A software SDN network specification statistics method and system

Abstract

This specification relates to the field of information network technology, and provides a software SDN network specification statistics method and system, which relates to the field of network specification statistics. The method includes: obtaining a first API interface type of a first cloud computing management platform; obtaining a first data request, and collecting various types of data for the first API interface type according to the first data request to obtain a first data set, wherein the various types of data include: number of subnets, number of ports, elastic load balancing entries, and virtual firewall entry specification data; obtaining a first data statistics instruction; and collecting statistics on the first data set according to the first data statistics instruction to obtain a first statistical report. The technical problem that as the scale of the SDN network grows, various specifications have over-threshold risks, risk data cannot be automatically collected and counted, and network security monitoring is inefficient is solved.

Description

Technical Field

[0001] The present invention relates to the field of information networks, and in particular to a software SDN network specification statistics method and system. Background Art

[0002] Software Defined Network (SDN) is a new network innovation architecture and a way to implement network virtualization. Its core technology OpenFlow separates the control plane from the data plane of network devices, thereby achieving flexible control of network traffic, making the network as a pipeline more intelligent, and providing a good platform for the innovation of core networks and applications. Using the idea of ​​layering, SDN separates data from control. In the control layer, it includes a logically centralized and programmable controller that can grasp global network information, making it convenient for operators and researchers to manage and configure networks and deploy new protocols. OpenStack is an open source cloud computing management system. The project goal is to provide a cloud computing management platform that is simple to implement, scalable, rich, and standardized. Its main functions are implemented by multiple core components. Each component provides an API interface to the outside world. Users can complete the use of various basic functions and secondary development by calling the OpenStack API. In the software SDN network based on OpenStack, there are restrictions on specifications such as the number of subnets, the number of ports, elastic load balancing entries, and virtual firewall entries. As the scale of the network grows, the above specifications have the risk of exceeding the threshold, which may cause the OpenStack system to run unstably. Therefore, the tool is required to periodically collect and display network specification data. Summary of the invention

[0003] In view of the fact that the above-mentioned specifications have the risk of exceeding the threshold value, which may cause the problem of unstable operation of the OpenStack system, the present invention is proposed to provide a solution to overcome the above-mentioned problem or at least partially solve the above-mentioned problem, so that the tool can periodically collect network specification data, thereby realizing stable operation of the system, improving the global control of the software SDN network by the operation and maintenance personnel, and improving the technical effect of improving the operation and maintenance efficiency.

[0004] According to one aspect of the present invention, a method for counting software SDN network specifications is provided, the method comprising:

[0005] Obtain a first API interface type of a first cloud computing management platform;

[0006] Obtain a first data request, and collect various types of data for the first API interface type according to the first data request to obtain a first data set, wherein the various types of data include: number of subnets, number of ports, elastic load balancing entries, and virtual firewall entry specification data;

[0007] Obtaining a first data statistics instruction;

[0008] Statistics are performed on the first data set according to the first data statistics instruction to obtain a first statistical report.

[0009] Preferably, the method for obtaining the first API interface type of the first cloud computing management platform further includes:

[0010] Acquire first account information, and acquire a first field from the first account information;

[0011] Get the first API service authorization information;

[0012] The first API interface type is obtained according to the first API service authorization information.

[0013] Preferably, the first data set has a first data structure, and the first data structure is a three-layer data structure.

[0014] Preferably, according to the first data request, collecting data of various categories for the first API interface type to obtain a first data set, the method further includes:

[0015] Acquire a second data set, where the second data set is raw data acquired according to the first data acquisition instruction;

[0016] Acquire a first data structure model;

[0017] The second data set is stored in the first data structure model to obtain the first data set.

[0018] Preferably, the method further comprises:

[0019] Define preset specification thresholds;

[0020] Determine whether each data set of each specification category in the first data set is within the preset specification threshold;

[0021] If the data sets are not within the preset specification threshold, obtaining a third data set that is not within the preset specification threshold;

[0022] A first marking instruction is obtained, and the third data set is marked according to the first marking instruction.

[0023] Preferably, the method further comprises:

[0024] Obtaining a first specification category of the third data set;

[0025] generating a first warning report based on the third data set and the first specification category;

[0026] The first warning report is sent to the first cloud computing management platform.

[0027] Preferably, the acquisition of the first data acquisition instruction has a first cycle.

