Network device change history backtracking method, device, apparatus, medium and product

Abstract

The present disclosure provides a network device change history rollback method, device, equipment, medium and product, relates to the technical operation and maintenance technical field, and can be applied to the financial technology technical field. The method comprises the following steps: acquiring first configuration information and second configuration information of a network device, wherein the first configuration information represents the current configuration of the network device, and the second configuration information represents the historical configuration of the network device. Comparing the first configuration information with the second configuration information to obtain configuration difference information. Acquiring a plurality of change information in a time period corresponding to the historical configuration to the current configuration in a change management system. Matching the configuration difference information with the plurality of change information to determine the change information associated with the configuration difference information.

Description

Technical Field

[0001] This disclosure relates to the field of technology operation and maintenance technology, and can be applied to the field of financial technology technology. In particular, it relates to a method, device, equipment, medium and product for tracing back the change history of network equipment. Background Technology

[0002] In financial institutions, especially banks, network systems need to maintain high stability at all times. Changes to network device configurations often require a rigorous approval process. The reason for the change, the operational steps, and the configuration commands must be uploaded to the change management system for approval and recording. With the continuous updates and iterations of business systems and the constant changes in business access requirements, network changes (especially firewall policy changes) are often very frequent. Over time, the change management system accumulates a massive amount of historical changes, making it extremely difficult to retrieve specific change information. Furthermore, during internal and external audits, it is often necessary to trace back historical changes to specific configurations. Existing methods typically involve searching for relevant changes in a vast number of past changes and comparing each change implementation plan, making network change tracing extremely difficult. Summary of the Invention

[0003] In view of this, the main objective of this disclosure is to provide a method, apparatus, device, medium, and product for tracing back the change history of network devices, aiming to at least partially solve the technical problem of difficulty in tracing the source of existing tracing methods.

[0004] To achieve the above objectives, a first aspect of this disclosure provides a method for tracing back the change history of a network device, comprising: acquiring first configuration information and second configuration information of a network device, wherein the first configuration information represents the current configuration of the network device, and the second configuration information represents the historical configuration of the network device; comparing the first configuration information and the second configuration information to obtain configuration difference information; acquiring multiple change information within the time period corresponding to the historical configuration to the current configuration in a change management system; and matching the configuration difference information with the multiple change information to determine the change information associated with the configuration difference information.

[0005] According to embodiments of this disclosure, obtaining the first configuration information and the second configuration information of the network device includes: obtaining device information of the network device to be monitored and configured, wherein the device information includes IP address, device name and configuration capture method; capturing the first configuration information and the second configuration information of the network device to be monitored and configured using the configuration capture method; and storing the first configuration information and the second configuration information according to the capture time.

[0006] According to embodiments of this disclosure, the configuration capture method includes: logging into the network management system to download the first configuration information and the second configuration information of the network device; or logging into the network device and transmitting the first configuration information and the second configuration information via a file transfer protocol or a simple file transfer protocol; or logging into the network device and entering a command to capture the configuration information.

[0007] According to embodiments of this disclosure, comparing the first configuration information and the second configuration information to obtain configuration difference information includes: obtaining device information of the network device to be monitored, wherein the device information includes IP address, device name, and configuration encoding format; parsing the first configuration information and the second configuration information line by line according to the configuration encoding format; comparing the parsed first configuration information and the parsed second configuration information line by line, extracting the differences between the first configuration information and the second configuration information to obtain the configuration difference information; and storing the configuration difference information using the IP address, the device name, and the check time as indexes.

[0008] According to an embodiment of this disclosure, the method further includes: inputting the configuration difference information into a web page rendering engine to generate a hypertext markup language file; adding a first tag, a second tag, and a third tag to the hypertext markup language file, wherein the first tag is used to mark the currently added configuration, the second tag is used to mark the currently deleted configuration, and the third tag is used to mark the currently changed configuration.

[0009] According to an embodiment of this disclosure, the method further includes: adding a first hyperlink to the first tag, adding a second hyperlink to the second tag, and adding a third hyperlink to the third tag, wherein the first hyperlink, the second hyperlink, and the third hyperlink are respectively used to locate the configuration information of the corresponding tag marker.

[0010] According to embodiments of this disclosure, matching the configuration difference information with the plurality of change information includes: extracting the change order number, change request user, change reason, and implementation scheme from each change information; parsing each implementation scheme one by one to determine whether each implementation scheme is associated with the configuration difference information; and in response to the implementation scheme being associated with the configuration difference information, adding the change order number, change request user, and change reason corresponding to the implementation scheme to the configuration difference information.

[0011] According to embodiments of this disclosure, the step of parsing each implementation scheme one by one to determine whether each implementation scheme is associated with the configuration difference information includes: processing the text content in each implementation scheme using a natural language processing model to extract the operation commands for the corresponding network device in each implementation scheme; performing vector matching between the configuration difference information and each operation command to calculate the similarity between the configuration difference information and each operation command; and determining that the implementation scheme corresponding to a similarity greater than a preset threshold is associated with the configuration difference information.

[0012] According to embodiments of this disclosure, the step of processing the text content in each of the embodiments using a natural language processing model includes: selecting a corresponding parsing engine to parse the embodiments based on the file extension of each embodiment.

[0013] According to an embodiment of this disclosure, the method includes: sending a reminder message to a terminal when it is determined that there is no change information matching the configuration difference information, wherein the reminder message is used to remind the user to manually fill in the change information.

[0014] A second aspect of this disclosure provides a device for tracing the change history of a network device, comprising: a first acquisition module for acquiring first configuration information and second configuration information of a network device, wherein the first configuration information represents the current configuration of the network device and the second configuration information represents the historical configuration of the network device; a comparison module for comparing the first configuration information and the second configuration information to obtain configuration difference information; a second acquisition module for acquiring multiple change information within a time period corresponding to the historical configuration to the current configuration in a change management system; and a matching module for matching the configuration difference information with the multiple change information to determine the change information associated with the configuration difference information.

