A satellite simulation system, construction method and satellite simulation method

Abstract

The present application discloses a satellite simulation system, a construction method and a satellite simulation method, the system includes a business layer, a virtualization layer and a physical layer; the virtualization layer includes multiple bases and multiple containers; the base includes a kernel layer; the container includes a first file layer; one base corresponds to multiple containers, the container calls the kernel layer of the corresponding base, and the container encapsulates the functions of the satellite node; wherein the kernel layer is constructed based on the kernel requirements of the business layer; the first file layer is constructed based on the file system that the business layer relies on. The ability to batch build virtual constellation nodes on a general server is realized through a two-level structure virtualization layer, so that large-scale constellation networking simulation can be realized even under the condition of limited server resources.

Description

Technical Field

[0001] The present application relates to the field of satellite networks, and in particular to a satellite simulation system, a construction method, and a satellite simulation method. Background Art

[0002] With the rapid development of satellite network technology, the verification of satellite functions and performance has become particularly important. Satellite network simulation is the main means to achieve comprehensive verification of satellite functions and performance. Satellite network simulation is based on computer software programs or hardware devices to simulate the behavior of satellite networks and test and verify network design, protocols, configuration, security, and other network services and functions.

[0003] In the related art, satellite simulation is achieved by using a virtual machine to simulate the behavior of each node in the network.

[0004] However, the server is limited by the kernel. As the number of satellite simulation nodes increases, the kernel's management efficiency of simulation node ports decreases. Therefore, the above method can only achieve small-scale simulation and is difficult to meet the simulation requirements of large-scale constellation networking. Summary of the invention

[0005] The present application provides a satellite simulation system, a construction method and a satellite simulation method for realizing the simulation of large-scale constellation networking.

[0006] In a first aspect, an embodiment of the present application provides a satellite simulation system, including: a service layer, a virtualization layer, and a physical layer;

[0007] The virtualization layer includes multiple bases and multiple containers; the base includes a kernel layer; the container includes a first file layer; one base corresponds to multiple containers, the container calls the kernel layer of the corresponding base, and the container encapsulates the functions of the satellite node;

[0008] Wherein, the kernel layer is constructed based on the kernel requirements of the business layer;

[0009] The first file layer is constructed based on the file system on which the business layer depends.

[0010] In some optional implementations, the kernel layer is obtained by adjusting the initial kernel based on first kernel information required for the operation of the corresponding function type in the business layer; the first kernel information is determined by performing a kernel dependency assessment on the function type.

[0011] In some optional implementations, the container calls the kernel layer of the base corresponding to the function type.

[0012] In some optional implementations, if the initial kernel is an infrastructure kernel, the kernel layer is generated in the infrastructure kernel based on a first kernel module corresponding to the first kernel information.

[0013] In some optional implementations, if the initial kernel is a complete kernel, the kernel layer is obtained by removing the second kernel module in the complete kernel based on heuristic testing to obtain a first kernel system; and the first kernel system is dependently reconstructed; wherein, the second kernel module is other kernel modules in the complete kernel except the first kernel module corresponding to the first kernel information.

[0014] In some optional implementation manners, the first file layer is constructed in the following manner:

[0015] Performing a file system dependency assessment on the function type of the business layer to construct a directory structure of the first file layer;

[0016] Based on the directory structure, reconstruct the container environment of the first file layer; wherein the container environment is the environment that the container depends on at runtime;

[0017] Adjust the startup configuration of the first file layer.

[0018] In some optional implementation manners, after adjusting the startup configuration of the first file layer, the method further includes:

[0019] If the first file layer contains a first file, the first file is replaced with a corresponding second file; wherein the first file is a redundant file.

[0020] In a second aspect, an embodiment of the present application provides a method for constructing a satellite simulation system, the method comprising:

[0021] Building a physical layer of a satellite simulation system based on physical equipment, and building a business layer of the satellite simulation system based on the functional type requirements of the business;

[0022] Constructing multiple bases of the virtualization layer of the satellite simulation system on the physical layer; wherein the base includes a kernel layer;

[0023] Corresponding multiple containers are constructed on each base to obtain a satellite simulation system; wherein, the container includes a first file layer, the container calls the kernel layer of the corresponding base, and the container encapsulates the functions of the satellite node.

[0024] In some optional implementations, the kernel layer is constructed in the following manner:

[0025] Performing kernel dependency evaluation on multiple function types of the business layer respectively to determine first kernel information required for the operation of the multiple function types;

[0026] Adjusting the initial kernel based on the first kernel information to generate a second kernel system;

[0027] The second kernel system is supplemented for completeness based on the dependency information associated with the first kernel information to obtain the kernel layer.

[0028] In some optional implementations, the container calls the kernel layer of the base corresponding to the function type.

[0029] In some optional implementations, performing kernel dependency evaluation on multiple function types of the business layer respectively to determine first kernel information required for the operation of the multiple function types includes:

[0030] Each function type is input into the AI ​​model respectively, and the kernel dependency of each function type is evaluated through the AI ​​model to determine the first kernel information required for the operation of each function type.

[0031] In some optional implementation manners, if the initial kernel is an infrastructure kernel, adjusting the initial kernel based on the first kernel information to generate a second kernel system includes:

[0032] Determine a first kernel module corresponding to the first kernel information;

[0033] In the infrastructure kernel, the second kernel system is generated based on the first kernel module.

[0034] In some optional implementations, if the initial kernel is a complete kernel, adjusting the initial kernel based on the first kernel information to generate a second kernel system includes:

[0035] Based on the heuristic test, the second kernel module in the complete kernel is removed to obtain the first kernel system; wherein the second kernel module is other kernel modules in the complete kernel except the first kernel module corresponding to the first kernel information;

[0036] Dependency reconstruction is performed on the first kernel system to obtain the second kernel system.

[0037] In some optional implementations, the first file layer is constructed in the following manner:

[0038] Performing a file system dependency assessment on the function type of the business layer to construct a directory structure of the first file layer;

[0039] Based on the directory structure, reconstruct the container environment of the first file layer; wherein the container environment is the environment that the container depends on at runtime;

[0040] Adjust the startup configuration of the first file layer.

