An operation and maintenance management system based on a confidential special computing platform

Abstract

The embodiment of the present invention discloses an operation and maintenance management system based on a confidential special computing platform, the system includes a client and a management terminal based on a B / S architecture; the management terminal includes a topology management module, an asset management module, a monitoring management module, a report management module, and an alarm management module. It can realize the operation and maintenance management of confidential special computers (including confidential special workstations), confidential special servers, and confidential special network security equipment, and can effectively solve the performance and management efficiency bottlenecks when there are more than 1,000 confidential monitoring devices. The cluster solution adopted has the advantages of scalability, high availability, high manageability, etc., and is fully adapted to confidential special computers, and can monitor the dedicated software and hardware resources in the confidential information system and alarm the abnormal status indicators.

Description

Technical Field

[0001] The embodiments of the present invention relate to the field of computer technology, and in particular to an operation and maintenance management system based on a confidentiality-related special computing platform. Background Art

[0002] The operation and maintenance management system based on the special-purpose confidential computing platform can monitor the operating status of special-purpose confidential computers (including special-purpose confidential workstations), special-purpose confidential servers, special-purpose confidential network security equipment (special-purpose confidential firewalls, special-purpose confidential IDS, special-purpose confidential network interface control gateways), and special-purpose confidential data communication equipment (special-purpose confidential switches, special-purpose confidential routers).

[0003] At present, the existing technologies in the operation and maintenance management system mainly include the following:

[0004] The first is to use the native Zabbix solution to collect data through the Zabbix agent; receive, store data and calculate alarms through the Zabbix server; display data through the Zabbix web UI or Grafana; and collect custom monitoring data through shell scripts.

[0005] The second method uses the native Prometheus solution. The open source community's exporter collects data, stores data through Prometheus, calculates and sends alarms through AlertManager, and displays data through Grafafa.

[0006] The functional points of the existing technology do not meet the daily operation and maintenance requirements of confidential special equipment; the existing operation and maintenance management system is universal and supports operation and maintenance monitoring of Linux and Windows systems, but does not support operation and maintenance monitoring of confidential special computing platforms; there are performance and management efficiency bottlenecks when there are more than 1,000 confidential monitoring devices; the maintenance cost of custom scripts is high; and the scalability is poor. Summary of the invention

[0007] To this end, an embodiment of the present invention provides an operation and maintenance management system based on a special confidential computing platform to solve the problems of the existing operation and maintenance management based on the special confidential computing platform not meeting the daily operation and maintenance requirements of special confidential equipment, performance and management efficiency bottlenecks when there are more than 1,000 confidential monitoring devices, high maintenance costs of custom scripts, and poor scalability.

[0008] In order to achieve the above-mentioned purpose, the embodiment of the present invention provides the following technical solutions: an operation and maintenance management system based on a confidentiality-related special computing platform, the system comprising a client and a management terminal based on a B / S architecture;

[0009] The client includes multiple confidential special hardware and software resource objects. A data collector is installed in each managed resource device. The data collector is used to collect equipment-related operation and maintenance data and report it to the management end. The data collection adopts the UDP protocol;

[0010] The management end includes a topology management module, an asset management module, a monitoring management module, a report management module, and an alarm management module; the topology management module is used to perform topological management and unified display of the managed confidential special-purpose software and hardware resource objects; the asset management module is used to add, delete, modify and query the managed device nodes; the monitoring management module is used to manage the operating status of multiple confidential special-purpose software and hardware resource objects based on the collected operation and maintenance data; the report management module is used to generate, display and export reports of asset data, performance data and alarm data; the alarm management module is used to issue alarms based on the alarm thresholds of various equipment indicators, feedback alarm information, and handle alarm events.

[0011] Furthermore, the special-purpose confidential software and hardware resource objects include special-purpose confidential computers, special-purpose confidential servers, special-purpose confidential firewalls, special-purpose confidential IDS, special-purpose confidential network access control gateways, special-purpose confidential switches, special-purpose confidential routers, security databases and middleware, etc.

