Network equipment management method and system and network equipment

Abstract

The invention relates to a network equipment management method and system and network equipment, and belongs to the technical field of network security communication. According to the method, after the network equipment is started, a communication protocol stack creates a socket through socket to monitor connection of a network configuration protocol or network management protocol server-side program; a network configuration protocol or network management protocol server-side function is developed into an independent server-side program, and a network administrator starts the network configuration protocol or network management protocol server-side program; a network configuration protocol or network management protocol server-side program is added into a network equipment monitoring process program after being started, and when bug hanging occurs in the network configuration protocol or network management protocol server-side program, the monitoring process program can automatically pull up the network configuration protocol or network management protocol server-side program again. By decoupling the communication protocol stack and configuring the protocol server, the stability of the communication protocol stack is improved.

Description

Technical Field

[0001] The present invention belongs to the technical field of network security communication, and in particular relates to a network equipment management method, system and network equipment. Background Art

[0002] With the rapid development of computer networks, especially the Internet, network management technology has become increasingly important. In recent years, the scale of networks has expanded rapidly and the complexity of networks has continued to increase, which has brought considerable pressure to network operation and maintenance personnel. In order to solve the above problems, engineers and scientists have developed C / S architecture network management technologies such as Simple Network Management Protocol (SNMP) and Network Configuration Protocol (NETCONF).

[0003] The existing network device management method usually builds a network configuration protocol, network management protocol and other configuration servers (network configuration protocol server NETCONF server and network management protocol server SNMP server) into the communication protocol stack system of the network device to receive and process the configuration requests sent by the client. That is, the configuration server exists as a functional module in the communication protocol stack. This method will lead to poor stability of the communication protocol stack of the network device. Figure 1 shown.

[0004] The existing technology is that the user sends the network device configuration information to the configuration server of the network device communication protocol stack through RPC through the remote configuration client (network configuration protocol server NETCONF client and network management protocol server SNMP client), and the configuration server parses the received configuration information and sends it to the corresponding functional module in the communication protocol stack. Figure 2 shown.

[0005] The existing configuration protocol server (Network Configuration Protocol Server NETCONF server and Network Management Protocol Server SNMP server) exists as a functional module in the protocol stack. When a bug occurs in the configuration protocol server, the entire communication protocol stack will be affected. This technology has two disadvantages.

[0006] 1. The configuration protocol server is coupled with the communication protocol stack, resulting in poor stability of the communication protocol stack.

[0007] 2. Upgrading or adding configuration server (Network Configuration Protocol Server NETCONF Server and Network Management Protocol Server SNMP Server) functions to the existing system requires modifying the entire communication protocol, making system upgrades extremely complicated. Summary of the invention

[0008] 1. Technical issues to be resolved

[0009] The technical problem to be solved by the present invention is how to provide a network device management method, system and network device to solve the problem that the existing configuration protocol server exists as a functional module in the protocol stack, and when a bug occurs in the configuration protocol server, the entire communication protocol stack will be affected.

[0010] (II) Technical solution

[0011] In order to solve the above technical problems, the present invention proposes a network device management method, the method comprising:

[0012] S1. After the network device is started, the communication protocol stack uses the socket to create a socket to listen for the connection of the network configuration protocol or network management protocol server program;

[0013] S2. Develop the network configuration protocol or network management protocol server function into an independent server program, and the network administrator starts the network configuration protocol or network management protocol server program;

[0014] S3. After the network configuration protocol or network management protocol server program is started, the network device monitoring process program is added. When the network configuration protocol or network management protocol server program is hung due to a bug, the monitoring process program will automatically restart the network configuration protocol or network management protocol server program.

[0015] The present invention also provides a network device, which includes: a network configuration protocol or a network management protocol server program, a monitoring process program and a communication protocol stack;

[0016] The server program is used to listen to and receive configuration commands sent by the network configuration protocol or network management protocol client, parse the commands into configurations that can be recognized by each module of the communication protocol stack, send the parsed configurations to each module of the communication protocol stack through inter-process communication (ipc), wait for each module to return the execution result, and return the execution result returned by the communication protocol stack to the network configuration protocol or network management protocol client through RPC;

[0017] The communication protocol stack is used to create a socket with socket after startup, and then call bind to name the socket; this name is an identifier that allows the kernel to transfer incoming connections for a specific port to the process of the communication protocol stack; it is used to call the listen function to start listening and wait for the connection of the network configuration protocol or network management protocol server program; the listen function creates a queue and uses it to store the request connection from the network configuration protocol or network management protocol server program; when the network configuration protocol or network management protocol server program calls connect to request a connection, the communication protocol stack calls accept to accept the connection of the network configuration protocol or network management protocol server program, and accept will create a new socket at this time for communication with the network configuration protocol or network management protocol server program;

[0018] The monitoring process program is used to monitor the network configuration protocol or network management protocol server program. If the monitoring process finds that the network configuration protocol or network management protocol server program is hung, it will automatically restart it.

