Batch node remote monitoring method and system

Abstract

The application relates to the technical field of servers, and discloses a batch node remote monitoring method and system. The method is applied to a requestor host, a first firewall is arranged between the requestor host and a target server of a requestee, the target server is connected with a plurality of terminal machines, the target server and all the terminal machines are located inside the first firewall, the requestor host is configured with a terminal forwarding program, and the target server is configured with a reverse distribution program; the method comprises the following steps: opening a target port on the first firewall, establishing an HTTPS bidirectional communication service between the terminal forwarding program on the local machine and the reverse distribution program of the target server based on the target port; the target port supports an SSL function; sending a first request based on an HTTPS protocol to the target port through the terminal forwarding program; the first request is used for acquiring a desktop image of a target terminal machine; the target terminal machine is one or more terminal machines connected with the target server; the target port is used for forwarding the first request to the reverse distribution program of the target server; the reverse distribution program is used for forwarding the first request to a serial port service module of the target terminal machine; receiving the desktop image of the target terminal machine returned by the target port and displaying the desktop image. The method can realize remote batch graphical monitoring of a plurality of terminal machines in a local area network, saves a large amount of manual cost and time cost, and improves the efficiency of remote processing of equipment faults.

Description

TECHNICAL FIELD

[0001] The application relates to the technical field of servers, in particular to a batch node remote monitoring method and system. BACKGROUND

[0002] In the device generation link, the production line needs to be monitored in real time. Before the server device is shipped, the whole machine needs to be diagnosed and tested. The diagnosis link of the whole machine needs to diagnose and test the device in multiple aspects, including the configuration requirements of the device, the number and performance of the hardware, the hardware firewall, the firmware version, the system stability, etc. Generally, a large production line includes multiple plants set in the same or different areas. The way of manual offline supervision and testing link wastes a lot of labor cost and is low in efficiency. In order to facilitate the monitoring personnel to monitor the device diagnosis and testing link, a way of remotely penetrating the internal firewall of the factory can be adopted to realize real-time monitoring of the terminal machine in the local area network.

[0003] During the diagnosis and testing process before the server is shipped, engineers often need to remotely view the display screen of the test machine (server). By viewing the display screen of the test machine, the running state of the main control can be more intuitively observed, and the details of the test machine in the testing and diagnosis process can be more easily judged. For example, if the test machine has problems such as main control freezing, machine full-load freezing, main control abnormal crash exit, and display card display abnormality, the engineer needs to remotely view the display screen of the test machine to handle it in time.

[0004] Currently, there is a way of integrating the running data of the test machine through a browser webpage. This way can access the management server in the factory through the browser to penetrate the local area network firewall and obtain the test data and backup logs stored therein. However, this way cannot directly access the test machine, but only can grab a small amount of important information of the test machine from the management server, and this way cannot obtain the display screen of the test machine.

[0005] Another way is to access the internal network through an SSH (Secure Shell, Secure Shell) remote terminal. An SSH program is opened on each test machine. The external network request host enters the local area network firewall through an intermediate host and then accesses the test machine through the SSH mode. However, this way can only grab the state information of a single test machine and cannot grab the display screen of the test machine, and opening the SSH program means that the access permission of the test machine is fully opened, and the SSH port is an open source port program, which is easily attacked by malicious attacks, destroys the security of the local area network, and causes serious security risks. Therefore, a safe way of remotely grabbing the display screen of the server in the local area network in batches is needed. SUMMARY

[0006] In view of this, the present application aims to propose a batch node remote monitoring method and system to achieve remote batch capture of display images of multiple servers in a local area network.

[0007] To achieve the above objectives, the technical solutions of this application are as follows:

[0008] A first aspect of an embodiment of the present application provides a method for remotely monitoring batch nodes. The method is applied to a requesting host, wherein a first firewall is deployed between the requesting host and a target server of the requested party, the target server is connected to multiple terminals, and the target server and all the terminals are located inside the first firewall; the requesting host is configured with a terminal forwarding program, and the target server is configured with a reverse distribution program; the method comprises:

[0009] Opening a target port on the first firewall and establishing an HTTPS two-way communication service between a terminal forwarding program of the local machine and a reverse distribution program of the target server based on the target port; the target port supports an SSL function;

[0010] Sending a first request based on the HTTPS protocol to the target port through the terminal forwarding program; the first request is used to obtain a desktop image of a target terminal; the target terminal is: one or more terminals connected to the target server; the target port is used to forward the first request to a reverse distribution program of the target server; the reverse distribution program is used to forward the first request to a serial port service module of the target terminal;

[0011] The desktop image of the target terminal returned by the target port is received and displayed.

[0012] Optionally, receiving and displaying the desktop image of the target terminal returned by the target port includes:

[0013] Continuously receiving the HTTPS-based encrypted image data packets returned by the target port through the terminal forwarding program of the local machine;

[0014] For each image encryption packet, do the following:

[0015] Decrypting the encrypted image data packet using the SSL key through the terminal forwarding program to obtain a first IP data packet; decompressing the first IP data packet to obtain a UDP data stream;

[0016] Performing digital-to-analog conversion on the UDP data stream to obtain a desktop image data stream of the target terminal;

[0017] The desktop image data stream is mapped to the browser port in real time and displayed in the browser window.

[0018] Optionally, the batch node remote monitoring method further includes:

[0019] Acquire the keyboard control instructions or mouse control instructions of the local machine in real time, package the keyboard control instructions or the mouse control instructions through the TCP protocol, and generate an instruction data packet;

[0020] Packing the instruction data packet to generate a second IP data packet, and sending the second IP data packet to the terminal forwarding program of the local machine;

[0021] Encrypting the second IP data packet using an SSL key through the terminal forwarding program to generate a second instruction request based on the HTTPS protocol;

[0022] The second instruction request is sent to the target port through the terminal forwarding program; the target port is used to forward the second instruction request to the reverse distribution program of the target server; the reverse distribution program is used to forward the second instruction request to the serial port service module of the target terminal.

[0023] Optionally, opening a target port on the first firewall and establishing an HTTPS two-way communication service between a terminal forwarding program of the local machine and a reverse distribution program of the target server based on the target port includes:

[0024] Agreeing on the TCP instruction protocol and UDP data stream protocol followed by the terminal forwarding program of the local machine and the reverse distribution program of the target server when transmitting data;

[0025] Agreeing on the SSL key used by the terminal forwarding program and the reverse distribution program when transmitting data;

[0026] Opening the target port on the first firewall through the terminal forwarding program;

[0027] Configuring an SSL certificate for the target port; the SSL certificate is used to perform integrity verification on data sent by the terminal forwarding program and the reverse distribution program, and to authenticate the requesting host; the SSL certificate matches the SSL key;

[0028] Add the IP address of the requesting host to the whitelist of the SSL certificate;

[0029] The forwarding rules of the target port are configured to forward data or instructions based on the HTTPS protocol between the terminal forwarding program and the reverse distribution program.