[0028] According to another aspect of the present invention, a software SDN network specification statistics system is provided, the system comprising:

[0029] A first acquisition unit, the first acquisition unit is used to acquire a first API interface type of a first cloud computing management platform;

[0030] A second acquisition unit, the second acquisition unit is used to acquire a first data request, and according to the first data request, collect various types of data for the first API interface type to acquire a first data set, wherein the various types of data include: subnet number, port number, elastic load balancing entry, and virtual firewall entry specification data;

[0031] A third acquisition unit, the third acquisition unit is used to acquire the first data statistics instruction;

[0032] A fourth acquisition unit, the fourth acquisition unit is used to perform statistics on the first data set according to the first data statistics instruction to obtain a first statistical report.

[0033] According to another aspect of the present invention, a software SDN network specification statistics method and system are provided, comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor implements the steps of the method according to any one of claims 1 to 7 when executing the program.

[0034] According to another aspect of the present invention, a computer-readable storage medium is provided, on which a computer program is stored. When the computer program is executed by a processor, any method of the first aspect is executed.

[0035] One or more technical solutions provided by the present invention have at least the following technical effects:

[0036] 1. The first API interface type of the first cloud computing management platform is obtained; the first data request is obtained, and various categories of data are collected for the first API interface type according to the first data request to obtain the first data set, wherein the various categories of data include: number of subnets, number of ports, elastic load balancing entries, and virtual firewall entry specification data; the first data statistics instruction is obtained; the first data set is counted according to the first data statistics instruction to obtain the first statistical report. The technical problem that as the scale of the SDN network grows, various specifications have over-threshold risks, risk data cannot be automatically collected and counted, and network security monitoring efficiency is low is solved. The tool periodically collects network specification data, thereby realizing stable system operation, obtaining various specification data in real time, counting according to data categories, and generating reports to make data more intuitive to view, thereby improving the overall control of the software SDN network by the operation and maintenance personnel and improving the technical effect of operation and maintenance efficiency.

[0037] 2. The tool can periodically collect network specification data to realize automatic collection and statistics of various specifications of the software SDN network, remove restrictions on specifications such as the number of subnets, the number of ports, elastic load balancing entries, virtual firewall entries, etc., make the system stable, improve the operation and maintenance personnel's global control over the software SDN network, and improve operation and maintenance efficiency.

[0038] The above description is only an overview of the technical solution of the present invention. In order to more clearly understand the technical means of the present invention, it can be implemented according to the contents of the specification. In order to make the above and other purposes, features and advantages of the present invention more obvious and easy to understand, the specific implementation methods of the present invention are listed below. BRIEF DESCRIPTION OF THE DRAWINGS

[0039] In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.

[0040] Figure 1 A flowchart of a software SDN network specification statistics method provided in an embodiment of the present application;

[0041] Figure 2 A schematic diagram of a process of marking a third data set in a software SDN network specification statistics method provided in an embodiment of the present application;

[0042] Figure 3A schematic diagram of a process of sending the first warning report to the first cloud computing management platform in a software SDN network specification statistics method provided in an embodiment of the present application;

[0043] Figure 4 A schematic diagram of the structure of a software SDN network specification statistics system provided in an embodiment of the present application;

[0044] Figure 5 A schematic diagram of a computer device of a software SDN network specification statistics tool provided in an embodiment of the present application.

[0045]

Description of the accompanying drawings

[0046] 11. A first acquisition unit;

[0047] 12. A second acquisition unit;

[0048] 13. The third acquisition unit;

[0049] 14. Fourth acquisition unit;

[0050] 1002. Computer equipment;

[0051] 1004. Processor;

[0052] 1006. Memory;

[0053] 1008. Driving mechanism;

[0054] 1010, input / output module;

[0055] 1012. Input device;

[0056] 1014. Output device;

[0057] 1016. Presentation equipment;

[0058] 1018. Graphical User Interface (GUI);

[0059] 1020. Network interface;

[0060] 1022. Communication link;

[0061] 1024. Communication bus. DETAILED DESCRIPTION

[0062] The technical solutions in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, rather than all of the embodiments. It should be understood that the present application is not limited to the example embodiments described herein. Based on the embodiments of the present application, all other embodiments obtained by ordinary technicians in this field without making creative work are within the scope of protection of the present application. It should also be noted that, for ease of description, only the parts related to the present application are shown in the drawings, rather than all of them.