[0015] A third aspect of this disclosure provides an electronic device, including: one or more processors; and a storage device for storing one or more programs, wherein when the one or more programs are executed by the one or more processors, the one or more processors execute a backtracking method based on the network device change history described above.

[0016] A fourth aspect of this disclosure provides a computer-readable storage medium storing executable instructions that, when executed by a processor, cause the processor to perform a backtracking method based on the aforementioned network device change history.

[0017] A fifth aspect of this disclosure provides a computer program product, including a computer program that, when executed by a processor, implements a backtracking method based on the aforementioned network device change history.

[0018] The method, apparatus, device, medium, and product for tracing network device change history provided in the embodiments of this disclosure have at least the following beneficial effects:

[0019] By comparing the current configuration of network devices with their historical configurations to obtain configuration difference information, and then directly associating this information with multiple changes within the corresponding time period, it is possible to quickly obtain current configuration change information. This improves the efficiency of network device change retrieval, facilitates network change history review by administrators, continuously improves network change management, and enhances the stability of financial enterprise networks.

[0020] Based on device information, a method for quickly obtaining configuration information is implemented, thus achieving efficient configuration information retrieval. By setting multiple configuration information retrieval methods, the retrieval needs in different scenarios can be met, thereby improving the flexibility of the backtracking method.

[0021] Based on device information, the configuration encoding format of configuration information can be quickly obtained, thus achieving efficient parsing of configuration information. Furthermore, the obtained configuration difference information is converted into a Hypertext Markup Language (HTML) file and different configuration difference information is labeled with different tags, enabling convenient and intuitive comparison of configuration differences. By setting a corresponding hyperlink for each tag, clicking the hyperlink can quickly jump to the corresponding configuration difference information, thereby achieving efficient querying of configuration difference information.

[0022] Because the change information is associated with the configuration difference information simply by parsing the implementation plan in the change information, the amount of data involved in the association is small, thereby improving the efficiency of change history tracing.

[0023] By calculating the similarity between change information and configuration difference information, it is possible to determine whether change information and configuration anomaly information are related. This can accurately identify the configuration information associated with configuration difference information, thereby improving the accuracy of change history tracing.

[0024] By employing a natural language processing model to process the text content in each of the aforementioned implementation schemes, it becomes applicable to implementation schemes with different formats, avoiding the need to set different parsing templates for different modules and improving the efficiency of historical change backtracking. Attached Figure Description

[0025] To more clearly illustrate the technical solutions in the embodiments of this disclosure or the prior art, the drawings used in the description of the embodiments or the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments of this disclosure. For those skilled in the art, other drawings can be obtained based on the structures shown in these drawings without creative effort.

[0026] Figure 1 The system architecture 100 of the method and apparatus for tracing back the change history of network devices according to an embodiment of the present disclosure is illustrated schematically.

[0027] Figure 2 A flowchart illustrating a method for tracing back the change history of a network device according to an embodiment of the present disclosure is shown schematically.

[0028] Figure 3 This schematically illustrates a flowchart of obtaining first configuration information and second configuration information of a network device in operation S201 according to an embodiment of the present disclosure;

[0029] Figure 4 The flowcharts illustrate three methods for capturing specific configuration information according to embodiments of this disclosure;

[0030] Figure 5 This schematically illustrates a flowchart of comparing the first configuration information and the second configuration information in operation S202 according to an embodiment of the present disclosure;

[0031] Figure 6 A flowchart illustrating a method for tracing back the change history of a network device according to another embodiment of this disclosure is shown schematically.

[0032] Figure 7 A flowchart illustrating a method for tracing back the change history of a network device according to yet another embodiment of this disclosure is shown.

[0033] Figure 8 This schematically illustrates a flowchart of matching configuration difference information with multiple change information in operation S204 according to an embodiment of the present disclosure;

[0034] Figure 9 This schematically illustrates a flowchart of operation S802 according to an embodiment of the present disclosure, in which each implementation is parsed one by one to determine whether each implementation is associated with configuration difference information;

[0035] Figure 10 This schematically illustrates a block diagram of a device for tracing back the change history of a network device according to an embodiment of the present disclosure;

[0036] Figure 11 A block diagram of a device for tracing back a network device change history according to another embodiment of the present disclosure is shown schematically.

[0037] Figure 12 A block diagram of an electronic device suitable for implementing the methods described above, according to embodiments of the present disclosure, is illustrated schematically. Detailed Implementation

[0038] The embodiments of the present disclosure will now be described with reference to the accompanying drawings. However, it should be understood that these descriptions are exemplary only and are not intended to limit the scope of the disclosure. In the following detailed description, numerous specific details are set forth to provide a thorough understanding of the embodiments of the present disclosure for ease of explanation. However, it will be apparent that one or more embodiments may be practiced without these specific details. Furthermore, descriptions of well-known structures and techniques are omitted in the following description to avoid unnecessarily obscuring the concepts of the present disclosure.

[0039] The terminology used herein is for the purpose of describing particular embodiments only and is not intended to limit this disclosure. The terms “comprising,” “including,” etc., as used herein indicate the presence of the stated features, steps, operations, and / or components, but do not exclude the presence or addition of one or more other features, steps, operations, or components.

[0040] All terms used herein (including technical and scientific terms) have the meanings commonly understood by those skilled in the art, unless otherwise defined. It should be noted that the terms used herein are to be interpreted in a manner consistent with the context of this specification, and not in an idealized or overly rigid way.