[0019] The present invention also provides a network device management system, which includes: a client and the network device;

[0020] The client is a network configuration protocol or network management protocol client, which is used to send configuration information to the network configuration protocol or network management protocol server program in the network device through RPC.

[0021] (III) Beneficial effects

[0022] The present invention provides a network device management method, system and network device. The main benefits of the present invention are as follows:

[0023] 1. Improve the stability of the communication protocol stack by decoupling the communication protocol stack and configuring the protocol server.

[0024] 2. By decoupling the communication protocol stack and the configuration protocol server, it reduces the difficulty of adding or upgrading functions such as the network configuration protocol (NETCONF) or the network management protocol (SNMP) to existing network devices. BRIEF DESCRIPTION OF THE DRAWINGS

[0025] Figure 1 A diagram of a network device management system in the prior art;

[0026] Figure 2 Provide an architecture diagram for a configuration management system in the prior art;

[0027] Figure 3 This is a structural diagram of the configuration management module of the present invention. DETAILED DESCRIPTION

[0028] In order to make the purpose, content and advantages of the present invention more clear, the specific implementation methods of the present invention are further described in detail below in conjunction with the drawings and examples.

[0029] In order to overcome the deficiencies of the prior art, the present invention aims to solve the following technical problems:

[0030] (1) Decouple the communication protocol stack and the configuration protocol server to improve the stability of the communication protocol stack.

[0031] (2) Reduce the difficulty of adding or upgrading Network Configuration Protocol (NETCONF) or Network Management Protocol (SNMP) functions to existing network devices.

[0032] The present invention can greatly improve the stability of the communication protocol stack by decoupling the configuration server (network configuration protocol NETCONF or network management protocol SNMP) and the communication protocol stack. At the same time, it reduces the difficulty of adding or upgrading functions such as network configuration protocol (NETCONF) or network management protocol (SNMP) to existing network devices.

[0033] The specific contents are as follows:

[0034] First, develop server functions such as the network configuration protocol NETCONF or the network management protocol SNMP into an independent server program.

[0035] The functions of the server program include:

[0036] 1. Listen and receive configuration commands sent by clients such as network configuration protocol NETCONF or network management protocol SNMP;

[0037] 2. Parse the command into configurations that can be recognized by each module of the communication protocol stack;

[0038] 3. Send the parsed configuration to each module of the communication protocol stack through inter-process communication (ipc), and wait for each module to return the execution result;

[0039] 4. The execution result returned by the communication protocol stack is returned to the client such as the network configuration protocol NETCONF or the network management protocol SNMP through RPC.

[0040] Next, the communication stack starts by creating a socket with socket, and then calls bind to name the socket. This name is an identifier that allows the kernel to forward incoming connections for a specific port to the process of the communication stack.

[0041] Then, the communication protocol stack calls the listen function to start listening and wait for the connection from server programs such as the Network Configuration Protocol (NETCONF) or the Network Management Protocol (SNMP). listen creates a queue and uses it to store connection requests from server programs such as the Network Configuration Protocol (NETCONF) or the Network Management Protocol (SNMP). When a server program such as the Network Configuration Protocol (NETCONF) or the Network Management Protocol (SNMP) calls connect to request a connection, the communication protocol stack calls accept to accept the connection from the server program such as the Network Configuration Protocol (NETCONF) or the Network Management Protocol (SNMP). At this time, accept creates a new socket for communication with the server program such as the Network Configuration Protocol (NETCONF) or the Network Management Protocol (SNMP).

[0042] Finally, add server programs such as the network configuration protocol NETCONF or the network management protocol SNMP to the monitoring process of the network device. If the monitoring process finds that the server programs such as the network configuration protocol NETCONF or the network management protocol SNMP are hung, they will be automatically restarted.

[0043] Specific implementation:

[0044] S1. After the network device is started, the communication protocol stack uses the socket to create a socket to listen for connections from server programs such as the Network Configuration Protocol (NETCONF) or the Network Management Protocol (SNMP).

[0045] S2. Develop server functions such as network configuration protocol NETCONF or network management protocol SNMP into an independent server program. Network administrators enable functions such as network configuration protocol (NETCONF) or network management protocol (SNMP) according to needs (start server programs such as network configuration protocol NETCONF or network management protocol SNMP).

[0046] S3. After the server programs such as the network configuration protocol NETCONF or the network management protocol SNMP are started, the network device monitoring process program is added. When the server programs such as the network configuration protocol NETCONF or the network management protocol SNMP are hung due to a bug, the monitoring process program will automatically re-start the server programs such as the network configuration protocol NETCONF or the network management protocol SNMP.