[0063] A new network innovation architecture is proposed, which is a way to implement network virtualization. Its core technology OpenFlow separates the control plane from the data plane of network devices, thereby realizing flexible control of network traffic, making the network as a pipeline more intelligent, and providing a good platform for the innovation of core networks and applications. Using the idea of ​​layering, SDN separates data from control. In the control layer, it includes a logically centralized and programmable controller, which can grasp the global network information, facilitate operators and researchers to manage and configure the network and deploy new protocols. OpenStack is an open source cloud computing management system. The project aims to provide a cloud computing management platform that is simple to implement, scalable, rich, and standardized. Its main functions are implemented by multiple core components. Each component provides an API interface to the outside world. Users can complete the use of various basic functions and secondary development by calling the OpenStack API. In the software SDN network based on OpenStack, there are restrictions on category data such as the number of subnets, the number of ports, elastic load balancing entries, and virtual firewall entries. As the network scale grows, the above specifications have the risk of exceeding the threshold, which may cause the OpenStack system to run unstably. Therefore, the tool is required to periodically collect and display network specification data.

[0064] In view of the fact that the above-mentioned specifications have the risk of exceeding the threshold value, which may cause the problem of unstable operation of the OpenStack system, the present invention is proposed to provide a solution to overcome the above-mentioned problem or at least partially solve the above-mentioned problem, so that the tool can periodically collect network specification data, thereby realizing stable operation of the system, improving the global control of the software SDN network by the operation and maintenance personnel, and improving the technical effect of improving the operation and maintenance efficiency.

[0065] After introducing the basic principles of the present application, various non-limiting implementation methods of the present application will be specifically described below in conjunction with the drawings in the specification.

[0066] See attached Figure 1 , an embodiment of the present invention provides a software SDN network specification statistics method, the method comprising:

[0067] Step S100: Acquire a first API interface type of a first cloud computing management platform;

[0068] Step S200: Obtain a first data request, and collect various types of data for the first API interface type according to the first data request to obtain a first data set, wherein the various types of data include: number of subnets, number of ports, elastic load balancing entries, and virtual firewall entry specification data;

[0069] Specifically, the cloud computing management platform is also called a cloud management platform, also known as CMP (Cloud Management Platform), which is a concept proposed by Gartner, a well-known IT research organization in the industry, in 2016. As the name implies, the purpose of the cloud computing management platform is to enable users to better manage cloud computing resources such as public clouds and private clouds. The API interface is a middleware used to collect data. The first API interface type is divided into four types: remote procedure call, standard query language, file transfer, and information delivery. It can be applied in the actual cloud computing management platform according to the specific role of the interface. The system first obtains the first cloud computing management platform. OpenStack is an open source cloud computing management system. Its main functions are jointly implemented by multiple core components. Each component provides an API interface to the outside. In order to further collect data, all first API interface types of the first cloud computing management platform must be obtained first. The types of each interface are not all the same, and the data types collected will be different. Therefore, it is necessary to match the collection functions of various types of data according to the first API interface type. By calling the OpenStack API, data such as subnets, ports, elastic load balancing, virtual firewalls, etc. are collected, and then the use of various basic functions and secondary development are completed, laying the foundation for data collection.

[0070] Step S300: obtaining a first data statistics instruction;

[0071] Step S400: performing statistics on the first data set according to the first data statistics instruction to obtain a first statistical report.

[0072] Specifically, the system first determines the data specifications and types that need to be collected, and uses the interface of the same type as the first API interface of the first cloud computing management platform to collect the target information. After the system has determined the type of data information that needs to be collected, the system will generate an instruction to enable the information collection device to collect the required information, which is recorded as the first data collection instruction. Based on the first data collection instruction, the system calls the matching first API interface type to enable the collection device to collect each category of data information in the first data collection type.

