State detection based left bracket protection method and device in mimic system

Abstract

The application provides a state detection-based left bracket protection method and device in a quasimode system, comprising the following steps: in a quasimode operation mode, monitoring the processing flow of a left bracket, and obtaining the operation state of each processing flow; feeding back the operation state of each processing flow to a state detector; when the state detector determines that the operation state of at least one processing flow is abnormal according to a preset state sample, switching the left bracket to a non-quasimode operation mode, performing a reset operation on the left bracket, and switching the left bracket to the quasimode operation mode again after the reset operation is completed.

Description

Technical Field

[0001] This invention relates to mimicry brackets, and more specifically, to a method and apparatus for protecting left brackets based on state detection in a mimicry system. Background Technology

[0002] A mimicry system typically consists of a left bracket, an executor, a right bracket, and a scheduler. The left bracket, located at the forefront of the mimicry system, directly interacts with the user; therefore, its security directly impacts the overall security of the mimicry system. Common methods to improve the security of the left bracket include combining it with traditional security measures and recursively mimicking it. However, these methods often increase the cost and complexity of the left bracket design. Therefore, designing a relatively simple solution to enhance the security of the left bracket is crucial for improving the application of mimicry defense technology in engineering practice.

[0003] In order to solve the above problems, people have been seeking an ideal technological solution. Summary of the Invention

[0004] The purpose of this invention is to address the shortcomings of existing technologies by providing a method and apparatus for protecting left brackets based on state detection in a mimicry system.

[0005] To achieve the above objectives, the technical solution adopted by the present invention is: a left bracket protection method based on state detection, comprising the following steps:

[0006] In the mimicry operation mode, the processing flow of the left parenthesis is monitored to obtain the running status of each processing flow;

[0007] The running status of each processing flow is fed back to the status detector. When the status detector determines that the running status of at least one processing flow is abnormal based on the preset status sample, the left bracket is switched to the non-mimicry running mode and the left bracket is reset. After the reset operation is completed, the left bracket is switched back to the mimicry running mode.

[0008] In the mimicry operation mode, the left bracket receives the request message sent by the client, copies and distributes it to each heterogeneous execution entity, and adjudicates the response information returned by each heterogeneous execution entity. Based on the adjudication result, it selects one response information to transmit to the client and sends the adjudication information to the scheduler.

[0009] In non-mimicry mode, the left bracket forwards the received request information to the specified heterogeneous executor and transmits the response information returned by the specified heterogeneous executor to the client.

[0010] A second aspect of the present invention provides a left bracket protection device based on state detection in a mimicry system, comprising:

[0011] The status monitoring module is used to monitor the processing flow of the left bracket in the mimicry operation mode and obtain the running status of each processing flow.

[0012] The status detector is used to receive the running status of each processing flow, determine whether the running status of the processing flow is abnormal based on the preset status sample, and send a repair instruction to the repair module when the running status of at least one processing flow is abnormal.

[0013] The repair module is used to switch the left bracket to a non-mimicry running mode, reset the left bracket, and after the reset operation is completed, switch the left bracket back to mimicry running mode.

[0014] In the mimicry operation mode, the left bracket receives the request message sent by the client, copies and distributes it to each heterogeneous execution entity, and adjudicates the response information returned by each heterogeneous execution entity. Based on the adjudication result, it selects one response information to transmit to the client and sends the adjudication information to the scheduler.

[0015] In non-mimicry mode, the left bracket forwards the received request information to the specified heterogeneous executor and transmits the response information returned by the specified heterogeneous executor to the client.

[0016] A third aspect of the present invention provides a self-protected left bracket in a mimicry system, including an Nginx reverse proxy and the aforementioned left bracket protection device;

[0017] The Nginx reverse proxy includes an HTTP request data distribution module and an HTTP arbitration module. The HTTP request data distribution module is connected to the Web client and several heterogeneous execution entities to receive HTTP requests sent by the Web client and distribute them to each heterogeneous execution entity.

[0018] The HTTP request data distribution module is also connected to the scheduler to receive heterogeneous execution information sent by the scheduler.

[0019] The HTTP adjudication module is connected to each heterogeneous executor and the web client respectively, so as to receive the HTTP response returned by each heterogeneous executor, adjudicate it, and select an HTTP response to output to the web client based on the adjudication information;

[0020] The HTTP adjudication module is also connected to the scheduler to send adjudication information to the scheduler;

[0021] The status monitoring module of the mimicry system's left bracket protection device monitors the processing flow of the HTTP request data distribution module and the HTTP adjudication module, and obtains the running status of each processing flow.

