Task deployment system and task deployment method

Abstract

The present disclosure provides a task deployment system and a task deployment method, which can be used in the fields of computer technology and financial technology. The system includes a first deployment server in an external network area, an intermediate server in an isolation area, and a file server, a second deployment server and multiple application servers in an internal network area; wherein the multiple application servers include at least one target application server, the intermediate server is respectively connected to the first deployment server and at least one target application server; the second deployment server is respectively connected to the file server and multiple application servers; the file server stores a program package of the target task; the first deployment server is used to send a deployment instruction for the target task to the target application server through the intermediate server; the second deployment server is used to respond to the deployment instruction, download the program package of the target task from the file server, and send the program package of the target task to multiple application servers respectively.

Description

Technical Field

[0001] The present disclosure relates to the fields of computer technology and financial technology, and more specifically, to a task deployment system and a task deployment method. Background Art

[0002] The task deployment system refers to a system based on the concepts of continuous integration, continuous deployment, DevOps, etc., and is one of the key factors affecting development. Especially for enterprises whose businesses involve multiple regions and face complex network environments, an efficient task deployment system can improve the R&D iteration efficiency of the entire enterprise.

[0003] In the process of implementing the concept of the present disclosure, the inventors found that there are at least the following problems in the related art: the task deployment operation is relatively cumbersome and the efficiency is low. Summary of the invention

[0004] In view of this, the present disclosure provides a task deployment system and a task deployment method.

[0005] One aspect of the present disclosure provides a task deployment system, comprising a first deployment server in an external network area, an intermediate server in an isolation area between the external network area and the internal network area, and a file server, a second deployment server and a plurality of application servers in the internal network area;

[0006] The plurality of application servers include at least one target application server, the intermediate server is respectively connected to the first deployment server and the at least one target application server; the second deployment server is respectively connected to the file server and the plurality of application servers;

[0007] The file server stores a program package of the target task;

[0008] The first deployment server is used to send the deployment instruction for the target task to the target application server through the intermediate server;

[0009] The second deployment server is used to obtain the deployment instruction from the target application server, and in response to the deployment instruction, download the program package of the target task from the file server, and send the program package of the target task to the multiple application servers respectively.

[0010] According to an embodiment of the present disclosure, the external network area further includes a source code warehouse, and the source code warehouse includes the source code of the target task;

[0011] The first deployment server is further used to compile the source code of the target task into a program package of the target task, and upload the program package of the target task to the intermediate server.

[0012] According to an embodiment of the present disclosure, the intermediate server is connected to the file server;

[0013] The intermediate server is used to upload the program package of the target task to the file server.

[0014] According to an embodiment of the present disclosure, the external network area further includes a program database, and the program database includes a penetration program;

[0015] The first deployment server is further used to call the penetration program, send the deployment instruction for the target task to the target application server through the intermediate server, or upload the program package of the target task to the intermediate server.

[0016] According to an embodiment of the present disclosure, a hook program is installed in the second deployment server; a listening subprogram of the hook program is installed in the target application server;

[0017] The target application server is used to trigger the hook program in the second deployment server through the monitoring subprogram when receiving the deployment instruction.

[0018] According to an embodiment of the present disclosure, the second deployment server is used to obtain the deployment instruction from the target application server in response to the hook program being triggered.

[0019] According to an embodiment of the present disclosure, a task running program is deployed in the above-mentioned application server, and the above-mentioned second deployment server is also used to send an instruction to execute the above-mentioned task running program to the above-mentioned application server after the program packages of the above-mentioned target tasks are respectively sent to the above-mentioned application servers, so that the above-mentioned application server executes the above-mentioned target tasks.

[0020] Another aspect of the present disclosure provides a task deployment method implemented by a task deployment system, comprising:

[0021] In response to the target application server acquiring the deployment instruction of the target task, triggering the hook program of the second deployment server;

[0022] In response to the hook program being triggered, downloading the program package of the target task from the file server through the second deployment server; and

[0023] The program packages of the target tasks are respectively distributed to multiple application servers through the second deployment server.