[0073] Further, the RESTful request is a network API interface, and the RESTful URL is resource-oriented and has the function of uniquely identifying and locating resources. There are 4 request methods, including get, post, put, and delete. They correspond to obtaining resources, adding resources, updating resources, and deleting resources respectively. In this embodiment, it is used to obtain resources and identify them, which belongs to the first data request. Construct a RESTful request to query the subnet, port, and VPC peering, construct a RESTful request to query the virtual firewall (vfw), virtual firewall policy (vfw policy), and virtual firewall rule (vfw rule), construct a RESTful request to query elastic load balancing, and collect vpc (subnet, port, vpc peeing, etc.), vfw (group, policy,), elb and other data by calling the API open to the outside world of OpenStack. After the above query is completed, it is stored in a pre-defined data structure to complete the collection of various resource information. The original data is merged and sorted to form a highly readable network specification report, refer to Table 1, Table 2, and Table 3. The collected data information is sorted and archived to form a first data set. At this time, the system generates a first data statistics instruction to count the various types of resource information obtained, so that the data target is clear and readable. After obtaining the first data statistics instruction, the system merges and organizes the original data of various types of resource information, and counts the first data set according to the preset specification threshold, and counts the resource data obtained by calling the API. Through this method, the automatic collection and statistics of various specifications of the software SDN network are realized, which improves the global control of the operation and maintenance personnel over the software SDN network and improves the operation and maintenance efficiency.

[0074] Table 1 Query subnet related data information

[0075]

[0076] Table 2 Query port related data information

[0077]

[0078]

[0079] Table 3 Query VPC peering related data information

[0080]

[0081] Furthermore, the step S100 of obtaining the first API interface type of the first cloud computing management platform in the embodiment of the present application further includes:

[0082] Step S110: obtaining first account information, and obtaining a first field from the first account information;

[0083] Step S120: Obtain first API service authorization information;

[0084] Step S130: Acquire the first API interface type according to the first API service authorization information.

[0085] Specifically, the first account information refers to the user information for obtaining the required data, such as parameter name, parameter position, parameter type and other feature descriptions. The first field refers to the data recorded in the database of the first account information, and there is no special record name. Therefore, the field is often used to indicate the row number to indicate which record it is. The first API service authorization information includes the first field, which is the "key" for obtaining the first account information. The system first obtains the first field by obtaining the first account information, and then obtains the first API service authorization information. In OpenStack, the message header of each API call request must contain the "X-Auth-Token" field, which must be obtained using a pre-defined account and belongs to the first field. Construct a RESTful request to query the subnet, port, VPC peering, construct a RESTful request to query the virtual firewall (vfw), virtual firewall policy (vfwpolicy), virtual firewall rule (vfw rule), construct a RESTful request to query elastic load balancing, and then obtain the first API interface type. Collect the first data set. Using the idea of ​​layering, SDN separates data from control. The control layer includes logically centralized and programmable controllers that can grasp global network information, making it easier for operators and researchers to manage and configure networks and deploy new protocols.

[0086] Furthermore, step S200 in the embodiment of the present application further includes:

[0087] Step S210: The first data set has a first data structure, and the first data structure is a three-layer data structure.

[0088] Specifically, the original data is merged and sorted to form a three-layer data structure with region->project->vpc / vfw / elb as the model. Layering means grouping functions in an orderly manner: application-specific functions are located in the upper layer, functions that cross the application domain are located in the middle layer, and configuration environment-specific functions are located in the lower layer. Layering logically divides subsystems into many sets, and the formation of inter-layer relationships must follow certain rules. Through layering, the dependencies between subsystems can be limited, so that the system can be coupled in a looser way, making it easier to maintain. The grouping standard of subsystems includes the following rules: visibility. Each subsystem can only have dependencies with the subsystems of the same layer and the layer below it. Using the idea of ​​layering, SDN separates data from control. In the control layer, it includes controllers with logical centralization and programmability, which can grasp global network information, facilitate operators and researchers to manage and configure networks and deploy new protocols, etc. In the data layer, it includes dumb switches (different from traditional layer 2 switches, which refer to devices specifically used to forward data), which only provide simple data forwarding functions, can quickly process matching data packets, and adapt to the growing demand for traffic. The two layers interact with each other using an open unified interface (such as OpenFlow). The controller sends unified standard rules to the switch through a standard interface, and the switch only needs to perform corresponding actions according to these rules. The three-tier application puts business rules, data access, and legality verification into the middle layer for processing. Usually, the client does not interact directly with the database, but establishes a connection with the middle layer through COM / DCOM communication, and then interacts with the database through the middle layer, which greatly improves the security of the system. The three-tier application is more able to adapt to the growing complexity and flexibility of enterprise-level applications, and through the principles of high cohesion and low coupling of software layering, it can achieve the requirements of expansion, maintenance and reuse, which can greatly improve development efficiency.