[0041] In some optional implementations, adjusting the startup configuration of the first file layer includes:

[0042] Performing resource occupancy analysis on the services in the first file layer by monitoring the resource plug-in, and configuring disabling information of the services in the first file layer; and

[0043] Configure resource limit information for the container.

[0044] In some optional implementation manners, after adjusting the startup configuration of the first file layer, the method further includes:

[0045] If the first file layer contains a first file, the first file is replaced with a corresponding second file; wherein the first file is a redundant file.

[0046] Some optional implementations also include:

[0047] In response to the function type adjustment of the business layer, construct a new container corresponding to the new function type;

[0048] A target chassis is selected from a plurality of chassis of the virtualization layer based on the new function type, and the target chassis is adjusted based on the new function type.

[0049] In a third aspect, an embodiment of the present application provides a satellite simulation method, which performs satellite simulation through any satellite simulation system described in the first aspect above.

[0050] Some optional implementations, performing satellite simulation by the satellite simulation system, further include:

[0051] Based on the resource usage information of the container in the satellite simulation system, resources of the container are cleared.

[0052] In a fourth aspect, an embodiment of the present application provides a satellite simulation system construction device, including:

[0053] Physical layer building module, used to build the physical layer of the satellite simulation system based on physical devices;

[0054] A business layer construction module, used to build the business layer of the satellite simulation system based on the requirements of business function types;

[0055] A virtualization layer construction module, used for constructing a plurality of bases of the virtualization layer of the satellite simulation system on the physical layer; wherein the base includes a kernel layer;

[0056] The virtualization layer construction module is also used to construct corresponding multiple containers on each base to obtain a satellite simulation system; wherein the container includes a first file layer, the container calls the kernel layer of the corresponding base, and the container encapsulates the functions of the satellite node.

[0057] In some optional implementations, the virtualization layer construction module is used to construct the kernel layer in the following manner:

[0058] Performing kernel dependency evaluation on multiple function types of the business layer respectively to determine first kernel information required for the operation of the multiple function types;

[0059] Adjusting the initial kernel based on the first kernel information to generate a second kernel system;

[0060] The second kernel system is supplemented for completeness based on the dependency information associated with the first kernel information to obtain the kernel layer.

[0061] In some optional implementations, the container calls the kernel layer of the base corresponding to the function type.

[0062] In some optional implementations, the virtualization layer construction module is specifically used to:

[0063] Each function type is input into the AI ​​model respectively, and the kernel dependency of each function type is evaluated through the AI ​​model to determine the first kernel information required for the operation of each function type.

[0064] In some optional implementations, if the initial kernel is an infrastructure kernel, the virtualization layer construction module is specifically used to:

[0065] Determine a first kernel module corresponding to the first kernel information;

[0066] In the infrastructure kernel, the second kernel system is generated based on the first kernel module.

[0067] In some optional implementations, if the initial kernel is a complete kernel, the virtualization layer construction module is specifically used to:

[0068] Based on the heuristic test, the second kernel module in the complete kernel is removed to obtain the first kernel system; wherein the second kernel module is other kernel modules in the complete kernel except the first kernel module corresponding to the first kernel information;

[0069] Dependency reconstruction is performed on the first kernel system to obtain the second kernel system.

[0070] In some optional implementations, the virtualization layer construction module is used to construct the first file layer in the following manner:

[0071] Performing a file system dependency assessment on the function type of the business layer to construct a directory structure of the first file layer;

[0072] Based on the directory structure, reconstruct the container environment of the first file layer; wherein the container environment is the environment that the container depends on at runtime;

[0073] Adjust the startup configuration of the first file layer.

[0074] In some optional implementations, the virtualization layer construction module is specifically used to:

[0075] Performing resource occupancy analysis on the services in the first file layer by monitoring the resource plug-in, and configuring disabling information of the services in the first file layer; and

[0076] Configure resource limit information for the container.

[0077] In some optional implementation manners, after adjusting the startup configuration of the first file layer, the virtualization layer construction module is further used to:

[0078] If the first file layer contains a first file, the first file is replaced with a corresponding second file; wherein the first file is a redundant file.

[0079] In some optional implementations, the virtualization layer construction module is further used to:

[0080] In response to the function type adjustment of the business layer, construct a new container corresponding to the new function type;

[0081] A target chassis is selected from a plurality of chassis of the virtualization layer based on the new function type, and the target chassis is adjusted based on the new function type.

[0082] In a fifth aspect, an embodiment of the present application provides an electronic device, comprising at least one processor and at least one memory, wherein the memory stores a computer program, and when the program is executed by the processor, the processor executes any one of the methods described in the second or third aspect above.

[0083] In a sixth aspect, an embodiment of the present application provides a computer-readable storage medium storing a computer program executable by a processor, wherein when the program runs on the processor, the processor executes any of the methods described in the second or third aspects above.

[0084] The above scheme encapsulates the functions of satellite nodes through containers. Since the operation files of different satellite nodes are independent and the operations are frequent, but different satellite nodes can call the same kernel layer; therefore, the base sets up a kernel layer for multiple satellite nodes to call, that is, different containers can call the same kernel layer without interfering with each other; the container only needs to set up the file layer to ensure the independence of the operating file system and user space; the two-level structure virtualization layer realizes the ability to batch build virtual constellation nodes on a general server, thereby realizing the simulation of large-scale constellation networking under the condition of limited server resources. BRIEF DESCRIPTION OF THE DRAWINGS

[0085] In order to more clearly illustrate the technical solutions in the embodiments of the present application, the drawings required for use in the description of the embodiments will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present application. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative labor.

[0086] Figure 1 A schematic diagram of a first satellite simulation system provided in an embodiment of the present application;

[0087] Figure 2 A schematic diagram of a second satellite simulation system provided in an embodiment of the present application;

[0088] Figure 3 A schematic diagram of a base provided in an embodiment of the present application;

[0089] Figure 4 A schematic diagram of the first file layer provided in an embodiment of the present application;

[0090] Figure 5 A schematic flow chart of a satellite simulation system construction method provided in an embodiment of the present application;

[0091] Figure 6 A schematic diagram of the structure of a satellite simulation system construction device provided in an embodiment of the present application;

[0092] Figure 7 A schematic diagram of an electronic device provided in an embodiment of the present application. DETAILED DESCRIPTION

[0093] In order to make the purpose, technical solutions and advantages of the present application clearer, the present application will be further described in detail below in conjunction with the accompanying drawings. Obviously, the described embodiments are only part of the embodiments of the present application, rather than all the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in this field without making creative work are within the scope of protection of the present application.

