A network automation method and apparatus

Abstract

This application provides a network automation method and apparatus, comprising: analyzing an operation and maintenance task to obtain configuration item attribute information, the configuration item attribute information including the execution target host name, network domain, and executor handler corresponding to the operation and maintenance task; generating an instruction set based on the configuration item attribute information, the instruction set including at least one instruction; obtaining a matching supervisory agent based on the network domain and executor handler, the matching supervisory agent being the supervisory agent that matches the network domain and executor handler among multiple supervisory agents; and sending the instruction set to the matching supervisory agent so that the matching supervisory agent connects to the execution target host and executes the instructions. By obtaining a matching supervisory agent and evenly distributing supervisory agents according to tasks, different operation and maintenance tasks can correspond to different supervisory agents, realizing channel separation and personalized management of network automation tasks, and improving the timeliness and stability of operation and maintenance task completion.

Description

Technical Field

[0001] This application relates to the technical field of network operation and maintenance, and in particular to a network automation method and apparatus. Background Technology

[0002] With the development of the Internet of Things, artificial intelligence, and big data, the volume of data center operations and maintenance has increased significantly. Manual operation and maintenance alone can no longer meet the requirements of data center data transformation and high business continuity, necessitating the automation of network device configuration management.

[0003] Most existing technologies rely on intelligent discovery and analysis of IP address-related data within the network to uniformly manage devices and configurations, collect and analyze data from network modules, proactively optimize network quality, improve the efficiency of network maintenance personnel, and reduce manual operation processes. However, this method fails to consider the timeliness requirements of different tasks when dealing with large-scale task execution, often leading to tasks in emergency scenarios queuing up.

[0004] Therefore, how to personalize the management of network automation tasks is a technical problem that urgently needs to be solved by those skilled in the art. Summary of the Invention

[0005] In view of this, embodiments of this application provide a network automation method and apparatus, which are designed for personalized management of network automation tasks.

[0006] In a first aspect, embodiments of this application provide a network automation method, including:

[0007] Analyze the operation and maintenance task to obtain configuration item attribute information, which includes the execution target host name, network domain, and executor handler corresponding to the operation and maintenance task.

[0008] Based on the configuration item attribute information, an instruction set is generated, the instruction set including at least one instruction;

[0009] Based on the network domain and the executor handler, a matching supervisory agent is obtained. The matching supervisory agent is the supervisory agent that matches the network domain and the executor handler among a plurality of supervisory agents.

[0010] The set of instructions is sent to the matching supervisory agent, so that the matching supervisory agent connects to the target host and executes the instructions.

[0011] Optionally, the configuration item attribute information includes the device manufacturer and device type, and the step of generating an instruction set based on the configuration item attribute information includes:

[0012] Based on the device manufacturer and device type, a matching network driver is obtained. The matching network driver is a network driver in the network driver library that matches the device manufacturer and device type.

[0013] Based on the matching network driver, a first instruction is generated, which instructs the matching supervision agent to connect to the execution target host using the matching network driver.

[0014] Optionally, the configuration item attribute information includes an IP address and a dedicated execution account, and the step of generating an instruction set based on the configuration item attribute information includes:

[0015] Based on the IP address and the dedicated execution account, a second instruction is generated. The second instruction is used to instruct the matching supervision agent to obtain the device password based on the IP address and the dedicated execution account, and to connect to the execution target host using the device password and the decryption algorithm. The device password is an automated management account password that is cached in memory and updated periodically.

[0016] Optionally, obtaining the matching supervisory agent based on the network domain and the executor handler includes:

[0017] Based on the network domain, a regulatory agent cluster is determined, wherein the regulatory agent cluster includes multiple regulatory agents;

[0018] Based on the polling algorithm, a matching regulatory agent is determined from the regulatory agent cluster according to the executor handler.

[0019] Optionally, after analyzing the operation and maintenance tasks and obtaining the configuration item attribute information, the method further includes:

[0020] Back up the configuration item attribute information.

[0021] Optionally, after sending the set of instructions to the matching supervisory agent, the method further includes:

[0022] Based on preset rules, detect changes in the configuration item attribute information;

[0023] In response to a change in the configuration item attribute information, the changed configuration item attribute information is used to replace the original configuration item attribute information, and the process of backing up the configuration item attribute information is returned.

