Network fault processing method and device, storage medium and electronic equipment

Abstract

This disclosure provides a network fault handling method, apparatus, electronic device, and storage medium, relating to the field of network security technology. The method acquires the status information of forwarding network elements and / or security capability network elements at each node in each service chain of the target network, and determines whether the target network has experienced a fault type such as network element fault, node fault, or service chain fault based on the acquired status information. Then, it employs the corresponding fault handling method to handle the fault in the target network. This disclosure enables monitoring of network elements in the target network, determining the location and type of fault based on the obtained monitoring information, achieving the goal of quickly and accurately determining the location of the fault in the target network; and it can call the corresponding handling method for the fault type to handle the fault, reducing the resources consumed during fault handling and better maintaining the stability of the target network.

Description

Technical Field

[0001] This disclosure relates to the field of network security technology, and in particular to a network fault handling method, apparatus, storage medium and electronic device. Background Technology

[0002] In existing methods for ensuring network security, network traffic is often input into the network carrying the security pool service for processing to ensure network security. However, this method faces challenges such as the diversity of security capability network elements within the security pool and their source vendors, as well as the flexible and complex networking methods of the service chain. These challenges may lead to failures in the network carrying the security pool service, which could adversely affect its ability to maintain network security.

[0003] Therefore, to better ensure network security, it is necessary to guarantee the stability of the network carrying security pool services. However, the existing method using Virtual Router Redundancy Protocol (VRRP) to safeguard the network carrying security pool services suffers from high switching latency and poor flexibility. This results in insufficient fault detection and handling capabilities when faults occur within the network, hindering the maintenance of network stability. Therefore, a method is needed that can quickly and accurately identify the fault type within the network carrying security pool services and implement appropriate handling.

[0004] It should be noted that the information disclosed in the background section above is only used to enhance the understanding of the background of this disclosure, and therefore may include information that does not constitute prior art known to those skilled in the art. Summary of the Invention

[0005] This disclosure provides a network fault handling method, apparatus, storage medium, and electronic device, which at least to some extent overcomes the problems of poor ability to determine network fault types and high resource consumption in handling network faults in related technologies.

[0006] Other features and advantages of this disclosure will become apparent from the following detailed description, or may be learned in part from practice of this disclosure.

[0007] According to one aspect of this disclosure, a network fault handling method is provided, comprising:

[0008] Obtain network status information of a target network, wherein the target network includes: one or more service chains, each service chain includes: one or more nodes, each node includes: forwarding network elements and security capability network elements, and the network status information includes: status information of forwarding network elements and security capability network elements within the target network;

[0009] Based on the status information of forwarding network elements and / or security capability network elements within the target network, determine whether the target network meets the preset fault types, wherein the fault types include: network element fault, node fault, and service chain fault;

[0010] Based on the fault type of the target network, the corresponding fault handling method is used to handle the fault of the target network.

[0011] In some embodiments, obtaining the network status information of the target network includes:

[0012] The target network is monitored according to the pre-configured monitoring parameters to obtain the monitoring parameter information of the target network;

[0013] Based on the monitoring parameters of the target network, the network status information of the target network is determined.

[0014] In some embodiments, the monitoring information of the target network is the node activity time of each node in the target network;

[0015] The step of determining the network status information of the target network based on the monitoring information of the target network includes:

[0016] Based on the node activity time of each node in the target network, calculate the network element status value of each network element in each node of the target network.

[0017] Based on the network element state value of each network element in each node of the target network, calculate the node state matrix of each node in the target network.

[0018] In some embodiments, when calculating the network element status value of each network element in each node of the target network based on the node activity time of each node in the target network, the following formula can be used for calculation:

[0019] h = -log(1 - F(InactiveTime))

[0020] Where InactiveTime is the node active time of each node in the target network, F is the cumulative distribution function, which is either the overall distribution function or the exponential distribution function, and h is the calculated network element state value.

[0021] In some embodiments, when calculating the node state matrix of each node in the target network based on the network element state value of each network element in each node of the target network, the following formula can be used for calculation:

[0022] H U =[h VSR1 … hVSRm ] T ·[h SER1 … h SERn ]

[0023] Among them, [h VSR1 … h VSRm [h] is a matrix composed of the network element state values ​​of the forwarding network elements of each node in the target network, where m is the number of forwarding network elements in each node of the target network. SER1 … h SERn [H] is a matrix composed of the network element status values ​​of the security capability network elements of each node in the target network, where n is the number of security capability network elements in each node of the target network, and H is the number of network elements in each node of the target network. U This is the node state matrix for each node in the target network that has been calculated.

[0024] In some embodiments, after calculating the network element status value of each network element in each node of the target network based on the node activity time of each node in the target network, the method further includes:

[0025] Determine whether the network element status value of each network element meets the preset network element fault conditions;

[0026] If the calculated network element status value meets the preset network element fault conditions, then the fault type of the target network is determined to be a network element fault.

[0027] The network element faults in the target network are handled by removing network elements whose calculated network element status values ​​meet preset network element fault conditions.

[0028] In some embodiments, after calculating the node state matrix of each node in the target network based on the network element state value of each network element in each node of the target network, the method further includes:

[0029] Determine whether the node state matrix of each node satisfies the preset node fault conditions;

[0030] If the calculated node state matrix satisfies the preset node fault conditions, then the fault type of the target network is determined to be a node fault.