[0089] Furthermore, after collecting data of various categories for the first API interface type according to the first data request and obtaining the first data set, the embodiment of the present application further includes:

[0090] Step S220: Acquire a second data set, where the second data set is raw data acquired according to the first data acquisition instruction;

[0091] Step S230: obtaining a first data structure model;

[0092] Step S240: storing the second data set into the first data structure model to obtain the first data set.

[0093] Specifically, the raw data is data in the user database, or various data stored and used by the terminal user, which is data that has not been processed or simplified, and the data may or may not be in a machine-readable form. It constitutes physically existing data. In the database, it generally exists in several basic data types. The system first obtains the collected data information obtained by the first data collection instruction, that is, the raw data information, which is recorded as the second data set. The first data structure model is obtained, and the first data structure model is to merge and organize the raw data to form a three-layer data structure with region->project->vpc / vfw / elb as the model. The second data set is used as training data to construct the first data structure model, which is a neural network model with the characteristics of continuous learning and acquisition of experience to process data. By using the second data set as the input data set and inputting it into the first data structure model, the neural network model itself is continuously corrected and optimized through the training data, and the accuracy of the neural network model in processing the data is improved through the process of supervised learning, thereby making the first data set more accurate.

[0094] Furthermore, if Figure 2 As shown, the embodiment of the present application further specifically includes:

[0095] Step S510: defining a preset specification threshold;

[0096] Step S520: determining whether each data set of each specification category in the first data set is within the preset specification threshold;

[0097] Step S530: if the data sets are not within the preset specification threshold, obtaining a third data set that is not within the preset specification threshold;

[0098] Step S540: Obtain a first marking instruction, and mark the third data set according to the first marking instruction.

[0099] Specifically, the system first defines various specification thresholds, and defines the warning thresholds of corresponding resources according to the carrying capacity of the OpenStack software. For example, the number of VPC-Peering in the VPC: 50; the number of Subnets in the VPC: 150; the number of Ports in the VPC: 5000, etc. The resource data obtained by calling the aforementioned API is counted and compared with various preset thresholds to determine whether each data set of each specification category in the first data set is within the preset specification threshold. If each data set is within the preset specification threshold, it indicates that each type of data resource does not exceed the warning value; if each data set is not within the preset specification threshold, it indicates that each type of data resource exceeds the warning value, and then a third data set that is not within the preset specification threshold can be obtained, and the third data set is marked to highlight it in the report, so the first marking instruction is obtained to mark the third data set, so that the statistical report is more accurate.

[0100] Furthermore, if Figure 3 As shown, the embodiment of the present application further specifically includes:

[0101] Step S610: Acquire a first specification category of the third data set;

[0102] Step S620: generating a first warning report based on the third data set and the first specification category;

[0103] Step S630: Send the first warning report to the first cloud computing management platform.

[0104] Specifically, the warning refers to the restrictions on specifications such as the number of subnets, the number of ports, elastic load balancing entries, virtual firewall entries, etc. in the software SDN network based on OpenStack. As the scale of the network grows, there is a risk of exceeding the threshold value for the above specifications, which may cause unstable operation of the OpenStack system. Therefore, a warning is issued for the existing over-threshold risk items. The first specification type refers to the specific category of data in the third data set, such as the number of subnets, the number of ports, elastic load balancing entries, virtual firewall entries and other specifications. The first warning report refers to organizing and summarizing the data of the third data set according to the first specification category, and statistically analyzing the data according to its data classification characteristics to generate a table.

[0105] Further, after the system obtains each data set of each specification category in the first data set, it compares each data set of each specification category in the first data set with the preset specification threshold to determine whether each data set of each specification category in the first data set is within the preset specification threshold. If each data set is not within the preset specification threshold, a third data set that is not within the preset specification threshold is obtained. After obtaining the third data set, the system generates a first marking instruction, and marks the third data set according to the first marking instruction, so that it is more prominent and clear in the report. For resources that exceed the warning value, a warning report is formed. The first warning information means that after obtaining the first warning information instruction, the system will count the first data set. For example, the warning thresholds of each category in the VPC are VPC-Peering number: 50; Subnet number: 150; Port number: 5000. If when counting the number of each category in the VPC, VPC-Peering number: 56; Subnet number: 135; Port number: 4000. At this time, if the number of VPC-Peering exceeds the warning threshold, the data will be marked and highlighted, and the data exceeding the threshold will be reorganized to generate an early warning report, which will be further sent to the platform to improve operation and maintenance efficiency.