[0030] Optionally, sending a first request based on the HTTPS protocol to the target port through the terminal forwarding program includes:

[0031] Sending a desktop image request to the terminal forwarding program via the local browser;

[0032] Encrypting the desktop image request using an SSL key through the terminal forwarding program to generate the first request;

[0033] The first request is sent to the target port through the terminal forwarding program; the target port is used to forward the first request to the reverse distribution program of the target server; the reverse distribution program is used to forward the first request to the serial port service module of the target terminal.

[0034] According to a second aspect of an embodiment of the present application, a method for remotely monitoring batch nodes is provided, which is applied to a target server of a requested party; a first firewall is deployed between the target server and a requesting host, the target server is connected to multiple terminals, and the target server and all the terminals are located inside the first firewall; the requesting host is configured with a terminal forwarding program, and the target server is configured with a reverse distribution program; the method includes:

[0035] Receiving, through the reverse distribution program, a first request based on the HTTPS protocol sent by a target port on the first firewall; the first request is used to obtain a desktop image of a target terminal; the target terminal is: one or more terminals connected to the target server;

[0036] forwarding the first request to the serial port service module of the target terminal through the reverse distribution program;

[0037] The reverse distribution program receives the desktop image returned by the serial port service module of the target terminal and forwards the desktop image to the target port; the target port is used to forward the desktop image to the terminal forwarding program of the requesting host.

[0038] Optionally, the batch node remote monitoring method further includes:

[0039] Receiving, through the reverse distribution program, a second instruction request based on the HTTPS protocol sent by the target port; the second instruction request is used to execute a keyboard control instruction or a mouse control instruction on the target terminal;

[0040] The second instruction request is forwarded to the serial port service module of the target terminal through the reverse distribution program.

[0041] According to a third aspect of an embodiment of the present application, a method for remotely monitoring batch nodes is provided, which is applied to a terminal of a requested party; the terminal is connected to a target server, a first firewall is deployed between the target server and a requesting host, and both the target server and the terminal are located inside the first firewall; the requesting host is configured with a terminal forwarding program, and the target server is configured with a reverse distribution program; the method comprises:

[0042] Receiving, via a serial port service module of the local machine, a first request based on the HTTPS protocol sent by a reverse distribution program of the target server; the first request is used to obtain a desktop image of a target terminal; the target terminal is: one or more terminals connected to the target server;

[0043] Through the serial port service module, based on the first request, the desktop image is captured in real time from the local graphics card and returned to the reverse distribution program of the target server; the reverse distribution program is used to forward the desktop image to the target port on the first firewall; the target port is used to forward the desktop image to the terminal forwarding program of the requesting host.

[0044] Optionally, the reverse distribution program of capturing the desktop image from the local graphics card in real time based on the first request through the serial port service module and returning it to the target server includes:

[0045] Decrypting the first request through the serial port service module of the local machine to obtain a desktop image request;

[0046] According to the desktop image request, the desktop image signal of the local graphics card is captured in real time and analog-to-digital conversion is performed to obtain a UDP data stream;

[0047] Compressing the UDP data stream to generate an IP data packet;

[0048] Encrypting the IP data packet to generate an encrypted image data packet based on the HTTPS protocol;

[0049] A reverse distribution program for sending the image encrypted data packet to the target server; the reverse distribution program for forwarding the image encrypted data packet to the target port; the target port for forwarding the image encrypted data packet to the terminal forwarding program of the requesting host.

[0050] Optionally, the batch node remote monitoring method further includes:

[0051] Receiving, in real time, a second instruction request based on the HTTPS protocol sent by the reverse distribution program of the target server through the serial port service module of the local machine;

[0052] For each second instruction request, perform the following operations:

[0053] decrypting the second instruction request using the SSL key through the serial port service module of the local machine to obtain a second IP data packet; decompressing the second IP data packet to obtain an instruction data packet; converting the instruction data packet into a corresponding keyboard control instruction or mouse control instruction, and sending the instruction to the operating system of the local machine;

[0054] The keyboard control instruction or the mouse control instruction is executed in real time through the operating system.

[0055] According to a fourth aspect of the embodiments of the present application, a batch node remote monitoring system is provided, comprising: a requesting host, a requested target server, and multiple terminals as described in any one of the first, second, or third aspects of the embodiments of the present application; a first firewall is deployed between the requesting host and the target server, the target server is connected to multiple terminals, and the target server and all the terminals are located inside the first firewall; the requesting host is configured with a terminal forwarding program, and the target server is configured with a reverse distribution program;

[0056] The requesting host is configured to open a target port on the first firewall and establish an HTTPS bidirectional communication service between the terminal forwarding program of the requesting party and the reverse distribution program of the target server based on the target port; the target port supports SSL function; a first request based on the HTTPS protocol is sent to the target port through the terminal forwarding program; the first request is used to obtain a desktop image of a target terminal; the target terminal is: one or more terminals connected to the target server; the target port is used to forward the first request to the reverse distribution program of the target server;

[0057] The target server is configured to receive the first request through a reverse distribution program of the local server and forward it to the serial port service module of the target terminal;

[0058] The target terminal is configured to receive the first request through the local serial port service module; based on the first request, capture the desktop image from the local graphics card in real time and return it to the reverse distribution program of the target server.

[0059] Optionally, the batch node remote monitoring system includes: at least one target server of the requested party, each target server belongs to a different requested party, and a first firewall is deployed between each target server and the requesting party host.

[0060] Optionally, the batch node remote monitoring system further includes:

[0061] Multiple intermediate nodes are deployed between the target server and the terminal; the downlink port of each intermediate node is connected to the intermediate node or terminal of the next layer; the intermediate node is configured with a reverse distribution program for forwarding data between the target server and the terminal.

[0062] Optionally, a second firewall is deployed between at least one of the multiple intermediate nodes and the target server;

[0063] The target server is configured with a terminal forwarding program, through which a target port is opened on the second firewall. Based on the target port, an HTTPS two-way communication service is established between the terminal forwarding program of the target server and the reverse distribution program of the intermediate node; the target port supports SSL function.

[0064] The batch node remote monitoring method provided by the present application is adopted, a terminal forwarding program is configured on the requesting host, a target port is opened on the firewall of the local area network through the terminal forwarding program, and a two-way encrypted communication link of the HTTPS protocol is established between the terminal forwarding program of the external requesting party, the target port of the firewall and the reverse distribution program of the target server (management server) inside the local area network to ensure the security of the local area network. By configuring a reverse distribution program on the target server, a virtual response interface is provided to the outside instead of the terminal, and other access requests outside this port are exempted, thereby meeting the identity concealment requirements of the intranet test machine. The access request of the external requesting host is distributed to the serial port service module of each terminal through the reverse distribution program, and the local desktop image and data feedback are realized through the serial port service module on the terminal, thereby realizing the remote transmission of the terminal display interface.