[0031] If a service chain in the target network has nodes whose calculated node state matrix satisfies the preset node failure conditions, then the failure type of the target network is determined to be a service chain failure.

[0032] The service chain failure in the target network is handled by switching the faulty service chain in the target network to a fault-free service chain.

[0033] According to another aspect of this disclosure, a network fault handling apparatus is also provided for handling faults occurring in a network, characterized in that it comprises:

[0034] The information acquisition module is configured to acquire network status information of a target network, wherein the target network includes: one or more service chains, each service chain includes: one or more nodes, each node includes: forwarding network elements and security capability network elements, and the network status information includes: status information of forwarding network elements and security capability network elements within the target network;

[0035] The fault determination module is configured to determine whether the target network meets a preset fault type based on the status information of the forwarding network elements and / or security capability network elements within the target network. The fault types include: network element fault, node fault, and service chain fault.

[0036] A fault handling module is configured to perform fault handling on the target network using a corresponding fault handling method when the target network meets a fault type. According to another aspect of this disclosure, an electronic device is also provided, comprising: a processor; and a memory for storing executable instructions of the processor; wherein the processor is configured to execute the network fault handling method described in any one of the preceding embodiments via executing the executable instructions.

[0037] According to another aspect of this disclosure, a computer-readable storage medium is also provided, on which a computer program is stored, which, when executed by a processor, implements the network fault handling method described in any of the preceding claims.

[0038] According to another aspect of this disclosure, a computer program product is also provided, including a computer program that, when executed by a processor, implements the network fault handling method of any one of the above.

[0039] The network fault handling method provided in the embodiments of this disclosure obtains the status information of forwarding network elements and / or security capability network elements in the target network, and determines the type of fault occurring in the target network based on the obtained status information, thereby employing the corresponding fault handling method to handle the fault in the target network. This method quickly discovers faults occurring in the target network and accurately determines the fault type based on the target network's status information, where fault types include network element faults, node faults, and service chain faults; and calls the corresponding fault handling method to handle the fault type occurring in the target network, reducing the resources consumed when selecting a fault handling method and better maintaining the stability of the target network.

[0040] It should be understood that the above general description and the following detailed description are exemplary and explanatory only, and are not intended to limit this disclosure. Attached Figure Description

[0041] The accompanying drawings, which are incorporated in and form part of this specification, illustrate embodiments consistent with this disclosure and, together with the description, serve to explain the principles of this disclosure. It is obvious that the drawings described below are merely some embodiments of this disclosure, and those skilled in the art can obtain other drawings based on these drawings without any inventive effort.

[0042] Figure 1 This diagram illustrates a network system structure in which a network fault handling method is applied according to an embodiment of the present disclosure.

[0043] Figure 2 This diagram illustrates a flowchart of a network fault handling method according to an embodiment of the present disclosure;

[0044] Figure 3 This diagram illustrates a flowchart of obtaining network status information of a target network in an embodiment of this disclosure.

[0045] Figure 4 This illustration shows a flowchart of determining the network status information of a target network based on monitoring information of the target network in an embodiment of this disclosure;

[0046] Figure 5 This illustration shows a flowchart of a process for determining whether a network element has malfunctioned based on the network element status value in the target network, as shown in an embodiment of this disclosure.

[0047] Figure 6 This illustrates a flowchart of a process for determining whether a node has failed based on a node state matrix in an embodiment of this disclosure.

[0048] Figure 7 This illustration shows a flowchart of a process in which monitoring information of a target network is obtained by deploying a monitoring terminal on the target network in an embodiment of this disclosure.

[0049] Figure 8 This diagram illustrates how monitoring a target network in an embodiment of the present disclosure is used to monitor and handle faults in the target network.

[0050] Figure 9 This document illustrates a flowchart of fault identification and fault handling for a target network in an embodiment of this disclosure.

[0051] Figure 10 This diagram illustrates a network fault handling device according to an embodiment of the present disclosure.

[0052] Figure 11This diagram illustrates a structural block diagram of an electronic device for network fault handling according to an embodiment of the present disclosure. Detailed Implementation

[0053] Exemplary embodiments will now be described more fully with reference to the accompanying drawings. However, these exemplary embodiments can be implemented in many forms and should not be construed as limited to the examples set forth herein; rather, they are provided so that this disclosure will be more comprehensive and complete, and will fully convey the concept of the exemplary embodiments to those skilled in the art. The described features, structures, or characteristics may be combined in any suitable manner in one or more embodiments.

[0054] Furthermore, the accompanying drawings are merely illustrative of this disclosure and are not necessarily drawn to scale. The same reference numerals in the drawings denote the same or similar parts, and therefore repeated descriptions of them will be omitted. Some block diagrams shown in the drawings are functional entities and do not necessarily correspond to physically or logically independent entities. These functional entities may be implemented in software, in one or more hardware modules or integrated circuits, or in different network and / or processor devices and / or microcontroller devices.

[0055] The specific implementation methods of the embodiments of this disclosure will now be described in detail with reference to the accompanying drawings.

[0056] Figure 1 A schematic diagram of an exemplary application system architecture to which the network fault handling method of the embodiments of this disclosure can be applied is shown. For example... Figure 1 As shown, the system architecture can be a network carrying security pool services, and may include controllers, forwarding network elements, and security capability network elements.