[0106] Furthermore, the embodiment of the present application also includes:

[0107] The acquisition of the first data acquisition instruction has a first cycle.

[0108] Specifically, in the software SDN network based on OpenStack, there are restrictions on specifications such as the number of subnets, the number of ports, elastic load balancing entries, virtual firewall entries, etc. As the scale of the network grows, the above specifications have the risk of exceeding the threshold, which may cause the OpenStack system to run unstably. Therefore, the tool is required to periodically collect and display network specification data. Only when the first data collection instruction is periodic can the first cloud computing management platform system run stably. By periodically collecting network specification data, it is possible to issue warnings for various types of data that have the risk of exceeding the threshold, thereby improving operation and maintenance efficiency.

[0109] Based on the same inventive concept as the software SDN network specification statistics method in the aforementioned embodiment, the present invention also provides a software SDN network specification statistics system, such as Figure 4 As shown, the system comprises:

[0110] A first acquisition unit 11, wherein the first acquisition unit 11 is used to acquire a first API interface type of a first cloud computing management platform;

[0111] The second acquisition unit 12 is used to acquire a first data request, and collect various types of data for the first API interface type according to the first data request to acquire a first data set, wherein the various types of data include: subnet number, port number, elastic load balancing entry, and virtual firewall entry specification data;

[0112] A third acquisition unit 13, the third acquisition unit 13 is used to acquire a first data statistics instruction;

[0113] The fourth acquisition unit 14 is used to perform statistics on the first data set according to the first data statistics instruction to obtain a first statistical report.

[0114] Furthermore, the system also includes:

[0115] a fifth acquiring unit, the fifth acquiring unit being configured to acquire first account information, and acquire a first field from the first account information;

[0116] A sixth acquisition unit, the sixth acquisition unit is used to acquire the first API service authorization information;

[0117] A seventh acquisition unit, wherein the seventh acquisition unit is used to acquire the first API interface type according to the first API service authorization information.

[0118] Furthermore, the system also includes:

[0119] An eighth acquisition unit, wherein the first data set has a first data structure, and the first data structure is a three-layer data structure.

[0120] Furthermore, the system also includes:

[0121] a ninth acquisition unit, the ninth acquisition unit being used to acquire a second data set, where the second data set is raw data acquired according to the first data acquisition instruction;

[0122] a tenth acquiring unit, configured to acquire a first data structure model;

[0123] An eleventh obtaining unit, the eleventh obtaining unit is used to store the second data set into the first data structure model to obtain the first data set.

[0124] Furthermore, the system also includes:

[0125] A first definition unit, the first definition unit is used to define a preset specification threshold;

[0126] A first judgment unit, the first judgment unit is used to judge whether each data set of each specification category in the first data set is within the preset specification threshold;

[0127] a twelfth acquisition unit, the twelfth acquisition unit being configured to acquire a third data set that is not within the preset specification threshold if the data sets are not within the preset specification threshold;

[0128] A thirteenth acquiring unit is used to acquire a first marking instruction, and mark the third data set according to the first marking instruction.

[0129] Furthermore, the system also includes:

[0130] a fourteenth obtaining unit, the fourteenth obtaining unit being used to obtain a first specification category of the third data set;

[0131] a first generating unit, the first generating unit being configured to generate a first warning report based on the third data set and the first specification category;

[0132] A first sending unit, wherein the first sending unit is used to send the first warning report to the first cloud computing management platform.

[0133] Furthermore, the system also includes:

[0134] A fifteenth acquisition unit, wherein the fifteenth acquisition unit is used for acquiring the first data acquisition instruction and has a first cycle.

[0135] The foregoing Figure 1 The various variations and specific examples of a software SDN network specification statistics method in Example 1 are also applicable to a software SDN network specification statistics system in this embodiment. Through the above detailed description of a software SDN network specification statistics method, those skilled in the art can clearly understand the implementation method of a software SDN network specification statistics system in this embodiment, so for the sake of brevity of the specification, it will not be described in detail here.