[0012] Furthermore, the management end also includes a log management module, which is used by the administrator to manage logs, including functions such as log retrieval and log export.

[0013] Furthermore, the management end also includes a data storage warehouse, which is used for writing monitoring data and querying complex monitoring data. The data storage warehouse is a time series database and adopts a non-relational database.

[0014] Furthermore, the management terminal also includes a user operation and visualization interface for providing a human-computer interaction interface for users to perform management.

[0015] Furthermore, the management end also includes a data processing engine, which is used to process time series data in the data storage warehouse, supports streaming processing and batch processing, and calculation of monitoring alarms, and can promptly notify operation and maintenance personnel of generated alarms.

[0016] Furthermore, the topology management module is specifically used to support customized manual drawing of topology according to the user's actual network architecture; supports topology layering, including primary topology and secondary topology; supports the association of network elements in the topology with layered topology. When the network element is associated with the topology, you can directly jump to the associated topology by clicking on the network element; supports topology maintenance functions, including adding and deleting network elements and links; supports the display of node and link status information, and supports alarm prompt functions for nodes with alarms; when the client sends abnormal data, the specific network element node in the topology prompts the client with abnormal information.

[0017] Furthermore, the report management module is specifically used to generate asset data according to network element name, IP address; generate real-time performance data according to network element name, IP address, etc.; and generate alarm data at least according to IP, alarm time, etc.

[0018] Furthermore, the data collector manages the running status of the special-purpose confidential computer through the dedicated collection interface standard, including operating system static information, dynamic information, processor information, memory information, file system information, network interface information, etc.; manages the running status of the special-purpose confidential server through the dedicated collection interface standard, including operating system static information, dynamic information, processor information, memory information, file system information, disk IO information, network interface information, process information, etc.; manages the running status of the special-purpose confidential network security equipment through the dedicated collection interface standard, including operating system static information, dynamic information, processor information, memory information and network interface information, etc., and the special-purpose confidential network security equipment includes firewalls, network access control gateways and IDS; manages the running status of the special-purpose confidential data communication equipment through the SNMP protocol v3 version, including equipment static information, dynamic information, processor information, memory information and network interface information, etc., and the special-purpose confidential data communication equipment includes switches and routers.

[0019] Furthermore, the asset management module is specifically used for operations such as adding, deleting, modifying and querying confidential special computers, confidential special servers, supporting confidential special network security equipment, confidential special data communication equipment, and security databases and middleware; supports prompts or alarms for inconsistencies between asset information and real information; and supports automatic discovery and uploading of device assets.

[0020] The embodiments of the present invention have the following advantages:

[0021] The present invention can effectively solve the performance and management efficiency bottlenecks when there are more than 1,000 confidential monitoring devices. Compared with other methods, it has better stability and the cluster solution has the following advantages:

[0022] Scalability: The server cluster used by the operation management end is highly scalable. As demand and load grow, more servers can be added to the cluster system. In such a configuration, multiple servers can perform the same application and database operations.

[0023] High availability: High availability refers to the ability to prevent system failures or automatically recover from failures without operator intervention. By transferring applications on failed servers to backup servers, cluster systems can increase normal operating time to greater than 99.9%, greatly reducing server and application downtime.

[0024] High manageability: System administrators can remotely manage one or even a group of clusters, just like in a single-machine system;

[0025] It is fully adaptable to special computers involving confidential information, and can monitor the special software and hardware resources in confidential information systems and issue alarms for abnormal status indicators. BRIEF DESCRIPTION OF THE DRAWINGS

[0026] In order to more clearly illustrate the implementation methods of the present invention or the technical solutions in the prior art, the following briefly introduces the drawings required for the implementation methods or the description of the prior art. Obviously, the drawings in the following description are only exemplary, and for ordinary technicians in this field, other implementation drawings can be derived from the provided drawings without creative work.