[0041] When using expressions such as "at least one of A, B, and C," the expression should generally be interpreted in accordance with the meaning commonly understood by a person skilled in the art (e.g., "a system having at least one of A, B, and C" should include, but is not limited to, systems having A alone, having B alone, having C alone, having A and B, having A and C, having B and C, and / or having A, B, and C, etc.). Similarly, when using expressions such as "at least one of A, B, or C," the expression should generally be interpreted in accordance with the meaning commonly understood by a person skilled in the art (e.g., "a system having at least one of A, B, or C" should include, but is not limited to, systems having A alone, having B alone, having C alone, having A and B, having A and C, having B and C, and / or having A, B, and C, etc.).

[0042] The accompanying drawings illustrate several block diagrams and / or flowcharts. It should be understood that some blocks, or combinations thereof, in the block diagrams and / or flowcharts can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, or other programmable data integrity repair apparatus, such that, when executed by the processor, these instructions can create means for implementing the functions / operations described in these block diagrams and / or flowcharts. The technology of this disclosure can be implemented in hardware and / or software (including firmware, microcode, etc.). Alternatively, the technology of this disclosure can take the form of a computer program product stored on a computer-readable storage medium, which is available for use by or in conjunction with an instruction execution system.

[0043] In the technical solutions disclosed herein, the collection, storage, use, processing, transmission, provision, disclosure, and application of information all comply with the provisions of relevant laws and regulations, necessary confidentiality measures have been taken, and they do not violate public order and good morals.

[0044] In the technical solution disclosed herein, if it is necessary to obtain user personal information, the user's authorization or consent is obtained before obtaining or collecting the user's personal information.

[0045] To address the technical problems existing in related technologies, this disclosure provides a method for tracing the change history of a network device, applied to a server, comprising: obtaining first configuration information and second configuration information of the network device, wherein the first configuration information represents the current configuration of the network device, and the second configuration information represents the historical configuration of the network device; comparing the first configuration information and the second configuration information to obtain configuration difference information; obtaining multiple change information within the time period corresponding to the historical configuration to the current configuration from the change management system; and matching the configuration difference information with the multiple change information to determine the change information associated with the configuration difference information.

[0046] Figure 1 The system architecture 100 of a method and apparatus for tracing back the change history of network devices according to an embodiment of this disclosure is illustrated schematically. It should be noted that... Figure 1 The examples shown are merely examples of system architectures that can be applied to the embodiments of this disclosure, in order to help those skilled in the art understand the technical content of this disclosure, but do not mean that the embodiments of this disclosure cannot be used in other devices, systems, environments or scenarios.

[0047] like Figure 1 As shown, the system architecture 100 according to this embodiment may include a terminal 101, a storage device 102, a network 103, and a server 104. The network 103 provides a communication link between the terminal 101, the storage device 102, and the server 104.

[0048] Terminal 101 can be, for example, an electronic device with a touch screen, such as a mobile phone, computer, or smart cabinet. Users can initiate change history tracing of network devices by clicking the corresponding function box on the touch screen or entering a change history tracing request. Terminal 101 can be configured with a result display unit to display the result information of change history tracing.

[0049] Storage device 102 can be used to store various information during the change history tracing process. Storage device 102 may include, for example, a network device information storage unit, a configuration storage unit, and a configuration difference information storage unit. The network device information storage unit stores network device information that needs to be monitored and configured, including device type, IP address, device name, configuration capture method, and configuration encoding format. The configuration storage unit stores network device configuration information; it can create corresponding directories by date, with each day's configuration stored in the directory corresponding to that date. The configuration difference information storage unit records configuration difference information for each network device, which may include, for example, device name, IP address, configuration difference portion, inspection time, change order number, and reason for change.

[0050] Network 103 can include various connection types, such as wired, wireless communication links, or fiber optic cables. Wired connections can utilize cables and any of the following interfaces: Fibre Channel, infrared interface, Type-D data interface, serial interface, USB interface, USB Type-C interface, or Dock interface. Wireless connections can utilize wireless communication technologies such as Bluetooth, Wi-Fi, Infrared, and ZigBee.

[0051] Server 104 can be a server providing various services, such as a backend management server for tracing the change history of network devices (for example only). Server 104 can, for example, be configured with a configuration capture unit, a configuration information analysis and comparison unit, a change retrieval unit, and a notification sending unit. Server 104 receives a change history tracing request sent by terminal 101 via network 103, performs change history tracing of network devices according to the request, and sends the generated configuration difference information and the configuration difference information after adding change information to storage device 102 via network 103. During the execution of network device change history tracing, the configuration capture unit of server 104 obtains the first and second configuration information of the network device via network 103, and obtains multiple change information within the time period corresponding to the historical configuration to the current configuration from the change management system via the change retrieval unit. Based on the configuration information analysis and comparison unit, the first and second configuration information are compared to obtain configuration difference information. The configuration difference information is then matched with multiple change information to determine the change information associated with the configuration difference information.

[0052] It should be noted that the network device change history tracing method provided in this embodiment can be executed by server 104. Accordingly, the network device change history tracing device provided in this embodiment can be located in server 104. Alternatively, the network device change history tracing method provided in this embodiment can also be executed by a server or server cluster that is different from server 104 and capable of communicating with terminal 101 and / or server 104. Accordingly, the network device change history tracing device provided in this embodiment can also be located in a server or server cluster that is different from server 104 and capable of communicating with terminal 101 and / or server 104. Alternatively, the network device change history tracing method provided in this embodiment can also be partially executed by server 104 and partially executed by terminal 101. Accordingly, the network device change history tracing device provided in this embodiment can also be partially located in server 104 and partially located in terminal 101.

[0053] It should be understood that Figure 1 The number of terminals, storage devices, networks, and servers shown is merely illustrative. Any number of terminals, storage devices, networks, and servers can be included depending on implementation needs.