[0065] The batch node remote monitoring method provided in this application can realize remote batch capture of the display images of terminals within the local area network. Engineers can remotely view the operating status of multiple terminals (servers) within the local area network without the need for engineers to go to the site where the equipment is located. On the basis of ensuring the security of the local area network, remote batch graphical monitoring is realized, saving a lot of labor costs and time costs, and improving the efficiency of remote handling of equipment failures. BRIEF DESCRIPTION OF THE DRAWINGS

[0066] In order to more clearly illustrate the technical solutions of the embodiments of the present application, the following briefly introduces the drawings required for use in the description of the embodiments of the present application. Obviously, the drawings described below are only some embodiments of the present application. For ordinary technicians in this field, other drawings can be obtained based on these drawings without any creative work.

[0067] Figure 1 This is one of the flow charts of the batch node remote monitoring method proposed in one embodiment of the present application;

[0068] Figure 2 This is a schematic diagram of an external requesting host remotely controlling an intranet terminal in one embodiment of the present application;

[0069] Figure 3 This is the second flow chart of the batch node remote monitoring method proposed in one embodiment of the present application;

[0070] Figure 4 This is the third flow chart of the batch node remote monitoring method proposed in one embodiment of the present application;

[0071] Figure 5 This is one of the schematic diagrams of a batch node remote monitoring system proposed in one embodiment of the present application;

[0072] Figure 6 This is the second schematic diagram of the batch node remote monitoring system proposed in one embodiment of the present application;

[0073] Figure 7 This is the third schematic diagram of the batch node remote monitoring system proposed in one embodiment of the present application. DETAILED DESCRIPTION

[0074] The following will be combined with the drawings in the embodiments of this application to clearly and completely describe the technical solutions in the embodiments of this application. Obviously, the embodiments described are part of the embodiments of this application, not all of them. Based on the embodiments in this application, all other embodiments obtained by ordinary technicians in this field without making creative efforts are within the scope of protection of this application.

[0075] It should be understood that references throughout this specification to "one embodiment" or "an embodiment" mean that a particular feature, structure, or characteristic associated with the embodiment is included in at least one embodiment of the present application. Therefore, the appearances of "in one embodiment" or "in an embodiment" throughout this specification do not necessarily refer to the same embodiment. Furthermore, these particular features, structures, or characteristics may be combined in any suitable manner in one or more embodiments.

[0076] In the various embodiments of the present application, it should be understood that the size of the serial numbers of the following processes does not mean the order of execution. The execution order of each process should be determined by its function and internal logic, and should not constitute any limitation on the implementation process of the embodiments of the present application.

[0077] The exemplary embodiments will be described in detail herein with reference to the attached drawings. The following description is made with reference to the accompanying drawings in which like reference numerals represent like elements or similar elements, unless context dictates otherwise. The following exemplary embodiments described therein represent implementations consistent with the present application. Thus, no limitation on the scope of the present application is intended by way of illustration.

[0078] It should be noted that the embodiments and features of the embodiments in the present application can be combined with each other without conflict.

[0079] The present application configures a terminal forwarding program independently developed on an external requestor host, penetrates a first firewall of a local area network through a browser, and performs bidirectional encryption communication between the requestor host and a target server inside the local area network based on an HTTPS protocol. The batch node remote monitoring method provided by the present application can be applied to a scenario in which a large number of server nodes inside a local area network need to be remotely monitored, such as a device production line, a railway system, a municipal system, and the like. In the present embodiment, the test and diagnosis of a remote monitoring server production line are taken as examples for illustration.

[0080] The present application will be described in detail below with reference to the accompanying drawings and in conjunction with the embodiments.

[0081] Figure 1 is one of flowcharts of the batch node remote monitoring method according to an embodiment of the present application. The method is applied to a requestor host, a first firewall is deployed between the requestor host and a target server of a requestee, the target server is connected with a plurality of terminal machines, the target server and all the terminal machines are located inside the first firewall, the requestor host is configured with a terminal forwarding program, and the target server is configured with a reverse distribution program. As shown in Figure 1 , the method comprises:

[0082] S11: opening a target port on the first firewall, and establishing an HTTPS bidirectional communication service between the terminal forwarding program on the local machine and the reverse distribution program of the target server based on the target port; the target port supports an SSL function;

[0083] S12: sending a first request based on an HTTPS protocol to the target port through the terminal forwarding program; the first request is used to acquire a desktop image of a target terminal machine; the target terminal machine is one or more terminal machines connected with the target server; the target port is used to forward the first request to the reverse distribution program of the target server; and the reverse distribution program is used to forward the first request to a serial port service module of the target terminal machine;

[0084] S13: Receive and display the desktop image of the target terminal returned by the target port.

[0085] In this embodiment, the requesting host is located outside the local area network, which can be a single host or multiple hosts deployed in different locations, and the target server and multiple terminals are located inside the local area network. In the server production line scenario, the first firewall can be a regional firewall in a factory building inside the factory. The target server is a management device that manages the testing and problem diagnosis of each test machine (terminal) in the local area network. The target server is connected to each terminal and performs real-time monitoring and management of the terminals inside the local area network, including capturing test data on each terminal and backing up logs. The requesting host is configured with a self-developed terminal forwarding program, which communicates with the reverse distribution program on the target server through the requesting browser. The reverse distribution program forwards the desktop image capture request sent by the requesting host to the serial port service module of the target terminal. The target terminal can be one or more terminals in the local area network.

[0086] The requesting host sends a first request to the target port of the first firewall through the terminal forwarding program. The target port forwards the first request to the reverse distribution program of the target server. The reverse distribution program then forwards the first request to the serial port service module of the target terminal. The serial port service module of the target terminal captures the desktop image of the local computer and returns it to the reverse distribution program of the target server. The data is then returned to the requesting host through the target port, completing the remote capture of the desktop image of the target terminal within the local area network.

[0087] In this embodiment, a self-developed terminal forwarding program is configured on the requesting host. This terminal forwarding program is used to open the target port on the first firewall, enabling encrypted communication using the HTTPS protocol between the requesting host and the target server within the LAN, thus ensuring the security of the LAN. A reverse distribution program on the target server provides a virtual response interface to the outside of the LAN on behalf of each terminal, eliminating access requests outside this port and thus meeting the identity concealment requirements of terminals within the LAN. The serial port service module on each terminal enables real-time capture of the local desktop image, thereby enabling remote, real-time graphical monitoring of batch nodes. This is more intuitive than conventional data volume monitoring and facilitates analysis and control by engineers.

[0088] Based on the same inventive concept, an embodiment of the present application provides a remote monitoring method for batch nodes. Figure 3 , Figure 3This is the second flow chart of the batch node remote monitoring method proposed in one embodiment of the present application. The method is applied to the target server of the requested party; a first firewall is deployed between the target server and the requesting host, the target server is connected to multiple terminals, and the target server and all terminals are located inside the first firewall; the requesting host is configured with a terminal forwarding program, and the target server is configured with a reverse distribution program. Figure 3 As shown, the method includes:

[0089] S21: receiving, through the reverse distribution program, a first request based on the HTTPS protocol sent from a target port on the first firewall; the first request is used to obtain a desktop image of a target terminal; the target terminal is: one or more terminals connected to the target server;

[0090] S22: forwarding the first request to the serial port service module of the target terminal through the reverse distribution program;

[0091] S23: Receive the desktop image returned by the serial port service module of the target terminal through the reverse distribution program, and forward the desktop image to the target port; the target port is used to forward the desktop image to the terminal forwarding program of the requesting host.