[0136] In one embodiment of this invention, Figure 5As shown, a computer device is also provided, and the computer device 1002 may include one or more processors 1004, such as one or more central processing units (CPUs), and each processing unit may implement one or more hardware threads. The computer device 1002 may also include any memory 1006, which is used to store any kind of information such as code, settings, data, etc. Non-limitingly, for example, the memory 1006 may include any one or more combinations of the following: any type of RAM, any type of ROM, flash memory device, hard disk, optical disk, etc. More generally, any memory may use any technology to store information. Further, any memory may provide volatile or non-volatile retention of information, and a computer program that can be run on the processor 1004 is stored on the memory 1006, and the method described in any of the aforementioned embodiments is implemented when the processor 1004 executes the computer program. Further, any memory may represent a fixed or removable component of the computer device 1002. In one case, when the processor 1004 executes an associated instruction stored in any memory or a combination of memories, the computer device 1002 may perform any operation of the associated instruction. The computer device 1002 also includes one or more drive mechanisms 1008 for interacting with any storage, such as a hard disk drive mechanism, an optical disk drive mechanism, etc.

[0137] The computer device 1002 may also include an input / output module 1010 (I / O) for receiving various inputs (via input device 1012) and for providing various outputs (via output device 1014). A specific output mechanism may include a presentation device 1016 and an associated graphical user interface (GUI) 1018. In other embodiments, the input / output module 1010 (I / O), input device 1012, and output device 1014 may not be included, and the computer device 1002 may be used as a computer device in a network. The computer device 1002 may also include one or more network interfaces 1020 for exchanging data with other devices via one or more communication links 1022. One or more communication buses 1024 couple the components described above together.

[0138] The communication link 1022 may be implemented in any manner, for example, through a local area network, a wide area network (e.g., the Internet), a point-to-point connection, etc., or any combination thereof. The communication link 1022 may include any combination of hardwired links, wireless links, routers, gateway functions, name servers, etc. governed by any protocol or combination of protocols.

[0139] The embodiments of the present invention further provide a computer-readable storage medium, on which a computer program is stored. When the computer program is executed by a processor, a software SDN network specification statistics method described in any of the above embodiments is executed.

[0140] The embodiment of the present invention further provides a computer-readable instruction, wherein when a processor executes the instruction, the program therein causes the processor to execute a software SDN network specification statistics method described in any of the above examples.

[0141] This application provides a software SDN network specification statistics method, which solves the technical problems that as the scale of the SDN network grows, various specifications have over-threshold risks, risk data cannot be automatically collected and counted, and network security monitoring is inefficient. The tool periodically collects network specification data, thereby achieving stable system operation, obtaining each specification data in real time, and generating reports based on data categories, making the data more intuitive to view, thereby improving the overall control of the software SDN network by operation and maintenance personnel and improving the technical effect of operation and maintenance efficiency.

[0142] It should be understood that in various embodiments of the present invention, the size of the serial numbers of the above-mentioned processes does not mean the order of execution. The execution order of each process should be determined by its function and internal logic, and should not constitute any limitation on the implementation process of the embodiments of the present invention.

[0143] It should also be understood that in the embodiments of the present invention, the term "and / or" is only a description of the association relationship of the associated objects, indicating that three relationships may exist. For example, A and / or B can represent: A exists alone, A and B exist at the same time, and B exists alone. In addition, the character " / " in this article generally indicates that the associated objects before and after are in an "or" relationship.

[0144] Those of ordinary skill in the art will appreciate that the units and algorithm steps of each example described in conjunction with the embodiments disclosed herein can be implemented in electronic hardware, computer software, or a combination of the two. In order to clearly illustrate the interchangeability of hardware and software, the composition and steps of each example have been generally described in terms of function in the above description. Whether these functions are performed in hardware or software depends on the specific application and design constraints of the technical solution. Professional and technical personnel can use different methods to implement the described functions for each specific application, but such implementation should not be considered to be beyond the scope of the present invention.

[0145] Those skilled in the art can clearly understand that, for the convenience and brevity of description, the specific working processes of the systems, devices and units described above can refer to the corresponding processes in the aforementioned method embodiments and will not be repeated here.