[0022] The status detector of the left bracket protection device is used to receive the running status of each processing flow, and determine whether the running status of the processing flow is abnormal according to the preset status sample. When the running status of at least one processing flow is abnormal, a repair instruction is sent to the repair module of the left bracket protection device of the mimicry system.

[0023] The repair module of the mimicry system's left bracket protection device maintains the connection between the HTTP request data distribution module and the specified heterogeneous executor, and disconnects the connection between the HTTP request data distribution module and the non-specified heterogeneous executor and the scheduler; and disconnects the connection between the HTTP adjudication module and all heterogeneous executors and the scheduler; then, it performs a reset operation on the HTTP request data distribution module and the HTTP adjudication module, and after the reset operation is completed, it re-establishes and maintains the connection between the HTTP request data distribution module and the non-specified heterogeneous executor and the scheduler; and establishes and maintains the connection between the HTTP adjudication module and all heterogeneous executors and the scheduler.

[0024] A fourth aspect of the present invention provides a mimicry system, including a left bracket, a plurality of heterogeneous executors and a scheduler, wherein the left bracket is the aforementioned mimicry system left bracket.

[0025] This invention has outstanding substantive features and significant progress compared with the prior art. Specifically, this invention can determine whether the operating state of the simulated left bracket has changed by real-time monitoring of the running status of the simulated left bracket and comparing it with the sample state under normal operating conditions of the simulated left bracket. This is done without performing any simulated operation on the simulated left bracket, which is simple and convenient. It can quickly solve the security problem of the left bracket without increasing the cost of the left bracket design or the complexity of the technical solution.

[0026] In this invention, the left bracket has a mimicry operation mode and a non-mimicry operation mode. Under normal circumstances, the left bracket is in the mimicry operation mode. When it is determined that the operation state of the left bracket is abnormal, the left bracket is switched to the non-mimicry operation mode, and a reset operation is performed on the left bracket in the non-mimicry operation mode, thereby quickly solving the security problem of the left bracket. After the reset operation is completed, the left bracket is switched back to the mimicry operation mode, so that the mimicry system can resume normal operation.

[0027] In this invention, before each mode switch, it is first checked whether there is external network data in the left bracket. If not, the mode switch is performed; otherwise, it is checked again whether there is external network data in the left bracket, thereby ensuring that the mode switch does not affect the normal communication between the mimicry system and the outside world. Attached Figure Description

[0028] Figure 1 This is a flowchart of Embodiment 1 of the present invention.

[0029] Figure 2 This is a specific embodiment of the mimicry system described in Example 4. Detailed Implementation

[0030] The technical solution of the present invention will be further described in detail below through specific embodiments.

[0031] Example 1

[0032] like Figure 1 As shown, this embodiment provides a left bracket protection method based on state detection, including the following steps:

[0033] (1) In the mimicry operation mode, monitor the processing flow of the left parenthesis and obtain the running status of each processing flow.

[0034] In the mimicry operation mode, the left bracket receives the request message sent by the client, copies and distributes it to each heterogeneous execution entity, and adjudicates the response information returned by each heterogeneous execution entity. Based on the adjudication result, it selects one response information to transmit to the client and sends the adjudication information to the scheduler.

[0035] As can be seen, the left bracket mainly includes the data receiving process for receiving request messages sent by the client, the data distribution process for copying and distributing data to various heterogeneous execution entities, and the decision information sending process for sending decision information to the scheduler after decision; therefore, in specific implementation, the main focus is on obtaining the running status of these processing processes.

[0036] Specifically, a status monitor I is set in the data receiving process within the left bracket to monitor and acquire the process status information I of the data receiving process in real time. The process status information I includes the processing time and data receiving status of the data receiving process.

[0037] By setting a status monitor II in the data distribution process within the left bracket, the process status information II of the data distribution process can be monitored and obtained in real time. The process status information II includes the processing time of the data distribution process and the data replication status.

[0038] By setting a status monitor III in the decision information sending process within the left bracket, the process status information III of the decision information sending process can be monitored and obtained in real time. The process status information III indicates whether there is any decision exception information before the decision information sending process sends a message to the scheduler.

