A configuration baseline management tool

Abstract

The present invention discloses a configuration baseline management tool, including: a baseline verification module, which is used to write verification scripts for different versions of software, and encapsulate them in a management tool after the script test is passed; according to the management tool, the corresponding verification script is matched for the test software; the verification command is distributed and run, and the verification result is compared; a baseline rectification module, which is used to automatically create a rectification task according to a rectification task template and an analysis list; an emergency fallback module, which is used to find the corresponding configuration file and reverse command file for recovery or execution according to the timestamp of the fallback task if a failure occurs; a report management module, which is used to export the verification result. The present invention can greatly simplify user operations, so that the configuration baseline management work forms a closed loop and can be completed efficiently. At the same time, after the verification is completed, the verification report is displayed with each configuration item of each server as a dimension, which is convenient for generating various types of perspective diagrams for result display, thereby improving work efficiency.

Description

Technical Field

[0001] The present invention relates to the technical field of baseline management, and in particular to a configuration baseline management tool. Background Art

[0002] With the rapid development of Internet technology and the deepening of IT construction in the banking industry, the basic software managed by the data center has gradually increased, and the complexity of operation and maintenance has continued to increase. In order to reduce the complexity of operation and maintenance, ensure the standardization and normalization of basic software parameter configuration, and improve the security, reliability and stability of software operation, the data center has formulated a configuration baseline for the basic software, and regularly checks the configuration baseline of the basic software, rectifies the differences, and ensures the standardized configuration and safe and stable operation of the business system.

[0003] However, the existing configuration baseline management systems often have the following shortcomings when applied: First, when conducting baseline verification, nearly 10,000 servers are often involved. Therefore, in order to carry out the verification work in an orderly manner, the information of all target servers must be clarified before the verification. For example, for the operating system baseline verification, it is necessary to clarify the operating system type and version. For the database baseline verification, it is necessary to clarify the operating system, database type, and version of the database, and then select the corresponding verification template. For users, the large amount of sorting work before the verification undoubtedly increases the workload. Secondly, the verification results of this solution need to be returned to the server for comparison. Under large-scale verification tasks, performance bottlenecks are concentrated on the server, resulting in slow operation of the verification tasks; finally, the tool only provides baseline verification functions and lacks other practical functions. Therefore, it has strong limitations, and the operation is cumbersome and difficult to manage when applied. Summary of the invention

[0004] The purpose of the present invention is to provide a configuration baseline management tool to solve the technical problems existing in the existing configuration baseline management, such as large workload, long time consumption, incomplete verification function and difficulty in carrying out the work.

[0005] In order to overcome the above defects in the prior art, the present invention provides a configuration baseline management tool, including:

[0006] The baseline verification module is used to write verification scripts for different versions of software and encapsulate them in the management tool after the scripts are tested; match the corresponding verification scripts for the test software according to the management tool; distribute and run the verification commands, and compare the verification results;

[0007] Baseline rectification module, used to automatically create rectification tasks based on rectification task templates and analysis checklists;

[0008] Emergency rollback module, used to restore or execute the corresponding configuration file and reverse command file according to the timestamp of the rollback task if a failure occurs;

[0009] The report management module is used to export the verification results.

[0010] Furthermore, the baseline rectification module is also used to run the verification command again for verification before creating the rectification task, and only perform rectification when there is a difference in the verification value.

[0011] Furthermore, the rectification is divided into modifying configuration files and executing commands according to different configuration items.

[0012] Furthermore, the baseline rectification module is also used to, if the configuration file is modified, first back up the configuration file and save it in a specific path, name it with a timestamp, and perform rectification after the backup is completed.

[0013] Furthermore, the baseline rectification module is also used to first save the reverse command in a specific file and name it with a timestamp if it involves command start / stop or configuration modification.

[0014] Furthermore, the baseline rectification module is also used to feed back a success mark to the target server after the rectification is completed.

[0015] Furthermore, the report management module is also used to display the verification results in a fine-grained manner, and the fine-grained display is to display each configuration item of each target server.

[0016] Furthermore, the report management module is also used to export the verification results in the form of an EXCEL file.

[0017] Furthermore, the baseline verification module is also used to send the verification results and log information to the target server for storage, so that the user terminal performs the baseline verification through the target server.

[0018] Compared with the prior art, the beneficial effects of the present invention are:

[0019] 1) The present invention realizes the configuration baseline verification and rectification functions, realizes the full process management of the configuration baseline, and simplifies the user operation of each link as much as possible, so that the configuration baseline management work forms a closed loop and can be completed efficiently.

[0020] 2) The present invention uses multiple logical judgment statements to actively obtain the target server basic software type and version, automatically assigns verification commands, and only requires the user to provide the target server IP to perform the verification work, which greatly simplifies user operations and improves work efficiency.

[0021] 3) After the verification is completed, the verification report of the present invention is displayed with each configuration item of each server as a dimension, so as to facilitate the generation of various types of perspective diagrams for result display.