[0094] The terms "first" and "second" are used for descriptive purposes only and should not be understood as indicating or implying relative importance or implicitly indicating the number of the indicated technical features. Thus, a feature defined as "first" or "second" may explicitly or implicitly include one or more of the features. In the description of this application, unless otherwise specified, "plurality" means two or more.

[0095] In the description of this application, unless otherwise clearly specified and limited, the term "connection" should be understood in a broad sense, for example, it can be directly connected, or indirectly connected through an intermediate medium, or it can be the internal connection of two devices. For ordinary technicians in this field, the specific meanings of the above terms in this application can be understood according to specific circumstances.

[0096] Satellite network simulation is the main means to achieve comprehensive verification of satellite functions and performance. It simulates the behavior of satellite networks based on computer software programs or hardware devices, and tests and verifies network design, protocols, configuration, security, and other network services and functions. Using satellite simulation systems instead of actual physical equipment to conduct large-scale tests can effectively reduce test costs and time investment on the one hand, and simulate the actual operating environment of satellite networks on the other hand to ensure that the technology is up to standard.

[0097] In the related art, satellite simulation is achieved by using a virtual machine to simulate the behavior of each node in the network.

[0098] See also Figure 1 As shown, by setting up a virtualization layer, using a virtual machine ( Figure 1 Take virtual machine 1 and virtual machine 2 as examples to simulate the behavior of each node in the network.

[0099] Although the above method can meet certain simulation requirements, the server is subject to some limitations of the Linux (an operating system) kernel, such as the number of bridge ports supported is less than 1024, and the number of ovs (a virtual switch) ports supported is less than 4096; in addition, since the table lookup time of the Linux kernel, bridge or ovs is proportional to the number of ports, as the number of satellite simulation nodes increases, the management efficiency of the Linux kernel for the simulation node ports will become very low. For large-scale satellite network simulation, its realism, cost control and flexibility are obviously insufficient.

[0100] Therefore, the above method can only achieve small-scale simulation, with low realism and limited protocol functions, and it is difficult to meet the simulation requirements of large-scale constellation networking.

[0101] Based on this, the embodiments of the present application provide a satellite simulation system, a construction method and a satellite simulation method to realize the simulation of large-scale constellation networking.

[0102] See also Figure 2 As shown, this embodiment provides a second satellite simulation system, including: a service layer, a virtualization layer and a physical layer;

[0103] The virtualization layer includes multiple bases and multiple containers; the base includes a kernel layer; the container includes a first file layer; one base corresponds to multiple containers, the container calls the kernel layer of the corresponding base, and the container encapsulates the functions of the satellite node;

[0104] The kernel layer is constructed based on the kernel requirements of the business layer, and the first file layer is constructed based on the file system on which the business layer depends.

[0105] The physical layer of the satellite simulation system is built based on multiple physical devices, which may include server clusters, switches, and physical hardware. During implementation, a server cluster is created through the server management subsystem to uniformly manage the computing power of all servers. Servers are connected through high-performance network switches. The server provides a physical interface to support the semi-physical hardware access of the onboard router prototype, as well as the access of other data verification platforms such as the constellation digital twin system and the access network semi-physical platform.

[0106] The business layer of the satellite simulation system is based on the virtualization technology of the microservice architecture, which enables it to have the ability to load and run multiple network protocols. In terms of software expansion capability construction, the microserver software architecture can be used to carry out simulation platform software development, so that it has loose coupling, scalability, independent evolution capabilities and external system access capabilities. The business layer may include physical architecture, functional architecture and system display; for the scenario of satellite simulation, the physical architecture includes modules such as constellation configuration configuration, satellite orbit configuration, network access simulation, topology change simulation, dynamic configuration of intersatellite links and satellite-to-ground feeder link simulation; the functional architecture includes modules such as network layer protocol, link layer protocol, routing strategy modeling, load flow orchestration, fault model and simulation, and fault detection and alarm; the system display includes modules such as node display, link display, business display, traffic display, two-dimensional display, three-dimensional display, network measurement and evaluation optimization. The above-mentioned business layer is only an exemplary description. The business layer can be set according to the actual business scenario during implementation, and this embodiment does not make specific limitations on this.

[0107] The virtualization layer of the satellite simulation system is a bridge between the business layer and the physical layer. The virtualization layer in this embodiment is set as a two-level structure: a base and a container. Figure 2 As shown, two bases are provided, and base 1 corresponds to container 11 ,container12 ,……,container 1n , base 2 corresponds to the container 21 ,container 22 ,……,container 2m . Figure 2 The base and container shown are only exemplary. In implementation, the number of bases, the number of containers, and the correspondence between bases and containers can be set according to the number of servers at the physical layer and the requirements of the business layer. This embodiment does not make any specific limitations on this.

[0108] All functions of a single communication satellite are encapsulated using virtualized containers. As a node in the satellite network, it is responsible for communicating with other satellite nodes, user gateway devices, ground gateways, etc.

[0109] Different satellite nodes can call the same kernel layer without interfering with each other, see Figure 3 As shown, the base sets up a kernel layer (bootfs), which can be called by multiple containers;

[0110] Since the files of different satellite nodes are independent and frequently operated, refer to Figure 4 As shown, the container only sets the first file layer (rootfs) and does not set the kernel layer.

[0111] The base uses virtual machines, and each virtual machine uses full virtualization technology. Each virtual machine has its own independent kernel space and managed central processing unit (CPU) and memory and other physical resources, which can effectively achieve the isolation and management of physical resources and kernels.

[0112] Run multiple containers in each base (virtual machine), and each container can be used as a virtual satellite node. Different containers in the same virtual machine share the kernel space of the virtual machine, but have different operating file systems and user spaces.

[0113] Above Figure 2 This is just an exemplary description of the satellite simulation system. During implementation, other levels can be built in the satellite simulation system, which will not be described here.