[0057] The controller is used to orchestrate service chain information according to network conditions and distribute the orchestrated service chain information to different nodes composed of forwarding network elements and / or security capability network elements, so that different nodes are connected in the order of the service chain information to obtain different service chains.

[0058] In the forwarding network element, the network element responsible for receiving user traffic from the network is designated as the security pool inlet, and the network element responsible for sending user traffic processed by the network service chain carrying the security pool service to the network is designated as the security pool outlet.

[0059] Security capability network elements are programs that are packaged according to preset standards to perform security functions. Among them, security capability network elements with forwarding capabilities can stand alone as a node, while security capability network elements without forwarding capabilities need to form a node together with forwarding network elements. By connecting different nodes in the order of business chain information, a business chain corresponding to the business chain information can be obtained.

[0060] Those skilled in the art will know that Figure 1 The number of forwarding network elements and security capability network elements shown is merely illustrative; any number of forwarding network elements and security capability network elements can be included according to actual needs. This disclosure does not limit this.

[0061] Under the above system architecture, this disclosure provides a network fault handling method, which can be executed by any electronic device with computing power.

[0062] Figure 2 A flowchart of a network fault handling method according to an embodiment of this disclosure is shown, such as... Figure 2 As shown, the network fault handling method provided in this embodiment includes the following steps:

[0063] S202, Obtain network status information of the target network.

[0064] The target network can be any network that carries any type of service.

[0065] In some embodiments, the target network can be a bearer network. Figure 1 The network carrying the security pool service shown in the figure may include: one or more service chains, each service chain may include: one or more nodes, each node may include: forwarding network elements and security capability network elements, and the network status information includes: the status information of forwarding network elements and security capability elements within the target network.

[0066] S204. Based on the status information of forwarding network elements and / or security capability network elements within the target network, determine whether the target network meets the preset fault type.

[0067] In some embodiments, the preset fault types may include network element faults, node faults, and service chain faults. Since a service chain is formed by connecting different nodes in a certain order, it can be determined that the service chain has failed when one or more nodes on a certain service chain fail.

[0068] S206. Based on the fault type of the target network, adopt the corresponding fault handling method to handle the fault of the target network.

[0069] In some embodiments, for network element failures, the faulty network element can be removed from the target network; for node failures and service chain failures, it is necessary to switch to a service chain that has not failed to continue processing the services originally handled by the service chain to which the faulty node belongs.

[0070] Figure 3 This document illustrates a flowchart of an embodiment of the present disclosure for obtaining network status information of a target network, such as... Figure 3As shown, this embodiment of the disclosure includes the following steps when obtaining network status information of a target network:

[0071] S302 monitors the target network according to the pre-configured monitoring parameters and obtains the monitoring information of the target network.

[0072] In some embodiments, pre-configured monitoring parameters may include protocol type and monitoring session parameters. The protocol type may include Bidirectional Forwarding Detection (BFD) protocol, hello message protocol, etc., and the monitoring session parameters may include monitoring period, session type, whether the monitored target is linked with other states, etc.

[0073] In some embodiments, each node in the target network is monitored to obtain the node activity time of each node.

[0074] S304. Determine the network status information of the target network based on the monitoring information of the target network.

[0075] In some embodiments, when the target network is a network carrying security pool services, the status information of the forwarding network elements and / or security capability network elements that make up each node is determined based on the monitored node activity time of each node in the target network.

[0076] Figure 4 This invention discloses a flowchart illustrating how to determine the network status information of a target network based on monitoring information of the target network, as shown in this embodiment. Figure 4 In determining the network status information of a target network, this embodiment of the disclosure includes the following steps:

[0077] S402, Calculate the network element status value of each network element in each node of the target network based on the node activity time of each node in the target network.

[0078] In some embodiments, when the target network is a network carrying security pool services, for forwarding network elements and security capability network elements within the target network, the node activity time of the monitored forwarding network element or security capability network element is input into the following formula:

[0079] h=-log(1-F(InactiveTime)) (1)

[0080] By performing calculations, the network element status values ​​of the forwarding network element and the security capability network element can be obtained. Among them, InactiveTime is the node active time of each node in the target network that is monitored; F is the cumulative distribution function, which can be the overall distribution function or the exponential distribution function. The appropriate function and parameters are selected based on the network status and historical arrival data. For example, when network messages arrive evenly in the target network, a probability function suitable for uniform distribution is used; when network messages arrive randomly in the target network, a normal or exponential distribution function is used; h is the calculated network element status value.

[0081] S404. Calculate the node state matrix for each node in the target network based on the network element state value of each network element in each node of the target network.