[0024] According to an embodiment of the present disclosure, the above task deployment method further includes:

[0025] Before responding to the target application server obtaining the deployment instruction of the target task, obtaining the program package of the target task from the intermediate server; and

[0026] Storing the program package of the target task in the file server;

[0027] The program package of the target task is generated by compiling the source code of the target task by the first deployment server.

[0028] According to an embodiment of the present disclosure, the above task deployment method further includes:

[0029] After the program packages of the target task are respectively distributed to the plurality of application servers through the second deployment server, an execution instruction is sent to the application server through the second deployment server; and

[0030] In response to the execution instruction, the task running program is executed by the application server to execute the target task.

[0031] According to an embodiment of the present disclosure, by establishing a connection relationship between an intermediate server in an isolation zone and at least one application server, when deploying a task, the first deployment server sends a deployment instruction to the target application server through the intermediate server, and the second deployment server obtains the deployment instruction from the target application server, and in response to the deployment instruction, downloads the program package of the target task from the file server, and sends the program package of the target task to multiple application servers respectively, thereby completing the task deployment of multiple application servers. Therefore, the technical problem of cumbersome task deployment operation and low efficiency is at least partially overcome, thereby achieving the technical effect of simplifying the deployment workload of operation and maintenance personnel and saving deployment time. BRIEF DESCRIPTION OF THE DRAWINGS

[0032] The above and other objects, features and advantages of the present disclosure will become more apparent through the following description of the embodiments of the present disclosure with reference to the accompanying drawings, in which:

[0033] Figure 1 An exemplary system architecture diagram of a task deployment system according to an embodiment of the present disclosure is schematically shown;

[0034] Figure 2 A schematic diagram of a task deployment system according to another embodiment of the present disclosure is schematically shown;

[0035] Figure 3 A schematic diagram of a process flow of a task deployment method according to an embodiment of the present disclosure is schematically shown;

[0036] Figure 4 A schematic diagram schematically shows a process flow of a task deployment method according to another embodiment of the present disclosure;

[0037] Figure 5 A schematic diagram schematically shows a flow chart of a task deployment method according to another embodiment of the present disclosure; and

[0038] Figure 6 A block diagram of an electronic device for implementing a task deployment method according to an embodiment of the present disclosure is schematically shown. DETAILED DESCRIPTION

[0039] Hereinafter, embodiments of the present disclosure will be described with reference to the accompanying drawings. However, it should be understood that these descriptions are exemplary only and are not intended to limit the scope of the present disclosure. In the following detailed description, for ease of explanation, many specific details are set forth to provide a comprehensive understanding of the embodiments of the present disclosure. However, it is apparent that one or more embodiments may also be implemented without these specific details. In addition, in the following description, descriptions of known structures and technologies are omitted to avoid unnecessary confusion of the concepts of the present disclosure.

[0040] The terms used herein are only for describing specific embodiments and are not intended to limit the present disclosure. The terms "comprise", "include", etc. used herein indicate the existence of the features, steps, operations and / or components, but do not exclude the existence or addition of one or more other features, steps, operations or components.

[0041] All terms (including technical and scientific terms) used herein have the meanings commonly understood by those skilled in the art, unless otherwise defined. It should be noted that the terms used herein should be interpreted as having a meaning consistent with the context of this specification, and should not be interpreted in an idealized or overly rigid manner.

[0042] In the case of using expressions such as "at least one of A, B, and C, etc.", it should generally be interpreted in accordance with the meaning of the expression generally understood by those skilled in the art (for example, "a system having at least one of A, B, and C" should include but is not limited to a system having A alone, B alone, C alone, A and B, A and C, B and C, and / or A, B, C, etc.). In the case of using expressions such as "at least one of A, B, or C, etc.", it should generally be interpreted in accordance with the meaning of the expression generally understood by those skilled in the art (for example, "a system having at least one of A, B, or C" should include but is not limited to a system having A alone, B alone, C alone, A and B, A and C, B and C, and / or A, B, C, etc.).