[0146] In the several embodiments provided in the present application, it should be understood that the disclosed systems, devices and methods can be implemented in other ways. For example, the device embodiments described above are only schematic. For example, the division of the units is only a logical function division. There may be other division methods in actual implementation, such as multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. In addition, the mutual coupling or direct coupling or communication connection shown or discussed can be an indirect coupling or communication connection through some interfaces, devices or units, or it can be an electrical, mechanical or other form of connection.

[0147] The units described as separate components may or may not be physically separated, and the components shown as units may or may not be physical units, that is, they may be located in one place or distributed on multiple network units. Some or all of the units may be selected according to actual needs to achieve the purpose of the embodiments of the present invention.

[0148] In addition, each functional unit in each embodiment of the present invention may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit. The above-mentioned integrated unit may be implemented in the form of hardware or in the form of software functional units.

[0149] If the integrated unit is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present invention is essentially or the part that contributes to the prior art, or all or part of the technical solution can be embodied in the form of a software product, and the computer software product is stored in a storage medium, including a number of instructions for a computer device (which can be a personal computer, a server, or a network device, etc.) to perform all or part of the steps of the method described in each embodiment of the present invention. The aforementioned storage medium includes: U disk, mobile hard disk, read-only memory (ROM, Read-Only Memory), random access memory (RAM, Random Access Memory), disk or optical disk and other media that can store program codes.

[0150] The present invention uses specific embodiments to illustrate the principles and implementation methods of the present invention. The description of the above embodiments is only used to help understand the method of the present invention and its core idea. At the same time, for those skilled in the art, according to the idea of ​​the present invention, there will be changes in the specific implementation methods and application scope. In summary, the content of this specification should not be understood as a limitation on the present invention.

Claims

1. A software SDN network specification statistics method, characterized in that: The method comprises: Acquire first account information, and acquire a first field from the first account information; the first field includes the row number where the first account information is located, so as to indicate the record name of the first account information in the corresponding database; Obtain first API service authorization information; the first API service authorization information includes the first field; Acquire a first API interface type according to the first API service authorization information; Obtain a first data request, and collect various types of data for the first API interface type according to the first data request to obtain a first data set, wherein the various types of data include: number of subnets, number of ports, elastic load balancing entries, and virtual firewall entry specification data; Obtaining a first data statistics instruction; Statistics are performed on the first data set according to the first data statistics instruction to obtain a first statistical report.

2. The method according to claim 1, characterized in that The first data set has a first data structure, and the first data structure is a three-layer data structure.

3. The method according to claim 2, characterized in that According to the first data request, collecting data of various categories for the first API interface type to obtain a first data set, the method further includes: Acquire a second data set, where the second data set is raw data acquired according to the first data acquisition instruction; Acquire a first data structure model; The second data set is stored in the first data structure model to obtain the first data set.

4. The method according to claim 1, characterized in that The method further comprises: Define preset specification thresholds; Determine whether each data set of each specification category in the first data set is within the preset specification threshold; If the data sets are not within the preset specification threshold, obtaining a third data set that is not within the preset specification threshold; A first marking instruction is obtained, and the third data set is marked according to the first marking instruction.

5. The method according to claim 4, characterized in that The method further comprises: Obtaining a first specification category of the third data set; generating a first warning report based on the third data set and the first specification category; The first warning report is sent to the first cloud computing management platform.

6. The method according to claim 1, characterized in that The acquisition of the first data request has a first period.

7. A software SDN network specification statistics system, characterized in that: The system comprises: a first acquisition unit, the first acquisition unit being used to acquire first account information, and acquire a first field from the first account information; the first field includes a row number where the first account information is located, so as to indicate a record name of the first account information in a corresponding database; Obtain first API service authorization information; the first API service authorization information includes the first field; Acquire a first API interface type according to the first API service authorization information; A second acquisition unit, the second acquisition unit is used to acquire a first data request, and according to the first data request, collect various types of data for the first API interface type to acquire a first data set, wherein the various types of data include: subnet number, port number, elastic load balancing entry, and virtual firewall entry specification data; A third acquisition unit, the third acquisition unit is used to acquire the first data statistics instruction; A fourth acquisition unit, the fourth acquisition unit is used to perform statistics on the first data set according to the first data statistics instruction to obtain a first statistical report.

8. A software SDN network specification statistics system, comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein: When the processor executes the program, the steps of the method according to any one of claims 1 to 6 are implemented.

9. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, the method described in any one of claims 1 to 6 is executed.

Images