[0114] The above scheme encapsulates the functions of satellite nodes through containers. Since the operation files of different satellite nodes are independent and the operations are frequent, but different satellite nodes can call the same kernel layer; therefore, the base sets up a kernel layer for multiple satellite nodes to call, that is, different containers can call the same kernel layer without interfering with each other; the container only needs to set up the file layer to ensure the independence of the operating file system and user space; the two-level structure virtualization layer realizes the ability to batch build virtual constellation nodes on a general server, thereby realizing the simulation of large-scale constellation networking under the condition of limited server resources.

[0115] In some optional implementations, the kernel layer is obtained by adjusting the initial kernel based on first kernel information required for the operation of the corresponding function type in the business layer; the first kernel information is determined by performing a kernel dependency assessment on the function type.

[0116] Exemplarily, the kernel layer is constructed in the following manner:

[0117] Performing kernel dependency evaluation on multiple function types of the business layer respectively to determine first kernel information required for the operation of the multiple function types;

[0118] Adjusting the initial kernel based on the first kernel information to generate a second kernel system;

[0119] The second kernel system is supplemented for completeness based on the dependency information associated with the first kernel information to obtain the kernel layer.

[0120] like Figure 3 As shown, the base is provided with a second file layer and a kernel layer, but the second file layer does not need to be called, and the lightweight effect of optimizing the second file layer is not obvious; while the kernel layer will be called by multiple satellite nodes, and the kernel optimization has a better lightweight effect.

[0121] Based on this, this embodiment performs lightweight reconstruction on the kernel layer.

[0122] Exemplarily, the kernel dependencies of each function type of the business layer are first analyzed respectively, and the first kernel information necessary for the operation of each function type is identified and determined, such as kernel modules and libraries (stacks), etc. For example, the business layer requirement is lightweight soft routing (FRRouting). Through the C language analysis tool that FRRouting depends on, it is analyzed that the FRRouting requirement needs to rely on the Border Gateway Protocol (BGP) in the kernel system, and the command line tool for controlling the BGP protocol. Its first kernel information is the BGP network protocol stack and command line tool.

[0123] Secondly, the initial kernel is adjusted according to the first kernel information to generate a kernel system (kernel layer) of the virtualization layer, where the kernel layer only includes necessary modules.

[0124] During implementation, the kernel layer obtained in the above two steps can also be supplemented for completeness based on the second dependency information associated with the first dependency information, thereby supplementing the kernel modules of secondary dependencies, such as the process and communication support module and the network interface support module.

[0125] In this embodiment, the kernel layer of the base only includes the basic musl libc (a C standard library), BusyBox (software that integrates commonly used Linux commands and tools), and other lightweight core tools, for example: simplified network tools used by Alpine Linux, such as IP routing toolkit version 2 (iproute2), network automatic download tool (wget), command line network tool (curl); process management tools, such as ps (a command in Linux system), top (a command in Linux system), which are all part of BusyBox; file operation tools, such as cp (a command in Linux system), mv (a command in Linux system), rm (a command in Linux system); log management tools, such as logread (a command in Linux system); package management tools, such as apk (a command in Linux system), used to install and manage software packages. It does not include complex or large components, such as system and service manager (systemd), glibc (a C language standard library) or bash (a command line and command language).

[0126] The first kernel information corresponding to each function type is different, so the kernel layers of each base can be the same or different.

[0127] Correspondingly, when the container makes a kernel call, it needs to call the kernel layer of the base corresponding to the function type.

[0128] This embodiment does not specifically limit the specific implementation method of the above-mentioned kernel dependency evaluation. In some optional implementations, each function type is input into the AI ​​model respectively, and the kernel dependency evaluation of each function type is performed through the AI ​​model to determine the first kernel information required for the operation of each function type.

[0129] Exemplarily, the initial model is trained based on sample function types and corresponding sample kernel information to obtain an AI model, which learns the association between function types and kernel information. By inputting the function types into the AI ​​model, the first kernel information required for operation can be obtained.

[0130] In some optional implementations, in the case where the initial kernel is an infrastructure kernel, the kernel layer may be generated by, but not limited to, the following methods:

[0131] Determine a first kernel module corresponding to the first kernel information;

[0132] In the infrastructure kernel, the second kernel system is generated based on the first kernel module.

[0133] In practice, the infrastructure kernel refers to a kernel system that only contains the basic architecture (basic functions and modules) without loading additional modules. Based on the infrastructure kernel, a lightweight kernel system needs to be built from scratch. Combined with the configuration and requirements required by the business layer (such as meeting the requirements of network isolation), the application is directly integrated with its core operating environment to generate a highly streamlined kernel layer. This kernel layer only contains the basic system elements necessary for the operation of the application (modules corresponding to the first kernel information), is extremely small in size, and starts quickly.

[0134] In some optional implementations, in the case where the initial kernel is a complete kernel, the kernel layer may be generated by, but not limited to, the following methods:

[0135] Based on the heuristic test, the second kernel module in the complete kernel is removed to obtain the first kernel system; wherein the second kernel module is other kernel modules in the complete kernel except the first kernel module corresponding to the first kernel information;

[0136] Dependency reconstruction is performed on the first kernel system to obtain the second kernel system.

[0137] In practice, it is difficult to lightweight the empty kernel, therefore, lightweighting can be performed on the basis of a complete kernel. This embodiment does not specifically limit the complete kernel, and it can be set according to the actual application scenario.

[0138] For example, Alpine Linux (an operating system) is used as a complete kernel. Alpine Linux itself does not have a graphical interface, only a command line interface, and does not come with many irrelevant software dependencies. Optimize the routing software itself, network tools, and kernel network protocol stack modules, delete other non-major dependent modules (second kernel modules); reconstruct the main dependent modules (first kernel modules), optimize the structure through heuristic analysis, and ensure that it can run. While maintaining the integrity of the system, only the modules necessary for the complete kernel to realize business functions are included to achieve the greatest degree of lightweight.

[0139] During implementation, the reconstructed kernel layer can be subjected to functional testing and performance evaluation to ensure that the kernel layer can meet all business requirements.