[0043] The servers in the enterprise intranet usually store information containing trade secrets, so the enterprise's internal network is usually isolated from the external network by physical isolation or installation of firewalls to ensure the security of information; on the other hand, in order to solve the problem that the internal network cannot exchange information with the external network after isolation, an isolation buffer zone is usually set up between the internal network and the external network. Some server facilities that must be made public can be placed in the isolation buffer zone, such as web servers, jump servers, etc. In the related technology, since it is impossible to directly access the customer's intranet environment, when deploying tasks for servers in the intranet, the operation and maintenance personnel need to first log in to the jump server or bastion server in the isolation buffer zone, upload the program package of the target task to be deployed to the jump server, and then use the jump server to log in to the production server in the intranet, and upload the program package of the target task on the jump server to the production server.

[0044] However, the deployment process in the related technology is very cumbersome, requiring operation and maintenance personnel to upload the tasks to be deployed to each production server in the intranet one by one, which is inefficient.

[0045] In view of this, the embodiments of the present disclosure provide a one-click task deployment method, which effectively reduces the degree of manual intervention and improves the efficiency of task deployment.

[0046] Specifically, an embodiment of the present disclosure provides a task deployment system and a task deployment method. The task deployment system includes a first deployment server in an external network area, an intermediate server in an isolation area between the external network area and the internal network area, and a file server, a second deployment server and multiple application servers in the internal network area.

[0047] It should be noted that the task deployment system and task deployment method determined in the embodiments of the present disclosure can be used in the financial field, for example, in financial institutions such as banks. The task deployment system and task deployment method determined in the embodiments of the present disclosure can also be used in any field other than the financial field, such as hospitals. The application field of the task deployment system and task deployment method determined in the embodiments of the present disclosure is not limited.

[0048] Figure 1 The schematic diagram of the task deployment system according to the embodiment of the present disclosure is schematically shown. Figure 1 As shown, the task deployment system may include a first deployment server 101 in an external network area, an intermediate server 102 in an isolation area between the external network area and the internal network area, and a file server 103, a second deployment server 104 and multiple application servers 105 in the internal network area.

[0049] The multiple application servers 105 may include at least one target application server 106, and the intermediate server 102 is respectively connected to the first deployment server 101 and the at least one target application server 106. The second deployment server 104 is respectively connected to the file server 103 and the multiple application servers 105.

[0050] The program package of the target task is stored in the file server 103. The first deployment server 101 is used to send the deployment instruction for the target task to the target application server 105 through the intermediate server 102.

[0051] The second deployment server 104 is used to obtain a deployment instruction from the target application server 106 , and in response to the deployment instruction, download the program package of the target task from the file server 103 , and distribute the program package of the target task to the multiple application servers 105 .

[0052] According to the embodiments of the present disclosure, the target task program package can be a data package in any format, and the target task program package can be executed in a corresponding operating environment to achieve corresponding functions. For example, when the operating system of the application server 105 is Linux, the target task program package can be a jar package; the operation and maintenance personnel can package the JAVA program of the written target task into a jar package on the computer of the external network; after the jar package is sent to the application server 105 on the internal network, the application server 105 can directly execute the jar package to achieve the functions of the corresponding JAVA program.

[0053] According to an embodiment of the present disclosure, the first deployment server 101 and the second deployment server 104 may be any server installed with a tool having continuous integration and continuous deployment functions, such as a Jenkins tool, a GitLabCI tool, and the like.

[0054] According to an embodiment of the present disclosure, the file server 103 may be any server suitable for storing unstructured data, including but not limited to a Minio server, an FTP server, etc. The file server 103 may store pictures, videos, log files, backup data, container images, and the like.

[0055] According to an embodiment of the present disclosure, the intermediate server 102 may be any server having static resource service and reverse proxy functions, including but not limited to an Nginx server and an Apache server.

[0056] According to an embodiment of the present disclosure, for example, when the external network zone accesses the internal network zone, the intermediate server can provide a web page, and the web page can generate a URL access address according to the deployment instruction, so that the intermediate server can access the API interface of the target application server 106 through the URL access address, wherein the API interface of the target application server 106 can be an address access interface opened by the target application server 106 to the intermediate server 102. The second deployment server 104 can obtain the deployment instruction from the target application server 106, and the second deployment server 104 responds to the deployment instruction, downloads the program package of the target task from the file server 103, and sends the program package of the target task to multiple application servers 105 respectively, thereby completing the deployment task of the program package of the target task.