[0054] The network device change history tracing method provided in this disclosure can be applied to the fintech field. For example, a financial institution might deploy two firewalls of a certain model as boundary firewalls. As business systems constantly change, network administrators frequently need to add or delete firewall policies, and all configuration adjustments are approved and recorded through a change management system. Over time, the change management system accumulates a massive amount of historical firewall changes, making it extremely difficult to retrieve a specific change record. However, the network device change history tracing method provided in this disclosure improves the efficiency of network device change retrieval and facilitates rapid tracing of network change history by administrators.

[0055] It should be understood that the method for tracing network device change history provided in this disclosure is not limited to the fintech field, but can also be used in any field other than finance. The above description is merely exemplary, and the method for tracing network device change history in this disclosure can be applied to any field involving changes in network device configuration, such as e-commerce, product recommendation, logistics, and other technical fields.

[0056] The following will be based on Figure 1 Describes scenarios for tracing back the history of network device changes, through... Figures 2-8 The method for tracing back the change history of network devices according to embodiments of this disclosure will be described in detail.

[0057] Figure 2 A flowchart illustrating a method for tracing back the change history of a network device according to an embodiment of the present disclosure is shown.

[0058] like Figure 2 As shown, the method for tracing back the change history of the network device may include, for example, operations S201 to S204.

[0059] In operation S201, the first configuration information and the second configuration information of the network device are obtained.

[0060] In the embodiments of this disclosure, the first configuration information represents the current configuration of the network device, for example, the network device configuration for the current day. The second configuration information represents the historical configuration of the network device, for example, the network device configuration for the previous day. The first and second configuration information can be stored in a configuration storage unit with corresponding directories created according to date, with each day's configuration stored in the directory corresponding to the date. Therefore, the first and second configuration information can be directly obtained from the configuration storage unit. Robotic Process Automation (RPA) can be used to obtain the first and second configuration information.

[0061] In operation S202, the first configuration information and the second configuration information are compared to obtain configuration difference information.

[0062] In the embodiments of this disclosure, the configuration difference information can be text information and can be stored based on the current comparison time. Configuration difference information can be understood, for example, as the routing information contained in the first configuration information being inconsistent with the routing information contained in the second configuration information. This disclosure does not impose any specific limitations; higher configuration requirements need to be implemented based on actual application needs.

[0063] In operation S203, retrieve multiple change information from the historical configuration to the current configuration within the time period corresponding to the change management system.

[0064] For example, if the current day's log is 't', meaning the time corresponding to the current configuration is 't', then the previous day can be recorded as (t-1), meaning the time corresponding to the historical configuration is (t-1). Therefore, one can log into the change management system and retrieve network change information within the range from the inspection time (t-1) to the inspection time 't'. The method for retrieving change information is to log into the change management system using PRA technology.

[0065] In operation S204, the configuration difference information is matched with multiple change information to determine the change information associated with the configuration difference information.

[0066] In the embodiments of this disclosure, among the multiple change information, there may be change information associated with configuration difference information, or there may be no change information associated with configuration difference information. If there is change information associated with configuration difference information, the configuration difference information and the associated change information can be stored. If there is no change information associated with configuration difference information, the matching process can be terminated.

[0067] According to embodiments of this disclosure, by comparing the current configuration of a network device with its historical configuration to obtain configuration difference information, and then directly associating the configuration difference information with multiple change information within the corresponding time period, the amount of data computation is greatly reduced. Therefore, it is possible to quickly obtain the change information of the current configuration, thereby improving the efficiency of network device change retrieval, facilitating administrators to trace the history of network changes, continuously improving the level of network change management, and enhancing the network stability of financial enterprises.

[0068] Figure 3 The flowchart illustrating the process of obtaining first configuration information and second configuration information of a network device in operation S201 according to an embodiment of the present disclosure is shown.

[0069] like Figure 3 As shown, obtaining the first and second configuration information of the network device in operation S201 may include operations S301 to S303.

[0070] When operating S301, obtain device information of the network devices that need to be monitored and configured.

[0071] When operating S302, the configuration capture method is used to capture the first and second configuration information of the network devices that need to be monitored.

[0072] During operation S303, the first configuration information and the second configuration information are stored according to the capture time.

[0073] In embodiments of this disclosure, device information may include, for example, device type, IP address, device name, and configuration capture method. The device type, IP address, and device name can be used to identify and distinguish network devices whose configurations need to be monitored, while the configuration capture method indicates the specific method used to obtain the configuration of the current network device.

[0074] Furthermore, the configuration capture methods may include: logging into the network management system to download the first and second configuration information of the network device; or logging into the network device and transmitting the first and second configuration information via a file transfer protocol or simple file transfer protocol; or logging into the network device and entering commands to capture the information.

[0075] Figure 4The flowcharts illustrate three methods for capturing specific configuration information according to embodiments of this disclosure.

[0076] like Figure 4 As shown, for example, before capturing the configuration, the current time (e.g., date) is obtained, and a corresponding directory is created based on the date. During the capture process, it is determined whether the configuration information has already been captured through the network management system. If it has, the first and second configuration information can be downloaded directly from the network management system. Alternatively, a command can be sent to log in to the network device and transfer the configuration file containing the configuration information to a File Transfer Protocol (FTP) server or a Trivial File Transfer Protocol (TFTP) server to obtain the first and second configuration information. Alternatively, a command can be sent to log in to the network device and enter the command `show run / display current-configuration` to obtain the first and second configuration information. After the capture is complete, the captured first and second configuration information is saved to a directory created on the current date for easy retrieval by date later.

[0077] According to embodiments of this disclosure, a method for quickly acquiring configuration information based on device information is provided, thereby achieving efficient acquisition of configuration information. By setting multiple methods for acquiring configuration information, the acquisition needs in different scenarios can be met, thus improving the flexibility of the backtracking method.

[0078] Figure 5 A flowchart illustrating the comparison of first configuration information and second configuration information in operation S202 according to an embodiment of the present disclosure is shown.