[0039] (2) Feed back the running status of each processing flow to the status detector. When the status detector determines that the running status of at least one processing flow is abnormal according to the preset status sample, the left bracket is switched to the non-mimicry running mode and the left bracket is reset. After the reset operation is completed, the left bracket is switched to the mimicry running mode again.

[0040] The left bracket forwards the received request information to the specified heterogeneous executor and transmits the response information returned by the specified heterogeneous executor to the client.

[0041] As can be seen, this embodiment monitors the running status of the left bracket in real time and compares it with the sample status under normal running conditions of the left bracket to determine whether the running status of the left bracket itself is abnormal, thus eliminating the need to perform mimicry operations on the left bracket.

[0042] Furthermore, in this embodiment, the left bracket has a mimicry operation mode and a non-mimicry operation mode. Under normal circumstances, the left bracket is in the mimicry operation mode. When it is determined that the operation state of the left bracket itself is abnormal, the left bracket is switched to the non-mimicry operation mode, and a reset operation is performed on the left bracket in the non-mimicry operation mode, thereby quickly resolving the security problem of the left bracket. After the reset operation is completed, the left bracket is switched back to the mimicry operation mode, thereby restoring the mimicry system to normal operation.

[0043] It is understood that the state sample is a key factor in determining whether the operating state of the left bracket is abnormal. Therefore, the state sample must be able to truly reflect the normal operating state of the left bracket. Preferably, in this embodiment, the state sample is the baseline data under the condition that the mimicry system is not under threat attack.

[0044] Specifically, the steps for obtaining the preset state samples are as follows: In an environment where the mimicry system is not under threat attack, the initial sample of the process state information I of the receiving process is manually recorded as the state sample of the data receiving process; the initial sample of the process state information II of the data distribution process is manually recorded as the state sample of the distribution process; and the initial sample of the process state information III of the adjudication information sending process is manually recorded as the state sample of the adjudication information sending process.

[0045] It is understandable that, since the left bracket mainly includes a data receiving process for receiving request messages sent by the client, a data distribution process for copying and distributing data to various heterogeneous executors, and a decision information sending process for sending decision information to the scheduler after decision, any abnormality in any of these processes requires a mode switch. At this time, it is highly likely that the heterogeneous executor is executing a task or the left bracket has not yet completed its current data interaction with the outside world. If a mode switch is performed directly, it will cause the heterogeneous executor to be executing a task or the data interaction between the left bracket and the outside world to be interrupted. Therefore, before each mode switch, it is necessary to check whether the left bracket has external network data. If it does not exist, the mode switch is performed; otherwise, the check is performed again to see if the left bracket has external network data.

[0046] Example 2

[0047] This embodiment also provides a left bracket protection device based on state detection in a mimicry system, including:

[0048] The status monitoring module is used to monitor the processing flow of the left bracket in the mimicry operation mode and obtain the running status of each processing flow.

[0049] The status detector is used to receive the running status of each processing flow, determine whether the running status of the processing flow is abnormal based on the preset status sample, and send a repair instruction to the repair module when the running status of at least one processing flow is abnormal.

[0050] The repair module is used to switch the left bracket to a non-mimicry running mode, reset the left bracket, and after the reset operation is completed, switch the left bracket back to mimicry running mode.

[0051] In the mimicry operation mode, the left bracket receives the request message sent by the client, copies and distributes it to each heterogeneous execution entity, and adjudicates the response information returned by each heterogeneous execution entity. Based on the adjudication result, it selects one response information to transmit to the client and sends the adjudication information to the scheduler.

[0052] In non-mimicry mode, the left bracket forwards the received request information to the specified heterogeneous executor and transmits the response information returned by the specified heterogeneous executor to the client.

[0053] Specifically, in order to monitor the processing status of the left bracket in the mimicry operation mode, the status monitoring module includes status monitor I, status monitor II and status monitor III.

[0054] The status monitor I is set in the data receiving process within the left bracket, and monitors and acquires the process status information I of the data receiving process in real time. The process status information I includes the processing time and data receiving status of the data receiving process.

[0055] Status Monitor II is set in the data distribution process within the left bracket to monitor and acquire the process status information II of the data distribution process in real time. The process status information II includes the processing time of the data distribution process and the data replication status.