[0024] Secondly, embodiments of this application provide a network automation device, including:

[0025] The configuration acquisition module is used to analyze operation and maintenance tasks and obtain configuration item attribute information. The configuration item attribute information includes the execution target host name, network domain and executor handler corresponding to the operation and maintenance task.

[0026] The instruction generation module is used to generate an instruction set based on the configuration item attribute information, wherein the instruction set includes at least one instruction;

[0027] The agent acquisition module is used to acquire a matching supervisory agent based on the network domain and the executor handler. The matching supervisory agent is the supervisory agent that matches the network domain and the executor handler among a plurality of supervisory agents.

[0028] The instruction sending module is used to send the instruction set to the matching supervision agent, so that the matching supervision agent can connect to the target host and execute the instructions.

[0029] Optionally, the agent acquisition module includes:

[0030] The cluster acquisition unit is used to determine a regulatory agent cluster based on the network domain, wherein the regulatory agent cluster includes multiple regulatory agents;

[0031] The agent determination unit is used to determine a matching regulatory agent from the regulatory agent cluster based on a polling algorithm and according to the executor handler.

[0032] Thirdly, embodiments of this application provide an apparatus including a memory and a processor, the memory being used to store instructions or code, and the processor being used to execute the instructions or code to cause the apparatus to perform the network automation method described in any of the first aspects above.

[0033] Fourthly, embodiments of this application provide a computer storage medium storing code, wherein when the code is executed, a device running the code implements the network automation method described in any of the first aspects above.

[0034] This application provides a network automation method and apparatus. When executing the method, firstly, the operation and maintenance task is analyzed to obtain configuration item attribute information, including the target host name, network domain, and executor handler corresponding to the operation and maintenance task. Then, based on the configuration item attribute information, an instruction set is generated, including at least one instruction. Next, based on the network domain and executor handler, a matching supervisory agent is obtained. This matching supervisory agent is the one among multiple supervisory agents that matches the network domain and executor handler. Finally, the instruction set is sent to the matching supervisory agent, so that the matching supervisory agent connects to the target host and executes the instructions. In this way, by obtaining a matching supervisory agent and evenly distributing supervisory agents according to the task, different operation and maintenance tasks can correspond to different supervisory agents, achieving channel separation and personalized management of network automation tasks, thus improving the timeliness and stability of operation and maintenance task completion. Attached Figure Description

[0035] To more clearly illustrate the technical solutions in this embodiment or the prior art, the drawings used in the description of the embodiment or the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments of this application. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort.

[0036] Figure 1 A flowchart of a method for network automation provided in this application embodiment;

[0037] Figure 2 Another method flowchart for the network automation method provided in the embodiments of this application;

[0038] Figure 3 This is a schematic diagram of a network automation device provided in an embodiment of this application. Detailed Implementation

[0039] Most existing technologies rely on intelligent discovery and analysis of IP address-related data within the network to uniformly manage devices and configurations, collect and analyze data from network modules, proactively optimize network quality, improve the efficiency of network maintenance personnel, and reduce manual operation processes. However, this method fails to consider the timeliness requirements of different tasks when dealing with large-scale task execution, often leading to tasks in emergency scenarios queuing up.

[0040] The method provided in this application embodiment is executed by a computer device and is used for personalized management of network automation tasks.

[0041] Obviously, the described embodiments are only a part of the embodiments of this application, and not all of the embodiments. Based on the embodiments of this application, all other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of this application.

[0042] See Figure 1 , Figure 1 A flowchart of a network automation method provided in this application embodiment includes:

[0043] Step S101: Analyze the operation and maintenance tasks to obtain configuration item attribute information.

[0044] Configuration items are a type of configuration model with the same attributes and fields, such as virtual machines, routers, and switches. Configuration item attribute information refers to the attribute fields for a specific configuration item; different configuration items may have different attribute information.

[0045] The configuration item attribute information may include the target host name, network domain, and executor handler corresponding to the operation and maintenance task.