[0027] Figure 1 A structural diagram of an operation and maintenance management system based on a confidentiality-related special computing platform provided in Example 1 of the present invention. DETAILED DESCRIPTION

[0028] The following is a description of the implementation of the present invention by specific embodiments. People familiar with the art can easily understand other advantages and effects of the present invention from the contents disclosed in this specification. Obviously, the described embodiments are part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0029] Example 1

[0030] like Figure 1 As shown, this embodiment proposes an operation and maintenance management system based on a confidentiality-related special computing platform, and the system includes a client and a management terminal based on a B / S architecture.

[0031] The client includes multiple confidential software and hardware resource objects. Each managed resource device is equipped with a data collector, which is used to collect equipment-related operation and maintenance data and report it to the management end. Data collection uses the UDP protocol. The confidential software and hardware resource objects include confidential computers (including workstations), confidential servers, confidential firewalls, confidential IDS, confidential network access control gateways, confidential switches, confidential routers, security databases and middleware, etc.

[0032] The data collector is installed in the equipment that needs to be monitored. It is a data collection and data reporting tool that supports the plug-in mechanism. It can directly collect relevant operation and maintenance data from the system it runs. The reporting end uses the UDP protocol. UDP is a connectionless protocol. The source and the terminal do not establish a connection before transmitting data. When data needs to be transmitted, it is only necessary to simply grab the data from the application and throw it on the network as quickly as possible. The throughput is not regulated by the congestion control algorithm, but only by the rate at which the application software generates data, the transmission bandwidth, and the performance of the source and terminal hosts. This solves the limitations of the reporting performance of the traditional operation and maintenance system.

[0033] The data collector manages the running status of the special-purpose confidential computer through the dedicated collection interface standard, including operating system static information, dynamic information, processor information, memory information, file system information, network interface information, etc.; manages the running status of the special-purpose confidential server through the dedicated collection interface standard, including operating system static information, dynamic information, processor information, memory information, file system information, disk IO information, network interface information, process information, etc.; manages the running status of the special-purpose confidential network security equipment through the dedicated collection interface standard, including operating system static information, dynamic information, processor information, memory information and network interface information, etc., and the special-purpose confidential network security equipment includes firewalls, network access control gateways and IDS; manages the running status of the special-purpose confidential data communication equipment through the SNMP protocol v3 version, including equipment static information, dynamic information, processor information, memory information and network interface information, etc., and the special-purpose confidential data communication equipment includes switches and routers.

[0034] The management end includes a topology management module, an asset management module, a monitoring management module, a report management module, and an alarm management module.

[0035] The topology management module is used to perform topology management and unified display of managed confidential special software and hardware resource objects. When a managed node has an alarm, it can provide an intuitive and vivid prompt in the topology in real time.

[0036] The topology management module is specifically used to support customized manual drawing of topology according to the user's actual network architecture; support topology layering, including primary topology and secondary topology; support the association of network elements in the topology with layered topology. When the network element is associated with the topology, you can directly jump to the associated topology by clicking on the network element; support topology maintenance functions, including adding and deleting network elements and links; support the display of node and link status information, and support the alarm prompt function for nodes with alarms; when the client sends abnormal data, the specific network element node in the topology prompts the client with abnormal information.

[0037] The asset management module is used to add, delete, modify and query managed device nodes.

[0038] The asset management module is specifically used for operations such as adding, deleting, modifying and querying confidential special computers (including workstations), confidential special servers, supporting confidential special network security equipment (firewalls, network access control gateways and IDS), confidential special data communication equipment (switches and routers), and security databases and middleware; supports prompts or alarms when asset information is inconsistent with real information; supports automatic discovery and upload of equipment assets to solve the problem of redundant configuration of traditional operation and maintenance systems.