[0056] Status Monitor III is set in the adjudication information sending process within the left bracket to monitor and acquire the process status information III of the adjudication information sending process in real time. The process status information III indicates whether there is any adjudication anomaly information before the adjudication information sending process sends a message to the scheduler.

[0057] It is understood that the left bracket protection device also includes an external network data detection unit. Before each mode switch, the repair module calls the external network data detection unit to detect whether there is external network data in the left bracket, and performs a mode switch if there is no external network data. Otherwise, it calls the external network data detection unit again to detect whether there is external network data in the left bracket.

[0058] Example 3

[0059] This embodiment also provides a self-protected left bracket in a mimicry system, including an Nginx reverse proxy and the left bracket protection device described in Embodiment 2;

[0060] The Nginx reverse proxy includes an HTTP request data distribution module and an HTTP arbitration module. The HTTP request data distribution module is connected to the Web client and several heterogeneous execution entities to receive HTTP requests sent by the Web client and distribute them to each heterogeneous execution entity.

[0061] The HTTP request data distribution module is also connected to the scheduler to receive heterogeneous execution information sent by the scheduler.

[0062] The HTTP adjudication module is connected to each heterogeneous executor and the web client respectively, so as to receive the HTTP response returned by each heterogeneous executor, adjudicate it, and select an HTTP response to output to the web client based on the adjudication information;

[0063] The HTTP adjudication module is also connected to the scheduler to send adjudication information to the scheduler;

[0064] Preferably, the Nginx reverse proxy connects to the web client, several heterogeneous execution entities, and the scheduler through different network interface cards;

[0065] The status monitoring module of the mimicry system's left bracket protection device monitors the processing flow of the HTTP request data distribution module and the HTTP adjudication module, and obtains the running status of each processing flow.

[0066] The status detector of the left bracket protection device is used to receive the running status of each processing flow, and determine whether the running status of the processing flow is abnormal according to the preset status sample. When the running status of at least one processing flow is abnormal, a repair instruction is sent to the repair module of the left bracket protection device of the mimicry system.

[0067] The repair module of the mimicry system's left bracket protection device maintains the connection between the HTTP request data distribution module and the specified heterogeneous executor, and disconnects the connection between the HTTP request data distribution module and the non-specified heterogeneous executor and the scheduler; and disconnects the connection between the HTTP adjudication module and all heterogeneous executors and the scheduler; then, it performs a reset operation on the HTTP request data distribution module and the HTTP adjudication module, and after the reset operation is completed, it re-establishes and maintains the connection between the HTTP request data distribution module and the non-specified heterogeneous executor and the scheduler; and establishes and maintains the connection between the HTTP adjudication module and all heterogeneous executors and the scheduler.

[0068] Example 4

[0069] This embodiment provides a mimicry system, including a left bracket, several heterogeneous executors, and a scheduler, wherein the left bracket is the mimicry system left bracket described in Embodiment 3.

[0070] Figure 2 The example shown illustrates a specific implementation of the mimicry system, using the processing of HTTP data with a left bracket.

[0071] In this embodiment, the left bracket is located on a device consisting of a CentOS operating system and an x86 board. The Nginx reverse proxy of the left bracket is implemented through the open-source nginx. There are three heterogeneous execution entities: heterogeneous execution entity 1 is composed of PHP + Nginx; heterogeneous execution entity 2 is composed of IWA + Tomcat; and heterogeneous execution entity 3 is composed of Python + Apache.

[0072] Specifically, the Nginx reverse proxy connects to the client through Eth1 network interface card 1, connects to heterogeneous execution entities 1-3 through Eth1 network interface cards 2-4, and connects to the scheduler through Eth1 network interface card 5.

[0073] Specifically, the Nginx reverse proxy includes an HTTP request data distribution module labeled HRealy and an HTTP adjudication module labeled HJudge in software form.

[0074] The data processing flow of HRealy is divided into: data receiving process P1 listens to the HTTP data stream on the Eth1 network card; data distribution process P2 converts the HTTP data stream and then sends it to the backend heterogeneous execution entity 1-heterogeneous execution entity 3 through Eth1 network card 2-Eth1 network card 4 respectively.

[0075] Therefore, a status monitor W1 is set in the P1 process to monitor and acquire the process status information I of the P1 process in real time. Specifically, the process status information I is the processing time T1 of the P1 process and the data receiving status D1 of the P1 process. In the P2 process, W2 is set to monitor and acquire the process status information II of the P2 process in real time. Specifically, the process status information II is the processing time T2 of the P2 process and the data sending status D2 of the P2 process.