[0079] like Figure 5 As shown, comparing the first configuration information and the second configuration information in operation S202 may include operations S501 to S504.

[0080] When operating S501, obtain the device information of the network devices that need to be monitored and configured. The device information includes IP address, device name and configuration encoding format.

[0081] In operation S502, the first configuration information and the second configuration information are parsed line by line according to the configuration encoding format.

[0082] In operation S503, the parsed first configuration information and the parsed second configuration information are compared line by line, and the differences between the first configuration information and the second configuration information are extracted to obtain the configuration difference information.

[0083] When operating S504, configuration difference information is stored using IP address, device name, and check time as indexes.

[0084] In embodiments of this disclosure, the configuration difference information obtained through comparison can be text information.

[0085] According to embodiments of this disclosure, the configuration encoding format of configuration information can be quickly obtained based on device information, thereby achieving efficient parsing of configuration information.

[0086] Figure 6 A flowchart illustrating a method for tracing back the change history of a network device according to another embodiment of this disclosure is shown.

[0087] like Figure 6 As shown, the method for tracing back the change history of the network device may also include operations S601 to S602.

[0088] When operating S601, the configuration difference information is input into the web page rendering engine to generate a hypertext markup language file.

[0089] In operation S602, add a first tag, a second tag, and a third tag to the Hypertext Markup Language file.

[0090] In embodiments of this disclosure, a first tag is used to mark the currently added configuration, a second tag is used to mark the currently deleted configuration, and a third tag is used to mark the currently changed configuration.

[0091] For example, the configuration of the day and the previous configuration are input into the web page rendering engine to generate two Hyper Text Markup Language (HTML) files that record the configuration and the comparison of the differences. The configuration differences are marked in different colors in the HTML file. New configurations added on the day are marked in green, configurations deleted on the day are marked in red, and configurations changed on the day are marked in yellow. The HTML file is also stored in the difference information recording unit.

[0092] Figure 7 A flowchart illustrating a method for tracing back the change history of a network device according to yet another embodiment of this disclosure is shown.

[0093] like Figure 7 As shown, the method for tracing back the change history of the network device may also include, for example, operation S701.

[0094] In operation S701, add a first hyperlink to the first tag, a second hyperlink to the second tag, and a third hyperlink to the third tag.

[0095] In the embodiments of this disclosure, the first hyperlink, the second hyperlink, and the third hyperlink are used to locate the configuration information marked with the corresponding tags. That is, the first hyperlink can be used to locate the currently added configuration, the second hyperlink can be used to locate the currently deleted configuration, and the third hyperlink can be used to locate the currently modified configuration.

[0096] The following is a specific example using the Python difflib module:

[0097]

[0098] Based on this example, the current check time is April 20, 2023. Therefore, the first configuration information from April 20, 2023, and the second configuration information from April 19, 2023, are obtained and matched. It should be understood that this example is merely a specific illustration and is not intended to limit this disclosure.

[0099] According to embodiments of this disclosure, the acquired configuration difference information is converted into a Hypertext Markup Language (HTML) file and different configuration difference information is labeled with different tags, enabling convenient and intuitive comparison of configuration differences. By setting a corresponding hyperlink for each tag, users can quickly jump to the corresponding configuration difference information by clicking the hyperlink, thereby achieving efficient querying of configuration difference information.

[0100] Figure 8 The flowchart illustrating the matching of configuration difference information with multiple change information in operation S204 according to an embodiment of the present disclosure is shown in the illustration.

[0101] like Figure 8 As shown, in operation S204, the configuration difference information is matched with multiple change information, which may include operations S801 to S803.

[0102] In operation S801, extract the change order number, change request user, change reason, and implementation plan from each change information.

[0103] In operation S802, each implementation scheme is analyzed one by one to determine whether each implementation scheme is associated with configuration difference information.

[0104] When operating S803, in response to the association between the implementation plan and configuration difference information, the change order number, change request user, and change reason corresponding to the implementation plan are added to the configuration difference information.

[0105] In the embodiments of this disclosure, a corresponding parsing engine can be selected to parse the implementation based on the file extension of each implementation. The file extension can be, for example, txt / doc / xls. Therefore, the parsing method of the implementation can be quickly determined based on the file extension.

[0106] According to embodiments of this disclosure, since the change information is associated with the configuration difference information simply by parsing the implementation scheme in the change information, the amount of data involved in the association is small, thereby improving the efficiency of change history tracing.

[0107] Figure 9 The illustration shows a flowchart of operation S802 according to an embodiment of the present disclosure, in which each implementation is parsed one by one to determine whether each implementation is associated with configuration difference information.

[0108] like Figure 9 As shown, operation S802 parses each implementation scheme one by one to determine whether each implementation scheme is associated with configuration difference information. For example, it may include operations S901 to S903.

[0109] In operation of S901, a natural language processing model is used to process the text content in each implementation scheme to extract the operation commands for the corresponding network devices in each implementation scheme.

[0110] In operation S902, the configuration difference information is vector-matched with each operation command to calculate the similarity between the configuration difference information and each operation command.

[0111] In operation S903, the implementation scheme and configuration difference information corresponding to similarity greater than a preset threshold are identified and associated.

[0112] In the embodiments of this disclosure, since different implementation users use different formats for their implementation schemes, setting up a corresponding parsing engine for each format would complicate operations and reduce the efficiency of tracing network device change history. Therefore, a natural language processing model can be used to process the text content in the implementation scheme and extract the operation commands for network devices. For example, the format of a certain implementation scheme is shown in Table 1:

[0113] Table 1

[0114]

[0115] During analysis, only the content contained in the "VII. Change Implementation Steps" section needs to be extracted. It should be understood that the format of the implementation plan in Table 1 is merely exemplary, and can be adjusted according to the actual application scenario; this disclosure does not impose any restrictions.