[0057] According to an embodiment of the present disclosure, by establishing a connection relationship between an intermediate server in an isolation zone and at least one application server, when deploying a task, the first deployment server sends a deployment instruction to the target application server through the intermediate server, and the second deployment server obtains the deployment instruction from the target application server, and in response to the deployment instruction, downloads the program package of the target task from the file server, and sends the program package of the target task to multiple application servers respectively, thereby completing the task deployment of multiple application servers. Therefore, the technical problem of cumbersome task deployment operation and low efficiency is at least partially overcome, thereby achieving the technical effect of simplifying the deployment workload of operation and maintenance personnel and saving deployment time.

[0058] Figure 2 A schematic diagram of a task deployment system according to another embodiment of the present disclosure is schematically shown.

[0059] like Figure 2 As shown, the external network area may further include a source code warehouse 201, and the source code warehouse 201 includes the source code of the target task.

[0060] The first deployment server 101 may also compile the source code of the target task in the source code repository 201 into a program package of the target task, and upload the program package of the target task to the intermediate server 102 .

[0061] According to an embodiment of the present disclosure, the intermediate server 102 is connected to the file server 103 , and through the reverse proxy function of the intermediate server 102 , the program package of the target task in the intermediate server 102 can be uploaded to the file server 103 .

[0062] According to an embodiment of the present disclosure, the external network area may further include a program database 202, and the program database 202 includes a penetration program.

[0063] The first deployment server 101 may also be used to call a penetration program, send a deployment instruction for a target task to the target application server 106 through the intermediate server 102 , or upload a program package of the target task to the intermediate server 102 .

[0064] According to an embodiment of the present disclosure, the penetration program may include a shell script program, which may refer to a program file that pre-places various commands into a file to facilitate one-time execution. For example, the shell script program may be a batch command with a function of accessing the API interface of the target application server 106.

[0065] According to an embodiment of the present disclosure, the URL interface can be used, and the second deployment server 104 executes the penetration program to access the API interface of the target application server 106. The first deployment server 101 calls the penetration program to upload the program package of the target task to the intermediate server 102, or sends the deployment instructions for the target task to the target application server 106 through the intermediate server 102.

[0066] According to an embodiment of the present disclosure, a hook program may be installed in the second deployment server 104 ; and a listening subprogram of the hook program may be installed in the target application server 106 .

[0067] According to an embodiment of the present disclosure, a hook program is a program segment for processing messages, and the hook program is hooked into the system through a system call. After a specific message is sent and before it reaches a destination window, the hook program can first capture the message.

[0068] According to an embodiment of the present disclosure, when the target application server 106 receives the deployment instruction, the first deployment server 101 can call the listening subprogram through the API interface of the target application server 106, so that the listening subprogram triggers the hook program in the second deployment server 104. Then, the second deployment server 104 obtains the deployment instruction from the target application server 106, and in response to the deployment instruction, downloads the program package of the target task from the file server 103, and sends the program package of the target task to multiple application servers 105 respectively.

[0069] According to an embodiment of the present disclosure, in order for the application server 105 to execute the target task after completing the task deployment, a task running program may be deployed in the application server 105 .

[0070] According to an embodiment of the present disclosure, after the second deployment server 104 sends the program package of the target task to the application server 105, the second deployment server 104 may send an instruction to execute the task running program to the application server 105 so that the application server 105 executes the target task.

[0071] Figure 3 The flowchart of the task deployment method according to the embodiment of the present disclosure is schematically shown.

[0072] like Figure 3 As shown, the task deployment method implemented by the task deployment system may include operations S310 to S330.

[0073] In operation S310, in response to the target application server acquiring the deployment instruction of the target task, a hook program of the second deployment server is triggered.

[0074] In operation S320 , in response to the hook program being triggered, a program package of the target task is downloaded from the file server through the second deployment server.

[0075] In operation S330, the program packages of the target task are respectively sent to multiple application servers through the second deployment server.