[0047] In this way, when the server functions of the network configuration protocol NETCONF or the network management protocol SNMP are unstable or even have bugs, the stability of the communication protocol will not be affected. At the same time, when the server functions of the network configuration protocol NETCONF or the network management protocol SNMP need to be upgraded, there is no need to modify the communication protocol stack, and the server programs of the network configuration protocol NETCONF or the network management protocol SNMP can be directly replaced.

[0048] Embodiment 1:

[0049] The present invention can be applied to a firewall supporting functions such as the Network Configuration Protocol (NETCONF) or the Network Management Protocol (SNMP).

[0050] This example is based on a firewall product and illustrates the use of a network device management method and system proposed in the present invention to improve the stability of the firewall communication protocol by decoupling the server and communication protocol stack through the network configuration protocol (NETCONF) or network management protocol (SNMP) in a security firewall.

[0051] According to the method described in the detailed description of the present invention, the specific process is as follows:

[0052] 1. After the firewall device is started, the administrator continues to start server programs such as the Network Configuration Protocol (NETCONF) or Network Management Protocol (SNMP) according to needs.

[0053] 2. After the firewall communication protocol stack is started, it will use socket to create a socket, and then call bind to name the socket. This name is an identifier that allows the kernel to transfer incoming connections for a specific port to the process of the communication protocol stack. Then, the system calls the listen function to start listening and wait for connections from server programs such as the Network Configuration Protocol (NETCONF) or the Network Management Protocol (SNMP). Listen creates a queue and uses it to store incoming connection requests from server programs such as the Network Configuration Protocol (NETCONF) or the Network Management Protocol (SNMP). When a server program such as the Network Configuration Protocol (NETCONF) or the Network Management Protocol (SNMP) calls connect to request a connection, the communication protocol stack calls accept to accept the connection from the server program such as the Network Configuration Protocol (NETCONF) or the Network Management Protocol (SNMP). At this time, accept will create a new socket for communication with the server program such as the Network Configuration Protocol (NETCONF) or the Network Management Protocol (SNMP).

[0054] 3. The user uses a configuration client such as a network configuration protocol client (NETCONF client) or a network management protocol client (SNMPclient) to send configuration information to a server program such as a network configuration protocol (NETCONF) or a network management protocol (SNMP) of a network device through RPC.

[0055] 4. After receiving the configuration information, server programs such as the Network Configuration Protocol (NETCONF) or the Network Management Protocol (SNMP) parse the configuration information.

[0056] 5. Server-side programs such as the Network Configuration Protocol (NETCONF) or the Network Management Protocol (SNMP) send the parsed configuration information to the functional modules of the communication protocol stack through IPC.

[0057] 6. At this point, we have completed the distribution of a configuration: other device configuration client -> network device configuration server program -> network device communication protocol stack functional modules.

[0058] Embodiment 2:

[0059] A network device, comprising: a network configuration protocol or a network management protocol server program, a monitoring process program and a communication protocol stack;

[0060] The server program is used to listen to and receive configuration commands sent by the network configuration protocol or network management protocol client, parse the commands into configurations that can be recognized by each module of the communication protocol stack, send the parsed configurations to each module of the communication protocol stack through inter-process communication (ipc), wait for each module to return the execution result, and return the execution result returned by the communication protocol stack to the network configuration protocol or network management protocol client through RPC;

[0061] The communication protocol stack is used to create a socket with socket after startup, and then call bind to name the socket; this name is an identifier that allows the kernel to transfer incoming connections for a specific port to the process of the communication protocol stack; it is used to call the listen function to start listening and wait for the connection of the network configuration protocol or network management protocol server program; the listen function creates a queue and uses it to store the request connection from the network configuration protocol or network management protocol server program; when the network configuration protocol or network management protocol server program calls connect to request a connection, the communication protocol stack calls accept to accept the connection of the network configuration protocol or network management protocol server program, and accept will create a new socket at this time for communication with the network configuration protocol or network management protocol server program;

[0062] The monitoring process program is used to monitor the network configuration protocol or network management protocol server program. If the monitoring process finds that the network configuration protocol or network management protocol server program is hung, it will automatically restart it.

[0063] Embodiment 3:

[0064] A network device management system, the system comprising: a client and the network device;

[0065] The client is a network configuration protocol or network management protocol client, which is used to send configuration information to the network configuration protocol or network management protocol server program in the network device through RPC.

[0066] The present invention focuses on improving the stability of network communication equipment on network equipment that supports functions such as the Network Configuration Protocol (NETCONF) or the Network Management Protocol (SNMP), and reducing the difficulty of adding or upgrading functions such as the Network Configuration Protocol (NETCONF) or the Network Management Protocol (SNMP) on existing network equipment. The key technical points involved are as follows:

[0067] Compile functions such as the Network Configuration Protocol (NETCONF) or the Network Management Protocol (SNMP) into an independent executable program that runs independently on a network device. After receiving the configuration information, the independent NETCONF program or SNMP program sends the parsed configuration information to the communication protocol stack of the network device through the communication IPC.