[0092] As an implementation method of the present application, an embodiment of the present application provides a remote monitoring method for batch nodes. Figure 4 , Figure 4 This is the third flow chart of the batch node remote monitoring method proposed in one embodiment of the present application. The method is applied to the terminal of the requested party; the terminal is connected to the target server, a first firewall is deployed between the target server and the requesting host, and the target server and the terminal are both located inside the first firewall; the requesting host is configured with a terminal forwarding program, and the target server is configured with a reverse distribution program. Figure 4 As shown, the method includes:

[0093] S31: receiving, via the serial port service module of the local machine, a first request based on the HTTPS protocol sent by the reverse distribution program of the target server; the first request is used to obtain a desktop image of a target terminal; the target terminal is: one or more terminals connected to the target server;

[0094] S32: Based on the first request, the desktop image is captured in real time from the local graphics card through the serial port service module and returned to the reverse distribution program of the target server; the reverse distribution program is used to forward the desktop image to the target port on the first firewall; the target port is used to forward the desktop image to the terminal forwarding program of the requesting host.

[0095] As an implementation manner of the present application, sending a first request based on the HTTPS protocol to the target port through the terminal forwarding program includes:

[0096] Sending a desktop image request to the terminal forwarding program via the local browser;

[0097] Encrypting the desktop image request using an SSL key through the terminal forwarding program to generate the first request;

[0098] The first request is sent to the target port through the terminal forwarding program; the target port is used to forward the first request to the reverse distribution program of the target server; the reverse distribution program is used to forward the first request to the serial port service module of the target terminal.

[0099] In this embodiment, the process of the requesting host requesting to capture the desktop image of the terminal within the local area network is as follows:

[0100] (1) The local client of the requesting host sends a request to the terminal forwarding program through the browser to capture the desktop image of the terminal display;

[0101] (2) The terminal forwarding program encrypts the desktop image request using an SSL key to generate a first request based on the HTTPS protocol; and sends the first request to a target port of the first firewall;

[0102] (3) The target port of the first firewall verifies the first request using the SSL certificate and verifies the identity of the requesting host. If the verification is successful, the first request is sent to the reverse distribution program of the target server of the requested party;

[0103] (4) The target server forwards the first request to the serial port service module of the target terminal that needs to capture desktop information through a reverse forwarding program;

[0104] (5) The terminal serial port service module captures the desktop image signal of the graphics card in real time on the local machine, and generates a UDP data stream after analog-to-digital conversion; compresses the UDP data stream to generate an IP data packet; encrypts the IP data packet to generate an HTTPS protocol image encrypted data packet;

[0105] (6) The serial port service module returns the encrypted image data packet to the reverse distribution program of the target server;

[0106] (7) The reverse distribution program sends the image encrypted data packet to the terminal forwarding program of the requesting host through the target port of the first firewall.

[0107] In this embodiment, by configuring a serial port service module in the target terminal, the desktop image of the local graphics card is captured in real time, and a UDP data stream is generated and returned to the requesting host, thereby realizing batch transmission of the terminal display screen data stream within the local area network, making it convenient for engineers to remotely monitor the operating status of each terminal in real time.

[0108] As an embodiment of the present application, a reverse distribution program for capturing a desktop image from a local graphics card in real time based on the first request through the serial port service module and returning the desktop image to the target server includes:

[0109] Decrypting the first request through the serial port service module of the local machine to obtain a desktop image request;

[0110] According to the desktop image request, the desktop image signal of the local graphics card is captured in real time and analog-to-digital conversion is performed to obtain a UDP data stream;

[0111] Compressing the UDP data stream to generate an IP data packet;

[0112] Encrypting the IP data packet to generate an encrypted image data packet based on the HTTPS protocol;

[0113] A reverse distribution program for sending the image encrypted data packet to the target server; the reverse distribution program for forwarding the image encrypted data packet to the target port; the target port for forwarding the image encrypted data packet to the terminal forwarding program of the requesting host.

[0114] As an embodiment of the present application, receiving the desktop image of the target terminal returned by the target port and displaying it includes:

[0115] Continuously receiving the HTTPS-based encrypted image data packets returned by the target port through the terminal forwarding program of the local machine;

[0116] For each image encryption packet, do the following:

[0117] Decrypting the encrypted image data packet using the SSL key through the terminal forwarding program to obtain a first IP data packet; decompressing the first IP data packet to obtain a UDP data stream;

[0118] The UDP data stream is converted from digital to analog to obtain a desktop image data stream of the target terminal;

[0119] The desktop image data stream is mapped to a browser port in real time and displayed in a browser window.

[0120] In the embodiment, the terminal forwarding program of the request host continuously receives the image encrypted data packet returned by the target port, and decrypts the image encrypted data packet by using an SSL key to obtain an IP data packet. The local client unpacks the IP data packet to obtain corresponding UDP data, and further converts the UDP data from digital to analog to obtain a desktop image mapped to a browser port. By continuously receiving the UDP data stream of the target terminal returned by the local area network and converting the UDP data stream into a desktop image data stream displayed in a browser window, the real-time display screen of multiple terminals in the local area network is realized, and the remote image monitoring of engineers is facilitated.

[0121] In an embodiment, when the number of requests for accessing the terminals in the local area network is large, and a large number of requests for accessing a certain terminal at the same time occur, the terminal may be delayed, the performance may be degraded, or even the terminal may be down. A large number of access requests from the request host to the terminal usually take the form of graphic data, which causes the network from the target server to the terminal in the local area network to be overloaded and paralyzed. In order to ensure the normal operation of the terminal, in the embodiment, the reverse distribution program of the target server is used to real-time schedule the resources allocated to each terminal according to the preset load balancing strategy and the requests sent by the external request host to each terminal.

[0122] A scheduling threshold of the terminal is set in advance, and the reverse distribution program in the target server is used to monitor the number of requests for accessing each terminal in real time. When the number of requests for accessing the target terminal reaches the scheduling threshold, the reverse distribution program opens a temporary memory space for storing the data sent by the target terminal to the external network. In addition, the transmission path from part of the request host to the target terminal is cut off, and the network service from the target server to the target terminal is also cut off. The opened temporary memory space is enabled to temporarily replace the request sent by the target terminal to the external network to provide an access response, so as to reduce the access pressure of the target terminal. After the request amount of the target terminal decreases below the scheduling threshold, the network service from the target server to the target terminal is restored, and the temporary memory space is released after the data in the opened temporary memory space is sent. In the embodiment, the reverse distribution program on the target server can provide dynamic load balancing for the requests of multiple terminals, and temporarily replace the request host of the terminal to provide a response service to the external network.