[0076] According to an embodiment of the present disclosure, the first deployment server accesses the API interface of the application server by executing a shell script to trigger a hook program in the second deployment server. In response to the hook program being triggered, the second deployment server downloads the program package of the target task from the file server and sends the program package of the target task to multiple application servers respectively.

[0077] According to an embodiment of the present disclosure, by establishing a connection relationship between an intermediate server in an isolation zone and at least one application server, when deploying a task, the first deployment server sends a deployment instruction to the target application server through the intermediate server, and the second deployment server obtains the deployment instruction from the target application server, and in response to the deployment instruction, downloads the program package of the target task from the file server, and sends the program package of the target task to multiple application servers respectively, thereby completing the task deployment of multiple application servers. Therefore, the technical problem of cumbersome task deployment operation and low efficiency is at least partially overcome, thereby achieving the technical effect of simplifying the deployment workload of operation and maintenance personnel and saving deployment time.

[0078] Figure 4 A flowchart of a task deployment method according to another embodiment of the present disclosure is schematically shown.

[0079] like Figure 4 As shown, the task deployment method may further include operations S410 to S420.

[0080] In operation S410 , before the target application server obtains the deployment instruction of the target task in response to the target application server obtaining the program package of the target task from the intermediate server.

[0081] In operation S420 , the program package of the target task is stored in the file server.

[0082] The program package of the target task may be generated by compiling the source code of the target task by a Jenkins tool in the first deployment server.

[0083] According to an embodiment of the present disclosure, the first deployment server can be communicatively connected with a source code repository, in which the program source code of the target task is stored. The first deployment server can obtain the program source code of the target task from the source code repository, and use the Jenkins tool to package it into a deployable program package of the target task, and upload the packaged program package to the intermediate server.

[0084] According to an embodiment of the present disclosure, the second deployment server obtains the program package of the target task from the intermediate server, and stores the program package of the target task in the file server.

[0085] Figure 5 A flowchart of a task deployment method according to another embodiment of the present disclosure is schematically shown.

[0086] like Figure 5 As shown, the task deployment method may further include operations S510 to S520.

[0087] In operation S510, after the program packages of the target task are respectively distributed to a plurality of application servers through the second deployment server, an execution instruction is sent to the application server through the second deployment server.

[0088] In operation S520, in response to the execution instruction, the task execution program is executed by the application server to execute the target task.

[0089] According to an embodiment of the present disclosure, after the second deployment server sends the program package of the target task to the application server, the second deployment server sends an instruction to execute the task running program to the application server, so that the application server executes the target task.

[0090] It should be noted that the task deployment method part in the embodiment of the present disclosure corresponds to the task deployment system part in the embodiment of the present disclosure. The description of the task deployment method part specifically refers to the task deployment system part, which will not be repeated here.

[0091] Figure 6 A block diagram of an electronic device suitable for implementing a task deployment method according to an embodiment of the present disclosure is schematically shown.

[0092] like Figure 6As shown, the electronic device 600 according to an embodiment of the present disclosure includes a processor 601, which can perform various appropriate actions and processes according to a program stored in a read-only memory (ROM) 602 or a program loaded from a storage part 608 into a random access memory (RAM) 603. The processor 601 may include, for example, a general-purpose microprocessor (e.g., a CPU), an instruction set processor and / or a related chipset and / or a special-purpose microprocessor (e.g., an application-specific integrated circuit (ASIC)), etc. The processor 601 may also include an onboard memory for caching purposes. The processor 601 may include a single processing unit or multiple processing units for performing different actions of the method flow according to an embodiment of the present disclosure.

[0093] In RAM 603, various programs and data required for the operation of electronic device 600 are stored. Processor 601, ROM 602 and RAM 603 are connected to each other via bus 604. Processor 601 performs various operations of the method flow according to the embodiment of the present disclosure by executing the program in ROM 602 and / or RAM 603. It should be noted that the program can also be stored in one or more memories other than ROM 602 and RAM 603. Processor 601 can also perform various operations of the method flow according to the embodiment of the present disclosure by executing the program stored in the one or more memories.