[0068] The main benefits of the present invention are as follows:

[0069] 1. Improve the stability of the communication protocol stack by decoupling the communication protocol stack and configuring the protocol server.

[0070] 2. By decoupling the communication protocol stack and the configuration protocol server, it reduces the difficulty of adding or upgrading functions such as the network configuration protocol (NETCONF) or the network management protocol (SNMP) to existing network devices.

[0071] The above is only a preferred embodiment of the present invention. It should be pointed out that for ordinary technicians in this technical field, several improvements and modifications can be made without departing from the technical principles of the present invention. These improvements and modifications should also be regarded as the scope of protection of the present invention.

Claims

1. A network device management method, characterized in that: The method includes: S1. After the network device is started, the communication protocol stack uses the socket to create a socket to listen for the connection of the network configuration protocol or network management protocol server program; S2. Develop the network configuration protocol or network management protocol server function into an independent server program, and the network administrator starts the network configuration protocol or network management protocol server program; S3. After the network configuration protocol or network management protocol server program is started, the network device monitoring process program is added. When the network configuration protocol or network management protocol server program is hung due to a bug, the monitoring process program will automatically restart the network configuration protocol or network management protocol server program.

2. The network device management method according to claim 1, characterized in that: The network configuration protocol is NETCONF.

3. The network device management method according to claim 1, characterized in that: The network management protocol is SNMP.

4. The network device management method according to any one of claims 1 to 3, characterized in that: The functions of the server program include: Listen and receive configuration commands sent by the network configuration protocol or network management protocol client; Parse the command into configurations that can be recognized by each module of the communication protocol stack; Send the parsed configuration to each module of the communication protocol stack through inter-process communication (ipc), and wait for each module to return the execution result; The execution result returned by the communication protocol stack is returned to the network configuration protocol or network management protocol client through RPC.

5. The network device management method according to claim 4, characterized in that: In S1, after the communication protocol stack is started, a socket is created using socket, and then bind is called to name the socket. This name is an identifier that allows the kernel to transfer the incoming connection for a specific port to the process of the communication protocol stack.

6. The network device management method according to claim 5, characterized in that: In S2, the communication protocol stack calls the listen function to start listening and wait for the connection of the network configuration protocol or network management protocol server program; the listen function creates a queue and uses it to store the connection requests from the network configuration protocol or network management protocol server program; when the network configuration protocol or network management protocol server program calls connect to request a connection, the communication protocol stack calls accept to accept the connection of the network configuration protocol or network management protocol server program, and accept will create a new socket at this time for communicating with the network configuration protocol or network management protocol server program.

7. The network device management method according to claim 6, characterized in that: In S3, when the network configuration protocol or network management protocol server function needs to be upgraded, there is no need to modify the communication protocol stack, and the network configuration protocol or network management protocol server program can be directly replaced.

8. The network device management method according to claim 1, characterized in that: The method is applied to a firewall that supports network configuration protocol or network management protocol functions.

9. A network device, characterized in that: The network device includes: a network configuration protocol or a network management protocol server program, a monitoring process program and a communication protocol stack; The server program is used to listen to and receive configuration commands sent by the network configuration protocol or network management protocol client, parse the commands into configurations that can be recognized by each module of the communication protocol stack, send the parsed configurations to each module of the communication protocol stack through inter-process communication (ipc), wait for each module to return the execution result, and return the execution result returned by the communication protocol stack to the network configuration protocol or network management protocol client through RPC; The communication protocol stack is used to create a socket with socket after startup, and then call bind to name the socket; this name is an identifier that allows the kernel to transfer incoming connections for a specific port to the process of the communication protocol stack; it is used to call the listen function to start listening and wait for the connection of the network configuration protocol or network management protocol server program; the listen function creates a queue and uses it to store the request connection from the network configuration protocol or network management protocol server program; when the network configuration protocol or network management protocol server program calls connect to request a connection, the communication protocol stack calls accept to accept the connection of the network configuration protocol or network management protocol server program, and accept will create a new socket at this time for communication with the network configuration protocol or network management protocol server program; The monitoring process program is used to monitor the network configuration protocol or network management protocol server program. If the monitoring process finds that the network configuration protocol or network management protocol server program is hung, it will automatically restart it.

10. A network device management system, characterized in that: The system comprises: a client and the network device as claimed in claim 9; The client is a network configuration protocol or network management protocol client, which is used to send configuration information to the network configuration protocol or network management protocol server program in the network device through RPC.

Images