[0116] Furthermore, both the extracted configuration difference information and the operation commands in the implementation plan can be in text format. Vector matching can be performed on the two text segments to calculate their similarity. For example, using the Python difflib module as an example, the vector matching process can be as follows:

[0117]

[0118]

[0119] It should be understood that this example is merely a specific illustration and is not intended to limit this disclosure.

[0120] Since a change request may involve the operation of multiple network devices, or multiple changes may apply to the same network device, a comparison threshold can be set to determine whether the configuration difference information and the change information are related. For example, the comparison threshold can be set to 0.3 and 0.03. If the similarity (x) of two text segments is greater than or equal to 0.3, the change information can be considered related to the current network device configuration change. If the similarity (x) is greater than or equal to 0.03 but less than 0.3, a query can be sent to the administrator for confirmation regarding the relationship between the change information and the current network device configuration change. If the similarity (x) is less than 0.03, the change information is considered unrelated to the current network device configuration change.

[0121] According to embodiments of this disclosure, by calculating the similarity between change information and configuration difference information to determine whether change information and configuration anomaly information are associated, the configuration information associated with configuration difference information can be accurately determined, thereby improving the accuracy of change history tracing.

[0122] Furthermore, if it is determined that there is no change information that matches the configuration difference information, a reminder message is sent to the terminal, whereby the reminder message is used to remind the user to manually fill in the change information.

[0123] For example, notifications could be sent via email or SMS. Manually entering change information could include the change order number and the reason for the change.

[0124] Based on the above embodiments, configuration difference information can also be displayed via the web. The displayed content includes the device name, configuration difference information (in text form), change order number, reason for change, and inspection time. Administrators can quickly retrieve relevant information about a configuration through the search function, including the date the configuration was added, change order number, reason for change, etc. They can also jump to the corresponding HTML page by clicking hyperlinks. The HTML page marks the addition, modification, and deletion of configurations with different colors, making it easy to intuitively compare the differences in configuration.

[0125] In summary, the network device change history tracing method provided in this embodiment can improve the efficiency of network device change retrieval, facilitate administrators in tracing network change history, continuously improve network change management level, and enhance the network stability of financial enterprises.

[0126] based on Figures 2-9 The method for tracing the change history of network devices shown in this disclosure also provides a device for tracing the change history of network devices, which will be described below based on... Figure 1 The described scene, through Figures 10-11 The network device change history tracing device according to embodiments of this disclosure will be described.

[0127] Figure 10 A block diagram of a network device change history tracing device according to an embodiment of the present disclosure is shown schematically.

[0128] like Figure 10 As shown, the network device change history tracing device 1000 may include a first acquisition module 1010, a comparison module 1020, a second acquisition module 1030, and a matching module 1040.

[0129] The first acquisition module 1010 is used to acquire first configuration information and second configuration information of the network device, wherein the first configuration information represents the current configuration of the network device, and the second configuration information represents the historical configuration of the network device. The first acquisition module 1010 can be used to execute the operation S201 described above, which will not be repeated here.

[0130] The comparison module 1020 is used to compare the first configuration information and the second configuration information to obtain configuration difference information. The comparison module 1020 can be used to perform the operation S202 described above, which will not be repeated here.

[0131] The second acquisition module 1030 acquires multiple change information entries from the historical configuration to the current configuration within the time period corresponding to the change management system. The second acquisition module 1030 can be used to execute the operation S203 described above, which will not be repeated here.

[0132] The matching module 1040 is used to match the configuration difference information with multiple change information to determine the change information associated with the configuration difference information. The matching module 1040 can be used to perform the operation S204 described above, which will not be repeated here.

[0133] Figure 11 A block diagram of a device for tracing back the change history of a network device according to another embodiment of the present disclosure is shown schematically.

[0134] like Figure 11 As shown, the network device change history tracing device 1000 may also include, for example, a generation module 1050, a first addition module 1060, and a second addition module 1070.

[0135] The generation module 1050 is used to input the configuration difference information into the web page rendering engine and generate a hypertext markup language file. The generation module 1050 can be used to perform the operation S601 described above, which will not be repeated here.

[0136] The first adding module 1060 adds a first tag, a second tag, and a third tag to the Hypertext Markup Language file. The first tag marks the newly added configuration, the second tag marks the currently deleted configuration, and the third tag marks the currently modified configuration. The first adding module 1060 can perform the operation S602 described above, which will not be repeated here.

[0137] The second adding module 1070 adds a first hyperlink to the first tag, a second hyperlink to the second tag, and a third hyperlink to the third tag. The first, second, and third hyperlinks are used to locate the configuration information of their respective tag markers. The second adding module 1070 can perform the operation S701 described above, which will not be repeated here.

[0138] Any one or more of the modules, submodules, units, and subunits according to embodiments of the present disclosure, or at least part of the functions of any one or more of them, can be implemented in one module. Any one or more of the modules, submodules, units, and subunits according to embodiments of the present disclosure can be implemented by dividing them into multiple modules. Any one or more of the modules, submodules, units, and subunits according to embodiments of the present disclosure can be at least partially implemented as hardware circuitry, such as Field Programmable Gate Arrays (FPGAs), Programmable Logic Arrays (PLAs), Systems-on-Chip, Systems-on-Substrate, Systems-on-Package, Application-Specific Integrated Circuits (ASICs), or implemented in hardware or firmware by any other reasonable means of integrating or packaging circuitry, or implemented in software, hardware, or firmware, or in any suitable combination of any of these three implementation methods. Alternatively, one or more of the modules, submodules, units, and subunits according to embodiments of the present disclosure can be at least partially implemented as computer program modules, which, when run, can perform corresponding functions.