[0140] In some optional implementations, the first file layer is constructed in the following manner:

[0141] Performing a file system dependency assessment on the function type of the business layer to construct a directory structure of the first file layer;

[0142] Based on the directory structure, reconstruct the container environment of the first file layer; wherein the container environment is the environment that the container depends on at runtime;

[0143] Adjust the startup configuration of the first file layer.

[0144] The base image contains a complete operating system, libraries, and tool sets to meet the various needs of developing, building, and running applications. These additional components and files will significantly increase the size of the image, resulting in inefficiencies in storage and transmission.

[0145] In order to achieve lightweight containers, it is necessary to reorganize the first file layer of the container while meeting the business functions of the simulation node, thereby reducing the hard disk space occupied by the container file.

[0146] See also Figure 4 As shown, the first file layer includes modules such as device files, user authentication, basic directories, container environments, mount points, system library files, system services, and startup configuration.

[0147] Among them, the basic directory, container environment, and startup configuration are lightweight contents.

[0148] Exemplarily, first, the directory structure of the first file layer is reconstructed, unnecessary directories are removed, and only the most basic first file layer required for the virtual satellite node function is included. By identifying and removing unnecessary files and directories, the directory structure of the first file layer is reconstructed to provide a clear and streamlined basic environment for subsequent container environment reconstruction. Tools such as List dynamic dependencies (Ldd) can be used to analyze and determine the minimum dependencies required by the frr code (onboard router implementation code) at runtime.

[0149] Secondly, after completing the streamlining of the first file layer, we will start the reconstruction of the container environment. Using the container multi-stage build technology, we compile and install the frr code in the build stage. This process requires a large number of build tools and generates some temporary files. In the run stage, based on the frr directory installed in the build stage, we use integrity detection tools such as Ldd to analyze and optimize runtime dependencies, and only add the minimum dependency components required for frr to run. In this way, the container environment only contains necessary components, thereby reducing redundancy.

[0150] Finally, after the container environment is reconstructed, the startup configuration is optimized. In this stage, the startup configuration of the container is adjusted according to the streamlined and reconstructed first file layer and container environment to ensure that the startup process is streamlined and efficient. The container image build dependencies and temporary files are reduced, the image size is reduced, and the container pull speed and startup efficiency are improved, thereby achieving the best operation effect.

[0151] For the construction phase of the above-mentioned container environment reconstruction, the application container engine (Docker) operating environment is no longer started only by the Docker daemon (Daemon) after version 1.11, but relies on a series of components, such as container virtualization technology (containerd) and running container (runc), to handle the life cycle management of the container. Among them, containerd is responsible for directly managing the life cycle of the container and providing services to Docker Daemon through the remote procedure call framework (gRPC) interface. Docker Daemon continues to be responsible for interacting with the Docker client (Client) to manage images and networks, but the direct management of containers has been delegated to containerd. This layered architecture is more flexible, but it also brings more complexity and resource usage. This embodiment is oriented to the needs of simulation nodes, and based on containerd technology, it abandons unnecessary complex elements in the container environment, such as graphical interfaces and cumbersome user interactions, thereby achieving high efficiency and simplicity of the container operating environment.

[0152] By performing dependency analysis on the environment required by containerd, only the lifecycle management of the container needs to be retained to meet basic needs. Therefore, the containerd of this embodiment only needs to consider the generation cycle, such as creating, starting, stopping, and deleting containers, and then complete the reconstruction of containerd. The reconstructed containerd is a lightweight and efficient container suitable for direct operation scenarios. Compared with Docker, containerd has a simpler architecture and removes functions that are not related to container management. Its resource overhead is less than Docker and its performance is higher. Containerd runs directly on the operating system and does not require an additional Daemon, which reduces resource usage and management burden, and its resource efficiency can be significantly improved.

[0153] At the container execution level, the new solution uses a lightweight runtime engine (such as Crun) instead without affecting the performance of the simulation node, ensuring that the container can run stably with the lowest resource usage. Containerd can be configured to use Crun as its underlying container runtime. In other words, containerd manages high-level operations such as the life cycle of the container, while Crun actually performs low-level operations such as starting and running the container. In this combination, containerd calls Crun to complete the actual operation of the container. This combination not only takes advantage of the comprehensive management capabilities provided by containerd, but also benefits from the efficiency and lightweight characteristics of Crun.

[0154] During implementation, the reconstruction of the first file layer of the container may be performed based on an empty image or a base image.

[0155] For example, when using an empty image, you can add all the necessary files and components by yourself, ensuring the simplicity and efficiency of the first file layer. For some relatively large third-party libraries, by rewriting the functional modules in an efficient low-level language (such as C), the size of the library file can be reduced and the startup speed can be improved.

[0156] When using a base image such as Alpine Linux, the image contains the most basic Linux environment and the necessary tools and libraries. This choice ensures that the container image is as small as possible while meeting the basic environment required to run the application.

[0157] During implementation, the reconstructed container can be subjected to functional testing and performance evaluation to ensure that all functions operate normally and that performance meets the requirements.

[0158] In some optional implementation manners, adjusting the startup configuration of the first file layer may be achieved by, but not limited to, the following methods:

[0159] Performing resource occupancy analysis on the services in the first file layer by monitoring the resource plug-in, and configuring disabling information of the services in the first file layer; and

[0160] Configure resource limit information for the container.

[0161] In this embodiment, the performance and security are further optimized by adjusting the configuration file of the container runtime, such as disabling unnecessary plug-ins and limiting resource usage.

[0162] During implementation, in order to reduce resource usage, the resource usage of services (plugins and modules) in the first file layer is analyzed through monitoring resource plug-ins, and unnecessary plug-ins and modules are disabled, such as some snapshot drivers or storage plug-ins, and configuration files are optimized.

[0163] For example, by editing the containerd configuration file ( / etc / containerd / config.toml), disabling unnecessary services and plugins, adjusting the garbage collection strategy, and limiting the log level, the performance overhead can be reduced.

[0164] During implementation, in order to reduce resource usage, you can also configure the container's resource limit information to control and limit the resources that the container can use, and avoid excessive consumption of a single container leading to system resource shortages.