[0076] Under normal operating conditions of the mimicry system, the process status information I and process status information II corresponding to processes P1 and P2 in HRealy are used as initial samples SaP1 and SaP2, respectively. SaP1 = {200ms, 192.168.1.10}, which means that the processing time of process P1 is less than 200ms and the destination IP address of P1 receiving data is 192.168.1.10; SaP2 = {600ms, 3}, which means that the processing time of process P2 is less than 600ms and P2 needs to perform 3 data copies when sending data.

[0077] The HJudge data processing flow is divided into two parts: the adjudication information sending process JP1, which monitors the status of HJudge sending adjudication information. Therefore, a status monitor JPW1 is set in the JP1 process to monitor and obtain the process status information III of the adjudication information sending process in real time. Specifically, the process status information III indicates whether there is any adjudication exception information before the adjudication information sending process sends a message to the scheduler.

[0078] Under normal operating conditions of the mimicry system, the process state information III of the JP1 process in HJudge is used as the initial sample SaJP1, where SaJP1={0,0}, which means that the JP1 process will not generate abnormal decision messages and the JP1 process will not send messages to the scheduler.

[0079] After the initial sample recording is completed, when the mimicry system is in a normal production environment, the status monitors W1, W2, and JPW1 will send the running status of the HRealy program P1 and P2 processes and the status of the HJudge program JP1 process to the status detector. Under normal circumstances, each processing flow and running status of the left bracket should be fixed. When the running status of any processing flow is inconsistent with the corresponding sample status data, it is determined that the left bracket has an anomaly and the running mode of the left bracket needs to be switched.

[0080] For example, when SaJP1={1,1}, the JP1 process will generate an exception decision message and send a message to the scheduler. At this time, it is determined that an exception has occurred, and the running mode of the left bracket needs to be switched and reset.

[0081] For example, if the designated heterogeneous executor in the non-mimicry mode is heterogeneous executor 1, then during the mode switch of the left bracket, the connection between the HTTP request data distribution module and heterogeneous executor 1 is maintained, while the connection between the HTTP request data distribution module and heterogeneous executors 2-3 and the scheduler is disconnected; and the connection between the HTTP adjudication module and all heterogeneous executors and the scheduler is disconnected; then, the HTTP request data distribution module and the HTTP adjudication module are reset, and after the reset operation is completed, the connection between the HTTP request data distribution module and heterogeneous executors 2-3 and the scheduler is re-established and maintained; and the connection between the HTTP adjudication module and all heterogeneous executors and the scheduler is re-established and maintained.

[0082] Unless otherwise specifically stated, the relative steps, numerical expressions, and values ​​of the components and steps described in these embodiments do not limit the scope of the invention.

[0083] Based on the above-described method or system, embodiments of the present invention also provide a network device, including: one or more processors; and a storage device for storing one or more programs, wherein when the one or more programs are executed by the one or more processors, the one or more processors implement the above-described system or execute the above-described method.

[0084] Based on the system described above, embodiments of the present invention also provide a computer-readable medium having a computer program stored thereon, wherein the program, when executed by a processor, implements the system described above.

[0085] The device provided in this embodiment of the invention has the same implementation principle and technical effect as the aforementioned system embodiment. For the sake of brevity, any parts not mentioned in the device embodiment can be referred to the corresponding content in the aforementioned system embodiment.

[0086] Those skilled in the art will clearly understand that, for the sake of convenience and brevity, the specific working process of the systems and devices described above can be referred to the corresponding process in the foregoing system embodiments, and will not be repeated here.

[0087] In all examples shown and described herein, any specific values ​​should be interpreted as merely exemplary and not as limitations; therefore, other examples of exemplary embodiments may have different values.

[0088] It should be noted that similar labels and letters in the following figures indicate similar items. Therefore, once an item is defined in one figure, it does not need to be further defined and explained in subsequent figures.