[0139] For example, any and more of the first acquisition module 1010, comparison module 1020, second acquisition module 1030, matching module 1040, generation module 1050, first addition module 1060, and second addition module 1070 can be combined into one module / unit / subunit, or any one of these modules / units / subunits can be split into multiple modules / units / subunits. Alternatively, at least some of the functions of one or more of these modules / units / subunits can be combined with at least some of the functions of other modules / units / subunits and implemented in one module / unit / subunit. According to embodiments of this disclosure, at least one of the first acquisition module 1010, comparison module 1020, second acquisition module 1030, matching module 1040, generation module 1050, first addition module 1060, and second addition module 1070 can be at least partially implemented as hardware circuits, such as field-programmable gate arrays (FPGAs), programmable logic arrays (PLAs), systems-on-a-chip, systems-on-a-substrate, systems-on-package, application-specific integrated circuits (ASICs), or implemented in hardware or firmware by any other reasonable means of integrating or packaging circuits, or implemented in any one of software, hardware, and firmware methods, or in a suitable combination of any of these. Alternatively, at least one of the first acquisition module 1010, comparison module 1020, second acquisition module 1030, matching module 1040, generation module 1050, first addition module 1060, and second addition module 1070 can be at least partially implemented as computer program modules, which can perform corresponding functions when the computer program module is run.

[0140] It should be noted that the device for tracing back the network device change history in the embodiments of this disclosure corresponds to the method for tracing back the network device change history in the embodiments of this disclosure, and their specific implementation details and the resulting technical effects are the same, so they will not be repeated here.

[0141] Figure 12 A block diagram of an electronic device suitable for implementing the methods described above, according to embodiments of the present disclosure, is illustrated schematically. Figure 12 The electronic device shown is merely an example and should not be construed as limiting the functionality and scope of the embodiments disclosed herein.

[0142] like Figure 12As shown, an electronic device 1200 according to an embodiment of the present disclosure includes a processor 1201, which can perform various appropriate actions and processes according to a program stored in a read-only memory (ROM) 1202 or a program loaded from a storage portion 1208 into a random access memory (RAM) 1203. The processor 1201 may include, for example, a general-purpose microprocessor (e.g., a CPU), an instruction set processor and / or an associated chipset and / or a special-purpose microprocessor (e.g., an application-specific integrated circuit (ASIC)), etc. The processor 1201 may also include onboard memory for caching purposes. The processor 1201 may include a single processing unit or multiple processing units for performing different actions of the method flow according to an embodiment of the present disclosure.

[0143] RAM 1203 stores various programs and data required for the operation of electronic device 1200. Processor 1201, ROM 1202, and RAM 1203 are interconnected via bus 1204. Processor 1201 performs various operations of the method flow according to embodiments of the present disclosure by executing programs in ROM 1202 and / or RAM 1203. It should be noted that the programs may also be stored in one or more memories other than ROM 1202 and RAM 1203. Processor 1201 may also perform various operations of the method flow according to embodiments of the present disclosure by executing programs stored in said one or more memories.

[0144] According to embodiments of this disclosure, the electronic device 1200 may further include an input / output (I / O) interface 1205, which is also connected to the bus 1204. The electronic device 1200 may also include one or more of the following components connected to the I / O interface 1205: an input section 1206 including a keyboard, mouse, etc.; an output section 1207 including a cathode ray tube (CRT), liquid crystal display (LCD), etc., and a speaker, etc.; a storage section 1208 including a hard disk, etc.; and a communication section 1209 including a network interface card such as a LAN card, modem, etc. The communication section 1209 performs communication processing via a network such as the Internet. A drive 1210 is also connected to the I / O interface 1205 as needed. A removable medium 1211, such as a disk, optical disk, magneto-optical disk, semiconductor memory, etc., is installed on the drive 1210 as needed so that computer programs read from it can be installed into the storage section 1208 as needed.

[0145] According to embodiments of this disclosure, the method flow according to embodiments of this disclosure can be implemented as a computer software program. For example, embodiments of this disclosure include a computer program product comprising a computer program carried on a computer-readable storage medium, the computer program containing program code for performing the methods shown in the flowchart. In such embodiments, the computer program can be downloaded and installed from a network via communication section 1209, and / or installed from removable medium 1211. When the computer program is executed by processor 1201, it performs the functions defined in the system of embodiments of this disclosure. According to embodiments of this disclosure, the systems, devices, apparatuses, modules, units, etc., described above can be implemented by computer program modules.

[0146] This disclosure also provides a computer-readable storage medium, which may be included in the device / apparatus / system described in the above embodiments; or it may exist independently and not assembled into the device / apparatus / system. The computer-readable storage medium carries one or more programs that, when executed, implement the method according to the embodiments of this disclosure.

[0147] According to embodiments of this disclosure, the computer-readable storage medium can be a non-volatile computer-readable storage medium. Examples include, but are not limited to: portable computer disks, hard disks, random access memory (RAM), read-only memory (ROM), erasable programmable read-only memory (EPROM or flash memory), portable compact disk read-only memory (CD-ROM), optical storage devices, magnetic storage devices, or any suitable combination thereof. In this disclosure, the computer-readable storage medium can be any tangible medium that contains or stores a program that can be used by or in conjunction with an instruction execution system, apparatus, or device.

[0148] For example, according to embodiments of this disclosure, a computer-readable storage medium may include the ROM 1202 and / or RAM 1203 described above and / or one or more memories other than ROM 1202 and RAM 1203.