[0039] The report management module is specifically used to generate asset data according to network element name, IP address; generate real-time performance data according to network element name, IP address, etc.; and generate alarm data at least according to IP, alarm time, etc.

[0040] The monitoring and management module is used to manage the operating status of multiple confidential special-purpose software and hardware resource objects according to the collected operation and maintenance data. Specifically, the operating status of confidential special-purpose computers (including workstations), confidential special-purpose servers, confidential special-purpose firewalls, confidential special-purpose IDS, confidential special-purpose access control gateways, confidential special-purpose switches, confidential special-purpose routers and other resources is managed through the dedicated collection interface standard, including operating system static information, dynamic information, processor information, memory information, file system information, network interface information, etc.

[0041] When an exception occurs in the client program and exceeds the set collection period, relevant prompts (such as offline, etc.) will be given in the monitoring management, topology management and other real-time data related interfaces, and empty or initialized data will be displayed.

[0042] The report management module is used for generating, displaying and exporting reports of asset data, performance data and alarm data.

[0043] The alarm management module is used to generate alarms according to the alarm thresholds of various equipment indicators, feedback alarm information, and handle alarm events.

[0044] The consideration of alarm strategy configuration is based on flexibility and maintainability. New technologies such as hybrid architecture and microservices have given rise to more modern business system technology stacks, which puts higher demands on the flexibility of alarm strategies. Alarm strategies support advanced functions such as conditional alarms, combined conditional alarms, year-on-year and month-on-month comparisons, regression, and linear fitting.

[0045] The management terminal also includes a log management module, which is used by administrators to manage logs, including functions such as log retrieval and log export. The administrator operation log content is in Chinese and has good readability. The log management has functions such as log retrieval and log export, and the log export can export log data.

[0046] The management end also includes a data storage warehouse, which is used for writing monitoring data and querying complex monitoring data. The data storage warehouse is a time series database and adopts a non-relational database. The traditional operation and maintenance system adopts a relational database similar to MySQL, which is mainly used to store persistent data and store data in a hard disk, and the reading speed is slow. In the present invention, Redis is adopted, which is a non-relational database and also a cache database, that is, data is stored in a cache, and the cache has a fast reading speed, which can greatly improve the operation efficiency.

[0047] The management end also includes a user operation and visualization interface, which is used to provide a human-computer interaction interface for users to manage. The user operation interface is the entrance to the user management monitoring system. It must make the management of monitoring indicators and alarms easy to use and maintainable; the data visualization interface is responsible for providing the display of monitoring data. It must support the necessary time series data display methods and support flexible query capabilities to a certain extent. The C / S architecture used in traditional operation and maintenance requires the same operating system. If different versions are developed for different operating systems, the computer configuration requirements are also high, and the portability is poor. Poor compatibility has great limitations for different development tools. If different tools are used, the program needs to be rewritten. The present invention adopts a B / S architecture, allowing users to use different devices as the entrance to the monitoring system. B / S has the following advantages: strong distribution and zero maintenance on the client. As long as there is a network and a browser, business processing such as query and browsing can be performed anytime and anywhere.

[0048] The management end also includes a data processing engine, which is used to process time series data in the data storage warehouse, supports streaming processing and batch processing, and calculates monitoring alarms, and can promptly notify operation and maintenance personnel of generated alarms.

[0049] The present invention can effectively solve the performance and management efficiency bottlenecks when there are more than 1,000 confidential monitoring devices. Compared with other methods, it has better stability and the cluster solution has the following advantages:

[0050] Scalability: The server cluster used by the operation management end is highly scalable. As demand and load grow, more servers can be added to the cluster system. In such a configuration, multiple servers can perform the same application and database operations.

[0051] High availability: High availability refers to the ability to prevent system failures or automatically recover from failures without operator intervention. By transferring applications on failed servers to backup servers, cluster systems can increase normal operating time to greater than 99.9%, greatly reducing server and application downtime.