[0123] In this embodiment, through the reverse distribution program configured on the target server, based on the access requests from the external requesting host to each terminal in the local area network, a load balancing strategy is adopted to schedule the resources allocated to each terminal in real time, thereby preventing the terminal from being overloaded and causing performance degradation, data loss or even downtime. When the terminal forwarding program sends a large number of access requests to some terminals in the local area network, it is ensured that the terminals can operate normally.

[0124] As an implementation method of the present application, a target port is opened on the first firewall, and based on the target port, an HTTPS two-way communication service is established between the terminal forwarding program of the local machine and the reverse distribution program of the target server, including:

[0125] Agreeing on the TCP instruction protocol and UDP data stream protocol followed by the terminal forwarding program of the local machine and the reverse distribution program of the target server when transmitting data;

[0126] Agreeing on the SSL key used by the terminal forwarding program and the reverse distribution program when transmitting data;

[0127] Opening the target port on the first firewall through the terminal forwarding program;

[0128] Configuring an SSL certificate for the target port; the SSL certificate is used to perform integrity verification on data sent by the terminal forwarding program and the reverse distribution program, and to authenticate the requesting host; the SSL certificate matches the SSL key;

[0129] Add the IP address of the requesting host to the whitelist of the SSL certificate;

[0130] The forwarding rules of the target port are configured to forward data or instructions based on the HTTPS protocol between the terminal forwarding program and the reverse distribution program.

[0131] In one embodiment, the requesting host starts a terminal forwarding program and opens a target port on the first firewall. Typical devices have ports ranging from 0 to 65536. In this embodiment, a target port is opened in the first firewall, and all access requests passing through the port are accepted externally through the target port. In this embodiment, the target port is actually a forwarding program that exists in the firewall system. All requests passing through the target port are received externally. When requests entering or exiting the firewall pass through the target port, the forwarding program performs SSL certificate authentication on the request. Once the authentication is successful, the request is forwarded to the target terminal through the target server. In actual applications, infrequently used ports can be selected for opening as needed, and this application does not impose any restrictions on this.

[0132] In this embodiment, we use the example of opening port 1300 on the first firewall. First, the TCP (Transmission Control Protocol) command protocol and UDP (User Datagram Protocol) data stream protocol used by both the terminal forwarding program and the reverse distribution program on the target server are predefined. UDP is a connectionless protocol that does not establish a persistent connection; data is sent in the form of datagrams. Because it does not provide reliability guarantees and does not reassemble or confirm data segments, it has a relatively fast transmission speed and is suitable for applications with high real-time requirements. In this embodiment, the remote, real-time transmission of the terminal desktop image stream is performed via the UDP protocol. Furthermore, because HTTPS (Hypertext Transfer Protocol Secure) is used, the SSL (Secure Sockets Layer) keys used for data exchange between the two networks must also be agreed upon.

[0133] Next, an SSL certificate is configured for port 1300, matching the SSL key. This certificate verifies the request or data encrypted with the SSL key, ensuring data security. The SSL certificate also verifies the identity of the requesting host. Only after verification can the data or request sent by the requesting host pass through the first firewall. The requesting host's IP address is added to the SSL certificate's whitelist, allowing the requesting host to penetrate the first firewall and access terminals within the LAN.

[0134] Configure a forwarding rule for port 1300 to establish two-way HTTPS communication between the local requesting host and the target server on the LAN.

[0135] As an implementation manner of the present application, the batch node remote monitoring method further includes:

[0136] Acquire the keyboard control instructions or mouse control instructions of the local machine in real time, package the keyboard control instructions or the mouse control instructions through the TCP protocol, and generate an instruction data packet;

[0137] Packing the instruction data packet to generate a second IP data packet, and sending the second IP data packet to the terminal forwarding program of the local machine;

[0138] Encrypting the second IP data packet using an SSL key through the terminal forwarding program to generate a second instruction request based on the HTTPS protocol;

[0139] The terminal forwarding program sends the second instruction request to the target port; the target port forwards the second instruction request to a reverse distribution program of the target server; and the reverse distribution program forwards the second instruction request to a serial port service module of the target terminal.

[0140] As an embodiment of the present application, the batch node remote monitoring method further comprises:

[0141] The reverse distribution program receives the second instruction request based on the HTTPS protocol sent by the target port; the second instruction request is used to execute a keyboard control instruction or a mouse control instruction on the target terminal.

[0142] The reverse distribution program forwards the second instruction request to a serial port service module of the target terminal.

[0143] As an embodiment of the present application, the batch node remote monitoring method further comprises:

[0144] The serial port service module of the local terminal receives the second instruction request based on the HTTPS protocol sent by the reverse distribution program of the target server in real time.

[0145] For each second instruction request, the following operations are performed:

[0146] The serial port service module of the local terminal decrypts the second instruction request by using an SSL key to obtain a second IP data packet; decompresses the second IP data packet to obtain an instruction data packet; converts the instruction data packet into a corresponding keyboard control instruction or mouse control instruction, and sends the instruction to the operating system of the local terminal.

[0147] The operating system executes the keyboard control instruction or the mouse control instruction in real time.

[0148] In an embodiment, by configuring a terminal forwarding program on a requestor host, not only can the display screen of multiple terminals in a local area network be remotely acquired in batches, but also the keyboard instruction or mouse instruction on the terminal in the local area network can be remotely controlled.

[0149] Figure 2 FIG. 1 is a schematic diagram of remote control of an internal network terminal by an external requestor host according to an embodiment of the present application. As shown in FIG. 1, in the present application, the specific process of real-time control of the mouse or keyboard of a target terminal in a remote local area network by a terminal forwarding program is as follows: Figure 2

[0150] ​(1) The local client of the requesting host continuously obtains the keyboard control instructions or mouse control instructions of the local machine, then packages them into a command data packet, and then packages them into a second IP data packet through the TCP protocol and sends it to the terminal forwarding program;

[0151] (2) The terminal forwarding program encrypts the second IP data packet using the SSL key, generates a second instruction request, and sends the second instruction request to the target port of the first firewall via the HTTPS protocol;

[0152] (3) After receiving the second instruction request, the target port verifies it using the SSL certificate and verifies the identity of the requesting host. If the verification is successful, the second instruction request is sent to the reverse distribution program of the target server of the requested party;

[0153] (4) After receiving the second instruction request, the target server forwards it to the serial port service module of the target terminal to be controlled through the reverse distribution program;

[0154] (5) The serial port service module of the target terminal uses the SSL key to decrypt the second instruction request to obtain a second IP data packet; decompress the second IP data packet to obtain an instruction data packet; convert the instruction data packet into a corresponding keyboard control instruction or mouse control instruction, and send it to the operating system of the local machine.