[0046] The target hostname is used to indicate the name of the target host to which the connection needs to be made.

[0047] Configuration items and their attributes are managed by region. Therefore, if there are three regions, A, B, and C, the corresponding configuration items and their attributes will be managed separately for each region. A network domain is an identifier that indicates its different regions; that is, network domains a, b, and c correspond to regions A, B, and C.

[0048] The executor handler is used for communication between the child thread and the main thread. It is the core class for handling asynchronous messages. Therefore, analyzing the executor handler can reveal the sender and receiver of the information.

[0049] By analyzing the operation and maintenance tasks, the configuration item attribute information can be obtained from the storage unit that manages and stores the configuration item attribute information.

[0050] Step S102: Generate an instruction set based on the configuration item attribute information.

[0051] The instruction set includes at least one instruction. Since configuration item attribute information includes various aspects, different instructions can be generated based on different information, thereby instructing the object that retrieves the instruction to perform subsequent operations according to the instruction.

[0052] Step S103: Obtain a matching supervisory agent based on the network domain and the executor handler.

[0053] Different network domains can be designated to correspond to different supervisory agent clusters, and each supervisory agent cluster includes at least one supervisory agent. The matching supervisory agent is the one among multiple supervisory agents that matches the network domain and the executor handler.

[0054] As one possible implementation, different regulatory agents in a regulatory agent cluster can each execute different tasks, and the number of regulatory agents executing a particular task can be set according to requirements. Preferably, regulatory agents can be evenly matched based on task execution, so that the execution share of regulatory agents performing the same task is roughly the same.

[0055] It should be noted that emergency monitoring agents can be set up according to needs to improve adaptability to emergency scenarios and disaster recovery switching scenarios.

[0056] In this way, when faced with a large number of tasks, corresponding monitoring agents can be pre-set to take into account the timeliness or configuration requirements of different tasks. Different operation and maintenance tasks can correspond to different monitoring agents, thereby realizing channel separation, that is, personalized management of network automation tasks, and improving the efficiency and stability of operation and maintenance task completion.

[0057] Step S104: Send the instruction set to the matching supervision agent so that the matching supervision agent can connect to the target host and execute the instructions.

[0058] Sending a set of instructions to a matching monitoring agent enables the monitoring agent to connect to the target host based on the instruction content and execute the instruction content, thereby achieving automated operation and maintenance.

[0059] In summary, this embodiment obtains matching supervisory agents and distributes them evenly according to tasks, enabling different operation and maintenance tasks to correspond to different supervisory agents. This achieves channel separation and personalized management of network automation tasks, improving the timeliness and stability of operation and maintenance task completion.

[0060] In the embodiments of this application, the above Figure 1 There are multiple possible implementations of the steps described below, which will be introduced separately. It should be noted that the implementations given below are merely illustrative examples and do not represent all implementations of the embodiments of this application.

[0061] See Figure 2 The figure is a flowchart of another network automation method provided in this application embodiment, including:

[0062] Step S201: Analyze the operation and maintenance tasks to obtain configuration item attribute information.

[0063] As one possible implementation, the configuration item attribute information also includes device manufacturer, device type, IP address, and dedicated execution account. Different device manufacturers and device types require different network drivers, and different IP addresses and dedicated execution accounts correspond to different encrypted passwords.

[0064] Step S202: Back up the configuration item attribute information.

[0065] Backup configuration item attribute information can be in the manufacturer-supported default format. This allows the backed-up configuration item attribute information to be directly imported into the new device for normal loading when the device fails, reducing the time required to obtain attribute information and improving the fault handling speed.

[0066] Step S203: Generate an instruction set based on the configuration item attribute information.

[0067] As one possible implementation, a matching network driver can be obtained first based on the device manufacturer and device type; then, a first instruction can be generated based on the matching network driver.

[0068] Each regulatory agent includes a network driver library, which can solve compatibility issues between different manufacturers and is scalable. It can match the corresponding network driver according to the device manufacturer and device type as the matching network driver. Then, based on the matching network driver, a first instruction is generated, instructing the matching regulatory agent to connect to the execution target host using the matching network driver.