[0082] In some embodiments, when the target network is a network carrying security pool services, for each node in the target network, a one-dimensional matrix composed of the network element state values ​​of the forwarding network elements and security capability network elements that make up each node is obtained, and calculated according to the following formula:

[0083] H U =[h VSR1 … h VSRm ] T ·[h SER1 … h SERn (2)

[0084] The node state matrix of each node is obtained, where [h VSR1 … h VSRm [h] is a matrix composed of the network element state values ​​of the forwarding network elements of each node in the target network, where m is the number of forwarding network elements in each node of the target network; SER1 …h SERn [H] is a matrix composed of the network element state values ​​of the security capability network elements of each node in the target network, where n is the number of security capability network elements in each node of the target network. U The node state matrix for each node in the target network is calculated and represented as follows:

[0085]

[0086] Figure 5 This invention discloses a flowchart illustrating the process of determining whether a network element has malfunctioned based on the network element status value in the target network, as shown in the embodiments of this disclosure. Figure 5 In this embodiment of the disclosure, when determining whether a network element has malfunctioned based on the network element status value in the target network, the following steps are included:

[0087] S502, determine whether the network element status value of each network element meets the preset network element fault conditions.

[0088] In some embodiments, the preset network element fault condition can be that the calculated network element status value is greater than or equal to the network element status threshold set according to the actual situation. If the calculated network element status value is greater than or equal to the preset network element status threshold, then the fault type of the target network is determined to be a network element fault, and the forwarding network element or security capability network element corresponding to the network element status value needs to be handled.

[0089] S504. If the calculated network element status value meets the preset network element fault conditions, then the fault type of the target network is determined to be a network element fault.

[0090] S506, network element faults in the target network are handled by removing network elements whose calculated network element status values ​​meet preset network element fault conditions.

[0091] In some embodiments, when the target network is a network carrying security pool services, the controller in the target network removes the faulty network element from the network based on the information of the faulty network element.

[0092] Figure 6 This illustration shows a flowchart of a process for determining whether a node has failed based on the node state matrix in the target network, as shown in this embodiment of the disclosure. Figure 6 In this embodiment of the disclosure, determining whether a node has failed based on the node state matrix in the target network includes the following steps:

[0093] S602, determine whether the node state matrix of each node meets the preset node fault conditions.

[0094] In some embodiments, the preset node fault condition can be that the value of each element in the node state matrix is ​​greater than the node state threshold set according to the actual situation; if there is a node in the node state matrix where every element is greater than the node state threshold, it indicates that the node has failed.

[0095] S604, if the calculated node state matrix satisfies the preset node fault conditions, then the fault type of the target network is determined to be node fault.

[0096] In some embodiments, if a node in the target network is determined to be faulty based on preset node fault conditions, the fault type of the target network can be determined as a node fault.

[0097] S606, if a service chain in the target network has nodes whose calculated node state matrix satisfies the preset node failure conditions, then the failure type of the target network is determined to be a service chain failure.

[0098] In some embodiments, since the service chain is obtained by connecting multiple nodes in series, when one or more nodes on the service chain fail, it will inevitably affect the operation of the service chain and cause the service chain to fail. The fault type of the target network can be determined as a service chain fault.

[0099] S608 handles service chain failures in the target network by switching the faulty service chain in the target network to a fault-free service chain.

[0100] In some embodiments, a failure of a node causes a failure of the service chain, which in turn prevents the service chain from processing services. In such cases, it is necessary to switch to a service chain that is not experiencing a failure to continue processing services and avoid affecting the normal operation of the target network.

[0101] As an optional embodiment, when the target network is a network carrying security pool services, the target network includes a controller, forwarding network elements, and security capability network elements. After the controller orchestrates service chain information and distributes the service chain information to different nodes composed of one or more network elements, the different nodes are connected according to the service chain information to obtain different service chains. In step S302 above, when monitoring the target network according to the pre-configured monitoring parameters to obtain the monitoring information of the target network, monitoring can be performed by deploying a monitoring terminal on the target network to obtain the monitoring information of the target network. Figure 7 This flowchart illustrates an embodiment of the present disclosure of obtaining monitoring information about a target network by deploying a monitoring terminal on the target network. The steps for monitoring the target network include:

[0102] S702, controller deployment monitoring terminal.

[0103] To accurately acquire monitoring information for different service chains, nodes, and network elements within the target network, a distributed monitoring method is required. This method involves deploying multiple monitoring terminals across the target network. Each terminal is assigned to monitor a corresponding service chain, node, or network element according to preset rules and sends the monitored information to the controller for further processing. A primary / backup deployment method is used to prevent data loss in case of terminal failure, and monitoring terminals cannot be deployed across different hosts.

[0104] S704, the controller classifies network elements.

[0105] The controller categorizes network elements based on their type and the services they perform within the target network. For example, it can classify security capability network elements in the target network into serially deployed security capabilities and bypass deployed security capabilities, or it can classify network elements in the target network into active network elements, suspected abnormal network elements, and abnormal network elements.

[0106] S706: The controller sends configuration information to the monitoring terminal to establish a monitoring session.

[0107] The target network controller sends corresponding monitoring parameters to the monitoring terminal based on the type of target being monitored. Monitoring is then performed based on these parameters. For example, for monitoring terminals monitoring serially deployed security capabilities, the BFD protocol is required due to the high requirements for link status. For bypass-deployed security capability network elements, hello messages are sufficient for monitoring. Active network elements do not require a special detection period. For suspected abnormal network elements, a shorter detection period is needed, and the network element status is determined in each monitoring period. For abnormal network elements, the abnormal network element is reported to the controller for fault handling, and a longer monitoring period is set after the fault is resolved.