[0155] (6) The operating system (OS) of the target terminal executes the keyboard control command or mouse control command, and the command takes effect immediately;

[0156] (7) Real-time feedback of keyboard command operations or mouse command operations on the target terminal is displayed on the monitor desktop through the graphics card;

[0157] (8) The serial port service module captures the data stream of the desktop image signal of the local graphics card, generates an encrypted image data packet after analog-to-digital conversion, packaging, encryption and other operations, and returns it to the requesting host, which is mapped to the browser window in the requesting host for real-time display.

[0158] In this embodiment, local mouse control commands or keyboard control commands are packaged through a terminal forwarding program and sent to the serial port service module of the target terminal in the local area network through the target port on the first firewall, thereby realizing remote real-time control of the desktop system of the target terminal through the local mouse and keyboard. This helps engineers to remotely troubleshoot faults that occur in the target terminal without the need for engineers to go to the site to handle them, saving labor costs and time costs, and improving the efficiency of solving production line faults.

[0159] Furthermore, by remotely controlling the target terminal's keyboard or mouse commands in real time, not only can the target terminal be operated in real time for troubleshooting, but more customized operations can also be performed on the target terminal, enhancing the flexibility and operability of remote monitoring. In server production line scenarios, the real-time desktop monitoring and control of the test machine can be expanded from the production line to remote control over the internet, providing more possibilities for obtaining external technical support for the production line.

[0160] Based on the same inventive concept, an embodiment of the present application provides a remote monitoring system for batch nodes. Figure 5 , Figure 5 This is one of the schematic diagrams of the batch node remote monitoring system proposed in one embodiment of the present application. Figure 5 As shown, the system includes: a requesting host, a requested target server, and multiple terminals as described in the above embodiment; a first firewall is deployed between the requesting host and the target server, the target server is connected to multiple terminals, and the target server and all the terminals are located inside the first firewall; the requesting host is configured with a terminal forwarding program, and the target server is configured with a reverse distribution program;

[0161] The requesting host is configured to open a target port on the first firewall and establish an HTTPS bidirectional communication service between the terminal forwarding program of the requesting party and the reverse distribution program of the target server based on the target port; the target port supports SSL function; a first request based on the HTTPS protocol is sent to the target port through the terminal forwarding program; the first request is used to obtain a desktop image of a target terminal; the target terminal is: one or more terminals connected to the target server; the target port is used to forward the first request to the reverse distribution program of the target server;

[0162] The target server is configured to receive the first request through a reverse distribution program of the local server and forward it to the serial port service module of the target terminal;

[0163] The target terminal is configured to receive the first request through the local serial port service module; based on the first request, capture the desktop image from the local graphics card in real time and return it to the reverse distribution program of the target server.

[0164] In this embodiment, the monitoring system includes a requesting host, a requested target server, and multiple terminals. A first firewall is deployed between the requesting host and the target server. The requesting host, through a configured terminal forwarding program, penetrates the target port of the first firewall and conducts encrypted communication with the target server's reverse dispatch program, ensuring the security of the intranet server and terminals. The target server's reverse dispatch program provides a unified encrypted communication interface to the outside world, ensuring the identity of each terminal on the intranet remains confidential and guaranteeing the intranet security of the terminals. Furthermore, the target server's reverse dispatch program also provides load balancing. When a terminal receives excessive traffic, thread resources are transferred from other terminals with less traffic to ensure normal business operation.

[0165] The batch node remote monitoring system provided in this embodiment can be used in various scenarios that require remote monitoring of a large number of server nodes within a local area network, such as multi-level node monitoring systems such as equipment production lines, railway systems, and municipal systems.

[0166] As an embodiment of the present application, the batch node remote monitoring system includes: at least one target server of the requested party, each target server belongs to a different requested party, and a first firewall is deployed between each target server and the requesting party host.

[0167] Figure 6 This is the second schematic diagram of the batch node remote monitoring system proposed in one embodiment of the present application. Figure 6 As shown, the monitoring system may include multiple local area networks, each of which is independent and has a first firewall deployed between it and the requesting host. The requesting host, through the configured terminal forwarding program, penetrates the target port opened on the first firewall and connects to the management node ( Figure 6 The reverse distribution program configured on target server 1 and target server 2 in the target server 1 and target server 2 performs encrypted communication.

[0168] The monitoring system provided in this embodiment can enable monitoring personnel to remotely monitor and control terminal devices in multiple local area networks in batches while ensuring the internal security of the local area network. This includes capturing the desktop screen of the terminal, controlling the mouse or keyboard commands of the terminal, and obtaining the operation logs of each terminal, thereby saving labor costs and improving production efficiency.

[0169] As an embodiment of the present application, the batch node remote monitoring system further includes:

[0170] Multiple intermediate nodes are deployed between the target server and the terminal; the downlink port of each intermediate node is connected to the intermediate node or terminal of the next layer; the intermediate node is configured with a reverse distribution program for forwarding data between the target server and the terminal.

[0171] In one embodiment, multiple layers of intermediate nodes are deployed between the target server and each terminal. Each intermediate node is configured with a reverse distribution program for performing forwarding operations based on the HTTPS protocol within the system. Each intermediate node monitors and manages the nodes (intermediate nodes or terminals) to which it is connected. The target server uniformly provides a virtual response interface to the external network (the network outside the firewall) and forwards encrypted data between the external requester and each terminal within the system, ensuring the confidentiality and security of each terminal within the system. The monitoring system provided in this embodiment adds intermediate nodes between the target server layer and the terminal layer. When the number of terminals within the local area network is expanded, the intermediate nodes are used to manage the lower-level terminals, reducing the number of devices that directly communicate with the target server, reducing the load pressure on the target server, and being able to adapt to local area networks with a large number of devices.

[0172] As an implementation manner of the present application, a second firewall is deployed between at least one of the multiple intermediate nodes and the target server;

[0173] The target server is configured with a terminal forwarding program, through which a target port is opened on the second firewall. Based on the target port, an HTTPS two-way communication service is established between the terminal forwarding program of the target server and the reverse distribution program of the intermediate node; the target port supports SSL function.

[0174] In this embodiment, a second firewall is deployed between the intermediate node and the target server. By configuring a terminal forwarding program on the target server and opening the target port on the second firewall, the target server can penetrate the second firewall and conduct data communication based on the HTTPS protocol with the management node inside the second firewall (the intermediate node that directly communicates with the target port).

[0175] Figure 7 This is the third schematic diagram of the batch node remote monitoring system proposed in one embodiment of the present application. Figure 7As shown, a second firewall is deployed between the target server and intermediate node 1. The requesting host uses the configured terminal forwarding program to communicate with the target server through the target port opened on the first firewall. Data forwarded from the target port passes through the target server's terminal forwarding program and the reverse distribution program of intermediate node 1, ultimately reaching the serial port service modules of Terminal 1 and Terminal 2. This process requires penetrating two layers of firewalls.

[0176] There is no firewall deployed between the intermediate node 2 and the target server. Therefore, the data forwarded by the target port can be forwarded through the reverse distribution program of the target server and the reverse distribution program of the intermediate node 2, and finally reach the serial port service modules of the terminal 3 and the terminal 4. This process requires penetrating a layer of firewall.