[0089] The flowcharts and block diagrams in the accompanying drawings illustrate the architecture, functionality, and operation of possible implementations of systems, system products, and computer program products according to various embodiments of the present invention. In this regard, each block in a flowchart or block diagram may represent a module, segment, or portion of code containing one or more executable instructions for implementing a specified logical function. It should also be noted that in some alternative implementations, the functions marked in the blocks may occur in a different order than those shown in the drawings. For example, two consecutive blocks may actually be executed substantially in parallel, and they may sometimes be executed in reverse order, depending on the functions involved. It should also be noted that each block in the block diagrams and / or flowcharts, and combinations of blocks in the block diagrams and / or flowcharts, can be implemented using a dedicated hardware-based system that performs the specified function or action, or using a combination of dedicated hardware and computer instructions.

[0090] If the aforementioned functions are implemented as software functional units and sold or used as independent products, they can be stored in a processor-executable, non-volatile, computer-readable storage medium. Based on this understanding, the technical solution of this invention, essentially, or the part that contributes to the prior art, or a portion of the technical solution, can be embodied in the form of a software product. This computer software product is stored in a storage medium and includes several instructions to cause a computer device (which may be a personal computer, server, or network device, etc.) to execute all or part of the steps of the system described in the various embodiments of this invention. The aforementioned storage medium includes various media capable of storing program code, such as USB flash drives, portable hard drives, read-only memory (ROM), random access memory (RAM), magnetic disks, or optical disks.

[0091] Finally, it should be noted that the above-described embodiments are merely specific implementations of the present invention, used to illustrate the technical solutions of the present invention, and not to limit it. The scope of protection of the present invention is not limited thereto. Although the present invention has been described in detail with reference to the foregoing embodiments, those skilled in the art should understand that any person skilled in the art can still modify or easily conceive of changes to the technical solutions described in the foregoing embodiments within the technical scope disclosed in the present invention, or make equivalent substitutions for some of the technical features; and these modifications, changes, or substitutions do not cause the essence of the corresponding technical solutions to deviate from the spirit and scope of the technical solutions of the embodiments of the present invention, and should all be covered within the scope of protection of the present invention. Therefore, the scope of protection of the present invention should be determined by the scope of the claims.

Claims

1. A method for protecting left brackets based on state detection in a mimicry system, characterized in that, Includes the following steps: In the mimicry operation mode, the processing flow of the left parenthesis is monitored to obtain the running status of each processing flow; The running status of each processing flow is fed back to the status detector. When the status detector determines that the running status of at least one processing flow is abnormal based on the preset status sample, the left bracket is switched to the non-mimicry running mode and the left bracket is reset. After the reset operation is completed, the left bracket is switched back to the mimicry running mode. In the mimicry operation mode, the left bracket receives the request message sent by the client, copies and distributes it to each heterogeneous execution entity, and adjudicates the response information returned by each heterogeneous execution entity. Based on the adjudication result, it selects one response information to transmit to the client and sends the adjudication information to the scheduler. In non-mimicry mode, the left bracket forwards the received request information to the specified heterogeneous executor and transmits the response information returned by the specified heterogeneous executor to the client.

2. The method for protecting left brackets based on state detection in a mimicry system according to claim 1, characterized in that, When monitoring the left parenthesis processing flow and obtaining the running status of each processing flow, the following steps are specifically executed: Set a status monitor I in the data receiving process within the left bracket to monitor and acquire the process status information I of the data receiving process in real time. The process status information I includes the processing time and data receiving status of the data receiving process. Set up a status monitor II in the data distribution process within the left bracket to monitor and acquire the process status information II of the data distribution process in real time. The process status information II includes the processing time of the data distribution process and the data replication status. Set up a status monitor III in the adjudication information sending process within the left bracket to monitor and obtain the process status information III of the adjudication information sending process in real time. The process status information III indicates whether there is any adjudication exception information before the adjudication information sending process sends a message to the scheduler.

3. The method for protecting left brackets based on state detection in a mimicry system according to claim 1, characterized in that, The steps for obtaining the preset state samples are as follows: In an environment where the mimicry system is not under threat attack, the initial sample of the process state information I of the receiving process is manually recorded as the state sample of the data receiving process; the initial sample of the process state information II of the data distribution process is manually recorded as the state sample of the distribution process; and the initial sample of the process state information III of the adjudication information sending process is manually recorded as the state sample of the adjudication information sending process.

4. The method for protecting left brackets based on state detection in a mimicry system according to claim 1, characterized in that: Before each mode switch, the system first checks whether the left bracket contains external network data. If it does not, the mode switch is performed; otherwise, the system checks whether the left bracket contains external network data again.