[0108] As an optional embodiment, in the use of Figure 7 The method shown illustrates the fault monitoring and handling of the network carrying the security pool service. A schematic diagram is provided below. Figure 8 As shown, the monitoring components responsible for monitoring network elements in the security pool (such as...) Figure 8 The monitoring components 1 to n shown monitor the forwarding network elements and / or security capability network elements assigned to them, and upload the monitoring information to the controller. The controller analyzes and processes the monitoring information, discovers network element faults, node faults and service chain faults in the target network, and calls the corresponding fault handling method according to the fault type to handle them, so as to maintain the status of network elements, nodes and service chains and ensure the normal operation of the target network.

[0109] As an optional embodiment, when the target network is a network carrying a security pool, Figure 9 A flowchart for fault identification and fault handling of a target network is shown, with reference to... Figure 9 When identifying and handling faults in a target network, the steps include:

[0110] S902 allows for flexible deployment of business chains and controllers.

[0111] In this process, the existing service chains in the target network are retained, and the controller arranges the service information of the new service chains according to the actual situation. The controller then distributes the service chain information to the nodes in the target network, enabling the nodes to connect and obtain the new service chains based on the service information.

[0112] S904, deploy monitoring terminals.

[0113] In this process, multiple monitoring terminals are deployed for the target network. Each monitoring terminal is assigned to monitor a corresponding service chain, node, or network element according to preset rules, and sends the monitored information to the controller for further processing. The monitoring terminals are deployed in a primary and backup manner to avoid the loss of monitoring information when the monitoring terminal fails, and the monitoring terminals cannot be deployed across hosts.

[0114] S906 classifies network elements based on their type and the services they carry.

[0115] Among them, the forwarding network elements and security capability network elements in the target network are classified.

[0116] The S908 controller sends out configurations and establishes monitoring sessions based on classification conditions.

[0117] Specifically, based on the classification results in step S906 above, the monitoring parameters are determined to be BFD protocol, port status linkage and single-arm session, and a monitoring session is established based on the above monitoring parameters.

[0118] S910, the controller processes the monitoring information collected by the monitoring terminal.

[0119] Among them, the monitoring information collected by the monitoring terminal is the node activity time of each node in the target network.

[0120] S912, determine the status of network elements.

[0121] The active time of each monitored node is imported into formula (1) for calculation to obtain the network element status value of each network element in each node. The calculated network element status value is then compared with the preset network element status threshold. If the calculated network element status value is greater than or equal to the network element status threshold set according to the actual situation, it is determined that the network element corresponding to the calculated network element status value has a fault, and step S914 is continued. If there is no network element with a calculated network element status value greater than or equal to the network element status threshold, it is determined that the network element in the target network has no fault, and step S916 is executed. F is selected to use the following normal distribution to simulate the cumulative distribution function:

[0122]

[0123] S914, an abnormal network element was detected.

[0124] In this process, faulty network elements are identified as abnormal network elements, and information about these abnormal network elements is collected and sent to the controller in the target network.

[0125] S916, determine the node status.

[0126] Specifically, for each node, the node state matrix of each node is calculated according to the steps recorded in step S404, and each element in each node state matrix calculated in the step is compared with the preset node state threshold. If each element in the node state matrix is ​​greater than the node state threshold set according to the actual situation, it is determined that the node corresponding to the node state matrix has failed.

[0127] S918, an abnormal node was detected.

[0128] In this process, faulty nodes are identified as abnormal nodes, and information about these abnormal nodes is collected and sent to the controller in the target network.

[0129] S920, determine the status of the business chain.

[0130] Specifically, it determines whether each business chain in the target network has abnormal nodes. If a business chain with an abnormal node exists, it is determined that the business chain with the abnormal node has failed.

[0131] S922, an abnormal business chain was detected.

[0132] Among these measures, the faulty service chain is designated as the abnormal service chain, and information about the abnormal service chain is collected and sent to the controller in the target network.

[0133] S924, the controller performs fault handling.

[0134] The controller selects the appropriate handling method to handle the fault based on the information on abnormal network elements, abnormal nodes, and abnormal service chains received from S914, S918, and S922. For abnormal network elements, they are simply removed from the target network. For abnormal nodes and abnormal service chains caused by abnormal nodes, the services originally executed by the abnormal service chain need to be switched to service chains without abnormal nodes. After handling the fault, the system returns to S906 to reclassify the network elements in the target network after fault handling, so as to facilitate the configuration of corresponding monitoring parameters for the network elements in the target network after fault handling.

[0135] In summary, the network fault handling method provided in this disclosure, without changing the original network topology or service chain deployment of the target network, obtains the status information of network elements in the target network, further determines the status information of nodes and service chains in the target network based on the status information of the network elements, and then quickly and accurately determines whether a network element, node, or service chain in the target network has failed by judging whether the obtained status information meets preset fault conditions. If a network element, node, or service chain in the target network has failed, the corresponding fault handling method is invoked according to the fault type to handle it, avoiding the waste of network resources. When obtaining monitoring information of network elements in the target network, a distributed monitoring terminal is deployed to monitor the target network. After classifying the network elements according to their type and the services they carry, corresponding monitoring parameters are assigned to each monitoring terminal to quickly and accurately obtain monitoring information, thereby achieving the goal of quickly determining faults in the target network.