[0094] According to an embodiment of the present disclosure, the electronic device 600 may further include an input / output (I / O) interface 605, which is also connected to the bus 604. The electronic device 600 may further include one or more of the following components connected to the I / O interface 605: an input portion 606 including a keyboard, a mouse, etc.; an output portion 607 including a cathode ray tube (CRT), a liquid crystal display (LCD), etc., and a speaker, etc.; a storage portion 608 including a hard disk, etc.; and a communication portion 609 including a network interface card such as a LAN card, a modem, etc. The communication portion 609 performs communication processing via a network such as the Internet. A drive 610 is also connected to the I / O interface 605 as needed. A removable medium 611, such as a magnetic disk, an optical disk, a magneto-optical disk, a semiconductor memory, etc., is installed on the drive 610 as needed, so that a computer program read therefrom is installed into the storage portion 608 as needed.

[0095] The present disclosure also provides a computer-readable storage medium, which may be included in the device / apparatus / system described in the above embodiments; or may exist independently without being assembled into the device / apparatus / system. The above computer-readable storage medium carries one or more programs, and when the above one or more programs are executed, the method according to the embodiment of the present disclosure is implemented.

[0096] According to an embodiment of the present disclosure, the computer-readable storage medium may be a non-volatile computer-readable storage medium, for example, may include but is not limited to: a portable computer disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination thereof. In the present disclosure, a computer-readable storage medium may be any tangible medium containing or storing a program, which may be used by or in combination with an instruction execution system, an apparatus or a device. For example, according to an embodiment of the present disclosure, a computer-readable storage medium may include the ROM 602 and / or RAM 603 described above and / or one or more memories other than ROM 602 and RAM 603.

[0097] The embodiment of the present disclosure also includes a computer program product, which includes a computer program, and the computer program contains program code for executing the method shown in the flowchart. When the computer program product is run in a computer system, the program code is used to enable the computer system to implement the item recommendation method provided by the embodiment of the present disclosure.

[0098] The above functions defined in the system / device of the embodiment of the present disclosure are performed when the computer program is executed by the processor 601. According to the embodiment of the present disclosure, the system, device, module, unit, etc. described above can be implemented by a computer program module.

[0099] In one embodiment, the computer program may rely on tangible storage media such as optical storage devices, magnetic storage devices, etc. In another embodiment, the computer program may also be transmitted and distributed in the form of signals on a network medium, and downloaded and installed through the communication part 609, and / or installed from a removable medium 611. The program code contained in the computer program may be transmitted using any appropriate network medium, including but not limited to: wireless, wired, etc., or any suitable combination of the above.

[0100] In such an embodiment, the computer program can be downloaded and installed from the network through the communication part 609, and / or installed from the removable medium 611. When the computer program is executed by the processor 601, the above functions defined in the system of the embodiment of the present disclosure are performed. According to the embodiment of the present disclosure, the system, device, apparatus, module, unit, etc. described above can be implemented by a computer program module.

[0101] According to an embodiment of the present disclosure, the program code for executing the computer program provided by the embodiment of the present disclosure can be written in any combination of one or more programming languages. Specifically, these computing programs can be implemented using high-level process and / or object-oriented programming languages, and / or assembly / machine languages. Programming languages ​​include, but are not limited to, Java, C++, python, "C" language or similar programming languages. The program code can be executed entirely on the user computing device, partially on the user device, partially on the remote computing device, or entirely on the remote computing device or server. In the case of a remote computing device, the remote computing device can be connected to the user computing device through any type of network, including a local area network (LAN) or a wide area network (WAN), or can be connected to an external computing device (for example, using an Internet service provider to connect through the Internet).

[0102] The flow charts and block diagrams in the accompanying drawings illustrate the possible architecture, functions and operations of the systems, methods and computer program products according to various embodiments of the present disclosure. In this regard, each box in the flow chart or block diagram can represent a module, a program segment, or a part of a code, and the above-mentioned module, program segment, or a part of a code contains one or more executable instructions for realizing the specified logical function. It should also be noted that in some alternative implementations, the functions marked in the box can also occur in a different order from the order marked in the accompanying drawings. For example, two boxes represented in succession can actually be executed substantially in parallel, and they can sometimes be executed in the opposite order, depending on the functions involved. It should also be noted that each box in the block diagram or flow chart, and the combination of the boxes in the block diagram or flow chart can be implemented with a dedicated hardware-based system that performs a specified function or operation, or can be implemented with a combination of dedicated hardware and computer instructions.