[0165] For example, you can set CPU and memory usage limits in the containerd configuration file (config.toml), or set the container's resource limit parameters through runtime command-line tools (such as ctr). Make sure that the container runs in a control group (cgroups), so that you can accurately control and limit the resources that the container can use. For example, for FRRouting, by trimming the container, the Name space only retains the UTS, Mount, and Network isolation capabilities, and its corresponding IPC, PID, and User share the same namespace, further reducing the overhead caused by container isolation. Cgroups only retains the resource limit capabilities for CPU and memory to achieve a lightweight effect.

[0166] The first file layer of the container only contains a streamlined file system and necessary core tools;

[0167] For example, OpenRC (boot program configuration) is used as a service management tool to replace systemd; lighter, core network tools such as ifconfig (a command in Linux system) and ping (a command in Linux system);

[0168] It uses basic file system tools and a small number of necessary library files, but does not include developer tools, such as GCC (a set of operating system compilers); redundant documents; graphical interface components, such as GNOME (a tool for operating and setting computer environments), KDE (a desktop environment); and additional shell environments, such as bash and zsh (a command line and command language).

[0169] In some optional implementation manners, after adjusting the startup configuration of the first file layer, the following steps are further performed:

[0170] If the first file layer contains a first file, the first file is replaced with a corresponding second file; wherein the first file is a redundant file.

[0171] In practice, the first file layer retains files that are essential for business operations, but these files may be redundant. By replacing redundant first files, lightweighting can be further achieved.

[0172] For example, analyze the modules or libraries used in the current system, identify which ones occupy a large amount of resources (redundancy exists), and determine whether there is a lightweight replacement file for the redundant first file. If there is, directly replace the replacement file as the second file (the existing second file); if not, reconstruct from the source code level, optimize the code structure, and obtain the second file to further reduce the size (reconstructed second file). For example, the BGP (Go-BGP) module implemented in the Go programming language is usually used to implement the BGP protocol, but the FRRouting source code implemented in the C language is lighter than the Go-BGP module, and the Go-BGP module can be replaced by the FRRouting module.

[0173] In some optional implementations, after the first file is replaced, the system may be recompiled, and functional testing and performance evaluation may be performed to ensure that the new file meets system requirements.

[0174] During implementation, after the satellite simulation system is deployed, continuous monitoring can be carried out to ensure the stable operation of the system, and possible problems can be discovered and repaired in a timely manner. Adjustments can be made based on feedback to ensure that the lightweight goal is achieved and the security and maintainability of the system are maintained.

[0175] During implementation, the functions of the satellite nodes to be simulated may change, or some satellite nodes may be added. In this case, the function type of the business layer will also change, and the first file layer of the container and the kernel layer of the base will not match the function type;

[0176] Based on this, on the basis of any of the above embodiments, the following steps may also be performed:

[0177] In response to the function type adjustment of the business layer, construct a new container corresponding to the new function type;

[0178] A target chassis is selected from a plurality of chassis of the virtualization layer based on the new function type, and the target chassis is adjusted based on the new function type.

[0179] In this embodiment, when the function type of the business layer is adjusted, it is necessary to determine the new function type (which function types are added); then build a new container corresponding to the new function type. Of course, the new container corresponding to the function type of the unused business can also be released; select the target base from multiple bases of the virtualization layer, and adjust the target base to meet the needs of the new function type.

[0180] Exemplarily, performing a kernel dependency assessment on the new function type to determine third kernel information required for the new function type to run;

[0181] Comparing the third kernel information with each of the first kernel information respectively, and determining the first kernel information having the highest similarity to the third kernel information;

[0182] The base corresponding to the determined first kernel information is used as the target base, and a new module is added to the kernel layer of the target base based on the third kernel information.

[0183] Based on the same inventive concept, an embodiment of the present application provides a satellite simulation method, which performs satellite simulation through the above-mentioned satellite simulation system.

[0184] In some optional implementations, satellite simulation is performed by the satellite simulation system described above, and the following steps are further performed:

[0185] Based on the resource usage information of the container in the satellite simulation system, resources of the container are cleared.

[0186] During the satellite simulation process, some containers may be in an unsuitable state. Based on this, this embodiment monitors the resource usage information of the containers and clears the resources of the containers.

[0187] For example, enable and configure the garbage collection mechanism of containerd to regularly clean up useless images, containers, and storage volumes to free up storage space and memory resources. Automatically trigger resource cleanup and recycling based on container status or resource usage.

[0188] like Figure 5 As shown, based on the same inventive concept, the embodiment of the present application provides a method for constructing a satellite simulation system, including:

[0189] Step S501: constructing a physical layer of a satellite simulation system based on physical devices, and constructing a service layer of the satellite simulation system based on the functional type requirements of the services;

[0190] Step S502: constructing multiple bases of the virtualization layer of the satellite simulation system on the physical layer; wherein the base includes a kernel layer;

[0191] Step S503: construct corresponding multiple containers on each base to obtain a satellite simulation system; wherein the container includes a first file layer, the container calls the kernel layer of the corresponding base, and the container encapsulates the functions of the satellite node.

[0192] In some optional implementations, the kernel layer is constructed in the following manner:

[0193] Performing kernel dependency evaluation on multiple function types of the business layer respectively to determine first kernel information required for the operation of the multiple function types;

[0194] Adjusting the initial kernel based on the first kernel information to generate a second kernel system;

[0195] The second kernel system is supplemented for completeness based on the dependency information associated with the first kernel information to obtain the kernel layer.

[0196] In some optional implementations, the container calls the kernel layer of the base corresponding to the function type.

[0197] In some optional implementations, performing kernel dependency evaluation on multiple function types of the business layer respectively to determine first kernel information required for the operation of the multiple function types includes:

[0198] Each function type is input into the AI ​​model respectively, and the kernel dependency of each function type is evaluated through the AI ​​model to determine the first kernel information required for the operation of each function type.

[0199] In some optional implementation manners, if the initial kernel is an infrastructure kernel, adjusting the initial kernel based on the first kernel information to generate a second kernel system includes:

[0200] Determine a first kernel module corresponding to the first kernel information;

[0201] In the infrastructure kernel, the second kernel system is generated based on the first kernel module.