[0149] The flowcharts and block diagrams in the accompanying drawings illustrate the architecture, functionality, and operation of possible implementations of systems, methods, and computer program products according to various embodiments of the present disclosure. In this regard, each block in a flowchart or block diagram may represent a module, segment, or portion of code containing one or more executable instructions for implementing a specified logical function. It should also be noted that in some alternative implementations, the functions indicated in the blocks may occur in a different order than those indicated in the drawings. For example, two consecutively indicated blocks may actually be executed substantially in parallel, and they may sometimes be executed in reverse order, depending on the functions involved. It should also be noted that each block in a block diagram or flowchart, and combinations of blocks in a block diagram or flowchart, may be implemented using a dedicated hardware-based system that performs the specified function or operation, or using a combination of dedicated hardware and computer instructions. Those skilled in the art will understand that the features recited in the various embodiments and / or claims of this disclosure can be combined and / or combined in various ways, even if such combinations or combinations are not expressly described in this disclosure. In particular, the features described in the various embodiments and / or claims of this disclosure may be combined and / or combined in various ways without departing from the spirit and teachings of this disclosure. All such combinations and / or combinations fall within the scope of this disclosure.

Claims

1. A method for tracing back the change history of network devices, applied on the server side, comprising: Obtain first configuration information and second configuration information of a network device, wherein the first configuration information represents the current configuration of the network device, and the second configuration information represents the historical configuration of the network device; The first configuration information and the second configuration information are compared to obtain configuration difference information; Retrieve multiple change information from historical configurations to the current configuration within the time period corresponding to the change management system; Extract the change order number, the user who applied for the change, the reason for the change, and the implementation plan from each change information; Each implementation scheme is analyzed one by one to determine whether each implementation scheme is associated with the configuration difference information; In response to the association between the implementation scheme and the configuration difference information, the change order number, change request user and change reason corresponding to the implementation scheme are added to the configuration difference information, and the change information corresponding to the implementation scheme is determined as the change information associated with the configuration difference information.

2. The method for tracing back the change history of network devices according to claim 1, wherein, The acquisition of the first and second configuration information of the network device includes: Obtain device information of the network devices that need to be monitored and configured, wherein the device information includes IP address, device name and configuration capture method; The configuration capture method described above is used to capture the first and second configuration information of the network devices that need to be monitored. The first configuration information and the second configuration information are stored according to the capture time.

3. The method for tracing back the change history of network devices according to claim 2, wherein, The configuration capture methods include: Log in to the network management system to download the first configuration information and the second configuration information of the network device; or Log in to the network device and transmit the first configuration information and the second configuration information via File Transfer Protocol or Simple File Transfer Protocol; or; Log in to the network device and enter commands to capture data.

4. The method for tracing back the change history of network devices according to claim 1, wherein, The step of comparing the first configuration information and the second configuration information to obtain configuration difference information includes: Obtain device information of the network devices that need to be monitored and configured, wherein the device information includes IP address, device name and configuration encoding format; The first configuration information and the second configuration information are parsed line by line according to the configuration encoding format; The parsed first configuration information and the parsed second configuration information are compared line by line, and the differences between the first configuration information and the second configuration information are extracted to obtain the configuration difference information. The configuration difference information is stored using the IP address, the device name, and the inspection time as indexes.

5. The method for tracing back the change history of network devices according to claim 4, the method further includes: The configuration difference information is input into the web page rendering engine to generate a hypertext markup language file; Add a first tag, a second tag, and a third tag to the hypertext markup language file, wherein the first tag is used to mark the currently added configuration, the second tag is used to mark the currently deleted configuration, and the third tag is used to mark the currently changed configuration.

6. The method for tracing back the change history of network devices according to claim 5, the method further includes: A first hyperlink is added to the first tag, a second hyperlink is added to the second tag, and a third hyperlink is added to the third tag, wherein the first hyperlink, the second hyperlink, and the third hyperlink are respectively used to locate the configuration information of the corresponding tag marker.

7. The method for tracing back the change history of network devices according to claim 1, wherein, The step of parsing each implementation scheme one by one to determine whether each implementation scheme is associated with the configuration difference information includes: Natural language processing models are used to process the text content in each of the above implementation schemes to extract the operation commands for the corresponding network devices in each implementation scheme. The configuration difference information is vector matched with each of the operation commands to calculate the similarity between the configuration difference information and each of the operation commands; The implementation scheme corresponding to a similarity greater than a preset threshold is determined and associated with the configuration difference information.

8. The method for tracing back the change history of network devices according to claim 7, wherein, The step of processing the text content in each of the aforementioned implementation schemes using a natural language processing model includes: The appropriate parsing engine is selected based on the file extension of each implementation scheme to parse the implementation scheme.

9. The method for tracing back the change history of network devices according to claim 1, the method comprising: If no change information is found to match the configuration difference information, a reminder message is sent to the terminal, wherein the reminder message is used to remind the user to manually fill in the change information.

10. A device for tracing back the change history of network devices, comprising: The first acquisition module is used to acquire first configuration information and second configuration information of a network device, wherein the first configuration information represents the current configuration of the network device, and the second configuration information represents the historical configuration of the network device; The comparison module is used to compare the first configuration information and the second configuration information to obtain configuration difference information; The second acquisition module is used to acquire multiple change information within the time period corresponding to the historical configuration to the current configuration in the change management system. The matching module is used to extract the change order number, change request user, change reason, and implementation plan from each change information; parse each implementation plan one by one to determine whether each implementation plan is associated with the configuration difference information; in response to the implementation plan being associated with the configuration difference information, add the change order number, change request user, and change reason corresponding to the implementation plan to the configuration difference information, and determine the change information corresponding to the implementation plan as the change information associated with the configuration difference information.

11. An electronic device, comprising: One or more processors; Storage device for storing one or more programs. Wherein, when the one or more programs are executed by the one or more processors, the one or more processors perform the method according to any one of claims 1 to 9.

12. A computer-readable storage medium storing executable instructions that, when executed by a processor, cause the processor to perform the method according to any one of claims 1 to 9.

13. A computer program product comprising a computer program that, when executed by a processor, implements the method according to any one of claims 1 to 9.

Images