[0069] As one possible implementation, a second instruction can be generated based on the IP address and the dedicated execution account.

[0070] Because storing passwords directly in memory is prone to leakage due to lack of oversight, and password leaks can compromise the security of the entire device, especially for high-privilege passwords. Therefore, this embodiment uses a dedicated management account for automation. This account is not allowed to be logged in manually, and a proxy caching service is used to periodically synchronize and update the passwords of all target devices. Since the passwords are cached in memory and not persisted, password leaks are avoided. Therefore, a second instruction can be generated based on the IP address and the dedicated execution account, instructing the matching and monitoring agent to obtain the device password using the IP address and the dedicated execution account, and then connect to the target host using the device password and decryption algorithm.

[0071] As a preferred option, if the password is incorrect, a password re-acquisition mechanism will be triggered to improve fault tolerance.

[0072] As one possible implementation, instructions for performing functions or other operational operations can also be generated based on other configuration item attributes. These instructions will vary depending on the specific operational task and are not limited here. All of the above instructions together constitute the instruction set.

[0073] Step S204: Determine the regulatory agent cluster based on the network domain.

[0074] Different network domains correspond to different regulatory agent clusters, so it is necessary to determine the corresponding regulatory agent cluster based on the network domain. For example, if the network domains are a, b, and c, they correspond to regulatory agent cluster 1, regulatory agent cluster 2, and regulatory agent cluster 3, respectively.

[0075] Step S205: Based on the polling algorithm, determine the matching supervisory agent from the supervisory agent cluster according to the executor handler.

[0076] The monitoring agent cluster comprises multiple monitoring agents, categorized by function. Examples include data collection monitoring agents and change monitoring agents. Based on the executor handler, the monitoring agent capable of executing the current maintenance task must first be determined. If multiple executable monitoring agents exist, a round-robin algorithm is used to select one as the matching monitoring agent, achieving load balancing when dealing with batch tasks.

[0077] For example, in the supervisory agent cluster 1, the supervisory agents that can implement the change function include supervisory agent NO1 (6 queued tasks), supervisory agent NO2 (6 queued tasks), and supervisory agent NO3 (5 queued tasks). Based on the round-robin algorithm, the matching supervisory agent can be determined as supervisory agent NO3, thereby achieving load balancing.

[0078] Step S206: Send the instruction set to the matching supervision agent so that the matching supervision agent can connect to the target host and execute the instructions.

[0079] The above steps are the same as those in the above embodiments, and will not be repeated here.

[0080] Step S207: Detect changes in the configuration item attribute information according to preset rules.

[0081] The preset rules can be timed or conditionally triggered, depending on the needs, and are not limited here. After completing the current operation and maintenance task, the preset rules can be used to detect changes in the configuration item attribute information, and the operation and maintenance status can be updated in a timely manner based on the changes.

[0082] Step S208: In response to the change of the configuration item attribute information, replace the configuration item attribute information with the changed configuration item attribute information, and return to step S202.

[0083] When the configuration item attribute information changes, the changed configuration item attribute information can be used to replace the original configuration item attribute information, and the process can return to step S202. This can achieve automated updates of the operation and maintenance status, further reduce manual operation processes, and improve operation and maintenance efficiency.

[0084] In summary, this embodiment improves the fault handling rate of the method by backing up configuration item attribute information; completes network driver adaptive management by issuing the first instruction; prevents device password leakage by issuing the second instruction; achieves load balancing through a round-robin algorithm; and automates operation and maintenance updates by detecting changes. The entire embodiment, combined, significantly improves the timeliness and stability of operation and maintenance tasks.

[0085] The above are some specific implementations of the network automation method provided in the embodiments of this application. Based on this, this application also provides a corresponding apparatus. The apparatus provided in the embodiments of this application will be described below from the perspective of functional modularity.

[0086] See Figure 3 The diagram shows the structure of a network automation device, which includes a configuration acquisition module 301, an instruction generation module 302, an agent acquisition module 303, and an instruction sending module 304.

[0087] The configuration acquisition module 301 is used to analyze the operation and maintenance tasks and obtain configuration item attribute information. The configuration item attribute information includes the execution target host name, network domain and executor handler corresponding to the operation and maintenance task.