[0202] In some optional implementations, if the initial kernel is a complete kernel, adjusting the initial kernel based on the first kernel information to generate a second kernel system includes:

[0203] Based on the heuristic test, the second kernel module in the complete kernel is removed to obtain the first kernel system; wherein the second kernel module is other kernel modules in the complete kernel except the first kernel module corresponding to the first kernel information;

[0204] Dependency reconstruction is performed on the first kernel system to obtain the second kernel system.

[0205] In some optional implementations, the first file layer is constructed in the following manner:

[0206] Performing a file system dependency assessment on the function type of the business layer to construct a directory structure of the first file layer;

[0207] Based on the directory structure, reconstruct the container environment of the first file layer; wherein the container environment is the environment that the container depends on at runtime;

[0208] Adjust the startup configuration of the first file layer.

[0209] In some optional implementations, adjusting the startup configuration of the first file layer includes:

[0210] Performing resource occupancy analysis on the services in the first file layer by monitoring the resource plug-in, and configuring disabling information of the services in the first file layer; and

[0211] Configure resource limit information for the container.

[0212] In some optional implementation manners, after adjusting the startup configuration of the first file layer, the method further includes:

[0213] If the first file layer contains a first file, the first file is replaced with a corresponding second file; wherein the first file is a redundant file.

[0214] Some optional implementations also include:

[0215] In response to the function type adjustment of the business layer, construct a new container corresponding to the new function type;

[0216] A target chassis is selected from a plurality of chassis of the virtualization layer based on the new function type, and the target chassis is adjusted based on the new function type.

[0217] The specific implementation method of the satellite simulation system construction method embodiment can refer to the implementation of the above-mentioned satellite simulation system, and the repeated parts will not be repeated.

[0218] like Figure 6 As shown, based on the same inventive concept, the embodiment of the present application provides a satellite simulation system construction device 600, which includes:

[0219] A physical layer construction module 601 is used to construct the physical layer of the satellite simulation system based on physical devices;

[0220] A business layer construction module 602 is used to construct the business layer of the satellite simulation system based on the requirements of the functional type of the business;

[0221] A virtualization layer construction module 603 is used to construct multiple bases of the virtualization layer of the satellite simulation system on the physical layer; wherein the base includes a kernel layer;

[0222] The virtualization layer construction module 603 is also used to construct corresponding multiple containers on each base to obtain a satellite simulation system; wherein the container includes a first file layer, the container calls the kernel layer of the corresponding base, and the container encapsulates the functions of the satellite node.

[0223] In some optional implementations, the virtualization layer construction module 603 is used to construct the kernel layer in the following manner:

[0224] Performing kernel dependency evaluation on multiple function types of the business layer respectively to determine first kernel information required for the operation of the multiple function types;

[0225] Adjusting the initial kernel based on the first kernel information to generate a second kernel system;

[0226] The second kernel system is supplemented for completeness based on the dependency information associated with the first kernel information to obtain the kernel layer.

[0227] In some optional implementations, the container calls the kernel layer of the base corresponding to the function type.

[0228] In some optional implementations, the virtualization layer construction module is specifically used to:

[0229] Each function type is input into the AI ​​model respectively, and the kernel dependency of each function type is evaluated through the AI ​​model to determine the first kernel information required for the operation of each function type.

[0230] In some optional implementation manners, if the initial kernel is an infrastructure kernel, the virtualization layer construction module 603 is specifically used to:

[0231] Determine a first kernel module corresponding to the first kernel information;

[0232] In the infrastructure kernel, the second kernel system is generated based on the first kernel module.

[0233] In some optional implementations, if the initial kernel is a complete kernel, the virtualization layer construction module 603 is specifically used to:

[0234] Based on the heuristic test, the second kernel module in the complete kernel is removed to obtain the first kernel system; wherein the second kernel module is other kernel modules in the complete kernel except the first kernel module corresponding to the first kernel information;

[0235] Dependency reconstruction is performed on the first kernel system to obtain the second kernel system.

[0236] In some optional implementation manners, the virtualization layer construction module 603 is used to construct the first file layer in the following manner:

[0237] Performing a file system dependency assessment on the function type of the business layer to construct a directory structure of the first file layer;

[0238] Based on the directory structure, reconstruct the container environment of the first file layer; wherein the container environment is the environment that the container depends on at runtime;

[0239] Adjust the startup configuration of the first file layer.

[0240] In some optional implementations, the virtualization layer construction module 603 is specifically used to:

[0241] Performing resource occupancy analysis on the services in the first file layer by monitoring the resource plug-in, and configuring disabling information of the services in the first file layer; and

[0242] Configure resource limit information for the container.

[0243] In some optional implementation manners, after adjusting the startup configuration of the first file layer, the virtualization layer construction module 603 is further used to:

[0244] If the first file layer contains a first file, the first file is replaced with a corresponding second file; wherein the first file is a redundant file.

[0245] In some optional implementations, the virtualization layer construction module 603 is further used to:

[0246] In response to the function type adjustment of the business layer, construct a new container corresponding to the new function type;

[0247] A target chassis is selected from a plurality of chassis of the virtualization layer based on the new function type, and the target chassis is adjusted based on the new function type.

[0248] The specific implementation method of the satellite simulation system construction device method embodiment can refer to the implementation of the above-mentioned satellite simulation system, and the repeated parts will not be repeated.

[0249] like Figure 7 As shown, based on the same inventive concept, an embodiment of the present application provides an electronic device 700, including: a processor 701 and a memory 702;

[0250] The memory 702 may be a volatile memory, such as a random-access memory (RAM); the memory 702 may also be a non-volatile memory, such as a read-only memory, a flash memory, a hard disk drive (HDD) or a solid-state drive (SSD); or the memory 702 may be any other medium that can be used to carry or store the desired program code in the form of instructions or data structures and can be accessed by a computer, but is not limited thereto. The memory 702 may be a combination of the above memories.

[0251] The processor 701 may include one or more CPUs, graphics processing units (GPUs) or digital processing units, etc.

[0252] The specific connection medium between the memory 702 and the processor 701 is not limited in the embodiment of the present application. Figure 7 In the embodiment, the memory 702 and the processor 701 are connected via a bus 703. The bus 703 is connected to the processor 701 via a bus 703. Figure 7 In the figure, the bus 703 is shown by a bold line, and can be divided into an address bus, a data bus, a control bus, etc. For ease of representation, Figure 7 Only one thick line is used in the diagram, but this does not mean that there is only one bus or only one type of bus.