[0052] High manageability: System administrators can remotely manage one or even a group of clusters, just like in a single-machine system;

[0053] It is fully adaptable to special computers involving confidential information, and can monitor the special software and hardware resources in confidential information systems and issue alarms for abnormal status indicators.

[0054] Although the present invention has been described in detail above by general description and specific embodiments, it is obvious to those skilled in the art that some modifications or improvements can be made to the present invention. Therefore, these modifications or improvements made without departing from the spirit of the present invention all belong to the scope of protection claimed by the present invention.

Claims

1. An operation and maintenance management system based on a confidential special computing platform, characterized in that: The system includes a client and a management terminal based on a B / S architecture; The client includes multiple confidential special hardware and software resource objects. A data collector is installed in each managed resource device. The data collector is used to collect equipment-related operation and maintenance data and report it to the management end. The data collection adopts the UDP protocol; The management end includes a topology management module, an asset management module, a monitoring management module, a report management module, and an alarm management module; the topology management module is used to perform topological management and unified display of the managed confidential special software and hardware resource objects; the asset management module is used to add, delete, modify and query the managed device nodes; the monitoring management module is used to manage the operating status of multiple confidential special software and hardware resource objects based on the collected operation and maintenance data; the report management module is used to generate, display and export reports of asset data, performance data and alarm data; the alarm management module is used to issue alarms according to the alarm thresholds of various equipment indicators, feedback alarm information, and handle alarm events; The confidential special software and hardware resource objects include confidential special computers, confidential special servers, confidential special firewalls, confidential special IDS, confidential special network access control gateways, confidential special switches, confidential special routers, security databases and middleware; The management terminal also includes a log management module, which is used by the administrator to manage logs, including log retrieval and log export functions; The management end also includes a data storage warehouse, which is used for writing monitoring data and querying complex monitoring data. The data storage warehouse is a time series database and adopts a non-relational database; The management terminal also includes a user operation and visualization interface, which is used to provide a human-computer interaction interface for users to perform management; The management end also includes a data processing engine, which is used to process time series data in the data storage warehouse, supports stream processing and batch processing, and calculates monitoring alarms, and can promptly notify the operation and maintenance personnel of the generated alarms; The topology management module is specifically used to support the manual drawing of topology according to the user's actual network architecture; support topology layering, including primary topology and secondary topology; support the association of network elements in the topology with the layered topology. When the network element is associated with the topology, you can directly jump to the associated topology by clicking on the network element; Supports topology maintenance functions, including adding and deleting network elements and links; supports displaying node and link status information, and supports alarm prompts for nodes with alarms; when the client sends abnormal data, the specific network element node in the topology prompts the client with abnormal information; The report management module is specifically used to generate asset data according to network element name and IP address; real-time performance data according to network element name and IP address; alarm data at least according to IP and alarm time; The data collector manages the operation status of the confidential special computer through the special collection interface standard, including operating system static information, dynamic information, processor information, memory information, file system information, and network interface information; The operation status of the secret-related special server is managed through the dedicated acquisition interface standard, including the operating system static information, dynamic information, processor information, memory information, file system information, disk IO information, network interface information, and process information; the operation status of the secret-related special network security equipment is managed through the dedicated acquisition interface standard, including the operating system static information, dynamic information, processor information, memory information, and network interface information, and the secret-related special network security equipment includes firewalls, network access control gateways, and IDS; the operation status of the secret-related special data communication equipment is managed through the SNMP protocol v3 version, including the equipment static information, dynamic information, processor information, memory information, and network interface information, and the secret-related special data communication equipment includes switches and routers; The asset management module is specifically used for adding, deleting, modifying and querying confidential computers, confidential servers, confidential network security equipment, confidential data communication equipment, and security databases and middleware; Supports prompts or alarms when asset information is inconsistent with the actual information; supports automatic discovery and upload of device assets.

Images