[0022] 4) The present invention can complete the whole process and whole cycle of configuration baseline management, including selecting difference items from the verification report for technical review, generating rectification report, and submitting the rectification report. The present invention automatically creates multiple tasks for execution. After the rectification is completed, the existing configuration of the basic software is stored in the warehouse, the rectification information table is compared with the verification information table, and a report on the remaining difference items is generated. The process platform is connected to generate a to-do work order, and the CI responsible person submits the configuration baseline difference process application for filing and approval in preparation for regulatory review. BRIEF DESCRIPTION OF THE DRAWINGS

[0023] In order to more clearly illustrate the technical solution of the present invention, the drawings required for use in the implementation mode will be briefly introduced below. Obviously, the drawings described below are only some implementation modes of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.

[0024] Figure 1 is a schematic diagram of the structure of a configuration baseline management tool provided by an embodiment of the present invention;

[0025] Figure 2 is a workflow diagram of a baseline verification module provided by a certain embodiment of the present invention;

[0026] Figure 3 is a workflow diagram of a baseline rectification module provided by an embodiment of the present invention;

[0027] Figure 4 It is a workflow diagram of a configuration baseline management tool provided by a certain embodiment of the present invention. DETAILED DESCRIPTION

[0028] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0029] It should be understood that the step numbers used in this article are only for the convenience of description and are not intended to limit the order in which the steps are executed.

[0030] It should be understood that the terms used in the present specification are only for the purpose of describing specific embodiments and are not intended to limit the present invention. As used in the present specification and the appended claims, unless the context clearly indicates otherwise, the singular forms "a", "an" and "the" are intended to include plural forms.

[0031] The terms “include” and “comprising” indicate the presence of described features, integers, steps, operations, elements and / or components, but do not exclude the presence or addition of one or more other features, integers, steps, operations, elements, components and / or combinations thereof.

[0032] The term "and / or" means and includes any and all possible combinations of one or more of the associated listed items.

[0033] See also Figure 1 An embodiment of the present invention provides a configuration baseline management tool 100, including:

[0034] Baseline verification module 01 is used to write verification scripts for different versions of software and encapsulate them in the management tool after the scripts are tested; match the corresponding verification scripts for the test software according to the management tool; distribute and run the verification commands and compare the verification results;

[0035] Baseline rectification module 02, used to automatically create rectification tasks based on rectification task templates and analysis lists;

[0036] The emergency rollback module 03 is used to restore or execute the corresponding configuration file and reverse command file according to the timestamp of the rollback task if a failure occurs.

[0037] The report management module 04 is used to export the verification results.

[0038] In this embodiment, the professional terms involved are first explained:

[0039] Configuration baseline: A dedicated configuration baseline is developed for each version of each basic software type, and the configuration baseline consists of configuration items.

[0040] Configuration items: refers to the various configuration parameters that ensure the normal operation of the basic functions of the basic software or improve the software performance, as well as the various configuration parameters that ensure the security of the basic software.

[0041] Benchmark value: For each parameter, a clear parameter value is established in combination with regulatory requirements and operation and maintenance experience. This parameter value is the benchmark value.

[0042] It should be noted that, in response to the above requirements, the management tools under the existing technology can be represented by the Green Alliance Security Configuration Verification System, which provides a configuration baseline verification function. Specifically, the management method of the management tool is: the system provides corresponding configuration baseline verification templates for different software types, and the verification templates include template types and configuration check items. The verification template supports custom writing, and the specific steps are as follows: 1) Select the template type, enter the configuration check item writing, and name the configuration check item; 2) Fill in the command that needs to be executed on the target host; 3) Fill in the corresponding regular expression to match the result returned by the execution command and filter out the required information. 4) Fill in the matching rules and benchmark values. The above actions complete the formulation of the verification template. Since each version of each type of software has its own configuration baseline, it is necessary to formulate a corresponding verification template against each configuration baseline. Among them, the configuration baseline verification supports single and multiple devices. Fill in the user and password for executing the verification template, select the corresponding verification template, and then the verification action can be executed. The execution command in the template is run on the target server, and the result is returned. The return value is matched with the benchmark value on the server side according to the matching rule to generate a matching result, and the configuration baseline verification work is completed. However, this method not only involves nearly 10,000 servers, but also has a cumbersome and huge workload when executed. At the same time, the system only provides a baseline verification function and lacks other practical functions. There are strong limitations and difficulties in management. Therefore, in this embodiment, it is mainly intended to provide a configuration baseline management tool 100 to improve the management function and simplify the workflow to improve work efficiency.

[0043] Specifically, Figure 2 As shown, in a certain embodiment, the main workflow of the baseline verification module 01 is given, including: software type and version detection, verification script matching, distribution of verification commands and result comparison. Among them, verification scripts are written for basic software of different types and versions. After the script test review is passed, it is encapsulated in the management tool to prevent modification. At the same time, the module provides the basic software type and version exploration function, and automatically selects the verification script according to the software type and version without manual selection. Finally, the result comparison is performed on the target end, and the verification results and log information are returned to the server for storage. Based on this function, the user only needs to select the target server to perform the baseline verification. Therefore, this configuration baseline management tool 100 can automatically determine the software type and version to match the corresponding verification script, simplify the workflow, and thus improve work efficiency.