[0088] The instruction generation module 302 is used to generate an instruction set based on the configuration item attribute information, wherein the instruction set includes at least one instruction;

[0089] The agent acquisition module 303 is used to acquire a matching supervisory agent based on the network domain and the executor handler. The matching supervisory agent is the supervisory agent that matches the network domain and the executor handler among a plurality of supervisory agents.

[0090] The instruction sending module 304 is used to send the instruction set to the matching supervision agent, so that the matching supervision agent can connect to the target host and execute the instructions.

[0091] As one possible implementation, the configuration item attribute information includes the device manufacturer and device type, and the instruction generation module 302 includes:

[0092] A network driver acquisition unit is used to acquire a matching network driver based on the device manufacturer and device type, wherein the matching network driver is a network driver in the network driver library that matches the device manufacturer and device type;

[0093] The first instruction unit is configured to generate a first instruction based on the matching network driver, wherein the first instruction is configured to instruct the matching supervision agent to connect to the execution target host using the matching network driver.

[0094] As one possible implementation, the configuration item attribute information includes an IP address and a dedicated execution account, and the instruction generation module 302 includes:

[0095] The second instruction unit is used to generate a second instruction based on the IP address and the dedicated execution account. The second instruction is used to instruct the matching supervision agent to obtain the device password based on the IP address and the dedicated execution account, and to connect to the execution target host using the device password and the decryption algorithm. The device password is an automated management account password that is cached in memory and updated periodically.

[0096] As one possible implementation, the agent acquisition module 303 includes:

[0097] The cluster acquisition unit is used to determine a regulatory agent cluster based on the network domain, wherein the regulatory agent cluster includes multiple regulatory agents;

[0098] The agent determination unit is used to determine a matching regulatory agent from the regulatory agent cluster based on a polling algorithm and according to the executor handler.

[0099] As one possible implementation, the device further includes:

[0100] The backup module is used to back up the configuration item attribute information.

[0101] As one possible implementation, the device further includes:

[0102] The change detection module is used to detect changes in the configuration item attribute information according to preset rules;

[0103] The update module is used to respond to changes in the configuration item attribute information, replace the configuration item attribute information with the changed configuration item attribute information, and return to execute the backup of the configuration item attribute information.

[0104] This application also provides corresponding devices and computer storage media for implementing the solutions provided in this application.

[0105] The device includes a memory and a processor. The memory stores instructions or code, and the processor executes the instructions or code to enable the device to perform the network automation method described in any embodiment of this application.

[0106] The computer storage medium stores code, and when the code is run, the device running the code implements the network automation method described in any embodiment of this application.

[0107] In the embodiments of this application, the terms "first" and "second" (if they exist) are used only as name identifiers and do not represent the order of first and second.

[0108] As can be seen from the above description of the embodiments, those skilled in the art can clearly understand that all or part of the steps in the methods of the above embodiments can be implemented by means of software plus a general-purpose hardware platform. Based on this understanding, the technical solution of this application can be embodied in the form of a software product. This computer software product can be stored in a storage medium, such as a read-only memory (ROM) / RAM, magnetic disk, optical disk, etc., including several instructions to cause a computer device (which may be a personal computer, a server, or a network communication device such as a router) to execute the methods described in various embodiments or some parts of the embodiments of this application.

[0109] The various embodiments in this specification are described in a progressive manner. Similar or identical parts between embodiments can be referred to mutually. Each embodiment focuses on its differences from other embodiments. In particular, the apparatus embodiments are basically similar to the method embodiments, so the description is relatively simple; relevant parts can be referred to the descriptions in the method embodiments. Some or all of the modules can be selected to achieve the purpose of this embodiment according to actual needs. Those skilled in the art can understand and implement this without creative effort.

[0110] The above description is merely an exemplary implementation of this application and is not intended to limit the scope of protection of this application.