[0177] Figure 7 The diagram only illustrates a single layer of intermediate nodes and two layers of firewalls. In practice, multiple layers of intermediate nodes are possible, and firewalls can be deployed as needed. Firewalls can also be deployed between each layer of intermediate nodes as needed. The target port is opened on the firewall, and the intermediate nodes at both ends of the firewall each locally configure a terminal forwarding program and a reverse distribution program to achieve encrypted communication. By configuring the terminal forwarding program on both the requesting host and the target server, the requesting host can remotely penetrate the multiple layers of firewalls within the LAN, meeting the isolation and protection requirements of network zones with different security levels within the LAN.

[0178] Regarding the system in the above embodiment, the specific manner in which each module performs operations has been described in detail in the embodiment of the method, and will not be elaborated here.

[0179] The above description is only a preferred embodiment of the present application and is not intended to limit the present application. Any modifications, equivalent replacements, improvements, etc. made within the spirit and principles of the present application shall be included in the scope of protection of the present application.

[0180] For the sake of simplicity, the method embodiments are described as a series of action combinations. However, those skilled in the art should be aware that this application is not limited by the order of the actions described, because according to this application, certain steps can be performed in other orders or simultaneously. Secondly, those skilled in the art should also be aware that the embodiments described in this specification are all preferred embodiments, and the actions and components involved are not necessarily required by this application.

[0181] Those skilled in the art will appreciate that the embodiments of the present application can be provided as methods, devices, or computer program products. Therefore, the embodiments of the present application can adopt the form of a complete hardware embodiment, a complete software embodiment, or an embodiment combining software and hardware. Moreover, the embodiments of the present application can adopt the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to magnetic disk storage, CD-ROM, optical storage, etc.) containing computer-usable program code.

[0182] The embodiments of the present application are described with reference to the flowcharts and / or block diagrams of the methods, terminal devices (systems), and computer program products according to the embodiments of the present application. It should be understood that each process and / or box in the flowchart and / or block diagram, as well as the combination of the processes and / or boxes in the flowchart and / or block diagram, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing terminal device to produce a machine, so that the instructions executed by the processor of the computer or other programmable data processing terminal device generate instructions for implementing the steps in the process. Figure 1 a process or multiple processes and / or boxes Figure 1 A device that provides the functions specified in a block or multiple blocks.

[0183] These computer program instructions may also be stored in a computer readable memory that can direct a computer or other programmable data processing terminal device to operate in a specific manner, so that the instructions stored in the computer readable memory produce a manufactured product including an instruction device, which implements the process Figure 1 a process or multiple processes and / or boxes Figure 1 The function specified in one or more boxes.

[0184] These computer program instructions can also be loaded onto a computer or other programmable data processing terminal device so that a series of operating steps are executed on the computer or other programmable terminal device to produce a computer-implemented process, thereby providing instructions for executing on the computer or other programmable terminal device to implement the process. Figure 1 a process or multiple processes and / or boxes Figure 1 A step that specifies a function in one or more boxes.

[0185] Although preferred embodiments of the present invention have been described, those skilled in the art may make additional changes and modifications to these embodiments once they become aware of the underlying inventive concepts. Therefore, this application is intended to include the preferred embodiments and all changes and modifications that fall within the scope of the embodiments of the present invention.

[0186] Finally, it should be noted that, in this document, relational terms such as first and second, etc., are used only to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any actual relationship or order between these entities or operations. Moreover, the terms "comprises," "comprising," or any other variations thereof are intended to cover non-exclusive inclusion, such that a process, method, article, or terminal device that includes a series of elements includes not only those elements, but also other elements not explicitly listed, or elements inherent to such process, method, article, or terminal device. In the absence of further limitations, an element defined by the phrase "comprising a ..." does not exclude the presence of additional identical elements in the process, method, article, or terminal device that includes the element.

[0187] The above is a detailed introduction to the batch node remote monitoring method and system provided by this application. This article uses specific examples to illustrate the principles and implementation methods of this application. The description of the above embodiments is only used to help understand the method of this application and its core idea; at the same time, for general technical personnel in this field, based on the ideas of this application, there will be changes in the specific implementation methods and application scope. In summary, the content of this specification should not be understood as a limitation on this application.

Claims

1. A remote monitoring method for batch nodes, characterized in that: Applied to a requesting host, a first firewall is deployed between the requesting host and a target server of the requested party, the target server is connected to a plurality of terminals, and the target server and all the terminals are located inside the first firewall; The requesting host is configured with a terminal forwarding program, and the target server is configured with a reverse distribution program; the method comprises: A target port is opened on the first firewall, and an HTTPS two-way communication service is established between a terminal forwarding program of the local computer and a reverse distribution program of the target server based on the target port; the target port supports SSL function; the target port is used to perform SSL certificate authentication on requests or data entering and exiting the first firewall; the request or data passes through the first firewall if the SSL certificate authentication is passed; Sending a first request based on the HTTPS protocol to the target port through the terminal forwarding program; the first request is used to obtain a desktop image of a target terminal; the target terminal is: one or more terminals connected to the target server; the target port is used to forward the first request to a reverse distribution program of the target server; the reverse distribution program is used to forward the first request to a serial port service module of the target terminal; The desktop image of the target terminal returned by the target port is received and displayed.

2. The method for remote monitoring of batch nodes according to claim 1, characterized in that: Receiving the desktop image of the target terminal returned by the target port and displaying it, comprising: Continuously receiving the HTTPS-based encrypted image data packets returned by the target port through the terminal forwarding program of the local machine; For each image encryption packet, do the following: Decrypting the encrypted image data packet using the SSL key through the terminal forwarding program to obtain a first IP data packet; decompressing the first IP data packet to obtain a UDP data stream; Performing digital-to-analog conversion on the UDP data stream to obtain a desktop image data stream of the target terminal; The desktop image data stream is mapped to the browser port in real time and displayed in the browser window.

3. The method for remote monitoring of batch nodes according to claim 1, characterized in that: Also includes: Acquire the keyboard control instructions or mouse control instructions of the local machine in real time, package the keyboard control instructions or the mouse control instructions through the TCP protocol, and generate an instruction data packet; Packing the instruction data packet to generate a second IP data packet, and sending the second IP data packet to the terminal forwarding program of the local machine; Encrypting the second IP data packet using an SSL key through the terminal forwarding program to generate a second instruction request based on the HTTPS protocol; sending the second instruction request to the target port through the terminal forwarding program; The target port is used to forward the second instruction request to the reverse distribution program of the target server; The reverse distribution program is used to forward the second instruction request to the serial port service module of the target terminal.