[0136] Furthermore, the network fault handling method provided in this disclosure achieves customized monitoring of the target network by deploying distributed terminals to monitor the target network and configuring corresponding monitoring parameters for each terminal. It also achieves comprehensive adaptation to multiple network element types, multiple monitoring protocols, and multiple state characteristics. Moreover, the network fault handling method provided in this disclosure determines whether network elements, nodes, and service chains are faulty by calculating network element state values ​​and node state matrices, mitigating the impact of network latency and jitter. It also enables the identification and rapid resolution of faults in the target network from multiple dimensions, achieving multi-dimensional fault discovery, accurate fault identification, rapid fault location, and effective fault handling.

[0137] Based on the same inventive concept, this disclosure also provides a network fault handling device, as described in the following embodiments. Since the principle of this device embodiment in solving the problem is similar to that of the above method embodiment, the implementation of this device embodiment can refer to the implementation of the above method embodiment, and repeated parts will not be described again.

[0138] Figure 10 This diagram illustrates a network fault handling device according to an embodiment of the present disclosure, such as... Figure 10 As shown, the device includes:

[0139] The information acquisition module 1002 is configured to acquire network status information of a target network, wherein the target network includes: one or more service chains, each service chain includes: one or more nodes, each node includes: forwarding network elements and security capability network elements, and the network status information includes: status information of forwarding network elements and security capability network elements within the target network.

[0140] The fault determination module 1004 is configured to determine whether the target network meets the preset fault types based on the status information of the forwarding network elements and / or security capability network elements in the target network. The fault types include: network element fault, node fault, and service chain fault.

[0141] The fault handling module 1006 is configured to handle the faults of the target network by adopting the corresponding fault handling methods according to the fault types that the target network meets.

[0142] It should be noted that the modules 1002-1006 mentioned above correspond to S202-S206 in the method embodiments. The examples and application scenarios implemented by the modules and their corresponding steps are the same, but are not limited to the content disclosed in the method embodiments. It should also be noted that the modules mentioned above, as part of the apparatus, can be executed in a computer system such as a set of computer-executable instructions.

[0143] As an optional embodiment, the information acquisition module 1002 is further configured to monitor the target network according to pre-configured monitoring parameters to obtain monitoring parameter information of the target network; and to determine the network status information of the target network based on the monitoring parameter information of the target network.

[0144] As an optional embodiment, when the monitoring information of the target network is the node active time of each node in the target network, the information acquisition module 1002 is further configured to calculate the network element status value of each network element in each node in the target network according to the node active time of each node in the target network; and calculate the node status matrix of each node in the target network according to the network element status value of each network element in each node in the target network.

[0145] As an optional embodiment, the information acquisition module 1002 is further configured to use the above formula (1) to calculate the network element status value of each network element in each node in the target network according to the node active time of each node in the target network.

[0146] As an optional embodiment, the information acquisition module 1002 is also configured to use the above formula (2) to calculate the node state matrix of each node in the target network when calculating the node state matrix of each node in the target network based on the network element state value of each network element in each node.

[0147] As an optional embodiment, after calculating the network element status value of each network element in each node of the target network based on the node activity time of each node in the target network, the fault determination module 1004 is further configured to determine whether the network element status value of each network element meets the preset network element fault conditions; if the calculated network element status value meets the preset network element fault conditions, then the fault type of the target network is determined to be a network element fault.

[0148] The fault handling module 1006 is also configured to handle network element faults in the target network by eliminating network elements whose calculated network element status values ​​meet preset network element fault conditions.

[0149] As an optional embodiment, after calculating the node state matrix of each node in the target network based on the network element state value of each network element in each node in the target network, the fault determination module 1004 is further configured to determine whether the node state matrix of each node satisfies a preset node fault condition; if the calculated node state matrix satisfies the preset node fault condition, the fault type of the target network is determined to be a node fault; if the service chain in the target network has nodes whose calculated node state matrix satisfies the preset node fault condition, the fault type of the target network is determined to be a service chain fault.

[0150] The fault handling module 1006 is also configured to handle the service chain failure of the target network by switching the faulty service chain in the target network to a fault-free service chain.

[0151] Those skilled in the art will understand that various aspects of this disclosure can be implemented as a system, method, or program product. Therefore, various aspects of this disclosure can be specifically implemented in the following forms: a completely hardware implementation, a completely software implementation (including firmware, microcode, etc.), or a combination of hardware and software aspects, collectively referred to herein as a "circuit," "module," or "system."

[0152] The following reference Figure 11 To describe an electronic device 1100 according to such an embodiment of the present disclosure. Figure 11 The electronic device 1100 shown is merely an example and should not impose any limitation on the functionality and scope of use of the embodiments disclosed herein.

[0153] like Figure 11 As shown, the electronic device 1100 is manifested in the form of a general-purpose computing device. The components of the electronic device 1100 may include, but are not limited to: at least one processing unit 1110, at least one storage unit 1120, and a bus 1130 connecting different system components (including storage unit 1120 and processing unit 1110).

[0154] The storage unit stores program code that can be executed by the processing unit 1110, causing the processing unit 1110 to perform the steps described in the "Exemplary Methods" section of this specification according to various exemplary embodiments of this disclosure. For example, the processing unit 1110 can perform the following steps of the above method embodiments:

[0155] Obtain network status information of the target network, wherein the target network includes: one or more service chains, each service chain includes: one or more nodes, each node includes: forwarding network elements and security capability network elements, and the network status information includes: status information of forwarding network elements and security capability network elements within the target network;

[0156] Based on the status information of forwarding network elements and / or security capability network elements within the target network, determine whether the target network meets the preset fault types, including: network element fault, node fault, and service chain fault.