Claims

1. A network automation method, characterized in that, The method includes: Analyze the operation and maintenance task to obtain configuration item attribute information, which includes the execution target host name, network domain, and executor handler corresponding to the operation and maintenance task. Based on the configuration item attribute information, an instruction set is generated, the instruction set including at least one instruction; Based on the network domain and the executor handler, a matching supervisory agent is obtained. The matching supervisory agent is the supervisory agent that matches the network domain and the executor handler among a plurality of supervisory agents. The instruction set is sent to the matching supervision agent, so that the matching supervision agent connects to the target host and executes the instructions; The configuration item attribute information includes the device manufacturer and device type. The step of generating a set of instructions based on the configuration item attribute information includes: Based on the device manufacturer and device type, a matching network driver is obtained. The matching network driver is a network driver in the network driver library that matches the device manufacturer and device type. Based on the matching network driver, a first instruction is generated, which instructs the matching supervision agent to connect to the execution target host using the matching network driver; The configuration item attribute information includes an IP address and a dedicated execution account. The step of generating an instruction set based on the configuration item attribute information includes: Based on the IP address and the dedicated execution account, a second instruction is generated. The second instruction is used to instruct the matching supervision agent to obtain the device password based on the IP address and the dedicated execution account, and to connect to the execution target host using the device password and the decryption algorithm. The device password is an automated management account password that is cached in memory and updated periodically. The step of obtaining a matching supervisory agent based on the network domain and the executor handler includes: Based on the network domain, a regulatory agent cluster is determined, wherein the regulatory agent cluster includes multiple regulatory agents; Based on the polling algorithm, a matching regulatory agent is determined from the regulatory agent cluster according to the executor handler.

2. The method according to claim 1, characterized in that, After analyzing the operation and maintenance tasks and obtaining the configuration item attribute information, the method further includes: Back up the configuration item attribute information.

3. The method according to claim 2, characterized in that, After sending the set of instructions to the matching supervisory agent, the method further includes: Based on preset rules, detect changes in the configuration item attribute information; In response to a change in the configuration item attribute information, the changed configuration item attribute information is used to replace the original configuration item attribute information, and the process of backing up the configuration item attribute information is returned.

4. A network automation device, characterized in that, The device includes: The configuration acquisition module is used to analyze operation and maintenance tasks and obtain configuration item attribute information. The configuration item attribute information includes the execution target host name, network domain and executor handler corresponding to the operation and maintenance task. The instruction generation module is used to generate an instruction set based on the configuration item attribute information, wherein the instruction set includes at least one instruction; The agent acquisition module is used to acquire a matching supervisory agent based on the network domain and the executor handler. The matching supervisory agent is the supervisory agent that matches the network domain and the executor handler among a plurality of supervisory agents. The instruction sending module is used to send the instruction set to the matching supervision agent, so that the matching supervision agent can connect to the execution target host and execute the instructions; The configuration item attribute information includes the device manufacturer and device type. The instruction generation module includes: A network driver acquisition unit is used to acquire a matching network driver based on the device manufacturer and device type, wherein the matching network driver is a network driver in the network driver library that matches the device manufacturer and device type; The first instruction unit is configured to generate a first instruction based on the matching network driver, wherein the first instruction is configured to instruct the matching supervision agent to connect to the execution target host using the matching network driver; The configuration item attribute information includes IP address and dedicated execution account; the instruction generation module includes: The second instruction unit is used to generate a second instruction based on the IP address and the dedicated execution account. The second instruction is used to instruct the matching supervision agent to obtain the device password based on the IP address and the dedicated execution account, and to connect to the execution target host using the device password and the decryption algorithm. The device password is an automated management account password that is cached in memory and updated periodically. The agent acquisition module includes: The cluster acquisition unit is used to determine a regulatory agent cluster based on the network domain, wherein the regulatory agent cluster includes multiple regulatory agents; The agent determination unit is used to determine a matching regulatory agent from the regulatory agent cluster based on a polling algorithm and according to the executor handler.

5. A device, characterized in that, The device includes a memory and a processor, the memory being used to store instructions or code, and the processor being used to execute the instructions or code to cause the device to perform the network automation method according to any one of claims 1 to 3.

6. A computer storage medium, characterized in that, The computer storage medium stores code, and when the code is executed, the computer storage device running the code implements the network automation method according to any one of claims 1 to 3.

Images