4. The method for remote monitoring of batch nodes according to claim 1, characterized in that: Opening a target port on the first firewall and establishing an HTTPS two-way communication service between a terminal forwarding program of the local computer and a reverse distribution program of the target server based on the target port, including: Agreeing on the TCP instruction protocol and UDP data stream protocol followed by the terminal forwarding program of the local machine and the reverse distribution program of the target server when transmitting data; Agreeing on the SSL key used by the terminal forwarding program and the reverse distribution program when transmitting data; Opening the target port on the first firewall through the terminal forwarding program; Configuring an SSL certificate for the target port; the SSL certificate is used to perform integrity verification on data sent by the terminal forwarding program and the reverse distribution program, and to authenticate the requesting host; the SSL certificate matches the SSL key; Add the IP address of the requesting host to the whitelist of the SSL certificate; The forwarding rules of the target port are configured to forward data or instructions based on the HTTPS protocol between the terminal forwarding program and the reverse distribution program.

5. The method for remote monitoring of batch nodes according to claim 1, characterized in that: Sending a first request based on the HTTPS protocol to the target port through the terminal forwarding program includes: Sending a desktop image request to the terminal forwarding program via the local browser; Encrypting the desktop image request using an SSL key through the terminal forwarding program to generate the first request; The first request is sent to the target port through the terminal forwarding program; the target port is used to forward the first request to the reverse distribution program of the target server; the reverse distribution program is used to forward the first request to the serial port service module of the target terminal.

6. A remote monitoring method for batch nodes, characterized in that: A target server applied to the requested party; a first firewall is deployed between the target server and the requesting host, the target server is connected to multiple terminals, and the target server and all the terminals are located inside the first firewall; The requesting host is configured with a terminal forwarding program, and the target server is configured with a reverse distribution program; the method comprises: The reverse distribution program receives a first request based on the HTTPS protocol sent from a target port on the first firewall; the first request is used to obtain a desktop image of a target terminal; the target port is used to perform SSL certificate authentication on requests or data entering or exiting the first firewall; the request or data passes through the first firewall if the SSL certificate authentication is passed; the target terminal is one or more terminals connected to the target server; forwarding the first request to the serial port service module of the target terminal through the reverse distribution program; The reverse distribution program receives the desktop image returned by the serial port service module of the target terminal and forwards the desktop image to the target port; the target port is used to forward the desktop image to the terminal forwarding program of the requesting host.

7. The method for remote monitoring of batch nodes according to claim 6, characterized in that: Also includes: Receiving, through the reverse distribution program, a second instruction request based on the HTTPS protocol sent by the target port; The second instruction request is used to execute a keyboard control instruction or a mouse control instruction on the target terminal; The second instruction request is forwarded to the serial port service module of the target terminal through the reverse distribution program.

8. A remote monitoring method for batch nodes, characterized in that: Applied to a terminal of the requested party; the terminal is connected to a target server, a first firewall is deployed between the target server and the requesting host, and the target server and the terminal are both located inside the first firewall; The requesting host is configured with a terminal forwarding program, and the target server is configured with a reverse distribution program; the method comprises: Receiving, via a serial port service module of the local machine, a first request based on the HTTPS protocol sent by a reverse distribution program of the target server; the first request is used to obtain a desktop image of a target terminal; the target terminal is: one or more terminals connected to the target server; Through the serial port service module, based on the first request, the desktop image is captured in real time from the local graphics card and returned to the reverse distribution program of the target server; the reverse distribution program is used to forward the desktop image to the target port on the first firewall; the target port is used to forward the desktop image to the terminal forwarding program of the requesting host; the target port is used to perform SSL certificate authentication on requests or data entering and leaving the first firewall; the request or data passes through the first firewall if it passes the SSL certificate authentication.

9. The method for remote monitoring of batch nodes according to claim 8, characterized in that: The reverse distribution program of capturing the desktop image from the local graphics card in real time based on the first request through the serial port service module and returning it to the target server includes: Decrypting the first request through the serial port service module of the local machine to obtain a desktop image request; According to the desktop image request, the desktop image signal of the local graphics card is captured in real time and analog-to-digital conversion is performed to obtain a UDP data stream; Compressing the UDP data stream to generate an IP data packet; Encrypting the IP data packet to generate an encrypted image data packet based on the HTTPS protocol; A reverse distribution program for sending the image encrypted data packet to the target server; the reverse distribution program for forwarding the image encrypted data packet to the target port; the target port for forwarding the image encrypted data packet to the terminal forwarding program of the requesting host.

10. The method for remote monitoring of batch nodes according to claim 8, characterized in that: Also includes: Receiving, in real time, a second instruction request based on the HTTPS protocol sent by the reverse distribution program of the target server through the serial port service module of the local machine; For each second instruction request, perform the following operations: decrypting the second instruction request using the SSL key through the serial port service module of the local machine to obtain a second IP data packet; decompressing the second IP data packet to obtain an instruction data packet; converting the instruction data packet into a corresponding keyboard control instruction or mouse control instruction, and sending the instruction to the operating system of the local machine; The keyboard control instruction or the mouse control instruction is executed in real time through the operating system.

11. A remote monitoring system for batch nodes, characterized in that: include: The requesting host, the requested target server and multiple terminals; A first firewall is deployed between the requesting host and the target server, the target server is connected to multiple terminals, and the target server and all the terminals are located inside the first firewall; the requesting host is configured with a terminal forwarding program, and the target server is configured with a reverse distribution program; The requesting host is configured to open a target port on the first firewall and establish an HTTPS bidirectional communication service between the terminal forwarding program of the requesting party and the reverse distribution program of the target server based on the target port; The target port supports SSL function; the target port is used to perform SSL certificate authentication on requests or data entering or leaving the first firewall; the request or data passes through the first firewall if it passes the SSL certificate authentication; Sending a first request based on the HTTPS protocol to the target port through the terminal forwarding program; The first request is used to obtain a desktop image of a target terminal; the target terminal is: one or more terminals connected to the target server; The target port is used to forward the first request to the reverse distribution program of the target server; The target server is configured to receive the first request through a reverse distribution program of the local server and forward it to the serial port service module of the target terminal; The target terminal is configured to receive the first request through the local serial port service module; based on the first request, capture the desktop image from the local graphics card in real time and return it to the reverse distribution program of the target server.

12. The batch node remote monitoring system according to claim 11, characterized in that: include: At least one target server of the requested party, each target server belongs to a different requested party, and a first firewall is deployed between each target server and the requesting party host.

13. The batch node remote monitoring system according to claim 11, characterized in that: Also includes: Multiple intermediate nodes are deployed between the target server and the terminal; the downlink port of each intermediate node is connected to the intermediate node or terminal of the next layer; the intermediate node is configured with a reverse distribution program for forwarding data between the target server and the terminal.

14. The batch node remote monitoring system according to claim 13, characterized in that: Among the multiple intermediate nodes, a second firewall is deployed between at least one intermediate node and the target server; The target server is configured with a terminal forwarding program, and a target port is opened on the second firewall through the terminal forwarding program. Based on the target port, an HTTPS two-way communication service is established between the terminal forwarding program of the target server and the reverse distribution program of the intermediate node; The target port supports the SSL function.

Images