[0044] like Figure 3 As shown, in a certain embodiment, the main workflow of the baseline rectification module 02 is provided, including: analyzing the list, creating tasks, backing up information, and distributing rectification commands.

[0045] The baseline rectification module 02 is also used to provide a rectification task template. In one embodiment, the template is usually an EXCEL, the header is consistent with the header of the verification report, and only a "batch" column is added at the end. The batch module automatically obtains the content filled in by the user in the batch column and automatically divides the submitted rectification content into multiple batches of execution tasks.

[0046] In a certain embodiment, before executing the rectification task, the corresponding verification command is run again as a check, and rectification is performed only if a difference value still exists.

[0047] In one embodiment, if the configuration file is modified, the file is first backed up and saved in a specific path and named with a timestamp.

[0048] In a certain embodiment, if it involves command start / stop or configuration modification, the reverse command is first saved in a specific file and named with a timestamp, so that the change can be rolled back in case of problems.

[0049] In a certain embodiment, after the backup is completed, the rectification operation is performed. The rectification is divided into two ways according to different configuration items, modifying the configuration file and executing the command. After the rectification is completed, the target end feeds back a success mark to the server end, and the rectification task is completed.

[0050] In a certain embodiment, the report management module 04 is also used to display the verification results in a fine-grained manner, specifically for each configuration item of each target server.

[0051] The configuration baseline management tool 100 provided in the embodiment of the present invention realizes the configuration baseline verification and rectification functions, realizes the full-process management of the configuration baseline, and simplifies the user operation of each link as much as possible, so that the configuration baseline management work forms a closed loop and can be completed efficiently.

[0052] See also Figure 4In a certain embodiment, the workflow of the configuration baseline management tool 100 is also provided, which includes: configuration baseline verification work, verification report, rectification technical review, rectification report, configuration baseline rectification, export of existing difference items, and difference item filing. This embodiment actively obtains the target server basic software type and version by using multiple logical judgment statements, automatically assigns verification commands, and only requires the user to provide the target server IP to perform the verification work, which greatly simplifies user operations and improves work efficiency. After the verification is completed, the verification report is displayed with each configuration item of each server as a dimension, which is convenient for generating perspective diagrams of various types for result display. Difference items are screened out from the verification report for technical review, rectification report is generated, and rectification report is submitted. The present invention automatically creates multiple tasks for execution. After the rectification is completed, the existing configuration of the basic software is stored in the warehouse, the rectification information table is compared with the verification information table, and a report on the remaining difference items is generated. The work order to be docked with the process platform is generated, and the CI responsible person submits the configuration baseline difference process application for filing and approval in preparation for regulatory review. The whole process of configuration baseline management is thus completed.

[0053] The above is a preferred embodiment of the present invention. It should be pointed out that a person skilled in the art can make several improvements and modifications without departing from the principle of the present invention. These improvements and modifications are also considered to be within the scope of protection of the present invention.

Claims

1. A configuration baseline management tool, characterized in that: include: A baseline verification module is used to write verification scripts for different versions of software and encapsulate them in a management tool after the scripts are tested; automatically match the corresponding verification scripts for the test software according to the management tool and the type and version of the test software obtained by using multiple logical judgment statements; Distribute and run verification commands, and compare verification results; The baseline rectification module is used to select the difference items from the verification results for technical review, generate rectification reports, automatically create rectification tasks according to the rectification reports, rectification task templates and analysis lists, and after the rectification is completed, store the existing configuration of the basic software in the warehouse, and submit the difference item report generated by comparing the rectification information table with the verification information table to the configuration baseline difference process application for filing and approval; the rectification task template includes a batch column, and the corresponding automatic creation of rectification tasks includes automatically obtaining the content of the batch column, and automatically dividing the submitted rectification content into multiple batches of execution tasks; Emergency rollback module, used to restore or execute the corresponding configuration file and reverse command file according to the timestamp of the rollback task if a failure occurs; A report management module is used to export the verification results; the verification results are displayed with each configuration item of each server as a dimension, and various types of perspectives are generated for result display; The baseline rectification module is also used to run the verification command again for verification before creating the rectification task, and only perform rectification when there is a difference in the verification value; The rectification is divided into modifying the configuration file and executing the command according to different configuration items; if the configuration file is modified, the configuration file is first backed up and saved in a specific path, named with a timestamp, and the rectification is performed after the backup is completed; if it involves command start and stop or configuration modification, the reverse command is first saved in a specific file and named with a timestamp; The baseline verification module is also used to send the verification results and log information to the target server for storage, so that the user terminal performs the baseline verification through the target server.

2. The configuration baseline management tool according to any one of claim 1, characterized in that: The baseline rectification module is also used to feed back a success mark to the target server after the rectification is completed.

3. The configuration baseline management tool according to claim 1, characterized in that: The report management module is also used to display the verification results in a fine-grained manner, wherein the fine-grained display is to display each configuration item of each target server.

4. The configuration baseline management tool according to claim 1, characterized in that: The report management module is also used to export the verification results in the form of an EXCEL file.

Images