5. A left bracket protection device based on state detection in a mimicry system, characterized in that, include: The status monitoring module is used to monitor the processing flow of the left bracket in the mimicry operation mode and obtain the running status of each processing flow. The status detector is used to receive the running status of each processing flow, determine whether the running status of the processing flow is abnormal based on the preset status sample, and send a repair instruction to the repair module when the running status of at least one processing flow is abnormal. The repair module is used to switch the left bracket to a non-mimicry running mode, reset the left bracket, and after the reset operation is completed, switch the left bracket back to mimicry running mode. In the mimicry operation mode, the left bracket receives the request message sent by the client, copies and distributes it to each heterogeneous execution entity, and adjudicates the response information returned by each heterogeneous execution entity. Based on the adjudication result, it selects one response information to transmit to the client and sends the adjudication information to the scheduler. In non-mimicry mode, the left bracket forwards the received request information to the specified heterogeneous executor and transmits the response information returned by the specified heterogeneous executor to the client.

6. The left bracket protection device based on state detection in the mimicry system according to claim 5, characterized in that, The status monitoring module includes status monitor I, status monitor II and status monitor III; The status monitor I is set in the data receiving process within the left bracket, and monitors and acquires the process status information I of the data receiving process in real time. The process status information I includes the processing time and data receiving status of the data receiving process. Status Monitor II is set in the data distribution process within the left bracket to monitor and acquire the process status information II of the data distribution process in real time. The process status information II includes the processing time of the data distribution process and the data replication status. Status Monitor III is set in the adjudication information sending process within the left bracket to monitor and acquire the process status information III of the adjudication information sending process in real time. The process status information III indicates whether there is any adjudication anomaly information before the adjudication information sending process sends a message to the scheduler.

7. The left bracket protection device based on state detection in the mimicry system according to claim 5, characterized in that: It also includes an external network data detection unit. Before each mode switch, the repair module calls the external network data detection unit to detect whether there is external network data in the left bracket. If there is no external network data, the mode switch is performed. Otherwise, the external network data detection unit is called again to detect whether there is external network data in the left bracket.

8. A self-protective left bracket in a mimicry system, characterized in that, Including Nginx reverse proxy, and the left bracket protection device as described in any one of claims 5 or 7; The Nginx reverse proxy includes an HTTP request data distribution module and an HTTP adjudication module. The HTTP request data distribution module is connected to the Web client and several heterogeneous execution entities to receive HTTP requests sent by the Web client and distribute them to each heterogeneous execution entity. The HTTP request data distribution module is also connected to the scheduler to receive heterogeneous execution information sent by the scheduler; The HTTP adjudication module is connected to each heterogeneous executor and the web client respectively, so as to receive the HTTP response returned by each heterogeneous executor, adjudicate it, and select an HTTP response to output to the web client based on the adjudication information; The HTTP adjudication module is also connected to the scheduler to send adjudication information to the scheduler; The status monitoring module of the mimicry system's left bracket protection device monitors the processing flow of the HTTP request data distribution module and the HTTP adjudication module, and obtains the running status of each processing flow. The status detector of the left bracket protection device is used to receive the running status of each processing flow, and determine whether the running status of the processing flow is abnormal according to the preset status sample. When the running status of at least one processing flow is abnormal, a repair instruction is sent to the repair module of the left bracket protection device of the mimicry system. The repair module of the mimicry system's left bracket protection device maintains the connection between the HTTP request data distribution module and the specified heterogeneous executor, and disconnects the connection between the HTTP request data distribution module and the non-specified heterogeneous executor and the scheduler. And disconnect the HTTP arbitration module from all heterogeneous executors and the scheduler; then reset the HTTP request data distribution module and the HTTP arbitration module, and after the reset operation is completed, re-establish and maintain the connection between the HTTP request data distribution module and the non-specified heterogeneous executors and the scheduler. And to establish and maintain the connection status between the HTTP adjudication module and all heterogeneous executors and the scheduler.

9. The self-protected left bracket in the mimicry system according to claim 8, characterized in that: The Nginx reverse proxy connects to the web client, several heterogeneous execution entities, and the scheduler through different network interface cards.

10. A mimicry system, comprising a left bracket, a plurality of heterogeneous executors, and a scheduler, characterized in that: The left bracket is the mimicry system left bracket as described in claim 8 or 9.

Images