] Here, the machine-readable storage medium can be any electronic, magnetic, optical or other physical storage device that can contain or store information, such as executable instructions, data, etc. For example, the machine-readable storage medium can be: RAM (Random Access Memory), volatile memory, non-volatile memory, flash memory, storage drive (such as hard disk drive), solid state drive, any type of storage disk (such as CD, DVD, etc.), or similar storage media, or a combination thereof.

[0100] The systems, devices, modules, or units described in the above embodiments may be implemented by computer chips or entities, or by products having certain functions. A typical implementation device is a computer, which may be in the form of a personal computer, laptop computer, cellular phone, camera phone, smartphone, personal digital assistant, media player, navigation device, email transceiver, game console, tablet computer, wearable device, or any combination of these devices.

[0101] For the convenience of description, the above devices are described as being divided into various units according to their functions. Of course, when implementing this application, the functions of each unit can be implemented in the same or multiple software and / or hardware.

[0102] Those skilled in the art will appreciate that the embodiments of the present application can be provided as methods, systems, or computer program products. Therefore, the present application can adopt the form of a complete hardware embodiment, a complete software embodiment, or an embodiment in combination with software and hardware. Moreover, the embodiments of the present application can adopt the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to magnetic disk storage, CD-ROM, optical storage, etc.) that contain computer-usable program code.

[0103] The present application is described with reference to the flowcharts and / or block diagrams of the methods, devices (systems), and computer program products according to the embodiments of the present application. It should be understood that each process and / or box in the flowchart and / or block diagram, as well as the combination of the processes and / or boxes in the flowchart and / or block diagram, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing device to produce a machine, so that the instructions executed by the processor of the computer or other programmable data processing device generate instructions for implementing the steps in the process. Figure 1 a process or multiple processes and / or boxes Figure 1 A device that provides the functions specified in a block or multiple blocks.

[0104] Furthermore, these computer program instructions may also be stored in a computer-readable memory capable of directing a computer or other programmable data processing device to operate in a specific manner, so that the instructions stored in the computer-readable memory produce an article of manufacture comprising an instruction device, which implements the process Figure 1 a process or multiple processes and / or boxes Figure 1 The function specified in one or more boxes.

[0105] These computer program instructions can also be loaded onto a computer or other programmable data processing device so that a series of operating steps are executed on the computer or other programmable device to produce a computer-implemented process, thereby providing instructions for executing on the computer or other programmable device to implement the process. Figure 1 a process or multiple processes and / or boxes Figure 1 A step that specifies a function in one or more boxes.

[0106] The above description is only a preferred embodiment of the present application and is not intended to limit the present application. Any modifications, equivalent replacements, improvements, etc. made within the spirit and principles of the present application shall be included in the scope of protection of the present application.

Claims

1. An audit method, characterized in that: Applied to a controller, the method includes: When an audit of a target network device is detected, determining whether the number of network devices currently being audited is less than a first threshold; If it is determined that the number of network devices currently being audited is less than the first threshold, obtaining the average CPU usage and the average memory usage of the controller within a preset time period before the current time; Determine whether the obtained average CPU usage of the controller is less than a second threshold and whether the average memory usage is less than a third threshold; If it is determined that the obtained average CPU usage of the controller is less than the second threshold, and the average memory usage is less than the third threshold, the target network device is audited.

2. The method according to claim 1, wherein The method further comprises: If it is determined that the number of network devices currently being audited is not less than the first threshold, the target network device is not audited, and an operation of determining whether the number of network devices currently being audited is less than the first threshold is performed.

3. The method according to claim 1, wherein The method further comprises: If it is determined that the obtained average CPU usage of the controller is not less than the second threshold, and / or the average memory usage is not less than the third threshold, then the target network device is not audited; After a specified time interval, an operation of obtaining an average CPU usage and an average memory usage of the controller within a preset time period before the current time is performed.

4. The method according to any one of claims 1 to 3, wherein The steps of auditing the target network device include: Determining functional modules of the target network device to be audited, and classifying the functional modules into at least two categories of functional modules based on preset rules, wherein different audit priorities are preset for different types of functional modules; Based on the audit priorities of the at least two types of functional modules, each type of functional module is audited separately.

5. The method according to claim 4, wherein The step of dividing the functional modules into at least two categories of functional modules based on preset rules includes: Based on the functional type of each functional module, the functional modules are divided into basic functional modules and application functional modules; The audit priority of the basic function module is higher than the priority of the application function module; based on the audit priorities of the at least two types of function modules, the steps of auditing each type of function module separately include: The basic function modules are audited, and after the audit is completed, the application function modules are audited.

6. An auditing device, characterized in that: Applied to a controller, the device comprises: a judgment unit, configured to judge whether the number of network devices currently under audit is less than a first threshold value if an audit of a target network device is detected; an acquisition unit, configured to acquire an average CPU usage and an average memory usage of the controller within a preset time period before a current time if the determination unit determines that the number of network devices currently being audited is less than a first threshold; The judgment unit is further configured to judge whether the obtained average CPU usage of the controller is less than a second threshold, and whether the average memory usage is less than a third threshold; The audit unit is configured to audit the target network device if the judgment unit determines that the obtained average CPU usage of the controller is less than a second threshold and the average memory usage is less than a third threshold.

7. The device according to claim 6, characterized in that If the judgment unit determines that the number of network devices currently being audited is not less than the first threshold, the audit unit does not audit the target network device, and the judgment unit performs an operation of judging whether the number of network devices currently being audited is less than the first threshold.

8. The device according to claim 6, wherein If the judgment unit determines that the obtained average CPU usage of the controller is not less than the second threshold, and / or the average memory usage is not less than the third threshold, the audit unit does not audit the target network device; After a specified time interval, the acquisition unit executes an operation of acquiring an average CPU usage and an average memory usage of the controller within a preset time period before a current time.

9. The device according to any one of claims 6 to 8, characterized in that When auditing the target network device, the audit unit is specifically used to: Determining functional modules of the target network device to be audited, and classifying the functional modules into at least two categories of functional modules based on preset rules, wherein different audit priorities are preset for different types of functional modules; Based on the audit priorities of the at least two types of functional modules, each type of functional module is audited separately.

10. The device according to claim 9, wherein When the functional modules are divided into at least two categories of functional modules based on preset rules, the audit unit is specifically configured to: Based on the functional type of each functional module, the functional modules are divided into basic functional modules and application functional modules; The audit priority of the basic function module is higher than the priority of the application function module; Based on the audit priorities of the at least two types of functional modules, the steps of auditing each type of functional module respectively include: The basic function modules are audited, and after the audit is completed, the application function modules are audited.

Images