[0157] Based on the fault type of the target network, the corresponding fault handling method is used to handle the fault of the target network.

[0158] Storage unit 1120 may include a readable medium in the form of a volatile storage unit, such as random access memory (RAM) 11201 and / or cache memory 11202, and may further include a read-only memory (ROM) 11203.

[0159] Storage unit 1120 may also include a program / utility 11204 having a set (at least one) of program modules 11205, such program modules 11205 including but not limited to: operating system, one or more application programs, other program modules and program data, each or some combination of these examples may include an implementation of a network environment.

[0160] Bus 1130 can represent one or more of several types of bus structures, including a memory cell bus or memory cell controller, a peripheral bus, a graphics acceleration port, a processing unit, or a local bus using any of the various bus structures.

[0161] Electronic device 1100 can also communicate with one or more external devices 1140 (e.g., keyboard, pointing device, Bluetooth device, etc.), and with one or more devices that enable a user to interact with electronic device 1100, and / or with any device that enables electronic device 1100 to communicate with one or more other computing devices (e.g., router, modem, etc.). This communication can be performed via input / output (I / O) interface 1150. Furthermore, electronic device 1100 can also communicate with one or more networks (e.g., local area network (LAN), wide area network (WAN), and / or public networks, such as the Internet) via network adapter 1160. As shown, network adapter 1160 communicates with other modules of electronic device 1100 via bus 1130. It should be understood that, although not shown in the figures, other hardware and / or software modules can be used in conjunction with electronic device 1100, including but not limited to: microcode, device drivers, redundant processing units, external disk drive arrays, RAID systems, tape drives, and data backup storage systems.

[0162] From the above description of the embodiments, those skilled in the art will readily understand that the exemplary embodiments described herein can be implemented by software or by combining software with necessary hardware. Therefore, the technical solutions according to the embodiments of this disclosure can be embodied in the form of a software product, which can be stored in a non-volatile storage medium (such as a CD-ROM, USB flash drive, external hard drive, etc.) or on a network, including several instructions to cause a computing device (such as a personal computer, server, terminal device, or network device, etc.) to execute the methods according to the embodiments of this disclosure.

[0163] In particular, according to embodiments of this disclosure, the process described above with reference to the flowchart can be implemented as a computer program product, which includes a computer program that, when executed by a processor, implements the above-described network fault handling method.

[0164] In exemplary embodiments of this disclosure, a computer-readable storage medium is also provided, which may be a readable signal medium or a readable storage medium. A program product capable of implementing the methods described above is stored thereon. In some possible implementations, various aspects of this disclosure may also be implemented as a program product including program code, which, when run on a terminal device, causes the terminal device to perform the steps described in the "Exemplary Methods" section of this specification according to various exemplary embodiments of this disclosure.

[0165] More specific examples of computer-readable storage media in this disclosure may include, but are not limited to: electrical connections having one or more wires, portable computer disks, hard disks, random access memory (RAM), read-only memory (ROM), erasable programmable read-only memory (EPROM or flash memory), optical fiber, portable compact disk read-only memory (CD-ROM), optical storage devices, magnetic storage devices, or any suitable combination of the foregoing.

[0166] In this disclosure, a computer-readable storage medium may include a data signal propagated in baseband or as part of a carrier wave, carrying readable program code. Such propagated data signals may take various forms, including but not limited to electromagnetic signals, optical signals, or any suitable combination thereof. A readable signal medium may also be any readable medium other than a readable storage medium, capable of transmitting, propagating, or transmitting a program for use by or in connection with an instruction execution system, apparatus, or device.

[0167] Optionally, the program code contained on the computer-readable storage medium may be transmitted using any suitable medium, including but not limited to wireless, wired, optical fiber, RF, etc., or any suitable combination thereof.

[0168] In practical implementation, program code for performing the operations of this disclosure can be written in any combination of one or more programming languages, including object-oriented programming languages ​​such as Java and C++, and conventional procedural programming languages ​​such as C or similar languages. The program code can execute entirely on the user's computing device, partially on the user's device, as a standalone software package, partially on the user's computing device and partially on a remote computing device, or entirely on a remote computing device or server. In cases involving remote computing devices, the remote computing device can be connected to the user's computing device via any type of network, including a local area network (LAN) or a wide area network (WAN), or it can be connected to an external computing device (e.g., via the Internet using an Internet service provider).

[0169] It should be noted that although several modules or units for the device used to perform actions have been mentioned in the detailed description above, this division is not mandatory. In fact, according to embodiments of this disclosure, the features and functions of two or more modules or units described above can be embodied in one module or unit. Conversely, the features and functions of one module or unit described above can be further divided and embodied by multiple modules or units.

[0170] Furthermore, although the steps of the method in this disclosure are described in a specific order in the accompanying drawings, this does not require or imply that the steps must be performed in that specific order, or that all the steps shown must be performed to achieve the desired result. Additional or alternative steps may be omitted, multiple steps may be combined into one step, and / or a step may be broken down into multiple steps.