[0103] It will be appreciated by those skilled in the art that the features described in the various embodiments and / or claims of the present disclosure may be combined and / or combined in a variety of ways, even if such combinations and / or combinations are not explicitly described in the present disclosure. In particular, the features described in the various embodiments and / or claims of the present disclosure may be combined and / or combined in a variety of ways without departing from the spirit and teachings of the present disclosure. All of these combinations and / or combinations fall within the scope of the present disclosure.

[0104] The embodiments of the present disclosure are described above. However, these embodiments are only for illustrative purposes and are not intended to limit the scope of the present disclosure. Although the embodiments are described above separately, this does not mean that the measures in the various embodiments cannot be used in combination to advantage. The scope of the present disclosure is defined by the attached claims and their equivalents. Without departing from the scope of the present disclosure, those skilled in the art may make a variety of substitutions and modifications, which should all fall within the scope of the present disclosure.

Claims

1. A task deployment system, comprising a first deployment server in an external network area, an intermediate server in an isolation area between the external network area and an internal network area, and a file server, a second deployment server and a plurality of application servers in the internal network area; in, The multiple application servers include at least one target application server, the intermediate server is connected to the first deployment server and the at least one target application server respectively; the second deployment server is connected to the file server and the multiple application servers respectively; The file server stores a program package of the target task; The first deployment server is used to send the deployment instruction for the target task to the target application server through the intermediate server; The second deployment server is used to obtain the deployment instruction from the target application server, and in response to the deployment instruction, download the program package of the target task from the file server, and send the program package of the target task to the multiple application servers respectively.

2. The system according to claim 1, wherein: The external network area also includes a source code warehouse, and the source code warehouse includes the source code of the target task; The first deployment server is further used to compile the source code of the target task into a program package of the target task, and upload the program package of the target task to the intermediate server.

3. The system according to claim 2, wherein: The intermediate server is connected to the file server; The intermediate server is used to upload the program package of the target task to the file server.

4. The system according to claim 1 or 2, wherein: The external network area also includes a program database, and the program database includes a penetration program; The first deployment server is further used to call the penetration program, send the deployment instruction for the target task to the target application server through the intermediate server, or upload the program package of the target task to the intermediate server.

5. The system according to claim 1, wherein: The second deployment server is installed with a hook program; the target application server is installed with a listening subprogram of the hook program; The target application server is used to trigger the hook program in the second deployment server through the monitoring subprogram when receiving the deployment instruction.

6. The system according to claim 5, wherein: The second deployment server is used for acquiring the deployment instruction from the target application server in response to the hook program being triggered.

7. The system according to claim 1, wherein: A task running program is deployed in the application server, and the second deployment server is further used to send an instruction to execute the task running program to the application server after sending the program packages of the target task to the application server respectively, so that the application server executes the target task.

8. A task deployment method implemented using the task deployment system according to any one of claims 1 to 7, comprising: In response to the target application server acquiring the deployment instruction of the target task, triggering the hook program of the second deployment server; In response to the hook program being triggered, downloading the program package of the target task from the file server through the second deployment server; as well as The program packages of the target tasks are respectively distributed to multiple application servers through the second deployment server.

9. The method according to claim 8, further comprising: Before the target application server obtains the deployment instruction of the target task in response to the target application server obtaining the program package of the target task from the intermediate server; as well as storing the program package of the target task in the file server; The program package of the target task is generated by compiling the source code of the target task by the first deployment server.

10. The method according to claim 8, further comprising: After the program packages of the target task are respectively distributed to a plurality of application servers through the second deployment server, an execution instruction is sent to the application server through the second deployment server; as well as In response to the execution instruction, the task running program is executed by the application server to execute the target task.

Images