[0253] The memory 702 stores program codes, and when the program codes are executed by the processor 701, the processor 701 executes the satellite simulation system construction method or the satellite simulation method.

[0254] The embodiment of the present application provides a computer-readable storage medium on which a computer program is stored, and when the program is executed by a processor, the steps of the satellite simulation system construction method or the satellite simulation method are implemented. The readable storage medium may be a non-volatile readable storage medium.

[0255] The present application is described above with reference to the block diagrams and / or flow charts showing the methods, devices (systems) and / or computer program products according to the embodiments of the present application. It should be understood that a block of the block diagram and / or flow chart diagram and a combination of blocks of the block diagram and / or flow chart diagram can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer and / or other programmable devices to produce a machine, so that the instructions executed by the computer processor and / or other programmable devices create a method for implementing the functions / actions specified in the block diagram and / or flow chart block.

[0256] Accordingly, the present application may also be implemented in hardware and / or software (including firmware, resident software, microcode, etc.). Furthermore, the present application may take the form of a computer program product on a computer-usable or computer-readable storage medium, which has a computer-usable or computer-readable program code implemented in the medium for use by an instruction execution system or in conjunction with an instruction execution system. In the context of the present application, a computer-usable or computer-readable medium may be any medium that may contain, store, communicate, transmit, or convey a program for use by an instruction execution system, device, or apparatus, or in conjunction with an instruction execution system, device, or apparatus.

[0257] Although the preferred embodiments of the present application have been described, those skilled in the art may make additional changes and modifications to these embodiments once they have learned the basic creative concept. Therefore, the appended claims are intended to be interpreted as including the preferred embodiments and all changes and modifications falling within the scope of the present application.

[0258] Obviously, those skilled in the art can make various changes and modifications to the present application without departing from the spirit and scope of the present application. Thus, if these modifications and variations of the present application fall within the scope of the claims of the present application and their equivalents, the present application is also intended to include these modifications and variations.

Claims

1. A satellite simulation system, characterized in that: include: Business layer, virtualization layer, and physical layer; The virtualization layer includes multiple bases and multiple containers; The base includes a kernel layer; the container includes a first file layer; one base corresponds to multiple containers, the container calls the kernel layer of the corresponding base, and the container encapsulates the functions of the satellite node; Wherein, the kernel layer is constructed based on the kernel requirements of the business layer; The first file layer is constructed based on the file system on which the business layer depends; The first file layer is constructed in the following way: Performing a file system dependency assessment on the function type of the business layer to construct a directory structure of the first file layer; Based on the directory structure, reconstruct the container environment of the first file layer; wherein the container environment is the environment that the container depends on at runtime; Adjust the startup configuration of the first file layer.

2. The satellite simulation system according to claim 1, characterized in that: The kernel layer is obtained by adjusting the initial kernel based on the first kernel information required for the operation of the corresponding function type in the business layer; the first kernel information is determined by performing a kernel dependency assessment on the function type.

3. The satellite simulation system according to claim 2, characterized in that: The container calls the kernel layer of the base corresponding to the function type.

4. The satellite simulation system according to claim 2, characterized in that: If the initial kernel is an infrastructure kernel, the kernel layer is generated in the infrastructure kernel based on a first kernel module corresponding to the first kernel information.

5. The satellite simulation system according to claim 2, characterized in that: If the initial kernel is a complete kernel, the kernel layer is obtained by removing the second kernel module in the complete kernel based on heuristic testing to obtain a first kernel system; and the first kernel system is dependently reconstructed; wherein, the second kernel module is other kernel modules in the complete kernel except the first kernel module corresponding to the first kernel information.

6. The satellite simulation system according to claim 1, characterized in that: After adjusting the startup configuration of the first file layer, the method further includes: If the first file layer contains a first file, the first file is replaced with a corresponding second file; wherein the first file is a redundant file.

7. A method for constructing a satellite simulation system, characterized in that: include: Building a physical layer of a satellite simulation system based on physical equipment, and building a business layer of the satellite simulation system based on the functional type requirements of the business; Constructing multiple bases of the virtualization layer of the satellite simulation system on the physical layer; wherein the base includes a kernel layer; A plurality of corresponding containers are constructed on each base to obtain a satellite simulation system; wherein the container includes a first file layer, the first file layer is constructed based on the file system on which the business layer depends, the container calls the kernel layer of the corresponding base, and the container encapsulates the functions of the satellite node; The first file layer is constructed in the following way: Performing a file system dependency assessment on the function type of the business layer to construct a directory structure of the first file layer; Based on the directory structure, reconstruct the container environment of the first file layer; wherein the container environment is the environment that the container depends on at runtime; Adjust the startup configuration of the first file layer.

8. The method according to claim 7, characterized in that The kernel layer is constructed in the following way: Performing kernel dependency evaluation on multiple function types of the business layer respectively to determine first kernel information required for the operation of the multiple function types; Adjusting the initial kernel based on the first kernel information to generate a second kernel system; The second kernel system is supplemented for completeness based on the dependency information associated with the first kernel information to obtain the kernel layer.

9. The method according to claim 8, characterized in that Performing kernel dependency evaluation on multiple function types of the business layer respectively to determine first kernel information required for the operation of the multiple function types includes: Each function type is input into the AI ​​model respectively, and the kernel dependency of each function type is evaluated through the AI ​​model to determine the first kernel information required for the operation of each function type.

10. The method according to claim 7, characterized in that After adjusting the startup configuration of the first file layer, the method further includes: If the first file layer contains a first file, the first file is replaced with a corresponding second file; wherein the first file is a redundant file.

11. The method according to any one of claims 7 to 10, characterized in that: Also includes: In response to the function type adjustment of the business layer, construct a new container corresponding to the new function type; A target chassis is selected from a plurality of chassis of the virtualization layer based on the new function type, and the target chassis is adjusted based on the new function type.

12. A satellite simulation method, characterized in that: Satellite simulation is performed using the satellite simulation system as described in any one of claims 1 to 6.

Images