[0171] From the above description of the embodiments, those skilled in the art will readily understand that the exemplary embodiments described herein can be implemented by software or by combining software with necessary hardware. Therefore, the technical solutions according to the embodiments of this disclosure can be embodied in the form of a software product, which can be stored in a non-volatile storage medium (such as a CD-ROM, USB flash drive, external hard drive, etc.) or on a network, including several instructions to cause a computing device (such as a personal computer, server, mobile terminal, or network device, etc.) to execute the methods according to the embodiments of this disclosure.

[0172] Other embodiments of this disclosure will readily occur to those skilled in the art upon consideration of the specification and practice of the invention disclosed herein. This disclosure is intended to cover any variations, uses, or adaptations of this disclosure that follow the general principles of this disclosure and include common knowledge or customary techniques in the art not disclosed herein. The specification and examples are to be considered exemplary only, and the true scope and spirit of this disclosure are indicated by the appended claims.

Claims

1. A network fault handling method, characterized in that, include: Obtain network status information of a target network, wherein the target network includes: one or more service chains, each service chain includes: one or more nodes, each node includes: forwarding network elements and security capability network elements, and the network status information includes: status information of forwarding network elements and security capability network elements within the target network; Based on the network status information of the forwarding network elements and / or security capability network elements within the target network, determine whether the target network meets the preset fault types, wherein the fault types include: network element fault, node fault, and service chain fault; Based on the fault type satisfied by the target network, the corresponding fault handling method is used to handle the fault in the target network; The acquisition of network status information of the target network includes: The target network is monitored according to pre-configured monitoring parameters to obtain monitoring information of the target network; the monitoring information includes: the node activity time of each node in the target network; Based on the monitoring information of the target network, determine the network status information of the target network; Determining the network status information of the target network based on the monitoring information of the target network includes: Based on the node activity time of each node in the target network, calculate the network element status value of each network element in each node of the target network. Based on the network element state value of each network element in each node of the target network, calculate the node state matrix of each node in the target network.

2. The method according to claim 1, characterized in that, When calculating the network element status value of each network element in each node of the target network based on the node activity time of each node in the target network, the following formula can be used for calculation: in, This refers to the node activity time of each node in the target network. The cumulative distribution function is denoted as , while the global distribution function or exponential distribution function is denoted as . The calculated network element status value.

3. The method according to claim 1, characterized in that, When calculating the node state matrix of each node in the target network based on the network element state value of each network element in each node, the following formula can be used: in, It is a matrix composed of the network element state values ​​of the forwarding network elements of each node in the target network. m The number of forwarding network elements for each node in the target network. This is a matrix composed of the network element state values ​​of the security capability network elements of each node in the target network. n The number of security capability network elements in each node of the target network. H U This is the node state matrix for each node in the target network that has been calculated.

4. The network fault handling method according to claim 2, characterized in that, After calculating the network element status value of each network element in each node of the target network based on the node activity time of each node in the target network, the method further includes: Determine whether the network element status value of each network element meets the preset network element fault conditions; If the calculated network element status value meets the preset network element fault conditions, then the fault type of the target network is determined to be a network element fault. The network element faults in the target network are handled by removing network elements whose calculated network element status values ​​meet preset network element fault conditions.

5. The network fault handling method according to claim 3, characterized in that, After calculating the node state matrix of each node in the target network based on the network element state value of each network element in each node, the method further includes: Determine whether the node state matrix of each node satisfies the preset node fault conditions; If the calculated node state matrix satisfies the preset node fault conditions, then the fault type of the target network is determined to be a node fault. If a service chain in the target network has nodes whose calculated node state matrix satisfies the preset node failure conditions, then the failure type of the target network is determined to be a service chain failure. The service chain failure in the target network is handled by switching the faulty service chain in the target network to a fault-free service chain.

6. A network fault handling device for handling faults occurring in service links within a network, characterized in that, include: The information acquisition module is configured to acquire network status information of a target network, wherein the target network includes: one or more service chains, each service chain includes: one or more nodes, each node includes: forwarding network elements and security capability network elements, and the network status information includes: status information of forwarding network elements and security capability network elements within the target network; The fault determination module is configured to determine whether the target network meets a preset fault type based on the network status information of the forwarding network elements and / or security capability network elements within the target network. The fault types include: network element fault, node fault, and service chain fault. The fault handling module is configured to perform fault handling on the target network by adopting the corresponding fault handling method according to the fault type satisfied by the target network. The information acquisition module is configured to monitor the target network according to pre-configured monitoring parameters to obtain monitoring information of the target network; the monitoring information includes: the node activity time of each node in the target network; and to determine the network status information of the target network based on the monitoring information of the target network. The information acquisition module is configured to calculate the network element status value of each network element in each node in the target network based on the node activity time of each node in the target network; and to calculate the node status matrix of each node in the target network based on the network element status value of each network element in each node in the target network.

7. An electronic device, characterized in that, include: processor; as well as Memory for storing the executable instructions of the processor; The processor is configured to execute the network fault handling method according to any one of claims 1 to 5 by executing the executable instructions.

8. A computer-readable storage medium having a computer program stored thereon, characterized in that, When the computer program is executed by the processor, it implements the network fault handling method according to any one of claims 1 to 5.

Images